Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Alles rund um Windows (https://www.trojaner-board.de/alles-rund-um-windows/)
-   -   Windows 10 - Pc extrem langsam (https://www.trojaner-board.de/195348-windows-10-pc-extrem-langsam.html)

Shuyin 11.04.2019 20:55

Windows 10 - Pc extrem langsam
 
Hallo ihr lieben, ich hoffe ihr könnt mir helfen ;)

Mein Computer braucht ewig bis er mal fertig hochgefahren ist (5 Minuten und mehr). Wenn ich dann ein Programm starten möchte, z.B Firefox, Internet Explorer dauert es ebenfalls ewig bis er ihn mal öffnet oder eine Seite die ich suche auf macht.
Genau so auch bei anderen Programmen wie Steam, Discord, Ts3, Logitech Gaming Software,...
Es dauert einfach alles gefühlt Jahre bis sich was bewegt. Wenn dann z.B Steam endlich mal gestartet hat und ich ein Spiel starten möchte verbringe ich wiederrum ewigkeiten mit warten bis dieses endlich beginnt.


Den Computer habe ich 2014 gekauft. Also nicht mehr der neuste aber ein wenig mehr sollte man sich doch schon noch erhoffen dürfen ;(

Wenn die Programme mal am laufen sind, laufen sie in der Regel auch stabiel. Hin und wieder hängen sie sich mal auf, woraufhin ich dann entweder wieder ewig warte bis es neu gestartet ist oder den Rechner neu starten muss.

Ich hoffe ihr könnt mir helfen vielleicht mal ein wenig Datenmüll (z.B kaputte/alte Registrieeinträge oder ähnliches) zu beseitigen.

Hier mal noch ein paar Infos zu meinem System, erstellt mit cpuz_x64:

Code:

CPU-Z TXT Report
-------------------------------------------------------------------------

Binaries
-------------------------------------------------------------------------

CPU-Z version                        1.73.0.x64

Processors
-------------------------------------------------------------------------

Number of processors                1
Number of threads                6

APICs
-------------------------------------------------------------------------

Processor 0       
        -- Core 0       
                -- Thread 0        0
        -- Core 3       
                -- Thread 0        3
        -- Core 2       
                -- Thread 0        2
        -- Core 4       
                -- Thread 0        4
        -- Core 5       
                -- Thread 0        5
        -- Core 1       
                -- Thread 0        1

Timers
-------------------------------------------------------------------------

        ACPI timer                3.580 MHz
        HPET timer                14.318 MHz
        Perf timer                3.433 MHz
        Sys timer                1.000 KHz


Processors Information
-------------------------------------------------------------------------

Processor 1                        ID = 0
        Number of cores                6 (max 6)
        Number of threads        6 (max 6)
        Name                        AMD FX-6300
        Codename                Vishera
        Specification                AMD FX(tm)-6300 Six-Core Processor           
        Package                Socket AM3+ (942)
        CPUID                        F.2.0
        Extended CPUID                15.2
        Core Stepping                OR-C0
        Technology                32 nm
        TDP Limit                95.0 Watts
        Core Speed                3816.8 MHz
        Multiplier x Bus Speed        19.0 x 200.9 MHz
        Rated Bus speed                2209.7 MHz
        Stock frequency                3500 MHz
        Instructions sets        MMX (+), SSE, SSE2, SSE3, SSSE3, SSE4.1, SSE4.2, SSE4A, x86-64, AMD-V, AES, AVX, XOP, FMA3, FMA4
        L1 Data cache                6 x 16 KBytes, 4-way set associative, 64-byte line size
        L1 Instruction cache        3 x 64 KBytes, 2-way set associative, 64-byte line size
        L2 cache                3 x 2048 KBytes, 16-way set associative, 64-byte line size
        L3 cache                8 MBytes, 64-way set associative, 64-byte line size
        FID/VID Control                yes
        Min FID                        7.0x
        # of P-States                7
        P-State                        FID 0x19 - VID 0x0F - IDD 17 (20.50x - 1.362 V)
        P-State                        FID 0x16 - VID 0x16 - IDD 17 (19.00x - 1.275 V)
        P-State                        FID 0x13 - VID 0x1E - IDD 12 (17.50x - 1.175 V)
        P-State                        FID 0xE - VID 0x24 - IDD 9 (15.00x - 1.100 V)
        P-State                        FID 0x9 - VID 0x2B - IDD 7 (12.50x - 1.012 V)
        P-State                        FID 0x4 - VID 0x32 - IDD 6 (10.00x - 0.925 V)
        P-State                        FID 0x10C - VID 0x3A - IDD 4 (7.00x - 0.825 V)

        PStateReg                0x800001A8-0x00001E19
        PStateReg                0x800001A8-0x00002C16
        PStateReg                0x80000174-0x00003C13
        PStateReg                0x8000015E-0x0000480E
        PStateReg                0x8000014A-0x00005609
        PStateReg                0x80000138-0x00006404
        PStateReg                0x80000125-0x0000744C
        PStateReg                0x00000000-0x00000000

        Package Type                0x1
        Model                        00
        String 1                0x0
        String 2                0x0
        Page                        0x0
        Base TDP                13 Watts
        Boosted P-States        2
        Max non-turbo ratio        17.50x
        Max turbo ratio                20.50x
        TSC                        3515.5 MHz
        APERF                        3817.0 MHz
        Attached device                PCI device at bus 0, device 24, function 0
                        100        00000000 00000000 00000000 00000000
                        110        00000000 00000000 00000000 00000000
                        120        00000000 00000000 00000000 00000000
                        130        000000C1 00000000 00000000 00000000
                        140        00000000 00000000 00000000 00000000
                        150        00073900 00000000 00000000 00000000
                        160        00000000 00000000 00000000 0066E066
                        170        00000109 00000000 00000000 00000000
                        180        00000000 00000000 00000000 00000000
                        190        00000000 00000000 00000000 00000000
                        1A0        80000003 00000000 00000000 00000000
                        1B0        00000000 00000000 00000000 00000000
                        1C0        00000000 00000000 00000000 00000000
                        1D0        00000000 00000000 00000000 0000003E
                        1E0        00000000 00000000 00000000 00000000
                        1F0        00000000 00000000 00000000 00000000
               
        Attached device                PCI device at bus 0, device 24, function 1
                        100        00000000 00000000 00000000 00000000
                        110        00000000 00000000 00000000 00000000
                        120        00000000 00000047 00000000 00000000
                        130        00000000 00000000 00000000 00000000
                        140        00000000 00000000 00000000 00000000
                        150        00000000 00000000 00000000 00000000
                        160        00000000 00000000 00000000 00000000
                        170        00000000 00000000 00000000 00000000
                        180        00000000 00000000 00000000 00000000
                        190        00000000 00000000 00000000 00000000
                        1A0        00000000 00000000 00000000 00000000
                        1B0        00000000 00000000 00000000 00000000
                        1C0        00000000 00000000 00000000 00000000
                        1D0        00000000 00000000 00000000 00000000
                        1E0        00000000 00000000 00000000 00000000
                        1F0        00000000 00000000 00000000 00000000
               
        Attached device                PCI device at bus 0, device 24, function 2
                        100        00000000 00003E51 00000000 00000000
                        110        00000500 00000000 0440A424 0CE00F41
                        120        00FCECFD 00000000 00000000 00000000
                        130        82070BEF 327C012F 97F9C166 F37813B3
                        140        00000001 00000109 00000000 00000000
                        150        00000000 00000000 00000000 00000000
                        160        01F83EE0 00000000 00000000 00000000
                        170        00000000 00000000 00020000 18240038
                        180        0000000A 00800004 3C000000 00020000
                        190        0B010000 0F580892 8D0F4007 00000000
                        1A0        031D0200 00000000 00000000 00000000
                        1B0        0FC39001 480F7D26 00000000 00000000
                        1C0        00000000 00000000 00000000 00000000
                        1D0        00000000 00000000 00000000 00000000
                        1E0        00000000 00000000 00000000 00000000
                        1F0        00000000 00000000 00000000 00000000
               
        Attached device                PCI device at bus 0, device 24, function 3
                        100        00000000 00000000 00000000 00000000
                        110        00000000 00000000 00000000 00000000
                        120        00000000 00000000 00000000 00000000
                        130        00000000 00000000 00000000 00000000
                        140        00A11755 00000055 0000C12A 00000000
                        150        00000000 00000000 00000000 00000000
                        160        C0000000 00000000 C0000000 00000000
                        170        C0000000 00000000 00000000 00000009
                        180        017003E3 00000000 08000210 00000000
                        190        00000000 00000000 00780400 00000000
                        1A0        00034144 00000000 00000000 00000000
                        1B0        018F2320 00000000 08141000 00000000
                        1C0        00000000 0003CCCC 00000000 00000100
                        1D0        00000000 00000000 002B170F 00000000
                        1E0        00000000 80001387 00000011 00000010
                        1F0        00080000 00000000 00000000 004C074F
               
        Attached device                PCI device at bus 0, device 24, function 4
                        100        00000000 00000321 00000000 0085014C
                        110        000FE001 00000000 0007000B 00000000
                        120        00000000 00000000 00000500 00000000
                        130        00000000 00000000 00000000 00000000
                        140        1159C931 0000034D 23A2DC39 0000079D
                        150        00000B68 00B4B490 00000000 00000089
                        160        00600F20 00000003 00000000 00000277
                        170        00000000 00000000 00000000 00000000
                        180        E000530F 00001005 00000000 00000000
                        190        00000000 00000000 00000000 00000000
                        1A0        00000015 00000000 00000000 00000000
                        1B0        00000000 00000000 00350182 00000000
                        1C0        000000C6 00000110 00000000 00000090
                        1D0        00080000 0000FFFF 00000000 00000000
                        1E0        0B501E19 0B502C16 0AE83C13 0ABC480E
                        1F0        0A945609 0A706404 0A4A744C 00000000
               
        Attached device                PCI device at bus 0, device 24, function 5
                        100        00000000 00000000 00000000 00000000
                        110        00000000 00000000 00000000 00000000
                        120        00001111 80000000 0000913A 00000000
                        130        00000000 00000000 00000000 00000000
                        140        00000000 00000000 00000000 00000000
                        150        00000000 00000000 00000000 00000000
                        160        0000800D 00000000 00000000 00000000
                        170        00000608 00020030 00000000 00000000
                        180        00000000 00000000 00000000 00000000
                        190        2233457A 0000000B 00202020 00000000
                        1A0        00000000 00000000 00000000 00000000
                        1B0        00000000 00000000 00000000 00000000
                        1C0        00000000 00000000 00000000 00000000
                        1D0        00000000 00000000 00000000 00000000
                        1E0        00000000 00000000 00000000 00000000
                        1F0        00000000 00000000 00000000 00000000
               

        Temperature 1                43°C (108°F) [0x2A] (Package)
        Power 0                        30.80 W (Package)


Thread dumps
-------------------------------------------------------------------------

CPU Thread 0       
        APIC ID                        0
        Topology                Processor ID 0, Core ID 0, Thread ID 0
        Type                        02040008h
        Max CPUID level                0000000Dh
        Max CPUID ext. level        8000001Eh
        Cache descriptor        Level 1, D, 16 KB, 1 thread(s)
        Cache descriptor        Level 1, I, 64 KB, 2 thread(s)
        Cache descriptor        Level 2, U, 2 MB, 2 thread(s)
        Cache descriptor        Level 3, U, 8 MB, 6 thread(s)

        CPUID               
        0x00000000                0x0000000D        0x68747541        0x444D4163        0x69746E65
        0x00000001                0x00600F20        0x00060800        0x3E98320B        0x178BFBFF
        0x00000002                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000003                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000004                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000005                0x00000040        0x00000040        0x00000003        0x00000000
        0x00000006                0x00000000        0x00000000        0x00000001        0x00000000
        0x00000007                0x00000000        0x00000008        0x00000000        0x00000000
        0x00000008                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000009                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000A                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000B                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000C                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000D                0x00000007        0x00000340        0x000003C0        0x40000000
        0x80000000                0x8000001E        0x68747541        0x444D4163        0x69746E65
        0x80000001                0x00600F20        0x10000000        0x01EBBFFF        0x2FD3FBFF
        0x80000002                0x20444D41        0x74285846        0x362D296D        0x20303033
        0x80000003                0x2D786953        0x65726F43        0x6F725020        0x73736563
        0x80000004                0x2020726F        0x20202020        0x20202020        0x00202020
        0x80000005                0xFF40FF18        0xFF40FF30        0x10040140        0x40020140
        0x80000006                0x64006400        0x64004200        0x08008140        0x0040C140
        0x80000007                0x00000000        0x00000000        0x00000000        0x000007D9
        0x80000008                0x00003030        0x00000000        0x00004005        0x00000000
        0x80000009                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000A                0x00000001        0x00010000        0x00000000        0x00001CFF
        0x8000000B                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000C                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000D                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000E                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000F                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000010                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000011                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000012                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000013                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000014                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000015                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000016                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000017                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000018                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000019                0xF040F018        0x64006400        0x00000000        0x00000000
        0x8000001A                0x00000003        0x00000000        0x00000000        0x00000000
        0x8000001B                0x000000FF        0x00000000        0x00000000        0x00000000
        0x8000001C                0x00000000        0x80032013        0x00010200        0x8000000F
        0x8000001D                0x00000121        0x00C0003F        0x0000003F        0x00000000
        0x8000001D                0x00004122        0x0040003F        0x000001FF        0x00000000
        0x8000001D                0x00004143        0x03C0003F        0x000007FF        0x00000001
        0x8000001D                0x00014163        0x0FC0003F        0x000007FF        0x00000001
        0x8000001E                0x00000000        0x00000100        0x00000000        0x00000000

        MSR 0x0000001B                0x00000000        0xFEE00900
        MSR 0xC0010114                0x00000000        0x00000018
        MSR 0xC0010061                0x00000000        0x00000040
        MSR 0xC0010062                0x00000000        0x00000000
        MSR 0xC0010063                0x00000000        0x00000000
        MSR 0xC0010064                0x800001A8        0x00001E19
        MSR 0xC0010065                0x800001A8        0x00002C16
        MSR 0xC0010066                0x80000174        0x00003C13
        MSR 0xC0010067                0x8000015E        0x0000480E
        MSR 0xC0010068                0x8000014A        0x00005609
        MSR 0xC0010058                0x00000000        0xE0000001
        MSR 0xC0010015                0x00000000        0x09000010
        MSR 0xC001001F                0x00404000        0x00810008
        MSR 0xC0010071                0x02000006        0x40023C13
        MSR 0xC0010070                0x00000000        0x40023C13

CPU Thread 1       
        APIC ID                        3
        Topology                Processor ID 0, Core ID 3, Thread ID 0
        Type                        02040008h
        Max CPUID level                0000000Dh
        Max CPUID ext. level        8000001Eh
        Cache descriptor        Level 1, D, 16 KB, 1 thread(s)
        Cache descriptor        Level 1, I, 64 KB, 2 thread(s)
        Cache descriptor        Level 2, U, 2 MB, 2 thread(s)
        Cache descriptor        Level 3, U, 8 MB, 6 thread(s)

        CPUID               
        0x00000000                0x0000000D        0x68747541        0x444D4163        0x69746E65
        0x00000001                0x00600F20        0x03060800        0x3E98320B        0x178BFBFF
        0x00000002                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000003                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000004                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000005                0x00000040        0x00000040        0x00000003        0x00000000
        0x00000006                0x00000000        0x00000000        0x00000001        0x00000000
        0x00000007                0x00000000        0x00000008        0x00000000        0x00000000
        0x00000008                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000009                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000A                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000B                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000C                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000D                0x00000007        0x00000340        0x000003C0        0x40000000
        0x80000000                0x8000001E        0x68747541        0x444D4163        0x69746E65
        0x80000001                0x00600F20        0x10000000        0x01EBBFFF        0x2FD3FBFF
        0x80000002                0x20444D41        0x74285846        0x362D296D        0x20303033
        0x80000003                0x2D786953        0x65726F43        0x6F725020        0x73736563
        0x80000004                0x2020726F        0x20202020        0x20202020        0x00202020
        0x80000005                0xFF40FF18        0xFF40FF30        0x10040140        0x40020140
        0x80000006                0x64006400        0x64004200        0x08008140        0x0040C140
        0x80000007                0x00000000        0x00000000        0x00000000        0x000007D9
        0x80000008                0x00003030        0x00000000        0x00004005        0x00000000
        0x80000009                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000A                0x00000001        0x00010000        0x00000000        0x00001CFF
        0x8000000B                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000C                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000D                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000E                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000F                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000010                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000011                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000012                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000013                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000014                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000015                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000016                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000017                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000018                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000019                0xF040F018        0x64006400        0x00000000        0x00000000
        0x8000001A                0x00000003        0x00000000        0x00000000        0x00000000
        0x8000001B                0x000000FF        0x00000000        0x00000000        0x00000000
        0x8000001C                0x00000000        0x80032013        0x00010200        0x8000000F
        0x8000001D                0x00000121        0x00C0003F        0x0000003F        0x00000000
        0x8000001D                0x00004122        0x0040003F        0x000001FF        0x00000000
        0x8000001D                0x00004143        0x03C0003F        0x000007FF        0x00000001
        0x8000001D                0x00014163        0x0FC0003F        0x000007FF        0x00000001
        0x8000001E                0x00000001        0x00000101        0x00000000        0x00000000

        MSR 0x0000001B                0x00000000        0xFEE00800
        MSR 0xC0010114                0x00000000        0x00000018
        MSR 0xC0010061                0x00000000        0x00000040
        MSR 0xC0010062                0x00000000        0x00000000
        MSR 0xC0010063                0x00000000        0x00000000
        MSR 0xC0010064                0x800001A8        0x00001E19
        MSR 0xC0010065                0x800001A8        0x00002C16
        MSR 0xC0010066                0x80000174        0x00003C13
        MSR 0xC0010067                0x8000015E        0x0000480E
        MSR 0xC0010068                0x8000014A        0x00005609
        MSR 0xC0010058                0x00000000        0xE0000001
        MSR 0xC0010015                0x00000000        0x09000010
        MSR 0xC001001F                0x00404000        0x00810008
        MSR 0xC0010071                0x02000006        0x40023C13
        MSR 0xC0010070                0x00000000        0x40023C13

CPU Thread 2       
        APIC ID                        2
        Topology                Processor ID 0, Core ID 2, Thread ID 0
        Type                        02040008h
        Max CPUID level                0000000Dh
        Max CPUID ext. level        8000001Eh
        Cache descriptor        Level 1, D, 16 KB, 1 thread(s)
        Cache descriptor        Level 1, I, 64 KB, 2 thread(s)
        Cache descriptor        Level 2, U, 2 MB, 2 thread(s)
        Cache descriptor        Level 3, U, 8 MB, 6 thread(s)

        CPUID               
        0x00000000                0x0000000D        0x68747541        0x444D4163        0x69746E65
        0x00000001                0x00600F20        0x02060800        0x3E98320B        0x178BFBFF
        0x00000002                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000003                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000004                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000005                0x00000040        0x00000040        0x00000003        0x00000000
        0x00000006                0x00000000        0x00000000        0x00000001        0x00000000
        0x00000007                0x00000000        0x00000008        0x00000000        0x00000000
        0x00000008                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000009                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000A                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000B                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000C                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000D                0x00000007        0x00000340        0x000003C0        0x40000000
        0x80000000                0x8000001E        0x68747541        0x444D4163        0x69746E65
        0x80000001                0x00600F20        0x10000000        0x01EBBFFF        0x2FD3FBFF
        0x80000002                0x20444D41        0x74285846        0x362D296D        0x20303033
        0x80000003                0x2D786953        0x65726F43        0x6F725020        0x73736563
        0x80000004                0x2020726F        0x20202020        0x20202020        0x00202020
        0x80000005                0xFF40FF18        0xFF40FF30        0x10040140        0x40020140
        0x80000006                0x64006400        0x64004200        0x08008140        0x0040C140
        0x80000007                0x00000000        0x00000000        0x00000000        0x000007D9
        0x80000008                0x00003030        0x00000000        0x00004005        0x00000000
        0x80000009                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000A                0x00000001        0x00010000        0x00000000        0x00001CFF
        0x8000000B                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000C                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000D                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000E                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000F                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000010                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000011                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000012                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000013                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000014                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000015                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000016                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000017                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000018                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000019                0xF040F018        0x64006400        0x00000000        0x00000000
        0x8000001A                0x00000003        0x00000000        0x00000000        0x00000000
        0x8000001B                0x000000FF        0x00000000        0x00000000        0x00000000
        0x8000001C                0x00000000        0x80032013        0x00010200        0x8000000F
        0x8000001D                0x00000121        0x00C0003F        0x0000003F        0x00000000
        0x8000001D                0x00004122        0x0040003F        0x000001FF        0x00000000
        0x8000001D                0x00004143        0x03C0003F        0x000007FF        0x00000001
        0x8000001D                0x00014163        0x0FC0003F        0x000007FF        0x00000001
        0x8000001E                0x00000002        0x00000101        0x00000000        0x00000000

        MSR 0x0000001B                0x00000000        0xFEE00800
        MSR 0xC0010114                0x00000000        0x00000018
        MSR 0xC0010061                0x00000000        0x00000040
        MSR 0xC0010062                0x00000000        0x00000000
        MSR 0xC0010063                0x00000000        0x00000000
        MSR 0xC0010064                0x800001A8        0x00001E19
        MSR 0xC0010065                0x800001A8        0x00002C16
        MSR 0xC0010066                0x80000174        0x00003C13
        MSR 0xC0010067                0x8000015E        0x0000480E
        MSR 0xC0010068                0x8000014A        0x00005609
        MSR 0xC0010058                0x00000000        0xE0000001
        MSR 0xC0010015                0x00000000        0x09000010
        MSR 0xC001001F                0x00404000        0x00810008
        MSR 0xC0010071                0x02000006        0x40023C13
        MSR 0xC0010070                0x00000000        0x40023C13

CPU Thread 3       
        APIC ID                        4
        Topology                Processor ID 0, Core ID 4, Thread ID 0
        Type                        02040008h
        Max CPUID level                0000000Dh
        Max CPUID ext. level        8000001Eh
        Cache descriptor        Level 1, D, 16 KB, 1 thread(s)
        Cache descriptor        Level 1, I, 64 KB, 2 thread(s)
        Cache descriptor        Level 2, U, 2 MB, 2 thread(s)
        Cache descriptor        Level 3, U, 8 MB, 6 thread(s)

        CPUID               
        0x00000000                0x0000000D        0x68747541        0x444D4163        0x69746E65
        0x00000001                0x00600F20        0x04060800        0x3E98320B        0x178BFBFF
        0x00000002                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000003                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000004                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000005                0x00000040        0x00000040        0x00000003        0x00000000
        0x00000006                0x00000000        0x00000000        0x00000001        0x00000000
        0x00000007                0x00000000        0x00000008        0x00000000        0x00000000
        0x00000008                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000009                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000A                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000B                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000C                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000D                0x00000007        0x00000340        0x000003C0        0x40000000
        0x80000000                0x8000001E        0x68747541        0x444D4163        0x69746E65
        0x80000001                0x00600F20        0x10000000        0x01EBBFFF        0x2FD3FBFF
        0x80000002                0x20444D41        0x74285846        0x362D296D        0x20303033
        0x80000003                0x2D786953        0x65726F43        0x6F725020        0x73736563
        0x80000004                0x2020726F        0x20202020        0x20202020        0x00202020
        0x80000005                0xFF40FF18        0xFF40FF30        0x10040140        0x40020140
        0x80000006                0x64006400        0x64004200        0x08008140        0x0040C140
        0x80000007                0x00000000        0x00000000        0x00000000        0x000007D9
        0x80000008                0x00003030        0x00000000        0x00004005        0x00000000
        0x80000009                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000A                0x00000001        0x00010000        0x00000000        0x00001CFF
        0x8000000B                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000C                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000D                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000E                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000F                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000010                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000011                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000012                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000013                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000014                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000015                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000016                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000017                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000018                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000019                0xF040F018        0x64006400        0x00000000        0x00000000
        0x8000001A                0x00000003        0x00000000        0x00000000        0x00000000
        0x8000001B                0x000000FF        0x00000000        0x00000000        0x00000000
        0x8000001C                0x00000000        0x80032013        0x00010200        0x8000000F
        0x8000001D                0x00000121        0x00C0003F        0x0000003F        0x00000000
        0x8000001D                0x00004122        0x0040003F        0x000001FF        0x00000000
        0x8000001D                0x00004143        0x03C0003F        0x000007FF        0x00000001
        0x8000001D                0x00014163        0x0FC0003F        0x000007FF        0x00000001
        0x8000001E                0x00000003        0x00000102        0x00000000        0x00000000

        MSR 0x0000001B                0x00000000        0xFEE00800
        MSR 0xC0010114                0x00000000        0x00000018
        MSR 0xC0010061                0x00000000        0x00000040
        MSR 0xC0010062                0x00000000        0x00000000
        MSR 0xC0010063                0x00000000        0x00000000
        MSR 0xC0010064                0x800001A8        0x00001E19
        MSR 0xC0010065                0x800001A8        0x00002C16
        MSR 0xC0010066                0x80000174        0x00003C13
        MSR 0xC0010067                0x8000015E        0x0000480E
        MSR 0xC0010068                0x8000014A        0x00005609
        MSR 0xC0010058                0x00000000        0xE0000001
        MSR 0xC0010015                0x00000000        0x09000010
        MSR 0xC001001F                0x00404000        0x00810008
        MSR 0xC0010071                0x02000006        0x40023C13
        MSR 0xC0010070                0x00000000        0x40023C13

CPU Thread 4       
        APIC ID                        5
        Topology                Processor ID 0, Core ID 5, Thread ID 0
        Type                        02040008h
        Max CPUID level                0000000Dh
        Max CPUID ext. level        8000001Eh
        Cache descriptor        Level 1, D, 16 KB, 1 thread(s)
        Cache descriptor        Level 1, I, 64 KB, 2 thread(s)
        Cache descriptor        Level 2, U, 2 MB, 2 thread(s)
        Cache descriptor        Level 3, U, 8 MB, 6 thread(s)

        CPUID               
        0x00000000                0x0000000D        0x68747541        0x444D4163        0x69746E65
        0x00000001                0x00600F20        0x05060800        0x3E98320B        0x178BFBFF
        0x00000002                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000003                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000004                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000005                0x00000040        0x00000040        0x00000003        0x00000000
        0x00000006                0x00000000        0x00000000        0x00000001        0x00000000
        0x00000007                0x00000000        0x00000008        0x00000000        0x00000000
        0x00000008                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000009                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000A                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000B                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000C                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000D                0x00000007        0x00000340        0x000003C0        0x40000000
        0x80000000                0x8000001E        0x68747541        0x444D4163        0x69746E65
        0x80000001                0x00600F20        0x10000000        0x01EBBFFF        0x2FD3FBFF
        0x80000002                0x20444D41        0x74285846        0x362D296D        0x20303033
        0x80000003                0x2D786953        0x65726F43        0x6F725020        0x73736563
        0x80000004                0x2020726F        0x20202020        0x20202020        0x00202020
        0x80000005                0xFF40FF18        0xFF40FF30        0x10040140        0x40020140
        0x80000006                0x64006400        0x64004200        0x08008140        0x0040C140
        0x80000007                0x00000000        0x00000000        0x00000000        0x000007D9
        0x80000008                0x00003030        0x00000000        0x00004005        0x00000000
        0x80000009                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000A                0x00000001        0x00010000        0x00000000        0x00001CFF
        0x8000000B                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000C                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000D                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000E                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000F                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000010                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000011                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000012                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000013                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000014                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000015                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000016                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000017                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000018                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000019                0xF040F018        0x64006400        0x00000000        0x00000000
        0x8000001A                0x00000003        0x00000000        0x00000000        0x00000000
        0x8000001B                0x000000FF        0x00000000        0x00000000        0x00000000
        0x8000001C                0x00000000        0x80032013        0x00010200        0x8000000F
        0x8000001D                0x00000121        0x00C0003F        0x0000003F        0x00000000
        0x8000001D                0x00004122        0x0040003F        0x000001FF        0x00000000
        0x8000001D                0x00004143        0x03C0003F        0x000007FF        0x00000001
        0x8000001D                0x00014163        0x0FC0003F        0x000007FF        0x00000001
        0x8000001E                0x00000004        0x00000102        0x00000000        0x00000000

        MSR 0x0000001B                0x00000000        0xFEE00800
        MSR 0xC0010114                0x00000000        0x00000018
        MSR 0xC0010061                0x00000000        0x00000040
        MSR 0xC0010062                0x00000000        0x00000000
        MSR 0xC0010063                0x00000000        0x00000000
        MSR 0xC0010064                0x800001A8        0x00001E19
        MSR 0xC0010065                0x800001A8        0x00002C16
        MSR 0xC0010066                0x80000174        0x00003C13
        MSR 0xC0010067                0x8000015E        0x0000480E
        MSR 0xC0010068                0x8000014A        0x00005609
        MSR 0xC0010058                0x00000000        0xE0000001
        MSR 0xC0010015                0x00000000        0x09000010
        MSR 0xC001001F                0x00404000        0x00810008
        MSR 0xC0010071                0x01000006        0x40012C16
        MSR 0xC0010070                0x00000000        0x40012C16

CPU Thread 5       
        APIC ID                        1
        Topology                Processor ID 0, Core ID 1, Thread ID 0
        Type                        02040008h
        Max CPUID level                0000000Dh
        Max CPUID ext. level        8000001Eh
        Cache descriptor        Level 1, D, 16 KB, 1 thread(s)
        Cache descriptor        Level 1, I, 64 KB, 2 thread(s)
        Cache descriptor        Level 2, U, 2 MB, 2 thread(s)
        Cache descriptor        Level 3, U, 8 MB, 6 thread(s)

        CPUID               
        0x00000000                0x0000000D        0x68747541        0x444D4163        0x69746E65
        0x00000001                0x00600F20        0x01060800        0x3E98320B        0x178BFBFF
        0x00000002                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000003                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000004                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000005                0x00000040        0x00000040        0x00000003        0x00000000
        0x00000006                0x00000000        0x00000000        0x00000001        0x00000000
        0x00000007                0x00000000        0x00000008        0x00000000        0x00000000
        0x00000008                0x00000000        0x00000000        0x00000000        0x00000000
        0x00000009                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000A                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000B                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000C                0x00000000        0x00000000        0x00000000        0x00000000
        0x0000000D                0x00000007        0x00000340        0x000003C0        0x40000000
        0x80000000                0x8000001E        0x68747541        0x444D4163        0x69746E65
        0x80000001                0x00600F20        0x10000000        0x01EBBFFF        0x2FD3FBFF
        0x80000002                0x20444D41        0x74285846        0x362D296D        0x20303033
        0x80000003                0x2D786953        0x65726F43        0x6F725020        0x73736563
        0x80000004                0x2020726F        0x20202020        0x20202020        0x00202020
        0x80000005                0xFF40FF18        0xFF40FF30        0x10040140        0x40020140
        0x80000006                0x64006400        0x64004200        0x08008140        0x0040C140
        0x80000007                0x00000000        0x00000000        0x00000000        0x000007D9
        0x80000008                0x00003030        0x00000000        0x00004005        0x00000000
        0x80000009                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000A                0x00000001        0x00010000        0x00000000        0x00001CFF
        0x8000000B                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000C                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000D                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000E                0x00000000        0x00000000        0x00000000        0x00000000
        0x8000000F                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000010                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000011                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000012                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000013                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000014                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000015                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000016                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000017                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000018                0x00000000        0x00000000        0x00000000        0x00000000
        0x80000019                0xF040F018        0x64006400        0x00000000        0x00000000
        0x8000001A                0x00000003        0x00000000        0x00000000        0x00000000
        0x8000001B                0x000000FF        0x00000000        0x00000000        0x00000000
        0x8000001C                0x00000000        0x80032013        0x00010200        0x8000000F
        0x8000001D                0x00000121        0x00C0003F        0x0000003F        0x00000000
        0x8000001D                0x00004122        0x0040003F        0x000001FF        0x00000000
        0x8000001D                0x00004143        0x03C0003F        0x000007FF        0x00000001
        0x8000001D                0x00014163        0x0FC0003F        0x000007FF        0x00000001
        0x8000001E                0x00000005        0x00000100        0x00000000        0x00000000

        MSR 0x0000001B                0x00000000        0xFEE00800
        MSR 0xC0010114                0x00000000        0x00000018
        MSR 0xC0010061                0x00000000        0x00000040
        MSR 0xC0010062                0x00000000        0x00000000
        MSR 0xC0010063                0x00000000        0x00000000
        MSR 0xC0010064                0x800001A8        0x00001E19
        MSR 0xC0010065                0x800001A8        0x00002C16
        MSR 0xC0010066                0x80000174        0x00003C13
        MSR 0xC0010067                0x8000015E        0x0000480E
        MSR 0xC0010068                0x8000014A        0x00005609
        MSR 0xC0010058                0x00000000        0xE0000001
        MSR 0xC0010015                0x00000000        0x09000010
        MSR 0xC001001F                0x00404000        0x00810008
        MSR 0xC0010071                0x02000006        0x40023C13
        MSR 0xC0010070                0x00000000        0x40023C13



Chipset
-------------------------------------------------------------------------

Northbridge                        AMD 780G rev. 00
Southbridge                        AMD SB700 rev. 00
Graphic Interface                PCI-Express
PCI-E Link Width                x16
PCI-E Max Link Width                x16
Memory Type                        DDR3
Memory Size                        8 GBytes
Channels                        Single
Memory Frequency                803.5 MHz (1:4)
CAS# latency (CL)                11.0
RAS# to CAS# delay (tRCD)        11
RAS# Precharge (tRP)                11
Cycle Time (tRAS)                28
Bank Cycle Time (tRC)                39
Uncore Frequency                2008.8 MHz


Memory SPD
-------------------------------------------------------------------------

DIMM #                                1
        SMBus address                0x50
        Memory type                DDR3
        Module format                UDIMM
        Manufacturer (ID)        Crucial Technology (7F7F7F7F7F9B00000000)
        Size                        8192 MBytes
        Max bandwidth                PC3-12800 (800 MHz)
        Part number                CT102464BA160B.C16
        Serial number                12360000
        Number of banks                8
        Nominal Voltage                1.50 Volts
        EPP                        no
        XMP                        no
        AMP                        no
JEDEC timings table                CL-tRCD-tRP-tRAS-tRC @ frequency
        JEDEC #1                6.0-6-6-16-22 @ 457 MHz
        JEDEC #2                7.0-7-7-19-26 @ 533 MHz
        JEDEC #3                8.0-8-8-22-30 @ 609 MHz
        JEDEC #4                9.0-9-9-24-33 @ 685 MHz
        JEDEC #5                10.0-10-10-27-37 @ 761 MHz
        JEDEC #6                11.0-11-11-28-39 @ 800 MHz

DIMM #                                1
SPD registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        92 11 0B 02 04 21 00 09 03 52 01 08 0A 00 FC 00
        10        69 78 69 30 69 11 18 81 60 09 3C 3C 00 F0 82 05
        20        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        30        00 00 00 00 00 00 00 00 00 00 00 00 0F 11 01 01
        40        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        50        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        60        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        70        00 00 00 00 00 85 9B 48 00 00 12 36 00 00 6F 8F
        80        43 54 31 30 32 34 36 34 42 41 31 36 30 42 2E 43
        90        31 36 01 00 80 2C 00 00 00 00 00 00 00 00 00 00
        A0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


Monitoring
-------------------------------------------------------------------------

Mainboard Model                GA-78LMT-S2 (0x000002C3 - 0x4CA90AA0)

LPCIO
-------------------------------------------------------------------------

LPCIO Vendor                        ITE
LPCIO Model                        IT8728
LPCIO Vendor ID                        0x90
LPCIO Chip ID                        0x8728
LPCIO Revision ID                0x1
Config Mode I/O address                0x2E
Config Mode LDN                        0x4
Config Mode registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00
        10        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        20        87 28 01 00 00 01 42 10 00 80 00 48 01 00 00 00
        30        01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        40        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        50        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        60        02 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        70        00 02 00 00 04 04 00 00 00 00 00 00 00 00 00 00
Register space                        LPC, base address = 0x0228


Hardware Monitors
-------------------------------------------------------------------------

Hardware monitor                ITE IT8728
        Voltage 0                1.22 Volts [0x66] (CPU VCORE)
        Voltage 1                1.50 Volts [0x7D] (VIN1)
        Voltage 2                2.02 Volts [0xA8] (+3.3V)
        Voltage 3                2.76 Volts [0x89] (+5V)
        Voltage 4                7.92 Volts [0xA5] (+12V)
        Voltage 5                -8.88 Volts [0xB9] (-12V)
        Voltage 6                -8.88 Volts [0xB9] (-5V)
        Voltage 7                2.78 Volts [0x8A] (+5V VCCH)
        Voltage 8                1.40 Volts [0x75] (VBAT)
        Temperature 0                31°C (87°F) [0x1F] (TMPIN0)
        Temperature 1                53°C (127°F) [0x35] (TMPIN1)
        Temperature 2                58°C (136°F) [0x3A] (TMPIN2)
        Fan 0                        3041 RPM [0xDE] (FANIN0)
        Fan 1                        977 RPM [0x2B3] (FANIN1)
        Fan PWM 0                99 pc [0x7F] (FANPWM0)
        Fan PWM 1                99 pc [0x7F] (FANPWM1)
        Fan PWM 2                0 pc [0x0] (FANPWM2)
Register space                        LPC, base address = 0x0228

                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        11 10 00 00 FF FF 00 37 FF 87 48 0F 07 DE B2 FF
        10        FF FF FF 76 D7 7F 7F 82 00 02 FF FF FF FF FF FF
        20        66 7D A8 89 A5 B9 B9 8A 75 1F 35 3A B9 C3 C0 C0
        30        FF 00 FF 00 FF 00 FF 00 FF 00 FF 00 FF 00 FF 00
        40        7F 7F 7F 7F 7F 7F 5F 40 AD 6A D4 00 FF FF FF FF
        50        FF CE 7F 7F 7F C0 FD FD 90 00 3E 12 60 00 00 00
        60        00 14 41 4E 20 03 0F FF 7F 7F 7F 80 00 00 0F FF
        70        00 14 41 40 20 03 0F FF FF FF FF FF FF FF FF FF
        80        00 00 00 00 00 00 00 00 00 00 00 00 00 B2 00 87
        90        FF 00 00 00 FF 00 00 00 42 99 00 00 01 09 F2 3A
        A0        6A 6C 6C 6C 6C 6C 6C FF FF FF FF FF FF FF FF FF
        B0        FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
        C0        FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
        D0        FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
        E0        FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
        F0        FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

Hardware monitor                NVIDIA I/O
        Fan PWM 0                0 pc [0x0] (FANPWMIN0)

Hardware monitor                NVIDIA NVAPI
        Voltage 0                0.95 Volts [0x3B6] (VIN0)
        Power 0                        4.77 pc (GPU)
        Temperature 0                31°C (87°F) [0x1F] (TMPIN0)
        Fan PWM 0                33 pc [0x21] (FANPWMIN0)
        Clock Speed 0                1019.50 MHz [0x3FB] (Graphics)
        Clock Speed 1                2700.00 MHz [0x3FB] (Memory)


PCI Devices
-------------------------------------------------------------------------

Register space                        PCI Express, base address = 0x0E0000000

Description                        Host Bridge
Location                        bus 0 (0x00), device 0 (0x00), function 0 (0x00)
Common header
        Vendor ID                0x1022
        Model ID                0x9600
        Revision ID                0x00
        PI                        0x00
        SubClass                0x00
        BaseClass                0x06
        Cache Line                0x00
        Latency                        0x20
        Header                        0x00
PCI header
        Address 3 (memory)        0xE0000000
        Subvendor ID                0x1022
        Subsystem ID                0x9600
        Int. Line                0x00
        Int. Pin                0x00
PCI capability
        Caps class                HyperTransport
        Caps offset                0xC4
        Caps revision                3.00
        Interface type                Slave/Primary
        Link 0 width (in/out)        16 bits/16 bits
        Link 0 frequency        2200 MHz
        Link 1 width (in/out)        8 bits/8 bits
        Link 1 frequency        200 MHz
PCI capability
        Caps class                HyperTransport
        Caps offset                0x54
        Interface type                Clumping
PCI capability
        Caps class                HyperTransport
        Caps offset                0x40
        Interface type                Retry Mode
PCI capability
        Caps class                HyperTransport
        Caps offset                0x9C
        Interface type                Gen3
PCI capability
        Caps class                HyperTransport
        Caps offset                0xF8
        Interface type                Power Management
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        22 10 00 96 06 00 30 22 00 00 00 06 00 20 00 00
        10        00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 E0
        20        00 00 00 00 00 00 00 00 00 00 00 00 22 10 00 96
        30        00 00 00 00 C4 00 00 00 00 00 00 00 00 00 00 00
        40        08 9C 00 C0 C1 00 00 00 11 00 00 00 42 20 05 00
        50        22 10 00 96 08 40 00 90 08 10 05 00 00 00 3C 5E
        60        7F 00 00 00 00 00 00 00 00 02 20 00 09 C0 86 85
        70        00 00 00 00 00 00 00 00 D0 3F 0F 00 01 00 00 20
        80        00 00 00 00 10 00 00 03 20 3A 00 00 31 20 00 00
        90        00 00 00 C0 7F 00 00 00 00 00 00 00 08 F8 7C D0
        A0        26 00 74 00 00 00 00 05 00 00 00 00 79 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        C0        00 00 00 80 08 54 80 01 20 00 11 11 D0 00 00 00
        D0        60 0C 75 1E 02 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 FF FF FF FF 0C 02 00 00 00 00 00 0F
        F0        00 00 00 00 00 80 80 00 08 00 00 E0 00 00 00 00

Description                        PCI to PCI Bridge
Location                        bus 0 (0x00), device 2 (0x02), function 0 (0x00)
Common header
        Vendor ID                0x1022
        Model ID                0x9603
        Revision ID                0x00
        PI                        0x00
        SubClass                0x04
        BaseClass                0x06
        Cache Line                0x10
        Latency                        0x00
        Header                        0x01
PCI header
        Primary bus                0x00
        Secondary bus                0x01
        Int. Line                0x0A
        Int. Pin                0x01
PCI capability
        Caps class                Power Management
        Caps offset                0x50
        Caps version                1.2
PCI capability
        Caps class                PCI Express
        Caps offset                0x58
        Device type                Root Port of PCI-E Root Complex
        Port                        0
        Version                        2.0
        Physical slot                #0
        Presence detect                yes
        Link width                16x (max 16x)
PCI capability
        Caps class                Message Signalled Interrupts
        Caps offset                0xA0
PCI capability
        Caps class                Subsystem Vendor
        Caps offset                0xB0
        SubVendor ID                0x1022
        SubSystem ID                0x9600
PCI capability
        Caps class                HyperTransport
        Caps offset                0xB8
        Interface type                MSI Mapping
Extended capabilities
        Caps class                Vendor Specific
        Caps offset                0x100
        Vendor ID                1
        Size                        16
        Caps class                Virtual Channel
        Caps offset                0x110
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        22 10 03 96 07 04 10 00 00 00 04 06 10 00 01 00
        10        00 00 00 00 00 00 00 00 00 01 01 00 E1 E1 00 20
        20        00 FB F0 FC 01 C0 F1 DF 00 00 00 00 00 00 00 00
        30        00 00 00 00 50 00 00 00 00 00 00 00 0A 01 18 00
        40        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        50        01 58 03 C8 00 00 00 00 10 A0 42 01 20 80 00 00
        60        10 08 00 00 02 0D 30 00 40 00 01 F1 80 25 14 00
        70        00 00 48 01 00 00 01 00 00 00 00 00 00 00 00 00
        80        00 00 00 00 00 00 00 00 42 00 01 00 00 00 00 00
        90        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        A0        05 B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        B0        0D B8 00 00 22 10 00 96 08 00 03 A8 00 00 00 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        100        0B 00 01 11 01 00 01 01 00 00 00 00 00 00 00 00
        110        02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00
        120        01 00 00 00 FF 00 00 80 00 00 00 00 01 00 00 00
        130        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        PCI to PCI Bridge
Location                        bus 0 (0x00), device 6 (0x06), function 0 (0x00)
Common header
        Vendor ID                0x1022
        Model ID                0x9606
        Revision ID                0x00
        PI                        0x00
        SubClass                0x04
        BaseClass                0x06
        Cache Line                0x10
        Latency                        0x00
        Header                        0x01
PCI header
        Primary bus                0x00
        Secondary bus                0x02
        Int. Line                0x0A
        Int. Pin                0x01
PCI capability
        Caps class                Power Management
        Caps offset                0x50
        Caps version                1.2
PCI capability
        Caps class                PCI Express
        Caps offset                0x58
        Device type                Root Port of PCI-E Root Complex
        Port                        3
        Version                        2.0
        Physical slot                #0
        Presence detect                yes
        Link width                1x (max 1x)
PCI capability
        Caps class                Message Signalled Interrupts
        Caps offset                0xA0
PCI capability
        Caps class                Subsystem Vendor
        Caps offset                0xB0
        SubVendor ID                0x1022
        SubSystem ID                0x9600
PCI capability
        Caps class                HyperTransport
        Caps offset                0xB8
        Interface type                MSI Mapping
Extended capabilities
        Caps class                Vendor Specific
        Caps offset                0x100
        Vendor ID                1
        Size                        16
        Caps class                Virtual Channel
        Caps offset                0x110
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        22 10 06 96 07 04 10 00 00 00 04 06 10 00 01 00
        10        00 00 00 00 00 00 00 00 00 02 02 00 D1 D1 00 00
        20        C0 FD C0 FD F1 FD F1 FD 00 00 00 00 00 00 00 00
        30        00 00 00 00 50 00 00 00 00 00 00 00 0A 01 00 00
        40        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        50        01 58 03 C8 00 01 00 00 10 A0 42 01 20 80 00 00
        60        10 08 00 00 12 0C 30 03 40 00 11 70 80 0C 34 00
        70        00 00 48 01 00 00 01 00 00 00 00 00 00 00 00 00
        80        00 00 00 00 00 00 00 00 42 00 01 00 00 00 00 00
        90        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        A0        05 B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        B0        0D B8 00 00 22 10 00 96 08 00 03 A8 00 00 00 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        100        0B 00 01 11 01 00 01 01 00 00 00 00 00 00 00 00
        110        02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00
        120        01 00 00 00 FF 00 00 80 00 00 00 00 01 00 00 00
        130        00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00

Description                        IDE Controller
Location                        bus 0 (0x00), device 17 (0x11), function 0 (0x00)
Common header
        Vendor ID                0x1002
        Model ID                0x4390
        Revision ID                0x00
        PI                        0x8F
        SubClass                0x01
        BaseClass                0x01
        Cache Line                0x10
        Latency                        0x20
        Header                        0x00
PCI header
        Address 0 (port)        0x0000FF00
        Address 1 (port)        0x0000FE00
        Address 2 (port)        0x0000FD00
        Address 3 (port)        0x0000FC00
        Address 4 (port)        0x0000FB00
        Address 5 (memory)        0xFE02F000
        Subvendor ID                0x1458
        Subsystem ID                0xB002
        Int. Line                0x16
        Int. Pin                0x01
PCI capability
        Caps class                Power Management
        Caps offset                0x60
        Caps version                1.1
PCI capability
        Caps class                0x12
        Caps offset                0x70
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        02 10 90 43 07 00 30 02 00 8F 01 01 10 20 00 00
        10        01 FF 00 00 01 FE 00 00 01 FD 00 00 01 FC 00 00
        20        01 FB 00 00 00 F0 02 FE 00 00 00 00 58 14 02 B0
        30        00 00 00 00 60 00 00 00 00 00 00 00 16 01 00 00
        40        10 00 80 00 01 00 10 00 C0 BF 00 00 00 00 00 00
        50        05 70 84 00 00 00 00 00 00 00 00 00 00 00 00 00
        60        01 70 22 00 00 00 00 00 00 00 00 00 00 00 00 00
        70        12 00 10 00 0F 00 00 00 00 00 00 00 00 00 00 00
        80        00 00 00 00 06 00 00 2C 16 80 B4 01 16 80 B4 01
        90        16 80 B4 01 16 80 B4 01 16 80 B4 01 16 80 B4 01
        A0        7A A0 7A A0 7A A0 7A A0 7A A0 FE A0 00 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00
        E0        80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        USB Controller (OHCI)
Location                        bus 0 (0x00), device 18 (0x12), function 0 (0x00)
Common header
        Vendor ID                0x1002
        Model ID                0x4397
        Revision ID                0x00
        PI                        0x10
        SubClass                0x03
        BaseClass                0x0C
        Cache Line                0x10
        Latency                        0x20
        Header                        0x80
PCI header
        Address 0 (memory)        0xFE02E000
        Subvendor ID                0x1458
        Subsystem ID                0x5004
        Int. Line                0x10
        Int. Pin                0x01
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        02 10 97 43 06 00 A0 02 00 10 03 0C 10 20 80 00
        10        00 E0 02 FE 00 00 00 00 00 00 00 00 00 00 00 00
        20        00 00 00 00 00 00 00 00 00 00 00 00 58 14 04 50
        30        00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00
        40        80 03 00 00 11 00 00 00 00 00 00 00 00 00 00 00
        50        40 13 03 F6 00 00 00 00 FF FF FF FF 00 00 00 00
        60        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        70        00 00 00 00 FF 00 00 80 00 00 00 00 00 00 00 00
        80        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        90        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        A0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        USB Controller (OHCI)
Location                        bus 0 (0x00), device 18 (0x12), function 1 (0x01)
Common header
        Vendor ID                0x1002
        Model ID                0x4398
        Revision ID                0x00
        PI                        0x10
        SubClass                0x03
        BaseClass                0x0C
        Cache Line                0x10
        Latency                        0x20
        Header                        0x00
PCI header
        Address 0 (memory)        0xFE02D000
        Subvendor ID                0x1458
        Subsystem ID                0x5004
        Int. Line                0x10
        Int. Pin                0x01
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        02 10 98 43 06 00 A0 02 00 10 03 0C 10 20 00 00
        10        00 D0 02 FE 00 00 00 00 00 00 00 00 00 00 00 00
        20        00 00 00 00 00 00 00 00 00 00 00 00 58 14 04 50
        30        00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00
        40        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        50        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        60        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        70        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        80        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        90        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        A0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        USB 2.0 Controller (EHCI)
Location                        bus 0 (0x00), device 18 (0x12), function 2 (0x02)
Common header
        Vendor ID                0x1002
        Model ID                0x4396
        Revision ID                0x00
        PI                        0x20
        SubClass                0x03
        BaseClass                0x0C
        Cache Line                0x10
        Latency                        0x20
        Header                        0x00
PCI header
        Address 0 (memory)        0xFE02C000
        Subvendor ID                0x1458
        Subsystem ID                0x5004
        Int. Line                0x11
        Int. Pin                0x02
PCI capability
        Caps class                Power Management
        Caps offset                0xC0
        Caps version                1.1
PCI capability
        Caps class                Debug Port
        Caps offset                0xE4
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        02 10 96 43 06 00 B0 02 00 20 03 0C 10 20 00 00
        10        00 C0 02 FE 00 00 00 00 00 00 00 00 00 00 00 00
        20        00 00 00 00 00 00 00 00 00 00 00 00 58 14 04 50
        30        00 00 00 00 C0 00 00 00 00 00 00 00 11 02 00 00
        40        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        50        D8 01 9E 82 00 00 00 00 00 00 00 00 00 00 00 00
        60        20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        70        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        80        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        90        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        A0        01 00 00 01 00 20 00 C0 00 00 00 00 00 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        C0        01 E4 02 7E 00 00 40 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 0A 00 E0 20 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        USB Controller (OHCI)
Location                        bus 0 (0x00), device 19 (0x13), function 0 (0x00)
Common header
        Vendor ID                0x1002
        Model ID                0x4397
        Revision ID                0x00
        PI                        0x10
        SubClass                0x03
        BaseClass                0x0C
        Cache Line                0x10
        Latency                        0x20
        Header                        0x80
PCI header
        Address 0 (memory)        0xFE02B000
        Subvendor ID                0x1458
        Subsystem ID                0x5004
        Int. Line                0x12
        Int. Pin                0x01
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        02 10 97 43 06 00 A0 02 00 10 03 0C 10 20 80 00
        10        00 B0 02 FE 00 00 00 00 00 00 00 00 00 00 00 00
        20        00 00 00 00 00 00 00 00 00 00 00 00 58 14 04 50
        30        00 00 00 00 00 00 00 00 00 00 00 00 12 01 00 00
        40        80 03 00 00 11 00 00 00 00 00 00 00 00 00 00 00
        50        40 13 03 F6 00 00 00 00 FF FF FF FF 00 00 00 00
        60        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        70        00 00 00 00 FF 00 00 80 00 00 00 00 00 00 00 00
        80        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        90        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        A0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        USB Controller (OHCI)
Location                        bus 0 (0x00), device 19 (0x13), function 1 (0x01)
Common header
        Vendor ID                0x1002
        Model ID                0x4398
        Revision ID                0x00
        PI                        0x10
        SubClass                0x03
        BaseClass                0x0C
        Cache Line                0x10
        Latency                        0x20
        Header                        0x00
PCI header
        Address 0 (memory)        0xFE02A000
        Subvendor ID                0x1458
        Subsystem ID                0x5004
        Int. Line                0x12
        Int. Pin                0x01
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        02 10 98 43 06 00 A0 02 00 10 03 0C 10 20 00 00
        10        00 A0 02 FE 00 00 00 00 00 00 00 00 00 00 00 00
        20        00 00 00 00 00 00 00 00 00 00 00 00 58 14 04 50
        30        00 00 00 00 00 00 00 00 00 00 00 00 12 01 00 00
        40        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        50        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        60        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        70        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        80        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        90        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        A0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        USB 2.0 Controller (EHCI)
Location                        bus 0 (0x00), device 19 (0x13), function 2 (0x02)
Common header
        Vendor ID                0x1002
        Model ID                0x4396
        Revision ID                0x00
        PI                        0x20
        SubClass                0x03
        BaseClass                0x0C
        Cache Line                0x10
        Latency                        0x20
        Header                        0x00
PCI header
        Address 0 (memory)        0xFE029000
        Subvendor ID                0x1458
        Subsystem ID                0x5004
        Int. Line                0x13
        Int. Pin                0x02
PCI capability
        Caps class                Power Management
        Caps offset                0xC0
        Caps version                1.1
PCI capability
        Caps class                Debug Port
        Caps offset                0xE4
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        02 10 96 43 06 00 B0 02 00 20 03 0C 10 20 00 00
        10        00 90 02 FE 00 00 00 00 00 00 00 00 00 00 00 00
        20        00 00 00 00 00 00 00 00 00 00 00 00 58 14 04 50
        30        00 00 00 00 C0 00 00 00 00 00 00 00 13 02 00 00
        40        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        50        D8 01 9E 82 00 00 00 00 00 00 00 00 00 00 00 00
        60        20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        70        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        80        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        90        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        A0        01 00 00 01 00 20 00 C0 00 00 00 00 00 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        C0        01 E4 02 7E 00 00 40 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 0A 00 E0 20 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        SMBus Controller
Location                        bus 0 (0x00), device 20 (0x14), function 0 (0x00)
Common header
        Vendor ID                0x1002
        Model ID                0x4385
        Revision ID                0x3C
        PI                        0x00
        SubClass                0x05
        BaseClass                0x0C
        Cache Line                0x00
        Latency                        0x00
        Header                        0x80
PCI header
        Subvendor ID                0x1458
        Subsystem ID                0x4385
        Int. Line                0x00
        Int. Pin                0x00
PCI capability
        Caps class                HyperTransport
        Caps offset                0xB0
        Interface type                MSI Mapping
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        02 10 85 43 03 04 30 C2 3C 00 05 0C 00 00 80 00
        10        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        20        00 00 00 00 00 00 00 00 00 00 00 00 58 14 85 43
        30        00 00 00 00 B0 00 00 00 00 00 00 00 00 00 00 00
        40        44 EB 00 1C 00 00 00 00 0F FF 00 00 00 00 00 80
        50        F0 01 F0 0E F0 0F F0 0F 21 0B F0 0F 80 00 10 00
        60        01 00 24 20 BF FC 9E 03 FF 90 00 00 20 00 00 00
        70        00 00 00 00 08 00 C0 FE FF 6E 00 00 00 00 F0 07
        80        F0 0A F0 0F 00 00 00 00 00 00 00 00 00 00 00 00
        90        01 0B 00 00 F9 DE FF 00 00 00 00 00 00 00 00 00
        A0        00 00 FF FF 7F FF F0 09 00 FF 08 02 02 49 60 18
        B0        08 00 02 A8 00 00 D0 FE 00 00 00 00 F0 0F 08 1A
        C0        09 60 E0 DF 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        20 99 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        F0        D8 0C 00 00 00 00 44 00 00 00 00 00 AA 00 10 00

Description                        IDE Controller
Location                        bus 0 (0x00), device 20 (0x14), function 1 (0x01)
Common header
        Vendor ID                0x1002
        Model ID                0x439C
        Revision ID                0x00
        PI                        0x8A
        SubClass                0x01
        BaseClass                0x01
        Cache Line                0x10
        Latency                        0x20
        Header                        0x00
PCI header
        Address 4 (port)        0x0000FA00
        Subvendor ID                0x1458
        Subsystem ID                0x5002
        Int. Line                0xFF
        Int. Pin                0x01
PCI capability
        Caps class                Message Signalled Interrupts
        Caps offset                0x70
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        02 10 9C 43 05 00 30 02 00 8A 01 01 10 20 00 00
        10        01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00
        20        01 FA 00 00 00 00 00 00 00 00 00 00 58 14 02 50
        30        00 00 00 00 70 00 00 00 00 00 00 00 FF 01 00 00
        40        20 99 99 20 20 FF FF 20 00 00 40 04 00 00 00 00
        50        00 00 00 00 06 00 50 06 00 00 00 00 00 00 00 00
        60        00 00 40 26 10 2C 01 07 01 00 00 00 FF FF 0F 00
        70        05 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00
        80        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        90        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        A0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        Multimedia device
Location                        bus 0 (0x00), device 20 (0x14), function 2 (0x02)
Common header
        Vendor ID                0x1002
        Model ID                0x4383
        Revision ID                0x00
        PI                        0x00
        SubClass                0x03
        BaseClass                0x04
        Cache Line                0x10
        Latency                        0x20
        Header                        0x00
PCI header
        Address 0 (memory)        0xFE024000
        Subvendor ID                0x1458
        Subsystem ID                0xA002
        Int. Line                0x10
        Int. Pin                0x01
PCI capability
        Caps class                Power Management
        Caps offset                0x50
        Caps version                1.1
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        02 10 83 43 06 00 10 04 00 00 03 04 10 20 00 00
        10        04 40 02 FE 00 00 00 00 00 00 00 00 00 00 00 00
        20        00 00 00 00 00 00 00 00 00 00 00 00 58 14 02 A0
        30        00 00 00 00 50 00 00 00 00 00 00 00 10 01 00 00
        40        00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00
        50        01 00 42 C8 00 00 00 00 00 00 00 00 00 00 00 00
        60        05 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00
        70        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        80        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        90        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        A0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        PCI to ISA Bridge
Location                        bus 0 (0x00), device 20 (0x14), function 3 (0x03)
Common header
        Vendor ID                0x1002
        Model ID                0x439D
        Revision ID                0x00
        PI                        0x00
        SubClass                0x01
        BaseClass                0x06
        Cache Line                0x00
        Latency                        0x00
        Header                        0x80
PCI header
        Subvendor ID                0x1002
        Subsystem ID                0x439D
        Int. Line                0x00
        Int. Pin                0x00
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        02 10 9D 43 0F 00 20 02 00 00 01 06 00 00 80 00
        10        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        20        00 00 00 00 00 00 00 00 00 00 00 00 02 10 9D 43
        30        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        40        04 00 00 00 D5 FF 03 FF 3F FF 40 00 00 00 00 00
        50        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        60        00 00 00 00 00 0A 00 00 0E 00 0F 00 B8 FF FF FF
        70        67 45 23 00 00 00 00 00 1C 00 00 00 05 0A 00 00
        80        08 00 03 A8 00 00 00 00 00 00 00 00 00 00 00 00
        90        00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 00
        A0        02 00 C1 FE 2F 00 00 00 00 00 00 00 00 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 E9 F2 FF 00 00
        C0        00 00 00 00 00 00 08 00 F7 FF FF FF 00 00 00 78
        D0        00 FF FF 00 00 00 00 FF FF FF FF 00 00 00 00 0C
        E0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        PCI to PCI Bridge
Location                        bus 0 (0x00), device 20 (0x14), function 4 (0x04)
Common header
        Vendor ID                0x1002
        Model ID                0x4384
        Revision ID                0x00
        PI                        0x01
        SubClass                0x04
        BaseClass                0x06
        Cache Line                0x00
        Latency                        0x40
        Header                        0x81
PCI header
        Primary bus                0x00
        Secondary bus                0x03
        Int. Line                0x00
        Int. Pin                0x00
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        02 10 84 43 27 04 A0 02 00 01 04 06 00 40 81 00
        10        00 00 00 00 00 00 00 00 00 03 03 40 C0 C0 80 22
        20        E0 FD E0 FD D0 FD D0 FD 00 00 00 00 00 00 00 00
        30        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        40        26 00 2C FF 00 00 00 00 0C 0F 3D D1 00 01 00 00
        50        01 00 00 00 08 00 03 A8 00 00 00 00 85 00 FF FF
        60        CA 0E 17 00 BA D8 10 00 00 00 00 00 00 00 00 00
        70        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        80        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        90        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        A0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 01 00 02 06
        E0        00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        USB Controller (OHCI)
Location                        bus 0 (0x00), device 20 (0x14), function 5 (0x05)
Common header
        Vendor ID                0x1002
        Model ID                0x4399
        Revision ID                0x00
        PI                        0x10
        SubClass                0x03
        BaseClass                0x0C
        Cache Line                0x10
        Latency                        0x20
        Header                        0x00
PCI header
        Address 0 (memory)        0xFE028000
        Subvendor ID                0x1458
        Subsystem ID                0x5004
        Int. Line                0x12
        Int. Pin                0x03
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        02 10 99 43 06 00 A0 02 00 10 03 0C 10 20 00 00
        10        00 80 02 FE 00 00 00 00 00 00 00 00 00 00 00 00
        20        00 00 00 00 00 00 00 00 00 00 00 00 58 14 04 50
        30        00 00 00 00 00 00 00 00 00 00 00 00 12 03 00 00
        40        80 01 00 00 11 00 00 00 00 00 00 00 00 00 00 00
        50        40 13 1F F6 00 00 00 00 FF FF FF FF 00 00 00 00
        60        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        70        00 00 00 00 FF 00 00 80 00 00 00 00 00 00 00 00
        80        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        90        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        A0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        Host Bridge
Location                        bus 0 (0x00), device 24 (0x18), function 0 (0x00)
Common header
        Vendor ID                0x1022
        Model ID                0x1600
        Revision ID                0x00
        PI                        0x00
        SubClass                0x00
        BaseClass                0x06
        Cache Line                0x00
        Latency                        0x00
        Header                        0x80
PCI header
        Subvendor ID                0x0000
        Subsystem ID                0x0000
        Int. Line                0x00
        Int. Pin                0x00
PCI capability
        Caps class                HyperTransport
        Caps offset                0x80
        Caps revision                3.00
        Interface type                Host/Secondary
        Device number                0
        Link 0 width (in/out)        16 bits/16 bits
        Link 0 frequency        2200 MHz
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        22 10 00 16 00 00 10 00 00 00 00 06 00 00 80 00
        10        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        20        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        30        00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00
        40        01 02 04 00 01 02 04 00 01 02 04 00 01 02 04 00
        50        01 02 04 00 01 02 04 00 01 02 04 00 01 02 04 00
        60        00 00 05 00 E0 00 00 00 00 B8 4E 02 00 0E 80 00
        70        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        80        08 00 01 21 20 A0 11 11 60 0C F5 FF 13 00 00 00
        90        EE 02 84 80 00 00 03 00 07 00 00 00 3E 00 00 00
        A0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        Host Bridge
Location                        bus 0 (0x00), device 24 (0x18), function 1 (0x01)
Common header
        Vendor ID                0x1022
        Model ID                0x1601
        Revision ID                0x00
        PI                        0x00
        SubClass                0x00
        BaseClass                0x06
        Cache Line                0x00
        Latency                        0x00
        Header                        0x80
PCI header
        Subvendor ID                0x0000
        Subsystem ID                0x0000
        Int. Line                0x00
        Int. Pin                0x00
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        22 10 01 16 00 00 00 00 00 00 00 06 00 00 80 00
        10        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        20        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        30        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        40        03 00 00 00 00 00 3F 02 00 00 00 00 01 00 00 00
        50        00 00 00 00 02 00 00 00 00 00 00 00 03 00 00 00
        60        00 00 00 00 04 00 00 00 00 00 00 00 05 00 00 00
        70        00 00 00 00 06 00 00 00 00 00 00 00 07 00 00 00
        80        03 0A 00 00 00 0B 00 00 00 00 00 00 00 00 00 00
        90        03 00 C0 00 00 FF DF 00 00 00 00 00 00 00 00 00
        A0        00 00 00 00 00 00 00 00 03 00 F0 00 00 02 FE 00
        B0        03 00 E0 00 80 3F E0 00 00 00 00 00 00 00 00 00
        C0        13 C0 00 00 00 F0 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        03 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00
        F0        03 40 00 C0 00 00 00 00 00 00 00 00 00 00 00 00

Description                        Host Bridge
Location                        bus 0 (0x00), device 24 (0x18), function 2 (0x02)
Common header
        Vendor ID                0x1022
        Model ID                0x1602
        Revision ID                0x00
        PI                        0x00
        SubClass                0x00
        BaseClass                0x06
        Cache Line                0x00
        Latency                        0x00
        Header                        0x80
PCI header
        Subvendor ID                0x0000
        Subsystem ID                0x0000
        Int. Line                0x00
        Int. Pin                0x00
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        22 10 02 16 00 00 00 00 00 00 00 06 00 00 80 00
        10        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        20        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        30        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        40        01 00 00 00 09 01 00 00 00 00 00 00 00 00 00 00
        50        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        60        E0 3E F8 01 00 00 00 00 00 00 00 00 00 00 00 00
        70        00 00 00 00 00 00 00 00 00 00 02 00 38 00 24 18
        80        0A 00 00 00 04 00 80 00 00 00 00 3C 00 00 02 00
        90        00 00 01 0B 92 08 58 0F 07 40 0F 8D 00 00 00 00
        A0        00 02 1D 03 00 00 00 00 00 00 00 00 00 00 00 00
        B0        4B EE 55 4D 86 00 00 00 0C 0F C7 10 16 EE 72 F0
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        0F 3F 7F CE EF 70 C7 CF 8B 80 E1 62 07 07 59 03
        E0        1F BB 6B B0 ED F3 29 0F A5 60 F0 FF EF 67 00 E2
        F0        00 00 00 00 00 00 00 00 DB C9 9E 80 68 55 15 00

Description                        Host Bridge
Location                        bus 0 (0x00), device 24 (0x18), function 3 (0x03)
Common header
        Vendor ID                0x1022
        Model ID                0x1603
        Revision ID                0x00
        PI                        0x00
        SubClass                0x00
        BaseClass                0x06
        Cache Line                0x00
        Latency                        0x00
        Header                        0x80
PCI header
        Subvendor ID                0x0000
        Subsystem ID                0x0000
        Int. Line                0x00
        Int. Pin                0x00
PCI capability
        Caps class                Secure Device
        Caps offset                0xF0
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        22 10 03 16 00 00 10 00 00 00 00 06 00 00 80 00
        10        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        20        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        30        00 00 00 00 F0 00 00 00 00 00 00 00 00 00 00 00
        40        FF FF FF FF 44 00 B0 4A 00 00 00 00 00 00 00 00
        50        00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00
        60        00 00 00 00 05 00 38 46 00 00 00 60 52 00 01 10
        70        55 11 17 10 11 21 17 00 12 0E 20 00 16 0F 0D 04
        80        81 E2 0B E2 E2 00 E2 01 08 00 81 00 00 40 40 00
        90        40 00 00 00 7F 6F 00 00 00 F7 13 CC 00 00 00 00
        A0        00 08 06 A0 EF 0F 20 2B 00 00 00 D0 00 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 00 B7 D7 01 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 0F 81 C8 10 00 00 03 3A 56 47 05
        E0        00 00 00 00 20 00 00 00 1E 4F F0 02 00 00 00 00
        F0        0F 00 10 00 00 00 00 00 00 00 00 00 20 0F 60 00

Description                        Host Bridge
Location                        bus 0 (0x00), device 24 (0x18), function 4 (0x04)
Common header
        Vendor ID                0x1022
        Model ID                0x1604
        Revision ID                0x00
        PI                        0x00
        SubClass                0x00
        BaseClass                0x06
        Cache Line                0x00
        Latency                        0x00
        Header                        0x80
PCI header
        Subvendor ID                0x0000
        Subsystem ID                0x0000
        Int. Line                0x00
        Int. Pin                0x00
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        22 10 04 16 00 00 00 00 00 00 00 06 00 00 80 00
        10        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        20        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        30        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        40        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        50        00 00 00 00 FF FF 00 00 00 00 00 00 00 00 00 00
        60        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        70        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        80        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        90        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        A0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        Host Bridge
Location                        bus 0 (0x00), device 24 (0x18), function 5 (0x05)
Common header
        Vendor ID                0x1022
        Model ID                0x1605
        Revision ID                0x00
        PI                        0x00
        SubClass                0x00
        BaseClass                0x06
        Cache Line                0x00
        Latency                        0x00
        Header                        0x80
PCI header
        Subvendor ID                0x0000
        Subsystem ID                0x0000
        Int. Line                0x00
        Int. Pin                0x00
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        22 10 05 16 00 00 00 00 00 00 00 06 00 00 80 00
        10        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        20        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        30        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        40        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        50        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        60        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        70        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        80        07 00 07 00 05 30 16 00 00 00 00 00 00 00 00 00
        90        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        A0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        B0        5E 1A 00 00 FB 19 00 00 00 00 00 00 A9 08 00 00
        C0        4D 08 00 00 FC 2A 00 00 55 1D 00 00 25 81 00 00
        D0        1B 19 00 00 CA 8C 00 00 CA 8C 00 00 00 00 00 00
        E0        89 F3 FE 03 00 00 00 00 FC 00 4C 01 71 00 02 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        VGA Controller
Location                        bus 1 (0x01), device 0 (0x00), function 0 (0x00)
Common header
        Vendor ID                0x10DE
        Model ID                0x1380
        Revision ID                0xA2
        PI                        0x00
        SubClass                0x00
        BaseClass                0x03
        Cache Line                0x10
        Latency                        0x00
        Header                        0x80
PCI header
        Address 0 (memory)        0xFB000000
        Address 1 (memory)        0xC0000000
        Address 3 (memory)        0xDE000000
        Address 5 (port)        0x0000EF00
        Subvendor ID                0x0000
        Subsystem ID                0x0000
        Int. Line                0x12
        Int. Pin                0x01
PCI capability
        Caps class                Power Management
        Caps offset                0x60
        Caps version                1.2
PCI capability
        Caps class                Message Signalled Interrupts
        Caps offset                0x68
PCI capability
        Caps class                PCI Express
        Caps offset                0x78
        Device type                Legacy PCI-E Endpoint Device
        Port                        0
        Version                        2.0
        Link width                16x (max 16x)
Extended capabilities
        Caps class                Virtual Channel
        Caps offset                0x100
        Caps class                0x18
        Caps offset                0x250
        Caps class                0x1E
        Caps offset                0x258
        Caps class                Power Budgeting
        Caps offset                0x128
        Caps class                Vendor Specific
        Caps offset                0x600
        Vendor ID                1
        Size                        36
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        DE 10 80 13 07 00 10 00 A2 00 00 03 10 00 80 00
        10        00 00 00 FB 0C 00 00 C0 00 00 00 00 0C 00 00 DE
        20        00 00 00 00 01 EF 00 00 00 00 00 00 00 00 00 00
        30        00 00 00 00 60 00 00 00 00 00 00 00 12 01 00 00
        40        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        50        00 00 00 00 01 00 00 00 CE D6 23 00 00 00 00 00
        60        01 68 03 00 08 00 00 00 05 78 80 00 00 00 00 00
        70        00 00 00 00 00 00 00 00 10 00 12 00 E1 8D 2C 01
        80        10 29 00 00 02 3D 45 00 40 01 01 11 00 00 00 00
        90        00 00 00 00 00 00 00 00 00 00 00 00 13 08 04 00
        A0        00 00 00 00 06 00 00 00 02 00 01 00 00 00 00 00
        B0        00 00 00 00 09 00 14 01 00 00 00 00 00 00 00 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        100        02 00 01 25 00 00 00 00 00 00 00 00 00 00 00 00
        110        00 00 00 00 FF 00 00 80 00 00 00 00 00 00 00 00
        120        00 00 00 00 00 00 00 00 04 00 01 60 00 00 00 00
        130        21 81 07 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        Multimedia device
Location                        bus 1 (0x01), device 0 (0x00), function 1 (0x01)
Common header
        Vendor ID                0x10DE
        Model ID                0x0FBC
        Revision ID                0xA1
        PI                        0x00
        SubClass                0x03
        BaseClass                0x04
        Cache Line                0x10
        Latency                        0x00
        Header                        0x80
PCI header
        Address 0 (memory)        0xFCFFC000
        Subvendor ID                0x0000
        Subsystem ID                0x0000
        Int. Line                0x13
        Int. Pin                0x02
PCI capability
        Caps class                Power Management
        Caps offset                0x60
        Caps version                1.2
PCI capability
        Caps class                Message Signalled Interrupts
        Caps offset                0x68
PCI capability
        Caps class                PCI Express
        Caps offset                0x78
        Device type                PCI-E Endpoint Device
        Port                        0
        Version                        2.0
        Link width                16x (max 16x)
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        DE 10 BC 0F 06 00 10 00 A1 00 03 04 10 00 80 00
        10        00 C0 FF FC 00 00 00 00 00 00 00 00 00 00 00 00
        20        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        30        00 00 00 00 60 00 00 00 00 00 00 00 13 02 00 00
        40        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        50        00 00 00 00 00 00 00 00 CE D6 23 00 00 00 00 00
        60        01 68 03 00 08 00 00 00 05 78 80 00 00 00 00 00
        70        00 00 00 00 00 00 00 00 10 00 02 00 E1 8D 2C 01
        80        10 29 00 00 02 3D 45 00 43 01 01 11 00 00 00 00
        90        00 00 00 00 00 00 00 00 00 00 00 00 13 08 04 00
        A0        00 00 00 00 06 00 00 00 00 00 01 00 00 00 00 00
        B0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        100        00 00 00 00 00 00 00 00 00 00 00 00 30 20 46 00
        110        00 20 00 00 00 A0 00 00 00 00 00 00 00 00 00 00
        120        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        130        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Description                        Ethernet Controller
Location                        bus 2 (0x02), device 0 (0x00), function 0 (0x00)
Common header
        Vendor ID                0x10EC
        Model ID                0x8168
        Revision ID                0x06
        PI                        0x00
        SubClass                0x00
        BaseClass                0x02
        Cache Line                0x10
        Latency                        0x00
        Header                        0x00
PCI header
        Address 0 (port)        0x0000DE00
        Address 2 (memory)        0xFDFFF000
        Address 4 (memory)        0xFDFF8000
        Subvendor ID                0x1458
        Subsystem ID                0xE000
        Int. Line                0x00
        Int. Pin                0x01
PCI capability
        Caps class                Power Management
        Caps offset                0x40
        Caps version                1.2
PCI capability
        Caps class                Message Signalled Interrupts
        Caps offset                0x50
PCI capability
        Caps class                PCI Express
        Caps offset                0x70
        Device type                PCI-E Endpoint Device
        Port                        0
        Version                        2.0
        Link width                1x (max 1x)
PCI capability
        Caps class                MSI-X
        Caps offset                0xB0
PCI capability
        Caps class                Virtual Product Data
        Caps offset                0xD0
Extended capabilities
        Caps class                Advanced Error Reporting
        Caps offset                0x100
        Caps class                Virtual Channel
        Caps offset                0x140
        Caps class                Device Serial Number
        Caps offset                0x160
PCI registers       
                00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
        00        EC 10 68 81 07 04 10 00 06 00 00 02 10 00 00 00
        10        01 DE 00 00 00 00 00 00 0C F0 FF FD 00 00 00 00
        20        0C 80 FF FD 00 00 00 00 00 00 00 00 58 14 00 E0
        30        00 00 00 00 40 00 00 00 00 00 00 00 00 01 00 00
        40        01 50 C3 FF 08 01 00 00 00 00 00 00 00 00 00 00
        50        05 70 80 00 00 00 00 00 00 00 00 00 00 00 00 00
        60        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        70        10 B0 02 02 C0 8C 64 00 10 50 10 00 11 7C 07 00
        80        40 00 11 10 00 00 00 00 00 00 00 00 00 00 00 00
        90        00 00 00 00 1F 00 00 00 10 00 00 00 00 00 00 00
        A0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        B0        11 D0 03 80 04 00 00 00 04 08 00 00 00 00 00 00
        C0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        D0        03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        E0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        F0        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        100        01 00 01 14 00 00 00 00 00 00 10 00 30 20 06 00
        110        00 20 00 00 00 20 00 00 A0 00 00 00 00 00 00 00
        120        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        130        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


DMI
-------------------------------------------------------------------------

DMI BIOS               
        vendor                        Award Software International Inc.
        version                        F6
        date                        01/09/2014
        ROM size                2048 KB

DMI System Information               
        manufacturer                Gigabyte Technology Co. Ltd.
        product                        GA-78LMT-S2
        version                        unknown
        serial                        unknown
        UUID                        {34443437-3533-3937-3239-3144FFFFFFFF}
        SKU                        unknown
        family                        unknown

DMI Baseboard               
        vendor                        Gigabyte Technology Co. Ltd.
        model                        GA-78LMT-S2
        revision                x.x
        serial                        unknown

DMI System Enclosure               
        manufacturer                Gigabyte Technology Co. Ltd.
        chassis type                Desktop
        chassis serial                unknown

DMI Processor               
        manufacturer                AMD
        model                        AMD FX(tm)-6300 Six-Core Processor
        clock speed                3500.0 MHz
        FSB speed                200.0 MHz
        multiplier                17.5x

DMI Memory Controller               
        correction                64-bit ECC
        Max module size                4096 MBytes

DMI Memory Module               
        designation                A0
        size                        8192 MBytes (double bank)

DMI Memory Module               
        designation                A1

DMI Port Connector               
        designation                PRIMARY IDE (internal)
        connector                On Board IDE

DMI Port Connector               
        designation                FDD (internal)
        port type                8251 FIFO Compatible
        connector                On Board Floppy

DMI Port Connector               
        designation                COM1 (internal)
        port type                Serial Port 16450
        connector                9 Pin Dual Inline (pin 10 cut)
        connector                DB-9 male

DMI Port Connector               
        designation                Keyboard (internal)
        port type                Keyboard Port
        connector                PS/2

DMI Port Connector               
        designation                USB (internal)
        port type                USB
        connector                Access Bus (USB)

DMI Port Connector               
        designation                USB (internal)
        port type                USB
        connector                Access Bus (USB)

DMI Port Connector               
        designation                USB (internal)
        port type                USB
        connector                Access Bus (USB)

DMI Port Connector               
        designation                USB (internal)
        port type                USB
        connector                Access Bus (USB)

DMI Port Connector               
        designation                USB (internal)
        port type                USB
        connector                Access Bus (USB)

DMI Port Connector               
        designation                USB (internal)
        port type                USB
        connector                Access Bus (USB)

DMI Port Connector               
        designation                USB (internal)
        port type                USB
        connector                Access Bus (USB)

DMI Port Connector               
        designation                USB (internal)
        port type                USB
        connector                Access Bus (USB)

DMI Port Connector               
        designation                USB (internal)
        port type                USB
        connector                Access Bus (USB)

DMI Port Connector               
        designation                USB (internal)
        port type                USB
        connector                Access Bus (USB)

DMI Port Connector               
        designation                USB (internal)
        port type                USB
        connector                Access Bus (USB)

DMI Port Connector               
        designation                USB (internal)
        port type                USB
        connector                Access Bus (USB)

DMI Extension Slot               
        designation                PCI
        type                        PCI
        width                        32 bits
        populated                no

DMI Extension Slot               
        designation                PCI Express x16
        type                        A5

DMI Extension Slot               
        designation                PCI Express x1
        type                        A5

DMI Physical Memory Array               
        location                Motherboard
        usage                        System Memory
        correction                None
        max capacity                8192 MBytes
        max# of devices                2

DMI Memory Device               
        designation                A0
        format                        DIMM
        type                        unknown
        total width                64 bits
        data width                64 bits
        size                        8192 MBytes

DMI Memory Device               
        designation                A1
        format                        DIMM
        type                        unknown
        total width                64 bits
        data width                64 bits


Storage
-------------------------------------------------------------------------

Drive        0
        Device Path                \\?\ide#disktoshiba_dt01aca100______________________ms2oa750#5&14c72ac7&0&1.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
        Type                        Fixed
        Name                        TOSHIBA DT01ACA100
        Capacity                931.5 GB
        SMART Support                Yes

USB Devices
-------------------------------------------------------------------------

USB Device                        USB-Verbundgerät, class=0x00, subclass=0x00, vendor=0x046D, product=0xC335
USB Device                        USB-Eingabegerät, class=0x00, subclass=0x00, vendor=0x046D, product=0x0A5D
USB Device                        USB-Verbundgerät, class=0x00, subclass=0x00, vendor=0x046D, product=0x0A5B
USB Device                        USB-Verbundgerät, class=0x00, subclass=0x00, vendor=0x046D, product=0xC07E

Graphics
-------------------------------------------------------------------------

Number of adapters                1

Graphic APIs
-------------------------------------------------------------------------

API                                NVIDIA I/O
API                                NVIDIA NVAPI

Display Adapters
-------------------------------------------------------------------------

Display adapter 0       
        Name                        NVIDIA GeForce GTX 750 Ti
        Board Manufacturer        0x0000 (0x0000)
        Revision                A2
        Codename                GM107
        Technology                28 nm
        Memory size                2 GB
        Memory type                GDDR5
        PCI device                bus 1 (0x1), device 0 (0x0), function 0 (0x0)
        Vendor ID                0x10DE (0x0000)
        Model ID                0x1380 (0x0000)
        Performance Level        0
                Core clock        135.0 MHz
                Memory clock        405.0 MHz

Win32_VideoController                AdapterRAM = 0x80000000 (2147483648)
Win32_VideoController                DriverVersion = 25.21.14.1616
Win32_VideoController                DriverDate = 10/02/2018

Monitor 0       
        Model                        HG221A ()
        ID                        HSD1C8F
        Serial                        909MW3JY00560
        Manufacturing Date        Week 9, Year 2009
        Size                        22.3 inches
        Max Resolution                1680 x 1050 @ 59 Hz
        Horizontal Freq. Range        30-82 kHz
        Vertical Freq. Range        50-75 Hz
        Max Pixel Clock                150 MHz
        Gamma Factor                2.2

Monitor 1       
        Model                        E222W (NEC Technologies)
        ID                        NEC6777
        Serial                        05209743NB
        Manufacturing Date        Week 21, Year 2010
        Size                        22.0 inches
        Max Resolution                1680 x 1050 @ 59 Hz
        Horizontal Freq. Range        31-83 kHz
        Vertical Freq. Range        56-75 Hz
        Max Pixel Clock                170 MHz
        Gamma Factor                2.2


Software
-------------------------------------------------------------------------

Windows Version                        Microsoft Windows 10 (10.0) Professional 64-bit  (Build 17134)
DirectX Version                        12.0


Register Spaces
-------------------------------------------------------------------------

Register space                        PCI
Register space                        PCI #2
Register space                        PCI Express, base address = 0x0E0000000
Register space                        class = 0x12
Register space                        SMBus, base address = 0x0B00
Register space                        I2C
Register space                        LPC, base address = 0x0228
Register space                        LPC, base address = 0x02E
Register space                        LPC, base address = 0x0CD0

Schonmal im Vorraus vielen Dank für eine Antwort und Hilfe.

Liebe Grüße Pascal

Explo 12.04.2019 11:08

Tausch die HDD zu einer SSD und du wirst einen merkbaren Unterschied spüren können.
Vorteil ist man kann, wenn man es vernünftig macht auch direkt mit einem sauberen Betriebssystem starten und so die Anzahl der Altlasten und Systembremsen verringern (:

cosinus 12.04.2019 15:05

Klar eine SSD ist schneller, aber ein System mit normaler Festplatte muss auch nicht unbedingt langsam sein. Zeig uns mal die SMART-Werte. Wie das geht wird da erklärt --> Zustand der Festplatte herausfinden - so gehts - Anleitungen

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Shuyin 13.04.2019 10:07

Vielen Dank schonmal für die Antwort ;)

Zitat:

Zitat von cosinus (Beitrag 1715280)
Klar eine SSD ist schneller, aber ein System mit normaler Festplatte muss auch nicht unbedingt langsam sein.

Dankeschön, so habe ich das auch gesehen.

Und natürlich ist eine SSD schneller und besser, jedoch kann ich mir das momentan nicht leisten. Der Computer muss leider noch ein wenig durchhalten bis es einen neuen gibt.

Hier habe ich das genannte Tool mal durchgeführt:

Code:

----------------------------------------------------------------------------
CrystalDiskInfo 8.0.0 (C) 2008-2018 hiyohiyo
                                Crystal Dew World : https://crystalmark.info/
----------------------------------------------------------------------------

    OS : Windows 10 Professional [10.0 Build 17134] (x64)
  Date : 2019/04/13 11:02:29

-- Controller Map ----------------------------------------------------------
 + ATA Channel 0 (0) [ATA]
  - TSSTcorp CDDVDW SH-224DB ATA Device
 + ATA Channel 1 (1) [ATA]
  - TOSHIBA DT01ACA100 ATA Device
 - ATA Channel 0 (0) [ATA]
 - ATA Channel 1 (1) [ATA]
 + Standard-Zweikanal-PCI-IDE-Controller [ATA]
  - ATA Channel 0 (0)
  - ATA Channel 1 (1)
 + Standard-Zweikanal-PCI-IDE-Controller [ATA]
  - ATA Channel 0 (0)
  - ATA Channel 1 (1)
 - Microsoft-Controller für Speicherplätze [SCSI]

-- Disk List ---------------------------------------------------------------
 (1) TOSHIBA DT01ACA100 : 1000,2 GB [0/1/0, pd1]

----------------------------------------------------------------------------
 (1) TOSHIBA DT01ACA100
----------------------------------------------------------------------------
          Model : TOSHIBA DT01ACA100
        Firmware : MS2OA750
  Serial Number : 843A8YWFS
      Disk Size : 1000,2 GB (8,4/137,4/1000,2/1000,2)
    Buffer Size : 23652 KB
    Queue Depth : 32
    # of Sectors : 1953525168
  Rotation Rate : 7200 RPM
      Interface : Serial ATA
  Major Version : ATA8-ACS
  Minor Version : ATA8-ACS version 4
  Transfer Mode : SATA/300 | SATA/600
  Power On Hours : 13848 Std.
  Power On Count : 2412 mal
    Temperature : 31 C (87 F)
  Health Status : Gut
        Features : S.M.A.R.T., APM, 48bit LBA, NCQ
      APM Level : 0000h [OFF]
      AAM Level : ----
    Drive Letter : C:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _16 000000000000 Lesefehlerrate
02 140 140 _54 00000000004C Datendurchsatz-Leistung
03 125 125 _24 000300B800B7 Mittlere Anlaufzeit
04 100 100 __0 000000000971 Start/Stopp-Zyklen der Spindel
05 100 100 __5 000000000000 Wiederzugewiesene Sektoren
07 100 100 _67 000000000000 Suchfehler
08 118 118 _20 000000000021 Güte der Suchoperationen
09 _99 _99 __0 000000003618 Betriebsstunden
0A 100 100 _60 000000000000 Misslungene Spindelanläufe
0C 100 100 __0 00000000096C Geräte-Einschaltvorgänge
C0 _98 _98 __0 000000000980 Ausschaltungsabbrüche
C1 _98 _98 __0 000000000980 Laden/Entladen-Zyklen
C2 193 193 __0 0029000C001F Temperatur
C4 100 100 __0 000000000000 Wiederzuweisungsereignisse
C5 100 100 __0 000000000000 Aktuell ausstehende Sektoren
C6 100 100 __0 000000000000 Nicht korrigierbare Sektoren
C7 200 200 __0 000000000000 UltraDMA-CRC-Fehler

-- IDENTIFY_DEVICE ---------------------------------------------------------
        0    1    2    3    4    5    6    7    8    9
000: 045A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 2038 3433 4138 5957 4653
020: 0003 B8C8 0038 4D53 324F 4137 3530 544F 5348 4942
030: 4120 4454 3031 4143 4131 3030 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 170E 0004 005E 0040
080: 01FC 0029 746B 7D69 4773 7469 BC41 4763 407F 0050
090: 0000 0000 FFFE 0000 0000 0008 00CA 00F9 2710 0000
100: 6DB0 7470 0000 0000 00CA 0000 6003 5A87 5000 039F
110: FBE0 DC5E 0000 0000 0000 0000 0000 0000 0000 409C
120: 409C 0000 0000 0000 0000 0000 0000 0000 0009 000B
130: 0000 0000 2180 0DF1 FA20 0001 4000 0404 0121 0000
140: 0000 060A 0708 0000 0000 0000 0000 0000 0000 0000
150: 0000 0005 324E 4237 0000 6802 0000 5DBD 7BC8 8000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0002 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 1C20 0000 0000
220: 0000 0000 103F 0021 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 03E0 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 43A5

-- SMART_READ_DATA ---------------------------------------------------------
    +0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 0B 00 64 64 00 00 00 00 00 00 00 02 05
010: 00 8C 8C 4C 00 00 00 00 00 00 03 07 00 7D 7D B7
020: 00 B8 00 03 00 00 04 12 00 64 64 71 09 00 00 00
030: 00 00 05 33 00 64 64 00 00 00 00 00 00 00 07 0B
040: 00 64 64 00 00 00 00 00 00 00 08 05 00 76 76 21
050: 00 00 00 00 00 00 09 12 00 63 63 18 36 00 00 00
060: 00 00 0A 13 00 64 64 00 00 00 00 00 00 00 0C 32
070: 00 64 64 6C 09 00 00 00 00 00 C0 32 00 62 62 80
080: 09 00 00 00 00 00 C1 12 00 62 62 80 09 00 00 00
090: 00 00 C2 02 00 C1 C1 1F 00 0C 00 29 00 00 C4 32
0A0: 00 64 64 00 00 00 00 00 00 00 C5 22 00 64 64 00
0B0: 00 00 00 00 00 00 C6 08 00 64 64 00 00 00 00 00
0C0: 00 00 C7 0A 00 C8 C8 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 84 00 30 1C 01 5B
170: 03 00 01 00 01 79 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 59

-- SMART_READ_THRESHOLD ----------------------------------------------------
    +0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 10 00 00 00 00 00 00 00 00 00 00 02 36
010: 00 00 00 00 00 00 00 00 00 00 03 18 00 00 00 00
020: 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00
030: 00 00 05 05 00 00 00 00 00 00 00 00 00 00 07 43
040: 00 00 00 00 00 00 00 00 00 00 08 14 00 00 00 00
050: 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00
060: 00 00 0A 3C 00 00 00 00 00 00 00 00 00 00 0C 00
070: 00 00 00 00 00 00 00 00 00 00 C0 00 00 00 00 00
080: 00 00 00 00 00 00 C1 00 00 00 00 00 00 00 00 00
090: 00 00 C2 00 00 00 00 00 00 00 00 00 00 00 C4 00
0A0: 00 00 00 00 00 00 00 00 00 00 C5 00 00 00 00 00
0B0: 00 00 00 00 00 00 C6 00 00 00 00 00 00 00 00 00
0C0: 00 00 C7 00 00 00 00 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64


Yatagan 13.04.2019 10:44

Die Platte scheint ja erstmal in Ordnung zu sein.

Eine Frage wäre, seit wann du die Probleme hast. Hat sich das so eingeschlichen oder war das plötzlich ab einem bestimmten Zeitpunkt (Update, Programminstallation, o.ä.) so?

Möglich wäre, dass du dein System einfach im Laufe der Zeit total zugemüllt hast (z.B. den Autostart - was läuft alles im Hintergrund?). Und / oder du hast nicht regelmäßig alles upgedatet (Windows, Treiber, etc.)!?

Dein Windows 10 ist jedenfalls nicht mehr aktuell... :daumenrunter:


Ergänzung: Außerdem hast du scheinbar schon öfter Malware-Probleme gehabt (s. deine früheren Beiträge). Könnte natürlich auch ein Grund sein. Oder deine aktuelle Antivirenlösung bremst alles aus. :glaskugel:

cosinus 13.04.2019 11:47

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Shuyin 13.04.2019 11:49

Also ich würde mal sagen das es sich eher so mit der Zeit eingeschlichen hat >.< _Könnte jetzt eher keinen festen Punkt ausmachen. Auf jeden Fall schon länger das er so "schleppend" arbeitet.

Ich denke mal das auf jeden Fall sehr viele Datenleichen darauf sind.

Mein Autostart sieht so aus:
https://s16.directupload.net/images/190413/fgdxik97.jpg

Ich versuchte immer alle Updates zu machen. Jedoch in letzter Zeit nicht mehr so ganz, da es einfach ewig dauert bis er reagiert oder er sich oft dabei aufhängt.
Okey das Windowsupdate werde ich dann gleich mal in die Wege leiten ;)

Ja das stimmt, hatte leider des öfteren Probleme mit Malware. Bin für jeden Tipp dankbar wie ich mein System wieder ein wenig bereinigen und schneller machen kann ohne es neu aufzusetzten >.<

Als Antivirenprogramm benutze ich den Avast Free Antivirus.

Ich hab mal versucht die Hintergrundprozesse darstellen zu lassen. Ich hoffe man kann damit etwas anfangen :D
https://s16.directupload.net/images/190413/6n4rs9he.jpg
https://s16.directupload.net/images/190413/87s6q8ja.jpg
https://s16.directupload.net/images/190413/4zpbh4o3.jpg

EDIT: Gerade den neuen Post von dir gesehen Cosinus, werde ich direkt machen. Soll ich das hier stehen lassen oder wieder löschen?

cosinus 13.04.2019 12:03

Einfach die Logs machen und als CODE posten.

Shuyin 13.04.2019 12:09

Alles klar hier die Logs:

FRST:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2019
durchgeführt von Admin (Administrator) auf SHUYIN (13-04-2019 12:52:48)
Gestartet von C:\Users\Admin\Downloads
Geladene Profile: Admin (Verfügbare Profile: Admin)
Platform: Windows 10 Pro Version 1803 17134.706 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Digital Wave Ltd -> Digital Wave Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Malwarebytes Corporation -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Malwarebytes Corporation -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.136.333\AvastBrowserCrashHandler.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.136.333\AvastBrowserCrashHandler64.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\rempl\sedlauncher.exe
() [Datei ist nicht signiert] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.42.60.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.42.60.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
() [Datei ist nicht signiert] C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19021.18010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Malwarebytes Corporation -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech Gaming Software\LAClient\laclient.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\ArxApplets\Discord\logitechg_discord.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.42.60.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe
(Valve -> Valve Corporation) C:\Games\Steam\Steam.exe
(Valve -> Valve Corporation) C:\Games\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Games\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Games\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) C:\Games\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Games\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\OpenWith.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\OpenWith.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\OpenWith.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [260488 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [18591352 2018-03-19] (Logitech Inc -> Logitech Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302904 2019-01-18] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech, Inc. -> Logitech Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Datei ist nicht signiert]
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [Syncios device service] => C:\Program Files (x86)\Anvsoft\Syncios\SynciosDeviceService.exe [1910424 2017-06-06] (Anvsoft Inc. -> )
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1163264 2012-09-25] () [Datei ist nicht signiert]
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2480336 2018-12-19] (Malwarebytes Corporation -> Malwarebytes Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [260488 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ACHTUNG
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Run: [GalaxyClient] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [6881864 2018-08-05] (GOG Sp. z o.o. -> GOG.com)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Run: [Discord] => C:\Users\Admin\AppData\Local\Discord\app-0.0.305\Discord.exe [81780056 2019-03-07] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Run: [Spotify Web Helper] => C:\Users\Admin\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1444976 2016-12-30] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Run: [Spotify] => C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe [7153264 2016-12-30] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2018-10-01] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1504584 2018-09-18] (Overwolf Ltd -> Overwolf Ltd.)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2019-01-15] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Run: [iCloudPhotos] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe [356664 2018-10-01] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Run: [AvastBrowserAutoLaunch_1088872FC4C2207C6D62AF0E8871CAAC] => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1960168 2019-04-11] (AVAST Software s.r.o. -> AVAST Software)
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\system32\frapsv64.dll [71680 2013-02-26] (Beepa P/L) [Datei ist nicht signiert]
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [65536 2013-02-26] (Beepa P/L) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.VP60] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2015-04-14] (Electronic Arts -> On2.com)
HKLM\...\Drivers32: [vidc.VP61] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2015-04-14] (Electronic Arts -> On2.com)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.103\Installer\chrmstp.exe [2019-04-11] (Google LLC -> Google Inc.)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\73.0.1270.86\Installer\chrmstp.exe [2019-04-13] (AVAST Software s.r.o. -> AVAST Software)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{1f529286-3f1a-4b7f-b911-60ec4b68354a}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{3c31fd95-761e-4e0d-a96d-928ee4a3df35}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{c9991f10-0d7c-40b4-a9f1-d4bc13ce08fc}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.live.com/1rewlive4startup/home
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Browser Extensions -> {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} -> C:\Users\Admin\AppData\Roaming\BrowserExtensions\Coupons64.dll => Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\ssv.dll [2019-02-10] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-02-10] (Oracle America, Inc. -> Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-3980298719-2773488239-3045808690-1000 -> hxxp://www.google.de/

FireFox:
========
FF DefaultProfile: og4hcahm.default-1505430743535
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\og4hcahm.default-1505430743535 [2019-04-13]
FF Homepage: Mozilla\Firefox\Profiles\og4hcahm.default-1505430743535 -> hxxps://www.google.de/
FF NetworkProxy: Mozilla\Firefox\Profiles\og4hcahm.default-1505430743535 -> http", "162.243.78.25"
FF Session Restore: Mozilla\Firefox\Profiles\og4hcahm.default-1505430743535 -> ist aktiviert.
FF Extension: (Avast SafePrice | Vergleich, Angebote, Gutscheine) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\og4hcahm.default-1505430743535\Extensions\sp@avast.com.xpi [2019-04-08]
FF Extension: (Avast Online Security) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\og4hcahm.default-1505430743535\Extensions\wrc@avast.com.xpi [2019-04-08]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll [2017-11-25] (Adobe Systems Incorporated -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-06-08] (Unity Technologies ApS -> Unity Technologies ApS)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-11-25] (Adobe Systems Incorporated -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1231201.dll [2017-11-02] (Adobe Systems, Inc.) [Datei ist nicht signiert]
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-08-26] (Google Inc -> Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-02-10] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-02-10] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL [2011-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-10-02] (NVIDIA Corporation -> NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-10-02] (NVIDIA Corporation -> NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-02-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH -> pdfforge GmbH)
FF Plugin HKU\S-1-5-21-3980298719-2773488239-3045808690-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [Keine Datei]

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://google.de/
CHR StartupUrls: Default -> "hxxps://www.google.de/?gws_rd=ssl"
CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default [2018-11-27]
CHR Extension: (Präsentationen) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-06-19]
CHR Extension: (Docs) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-06-19]
CHR Extension: (Google Drive) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-25]
CHR Extension: (YouTube) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-07]
CHR Extension: (Google-Suche) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-10]
CHR Extension: (Avast SafePrice | Vergleich, Angebote, Gutscheine) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2018-11-27]
CHR Extension: (Tabellen) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-06-19]
CHR Extension: (Google Docs Offline) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-11-27]
CHR Extension: (Avast Online Security) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-11-27]
CHR Extension: (TubeTab) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhpijolpcimadhjingadnbcjncmjdce [2017-07-13]
CHR Extension: (Zelda Dark) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lilddpnkkhkcjkdaaglfminjopbijomp [2015-06-30]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-06-19]
CHR Extension: (Google Mail) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-30]
CHR Extension: (Chrome Media Router) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-11-27]
CHR HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jlhpijolpcimadhjingadnbcjncmjdce] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <nicht gefunden>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <nicht gefunden>

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [85304 2018-10-16] (Apple Inc. -> Apple Inc.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6570352 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-06] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [360440 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-06] (AVAST Software s.r.o. -> AVAST Software)
S3 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8361960 2019-02-01] (BattlEye Innovations e.K. -> )
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [382312 2015-10-29] (Digital Wave Ltd -> Digital Wave Ltd.) [Datei ist nicht signiert]
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [784512 2018-09-23] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 ElfoService; C:\Program Files (x86)\ElsterFormular Update Service\bin\elfoService.exe [1284328 2018-01-04] (Bayerisches Landesamt fuer Steuern -> )
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [686664 2018-08-05] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [8942664 2018-08-05] (GOG Sp. z o.o. -> GOG.com)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert]
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [202872 2018-03-19] (Logitech Inc -> Logitech Inc.)
R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [152272 2018-12-19] (Malwarebytes Corporation -> Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation -> Malwarebytes Corporation)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [773328 2018-09-12] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [773328 2018-09-12] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2201920 2018-07-06] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3072328 2018-07-06] (Electronic Arts, Inc. -> Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2308424 2018-09-18] (Overwolf Ltd -> Overwolf LTD)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH -> pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH -> pdfforge GmbH)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5074120 2019-03-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Datei ist nicht signiert]
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-0\NisSrv.exe [4632736 2018-05-07] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-0\MsMpEng.exe [104680 2018-05-07] (Microsoft Corporation -> Microsoft Corporation)
S3 AvastSecureBrowserElevationService; "C:\Program Files (x86)\AVAST Software\Browser\Application\73.0.1270.86\elevation_service.exe" [X]
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [37320 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [205608 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [254408 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [196304 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswblog.sys [320904 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [58168 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [15488 2019-01-06] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [249152 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42496 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [169104 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [112520 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [88152 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1034640 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [476264 2019-04-13] (AVAST Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [220632 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [380160 2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [153328 2018-12-19] (Malwarebytes Corporation -> Malwarebytes)
R3 ladfGSS; C:\WINDOWS\system32\drivers\ladfGSS.sys [45168 2018-03-19] (Logitech Inc -> Logitech Inc.)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> Logitech)
R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2017-08-18] (Logitech Inc -> Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation -> Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation -> Malwarebytes Corporation)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [23040 2014-08-16] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
S3 nusb3hub; C:\WINDOWS\system32\drivers\nusb3hub.sys [80384 2010-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)
S3 nusb3xhc; C:\WINDOWS\system32\drivers\nusb3xhc.sys [180736 2010-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_54bd1f10ac116cd5\nvlddmkm.sys [20605496 2018-10-03] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30792 2018-08-21] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [69544 2018-06-08] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [65792 2018-04-24] (NVIDIA Corporation -> NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2018-04-12] (Microsoft Windows -> Realtek )
R3 Sftfs; C:\WINDOWS\System32\DRIVERS\Sftfswin7.sys [767648 2014-10-08] (Microsoft Corporation -> Microsoft Corporation)
R3 Sftplay; C:\WINDOWS\System32\DRIVERS\Sftplaywin7.sys [273576 2014-10-08] (Microsoft Corporation -> Microsoft Corporation)
R3 Sftredir; C:\WINDOWS\System32\DRIVERS\Sftredirwin7.sys [29864 2014-10-08] (Microsoft Corporation -> Microsoft Corporation)
R3 Sftvol; C:\WINDOWS\System32\DRIVERS\Sftvolwin7.sys [23208 2014-10-08] (Microsoft Corporation -> Microsoft Corporation)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-06-10] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46072 2018-05-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [313888 2018-05-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [61472 2018-05-07] (Microsoft Windows -> Microsoft Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2019-04-13 12:52 - 2019-04-13 12:54 - 000032396 _____ C:\Users\Admin\Downloads\FRST.txt
2019-04-13 12:52 - 2019-04-13 12:52 - 000000000 ____D C:\FRST
2019-04-13 12:51 - 2019-04-13 12:51 - 002434048 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe
2019-04-13 12:42 - 2019-04-13 12:42 - 000000000 _____ C:\Users\Admin\tasklist
2019-04-13 11:32 - 2019-04-13 11:32 - 000003856 _____ C:\WINDOWS\System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2019-04-13 11:32 - 2019-04-13 11:32 - 000003272 _____ C:\WINDOWS\System32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2019-04-13 11:15 - 2019-04-13 11:15 - 000000077 _____ C:\WINDOWS\system32\Drivers\aswSP.sys.sum
2019-04-13 11:00 - 2019-04-13 11:01 - 000000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2019-04-13 11:00 - 2019-04-13 11:00 - 000001273 _____ C:\Users\Admin\Desktop\CrystalDiskInfo.lnk
2019-04-13 11:00 - 2019-04-13 11:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2019-04-13 10:59 - 2019-04-13 10:59 - 003942560 _____ (Crystal Dew World ) C:\Users\Admin\Downloads\CrystalDiskInfo8_0_0.exe
2019-04-11 21:30 - 2019-04-11 21:30 - 000080553 _____ C:\Users\Admin\Desktop\SHUYIN.txt
2019-04-11 21:28 - 2019-04-11 21:28 - 000000000 ____D C:\Users\Admin\Desktop\CPU-Z
2019-04-11 21:00 - 2019-04-02 11:25 - 000607960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2019-04-11 21:00 - 2019-04-02 10:20 - 000412984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2019-04-11 21:00 - 2019-04-02 09:51 - 003399680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-04-11 21:00 - 2019-04-02 09:50 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-04-11 21:00 - 2019-04-02 09:49 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2019-04-11 21:00 - 2019-04-02 07:05 - 001989544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2019-04-11 21:00 - 2019-04-02 06:40 - 000534016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2019-04-11 21:00 - 2019-03-14 16:29 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2019-04-11 21:00 - 2019-03-14 16:08 - 003611264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2019-04-11 21:00 - 2019-03-14 15:53 - 000625664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2019-04-11 21:00 - 2019-03-14 10:37 - 002256248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-04-11 21:00 - 2019-03-14 10:22 - 002700288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2019-04-11 21:00 - 2019-03-14 10:19 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2019-04-11 21:00 - 2019-03-14 10:19 - 002969600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2019-04-11 21:00 - 2019-03-14 10:17 - 002258944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2019-04-11 21:00 - 2019-03-14 10:17 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2019-04-11 21:00 - 2019-03-14 10:17 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2019-04-11 21:00 - 2019-03-14 10:14 - 000856576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2019-04-11 21:00 - 2019-03-14 10:14 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2019-04-11 21:00 - 2019-03-14 10:14 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2019-04-11 21:00 - 2019-03-14 10:14 - 000138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2019-04-11 21:00 - 2019-03-14 10:13 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2019-04-11 21:00 - 2019-03-14 10:13 - 000145408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2019-04-11 21:00 - 2019-03-14 09:58 - 004708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2019-04-11 21:00 - 2019-03-14 09:57 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2019-04-11 21:00 - 2019-03-14 09:56 - 003392000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2019-04-11 21:00 - 2019-03-14 09:56 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2019-04-11 21:00 - 2019-03-14 09:55 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2019-04-11 21:00 - 2019-03-14 09:54 - 000395776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2019-04-11 21:00 - 2019-03-14 09:54 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2019-04-11 21:00 - 2019-03-14 09:51 - 001216000 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2019-04-11 21:00 - 2019-03-14 09:51 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2019-04-11 21:00 - 2019-03-14 09:50 - 000796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2019-04-11 21:00 - 2019-03-14 09:50 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2019-04-11 21:00 - 2019-03-14 09:50 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2019-04-11 20:59 - 2019-04-02 14:38 - 000094008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2019-04-11 20:59 - 2019-04-02 14:33 - 001634912 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-04-11 20:59 - 2019-04-02 14:33 - 000719984 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2019-04-11 20:59 - 2019-04-02 14:19 - 012730880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-04-11 20:59 - 2019-04-02 14:19 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2019-04-11 20:59 - 2019-04-02 14:18 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2019-04-11 20:59 - 2019-04-02 14:16 - 001030144 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2019-04-11 20:59 - 2019-04-02 14:15 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2019-04-11 20:59 - 2019-04-02 14:13 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2019-04-11 20:59 - 2019-04-02 14:12 - 003643904 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-04-11 20:59 - 2019-04-02 14:12 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-04-11 20:59 - 2019-04-02 14:11 - 004053504 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2019-04-11 20:59 - 2019-04-02 14:11 - 001857536 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2019-04-11 20:59 - 2019-04-02 14:11 - 001662976 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2019-04-11 20:59 - 2019-04-02 14:10 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2019-04-11 20:59 - 2019-04-02 14:10 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll
2019-04-11 20:59 - 2019-04-02 11:25 - 001454648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2019-04-11 20:59 - 2019-04-02 11:11 - 011919360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-04-11 20:59 - 2019-04-02 11:11 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2019-04-11 20:59 - 2019-04-02 11:10 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2019-04-11 20:59 - 2019-04-02 11:08 - 002889216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2019-04-11 20:59 - 2019-04-02 11:07 - 004054528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2019-04-11 20:59 - 2019-04-02 11:07 - 001586688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2019-04-11 20:59 - 2019-04-02 11:06 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2019-04-11 20:59 - 2019-04-02 10:36 - 001035256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-04-11 20:59 - 2019-04-02 10:24 - 000135184 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2019-04-11 20:59 - 2019-04-02 10:23 - 001023800 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-04-11 20:59 - 2019-04-02 10:22 - 001219896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-04-11 20:59 - 2019-04-02 10:22 - 000567592 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-04-11 20:59 - 2019-04-02 10:22 - 000076088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2019-04-11 20:59 - 2019-04-02 10:21 - 007520136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-04-11 20:59 - 2019-04-02 10:21 - 002822160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2019-04-11 20:59 - 2019-04-02 10:21 - 002467536 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-04-11 20:59 - 2019-04-02 10:21 - 000735680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2019-04-11 20:59 - 2019-04-02 10:20 - 002719032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-04-11 20:59 - 2019-04-02 10:19 - 009083704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-04-11 20:59 - 2019-04-02 10:19 - 000793400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2019-04-11 20:59 - 2019-04-02 10:19 - 000786080 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2019-04-11 20:59 - 2019-04-02 10:19 - 000713272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2019-04-11 20:59 - 2019-04-02 10:01 - 025857536 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-04-11 20:59 - 2019-04-02 09:53 - 022717440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-04-11 20:59 - 2019-04-02 09:53 - 004384256 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-04-11 20:59 - 2019-04-02 09:50 - 007591936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-04-11 20:59 - 2019-04-02 09:49 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2019-04-11 20:59 - 2019-04-02 09:48 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-04-11 20:59 - 2019-04-02 09:48 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2019-04-11 20:59 - 2019-04-02 09:48 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2019-04-11 20:59 - 2019-04-02 09:47 - 001214464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2019-04-11 20:59 - 2019-04-02 09:47 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-04-11 20:59 - 2019-04-02 09:46 - 002174976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-04-11 20:59 - 2019-04-02 09:45 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2019-04-11 20:59 - 2019-04-02 09:44 - 002208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-04-11 20:59 - 2019-04-02 09:44 - 001724416 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2019-04-11 20:59 - 2019-04-02 09:44 - 001421312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2019-04-11 20:59 - 2019-04-02 09:43 - 000542720 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2019-04-11 20:59 - 2019-04-02 08:22 - 000001312 _____ C:\WINDOWS\system32\tcbres.wim
2019-04-11 20:59 - 2019-04-02 07:04 - 006572120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-04-11 20:59 - 2019-04-02 07:04 - 000604008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2019-04-11 20:59 - 2019-04-02 07:04 - 000581832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2019-04-11 20:59 - 2019-04-02 07:04 - 000560600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2019-04-11 20:59 - 2019-04-02 06:56 - 022018048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-04-11 20:59 - 2019-04-02 06:50 - 019404800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-04-11 20:59 - 2019-04-02 06:43 - 005788160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-04-11 20:59 - 2019-04-02 06:43 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-04-11 20:59 - 2019-04-02 06:43 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-04-11 20:59 - 2019-04-02 06:42 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2019-04-11 20:59 - 2019-04-02 06:41 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2019-04-11 20:59 - 2019-04-02 06:41 - 001235968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2019-04-11 20:59 - 2019-04-02 06:41 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2019-04-11 20:59 - 2019-04-02 06:40 - 001073664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2019-04-11 20:59 - 2019-03-16 14:54 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2019-04-11 20:59 - 2019-03-16 11:03 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2019-04-11 20:59 - 2019-03-14 16:55 - 001786680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2019-04-11 20:59 - 2019-03-14 16:53 - 001626928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2019-04-11 20:59 - 2019-03-14 16:53 - 001038136 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll
2019-04-11 20:59 - 2019-03-14 16:53 - 000652088 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2019-04-11 20:59 - 2019-03-14 16:53 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2019-04-11 20:59 - 2019-03-14 16:52 - 003933296 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2019-04-11 20:59 - 2019-03-14 16:52 - 001424696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2019-04-11 20:59 - 2019-03-14 16:52 - 000954160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVManifest.dll
2019-04-11 20:59 - 2019-03-14 16:52 - 000830264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2019-04-11 20:59 - 2019-03-14 16:52 - 000827704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2019-04-11 20:59 - 2019-03-14 16:52 - 000825144 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2019-04-11 20:59 - 2019-03-14 16:52 - 000749880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2019-04-11 20:59 - 2019-03-14 16:52 - 000670008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2019-04-11 20:59 - 2019-03-14 16:52 - 000495416 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2019-04-11 20:59 - 2019-03-14 16:52 - 000164664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppvVemgr.sys
2019-04-11 20:59 - 2019-03-14 16:51 - 000157192 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2019-04-11 20:59 - 2019-03-14 16:35 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfoext.dll
2019-04-11 20:59 - 2019-03-14 16:34 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2019-04-11 20:59 - 2019-03-14 16:33 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
2019-04-11 20:59 - 2019-03-14 16:33 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storqosflt.sys
2019-04-11 20:59 - 2019-03-14 16:33 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcPing.exe
2019-04-11 20:59 - 2019-03-14 16:31 - 000198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll
2019-04-11 20:59 - 2019-03-14 16:30 - 000675328 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll
2019-04-11 20:59 - 2019-03-14 16:30 - 000440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2019-04-11 20:59 - 2019-03-14 16:29 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscsvc.dll
2019-04-11 20:59 - 2019-03-14 16:28 - 000560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsound.dll
2019-04-11 20:59 - 2019-03-14 15:56 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll
2019-04-11 20:59 - 2019-03-14 15:55 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcPing.exe
2019-04-11 20:59 - 2019-03-14 15:53 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2019-04-11 20:59 - 2019-03-14 15:53 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2019-04-11 20:59 - 2019-03-14 15:52 - 000502784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsound.dll
2019-04-11 20:59 - 2019-03-14 10:57 - 000611640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2019-04-11 20:59 - 2019-03-14 10:56 - 000375096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2019-04-11 20:59 - 2019-03-14 10:38 - 000380728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-04-11 20:59 - 2019-03-14 10:38 - 000090360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpr.dll
2019-04-11 20:59 - 2019-03-14 10:37 - 006043496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2019-04-11 20:59 - 2019-03-14 10:37 - 001171568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2019-04-11 20:59 - 2019-03-14 10:28 - 000152072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2019-04-11 20:59 - 2019-03-14 10:27 - 000436024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-04-11 20:59 - 2019-03-14 10:27 - 000097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpr.dll
2019-04-11 20:59 - 2019-03-14 10:26 - 007436016 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2019-04-11 20:59 - 2019-03-14 10:26 - 002768448 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-04-11 20:59 - 2019-03-14 10:26 - 002421048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2019-04-11 20:59 - 2019-03-14 10:26 - 001457576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-04-11 20:59 - 2019-03-14 10:26 - 001258688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-04-11 20:59 - 2019-03-14 10:26 - 001140984 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-04-11 20:59 - 2019-03-14 10:26 - 001014344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2019-04-11 20:59 - 2019-03-14 10:26 - 000983424 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-04-11 20:59 - 2019-03-14 10:26 - 000481048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2019-04-11 20:59 - 2019-03-14 10:26 - 000175416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2019-04-11 20:59 - 2019-03-14 10:20 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2019-04-11 20:59 - 2019-03-14 10:18 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2019-04-11 20:59 - 2019-03-14 10:18 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2019-04-11 20:59 - 2019-03-14 10:18 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credui.dll
2019-04-11 20:59 - 2019-03-14 10:18 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2019-04-11 20:59 - 2019-03-14 10:17 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2019-04-11 20:59 - 2019-03-14 10:17 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcmapi.dll
2019-04-11 20:59 - 2019-03-14 10:17 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntlanman.dll
2019-04-11 20:59 - 2019-03-14 10:16 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2019-04-11 20:59 - 2019-03-14 10:16 - 000333824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2019-04-11 20:59 - 2019-03-14 10:15 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2019-04-11 20:59 - 2019-03-14 10:15 - 000318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2019-04-11 20:59 - 2019-03-14 10:15 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShellCommonCommonProxyStub.dll
2019-04-11 20:59 - 2019-03-14 10:15 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\negoexts.dll
2019-04-11 20:59 - 2019-03-14 10:14 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2019-04-11 20:59 - 2019-03-14 10:14 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2019-04-11 20:59 - 2019-03-14 10:14 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2019-04-11 20:59 - 2019-03-14 10:13 - 001468416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2019-04-11 20:59 - 2019-03-14 10:01 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2019-04-11 20:59 - 2019-03-14 09:58 - 002509824 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2019-04-11 20:59 - 2019-03-14 09:58 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\fcon.dll
2019-04-11 20:59 - 2019-03-14 09:57 - 004866560 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2019-04-11 20:59 - 2019-03-14 09:56 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2019-04-11 20:59 - 2019-03-14 09:56 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2019-04-11 20:59 - 2019-03-14 09:56 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2019-04-11 20:59 - 2019-03-14 09:55 - 003601920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2019-04-11 20:59 - 2019-03-14 09:55 - 002739200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2019-04-11 20:59 - 2019-03-14 09:55 - 000528896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2019-04-11 20:59 - 2019-03-14 09:55 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2019-04-11 20:59 - 2019-03-14 09:55 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2019-04-11 20:59 - 2019-03-14 09:55 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmapi.dll
2019-04-11 20:59 - 2019-03-14 09:55 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncCsp.dll
2019-04-11 20:59 - 2019-03-14 09:55 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntlanman.dll
2019-04-11 20:59 - 2019-03-14 09:55 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\EASPolicyManagerBrokerHost.exe
2019-04-11 20:59 - 2019-03-14 09:55 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\credui.dll
2019-04-11 20:59 - 2019-03-14 09:54 - 002368000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-04-11 20:59 - 2019-03-14 09:54 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2019-04-11 20:59 - 2019-03-14 09:54 - 000354304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2019-04-11 20:59 - 2019-03-14 09:54 - 000279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2019-04-11 20:59 - 2019-03-14 09:54 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2019-04-11 20:59 - 2019-03-14 09:54 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2019-04-11 20:59 - 2019-03-14 09:54 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\negoexts.dll
2019-04-11 20:59 - 2019-03-14 09:54 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2019-04-11 20:59 - 2019-03-14 09:53 - 000787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2019-04-11 20:59 - 2019-03-14 09:53 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2019-04-11 20:59 - 2019-03-14 09:53 - 000473600 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2019-04-11 20:59 - 2019-03-14 09:53 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
2019-04-11 20:59 - 2019-03-14 09:52 - 002909696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2019-04-11 20:59 - 2019-03-14 09:52 - 000532992 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuietHours.dll
2019-04-11 20:59 - 2019-03-14 09:52 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShellCommonCommonProxyStub.dll
2019-04-11 20:59 - 2019-03-14 09:52 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2019-04-11 20:59 - 2019-03-14 09:51 - 000226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringMgr.dll
2019-04-11 20:59 - 2019-03-14 09:50 - 001587712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2019-04-11 20:59 - 2019-03-14 09:50 - 001410560 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2019-04-11 20:59 - 2019-03-14 09:50 - 000947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2019-04-11 20:59 - 2019-03-14 09:50 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2019-04-11 20:59 - 2019-03-14 09:50 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2019-04-11 20:59 - 2019-03-14 09:50 - 000507392 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2019-04-11 20:59 - 2019-03-14 03:57 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2019-04-11 20:59 - 2019-03-14 03:57 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2019-04-11 20:59 - 2019-03-14 03:57 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2019-04-11 20:59 - 2019-03-14 03:57 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-04-11 20:59 - 2019-03-14 03:57 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2019-04-06 12:21 - 2019-04-06 12:26 - 000000000 ____D C:\Users\Admin\Desktop\Rezepte
2019-03-31 18:49 - 2019-03-31 18:55 - 000020220 _____ C:\Users\Admin\Desktop\Kopie von Energieverbrauchsplan Margarethenweg 4 Neu .xlsx
2019-03-22 21:32 - 2019-03-06 17:37 - 001616608 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2019-03-22 21:32 - 2019-03-06 14:04 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2019-03-22 21:32 - 2019-03-06 11:04 - 000945464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2019-03-22 21:32 - 2019-03-06 11:03 - 001921848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2019-03-22 21:32 - 2019-03-06 10:33 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2019-03-22 21:32 - 2019-03-06 10:32 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2019-03-22 21:32 - 2019-03-06 10:31 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2019-03-22 21:32 - 2019-03-06 10:31 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2019-03-22 21:32 - 2019-03-06 10:29 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2019-03-22 21:32 - 2019-03-06 10:28 - 001803776 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2019-03-22 21:32 - 2019-03-06 10:25 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys
2019-03-22 21:32 - 2019-03-06 07:50 - 001628160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2019-03-22 21:32 - 2019-03-06 07:50 - 001347584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2019-03-22 21:32 - 2019-02-21 05:26 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2019-03-22 21:32 - 2019-02-16 14:57 - 001048472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2019-03-22 21:32 - 2019-02-16 14:56 - 000549520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
2019-03-22 21:32 - 2019-02-16 14:34 - 004718080 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2019-03-22 21:32 - 2019-02-16 14:34 - 001725952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2019-03-22 21:32 - 2019-02-16 14:30 - 002019840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2019-03-22 21:32 - 2019-02-16 14:24 - 000444176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
2019-03-22 21:32 - 2019-02-16 14:06 - 001530880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2019-03-22 21:32 - 2019-02-16 10:04 - 000193032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2019-03-22 21:32 - 2019-02-16 10:03 - 005625360 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2019-03-22 21:32 - 2019-02-16 10:02 - 000432952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2019-03-22 21:32 - 2019-02-16 10:01 - 000527160 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2019-03-22 21:32 - 2019-02-16 09:31 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll
2019-03-22 21:32 - 2019-02-16 09:30 - 001124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll
2019-03-22 21:32 - 2019-02-16 09:30 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2019-03-22 21:32 - 2019-02-16 09:29 - 001768448 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2019-03-22 21:32 - 2019-02-16 09:29 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2019-03-22 21:32 - 2019-02-16 09:28 - 001668096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll
2019-03-22 21:32 - 2019-02-16 09:28 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2019-03-22 21:32 - 2019-02-16 09:28 - 000705024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2019-03-22 21:32 - 2019-02-16 09:27 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2019-03-22 21:32 - 2019-02-16 09:26 - 001459712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2019-03-22 21:32 - 2019-02-16 09:25 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2019-03-22 21:31 - 2019-03-06 17:14 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2019-03-22 21:31 - 2019-03-06 17:14 - 000522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2019-03-22 21:31 - 2019-03-06 11:16 - 001188000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2019-03-22 21:31 - 2019-03-06 11:07 - 000376120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2019-03-22 21:31 - 2019-03-06 11:03 - 000375608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2019-03-22 21:31 - 2019-03-06 10:31 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2019-03-22 21:31 - 2019-03-06 10:29 - 000736256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2019-03-22 21:31 - 2019-03-06 10:28 - 004937728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2019-03-22 21:31 - 2019-03-06 08:14 - 000785568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2019-03-22 21:31 - 2019-03-06 07:49 - 004516352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2019-03-22 21:31 - 2019-02-16 15:02 - 002871304 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2019-03-22 21:31 - 2019-02-16 14:57 - 002266936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2019-03-22 21:31 - 2019-02-16 14:57 - 000257848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVFileSystemMetadata.dll
2019-03-22 21:31 - 2019-02-16 14:57 - 000231224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
2019-03-22 21:31 - 2019-02-16 14:57 - 000228152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamMap.dll
2019-03-22 21:31 - 2019-02-16 14:57 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamingUX.dll
2019-03-22 21:31 - 2019-02-16 14:57 - 000183608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mavinject.exe
2019-03-22 21:31 - 2019-02-16 14:57 - 000180528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVDllSurrogate.exe
2019-03-22 21:31 - 2019-02-16 14:57 - 000172856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVNice.exe
2019-03-22 21:31 - 2019-02-16 14:57 - 000034104 _____ C:\WINDOWS\system32\SyncAppvPublishingServer.exe
2019-03-22 21:31 - 2019-02-16 14:53 - 001516416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2019-03-22 21:31 - 2019-02-16 14:34 - 000302080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2019-03-22 21:31 - 2019-02-16 14:22 - 001322176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2019-03-22 21:31 - 2019-02-16 14:08 - 000373760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2019-03-22 21:31 - 2019-02-16 12:24 - 023862272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2019-03-22 21:31 - 2019-02-16 12:22 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2019-03-22 21:31 - 2019-02-16 10:03 - 007901392 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2019-03-22 21:31 - 2019-02-16 10:03 - 000510288 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2019-03-22 21:31 - 2019-02-16 10:02 - 005821440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2019-03-22 21:31 - 2019-02-16 10:02 - 003291632 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2019-03-22 21:31 - 2019-02-16 10:02 - 001792712 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2019-03-22 21:31 - 2019-02-16 10:02 - 000705848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2019-03-22 21:31 - 2019-02-16 10:01 - 001285424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2019-03-22 21:31 - 2019-02-16 10:01 - 001209696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2019-03-22 21:31 - 2019-02-16 10:01 - 001098056 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2019-03-22 21:31 - 2019-02-16 10:01 - 001028920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2019-03-22 21:31 - 2019-02-16 10:01 - 000594024 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2019-03-22 21:31 - 2019-02-16 10:01 - 000335672 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2019-03-22 21:31 - 2019-02-16 09:53 - 000443632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2019-03-22 21:31 - 2019-02-16 09:51 - 002479168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2019-03-22 21:31 - 2019-02-16 09:51 - 001584536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2019-03-22 21:31 - 2019-02-16 09:50 - 001130568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2019-03-22 21:31 - 2019-02-16 09:50 - 001011872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2019-03-22 21:31 - 2019-02-16 09:37 - 009084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2019-03-22 21:31 - 2019-02-16 09:36 - 007057408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2019-03-22 21:31 - 2019-02-16 09:34 - 005883904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2019-03-22 21:31 - 2019-02-16 09:33 - 006646784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2019-03-22 21:31 - 2019-02-16 09:31 - 002825728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2019-03-22 21:31 - 2019-02-16 09:31 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2019-03-22 21:31 - 2019-02-16 09:30 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2019-03-22 21:31 - 2019-02-16 09:30 - 001986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2019-03-22 21:31 - 2019-02-16 09:30 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2019-03-22 21:31 - 2019-02-16 09:28 - 003381248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2019-03-22 21:31 - 2019-02-16 09:28 - 002585600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2019-03-22 21:31 - 2019-02-16 09:27 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2019-03-22 21:31 - 2019-02-16 09:27 - 000686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2019-03-22 21:31 - 2019-02-16 09:26 - 001225216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2019-03-22 21:31 - 2019-02-16 09:26 - 000943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2019-03-22 21:31 - 2019-02-16 09:26 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2019-03-22 21:31 - 2019-02-16 09:25 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2019-03-22 21:30 - 2019-03-06 17:36 - 001047352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2019-03-22 21:30 - 2019-03-06 17:17 - 000810496 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2019-03-22 21:30 - 2019-03-06 17:12 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2019-03-22 21:30 - 2019-03-06 14:18 - 000918032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2019-03-22 21:30 - 2019-03-06 11:16 - 000776792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2019-03-22 21:30 - 2019-03-06 11:16 - 000722744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2019-03-22 21:30 - 2019-03-06 11:16 - 000527160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2019-03-22 21:30 - 2019-03-06 11:11 - 000493880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2019-03-22 21:30 - 2019-03-06 11:10 - 000248880 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2019-03-22 21:30 - 2019-03-06 11:04 - 000628024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpx.dll
2019-03-22 21:30 - 2019-03-06 08:15 - 000434488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2019-03-22 21:30 - 2019-03-06 08:14 - 000665224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2019-03-22 21:30 - 2019-03-06 08:14 - 000450872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpx.dll
2019-03-22 21:30 - 2019-03-06 08:13 - 000607248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2019-03-22 21:30 - 2019-02-16 15:02 - 001644040 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2019-03-22 21:30 - 2019-02-16 15:02 - 000808456 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2019-03-22 21:30 - 2019-02-16 15:02 - 000735752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2019-03-22 21:30 - 2019-02-16 15:02 - 000620040 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2019-03-22 21:30 - 2019-02-16 15:02 - 000460296 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2019-03-22 21:30 - 2019-02-16 15:02 - 000322568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2019-03-22 21:30 - 2019-02-16 15:02 - 000147464 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2019-03-22 21:30 - 2019-02-16 15:02 - 000071176 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2019-03-22 21:30 - 2019-02-16 14:57 - 000506088 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2019-03-22 21:30 - 2019-02-16 14:56 - 000540984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2019-03-22 21:30 - 2019-02-16 14:33 - 002194432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ModernAppAgent.dll
2019-03-22 21:30 - 2019-02-16 14:33 - 001786880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2019-03-22 21:30 - 2019-02-16 14:32 - 002051072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2019-03-22 21:30 - 2019-02-16 14:32 - 001127936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplySettingsTemplateCatalog.exe
2019-03-22 21:30 - 2019-02-16 14:31 - 001271808 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2019-03-22 21:30 - 2019-02-16 14:31 - 001186816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.CommonBridge.dll
2019-03-22 21:30 - 2019-02-16 14:31 - 001003520 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2019-03-22 21:30 - 2019-02-16 14:31 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2019-03-22 21:30 - 2019-02-16 14:29 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2019-03-22 21:30 - 2019-02-16 14:25 - 001539896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2019-03-22 21:30 - 2019-02-16 14:25 - 000148784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mavinject.exe
2019-03-22 21:30 - 2019-02-16 14:07 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2019-03-22 21:30 - 2019-02-16 14:07 - 000484352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2019-03-22 21:30 - 2019-02-16 14:06 - 001451520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2019-03-22 21:30 - 2019-02-16 14:06 - 000774656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2019-03-22 21:30 - 2019-02-16 14:04 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2019-03-22 21:30 - 2019-02-16 10:16 - 000511800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2019-03-22 21:30 - 2019-02-16 10:15 - 000505656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2019-03-22 21:30 - 2019-02-16 10:02 - 001934800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2019-03-22 21:30 - 2019-02-16 10:02 - 000413712 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2019-03-22 21:30 - 2019-02-16 10:01 - 000641984 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2019-03-22 21:30 - 2019-02-16 09:57 - 000383288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2019-03-22 21:30 - 2019-02-16 09:50 - 001805648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2019-03-22 21:30 - 2019-02-16 09:28 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2019-03-22 21:30 - 2019-02-16 09:26 - 000935424 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2019-03-22 21:30 - 2019-02-16 08:07 - 000806320 _____ C:\WINDOWS\SysWOW64\locale.nls
2019-03-22 21:30 - 2019-02-16 08:07 - 000806320 _____ C:\WINDOWS\system32\locale.nls
2019-03-22 21:29 - 2019-03-06 17:17 - 000116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2019-03-22 21:29 - 2019-03-06 17:14 - 000488448 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2019-03-22 21:29 - 2019-03-06 14:06 - 000425472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2019-03-22 21:29 - 2019-03-06 11:05 - 000439224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2019-03-22 21:29 - 2019-03-06 11:05 - 000159864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2019-03-22 21:29 - 2019-03-06 11:02 - 000626488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2019-03-22 21:29 - 2019-03-06 10:31 - 000424448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2019-03-22 21:29 - 2019-03-06 10:26 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys
2019-03-22 21:29 - 2019-03-06 10:26 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys
2019-03-22 21:29 - 2019-03-06 08:17 - 000146712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2019-03-22 21:29 - 2019-03-06 07:51 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2019-03-22 21:29 - 2019-02-16 14:31 - 000861184 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2019-03-22 21:29 - 2019-02-16 14:30 - 000877568 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2019-03-22 21:29 - 2019-02-16 14:29 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2019-03-22 21:29 - 2019-02-16 14:06 - 000765952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2019-03-22 21:29 - 2019-02-16 14:02 - 000055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UevAppMonitor.exe
2019-03-22 21:29 - 2019-02-16 13:55 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Common.dll
2019-03-22 21:29 - 2019-02-16 10:15 - 000035640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2019-03-22 21:29 - 2019-02-16 10:05 - 000087800 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostw.exe
2019-03-22 21:29 - 2019-02-16 10:01 - 000161664 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
2019-03-22 21:29 - 2019-02-16 09:51 - 000170952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll
2019-03-22 21:29 - 2019-02-16 09:50 - 000504072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll
2019-03-22 21:29 - 2019-02-16 09:33 - 000054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2019-03-22 21:29 - 2019-02-16 09:33 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2019-03-22 21:29 - 2019-02-16 09:32 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2019-03-22 21:29 - 2019-02-16 09:30 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll
2019-03-22 21:29 - 2019-02-16 09:30 - 000254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppLockerCSP.dll
2019-03-21 20:44 - 2019-03-21 20:44 - 000000000 ____D C:\WINDOWS\Panther
2019-03-19 20:35 - 2019-03-19 20:34 - 000362888 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe

==================== Ein Monat (geänderte) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2019-04-13 12:42 - 2018-06-03 19:16 - 000000000 ____D C:\Users\Admin
2019-04-13 12:38 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-04-13 12:38 - 2017-09-18 23:08 - 000000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2019-04-13 12:25 - 2018-06-07 09:41 - 000000000 ____D C:\Users\Admin\AppData\Local\D3DSCache
2019-04-13 11:41 - 2015-05-14 20:32 - 000000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit
2019-04-13 11:32 - 2018-04-06 19:54 - 000002490 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2019-04-13 11:17 - 2018-04-12 01:38 - 000000000 ___HD C:\Program Files\WindowsApps
2019-04-13 11:17 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-04-13 11:15 - 2018-06-03 18:26 - 000476264 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2019-04-13 11:01 - 2015-10-15 21:30 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2019-04-13 10:54 - 2018-06-03 19:48 - 000004264 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2019-04-13 10:54 - 2017-06-14 14:36 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\Mozilla
2019-04-13 10:52 - 2018-04-06 19:52 - 000000000 ____D C:\Users\Admin\AppData\Local\AVAST Software
2019-04-13 10:45 - 2017-06-17 20:38 - 000000000 ____D C:\ProgramData\NVIDIA
2019-04-13 10:40 - 2018-04-12 01:36 - 000000000 ____D C:\WINDOWS\INF
2019-04-13 10:38 - 2018-06-03 19:04 - 004964928 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-04-13 10:36 - 2018-06-03 19:48 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-04-11 22:23 - 2018-04-11 23:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-04-11 22:21 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\TextInput
2019-04-11 22:21 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2019-04-11 22:20 - 2018-04-12 18:19 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2019-04-11 22:20 - 2018-04-12 01:38 - 000000000 ___RD C:\Program Files\Windows Defender
2019-04-11 22:20 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-04-11 22:18 - 2018-06-03 19:04 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-04-11 22:18 - 2014-03-28 12:30 - 000000000 ____D C:\Users\Admin\AppData\Roaming\SoftGrid Client
2019-04-11 21:46 - 2014-10-18 15:36 - 000000000 ____D C:\Users\Admin\Documents\Dokumente
2019-04-11 21:22 - 2018-04-12 01:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-04-11 20:58 - 2014-03-28 09:54 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-04-11 20:52 - 2014-03-28 09:54 - 131129288 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-04-11 20:37 - 2015-01-06 15:16 - 000000000 ____D C:\ProgramData\LogiShrd
2019-04-11 20:27 - 2014-10-29 23:35 - 000002293 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-04-08 22:11 - 2018-06-03 19:48 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2019-04-07 11:22 - 2018-06-03 19:11 - 002004578 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-04-07 11:22 - 2018-04-12 18:14 - 000854020 _____ C:\WINDOWS\system32\perfh007.dat
2019-04-07 11:22 - 2018-04-12 18:14 - 000191522 _____ C:\WINDOWS\system32\perfc007.dat
2019-04-07 11:06 - 2014-10-18 11:44 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-04-07 10:40 - 2018-11-16 21:03 - 000000000 ____D C:\Program Files\rempl
2019-04-06 13:54 - 2017-06-21 02:09 - 000000000 ____D C:\Users\Bilder
2019-04-06 10:37 - 2018-02-02 02:02 - 000000000 ____D C:\Users\Admin\AppData\Roaming\7DaysToDie
2019-04-06 10:22 - 2019-03-09 14:38 - 000000000 ____D C:\Users\Admin\AppData\Roaming\EasyAntiCheat
2019-04-01 19:51 - 2018-11-14 18:56 - 000835480 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2019-04-01 19:51 - 2018-11-14 18:56 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2019-03-30 05:02 - 2016-12-27 23:51 - 000000000 ____D C:\Users\Admin\AppData\Roaming\discord
2019-03-30 02:49 - 2014-10-18 11:44 - 000001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-03-30 02:49 - 2014-10-18 11:44 - 000000000 ____D C:\ProgramData\Mozilla
2019-03-30 00:56 - 2018-06-03 19:48 - 000003616 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2019-03-30 00:56 - 2018-06-03 19:48 - 000003542 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2019-03-30 00:56 - 2018-06-03 19:48 - 000003392 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2019-03-30 00:53 - 2016-12-27 23:51 - 000000000 ____D C:\Users\Admin\AppData\Local\Discord
2019-03-23 02:20 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\system32\UNP
2019-03-23 02:20 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-03-23 02:20 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\appraiser
2019-03-23 02:19 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\ShellExperiences
2019-03-23 02:19 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2019-03-19 21:22 - 2016-06-18 19:23 - 000000000 ____D C:\Users\Admin\AppData\Local\UnrealEngine
2019-03-19 20:35 - 2018-04-12 01:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2019-03-19 20:34 - 2019-02-13 14:07 - 000249152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys
2019-03-19 20:34 - 2019-01-06 12:16 - 000037320 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2019-03-19 20:34 - 2018-11-05 10:09 - 000042496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2019-03-19 20:34 - 2018-06-03 18:26 - 000476256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys.155514688154601
2019-03-19 20:34 - 2018-06-03 18:26 - 000380160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2019-03-19 20:34 - 2018-06-03 18:26 - 000220632 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2019-03-19 20:34 - 2018-06-03 18:26 - 000205608 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2019-03-19 20:34 - 2018-06-03 18:26 - 000169104 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2019-03-19 20:34 - 2018-06-03 18:26 - 000112520 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2019-03-19 20:34 - 2018-06-03 18:26 - 000088152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2019-03-19 20:33 - 2019-01-17 19:34 - 000254408 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2019-03-19 20:33 - 2019-01-06 12:16 - 000320904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswblog.sys
2019-03-19 20:33 - 2019-01-06 12:16 - 000196304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2019-03-19 20:33 - 2019-01-06 12:16 - 000058168 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2019-03-19 20:33 - 2018-06-03 18:26 - 001034640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-01-06 19:22 - 2017-05-26 20:02 - 000009728 _____ () C:\Users\Admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2018-08-26 16:54 - 2018-08-26 16:54 - 000002316 _____ () C:\Users\Admin\AppData\Local\recently-used.xbel
2015-06-14 20:41 - 2017-06-25 18:38 - 000007605 _____ () C:\Users\Admin\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\dllhost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dllhost.exe => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2018-06-03 19:04

==================== Ende von FRST.txt ============================

Muss es auf 2 Beiträge aufteilen, für einen sind es zu viele Zeichen.

Shuyin 13.04.2019 12:10

Und hier die nächste Log:

Addition:
Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 17.03.2019
durchgeführt von Admin (13-04-2019 12:54:52)
Gestartet von C:\Users\Admin\Downloads
Windows 10 Pro Version 1803 17134.706 (X64) (2018-06-03 17:50:07)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Admin (S-1-5-21-3980298719-2773488239-3045808690-1000 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-3980298719-2773488239-3045808690-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3980298719-2773488239-3045808690-503 - Limited - Disabled)
Gast (S-1-5-21-3980298719-2773488239-3045808690-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3980298719-2773488239-3045808690-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-PDF Split & Merge Version 2.5.0 (Build 168) (HKLM-x32\...\7-PDF Split & Merge_is1) (Version: 7-PDF Split & Merge - Version 2.5.0 (Build 168) - 7-PDF, Germany - Thorsten Hodes)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 19.010.20098 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 27.0.0.124 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Adobe Flash Player 31 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 31.0.0.108 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.3 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.3.1.201 - Adobe Systems, Inc.)
Apple Application Support (32-Bit) (HKLM-x32\...\{5A659BE5-849B-484E-A83B-DCB78407F3A4}) (Version: 7.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{F8060941-C0AB-4BCE-88AC-F2FDA2E9F286}) (Version: 7.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5FA8C4BE-8C74-4B9C-9B49-EBF759230189}) (Version: 12.1.0.25 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version:  - Ubisoft)
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 19.3.2369 - AVAST Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 73.0.1270.86 - Die Avast Secure Browser-Autoren)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Big Fish: Game Manager (HKLM-x32\...\BFGC) (Version: 3.3.0.2 - )
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Brother MFL-Pro Suite MFC-290C (HKLM-x32\...\{48D082B9-18F6-4426-AFAC-8B6A3E7021B1}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5931 - CDBurnerXP)
chip 1-click download service (HKLM-x32\...\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}) (Version: 3.6.9.0 - Chip Digital GmbH) <==== ACHTUNG
CopyTrans Control Center deinstallieren (HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\CopyTrans Suite) (Version: 4.017 - WindSolutions)
CrystalDiskInfo 8.0.0 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 8.0.0 - Crystal Dew World)
Curse Client (HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Dark Parables: Goldlöckchen und der Stern der Wünsche Sammleredition (HKLM-x32\...\BFG-Dark Parables - Goldloeckchen und der Stern der Wuensche Sammleredition) (Version:  - )
Dawn of Hope: Skyline Abenteuer Sammleredition (HKLM-x32\...\BFG-Dawn of Hope - Skyline Abenteuer Sammleredition) (Version:  - )
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.69.43.024017 - Electronic Arts Inc.)
Discord (HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Discord) (Version: 0.0.305 - Discord Inc.)
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 416.16 - NVIDIA Corporation) Hidden
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 19.1 - Thüringer Landesfinanzdirektion)
Epic Games Launcher (HKLM-x32\...\{AF7881ED-41D7-4ECA-8C7C-AE10DFA0E489}) (Version: 1.1.151.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Free YouTube To MP3 Converter (HKLM-x32\...\Free YouTube To MP3 Converter_is1) (Version: 4.0.4.1029 - DVDVideoSoft Ltd.)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 73.0.3683.103 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.7 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Grim Tales: Fäden des Schicksals (HKLM-x32\...\BFG-Grim Tales - Faeden des Schicksals) (Version:  - )
Gwent (HKLM-x32\...\1971477531_is1) (Version: 0.9.24.3.432 - GOG.com)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
iCloud (HKLM\...\{05D97028-FD26-4A3D-BADC-D1CA2E9F1214}) (Version: 7.10.0.9 - Apple Inc.)
Immortal Love: Wunder haben einen Preis (HKLM-x32\...\BFG-Immortal Love - Wunder haben einen Preis) (Version:  - )
IrfanView 4.50 (32-bit) (HKLM-x32\...\IrfanView) (Version: 4.50 - Irfan Skiljan)
iTunes (HKLM\...\{C704C598-39D0-4B12-BBFA-FF6D43C95BFD}) (Version: 12.9.3.3 - Apple Inc.)
Java 8 Update 201 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180201F0}) (Version: 8.0.2010.9 - Oracle Corporation)
Last Year: The Nightmare (HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\478637764565401630) (Version:  - )
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Logitech Gaming Software 8.98 (HKLM\...\Logitech Gaming Software) (Version: 8.98.218 - Logitech Inc.)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
Malwarebytes Anti-Exploit version 1.12.1.147 (HKLM\...\Malwarebytes Anti-Exploit_is1) (Version: 1.12.1.147 - Malwarebytes)
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.6122.5000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.6129.5001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\OneDriveSetup.exe) (Version: 18.151.0729.0012 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Might & Magic Heroes VI (HKLM-x32\...\{745D37C2-26F4-4B65-BA13-F9840EBFA75B}) (Version: 1.8 - Ubisoft)
Might and Magic Heroes VII (HKLM-x32\...\Uplay Install 1176) (Version:  - Ubisoft)
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 66.0.2 (x64 de) (HKLM\...\Mozilla Firefox 66.0.2 (x64 de)) (Version: 66.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 54.0 - Mozilla)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.11 - NVIDIA Corporation) Hidden
NVIDIA 3D Vision Controller-Treiber 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 416.16 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 416.16 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.15.0.164 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.15.0.164 - NVIDIA Corporation)
NVIDIA Grafiktreiber 416.16 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 416.16 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.37.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.37.5 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.18.0907 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.18.0907 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 10.5.21.179 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.118.2.33 - Overwolf Ltd.)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)
PDF Architect 2 View Module (HKLM-x32\...\{D691E998-CF53-4F6C-AC20-E4284660E0E7}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.140.248 - Google, Inc.)
PokerStars.net (HKLM-x32\...\PokerStars.net) (Version:  - PokerStars.net)
Queen's Quest III: Das Ende der Dämmerung Sammleredition (HKLM-x32\...\BFG-Queens Quest III - Das Ende der Daemmerung Sammleredition) (Version:  - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.2.0 - Rockstar Games)
Spotify (HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Spotify) (Version: 1.0.45.186.g3b5036d6 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Syncios 6.1.4 (HKLM-x32\...\Syncios) (Version: 6.1.4 - Anvsoft)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Forgotten Fairytales: Reise nach Spectra Sammleredition (HKLM-x32\...\BFG-The Forgotten Fairytales - Reise nach Spectra Sammleredition) (Version:  - )
The Walking Dead (HKLM-x32\...\{067A7675-CF5E-456D-AB72-615E3BBB34CE}) (Version:  - Telltale Games)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.31.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Free DLC program (16 DLC) (HKLM-x32\...\Free DLC program (16 DLC)_is1) (Version: 1.31.0.0 - GOG.com)
TP-LINK TL-WN821N Driver (HKLM-x32\...\{26B52E5B-1620-4676-9B46-B6C56B8105CE}) (Version: 1.2.1 - TP-LINK)
Twitch (HKLM-x32\...\{1F2611FB-6F69-4AA8-BECD-243BD8CB45F3}) (Version: 6.0.0.0 - Twitch Interactive, Inc.)
Twitch (HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 8.0.0 - Twitch Interactive, Inc.)
Unity Web Player (x64) (All users) (HKLM\...\UnityWebPlayer) (Version: 4.6.6f2 - Unity Technologies ApS)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{B2E25355-C24E-4E7D-8AD3-455D59810838}) (Version: 2.57.0.0 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 4.8 - Ubisoft)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.70 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
YTD Video Downloader 5.9.8 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 5.9.8 - GreenTree Applications SRL) <==== ACHTUNG

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3980298719-2773488239-3045808690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-3980298719-2773488239-3045808690-1000_Classes\CLSID\{67dbd5b3-4935-49a1-b0d7-9ab53310d9f3}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Windows -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2019-01-15] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-10-02] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-19] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0AB300DE-58A7-47F8-8074-7559C251D8EC} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe (Apple Inc. -> Apple Inc.)
Task: {0E44159A-B6A3-4763-BD24-EFB1A2B9FED7} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {0F3A31FE-999B-45B6-BCF1-A2E11C848C43} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe
Task: {107182C3-8147-4025-88D7-670683E20D95} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {1375F71A-1645-4DD7-B030-D53C5BD97B35} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {170B5C22-43B1-41C3-83EC-71CDCBD71AA0} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {19C3820F-2251-42EA-8923-D222D5E75AF7} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {1AEEFE7D-67BA-40E4-855D-76EFCAB3FA65} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {1B3E7F41-4314-4A0F-9012-EF68BDBC7DCA} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {1B9A6809-903D-4080-8CE5-0AF47B49BE4C} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1EA70B72-BE39-43C0-AED7-8165831ED1E3} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {1FF6ABF2-F76F-4C3A-87B3-6A3E112EFC55} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {2AAE79E8-D40D-4984-8329-653FF53B2D38} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2ADAC3BB-5C3E-4CDE-880D-288FD6BE7846} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2CBD74C7-022A-42AB-BB79-73F444BC2411} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {33B9A822-B026-4E5D-AAA4-5DFB5922E92D} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {34DE784D-8ECA-4B16-8B59-B89FF11D41EE} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {356D5C7D-F6E4-4C30-ACDC-ECF989B6AEBE} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {37C60830-CFAD-416A-AB94-39A85FDF020E} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {3B464C4B-9206-4429-9282-7D8D5FCDDC30} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {48A6D12D-CB15-4A78-8ECA-ACC4780AA6E1} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {4B19C0B0-B42C-4024-BD24-2F97BE2C4C93} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_108_pepper.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {4B9CE7B3-D657-4B6E-8D9E-79C453EF9B53} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {599F6115-3848-4506-ADFE-755BEAE57B63} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5B74F499-7615-431A-B431-6AFE54B1D07B} - System32\Tasks\Microsoft\Windows\Flighting\FeatureConfig\ReconcileFeatures
Task: {5C5ED77C-D670-4F50-BEB3-079E73154D6E} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {675FEF00-9230-40D2-B8EB-69A15023206D} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6899DB0F-CCE5-4A91-AF96-070A7B91A6FB} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {68C5E84E-2672-4E80-83DC-844618DAFE85} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe (Overwolf Ltd -> Overwolf LTD)
Task: {6B845EAF-9AF6-46FC-BD3F-05DB5E51A72C} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {754B69B9-1E68-4B7C-9BFA-48921B292EBB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {7B323C2F-2395-4352-9BD2-DA59A144E8C8} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7D7BB82A-6F33-4B0F-9C10-660176BA03FE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {815F918D-5475-4B87-B373-049CFE77AA42} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {8FD5B74B-04A3-4DE1-963C-9FAEE7E9CF26} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {92046BE7-D25B-4626-811C-1A0361FB1EBB} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {923EE09C-72F5-49E4-926F-AAC343A143A1} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {9D0B5CC9-4A1C-44AF-87F8-4C3CBFDAA43F} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {A30755A2-9AC0-409F-8B26-511EE4EF2D13} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {ADD0F212-78DC-4538-88B3-BDD1B31EDB46} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {AF033D66-CAD4-4DCD-A35D-0A2070C4FD80} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B17206E4-B922-4A71-983F-3F1CF98CD95F} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B3D05A67-C139-4AFA-A440-3FDDAEF08C19} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {B4D96B81-2207-4323-9D85-2118986DECDC} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {B6A43785-883B-4B87-A697-23A102EDE488} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B6A69130-14BA-4C8B-948E-3310E61FC14D} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {B9979F0E-FB70-4FDA-A0BF-A04C98664A3D} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C15F91CC-8758-4733-9DF5-5D0CBB4489D7} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C6FC9D0D-A68B-4E32-84C8-1EBBDB06507B} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {CA565177-38BD-4580-888F-50C32B16F4BE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D0F4103B-3B6C-4BE1-882E-167B236A62DA} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {D31B1EB3-6F59-4788-8DEB-84C402FC5086} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG
Task: {D35A134F-04F2-4BAA-ACBB-68C4D1A357D2} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {D8603055-060E-43FE-80CB-0F5F1CB4C054} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {E2BE6555-DB97-4397-86F8-2CFB6B90DF76} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe (Apple Inc. -> Apple Inc.)
Task: {EB97B95A-7EDC-4552-8910-E9A74DFFC713} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F121BE7E-541E-427E-ABFE-75E989AEBBB6} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {F2C94E47-53E3-4805-8118-33F61802E181} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F3C45966-B426-4CDA-ABB4-6A3E8B5FE800} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {F650C222-2088-4972-B60A-1C93DF3B8084} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F667076C-F20F-44AE-B9CA-55550CB32C6D} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {F67357A2-A6BC-4E0A-93CE-28149FBBA692} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {FA000C06-16AC-480D-A1D3-811D72F59054} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FB06EF73-8322-4FA0-AA18-6FF249D1265D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-11-02 18:45 - 2015-10-29 19:10 - 000382312 _____ (Digital Wave Ltd -> Digital Wave Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
2017-08-18 10:41 - 2017-08-18 10:41 - 000077824 _____ () [Datei ist nicht signiert] C:\Program Files\Logitech Gaming Software\LAClient\zlib.dll
2017-08-18 10:41 - 2017-08-18 10:41 - 000355840 _____ (The cURL library, hxxp://curl.haxx.se/) [Datei ist nicht signiert] C:\Program Files\Logitech Gaming Software\LAClient\LIBCURL.dll
2017-08-18 10:41 - 2017-08-18 10:41 - 000144896 _____ () [Datei ist nicht signiert] C:\Program Files\Logitech Gaming Software\LAClient\libssh2.dll
2017-08-18 10:41 - 2017-08-18 10:41 - 000416627 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Logitech Gaming Software\LAClient\SSLEAY32.dll
2017-08-18 10:41 - 2017-08-18 10:41 - 002286747 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Logitech Gaming Software\LAClient\LIBEAY32.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000958312 _____ (Digital Wave Ltd -> Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\MSVCR120.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000442728 _____ (Digital Wave Ltd -> Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\MSVCP120.dll
2015-11-02 18:45 - 2015-10-29 19:10 - 000196968 _____ (Digital Wave Ltd -> DVDVideoSoft Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\updhelperlib.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000110952 _____ (Digital Wave Ltd -> ) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000253800 _____ (Digital Wave Ltd -> ) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\collector.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 001160552 _____ (Digital Wave Ltd -> The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\LIBEAY32.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000125288 _____ (Digital Wave Ltd -> DVDVideoSoft Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\tier0.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000104296 _____ (Digital Wave Ltd -> ) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000020328 _____ (Digital Wave Ltd -> ) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000044392 _____ (Digital Wave Ltd -> ) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000286056 _____ (Digital Wave Ltd -> The cURL library, hxxp://curl.haxx.se/) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\libcurl.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000282472 _____ (Digital Wave Ltd -> DVDVideoSoft Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\dlmgr.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000295272 _____ (Digital Wave Ltd -> ) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\stat.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000272232 _____ (Digital Wave Ltd -> The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\SSLEAY32.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000771432 _____ (Digital Wave Ltd -> Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\MSVCR100.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:0B9DC6BB [190]
AlternateDataStreams: C:\ProgramData\TEMP:195E8317 [180]
AlternateDataStreams: C:\ProgramData\TEMP:20C00621 [225]
AlternateDataStreams: C:\ProgramData\TEMP:2187A2BB [219]
AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F [134]
AlternateDataStreams: C:\ProgramData\TEMP:2F947175 [170]
AlternateDataStreams: C:\ProgramData\TEMP:37AEC263 [240]
AlternateDataStreams: C:\ProgramData\TEMP:44A0FEC3 [468]
AlternateDataStreams: C:\ProgramData\TEMP:46CDAE37 [245]
AlternateDataStreams: C:\ProgramData\TEMP:4C235DA4 [237]
AlternateDataStreams: C:\ProgramData\TEMP:4EE36485 [242]
AlternateDataStreams: C:\ProgramData\TEMP:5167543E [238]
AlternateDataStreams: C:\ProgramData\TEMP:565D4B03 [241]
AlternateDataStreams: C:\ProgramData\TEMP:5C188F78 [220]
AlternateDataStreams: C:\ProgramData\TEMP:5E7551D4 [221]
AlternateDataStreams: C:\ProgramData\TEMP:667D4A95 [166]
AlternateDataStreams: C:\ProgramData\TEMP:7F477B0D [232]
AlternateDataStreams: C:\ProgramData\TEMP:87731E5E [175]
AlternateDataStreams: C:\ProgramData\TEMP:9E3D44B7 [388]
AlternateDataStreams: C:\ProgramData\TEMP:A19DFC74 [189]
AlternateDataStreams: C:\ProgramData\TEMP:A1EB942C [494]
AlternateDataStreams: C:\ProgramData\TEMP:B504E4C2 [169]
AlternateDataStreams: C:\ProgramData\TEMP:B61767F5 [177]
AlternateDataStreams: C:\ProgramData\TEMP:B6E58523 [187]
AlternateDataStreams: C:\ProgramData\TEMP:B74BD6BF [90]
AlternateDataStreams: C:\ProgramData\TEMP:B7D1FD90 [223]
AlternateDataStreams: C:\ProgramData\TEMP:BB6E0C06 [244]
AlternateDataStreams: C:\ProgramData\TEMP:C00C7190 [165]
AlternateDataStreams: C:\ProgramData\TEMP:C1616CD9 [222]
AlternateDataStreams: C:\ProgramData\TEMP:C453123E [246]
AlternateDataStreams: C:\ProgramData\TEMP:C50DBD80 [220]
AlternateDataStreams: C:\ProgramData\TEMP:C8E3A625 [442]
AlternateDataStreams: C:\ProgramData\TEMP:CF82DADF [224]
AlternateDataStreams: C:\ProgramData\TEMP:CFE660B9 [227]
AlternateDataStreams: C:\ProgramData\TEMP:D6A43EB0 [171]
AlternateDataStreams: C:\ProgramData\TEMP:DFB12512 [237]
AlternateDataStreams: C:\ProgramData\TEMP:EF123AF6 [227]
AlternateDataStreams: C:\ProgramData\TEMP:F176B6C6 [173]
AlternateDataStreams: C:\Users\Public\AppData:CSM [482]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\localhost -> localhost

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2019-01-05 11:57 - 000000030 _____ C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1      localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\system32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Windows Live\Shared;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Admin\Pictures\Bilder\1280x1024.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Keine Datei)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.

HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "LWS"
HKLM\...\StartupApproved\Run32: => "Syncios device service"
HKLM\...\StartupApproved\Run32: => "BrMfcWnd"
HKLM\...\StartupApproved\Run32: => "ControlCenter3"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\StartupFolder: => "CurseClientStartup.ccip"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "GalaxyClient"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "iCloudServices"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "iCloudDrive"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "iCloudPhotos"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "Overwolf"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [UDP Query User{91586618-946C-4FB4-91CD-5005643AEF07}C:\program files (x86)\heroes of the storm\versions\base65285\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base65285\heroesofthestorm_x64.exe Keine Datei
FirewallRules: [TCP Query User{D5CE599F-BC72-4139-9B92-8EE7940047AF}C:\program files (x86)\heroes of the storm\versions\base65285\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base65285\heroesofthestorm_x64.exe Keine Datei
FirewallRules: [{FA0E4702-4093-4E15-B270-2626F46D64E7}] => (Allow) C:\Games\Steam\SteamApps\common\The Forest\TheForestVR.exe () [Datei ist nicht signiert]
FirewallRules: [{DAA29CEF-0243-4B9C-A15D-92C32AD4DF69}] => (Allow) C:\Games\Steam\SteamApps\common\The Forest\TheForestVR.exe () [Datei ist nicht signiert]
FirewallRules: [{97CC336C-6B98-408F-90D1-3241C64BB954}] => (Allow) C:\Games\Steam\SteamApps\common\The Forest\TheForest.exe () [Datei ist nicht signiert]
FirewallRules: [{E2E288BC-973B-4883-9CE9-FFDD0D83BA41}] => (Allow) C:\Games\Steam\SteamApps\common\The Forest\TheForest.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{5B6B753B-9851-43FC-BC23-13DF59657DC4}C:\games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{8D0AB38E-A89C-4DD6-8130-453DC5962439}C:\games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{248D0268-6379-41DF-9A1F-D50FBAE1017E}C:\games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{9BD958E7-D77F-4F5D-80F4-0B90BB678079}C:\games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{CD1D4941-86C2-4582-8E72-6910520AB4F0}C:\games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{E274FBF5-D677-40AD-973B-A339F7EDDFC2}C:\games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{624C8525-1D3E-464F-8F65-85A88E9BB9C3}C:\games\steam\steamapps\common\7 days to die rmod\7daystodie.exe] => (Allow) C:\games\steam\steamapps\common\7 days to die rmod\7daystodie.exe Keine Datei
FirewallRules: [TCP Query User{8664D5EB-CEE1-47EE-8A1A-2F9D79A5AD3E}C:\games\steam\steamapps\common\7 days to die rmod\7daystodie.exe] => (Allow) C:\games\steam\steamapps\common\7 days to die rmod\7daystodie.exe Keine Datei
FirewallRules: [{FC1CA88F-E491-4082-A011-A244340BCB83}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4EBA2AA2-1BE7-4135-9ED7-FB8D445CED42}] => (Allow) C:\Games\Steam\SteamApps\common\FINAL FANTASY IX\FF9_Launcher.exe () [Datei ist nicht signiert]
FirewallRules: [{0AFBA540-3B10-4BF5-A1E6-7BD15C05F813}] => (Allow) C:\Games\Steam\SteamApps\common\FINAL FANTASY IX\FF9_Launcher.exe () [Datei ist nicht signiert]
FirewallRules: [{141590C2-3110-44FD-9306-012C5DB79128}] => (Allow) C:\Games\Steam\SteamApps\common\FINAL FANTASY VII\FF7_Launcher.exe (Square Enix Ltd. -> )
FirewallRules: [{934CB9CE-FF9C-4407-86B3-034868175EDD}] => (Allow) C:\Games\Steam\SteamApps\common\FINAL FANTASY VII\FF7_Launcher.exe (Square Enix Ltd. -> )
FirewallRules: [UDP Query User{FE829D35-C82F-4921-9A82-5916D9C62894}C:\games\steam\steamapps\common\7 days to die\7daystodie.exe] => (Allow) C:\games\steam\steamapps\common\7 days to die\7daystodie.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{976FB3A8-03BC-48AC-94E4-FB4F2C6F4FD6}C:\games\steam\steamapps\common\7 days to die\7daystodie.exe] => (Allow) C:\games\steam\steamapps\common\7 days to die\7daystodie.exe () [Datei ist nicht signiert]
FirewallRules: [{1EB35C04-BC98-4557-A713-3525A67FF6CF}] => (Allow) C:\Games\Steam\SteamApps\common\7 Days To Die\7dLauncher.exe () [Datei ist nicht signiert]
FirewallRules: [{0299E3D2-12F3-430A-AF82-20CA25A6B9EF}] => (Allow) C:\Games\Steam\SteamApps\common\7 Days To Die\7dLauncher.exe () [Datei ist nicht signiert]
FirewallRules: [{7CD05211-4599-40AF-A989-6CB1FBF295EA}] => (Allow) C:\Games\Ubisoft Game Launcher\games\Assassin's Creed IV Black Flag\AC4BFMP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{BF45EB9C-D3D0-45CD-B8E3-9380EB8C103F}] => (Allow) C:\Games\Ubisoft Game Launcher\games\Assassin's Creed IV Black Flag\AC4BFMP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{1C098A03-26A5-45C7-BA6E-D44E62936CBB}] => (Allow) C:\Games\Ubisoft Game Launcher\games\Assassin's Creed IV Black Flag\AC4BFSP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{CC31B6E3-2EA6-4601-BD57-347AC66A3A6D}] => (Allow) C:\Games\Ubisoft Game Launcher\games\Assassin's Creed IV Black Flag\AC4BFSP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{5155D4E5-454D-4015-B993-606F65F2E8A5}] => (Allow) C:\Games\Steam\SteamApps\common\Crystals of Time\Crystals of Time.exe () [Datei ist nicht signiert]
FirewallRules: [{4F2EE6D9-2457-4800-AA58-00DBF751E097}] => (Allow) C:\Games\Steam\SteamApps\common\Crystals of Time\Crystals of Time.exe () [Datei ist nicht signiert]
FirewallRules: [{D295C900-9F94-4D5C-BE1F-8379766657E6}] => (Allow) LPort=1900
FirewallRules: [{48112717-B1BD-4207-87EF-2AC1540B1B0A}] => (Allow) LPort=2869
FirewallRules: [{FEE46130-1FC0-4235-9C20-0CDBDA4BAD4D}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{8D483CB3-2E14-42B8-ADFF-F1170DC6F1DA}C:\program files (x86)\gog galaxy\games\gwent\gwent.exe] => (Allow) C:\program files (x86)\gog galaxy\games\gwent\gwent.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{B31FE111-8414-4424-BDA6-48A64CD64904}C:\program files (x86)\gog galaxy\games\gwent\gwent.exe] => (Allow) C:\program files (x86)\gog galaxy\games\gwent\gwent.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{AD04857A-5FDB-4DEF-8671-D8DCC97C80B8}C:\users\admin\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\admin\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{6EA372A1-052E-4E88-AE19-219F942CEF38}C:\users\admin\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\admin\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{0449A45F-4E07-40EE-A04C-43ACB40601D4}C:\games\steam\steamapps\common\h1z1 king of the kill\h1z1.exe] => (Allow) C:\games\steam\steamapps\common\h1z1 king of the kill\h1z1.exe Keine Datei
FirewallRules: [TCP Query User{E3CA4442-9822-4696-80EE-DC01FBFCF9EC}C:\games\steam\steamapps\common\h1z1 king of the kill\h1z1.exe] => (Allow) C:\games\steam\steamapps\common\h1z1 king of the kill\h1z1.exe Keine Datei
FirewallRules: [{00FDF1E6-76AA-4724-A42A-6AC3E95C0895}] => (Allow) C:\Games\Steam\SteamApps\common\H1Z1 King of the Kill\LaunchPad.exe Keine Datei
FirewallRules: [{024FE7F4-B110-49B0-9C36-44078106AF47}] => (Allow) C:\Games\Steam\SteamApps\common\H1Z1 King of the Kill\LaunchPad.exe Keine Datei
FirewallRules: [{7B196BEB-4F81-4A74-A604-97E336CB2472}] => (Allow) C:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe Keine Datei
FirewallRules: [{256457AB-CE0B-445C-8B8B-39827A55BCCD}] => (Allow) C:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe Keine Datei
FirewallRules: [{562DB2B3-2F4C-490E-89B7-C636E35E4D52}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [UDP Query User{3E7910F9-7889-4892-A86F-7F3955D1658D}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [TCP Query User{1C761363-3E1D-4E0B-82ED-608013A75D78}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [{3C72DBCA-C707-41BB-9DA9-BFEE6C0785AE}] => (Allow) C:\Games\Steam\SteamApps\common\Fallout 4\Fallout4Launcher.exe (Bethesda Softworks) [Datei ist nicht signiert]
FirewallRules: [{4E55F47E-A945-478A-8982-814323AC762D}] => (Allow) C:\Games\Steam\SteamApps\common\Fallout 4\Fallout4Launcher.exe (Bethesda Softworks) [Datei ist nicht signiert]
FirewallRules: [{A0441FB0-512F-43F5-8429-7F683074CAD1}] => (Allow) C:\Games\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{32377C80-65D0-4749-A996-43E29E4E9E39}] => (Allow) C:\Games\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{658706B1-5E77-4784-BDBB-E1E75C7DEAFA}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [{5CE650F1-83E8-4644-8E8A-56FE5BBC48BA}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [{E08A2929-BA62-4E6A-A781-87C24E09BF2A}] => (Allow) C:\Games\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{EF1F2960-3FCE-475F-B926-7280BE96D0F0}] => (Allow) C:\Games\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [TCP Query User{CF335F13-7058-4729-8886-899D336D0205}C:\games\heroes of might&magic vi\might & magic heroes vi.exe] => (Allow) C:\games\heroes of might&magic vi\might & magic heroes vi.exe (Limbic Entertainment GmbH -> Black Hole Entertainment)
FirewallRules: [UDP Query User{53DBFE2B-5996-4ACF-AB26-A00AF7BDF7EF}C:\games\heroes of might&magic vi\might & magic heroes vi.exe] => (Allow) C:\games\heroes of might&magic vi\might & magic heroes vi.exe (Limbic Entertainment GmbH -> Black Hole Entertainment)
FirewallRules: [{9C846C10-3A01-4AB8-A8DD-2257E3527AEC}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [{ABAD258C-041A-48A6-819C-BF98267AE0B1}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [{7016414A-AF80-44B4-8983-5052769EC3A5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{B1CA6F07-71E2-42D0-9418-569FA5C3CAEE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{E7395505-38F3-4F95-A834-490481A10ADA}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{A75426AD-0FCD-4A2D-BFA9-6214CF9A1069}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F9FA37E8-3621-461C-909E-3859BB75D189}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Warframe.exe Keine Datei
FirewallRules: [{A2A3DE87-21DD-4E02-AD9F-D0C542EA1EC9}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Warframe.x64.exe Keine Datei
FirewallRules: [{C6B395B9-7470-490C-92C8-85CCD3A9B385}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Warframe.exe Keine Datei
FirewallRules: [{5456823E-7266-40FC-8988-CBE970066E0B}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Warframe.x64.exe Keine Datei
FirewallRules: [{353DEE2A-3DDF-42EB-98E9-0A8BF4174710}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Tools\Launcher.exe Keine Datei
FirewallRules: [{2B9A08FE-8573-4078-AB8F-3106E29CC397}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe Keine Datei
FirewallRules: [{1D18CF12-94F0-4089-8730-2CCE253A3132}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Warframe.exe Keine Datei
FirewallRules: [{4B1FB6A7-B75F-4123-ACF7-432579ED04A9}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Warframe.x64.exe Keine Datei
FirewallRules: [{2DE751CA-F2D1-4371-A5D1-CD7850653B87}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Warframe.exe Keine Datei
FirewallRules: [{8ABD0BD0-9291-4DA3-843B-0B6C8A01AFE8}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Warframe.x64.exe Keine Datei
FirewallRules: [{D2128E1F-218B-4669-933C-0A4BD743E8D8}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Tools\Launcher.exe Keine Datei
FirewallRules: [{00A75919-3561-421B-B9B2-88D57941DE82}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe Keine Datei
FirewallRules: [{7E28241B-9897-465C-96DD-5D47626AFCF7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{99CE67B2-299D-4383-8ED3-E81C424FFAAD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe Keine Datei
FirewallRules: [{96E87DDA-14EA-435D-8490-E381618FCB42}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{853B66C9-BECE-4644-8BCD-FA4D1BF3D193}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{25D7E928-2D0E-4AD2-A4E8-B119C0CFF407}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4474F81F-895B-468B-9D6B-38B7F51F4FCF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F5CC905F-94A2-47C7-99E2-DFC590DF4590}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{242D3480-2E50-4611-8377-FBCDF161FE83}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C2EFB4F7-A5C5-47D0-9ECE-3583F257D105}] => (Allow) C:\Games\Ubisoft Game Launcher\games\Might and Magic Heroes VII\Binaries\Win64\MMH7Game-Win64-Shipping.exe (Limbic Entertainment GmbH -> Ubisoft, Inc.)
FirewallRules: [TCP Query User{F0B91633-CF64-4335-8076-1D0A3C31C3F9}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [UDP Query User{9E37AF27-DFB0-4E2B-AF58-654A0358F9BC}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [{4FA504A8-9F19-487B-9903-54840BF074EA}] => (Allow) C:\Games\Steam\SteamApps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{7CED4406-4925-4499-AAFE-7225FB94C513}] => (Allow) C:\Games\Steam\SteamApps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [TCP Query User{D745747A-D81B-4D5D-8763-343B0AC5ECB5}C:\games\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) C:\games\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{9ACED6CD-0432-4F69-B203-91E4FDDA998F}C:\games\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) C:\games\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{43D81546-74C9-4539-B147-27729F587138}] => (Allow) C:\Games\Steam\SteamApps\common\The Binding Of Isaac\Isaac.exe (Edmund Mcmillen & Florian Himsl ) [Datei ist nicht signiert]
FirewallRules: [{A3255493-8D63-4FD3-8653-ACC78386C264}] => (Allow) C:\Games\Steam\SteamApps\common\The Binding Of Isaac\Isaac.exe (Edmund Mcmillen & Florian Himsl ) [Datei ist nicht signiert]
FirewallRules: [{826FF667-2940-47A8-9020-CA550630FD96}] => (Allow) C:\Games\Steam\SteamApps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe (Valve Corp. -> Irrational Games)
FirewallRules: [{80BA1865-ED77-41BA-A3B9-0A339D35D224}] => (Allow) C:\Games\Steam\SteamApps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe (Valve Corp. -> Irrational Games)
FirewallRules: [{B01585EB-6762-42C3-A9B7-CD9F16F54C8F}] => (Allow) C:\Program Files (x86)\Anvsoft\Syncios\pdt_syncios.exe (Anvsoft Inc. -> Syncios Data Transfer)
FirewallRules: [{A257D034-51A6-4DFC-9498-36641310CD66}] => (Allow) C:\Games\Steam\SteamApps\common\Day of the Tentacle Remastered\Dott.exe (Double Fine Productions) [Datei ist nicht signiert]
FirewallRules: [{26AB552B-8543-437E-8069-879489736C61}] => (Allow) C:\Games\Steam\SteamApps\common\Day of the Tentacle Remastered\Dott.exe (Double Fine Productions) [Datei ist nicht signiert]
FirewallRules: [{3B16FB3A-391E-4552-B2F7-32CAAA2134DF}] => (Allow) C:\Games\Steam\SteamApps\common\WormsRevolution\WormsRevolution.exe () [Datei ist nicht signiert]
FirewallRules: [{F1671749-D48E-435D-9B99-3AF0CF4B46AD}] => (Allow) C:\Games\Steam\SteamApps\common\WormsRevolution\WormsRevolution.exe () [Datei ist nicht signiert]
FirewallRules: [{6C27287A-7653-4E67-992D-B0DC92C0E6D5}] => (Allow) C:\Games\GTA V\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{58717B16-5A58-4F3C-BA6C-988E72C37A07}] => (Allow) C:\Games\GTA V\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{91221136-E375-41C3-993C-7EE1EA9BA9F9}] => (Allow) C:\Games\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{8D1EDAD2-F66D-4C72-8F08-37A0893B9938}] => (Allow) C:\Games\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{9D1B5246-E552-4CF1-A29F-68FD575FA80C}] => (Allow) C:\Games\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe (Wildcard Properties LLC -> Epic Games, Inc.)
FirewallRules: [{3A5FB783-3438-4539-A90C-6934D05B789D}] => (Allow) C:\Games\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe (Wildcard Properties LLC -> Epic Games, Inc.)
FirewallRules: [{EF0C8522-B0EE-4997-B39B-A22D457F8899}] => (Allow) C:\Games\Steam\SteamApps\common\Shadowrun Returns\Shadowrun.exe () [Datei ist nicht signiert]
FirewallRules: [{B7F1DADB-BBA4-4886-AB02-A55549A50CD9}] => (Allow) C:\Games\Steam\SteamApps\common\Shadowrun Returns\Shadowrun.exe () [Datei ist nicht signiert]
FirewallRules: [{2DF31FFC-C921-418D-92D5-18E647E6597F}] => (Allow) C:\Games\Steam\SteamApps\common\Age2HD\Launcher.exe (TODO: <Company name>) [Datei ist nicht signiert]
FirewallRules: [{727C60AF-A5ED-44A2-A926-4D8A254B5E95}] => (Allow) C:\Games\Steam\SteamApps\common\Age2HD\Launcher.exe (TODO: <Company name>) [Datei ist nicht signiert]
FirewallRules: [{3B403097-72BA-47FD-A84A-DF766DEF25F8}] => (Allow) C:\Games\Steam\SteamApps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox_BE.exe (FUNCOM OSLO AS -> BattlEye Innovations)
FirewallRules: [{C73D6480-044C-4742-85A1-A73EE7CD89B2}] => (Allow) C:\Games\Steam\SteamApps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox_BE.exe (FUNCOM OSLO AS -> BattlEye Innovations)
FirewallRules: [{6DFDAC77-8A9D-4271-B2D6-7AB862050D28}] => (Allow) C:\Games\Steam\SteamApps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox.exe (FUNCOM OSLO AS -> Funcom Oslo AS)
FirewallRules: [{94450024-0574-4010-9D81-5BC5ABBB5A1A}] => (Allow) C:\Games\Steam\SteamApps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox.exe (FUNCOM OSLO AS -> Funcom Oslo AS)
FirewallRules: [{9DDA2956-262B-4D4C-87EE-DFDC1F381227}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{4F320E5F-6D9A-425C-A0BE-0ACDEA79B7F3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{BE344FE6-965E-4491-9B2B-E9D4A492179A}] => (Allow) C:\Games\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{6C7A775B-7FA3-4F03-B478-085D550B2314}] => (Allow) C:\Games\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{4BF46722-1CBA-4D6F-BFAC-6E604B02FE70}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F1722F8B-24B7-4EEC-9EA6-2CC08956A657}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{FBC0754F-99BC-4766-9D95-CBB32BDB39C5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{247CE6C0-9ED8-4F7E-90DA-ADF94CF06024}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F20F98EB-3ADF-4DC3-919C-7477B769B58C}] => (Allow) C:\Games\Steam\SteamApps\common\Ben and Ed\BenAndEd.exe () [Datei ist nicht signiert]
FirewallRules: [{5801DA57-E489-4D05-9622-032FB17E93FB}] => (Allow) C:\Games\Steam\SteamApps\common\Ben and Ed\BenAndEd.exe () [Datei ist nicht signiert]
FirewallRules: [{C8C8C016-C5BE-462A-A7D5-FFC0E8521DAB}] => (Allow) C:\Games\Steam\SteamApps\common\Ben and Ed - Blood Party\BaEBloodParty.exe () [Datei ist nicht signiert]
FirewallRules: [{8EB3CB15-8F8A-4D68-ABC8-97A9608D967D}] => (Allow) C:\Games\Steam\SteamApps\common\Ben and Ed - Blood Party\BaEBloodParty.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{B2878FE4-F92B-4D53-9873-3BC612C43B8F}C:\games\steam\steamapps\common\ben and ed\benanded\binaries\win32\benanded.exe] => (Allow) C:\games\steam\steamapps\common\ben and ed\benanded\binaries\win32\benanded.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{E44D739E-0F10-4165-992D-B7ABC501D362}C:\games\steam\steamapps\common\ben and ed\benanded\binaries\win32\benanded.exe] => (Allow) C:\games\steam\steamapps\common\ben and ed\benanded\binaries\win32\benanded.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{7C2EEF8A-CEC0-4ABD-9AF6-70DD55D93D35}] => (Allow) C:\Games\Steam\SteamApps\common\Shakes & Fidget\Shakes and Fidget.exe () [Datei ist nicht signiert]
FirewallRules: [{197F105F-01F1-422B-AE84-945BA2352D99}] => (Allow) C:\Games\Steam\SteamApps\common\Shakes & Fidget\Shakes and Fidget.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{BB918DA0-889E-4882-A98C-115483FB85F8}C:\games\steam\steamapps\common\ben and ed - blood party\baebloodparty\binaries\win32\baebloodparty-win32-debuggame.exe] => (Allow) C:\games\steam\steamapps\common\ben and ed - blood party\baebloodparty\binaries\win32\baebloodparty-win32-debuggame.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{DAEBCE4F-9EBD-43C0-BB7A-510CDD303D59}C:\games\steam\steamapps\common\ben and ed - blood party\baebloodparty\binaries\win32\baebloodparty-win32-debuggame.exe] => (Allow) C:\games\steam\steamapps\common\ben and ed - blood party\baebloodparty\binaries\win32\baebloodparty-win32-debuggame.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{D51E499F-7E03-4353-84E2-65E06280822A}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C5456322-DAF9-4276-871F-4B835C5F305E}] => (Allow) C:\Games\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, Inc) [Datei ist nicht signiert]
FirewallRules: [{6E5FA043-7E28-46AF-ABD9-D80C4E6B5156}] => (Allow) C:\Games\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, Inc) [Datei ist nicht signiert]
FirewallRules: [{5361E50A-5590-4E57-A3DA-682B366F3303}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)
FirewallRules: [{4A6DCF92-DBE4-49AE-A360-0299A8DB3947}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (AVAST Software s.r.o. -> AVAST Software)

==================== Wiederherstellungspunkte =========================

11-04-2019 20:51:36 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (04/13/2019 12:41:36 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT-AUTORITÄT)
Description: Product: Avast Update Helper -- Error 1316. Das angegebene Konto ist bereits vorhanden.

Error: (04/13/2019 12:38:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PickerHost.Exe, Version: 10.0.17134.1, Zeitstempel: 0x2fa59209
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.17134.556, Zeitstempel: 0x74bed8b0
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000f479b
ID des fehlerhaften Prozesses: 0xe48
Startzeit der fehlerhaften Anwendung: 0x01d4f1e505db1f48
Pfad der fehlerhaften Anwendung: C:\Windows\System32\PickerHost.Exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll
Berichtskennung: 15dff58d-df3b-4e7f-9964-b816a65dc112
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (04/13/2019 12:33:04 PM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: SHUYIN)
Description: httphttp-2147467263

Error: (04/13/2019 12:25:09 PM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: SHUYIN)
Description: httphttp-2147467263

Error: (04/13/2019 11:59:47 AM) (Source: MsiInstaller) (EventID: 11316) (User: NT-AUTORITÄT)
Description: Product: Avast Update Helper -- Error 1316. Das angegebene Konto ist bereits vorhanden.

Error: (04/13/2019 11:41:55 AM) (Source: MsiInstaller) (EventID: 11316) (User: NT-AUTORITÄT)
Description: Product: Avast Update Helper -- Error 1316. Das angegebene Konto ist bereits vorhanden.

Error: (04/13/2019 10:48:30 AM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: HTTP-Status 403: Der Client verfügt nicht über genügend Zugriffsrechte auf das angeforderte Serverobjekt.

Error: (04/13/2019 10:48:19 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PickerHost.Exe, Version: 10.0.17134.1, Zeitstempel: 0x2fa59209
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.17134.556, Zeitstempel: 0x74bed8b0
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000f479b
ID des fehlerhaften Prozesses: 0x164c
Startzeit der fehlerhaften Anwendung: 0x01d4f1d575243f74
Pfad der fehlerhaften Anwendung: C:\Windows\System32\PickerHost.Exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll
Berichtskennung: 4a5c0916-a3f1-43f6-af09-8084a68295e8
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:


Systemfehler:
=============
Error: (04/13/2019 12:35:51 PM) (Source: DCOM) (EventID: 10016) (User: SHUYIN)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "SHUYIN\Admin" (SID: S-1-5-21-3980298719-2773488239-3045808690-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/13/2019 12:35:51 PM) (Source: DCOM) (EventID: 10016) (User: SHUYIN)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "SHUYIN\Admin" (SID: S-1-5-21-3980298719-2773488239-3045808690-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/13/2019 12:35:51 PM) (Source: DCOM) (EventID: 10016) (User: SHUYIN)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "SHUYIN\Admin" (SID: S-1-5-21-3980298719-2773488239-3045808690-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/13/2019 12:33:02 PM) (Source: DCOM) (EventID: 10016) (User: SHUYIN)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "SHUYIN\Admin" (SID: S-1-5-21-3980298719-2773488239-3045808690-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/13/2019 12:32:34 PM) (Source: DCOM) (EventID: 10005) (User: SHUYIN)
Description: Fehler "2" in DCOM, als der Dienst "AvastSecureBrowserElevationService" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
{620A093F-79D3-4CAB-8CAD-EB1A39A8C0A2}

Error: (04/13/2019 12:32:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Avast Secure Browser Elevation Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.

Error: (04/13/2019 12:32:34 PM) (Source: DCOM) (EventID: 10005) (User: SHUYIN)
Description: Fehler "2" in DCOM, als der Dienst "AvastSecureBrowserElevationService" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
{620A093F-79D3-4CAB-8CAD-EB1A39A8C0A2}

Error: (04/13/2019 12:32:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Avast Secure Browser Elevation Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.


CodeIntegrity:
===================================

Date: 2019-04-13 10:38:53.809
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-04-13 10:38:25.383
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-04-11 22:22:38.471
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-04-11 20:16:04.020
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-04-11 20:14:54.502
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-04-08 14:30:21.532
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll that did not meet the Microsoft signing level requirements.

Date: 2019-04-08 14:30:20.665
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\ashShell.dll that did not meet the Microsoft signing level requirements.

Date: 2019-04-07 11:17:38.822
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Speicherinformationen ===========================

Prozessor: AMD FX(tm)-6300 Six-Core Processor
Prozentuale Nutzung des RAM: 57%
Installierter physikalischer RAM: 8189.55 MB
Verfügbarer physikalischer RAM: 3521.39 MB
Summe virtueller Speicher: 16381.55 MB
Verfügbarer virtueller Speicher: 10419.1 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:930.97 GB) (Free:20.31 GB) NTFS

\\?\Volume{d1100f04-b5b1-11e3-869c-806e6f6e6963}\ (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
\\?\Volume{2cc7c6e0-0000-0000-0000-a0c4e8000000}\ () (Fixed) (Total:0.44 GB) (Free:0.04 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 2CC7C6E0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

==================== Ende von Addition.txt ============================


cosinus 13.04.2019 12:23

Zitat:

Adobe Photoshop CS6
oh nö :( sach jetzt nicht, dass das irgendeine gecrackte Kacke ist...:balla:...obwohl ich schon davon ausgehe, wenn ich ein CS6 auf einem privaten Rechner sehe :(

Und das folgende zitierte bitte deinstallieren:

Zitat:

Adobe Acrobat Reader DC - Deutsch
Adobe AIR
Adobe Flash Player 27 NPAPI
Adobe Flash Player 31 PPAPI
Avast Free Antivirus
Avast Secure Browser
chip 1-click download service
PDF Architect 2

Shuyin 13.04.2019 12:47

Ohje keine Ahnung was das für ein Mist war. Ich habe es auf jeden Fall noch nie benutzt. Meine Freundin hatte das Programm von ihrem Vater mal bekommen und wohl an meinem Rechner installiert -.-
Habe es direkt mal mit gelöscht/deinstalliert, da ich es eh nicht brauche bzw will :o

Die anderen Programme habe ich auch alle Deinstalliert.

cosinus 13.04.2019 13:00

Dann zeig mal neue FRST-Logs . Haken setzen bei addition.txt dann auf Untersuchen klicken.

http://www.trojaner-board.de/picture...&pictureid=611

Shuyin 13.04.2019 13:12

Okey hier die FRST:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2019
durchgeführt von Admin (Administrator) auf SHUYIN (13-04-2019 14:01:10)
Gestartet von C:\Users\Admin\Downloads
Geladene Profile: Admin (Verfügbare Profile: Admin)
Platform: Windows 10 Pro Version 1803 17134.706 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Digital Wave Ltd -> Digital Wave Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Malwarebytes Corporation -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Malwarebytes Corporation -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\rempl\sedlauncher.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1903.4-0\MsMpEng.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1903.4-0\NisSrv.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.42.60.0_x64__kzf8qxf38zg5c\SkypeApp.exe
() [Datei ist nicht signiert] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.42.60.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Malwarebytes Corporation -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech Gaming Software\LAClient\laclient.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\ArxApplets\Discord\logitechg_discord.exe
(Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.42.60.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() [Datei ist nicht signiert] C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19021.18010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [18591352 2018-03-19] (Logitech Inc -> Logitech Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302904 2019-01-18] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech, Inc. -> Logitech Inc.)
HKLM-x32\...\Run: [Syncios device service] => C:\Program Files (x86)\Anvsoft\Syncios\SynciosDeviceService.exe [1910424 2017-06-06] (Anvsoft Inc. -> )
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1163264 2012-09-25] () [Datei ist nicht signiert]
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2480336 2018-12-19] (Malwarebytes Corporation -> Malwarebytes Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ACHTUNG
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Run: [GalaxyClient] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [6881864 2018-08-05] (GOG Sp. z o.o. -> GOG.com)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Run: [Discord] => C:\Users\Admin\AppData\Local\Discord\app-0.0.305\Discord.exe [81780056 2019-03-07] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Run: [Spotify Web Helper] => C:\Users\Admin\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1444976 2016-12-30] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Run: [Spotify] => C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe [7153264 2016-12-30] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2018-10-01] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1504584 2018-09-18] (Overwolf Ltd -> Overwolf Ltd.)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2019-01-15] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Run: [iCloudPhotos] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe [356664 2018-10-01] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe [524752 2019-04-13] (Mozilla Corporation -> Mozilla Corporation)
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\system32\frapsv64.dll [71680 2013-02-26] (Beepa P/L) [Datei ist nicht signiert]
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [65536 2013-02-26] (Beepa P/L) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.VP60] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2015-04-14] (Electronic Arts -> On2.com)
HKLM\...\Drivers32: [vidc.VP61] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2015-04-14] (Electronic Arts -> On2.com)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.103\Installer\chrmstp.exe [2019-04-11] (Google LLC -> Google Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{1f529286-3f1a-4b7f-b911-60ec4b68354a}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{3c31fd95-761e-4e0d-a96d-928ee4a3df35}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{c9991f10-0d7c-40b4-a9f1-d4bc13ce08fc}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.live.com/1rewlive4startup/home
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Browser Extensions -> {34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} -> C:\Users\Admin\AppData\Roaming\BrowserExtensions\Coupons64.dll => Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\ssv.dll [2019-02-10] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-02-10] (Oracle America, Inc. -> Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-3980298719-2773488239-3045808690-1000 -> hxxp://www.google.de/

FireFox:
========
FF DefaultProfile: og4hcahm.default-1505430743535
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\og4hcahm.default-1505430743535 [2019-04-13]
FF Homepage: Mozilla\Firefox\Profiles\og4hcahm.default-1505430743535 -> hxxps://www.google.de/
FF NetworkProxy: Mozilla\Firefox\Profiles\og4hcahm.default-1505430743535 -> http", "162.243.78.25"
FF Session Restore: Mozilla\Firefox\Profiles\og4hcahm.default-1505430743535 -> ist aktiviert.
FF Extension: (Avast SafePrice | Vergleich, Angebote, Gutscheine) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\og4hcahm.default-1505430743535\Extensions\sp@avast.com.xpi [2019-04-08]
FF Extension: (Avast Online Security) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\og4hcahm.default-1505430743535\Extensions\wrc@avast.com.xpi [2019-04-08]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-06-08] (Unity Technologies ApS -> Unity Technologies ApS)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1231201.dll [2017-11-02] (Adobe Systems, Inc.) [Datei ist nicht signiert]
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-08-26] (Google Inc -> Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-02-10] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-02-10] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL [2011-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-10-02] (NVIDIA Corporation -> NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-10-02] (NVIDIA Corporation -> NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC)
FF Plugin HKU\S-1-5-21-3980298719-2773488239-3045808690-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [Keine Datei]

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://google.de/
CHR StartupUrls: Default -> "hxxps://www.google.de/?gws_rd=ssl"
CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default [2018-11-27]
CHR Extension: (Präsentationen) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-06-19]
CHR Extension: (Docs) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-06-19]
CHR Extension: (Google Drive) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-25]
CHR Extension: (YouTube) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-07]
CHR Extension: (Google-Suche) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-10]
CHR Extension: (Avast SafePrice | Vergleich, Angebote, Gutscheine) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2018-11-27]
CHR Extension: (Tabellen) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-06-19]
CHR Extension: (Google Docs Offline) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-11-27]
CHR Extension: (Avast Online Security) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-11-27]
CHR Extension: (TubeTab) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhpijolpcimadhjingadnbcjncmjdce [2017-07-13]
CHR Extension: (Zelda Dark) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lilddpnkkhkcjkdaaglfminjopbijomp [2015-06-30]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-06-19]
CHR Extension: (Google Mail) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-30]
CHR Extension: (Chrome Media Router) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-11-27]
CHR HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jlhpijolpcimadhjingadnbcjncmjdce] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <nicht gefunden>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <nicht gefunden>

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

HKLM\SYSTEM\CurrentControlSet\Services\aswSP <==== ACHTUNG (Rootkit!)
HKLM\SYSTEM\CurrentControlSet\Services\aswMonFlt <==== ACHTUNG (Rootkit!)
HKLM\SYSTEM\CurrentControlSet\Services\aswSnx <==== ACHTUNG (Rootkit!)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [85304 2018-10-16] (Apple Inc. -> Apple Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8361960 2019-02-01] (BattlEye Innovations e.K. -> )
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [382312 2015-10-29] (Digital Wave Ltd -> Digital Wave Ltd.) [Datei ist nicht signiert]
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [784512 2018-09-23] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 ElfoService; C:\Program Files (x86)\ElsterFormular Update Service\bin\elfoService.exe [1284328 2018-01-04] (Bayerisches Landesamt fuer Steuern -> )
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [686664 2018-08-05] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [8942664 2018-08-05] (GOG Sp. z o.o. -> GOG.com)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert]
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [202872 2018-03-19] (Logitech Inc -> Logitech Inc.)
R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [152272 2018-12-19] (Malwarebytes Corporation -> Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation -> Malwarebytes Corporation)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [773328 2018-09-12] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [773328 2018-09-12] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2201920 2018-07-06] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3072328 2018-07-06] (Electronic Arts, Inc. -> Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2308424 2018-09-18] (Overwolf Ltd -> Overwolf LTD)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5074120 2019-03-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\NisSrv.exe [3856504 2019-04-13] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MsMpEng.exe [113992 2019-04-13] (Microsoft Corporation -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [153328 2018-12-19] (Malwarebytes Corporation -> Malwarebytes)
R3 ladfGSS; C:\WINDOWS\system32\drivers\ladfGSS.sys [45168 2018-03-19] (Logitech Inc -> Logitech Inc.)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> Logitech)
R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2017-08-18] (Logitech Inc -> Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation -> Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation -> Malwarebytes Corporation)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [23040 2014-08-16] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
S3 nusb3hub; C:\WINDOWS\system32\drivers\nusb3hub.sys [80384 2010-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)
S3 nusb3xhc; C:\WINDOWS\system32\drivers\nusb3xhc.sys [180736 2010-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_54bd1f10ac116cd5\nvlddmkm.sys [20605496 2018-10-03] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30792 2018-08-21] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [69544 2018-06-08] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [65792 2018-04-24] (NVIDIA Corporation -> NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2018-04-12] (Microsoft Windows -> Realtek )
R3 Sftfs; C:\WINDOWS\System32\DRIVERS\Sftfswin7.sys [767648 2014-10-08] (Microsoft Corporation -> Microsoft Corporation)
R3 Sftplay; C:\WINDOWS\System32\DRIVERS\Sftplaywin7.sys [273576 2014-10-08] (Microsoft Corporation -> Microsoft Corporation)
R3 Sftredir; C:\WINDOWS\System32\DRIVERS\Sftredirwin7.sys [29864 2014-10-08] (Microsoft Corporation -> Microsoft Corporation)
R3 Sftvol; C:\WINDOWS\System32\DRIVERS\Sftvolwin7.sys [23208 2014-10-08] (Microsoft Corporation -> Microsoft Corporation)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-06-10] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46472 2019-04-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [343520 2019-04-13] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [68576 2019-04-13] (Microsoft Windows -> Microsoft Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2019-04-13 13:01 - 2019-04-13 13:01 - 000088209 _____ C:\Users\Admin\Desktop\FRST.txt
2019-04-13 13:01 - 2019-04-13 13:01 - 000076685 _____ C:\Users\Admin\Desktop\Addition.txt
2019-04-13 12:54 - 2019-04-13 12:57 - 000076682 _____ C:\Users\Admin\Downloads\Addition.txt
2019-04-13 12:52 - 2019-04-13 14:04 - 000026723 _____ C:\Users\Admin\Downloads\FRST.txt
2019-04-13 12:52 - 2019-04-13 14:01 - 000000000 ____D C:\FRST
2019-04-13 12:51 - 2019-04-13 12:51 - 002434048 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe
2019-04-13 12:42 - 2019-04-13 12:42 - 000000000 _____ C:\Users\Admin\tasklist
2019-04-13 11:15 - 2019-04-13 11:15 - 000000077 _____ C:\WINDOWS\system32\Drivers\aswSP.sys.sum
2019-04-13 11:01 - 2019-04-13 13:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2019-04-13 11:00 - 2019-04-13 11:01 - 000000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2019-04-13 11:00 - 2019-04-13 11:00 - 000001273 _____ C:\Users\Admin\Desktop\CrystalDiskInfo.lnk
2019-04-13 11:00 - 2019-04-13 11:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2019-04-13 10:59 - 2019-04-13 10:59 - 003942560 _____ (Crystal Dew World ) C:\Users\Admin\Downloads\CrystalDiskInfo8_0_0.exe
2019-04-11 21:30 - 2019-04-11 21:30 - 000080553 _____ C:\Users\Admin\Desktop\SHUYIN.txt
2019-04-11 21:28 - 2019-04-11 21:28 - 000000000 ____D C:\Users\Admin\Desktop\CPU-Z
2019-04-11 21:00 - 2019-04-02 11:25 - 000607960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2019-04-11 21:00 - 2019-04-02 10:20 - 000412984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2019-04-11 21:00 - 2019-04-02 09:51 - 003399680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-04-11 21:00 - 2019-04-02 09:50 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-04-11 21:00 - 2019-04-02 09:49 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2019-04-11 21:00 - 2019-04-02 07:05 - 001989544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2019-04-11 21:00 - 2019-04-02 06:40 - 000534016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2019-04-11 21:00 - 2019-03-14 16:29 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2019-04-11 21:00 - 2019-03-14 16:08 - 003611264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2019-04-11 21:00 - 2019-03-14 15:53 - 000625664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2019-04-11 21:00 - 2019-03-14 10:37 - 002256248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-04-11 21:00 - 2019-03-14 10:22 - 002700288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2019-04-11 21:00 - 2019-03-14 10:19 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2019-04-11 21:00 - 2019-03-14 10:19 - 002969600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2019-04-11 21:00 - 2019-03-14 10:17 - 002258944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2019-04-11 21:00 - 2019-03-14 10:17 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2019-04-11 21:00 - 2019-03-14 10:17 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2019-04-11 21:00 - 2019-03-14 10:14 - 000856576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2019-04-11 21:00 - 2019-03-14 10:14 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2019-04-11 21:00 - 2019-03-14 10:14 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2019-04-11 21:00 - 2019-03-14 10:14 - 000138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2019-04-11 21:00 - 2019-03-14 10:13 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2019-04-11 21:00 - 2019-03-14 10:13 - 000145408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2019-04-11 21:00 - 2019-03-14 09:58 - 004708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2019-04-11 21:00 - 2019-03-14 09:57 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2019-04-11 21:00 - 2019-03-14 09:56 - 003392000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2019-04-11 21:00 - 2019-03-14 09:56 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2019-04-11 21:00 - 2019-03-14 09:55 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2019-04-11 21:00 - 2019-03-14 09:54 - 000395776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2019-04-11 21:00 - 2019-03-14 09:54 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2019-04-11 21:00 - 2019-03-14 09:51 - 001216000 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2019-04-11 21:00 - 2019-03-14 09:51 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2019-04-11 21:00 - 2019-03-14 09:50 - 000796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2019-04-11 21:00 - 2019-03-14 09:50 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2019-04-11 21:00 - 2019-03-14 09:50 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2019-04-11 20:59 - 2019-04-02 14:38 - 000094008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2019-04-11 20:59 - 2019-04-02 14:33 - 001634912 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-04-11 20:59 - 2019-04-02 14:33 - 000719984 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2019-04-11 20:59 - 2019-04-02 14:19 - 012730880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-04-11 20:59 - 2019-04-02 14:19 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2019-04-11 20:59 - 2019-04-02 14:18 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2019-04-11 20:59 - 2019-04-02 14:16 - 001030144 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2019-04-11 20:59 - 2019-04-02 14:15 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2019-04-11 20:59 - 2019-04-02 14:13 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2019-04-11 20:59 - 2019-04-02 14:12 - 003643904 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-04-11 20:59 - 2019-04-02 14:12 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-04-11 20:59 - 2019-04-02 14:11 - 004053504 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2019-04-11 20:59 - 2019-04-02 14:11 - 001857536 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2019-04-11 20:59 - 2019-04-02 14:11 - 001662976 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2019-04-11 20:59 - 2019-04-02 14:10 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2019-04-11 20:59 - 2019-04-02 14:10 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll
2019-04-11 20:59 - 2019-04-02 11:25 - 001454648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2019-04-11 20:59 - 2019-04-02 11:11 - 011919360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-04-11 20:59 - 2019-04-02 11:11 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2019-04-11 20:59 - 2019-04-02 11:10 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2019-04-11 20:59 - 2019-04-02 11:08 - 002889216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2019-04-11 20:59 - 2019-04-02 11:07 - 004054528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2019-04-11 20:59 - 2019-04-02 11:07 - 001586688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2019-04-11 20:59 - 2019-04-02 11:06 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2019-04-11 20:59 - 2019-04-02 10:36 - 001035256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-04-11 20:59 - 2019-04-02 10:24 - 000135184 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2019-04-11 20:59 - 2019-04-02 10:23 - 001023800 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-04-11 20:59 - 2019-04-02 10:22 - 001219896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-04-11 20:59 - 2019-04-02 10:22 - 000567592 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-04-11 20:59 - 2019-04-02 10:22 - 000076088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2019-04-11 20:59 - 2019-04-02 10:21 - 007520136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-04-11 20:59 - 2019-04-02 10:21 - 002822160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2019-04-11 20:59 - 2019-04-02 10:21 - 002467536 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-04-11 20:59 - 2019-04-02 10:21 - 000735680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2019-04-11 20:59 - 2019-04-02 10:20 - 002719032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-04-11 20:59 - 2019-04-02 10:19 - 009083704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-04-11 20:59 - 2019-04-02 10:19 - 000793400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2019-04-11 20:59 - 2019-04-02 10:19 - 000786080 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2019-04-11 20:59 - 2019-04-02 10:19 - 000713272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2019-04-11 20:59 - 2019-04-02 10:01 - 025857536 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-04-11 20:59 - 2019-04-02 09:53 - 022717440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-04-11 20:59 - 2019-04-02 09:53 - 004384256 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-04-11 20:59 - 2019-04-02 09:50 - 007591936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-04-11 20:59 - 2019-04-02 09:49 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2019-04-11 20:59 - 2019-04-02 09:48 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-04-11 20:59 - 2019-04-02 09:48 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2019-04-11 20:59 - 2019-04-02 09:48 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2019-04-11 20:59 - 2019-04-02 09:47 - 001214464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2019-04-11 20:59 - 2019-04-02 09:47 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-04-11 20:59 - 2019-04-02 09:46 - 002174976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-04-11 20:59 - 2019-04-02 09:45 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2019-04-11 20:59 - 2019-04-02 09:44 - 002208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-04-11 20:59 - 2019-04-02 09:44 - 001724416 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2019-04-11 20:59 - 2019-04-02 09:44 - 001421312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2019-04-11 20:59 - 2019-04-02 09:43 - 000542720 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2019-04-11 20:59 - 2019-04-02 08:22 - 000001312 _____ C:\WINDOWS\system32\tcbres.wim
2019-04-11 20:59 - 2019-04-02 07:04 - 006572120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-04-11 20:59 - 2019-04-02 07:04 - 000604008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2019-04-11 20:59 - 2019-04-02 07:04 - 000581832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2019-04-11 20:59 - 2019-04-02 07:04 - 000560600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2019-04-11 20:59 - 2019-04-02 06:56 - 022018048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-04-11 20:59 - 2019-04-02 06:50 - 019404800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-04-11 20:59 - 2019-04-02 06:43 - 005788160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-04-11 20:59 - 2019-04-02 06:43 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-04-11 20:59 - 2019-04-02 06:43 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-04-11 20:59 - 2019-04-02 06:42 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2019-04-11 20:59 - 2019-04-02 06:41 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2019-04-11 20:59 - 2019-04-02 06:41 - 001235968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2019-04-11 20:59 - 2019-04-02 06:41 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2019-04-11 20:59 - 2019-04-02 06:40 - 001073664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2019-04-11 20:59 - 2019-03-16 14:54 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2019-04-11 20:59 - 2019-03-16 11:03 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2019-04-11 20:59 - 2019-03-14 16:55 - 001786680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2019-04-11 20:59 - 2019-03-14 16:53 - 001626928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2019-04-11 20:59 - 2019-03-14 16:53 - 001038136 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll
2019-04-11 20:59 - 2019-03-14 16:53 - 000652088 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2019-04-11 20:59 - 2019-03-14 16:53 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2019-04-11 20:59 - 2019-03-14 16:52 - 003933296 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2019-04-11 20:59 - 2019-03-14 16:52 - 001424696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2019-04-11 20:59 - 2019-03-14 16:52 - 000954160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVManifest.dll
2019-04-11 20:59 - 2019-03-14 16:52 - 000830264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2019-04-11 20:59 - 2019-03-14 16:52 - 000827704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2019-04-11 20:59 - 2019-03-14 16:52 - 000825144 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2019-04-11 20:59 - 2019-03-14 16:52 - 000749880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2019-04-11 20:59 - 2019-03-14 16:52 - 000670008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2019-04-11 20:59 - 2019-03-14 16:52 - 000495416 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2019-04-11 20:59 - 2019-03-14 16:52 - 000164664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppvVemgr.sys
2019-04-11 20:59 - 2019-03-14 16:51 - 000157192 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2019-04-11 20:59 - 2019-03-14 16:35 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfoext.dll
2019-04-11 20:59 - 2019-03-14 16:34 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2019-04-11 20:59 - 2019-03-14 16:33 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
2019-04-11 20:59 - 2019-03-14 16:33 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storqosflt.sys
2019-04-11 20:59 - 2019-03-14 16:33 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcPing.exe
2019-04-11 20:59 - 2019-03-14 16:31 - 000198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll
2019-04-11 20:59 - 2019-03-14 16:30 - 000675328 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll
2019-04-11 20:59 - 2019-03-14 16:30 - 000440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2019-04-11 20:59 - 2019-03-14 16:29 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscsvc.dll
2019-04-11 20:59 - 2019-03-14 16:28 - 000560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsound.dll
2019-04-11 20:59 - 2019-03-14 15:56 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll
2019-04-11 20:59 - 2019-03-14 15:55 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcPing.exe
2019-04-11 20:59 - 2019-03-14 15:53 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2019-04-11 20:59 - 2019-03-14 15:53 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2019-04-11 20:59 - 2019-03-14 15:52 - 000502784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsound.dll
2019-04-11 20:59 - 2019-03-14 10:57 - 000611640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2019-04-11 20:59 - 2019-03-14 10:56 - 000375096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2019-04-11 20:59 - 2019-03-14 10:38 - 000380728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-04-11 20:59 - 2019-03-14 10:38 - 000090360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpr.dll
2019-04-11 20:59 - 2019-03-14 10:37 - 006043496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2019-04-11 20:59 - 2019-03-14 10:37 - 001171568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2019-04-11 20:59 - 2019-03-14 10:28 - 000152072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2019-04-11 20:59 - 2019-03-14 10:27 - 000436024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-04-11 20:59 - 2019-03-14 10:27 - 000097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpr.dll
2019-04-11 20:59 - 2019-03-14 10:26 - 007436016 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2019-04-11 20:59 - 2019-03-14 10:26 - 002768448 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-04-11 20:59 - 2019-03-14 10:26 - 002421048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2019-04-11 20:59 - 2019-03-14 10:26 - 001457576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-04-11 20:59 - 2019-03-14 10:26 - 001258688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-04-11 20:59 - 2019-03-14 10:26 - 001140984 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-04-11 20:59 - 2019-03-14 10:26 - 001014344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2019-04-11 20:59 - 2019-03-14 10:26 - 000983424 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-04-11 20:59 - 2019-03-14 10:26 - 000481048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2019-04-11 20:59 - 2019-03-14 10:26 - 000175416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2019-04-11 20:59 - 2019-03-14 10:20 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2019-04-11 20:59 - 2019-03-14 10:18 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2019-04-11 20:59 - 2019-03-14 10:18 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2019-04-11 20:59 - 2019-03-14 10:18 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credui.dll
2019-04-11 20:59 - 2019-03-14 10:18 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2019-04-11 20:59 - 2019-03-14 10:17 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2019-04-11 20:59 - 2019-03-14 10:17 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcmapi.dll
2019-04-11 20:59 - 2019-03-14 10:17 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntlanman.dll
2019-04-11 20:59 - 2019-03-14 10:16 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2019-04-11 20:59 - 2019-03-14 10:16 - 000333824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2019-04-11 20:59 - 2019-03-14 10:15 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2019-04-11 20:59 - 2019-03-14 10:15 - 000318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2019-04-11 20:59 - 2019-03-14 10:15 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShellCommonCommonProxyStub.dll
2019-04-11 20:59 - 2019-03-14 10:15 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\negoexts.dll
2019-04-11 20:59 - 2019-03-14 10:14 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2019-04-11 20:59 - 2019-03-14 10:14 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2019-04-11 20:59 - 2019-03-14 10:14 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2019-04-11 20:59 - 2019-03-14 10:13 - 001468416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2019-04-11 20:59 - 2019-03-14 10:01 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2019-04-11 20:59 - 2019-03-14 09:58 - 002509824 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2019-04-11 20:59 - 2019-03-14 09:58 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\fcon.dll
2019-04-11 20:59 - 2019-03-14 09:57 - 004866560 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2019-04-11 20:59 - 2019-03-14 09:56 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2019-04-11 20:59 - 2019-03-14 09:56 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2019-04-11 20:59 - 2019-03-14 09:56 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2019-04-11 20:59 - 2019-03-14 09:55 - 003601920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2019-04-11 20:59 - 2019-03-14 09:55 - 002739200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2019-04-11 20:59 - 2019-03-14 09:55 - 000528896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2019-04-11 20:59 - 2019-03-14 09:55 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2019-04-11 20:59 - 2019-03-14 09:55 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2019-04-11 20:59 - 2019-03-14 09:55 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmapi.dll
2019-04-11 20:59 - 2019-03-14 09:55 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncCsp.dll
2019-04-11 20:59 - 2019-03-14 09:55 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntlanman.dll
2019-04-11 20:59 - 2019-03-14 09:55 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\EASPolicyManagerBrokerHost.exe
2019-04-11 20:59 - 2019-03-14 09:55 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\credui.dll
2019-04-11 20:59 - 2019-03-14 09:54 - 002368000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-04-11 20:59 - 2019-03-14 09:54 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2019-04-11 20:59 - 2019-03-14 09:54 - 000354304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2019-04-11 20:59 - 2019-03-14 09:54 - 000279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2019-04-11 20:59 - 2019-03-14 09:54 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2019-04-11 20:59 - 2019-03-14 09:54 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2019-04-11 20:59 - 2019-03-14 09:54 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\negoexts.dll
2019-04-11 20:59 - 2019-03-14 09:54 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2019-04-11 20:59 - 2019-03-14 09:53 - 000787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2019-04-11 20:59 - 2019-03-14 09:53 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2019-04-11 20:59 - 2019-03-14 09:53 - 000473600 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2019-04-11 20:59 - 2019-03-14 09:53 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
2019-04-11 20:59 - 2019-03-14 09:52 - 002909696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2019-04-11 20:59 - 2019-03-14 09:52 - 000532992 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuietHours.dll
2019-04-11 20:59 - 2019-03-14 09:52 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShellCommonCommonProxyStub.dll
2019-04-11 20:59 - 2019-03-14 09:52 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2019-04-11 20:59 - 2019-03-14 09:51 - 000226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringMgr.dll
2019-04-11 20:59 - 2019-03-14 09:50 - 001587712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2019-04-11 20:59 - 2019-03-14 09:50 - 001410560 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2019-04-11 20:59 - 2019-03-14 09:50 - 000947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2019-04-11 20:59 - 2019-03-14 09:50 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2019-04-11 20:59 - 2019-03-14 09:50 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2019-04-11 20:59 - 2019-03-14 09:50 - 000507392 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2019-04-11 20:59 - 2019-03-14 03:57 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2019-04-11 20:59 - 2019-03-14 03:57 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2019-04-11 20:59 - 2019-03-14 03:57 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2019-04-11 20:59 - 2019-03-14 03:57 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-04-11 20:59 - 2019-03-14 03:57 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2019-04-06 12:21 - 2019-04-06 12:26 - 000000000 ____D C:\Users\Admin\Desktop\Rezepte
2019-03-31 18:49 - 2019-03-31 18:55 - 000020220 _____ C:\Users\Admin\Desktop\Kopie von Energieverbrauchsplan Margarethenweg 4 Neu .xlsx
2019-03-22 21:32 - 2019-03-06 17:37 - 001616608 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2019-03-22 21:32 - 2019-03-06 14:04 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2019-03-22 21:32 - 2019-03-06 11:04 - 000945464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2019-03-22 21:32 - 2019-03-06 11:03 - 001921848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2019-03-22 21:32 - 2019-03-06 10:33 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2019-03-22 21:32 - 2019-03-06 10:32 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2019-03-22 21:32 - 2019-03-06 10:31 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2019-03-22 21:32 - 2019-03-06 10:31 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2019-03-22 21:32 - 2019-03-06 10:29 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2019-03-22 21:32 - 2019-03-06 10:28 - 001803776 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2019-03-22 21:32 - 2019-03-06 10:25 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys
2019-03-22 21:32 - 2019-03-06 07:50 - 001628160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2019-03-22 21:32 - 2019-03-06 07:50 - 001347584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2019-03-22 21:32 - 2019-02-21 05:26 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2019-03-22 21:32 - 2019-02-16 14:57 - 001048472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2019-03-22 21:32 - 2019-02-16 14:56 - 000549520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
2019-03-22 21:32 - 2019-02-16 14:34 - 004718080 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2019-03-22 21:32 - 2019-02-16 14:34 - 001725952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2019-03-22 21:32 - 2019-02-16 14:30 - 002019840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2019-03-22 21:32 - 2019-02-16 14:24 - 000444176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
2019-03-22 21:32 - 2019-02-16 14:06 - 001530880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2019-03-22 21:32 - 2019-02-16 10:04 - 000193032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2019-03-22 21:32 - 2019-02-16 10:03 - 005625360 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2019-03-22 21:32 - 2019-02-16 10:02 - 000432952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2019-03-22 21:32 - 2019-02-16 10:01 - 000527160 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2019-03-22 21:32 - 2019-02-16 09:31 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll
2019-03-22 21:32 - 2019-02-16 09:30 - 001124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll
2019-03-22 21:32 - 2019-02-16 09:30 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2019-03-22 21:32 - 2019-02-16 09:29 - 001768448 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2019-03-22 21:32 - 2019-02-16 09:29 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2019-03-22 21:32 - 2019-02-16 09:28 - 001668096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll
2019-03-22 21:32 - 2019-02-16 09:28 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2019-03-22 21:32 - 2019-02-16 09:28 - 000705024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2019-03-22 21:32 - 2019-02-16 09:27 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2019-03-22 21:32 - 2019-02-16 09:26 - 001459712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2019-03-22 21:32 - 2019-02-16 09:25 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2019-03-22 21:31 - 2019-03-06 17:14 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2019-03-22 21:31 - 2019-03-06 17:14 - 000522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2019-03-22 21:31 - 2019-03-06 11:16 - 001188000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2019-03-22 21:31 - 2019-03-06 11:07 - 000376120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2019-03-22 21:31 - 2019-03-06 11:03 - 000375608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2019-03-22 21:31 - 2019-03-06 10:31 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2019-03-22 21:31 - 2019-03-06 10:29 - 000736256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2019-03-22 21:31 - 2019-03-06 10:28 - 004937728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2019-03-22 21:31 - 2019-03-06 08:14 - 000785568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2019-03-22 21:31 - 2019-03-06 07:49 - 004516352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2019-03-22 21:31 - 2019-02-16 15:02 - 002871304 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2019-03-22 21:31 - 2019-02-16 14:57 - 002266936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2019-03-22 21:31 - 2019-02-16 14:57 - 000257848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVFileSystemMetadata.dll
2019-03-22 21:31 - 2019-02-16 14:57 - 000231224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
2019-03-22 21:31 - 2019-02-16 14:57 - 000228152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamMap.dll
2019-03-22 21:31 - 2019-02-16 14:57 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamingUX.dll
2019-03-22 21:31 - 2019-02-16 14:57 - 000183608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mavinject.exe
2019-03-22 21:31 - 2019-02-16 14:57 - 000180528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVDllSurrogate.exe
2019-03-22 21:31 - 2019-02-16 14:57 - 000172856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVNice.exe
2019-03-22 21:31 - 2019-02-16 14:57 - 000034104 _____ C:\WINDOWS\system32\SyncAppvPublishingServer.exe
2019-03-22 21:31 - 2019-02-16 14:53 - 001516416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2019-03-22 21:31 - 2019-02-16 14:34 - 000302080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2019-03-22 21:31 - 2019-02-16 14:22 - 001322176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2019-03-22 21:31 - 2019-02-16 14:08 - 000373760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2019-03-22 21:31 - 2019-02-16 12:24 - 023862272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2019-03-22 21:31 - 2019-02-16 12:22 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2019-03-22 21:31 - 2019-02-16 10:03 - 007901392 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2019-03-22 21:31 - 2019-02-16 10:03 - 000510288 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2019-03-22 21:31 - 2019-02-16 10:02 - 005821440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2019-03-22 21:31 - 2019-02-16 10:02 - 003291632 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2019-03-22 21:31 - 2019-02-16 10:02 - 001792712 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2019-03-22 21:31 - 2019-02-16 10:02 - 000705848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2019-03-22 21:31 - 2019-02-16 10:01 - 001285424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2019-03-22 21:31 - 2019-02-16 10:01 - 001209696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2019-03-22 21:31 - 2019-02-16 10:01 - 001098056 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2019-03-22 21:31 - 2019-02-16 10:01 - 001028920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2019-03-22 21:31 - 2019-02-16 10:01 - 000594024 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2019-03-22 21:31 - 2019-02-16 10:01 - 000335672 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2019-03-22 21:31 - 2019-02-16 09:53 - 000443632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2019-03-22 21:31 - 2019-02-16 09:51 - 002479168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2019-03-22 21:31 - 2019-02-16 09:51 - 001584536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2019-03-22 21:31 - 2019-02-16 09:50 - 001130568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2019-03-22 21:31 - 2019-02-16 09:50 - 001011872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2019-03-22 21:31 - 2019-02-16 09:37 - 009084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2019-03-22 21:31 - 2019-02-16 09:36 - 007057408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2019-03-22 21:31 - 2019-02-16 09:34 - 005883904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2019-03-22 21:31 - 2019-02-16 09:33 - 006646784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2019-03-22 21:31 - 2019-02-16 09:31 - 002825728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2019-03-22 21:31 - 2019-02-16 09:31 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2019-03-22 21:31 - 2019-02-16 09:30 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2019-03-22 21:31 - 2019-02-16 09:30 - 001986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2019-03-22 21:31 - 2019-02-16 09:30 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2019-03-22 21:31 - 2019-02-16 09:28 - 003381248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2019-03-22 21:31 - 2019-02-16 09:28 - 002585600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2019-03-22 21:31 - 2019-02-16 09:27 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2019-03-22 21:31 - 2019-02-16 09:27 - 000686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2019-03-22 21:31 - 2019-02-16 09:26 - 001225216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2019-03-22 21:31 - 2019-02-16 09:26 - 000943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2019-03-22 21:31 - 2019-02-16 09:26 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2019-03-22 21:31 - 2019-02-16 09:25 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2019-03-22 21:30 - 2019-03-06 17:36 - 001047352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2019-03-22 21:30 - 2019-03-06 17:17 - 000810496 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2019-03-22 21:30 - 2019-03-06 17:12 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2019-03-22 21:30 - 2019-03-06 14:18 - 000918032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2019-03-22 21:30 - 2019-03-06 11:16 - 000776792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2019-03-22 21:30 - 2019-03-06 11:16 - 000722744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2019-03-22 21:30 - 2019-03-06 11:16 - 000527160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2019-03-22 21:30 - 2019-03-06 11:11 - 000493880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2019-03-22 21:30 - 2019-03-06 11:10 - 000248880 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2019-03-22 21:30 - 2019-03-06 11:04 - 000628024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpx.dll
2019-03-22 21:30 - 2019-03-06 08:15 - 000434488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2019-03-22 21:30 - 2019-03-06 08:14 - 000665224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2019-03-22 21:30 - 2019-03-06 08:14 - 000450872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpx.dll
2019-03-22 21:30 - 2019-03-06 08:13 - 000607248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2019-03-22 21:30 - 2019-02-16 15:02 - 001644040 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2019-03-22 21:30 - 2019-02-16 15:02 - 000808456 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2019-03-22 21:30 - 2019-02-16 15:02 - 000735752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2019-03-22 21:30 - 2019-02-16 15:02 - 000620040 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2019-03-22 21:30 - 2019-02-16 15:02 - 000460296 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2019-03-22 21:30 - 2019-02-16 15:02 - 000322568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2019-03-22 21:30 - 2019-02-16 15:02 - 000147464 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2019-03-22 21:30 - 2019-02-16 15:02 - 000071176 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2019-03-22 21:30 - 2019-02-16 14:57 - 000506088 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2019-03-22 21:30 - 2019-02-16 14:56 - 000540984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2019-03-22 21:30 - 2019-02-16 14:33 - 002194432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ModernAppAgent.dll
2019-03-22 21:30 - 2019-02-16 14:33 - 001786880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2019-03-22 21:30 - 2019-02-16 14:32 - 002051072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2019-03-22 21:30 - 2019-02-16 14:32 - 001127936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplySettingsTemplateCatalog.exe
2019-03-22 21:30 - 2019-02-16 14:31 - 001271808 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2019-03-22 21:30 - 2019-02-16 14:31 - 001186816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.CommonBridge.dll
2019-03-22 21:30 - 2019-02-16 14:31 - 001003520 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2019-03-22 21:30 - 2019-02-16 14:31 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2019-03-22 21:30 - 2019-02-16 14:29 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2019-03-22 21:30 - 2019-02-16 14:25 - 001539896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2019-03-22 21:30 - 2019-02-16 14:25 - 000148784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mavinject.exe
2019-03-22 21:30 - 2019-02-16 14:07 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2019-03-22 21:30 - 2019-02-16 14:07 - 000484352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2019-03-22 21:30 - 2019-02-16 14:06 - 001451520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2019-03-22 21:30 - 2019-02-16 14:06 - 000774656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2019-03-22 21:30 - 2019-02-16 14:04 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2019-03-22 21:30 - 2019-02-16 10:16 - 000511800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2019-03-22 21:30 - 2019-02-16 10:15 - 000505656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2019-03-22 21:30 - 2019-02-16 10:02 - 001934800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2019-03-22 21:30 - 2019-02-16 10:02 - 000413712 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2019-03-22 21:30 - 2019-02-16 10:01 - 000641984 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2019-03-22 21:30 - 2019-02-16 09:57 - 000383288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2019-03-22 21:30 - 2019-02-16 09:50 - 001805648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2019-03-22 21:30 - 2019-02-16 09:28 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2019-03-22 21:30 - 2019-02-16 09:26 - 000935424 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2019-03-22 21:30 - 2019-02-16 08:07 - 000806320 _____ C:\WINDOWS\SysWOW64\locale.nls
2019-03-22 21:30 - 2019-02-16 08:07 - 000806320 _____ C:\WINDOWS\system32\locale.nls
2019-03-22 21:29 - 2019-03-06 17:17 - 000116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2019-03-22 21:29 - 2019-03-06 17:14 - 000488448 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2019-03-22 21:29 - 2019-03-06 14:06 - 000425472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2019-03-22 21:29 - 2019-03-06 11:05 - 000439224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2019-03-22 21:29 - 2019-03-06 11:05 - 000159864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2019-03-22 21:29 - 2019-03-06 11:02 - 000626488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2019-03-22 21:29 - 2019-03-06 10:31 - 000424448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2019-03-22 21:29 - 2019-03-06 10:26 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys
2019-03-22 21:29 - 2019-03-06 10:26 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys
2019-03-22 21:29 - 2019-03-06 08:17 - 000146712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2019-03-22 21:29 - 2019-03-06 07:51 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2019-03-22 21:29 - 2019-02-16 14:31 - 000861184 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2019-03-22 21:29 - 2019-02-16 14:30 - 000877568 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2019-03-22 21:29 - 2019-02-16 14:29 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2019-03-22 21:29 - 2019-02-16 14:06 - 000765952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2019-03-22 21:29 - 2019-02-16 14:02 - 000055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UevAppMonitor.exe
2019-03-22 21:29 - 2019-02-16 13:55 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Common.dll
2019-03-22 21:29 - 2019-02-16 10:15 - 000035640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2019-03-22 21:29 - 2019-02-16 10:05 - 000087800 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostw.exe
2019-03-22 21:29 - 2019-02-16 10:01 - 000161664 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
2019-03-22 21:29 - 2019-02-16 09:51 - 000170952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll
2019-03-22 21:29 - 2019-02-16 09:50 - 000504072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll
2019-03-22 21:29 - 2019-02-16 09:33 - 000054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2019-03-22 21:29 - 2019-02-16 09:33 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2019-03-22 21:29 - 2019-02-16 09:32 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2019-03-22 21:29 - 2019-02-16 09:30 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll
2019-03-22 21:29 - 2019-02-16 09:30 - 000254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppLockerCSP.dll
2019-03-21 20:44 - 2019-03-21 20:44 - 000000000 ____D C:\WINDOWS\Panther
2019-03-19 20:35 - 2019-03-19 20:34 - 000362888 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe

==================== Ein Monat (geänderte) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2019-04-13 13:58 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-04-13 13:53 - 2017-06-14 14:36 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\Mozilla
2019-04-13 13:50 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-04-13 13:50 - 2017-06-17 20:38 - 000000000 ____D C:\ProgramData\NVIDIA
2019-04-13 13:47 - 2018-05-07 17:34 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-04-13 13:40 - 2014-10-18 11:44 - 000001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-04-13 13:40 - 2014-10-18 11:44 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-04-13 13:39 - 2018-04-06 19:52 - 000000000 ____D C:\Users\Admin\AppData\Local\AVAST Software
2019-04-13 13:39 - 2015-05-14 20:34 - 000000000 ____D C:\ProgramData\AVAST Software
2019-04-13 13:38 - 2010-11-21 05:27 - 000592616 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2019-04-13 13:35 - 2014-10-18 15:48 - 000000000 ____D C:\ProgramData\Adobe
2019-04-13 13:33 - 2014-10-18 15:49 - 000000000 ____D C:\Program Files (x86)\Adobe
2019-04-13 13:32 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2019-04-13 13:32 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\Macromed
2019-04-13 13:26 - 2018-06-03 19:04 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-04-13 12:42 - 2018-06-03 19:16 - 000000000 ____D C:\Users\Admin
2019-04-13 12:38 - 2017-09-18 23:08 - 000000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2019-04-13 12:25 - 2018-06-07 09:41 - 000000000 ____D C:\Users\Admin\AppData\Local\D3DSCache
2019-04-13 11:41 - 2015-05-14 20:32 - 000000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit
2019-04-13 11:17 - 2018-04-12 01:38 - 000000000 ___HD C:\Program Files\WindowsApps
2019-04-13 11:15 - 2018-06-03 18:26 - 000476264 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw7e72c5246d5517c7.tmp
2019-04-13 10:40 - 2018-04-12 01:36 - 000000000 ____D C:\WINDOWS\INF
2019-04-13 10:38 - 2018-06-03 19:04 - 004964928 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-04-13 10:36 - 2018-06-03 19:48 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-04-11 22:23 - 2018-04-11 23:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-04-11 22:21 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\TextInput
2019-04-11 22:21 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2019-04-11 22:20 - 2018-04-12 18:19 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2019-04-11 22:20 - 2018-04-12 01:38 - 000000000 ___RD C:\Program Files\Windows Defender
2019-04-11 22:20 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-04-11 22:18 - 2014-03-28 12:30 - 000000000 ____D C:\Users\Admin\AppData\Roaming\SoftGrid Client
2019-04-11 21:46 - 2014-10-18 15:36 - 000000000 ____D C:\Users\Admin\Documents\Dokumente
2019-04-11 21:22 - 2018-04-12 01:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-04-11 20:58 - 2014-03-28 09:54 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-04-11 20:52 - 2014-03-28 09:54 - 131129288 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-04-11 20:37 - 2015-01-06 15:16 - 000000000 ____D C:\ProgramData\LogiShrd
2019-04-11 20:27 - 2014-10-29 23:35 - 000002293 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-04-08 22:11 - 2018-06-03 19:48 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2019-04-07 11:22 - 2018-06-03 19:11 - 002004578 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-04-07 11:22 - 2018-04-12 18:14 - 000854020 _____ C:\WINDOWS\system32\perfh007.dat
2019-04-07 11:22 - 2018-04-12 18:14 - 000191522 _____ C:\WINDOWS\system32\perfc007.dat
2019-04-07 10:40 - 2018-11-16 21:03 - 000000000 ____D C:\Program Files\rempl
2019-04-06 13:54 - 2017-06-21 02:09 - 000000000 ____D C:\Users\Bilder
2019-04-06 10:37 - 2018-02-02 02:02 - 000000000 ____D C:\Users\Admin\AppData\Roaming\7DaysToDie
2019-04-06 10:22 - 2019-03-09 14:38 - 000000000 ____D C:\Users\Admin\AppData\Roaming\EasyAntiCheat
2019-04-01 19:51 - 2018-11-14 18:56 - 000835480 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2019-04-01 19:51 - 2018-11-14 18:56 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2019-03-30 05:02 - 2016-12-27 23:51 - 000000000 ____D C:\Users\Admin\AppData\Roaming\discord
2019-03-30 02:49 - 2014-10-18 11:44 - 000000000 ____D C:\ProgramData\Mozilla
2019-03-30 00:56 - 2018-06-03 19:48 - 000003616 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2019-03-30 00:56 - 2018-06-03 19:48 - 000003542 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2019-03-30 00:56 - 2018-06-03 19:48 - 000003392 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2019-03-30 00:53 - 2016-12-27 23:51 - 000000000 ____D C:\Users\Admin\AppData\Local\Discord
2019-03-23 02:20 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\system32\UNP
2019-03-23 02:20 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-03-23 02:20 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\appraiser
2019-03-23 02:19 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\ShellExperiences
2019-03-23 02:19 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2019-03-19 21:22 - 2016-06-18 19:23 - 000000000 ____D C:\Users\Admin\AppData\Local\UnrealEngine
2019-03-19 20:35 - 2018-04-12 01:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2019-03-19 20:34 - 2019-02-13 14:07 - 000249152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw152831725e6f2af1.tmp
2019-03-19 20:34 - 2019-01-06 12:16 - 000037320 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw50a41cfb95e710c7.tmp
2019-03-19 20:34 - 2018-11-05 10:09 - 000042496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw6638c0e7f9e1ec8a.tmp
2019-03-19 20:34 - 2018-06-03 18:26 - 000476256 ____N (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys.155514688154601
2019-03-19 20:34 - 2018-06-03 18:26 - 000380160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswf4b2a643508df24d.tmp
2019-03-19 20:34 - 2018-06-03 18:26 - 000220632 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw09dd0acb71fece08.tmp
2019-03-19 20:34 - 2018-06-03 18:26 - 000205608 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw9234e28368db65d9.tmp
2019-03-19 20:34 - 2018-06-03 18:26 - 000169104 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswa44f7b7a0d246cc5.tmp
2019-03-19 20:34 - 2018-06-03 18:26 - 000112520 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw1bbabfdb5e33e09a.tmp
2019-03-19 20:34 - 2018-06-03 18:26 - 000088152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswd49601bc5765e268.tmp
2019-03-19 20:33 - 2019-01-17 19:34 - 000254408 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw4e0df759023d46b9.tmp
2019-03-19 20:33 - 2019-01-06 12:16 - 000320904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw698993b310030c8f.tmp
2019-03-19 20:33 - 2019-01-06 12:16 - 000196304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswfb22977e1ed9829e.tmp
2019-03-19 20:33 - 2019-01-06 12:16 - 000058168 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw98312d9efe23a630.tmp
2019-03-19 20:33 - 2018-06-03 18:26 - 001034640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw9741bac65ebb29c6.tmp

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-01-06 19:22 - 2017-05-26 20:02 - 000009728 _____ () C:\Users\Admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2018-08-26 16:54 - 2018-08-26 16:54 - 000002316 _____ () C:\Users\Admin\AppData\Local\recently-used.xbel
2015-06-14 20:41 - 2017-06-25 18:38 - 000007605 _____ () C:\Users\Admin\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\dllhost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dllhost.exe => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2018-06-03 19:04

==================== Ende von FRST.txt ============================


Shuyin 13.04.2019 13:13

Und hier die Addition:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 17.03.2019
durchgeführt von Admin (13-04-2019 14:05:07)
Gestartet von C:\Users\Admin\Downloads
Windows 10 Pro Version 1803 17134.706 (X64) (2018-06-03 17:50:07)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Admin (S-1-5-21-3980298719-2773488239-3045808690-1000 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-3980298719-2773488239-3045808690-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3980298719-2773488239-3045808690-503 - Limited - Disabled)
Gast (S-1-5-21-3980298719-2773488239-3045808690-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3980298719-2773488239-3045808690-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-PDF Split & Merge Version 2.5.0 (Build 168) (HKLM-x32\...\7-PDF Split & Merge_is1) (Version: 7-PDF Split & Merge - Version 2.5.0 (Build 168) - 7-PDF, Germany - Thorsten Hodes)
Adobe Shockwave Player 12.3 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.3.1.201 - Adobe Systems, Inc.)
Apple Application Support (32-Bit) (HKLM-x32\...\{5A659BE5-849B-484E-A83B-DCB78407F3A4}) (Version: 7.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{F8060941-C0AB-4BCE-88AC-F2FDA2E9F286}) (Version: 7.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5FA8C4BE-8C74-4B9C-9B49-EBF759230189}) (Version: 12.1.0.25 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version:  - Ubisoft)
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Big Fish: Game Manager (HKLM-x32\...\BFGC) (Version: 3.3.0.2 - )
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Brother MFL-Pro Suite MFC-290C (HKLM-x32\...\{48D082B9-18F6-4426-AFAC-8B6A3E7021B1}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5931 - CDBurnerXP)
CopyTrans Control Center deinstallieren (HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\CopyTrans Suite) (Version: 4.017 - WindSolutions)
CrystalDiskInfo 8.0.0 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 8.0.0 - Crystal Dew World)
Curse Client (HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Dark Parables: Goldlöckchen und der Stern der Wünsche Sammleredition (HKLM-x32\...\BFG-Dark Parables - Goldloeckchen und der Stern der Wuensche Sammleredition) (Version:  - )
Dawn of Hope: Skyline Abenteuer Sammleredition (HKLM-x32\...\BFG-Dawn of Hope - Skyline Abenteuer Sammleredition) (Version:  - )
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.69.43.024017 - Electronic Arts Inc.)
Discord (HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Discord) (Version: 0.0.305 - Discord Inc.)
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 416.16 - NVIDIA Corporation) Hidden
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 19.1 - Thüringer Landesfinanzdirektion)
Epic Games Launcher (HKLM-x32\...\{AF7881ED-41D7-4ECA-8C7C-AE10DFA0E489}) (Version: 1.1.151.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Free YouTube To MP3 Converter (HKLM-x32\...\Free YouTube To MP3 Converter_is1) (Version: 4.0.4.1029 - DVDVideoSoft Ltd.)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 73.0.3683.103 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.7 - Google LLC) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Grim Tales: Fäden des Schicksals (HKLM-x32\...\BFG-Grim Tales - Faeden des Schicksals) (Version:  - )
Gwent (HKLM-x32\...\1971477531_is1) (Version: 0.9.24.3.432 - GOG.com)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
iCloud (HKLM\...\{05D97028-FD26-4A3D-BADC-D1CA2E9F1214}) (Version: 7.10.0.9 - Apple Inc.)
Immortal Love: Wunder haben einen Preis (HKLM-x32\...\BFG-Immortal Love - Wunder haben einen Preis) (Version:  - )
IrfanView 4.50 (32-bit) (HKLM-x32\...\IrfanView) (Version: 4.50 - Irfan Skiljan)
iTunes (HKLM\...\{C704C598-39D0-4B12-BBFA-FF6D43C95BFD}) (Version: 12.9.3.3 - Apple Inc.)
Java 8 Update 201 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180201F0}) (Version: 8.0.2010.9 - Oracle Corporation)
Last Year: The Nightmare (HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\478637764565401630) (Version:  - )
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Logitech Gaming Software 8.98 (HKLM\...\Logitech Gaming Software) (Version: 8.98.218 - Logitech Inc.)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
Malwarebytes Anti-Exploit version 1.12.1.147 (HKLM\...\Malwarebytes Anti-Exploit_is1) (Version: 1.12.1.147 - Malwarebytes)
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.6122.5000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.6129.5001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\OneDriveSetup.exe) (Version: 18.151.0729.0012 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Might & Magic Heroes VI (HKLM-x32\...\{745D37C2-26F4-4B65-BA13-F9840EBFA75B}) (Version: 1.8 - Ubisoft)
Might and Magic Heroes VII (HKLM-x32\...\Uplay Install 1176) (Version:  - Ubisoft)
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 66.0.3 (x64 de) (HKLM\...\Mozilla Firefox 66.0.3 (x64 de)) (Version: 66.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 54.0 - Mozilla)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.11 - NVIDIA Corporation) Hidden
NVIDIA 3D Vision Controller-Treiber 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 416.16 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 416.16 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.15.0.164 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.15.0.164 - NVIDIA Corporation)
NVIDIA Grafiktreiber 416.16 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 416.16 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.37.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.37.5 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.18.0907 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.18.0907 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 10.5.21.179 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.118.2.33 - Overwolf Ltd.)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.140.248 - Google, Inc.)
PokerStars.net (HKLM-x32\...\PokerStars.net) (Version:  - PokerStars.net)
Queen's Quest III: Das Ende der Dämmerung Sammleredition (HKLM-x32\...\BFG-Queens Quest III - Das Ende der Daemmerung Sammleredition) (Version:  - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.2.0 - Rockstar Games)
Spotify (HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\Spotify) (Version: 1.0.45.186.g3b5036d6 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Syncios 6.1.4 (HKLM-x32\...\Syncios) (Version: 6.1.4 - Anvsoft)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Forgotten Fairytales: Reise nach Spectra Sammleredition (HKLM-x32\...\BFG-The Forgotten Fairytales - Reise nach Spectra Sammleredition) (Version:  - )
The Walking Dead (HKLM-x32\...\{067A7675-CF5E-456D-AB72-615E3BBB34CE}) (Version:  - Telltale Games)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.31.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Free DLC program (16 DLC) (HKLM-x32\...\Free DLC program (16 DLC)_is1) (Version: 1.31.0.0 - GOG.com)
TP-LINK TL-WN821N Driver (HKLM-x32\...\{26B52E5B-1620-4676-9B46-B6C56B8105CE}) (Version: 1.2.1 - TP-LINK)
Twitch (HKLM-x32\...\{1F2611FB-6F69-4AA8-BECD-243BD8CB45F3}) (Version: 6.0.0.0 - Twitch Interactive, Inc.)
Twitch (HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 8.0.0 - Twitch Interactive, Inc.)
Unity Web Player (x64) (All users) (HKLM\...\UnityWebPlayer) (Version: 4.6.6f2 - Unity Technologies ApS)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{B2E25355-C24E-4E7D-8AD3-455D59810838}) (Version: 2.57.0.0 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 4.8 - Ubisoft)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.70 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
YTD Video Downloader 5.9.8 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 5.9.8 - GreenTree Applications SRL) <==== ACHTUNG

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3980298719-2773488239-3045808690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-3980298719-2773488239-3045808690-1000_Classes\CLSID\{67dbd5b3-4935-49a1-b0d7-9ab53310d9f3}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Windows -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2019-01-15] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-10-02] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0AB300DE-58A7-47F8-8074-7559C251D8EC} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe (Apple Inc. -> Apple Inc.)
Task: {0E44159A-B6A3-4763-BD24-EFB1A2B9FED7} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {0F3A31FE-999B-45B6-BCF1-A2E11C848C43} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe
Task: {107182C3-8147-4025-88D7-670683E20D95} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {1075C6F1-D7E9-4598-8DA3-BA53C12421F2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {1375F71A-1645-4DD7-B030-D53C5BD97B35} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {170B5C22-43B1-41C3-83EC-71CDCBD71AA0} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {19C3820F-2251-42EA-8923-D222D5E75AF7} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {1AEEFE7D-67BA-40E4-855D-76EFCAB3FA65} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {1B3E7F41-4314-4A0F-9012-EF68BDBC7DCA} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {1B9A6809-903D-4080-8CE5-0AF47B49BE4C} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1EA70B72-BE39-43C0-AED7-8165831ED1E3} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {2AAE79E8-D40D-4984-8329-653FF53B2D38} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2ADAC3BB-5C3E-4CDE-880D-288FD6BE7846} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2CBD74C7-022A-42AB-BB79-73F444BC2411} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {34DE784D-8ECA-4B16-8B59-B89FF11D41EE} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {356D5C7D-F6E4-4C30-ACDC-ECF989B6AEBE} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {37C60830-CFAD-416A-AB94-39A85FDF020E} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {48A6D12D-CB15-4A78-8ECA-ACC4780AA6E1} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {599F6115-3848-4506-ADFE-755BEAE57B63} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5B74F499-7615-431A-B431-6AFE54B1D07B} - System32\Tasks\Microsoft\Windows\Flighting\FeatureConfig\ReconcileFeatures
Task: {5C5ED77C-D670-4F50-BEB3-079E73154D6E} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {60278E3A-3B08-46CF-93B8-295D9EBF4B07} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {675FEF00-9230-40D2-B8EB-69A15023206D} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6899DB0F-CCE5-4A91-AF96-070A7B91A6FB} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {68C5E84E-2672-4E80-83DC-844618DAFE85} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe (Overwolf Ltd -> Overwolf LTD)
Task: {6B845EAF-9AF6-46FC-BD3F-05DB5E51A72C} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {754B69B9-1E68-4B7C-9BFA-48921B292EBB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {7B323C2F-2395-4352-9BD2-DA59A144E8C8} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7D7BB82A-6F33-4B0F-9C10-660176BA03FE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {815F918D-5475-4B87-B373-049CFE77AA42} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {8FD5B74B-04A3-4DE1-963C-9FAEE7E9CF26} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {92046BE7-D25B-4626-811C-1A0361FB1EBB} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {923EE09C-72F5-49E4-926F-AAC343A143A1} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {9D0B5CC9-4A1C-44AF-87F8-4C3CBFDAA43F} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {A30755A2-9AC0-409F-8B26-511EE4EF2D13} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {A7F934C9-6587-4F8F-857D-87A9A37AF59B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {ADD0F212-78DC-4538-88B3-BDD1B31EDB46} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {AF033D66-CAD4-4DCD-A35D-0A2070C4FD80} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B17206E4-B922-4A71-983F-3F1CF98CD95F} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B3D05A67-C139-4AFA-A440-3FDDAEF08C19} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {B4D96B81-2207-4323-9D85-2118986DECDC} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {B6A43785-883B-4B87-A697-23A102EDE488} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B6A69130-14BA-4C8B-948E-3310E61FC14D} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {B9979F0E-FB70-4FDA-A0BF-A04C98664A3D} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B9D585E2-7A18-41FC-AC80-6D89FBC73F32} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1903.4-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {C15F91CC-8758-4733-9DF5-5D0CBB4489D7} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C6FC9D0D-A68B-4E32-84C8-1EBBDB06507B} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {CA565177-38BD-4580-888F-50C32B16F4BE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D0F4103B-3B6C-4BE1-882E-167B236A62DA} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {D31B1EB3-6F59-4788-8DEB-84C402FC5086} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG
Task: {D35A134F-04F2-4BAA-ACBB-68C4D1A357D2} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {E2BE6555-DB97-4397-86F8-2CFB6B90DF76} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe (Apple Inc. -> Apple Inc.)
Task: {EB97B95A-7EDC-4552-8910-E9A74DFFC713} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F121BE7E-541E-427E-ABFE-75E989AEBBB6} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {F2C94E47-53E3-4805-8118-33F61802E181} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F3C45966-B426-4CDA-ABB4-6A3E8B5FE800} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {F650C222-2088-4972-B60A-1C93DF3B8084} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F667076C-F20F-44AE-B9CA-55550CB32C6D} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {F67357A2-A6BC-4E0A-93CE-28149FBBA692} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {FA000C06-16AC-480D-A1D3-811D72F59054} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FB06EF73-8322-4FA0-AA18-6FF249D1265D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-11-02 18:45 - 2015-10-29 19:10 - 000382312 _____ (Digital Wave Ltd -> Digital Wave Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
2017-08-18 10:41 - 2017-08-18 10:41 - 000077824 _____ () [Datei ist nicht signiert] C:\Program Files\Logitech Gaming Software\LAClient\zlib.dll
2017-08-18 10:41 - 2017-08-18 10:41 - 000355840 _____ (The cURL library, hxxp://curl.haxx.se/) [Datei ist nicht signiert] C:\Program Files\Logitech Gaming Software\LAClient\LIBCURL.dll
2017-08-18 10:41 - 2017-08-18 10:41 - 000416627 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Logitech Gaming Software\LAClient\SSLEAY32.dll
2017-08-18 10:41 - 2017-08-18 10:41 - 000144896 _____ () [Datei ist nicht signiert] C:\Program Files\Logitech Gaming Software\LAClient\libssh2.dll
2017-08-18 10:41 - 2017-08-18 10:41 - 002286747 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Logitech Gaming Software\LAClient\LIBEAY32.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000958312 _____ (Digital Wave Ltd -> Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\MSVCR120.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000442728 _____ (Digital Wave Ltd -> Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\MSVCP120.dll
2015-11-02 18:45 - 2015-10-29 19:10 - 000196968 _____ (Digital Wave Ltd -> DVDVideoSoft Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\updhelperlib.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000110952 _____ (Digital Wave Ltd -> ) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000253800 _____ (Digital Wave Ltd -> ) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\collector.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 001160552 _____ (Digital Wave Ltd -> The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\LIBEAY32.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000125288 _____ (Digital Wave Ltd -> DVDVideoSoft Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\tier0.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000104296 _____ (Digital Wave Ltd -> ) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000020328 _____ (Digital Wave Ltd -> ) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000044392 _____ (Digital Wave Ltd -> ) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000286056 _____ (Digital Wave Ltd -> The cURL library, hxxp://curl.haxx.se/) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\libcurl.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000282472 _____ (Digital Wave Ltd -> DVDVideoSoft Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\dlmgr.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000295272 _____ (Digital Wave Ltd -> ) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\stat.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000272232 _____ (Digital Wave Ltd -> The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\SSLEAY32.dll
2015-11-02 18:45 - 2015-10-29 21:13 - 000771432 _____ (Digital Wave Ltd -> Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\MSVCR100.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:0B9DC6BB [190]
AlternateDataStreams: C:\ProgramData\TEMP:195E8317 [180]
AlternateDataStreams: C:\ProgramData\TEMP:20C00621 [225]
AlternateDataStreams: C:\ProgramData\TEMP:2187A2BB [219]
AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F [134]
AlternateDataStreams: C:\ProgramData\TEMP:2F947175 [170]
AlternateDataStreams: C:\ProgramData\TEMP:37AEC263 [240]
AlternateDataStreams: C:\ProgramData\TEMP:44A0FEC3 [468]
AlternateDataStreams: C:\ProgramData\TEMP:46CDAE37 [245]
AlternateDataStreams: C:\ProgramData\TEMP:4C235DA4 [237]
AlternateDataStreams: C:\ProgramData\TEMP:4EE36485 [242]
AlternateDataStreams: C:\ProgramData\TEMP:5167543E [238]
AlternateDataStreams: C:\ProgramData\TEMP:565D4B03 [241]
AlternateDataStreams: C:\ProgramData\TEMP:5C188F78 [220]
AlternateDataStreams: C:\ProgramData\TEMP:5E7551D4 [221]
AlternateDataStreams: C:\ProgramData\TEMP:667D4A95 [166]
AlternateDataStreams: C:\ProgramData\TEMP:7F477B0D [232]
AlternateDataStreams: C:\ProgramData\TEMP:87731E5E [175]
AlternateDataStreams: C:\ProgramData\TEMP:9E3D44B7 [388]
AlternateDataStreams: C:\ProgramData\TEMP:A19DFC74 [189]
AlternateDataStreams: C:\ProgramData\TEMP:A1EB942C [494]
AlternateDataStreams: C:\ProgramData\TEMP:B504E4C2 [169]
AlternateDataStreams: C:\ProgramData\TEMP:B61767F5 [177]
AlternateDataStreams: C:\ProgramData\TEMP:B6E58523 [187]
AlternateDataStreams: C:\ProgramData\TEMP:B74BD6BF [90]
AlternateDataStreams: C:\ProgramData\TEMP:B7D1FD90 [223]
AlternateDataStreams: C:\ProgramData\TEMP:BB6E0C06 [244]
AlternateDataStreams: C:\ProgramData\TEMP:C00C7190 [165]
AlternateDataStreams: C:\ProgramData\TEMP:C1616CD9 [222]
AlternateDataStreams: C:\ProgramData\TEMP:C453123E [246]
AlternateDataStreams: C:\ProgramData\TEMP:C50DBD80 [220]
AlternateDataStreams: C:\ProgramData\TEMP:C8E3A625 [442]
AlternateDataStreams: C:\ProgramData\TEMP:CF82DADF [224]
AlternateDataStreams: C:\ProgramData\TEMP:CFE660B9 [227]
AlternateDataStreams: C:\ProgramData\TEMP:D6A43EB0 [171]
AlternateDataStreams: C:\ProgramData\TEMP:DFB12512 [237]
AlternateDataStreams: C:\ProgramData\TEMP:EF123AF6 [227]
AlternateDataStreams: C:\ProgramData\TEMP:F176B6C6 [173]
AlternateDataStreams: C:\Users\Public\AppData:CSM [482]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\localhost -> localhost

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2019-01-05 11:57 - 000000030 _____ C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1      localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\system32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Windows Live\Shared;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Admin\Pictures\Bilder\1280x1024.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Keine Datei)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.

HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "LWS"
HKLM\...\StartupApproved\Run32: => "Syncios device service"
HKLM\...\StartupApproved\Run32: => "BrMfcWnd"
HKLM\...\StartupApproved\Run32: => "ControlCenter3"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\StartupFolder: => "CurseClientStartup.ccip"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "GalaxyClient"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "iCloudServices"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "iCloudDrive"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "iCloudPhotos"
HKU\S-1-5-21-3980298719-2773488239-3045808690-1000\...\StartupApproved\Run: => "Overwolf"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [UDP Query User{91586618-946C-4FB4-91CD-5005643AEF07}C:\program files (x86)\heroes of the storm\versions\base65285\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base65285\heroesofthestorm_x64.exe Keine Datei
FirewallRules: [TCP Query User{D5CE599F-BC72-4139-9B92-8EE7940047AF}C:\program files (x86)\heroes of the storm\versions\base65285\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base65285\heroesofthestorm_x64.exe Keine Datei
FirewallRules: [{FA0E4702-4093-4E15-B270-2626F46D64E7}] => (Allow) C:\Games\Steam\SteamApps\common\The Forest\TheForestVR.exe () [Datei ist nicht signiert]
FirewallRules: [{DAA29CEF-0243-4B9C-A15D-92C32AD4DF69}] => (Allow) C:\Games\Steam\SteamApps\common\The Forest\TheForestVR.exe () [Datei ist nicht signiert]
FirewallRules: [{97CC336C-6B98-408F-90D1-3241C64BB954}] => (Allow) C:\Games\Steam\SteamApps\common\The Forest\TheForest.exe () [Datei ist nicht signiert]
FirewallRules: [{E2E288BC-973B-4883-9CE9-FFDD0D83BA41}] => (Allow) C:\Games\Steam\SteamApps\common\The Forest\TheForest.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{5B6B753B-9851-43FC-BC23-13DF59657DC4}C:\games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{8D0AB38E-A89C-4DD6-8130-453DC5962439}C:\games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{248D0268-6379-41DF-9A1F-D50FBAE1017E}C:\games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{9BD958E7-D77F-4F5D-80F4-0B90BB678079}C:\games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{CD1D4941-86C2-4582-8E72-6910520AB4F0}C:\games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{E274FBF5-D677-40AD-973B-A339F7EDDFC2}C:\games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\games\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{624C8525-1D3E-464F-8F65-85A88E9BB9C3}C:\games\steam\steamapps\common\7 days to die rmod\7daystodie.exe] => (Allow) C:\games\steam\steamapps\common\7 days to die rmod\7daystodie.exe Keine Datei
FirewallRules: [TCP Query User{8664D5EB-CEE1-47EE-8A1A-2F9D79A5AD3E}C:\games\steam\steamapps\common\7 days to die rmod\7daystodie.exe] => (Allow) C:\games\steam\steamapps\common\7 days to die rmod\7daystodie.exe Keine Datei
FirewallRules: [{FC1CA88F-E491-4082-A011-A244340BCB83}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4EBA2AA2-1BE7-4135-9ED7-FB8D445CED42}] => (Allow) C:\Games\Steam\SteamApps\common\FINAL FANTASY IX\FF9_Launcher.exe () [Datei ist nicht signiert]
FirewallRules: [{0AFBA540-3B10-4BF5-A1E6-7BD15C05F813}] => (Allow) C:\Games\Steam\SteamApps\common\FINAL FANTASY IX\FF9_Launcher.exe () [Datei ist nicht signiert]
FirewallRules: [{141590C2-3110-44FD-9306-012C5DB79128}] => (Allow) C:\Games\Steam\SteamApps\common\FINAL FANTASY VII\FF7_Launcher.exe (Square Enix Ltd. -> )
FirewallRules: [{934CB9CE-FF9C-4407-86B3-034868175EDD}] => (Allow) C:\Games\Steam\SteamApps\common\FINAL FANTASY VII\FF7_Launcher.exe (Square Enix Ltd. -> )
FirewallRules: [UDP Query User{FE829D35-C82F-4921-9A82-5916D9C62894}C:\games\steam\steamapps\common\7 days to die\7daystodie.exe] => (Allow) C:\games\steam\steamapps\common\7 days to die\7daystodie.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{976FB3A8-03BC-48AC-94E4-FB4F2C6F4FD6}C:\games\steam\steamapps\common\7 days to die\7daystodie.exe] => (Allow) C:\games\steam\steamapps\common\7 days to die\7daystodie.exe () [Datei ist nicht signiert]
FirewallRules: [{1EB35C04-BC98-4557-A713-3525A67FF6CF}] => (Allow) C:\Games\Steam\SteamApps\common\7 Days To Die\7dLauncher.exe () [Datei ist nicht signiert]
FirewallRules: [{0299E3D2-12F3-430A-AF82-20CA25A6B9EF}] => (Allow) C:\Games\Steam\SteamApps\common\7 Days To Die\7dLauncher.exe () [Datei ist nicht signiert]
FirewallRules: [{7CD05211-4599-40AF-A989-6CB1FBF295EA}] => (Allow) C:\Games\Ubisoft Game Launcher\games\Assassin's Creed IV Black Flag\AC4BFMP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{BF45EB9C-D3D0-45CD-B8E3-9380EB8C103F}] => (Allow) C:\Games\Ubisoft Game Launcher\games\Assassin's Creed IV Black Flag\AC4BFMP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{1C098A03-26A5-45C7-BA6E-D44E62936CBB}] => (Allow) C:\Games\Ubisoft Game Launcher\games\Assassin's Creed IV Black Flag\AC4BFSP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{CC31B6E3-2EA6-4601-BD57-347AC66A3A6D}] => (Allow) C:\Games\Ubisoft Game Launcher\games\Assassin's Creed IV Black Flag\AC4BFSP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{5155D4E5-454D-4015-B993-606F65F2E8A5}] => (Allow) C:\Games\Steam\SteamApps\common\Crystals of Time\Crystals of Time.exe () [Datei ist nicht signiert]
FirewallRules: [{4F2EE6D9-2457-4800-AA58-00DBF751E097}] => (Allow) C:\Games\Steam\SteamApps\common\Crystals of Time\Crystals of Time.exe () [Datei ist nicht signiert]
FirewallRules: [{D295C900-9F94-4D5C-BE1F-8379766657E6}] => (Allow) LPort=1900
FirewallRules: [{48112717-B1BD-4207-87EF-2AC1540B1B0A}] => (Allow) LPort=2869
FirewallRules: [{FEE46130-1FC0-4235-9C20-0CDBDA4BAD4D}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{8D483CB3-2E14-42B8-ADFF-F1170DC6F1DA}C:\program files (x86)\gog galaxy\games\gwent\gwent.exe] => (Allow) C:\program files (x86)\gog galaxy\games\gwent\gwent.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{B31FE111-8414-4424-BDA6-48A64CD64904}C:\program files (x86)\gog galaxy\games\gwent\gwent.exe] => (Allow) C:\program files (x86)\gog galaxy\games\gwent\gwent.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{AD04857A-5FDB-4DEF-8671-D8DCC97C80B8}C:\users\admin\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\admin\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{6EA372A1-052E-4E88-AE19-219F942CEF38}C:\users\admin\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\admin\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{0449A45F-4E07-40EE-A04C-43ACB40601D4}C:\games\steam\steamapps\common\h1z1 king of the kill\h1z1.exe] => (Allow) C:\games\steam\steamapps\common\h1z1 king of the kill\h1z1.exe Keine Datei
FirewallRules: [TCP Query User{E3CA4442-9822-4696-80EE-DC01FBFCF9EC}C:\games\steam\steamapps\common\h1z1 king of the kill\h1z1.exe] => (Allow) C:\games\steam\steamapps\common\h1z1 king of the kill\h1z1.exe Keine Datei
FirewallRules: [{00FDF1E6-76AA-4724-A42A-6AC3E95C0895}] => (Allow) C:\Games\Steam\SteamApps\common\H1Z1 King of the Kill\LaunchPad.exe Keine Datei
FirewallRules: [{024FE7F4-B110-49B0-9C36-44078106AF47}] => (Allow) C:\Games\Steam\SteamApps\common\H1Z1 King of the Kill\LaunchPad.exe Keine Datei
FirewallRules: [{7B196BEB-4F81-4A74-A604-97E336CB2472}] => (Allow) C:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe Keine Datei
FirewallRules: [{256457AB-CE0B-445C-8B8B-39827A55BCCD}] => (Allow) C:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe Keine Datei
FirewallRules: [{562DB2B3-2F4C-490E-89B7-C636E35E4D52}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [UDP Query User{3E7910F9-7889-4892-A86F-7F3955D1658D}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [TCP Query User{1C761363-3E1D-4E0B-82ED-608013A75D78}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [{3C72DBCA-C707-41BB-9DA9-BFEE6C0785AE}] => (Allow) C:\Games\Steam\SteamApps\common\Fallout 4\Fallout4Launcher.exe (Bethesda Softworks) [Datei ist nicht signiert]
FirewallRules: [{4E55F47E-A945-478A-8982-814323AC762D}] => (Allow) C:\Games\Steam\SteamApps\common\Fallout 4\Fallout4Launcher.exe (Bethesda Softworks) [Datei ist nicht signiert]
FirewallRules: [{A0441FB0-512F-43F5-8429-7F683074CAD1}] => (Allow) C:\Games\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{32377C80-65D0-4749-A996-43E29E4E9E39}] => (Allow) C:\Games\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{658706B1-5E77-4784-BDBB-E1E75C7DEAFA}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [{5CE650F1-83E8-4644-8E8A-56FE5BBC48BA}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [{E08A2929-BA62-4E6A-A781-87C24E09BF2A}] => (Allow) C:\Games\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{EF1F2960-3FCE-475F-B926-7280BE96D0F0}] => (Allow) C:\Games\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [TCP Query User{CF335F13-7058-4729-8886-899D336D0205}C:\games\heroes of might&magic vi\might & magic heroes vi.exe] => (Allow) C:\games\heroes of might&magic vi\might & magic heroes vi.exe (Limbic Entertainment GmbH -> Black Hole Entertainment)
FirewallRules: [UDP Query User{53DBFE2B-5996-4ACF-AB26-A00AF7BDF7EF}C:\games\heroes of might&magic vi\might & magic heroes vi.exe] => (Allow) C:\games\heroes of might&magic vi\might & magic heroes vi.exe (Limbic Entertainment GmbH -> Black Hole Entertainment)
FirewallRules: [{9C846C10-3A01-4AB8-A8DD-2257E3527AEC}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [{ABAD258C-041A-48A6-819C-BF98267AE0B1}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [{7016414A-AF80-44B4-8983-5052769EC3A5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{B1CA6F07-71E2-42D0-9418-569FA5C3CAEE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{E7395505-38F3-4F95-A834-490481A10ADA}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{A75426AD-0FCD-4A2D-BFA9-6214CF9A1069}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F9FA37E8-3621-461C-909E-3859BB75D189}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Warframe.exe Keine Datei
FirewallRules: [{A2A3DE87-21DD-4E02-AD9F-D0C542EA1EC9}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Warframe.x64.exe Keine Datei
FirewallRules: [{C6B395B9-7470-490C-92C8-85CCD3A9B385}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Warframe.exe Keine Datei
FirewallRules: [{5456823E-7266-40FC-8988-CBE970066E0B}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Warframe.x64.exe Keine Datei
FirewallRules: [{353DEE2A-3DDF-42EB-98E9-0A8BF4174710}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Tools\Launcher.exe Keine Datei
FirewallRules: [{2B9A08FE-8573-4078-AB8F-3106E29CC397}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe Keine Datei
FirewallRules: [{1D18CF12-94F0-4089-8730-2CCE253A3132}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Warframe.exe Keine Datei
FirewallRules: [{4B1FB6A7-B75F-4123-ACF7-432579ED04A9}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Warframe.x64.exe Keine Datei
FirewallRules: [{2DE751CA-F2D1-4371-A5D1-CD7850653B87}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Warframe.exe Keine Datei
FirewallRules: [{8ABD0BD0-9291-4DA3-843B-0B6C8A01AFE8}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Warframe.x64.exe Keine Datei
FirewallRules: [{D2128E1F-218B-4669-933C-0A4BD743E8D8}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Tools\Launcher.exe Keine Datei
FirewallRules: [{00A75919-3561-421B-B9B2-88D57941DE82}] => (Allow) C:\Games\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe Keine Datei
FirewallRules: [{7E28241B-9897-465C-96DD-5D47626AFCF7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{99CE67B2-299D-4383-8ED3-E81C424FFAAD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe Keine Datei
FirewallRules: [{96E87DDA-14EA-435D-8490-E381618FCB42}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{853B66C9-BECE-4644-8BCD-FA4D1BF3D193}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{25D7E928-2D0E-4AD2-A4E8-B119C0CFF407}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4474F81F-895B-468B-9D6B-38B7F51F4FCF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F5CC905F-94A2-47C7-99E2-DFC590DF4590}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{242D3480-2E50-4611-8377-FBCDF161FE83}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C2EFB4F7-A5C5-47D0-9ECE-3583F257D105}] => (Allow) C:\Games\Ubisoft Game Launcher\games\Might and Magic Heroes VII\Binaries\Win64\MMH7Game-Win64-Shipping.exe (Limbic Entertainment GmbH -> Ubisoft, Inc.)
FirewallRules: [TCP Query User{F0B91633-CF64-4335-8076-1D0A3C31C3F9}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [UDP Query User{9E37AF27-DFB0-4E2B-AF58-654A0358F9BC}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [{4FA504A8-9F19-487B-9903-54840BF074EA}] => (Allow) C:\Games\Steam\SteamApps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{7CED4406-4925-4499-AAFE-7225FB94C513}] => (Allow) C:\Games\Steam\SteamApps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [TCP Query User{D745747A-D81B-4D5D-8763-343B0AC5ECB5}C:\games\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) C:\games\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{9ACED6CD-0432-4F69-B203-91E4FDDA998F}C:\games\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) C:\games\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{43D81546-74C9-4539-B147-27729F587138}] => (Allow) C:\Games\Steam\SteamApps\common\The Binding Of Isaac\Isaac.exe (Edmund Mcmillen & Florian Himsl ) [Datei ist nicht signiert]
FirewallRules: [{A3255493-8D63-4FD3-8653-ACC78386C264}] => (Allow) C:\Games\Steam\SteamApps\common\The Binding Of Isaac\Isaac.exe (Edmund Mcmillen & Florian Himsl ) [Datei ist nicht signiert]
FirewallRules: [{826FF667-2940-47A8-9020-CA550630FD96}] => (Allow) C:\Games\Steam\SteamApps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe (Valve Corp. -> Irrational Games)
FirewallRules: [{80BA1865-ED77-41BA-A3B9-0A339D35D224}] => (Allow) C:\Games\Steam\SteamApps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe (Valve Corp. -> Irrational Games)
FirewallRules: [{B01585EB-6762-42C3-A9B7-CD9F16F54C8F}] => (Allow) C:\Program Files (x86)\Anvsoft\Syncios\pdt_syncios.exe (Anvsoft Inc. -> Syncios Data Transfer)
FirewallRules: [{A257D034-51A6-4DFC-9498-36641310CD66}] => (Allow) C:\Games\Steam\SteamApps\common\Day of the Tentacle Remastered\Dott.exe (Double Fine Productions) [Datei ist nicht signiert]
FirewallRules: [{26AB552B-8543-437E-8069-879489736C61}] => (Allow) C:\Games\Steam\SteamApps\common\Day of the Tentacle Remastered\Dott.exe (Double Fine Productions) [Datei ist nicht signiert]
FirewallRules: [{3B16FB3A-391E-4552-B2F7-32CAAA2134DF}] => (Allow) C:\Games\Steam\SteamApps\common\WormsRevolution\WormsRevolution.exe () [Datei ist nicht signiert]
FirewallRules: [{F1671749-D48E-435D-9B99-3AF0CF4B46AD}] => (Allow) C:\Games\Steam\SteamApps\common\WormsRevolution\WormsRevolution.exe () [Datei ist nicht signiert]
FirewallRules: [{6C27287A-7653-4E67-992D-B0DC92C0E6D5}] => (Allow) C:\Games\GTA V\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{58717B16-5A58-4F3C-BA6C-988E72C37A07}] => (Allow) C:\Games\GTA V\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{91221136-E375-41C3-993C-7EE1EA9BA9F9}] => (Allow) C:\Games\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{8D1EDAD2-F66D-4C72-8F08-37A0893B9938}] => (Allow) C:\Games\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{9D1B5246-E552-4CF1-A29F-68FD575FA80C}] => (Allow) C:\Games\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe (Wildcard Properties LLC -> Epic Games, Inc.)
FirewallRules: [{3A5FB783-3438-4539-A90C-6934D05B789D}] => (Allow) C:\Games\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe (Wildcard Properties LLC -> Epic Games, Inc.)
FirewallRules: [{EF0C8522-B0EE-4997-B39B-A22D457F8899}] => (Allow) C:\Games\Steam\SteamApps\common\Shadowrun Returns\Shadowrun.exe () [Datei ist nicht signiert]
FirewallRules: [{B7F1DADB-BBA4-4886-AB02-A55549A50CD9}] => (Allow) C:\Games\Steam\SteamApps\common\Shadowrun Returns\Shadowrun.exe () [Datei ist nicht signiert]
FirewallRules: [{2DF31FFC-C921-418D-92D5-18E647E6597F}] => (Allow) C:\Games\Steam\SteamApps\common\Age2HD\Launcher.exe (TODO: <Company name>) [Datei ist nicht signiert]
FirewallRules: [{727C60AF-A5ED-44A2-A926-4D8A254B5E95}] => (Allow) C:\Games\Steam\SteamApps\common\Age2HD\Launcher.exe (TODO: <Company name>) [Datei ist nicht signiert]
FirewallRules: [{3B403097-72BA-47FD-A84A-DF766DEF25F8}] => (Allow) C:\Games\Steam\SteamApps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox_BE.exe (FUNCOM OSLO AS -> BattlEye Innovations)
FirewallRules: [{C73D6480-044C-4742-85A1-A73EE7CD89B2}] => (Allow) C:\Games\Steam\SteamApps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox_BE.exe (FUNCOM OSLO AS -> BattlEye Innovations)
FirewallRules: [{6DFDAC77-8A9D-4271-B2D6-7AB862050D28}] => (Allow) C:\Games\Steam\SteamApps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox.exe (FUNCOM OSLO AS -> Funcom Oslo AS)
FirewallRules: [{94450024-0574-4010-9D81-5BC5ABBB5A1A}] => (Allow) C:\Games\Steam\SteamApps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox.exe (FUNCOM OSLO AS -> Funcom Oslo AS)
FirewallRules: [{9DDA2956-262B-4D4C-87EE-DFDC1F381227}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{4F320E5F-6D9A-425C-A0BE-0ACDEA79B7F3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{BE344FE6-965E-4491-9B2B-E9D4A492179A}] => (Allow) C:\Games\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{6C7A775B-7FA3-4F03-B478-085D550B2314}] => (Allow) C:\Games\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{4BF46722-1CBA-4D6F-BFAC-6E604B02FE70}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F1722F8B-24B7-4EEC-9EA6-2CC08956A657}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{FBC0754F-99BC-4766-9D95-CBB32BDB39C5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{247CE6C0-9ED8-4F7E-90DA-ADF94CF06024}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F20F98EB-3ADF-4DC3-919C-7477B769B58C}] => (Allow) C:\Games\Steam\SteamApps\common\Ben and Ed\BenAndEd.exe () [Datei ist nicht signiert]
FirewallRules: [{5801DA57-E489-4D05-9622-032FB17E93FB}] => (Allow) C:\Games\Steam\SteamApps\common\Ben and Ed\BenAndEd.exe () [Datei ist nicht signiert]
FirewallRules: [{C8C8C016-C5BE-462A-A7D5-FFC0E8521DAB}] => (Allow) C:\Games\Steam\SteamApps\common\Ben and Ed - Blood Party\BaEBloodParty.exe () [Datei ist nicht signiert]
FirewallRules: [{8EB3CB15-8F8A-4D68-ABC8-97A9608D967D}] => (Allow) C:\Games\Steam\SteamApps\common\Ben and Ed - Blood Party\BaEBloodParty.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{B2878FE4-F92B-4D53-9873-3BC612C43B8F}C:\games\steam\steamapps\common\ben and ed\benanded\binaries\win32\benanded.exe] => (Allow) C:\games\steam\steamapps\common\ben and ed\benanded\binaries\win32\benanded.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{E44D739E-0F10-4165-992D-B7ABC501D362}C:\games\steam\steamapps\common\ben and ed\benanded\binaries\win32\benanded.exe] => (Allow) C:\games\steam\steamapps\common\ben and ed\benanded\binaries\win32\benanded.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{7C2EEF8A-CEC0-4ABD-9AF6-70DD55D93D35}] => (Allow) C:\Games\Steam\SteamApps\common\Shakes & Fidget\Shakes and Fidget.exe () [Datei ist nicht signiert]
FirewallRules: [{197F105F-01F1-422B-AE84-945BA2352D99}] => (Allow) C:\Games\Steam\SteamApps\common\Shakes & Fidget\Shakes and Fidget.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{BB918DA0-889E-4882-A98C-115483FB85F8}C:\games\steam\steamapps\common\ben and ed - blood party\baebloodparty\binaries\win32\baebloodparty-win32-debuggame.exe] => (Allow) C:\games\steam\steamapps\common\ben and ed - blood party\baebloodparty\binaries\win32\baebloodparty-win32-debuggame.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{DAEBCE4F-9EBD-43C0-BB7A-510CDD303D59}C:\games\steam\steamapps\common\ben and ed - blood party\baebloodparty\binaries\win32\baebloodparty-win32-debuggame.exe] => (Allow) C:\games\steam\steamapps\common\ben and ed - blood party\baebloodparty\binaries\win32\baebloodparty-win32-debuggame.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{D51E499F-7E03-4353-84E2-65E06280822A}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C5456322-DAF9-4276-871F-4B835C5F305E}] => (Allow) C:\Games\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, Inc) [Datei ist nicht signiert]
FirewallRules: [{6E5FA043-7E28-46AF-ABD9-D80C4E6B5156}] => (Allow) C:\Games\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, Inc) [Datei ist nicht signiert]
FirewallRules: [{5361E50A-5590-4E57-A3DA-682B366F3303}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)

==================== Wiederherstellungspunkte =========================

13-04-2019 13:29:01 Removed Adobe Acrobat Reader DC - Deutsch.

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (04/13/2019 01:48:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15500

Error: (04/13/2019 01:48:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15500

Error: (04/13/2019 01:48:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/13/2019 01:28:17 PM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: SHUYIN)
Description: httphttp-2147467263

Error: (04/13/2019 12:58:05 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT-AUTORITÄT)
Description: Product: Avast Update Helper -- Error 1316. Das angegebene Konto ist bereits vorhanden.

Error: (04/13/2019 12:41:36 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT-AUTORITÄT)
Description: Product: Avast Update Helper -- Error 1316. Das angegebene Konto ist bereits vorhanden.

Error: (04/13/2019 12:38:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PickerHost.Exe, Version: 10.0.17134.1, Zeitstempel: 0x2fa59209
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.17134.556, Zeitstempel: 0x74bed8b0
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000f479b
ID des fehlerhaften Prozesses: 0xe48
Startzeit der fehlerhaften Anwendung: 0x01d4f1e505db1f48
Pfad der fehlerhaften Anwendung: C:\Windows\System32\PickerHost.Exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll
Berichtskennung: 15dff58d-df3b-4e7f-9964-b816a65dc112
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (04/13/2019 12:33:04 PM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: SHUYIN)
Description: httphttp-2147467263


Systemfehler:
=============
Error: (04/13/2019 01:32:34 PM) (Source: DCOM) (EventID: 10005) (User: SHUYIN)
Description: Fehler "2" in DCOM, als der Dienst "AvastSecureBrowserElevationService" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
{620A093F-79D3-4CAB-8CAD-EB1A39A8C0A2}

Error: (04/13/2019 01:32:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Avast Secure Browser Elevation Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.

Error: (04/13/2019 01:05:21 PM) (Source: DCOM) (EventID: 10016) (User: SHUYIN)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "SHUYIN\Admin" (SID: S-1-5-21-3980298719-2773488239-3045808690-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
 und der APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
 im Anwendungscontainer "Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/13/2019 12:35:51 PM) (Source: DCOM) (EventID: 10016) (User: SHUYIN)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "SHUYIN\Admin" (SID: S-1-5-21-3980298719-2773488239-3045808690-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/13/2019 12:35:51 PM) (Source: DCOM) (EventID: 10016) (User: SHUYIN)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "SHUYIN\Admin" (SID: S-1-5-21-3980298719-2773488239-3045808690-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/13/2019 12:35:51 PM) (Source: DCOM) (EventID: 10016) (User: SHUYIN)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "SHUYIN\Admin" (SID: S-1-5-21-3980298719-2773488239-3045808690-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/13/2019 12:33:02 PM) (Source: DCOM) (EventID: 10016) (User: SHUYIN)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "SHUYIN\Admin" (SID: S-1-5-21-3980298719-2773488239-3045808690-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (04/13/2019 12:32:34 PM) (Source: DCOM) (EventID: 10005) (User: SHUYIN)
Description: Fehler "2" in DCOM, als der Dienst "AvastSecureBrowserElevationService" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
{620A093F-79D3-4CAB-8CAD-EB1A39A8C0A2}


CodeIntegrity:
===================================

Date: 2019-04-13 13:37:23.699
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-04-13 13:37:00.240
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-04-13 10:38:53.809
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-04-13 10:38:25.383
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-04-11 22:22:38.471
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-04-11 20:16:04.020
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-04-11 20:14:54.502
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-04-08 14:30:21.532
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll that did not meet the Microsoft signing level requirements.

==================== Speicherinformationen ===========================

Prozessor: AMD FX(tm)-6300 Six-Core Processor
Prozentuale Nutzung des RAM: 42%
Installierter physikalischer RAM: 8189.55 MB
Verfügbarer physikalischer RAM: 4735.86 MB
Summe virtueller Speicher: 16381.55 MB
Verfügbarer virtueller Speicher: 12290.56 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:930.97 GB) (Free:25.17 GB) NTFS

\\?\Volume{d1100f04-b5b1-11e3-869c-806e6f6e6963}\ (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
\\?\Volume{2cc7c6e0-0000-0000-0000-a0c4e8000000}\ () (Fixed) (Total:0.44 GB) (Free:0.04 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 2CC7C6E0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

==================== Ende von Addition.txt ============================



Alle Zeitangaben in WEZ +1. Es ist jetzt 21:51 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131