Trojaner-Board - Firefox lädt ständig - ununterbrochen neu/Werbung/neue Tabs/neue Fenster

Schönen guten Tag,

Problem: Ich habe seit ca. 1 1/2 Wochen das Problem, dass mein Browser (Firefox) sehr langsam ist. Er öffnet bei jedem Klick neue Tabs oder überlädt meine derzeitige Webseite mit Gewinnspielen, Online-Games etc. Ein weiteres Problem ist, dass der Browser die Seiten alle paar Sekunden neu lädt und die Surfgeschwindigkeit damit sehr stark herrunterzieht :kaffee: (Wenn ich etwas eingebe wie "youtube.de", steht in der Leiste z.B. nur "yot.d", da er beim Neuladen die zurzeit eingegebenen Buchstaben überlädt). Hinzu kommen die überall aufpopenden Werbungen (geschätzt 6-8 pro Seite :daumenrunter:).

Ab und zu öffnet sich mitten auf meinem Desktop auch ein Fenster, welches auf japanisch ist und Games, sowie japanische Sexspielzeuge etc. verkauft.

Initiativen: Ich habe versucht die lästige Werbung mit dem Adblocker Plus zu verdrängen - ohne Erfolg. Den AdwCleaner habe ich auch bereits über meinen Laptop laufen lassen - keine Verbesserung.:killpc:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:04-10-2015

durchgeführt von Birk (Administrator) auf BIRK-LAPTOP (06-10-2015 12:33:52)

Gestartet von C:\Users\Birk\Downloads

Geladene Profile: UpdatusUser & Birk (Verfügbare Profile: UpdatusUser & Birk & Administrator & Gast)

Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe

(Preventon Technologies Limited) C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVWatchService.exe

(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe

(Preventon Technologies Limited) C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVScanningService.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

(Unique Solutions) C:\ProgramData\oosJofav\NxOwePAG.exe

(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE

(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\BCMWLTRY.EXE

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

(Intel Corporation) C:\Windows\System32\igfxTray.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_185.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_185.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe

() C:\ProgramData\Gniguiluss\1.0.6.1\eoimknue.exe

() C:\ProgramData\Gniguiluss\1.0.6.1\eoimknue.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe

(eyuwi) C:\ProgramData\uiksdl201591916\calibre.exe

(eyuwi) C:\ProgramData\uiksdl201591916\calibre.exe

(Farbar) C:\Users\Birk\Downloads\FRST64(1).exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)

HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.exe [10590208 2013-03-14] (Broadcom Corporation)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3928264 2015-05-27] (Synaptics Incorporated)

HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin)

HKLM\...\Policies\Explorer: [NoFolderOptions] 0

HKLM\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-2214603426-1893447350-2076376546-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [517632 2015-07-10] (Microsoft Corporation)

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\Run: [Speech Recognition] => C:\WINDOWS\Speech\Common\sapisvr.exe [45056 2015-07-10] (Microsoft Corporation)

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\MountPoints2: {461c7f39-cef7-11e3-824f-806e6f6e6963} - "D:\autorun.exe" 

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\MountPoints2: {73e2bd98-6cc4-11e3-be74-0c84dcf636ac} - "E:\pushinst.exe" 

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\MountPoints2: {ccb30605-9e88-11e4-be8a-0c84dcf636ac} - "F:\pushinst.exe" 

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> none

AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [176904 2015-07-23] (NVIDIA Corporation)

ShellIconOverlayIdentifiers: [Fatlfn] -> {646BAAE7-7538-4866-8EEE-974C0AA910AB} =>  Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  Keine Datei

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\..\Interfaces\{75c84c69-d965-405d-9cde-0a6bf9d640f2}: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{84d1984e-0943-4b0c-9323-5c23cffcdbae}: [NameServer] 192.168.178.1

Tcpip\..\Interfaces\{d10eb9e6-1147-4f35-b422-fb6163ee8e33}: [NameServer] 8.8.8.8,8.8.4.4

Tcpip\..\Interfaces\{d10eb9e6-1147-4f35-b422-fb6163ee8e33}: [DhcpNameServer] 192.168.178.1
 

Internet Explorer:

==================

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130878428700418758&GUID=58F89681-4E70-4E55-A70E-4D8AAA245A35

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130878428710246746&GUID=58F89681-4E70-4E55-A70E-4D8AAA245A35

HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130878428700441451&GUID=58F89681-4E70-4E55-A70E-4D8AAA245A35

HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130878428700447701&GUID=58F89681-4E70-4E55-A70E-4D8AAA245A35

HKU\S-1-5-21-2214603426-1893447350-2076376546-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130878428700457012&GUID=58F89681-4E70-4E55-A70E-4D8AAA245A35

HKU\S-1-5-21-2214603426-1893447350-2076376546-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130878650832125081&GUID=58F89681-4E70-4E55-A70E-4D8AAA245A35

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://vaioportal.sony.eu

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

SearchScopes: HKLM-x32 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

SearchScopes: HKU\S-1-5-21-2214603426-1893447350-2076376546-1001 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

SearchScopes: HKU\S-1-5-21-2214603426-1893447350-2076376546-1001 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

SearchScopes: HKU\S-1-5-21-2214603426-1893447350-2076376546-1002 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}

SearchScopes: HKU\S-1-5-21-2214603426-1893447350-2076376546-1002 -> {F33BECA0-6B78-4D55-A67E-587BABFA0F3F} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-&_nkw={searchTerms}

BHO-x32: FunFeedr -> {11B16A3D-F03E-4565-A532-E66B219C9B03} -> C:\Users\Birk\AppData\Local\ext_funfeedr\ext_funfeedr.dll [2015-03-30] ()
 

FireFox:

========

FF ProfilePath: C:\Users\Birk\AppData\Roaming\Mozilla\Firefox\Profiles\aasdbd5n.default-1443433894913

FF NewTab: 

FF SelectedSearchEngine: 

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-10-01] ()

FF Plugin: @iqiyi.com/npWebPlayer -> C:\IQIYI Video\LStyle\npWebPlayer.dll [Keine Datei]

FF Plugin: @java.com/DTPlugin,version=10.13.2 -> C:\Windows\system32\npDeployJava1.dll [2013-09-03] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.13.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-09-03] (Oracle Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-10-01] ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-01-23] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-01-23] (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=10.13.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-09-03] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.13.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-09-03] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll [2011-03-09] ( Microsoft Corporation)

FF Plugin-x32: @rising.com.cn/nprising -> C:\Program Files (x86)\Rising\RAV\nprising.dll [Keine Datei]

FF Plugin-x32: Adobe Reader -> c:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-2214603426-1893447350-2076376546-1002: @rising.com.cn/nprising -> C:\Program Files (x86)\Rising\RAV\nprising.dll Keine Datei

FF Plugin HKU\S-1-5-21-2214603426-1893447350-2076376546-1002: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll [2013-02-19] (Intel)

FF Plugin HKU\S-1-5-21-2214603426-1893447350-2076376546-1002: intel.com/AppUpx64 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll [2013-02-19] (Intel)

FF Extension: fbchathistoryfirechmcom - C:\Users\Birk\AppData\Roaming\Mozilla\Firefox\Profiles\aasdbd5n.default-1443433894913\Extensions\fbchathistory@firechm.com [2015-10-01]

FF Extension: resteasyquickmediasolutionscom - C:\Users\Birk\AppData\Roaming\Mozilla\Firefox\Profiles\aasdbd5n.default-1443433894913\Extensions\rest-easy@quickmediasolutions.com [2015-10-01]

FF Extension: SilentBlockschuzakjp - C:\Users\Birk\AppData\Roaming\Mozilla\Firefox\Profiles\aasdbd5n.default-1443433894913\Extensions\SilentBlock@schuzak.jp [2015-10-01]

FF Extension: A5475360A7EA437b9A7929208F476940 - C:\Users\Birk\AppData\Roaming\Mozilla\Firefox\Profiles\aasdbd5n.default-1443433894913\Extensions\{A5475360-A7EA-437b-9A79-29208F476940} [2015-10-01]

FF Extension: AF445D67154C4c69A17B7F392BCC36A3 - C:\Users\Birk\AppData\Roaming\Mozilla\Firefox\Profiles\aasdbd5n.default-1443433894913\Extensions\{AF445D67-154C-4c69-A17B-7F392BCC36A3} [2015-10-01]

FF Extension: Adblock Plus - C:\Users\Birk\AppData\Roaming\Mozilla\Firefox\Profiles\aasdbd5n.default-1443433894913\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-28]

FF HKLM\...\Firefox\Extensions: [{EDCFF773-F96F-419C-8FD9-91260F579F0E}] - C:\Program Files\shopperz190920151920\Firefox => nicht gefunden

FF HKLM-x32\...\Firefox\Extensions: [{EDCFF773-F96F-419C-8FD9-91260F579F0E}] - C:\Program Files\shopperz190920151920\Firefox => nicht gefunden

FF HKLM-x32\...\Firefox\Extensions: [arthurj8283@gmail.com] - C:\Users\Birk\AppData\Roaming\Mozilla\Firefox\Profiles\bh8meza8.default-1425064794684\extensions\arthurj8283@gmail.com => nicht gefunden

FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\browser\defaults\preferences\prefs.js [2015-09-27] <==== ACHTUNG (Zeigt auf eine *.cfg Datei)

FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\cfg [2015-09-27] <==== ACHTUNG
 

Chrome: 

=======

CHR HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jlcgehabolcakkjhgmgpkagpolbjlhfa] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AV Engine Scanning Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVScanningService.exe [2009912 2015-07-27] (Preventon Technologies Limited)

R2 AV Watch Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVWatchService.exe [400528 2015-07-27] (Preventon Technologies Limited)

R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [Datei ist nicht signiert]

R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2015-03-27] (Broadcom Corporation.)

R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [8704 2015-09-02] (Hi-Rez Studios) [Datei ist nicht signiert]

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319888 2015-07-11] (Intel Corporation)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129824 2013-01-23] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166688 2013-01-23] (Intel Corporation)

S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [629336 2013-09-28] (Sony Corporation)

S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [3611808 2015-07-22] (INCA Internet Co., Ltd.)

R2 NxOwePAG; C:\ProgramData\oosJofav\NxOwePAG.exe [2731488 2015-09-20] (Unique Solutions)

S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2013-01-06] (Sony Corporation)

R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1642544 2014-02-28] (Sony Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe [6070272 2013-03-14] (Broadcom Corporation) [Datei ist nicht signiert]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 AVFSFilter; C:\Windows\system32\DRIVERS\avfsfilter.sys [13720 2015-07-27] ()

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [173312 2015-03-27] (Broadcom Corporation.)

R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7488176 2015-04-13] (Broadcom Corporation)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation)

S3 dump_wmimmc; C:\Users\Birk\Desktop\Sonstiges\Tools\GameforgeLive\Metin 2\GameforgeLive\Games\DEU_deu\Metin2\GameGuard\dump_wmimmc.sys [183144 2015-09-04] ()

R3 fwlanusbn; C:\Windows\system32\DRIVERS\fwlanusbn.sys [714368 2010-10-22] (AVM GmbH)

S3 hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [44296 2015-02-17] (LogMeIn Inc.)

R1 HyperVM; C:\WINDOWS\system32\drivers\hvm.sys [41784 2015-09-19] (Beijing Rising Information Technology Co., Ltd.)

R1 rsutils; C:\Windows\System32\DRIVERS\rsutils.sys [71760 2015-04-09] (Beijing Rising Information Technology Co., Ltd.)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-05-27] (Synaptics Incorporated)

R0 sysmon; C:\Windows\System32\DRIVERS\sysmon.sys [119168 2015-09-19] (Beijing Rising Information Technology Co., Ltd.)

S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)

S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-10-06 12:29 - 2015-10-06 12:29 - 02193920 _____ (Farbar) C:\Users\Birk\Downloads\FRST64(1).exe

2015-10-06 12:28 - 2015-10-06 12:29 - 00000470 _____ C:\Users\Birk\Downloads\defogger_disable.log

2015-10-06 12:28 - 2015-10-06 12:28 - 00050477 _____ C:\Users\Birk\Downloads\Defogger.exe

2015-10-06 12:28 - 2015-10-06 12:28 - 00000000 _____ C:\Users\Birk\defogger_reenable

2015-10-06 11:43 - 2015-10-06 11:43 - 00688992 ____R (Swearware) C:\Users\Birk\Downloads\dds.com

2015-10-06 11:15 - 2015-10-06 11:15 - 00000795 _____ C:\WINDOWS\setupact.log

2015-10-06 11:15 - 2015-10-06 11:15 - 00000000 _____ C:\WINDOWS\setuperr.log

2015-10-06 11:13 - 2015-10-06 11:13 - 00016148 _____ C:\WINDOWS\system32\BIRK-LAPTOP_Birk_HistoryPrediction.bin

2015-10-05 18:41 - 2015-10-05 18:41 - 707215728 _____ C:\WINDOWS\MEMORY.DMP

2015-10-05 18:41 - 2015-10-05 18:41 - 00357784 _____ C:\WINDOWS\Minidump\100515-33640-01.dmp

2015-10-03 13:39 - 2015-10-06 12:02 - 00000000 ____D C:\Users\Birk\AppData\Local\DesktopSearch

2015-10-03 13:35 - 2015-10-03 13:35 - 00000000 ____D C:\ProgramData\Rising

2015-10-03 13:28 - 2015-10-03 13:28 - 09907448 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll

2015-10-03 13:28 - 2015-10-03 13:28 - 00000000 ____D C:\WINDOWS\LastGood.Tmp

2015-10-01 17:57 - 2015-10-06 11:14 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log

2015-10-01 17:57 - 2015-09-15 18:12 - 00812008 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2015-10-01 17:57 - 2015-09-15 18:12 - 00178152 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2015-10-01 17:55 - 2015-10-05 18:41 - 00002846 _____ C:\WINDOWS\PFRO.log

2015-10-01 17:55 - 2015-10-01 17:56 - 00223736 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2015-10-01 15:50 - 2015-10-01 15:51 - 36282350 _____ C:\Users\Birk\Downloads\install_flash_player_19.zip

2015-10-01 15:48 - 2015-10-01 15:48 - 01152716 _____ C:\Users\Birk\Downloads\2938740_hd.mp4.crdownload

2015-09-30 22:00 - 2015-09-17 08:49 - 06487248 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2015-09-30 22:00 - 2015-09-17 08:28 - 05120056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2015-09-30 22:00 - 2015-09-17 08:12 - 16708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2015-09-30 22:00 - 2015-09-17 08:07 - 21875712 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2015-09-30 22:00 - 2015-09-17 08:04 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll

2015-09-30 22:00 - 2015-09-17 08:00 - 24595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2015-09-30 22:00 - 2015-09-17 07:54 - 03781120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2015-09-30 22:00 - 2015-09-17 07:53 - 07055872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll

2015-09-30 22:00 - 2015-09-17 07:51 - 13027840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2015-09-30 22:00 - 2015-09-17 07:51 - 02660864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll

2015-09-30 22:00 - 2015-09-17 07:47 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2015-09-30 22:00 - 2015-09-17 07:45 - 19325440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2015-09-30 22:00 - 2015-09-17 07:40 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll

2015-09-30 22:00 - 2015-09-17 07:37 - 18806272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2015-09-30 22:00 - 2015-09-17 07:35 - 05079552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll

2015-09-30 21:59 - 2015-09-25 02:13 - 01276416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll

2015-09-30 21:59 - 2015-09-25 01:17 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2015-09-30 21:59 - 2015-09-25 01:06 - 01423872 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll

2015-09-30 21:59 - 2015-09-25 01:01 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll

2015-09-30 21:59 - 2015-09-25 01:00 - 01205248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll

2015-09-30 21:59 - 2015-09-25 00:42 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll

2015-09-30 21:59 - 2015-09-25 00:25 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll

2015-09-30 21:59 - 2015-09-25 00:25 - 00625152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll

2015-09-30 21:59 - 2015-09-17 08:50 - 02464216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2015-09-30 21:59 - 2015-09-17 08:50 - 01563392 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll

2015-09-30 21:59 - 2015-09-17 08:49 - 08020816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2015-09-30 21:59 - 2015-09-17 08:49 - 01563472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll

2015-09-30 21:59 - 2015-09-17 08:49 - 00894256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys

2015-09-30 21:59 - 2015-09-17 08:48 - 02824248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll

2015-09-30 21:59 - 2015-09-17 08:48 - 02494712 _____ C:\WINDOWS\system32\CoreUIComponents.dll

2015-09-30 21:59 - 2015-09-17 08:48 - 02432336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2015-09-30 21:59 - 2015-09-17 08:48 - 02156400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll

2015-09-30 21:59 - 2015-09-17 08:48 - 01983824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2015-09-30 21:59 - 2015-09-17 08:48 - 00809352 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll

2015-09-30 21:59 - 2015-09-17 08:48 - 00784136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll

2015-09-30 21:59 - 2015-09-17 08:47 - 01397088 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll

2015-09-30 21:59 - 2015-09-17 08:44 - 00781976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll

2015-09-30 21:59 - 2015-09-17 08:43 - 00966416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll

2015-09-30 21:59 - 2015-09-17 08:37 - 01295712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll

2015-09-30 21:59 - 2015-09-17 08:28 - 02154808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2015-09-30 21:59 - 2015-09-17 08:27 - 01766952 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2015-09-30 21:59 - 2015-09-17 08:26 - 02446648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll

2015-09-30 21:59 - 2015-09-17 08:26 - 00646672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll

2015-09-30 21:59 - 2015-09-17 08:25 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll

2015-09-30 21:59 - 2015-09-17 08:21 - 00658528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll

2015-09-30 21:59 - 2015-09-17 08:20 - 00764416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll

2015-09-30 21:59 - 2015-09-17 08:06 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll

2015-09-30 21:59 - 2015-09-17 08:05 - 02226688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2015-09-30 21:59 - 2015-09-17 08:04 - 00910848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll

2015-09-30 21:59 - 2015-09-17 08:00 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll

2015-09-30 21:59 - 2015-09-17 08:00 - 02417664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll

2015-09-30 21:59 - 2015-09-17 07:57 - 02228736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll

2015-09-30 21:59 - 2015-09-17 07:56 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll

2015-09-30 21:59 - 2015-09-17 07:55 - 02236416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2015-09-30 21:59 - 2015-09-17 07:55 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll

2015-09-30 21:59 - 2015-09-17 07:52 - 01181696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll

2015-09-30 21:59 - 2015-09-17 07:51 - 01203712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll

2015-09-30 21:59 - 2015-09-17 07:49 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2015-09-30 21:59 - 2015-09-17 07:49 - 01290240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll

2015-09-30 21:59 - 2015-09-17 07:49 - 01010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll

2015-09-30 21:59 - 2015-09-17 07:48 - 02093056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll

2015-09-30 21:59 - 2015-09-17 07:45 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2015-09-30 21:59 - 2015-09-17 07:45 - 01331200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll

2015-09-30 21:59 - 2015-09-17 07:45 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll

2015-09-30 21:59 - 2015-09-17 07:44 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll

2015-09-30 21:59 - 2015-09-17 07:43 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll

2015-09-30 21:59 - 2015-09-17 07:42 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll

2015-09-30 21:59 - 2015-09-17 07:40 - 01918464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll

2015-09-30 21:59 - 2015-09-17 07:40 - 01162240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll

2015-09-30 21:59 - 2015-09-17 07:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll

2015-09-30 21:59 - 2015-09-17 07:35 - 02207232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2015-09-30 21:59 - 2015-09-17 07:35 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll

2015-09-30 21:59 - 2015-09-17 07:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll

2015-09-30 21:59 - 2015-09-17 07:32 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2015-09-30 21:59 - 2015-09-17 07:31 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2015-09-30 21:59 - 2015-09-17 07:29 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll

2015-09-30 21:59 - 2015-09-17 07:26 - 00899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll

2015-09-30 21:59 - 2015-09-13 04:05 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll

2015-09-30 21:58 - 2015-09-25 01:24 - 00796160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll

2015-09-30 21:58 - 2015-09-25 01:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll

2015-09-30 21:58 - 2015-09-25 01:23 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2015-09-30 21:58 - 2015-09-25 01:08 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2015-09-30 21:58 - 2015-09-25 01:07 - 01382400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2015-09-30 21:58 - 2015-09-25 01:05 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll

2015-09-30 21:58 - 2015-09-25 01:01 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll

2015-09-30 21:58 - 2015-09-25 01:00 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll

2015-09-30 21:58 - 2015-09-25 01:00 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll

2015-09-30 21:58 - 2015-09-25 00:53 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll

2015-09-30 21:58 - 2015-09-25 00:43 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll

2015-09-30 21:58 - 2015-09-25 00:43 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll

2015-09-30 21:58 - 2015-09-25 00:25 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll

2015-09-30 21:58 - 2015-09-25 00:25 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll

2015-09-30 21:58 - 2015-09-25 00:25 - 00525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll

2015-09-30 21:58 - 2015-09-25 00:19 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll

2015-09-30 21:58 - 2015-09-19 07:14 - 00102304 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll

2015-09-30 21:58 - 2015-09-17 08:50 - 00099664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys

2015-09-30 21:58 - 2015-09-17 08:50 - 00088384 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll

2015-09-30 21:58 - 2015-09-17 08:49 - 00553808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2015-09-30 21:58 - 2015-09-17 08:49 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2015-09-30 21:58 - 2015-09-17 08:48 - 00584656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll

2015-09-30 21:58 - 2015-09-17 08:48 - 00555768 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll

2015-09-30 21:58 - 2015-09-17 08:48 - 00537080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll

2015-09-30 21:58 - 2015-09-17 08:48 - 00516448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS

2015-09-30 21:58 - 2015-09-17 08:48 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2015-09-30 21:58 - 2015-09-17 08:48 - 00476760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll

2015-09-30 21:58 - 2015-09-17 08:48 - 00406864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS

2015-09-30 21:58 - 2015-09-17 08:48 - 00395088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2015-09-30 21:58 - 2015-09-17 08:48 - 00332624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys

2015-09-30 21:58 - 2015-09-17 08:48 - 00278352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys

2015-09-30 21:58 - 2015-09-17 08:48 - 00243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2015-09-30 21:58 - 2015-09-17 08:39 - 00081488 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2015-09-30 21:58 - 2015-09-17 08:37 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2015-09-30 21:58 - 2015-09-17 08:28 - 01357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll

2015-09-30 21:58 - 2015-09-17 08:28 - 00441168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2015-09-30 21:58 - 2015-09-17 08:28 - 00407608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2015-09-30 21:58 - 2015-09-17 08:28 - 00074880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll

2015-09-30 21:58 - 2015-09-17 08:27 - 00454512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll

2015-09-30 21:58 - 2015-09-17 08:26 - 01895568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll

2015-09-30 21:58 - 2015-09-17 08:26 - 00508248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll

2015-09-30 21:58 - 2015-09-17 08:26 - 00434376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll

2015-09-30 21:58 - 2015-09-17 08:26 - 00428128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll

2015-09-30 21:58 - 2015-09-17 08:09 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll

2015-09-30 21:58 - 2015-09-17 08:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll

2015-09-30 21:58 - 2015-09-17 08:08 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Speech.Pal.dll

2015-09-30 21:58 - 2015-09-17 08:08 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe

2015-09-30 21:58 - 2015-09-17 08:06 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll

2015-09-30 21:58 - 2015-09-17 08:06 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll

2015-09-30 21:58 - 2015-09-17 08:05 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll

2015-09-30 21:58 - 2015-09-17 08:04 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll

2015-09-30 21:58 - 2015-09-17 08:03 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll

2015-09-30 21:58 - 2015-09-17 08:03 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll

2015-09-30 21:58 - 2015-09-17 08:03 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe

2015-09-30 21:58 - 2015-09-17 08:00 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll

2015-09-30 21:58 - 2015-09-17 08:00 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll

2015-09-30 21:58 - 2015-09-17 07:58 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll

2015-09-30 21:58 - 2015-09-17 07:57 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll

2015-09-30 21:58 - 2015-09-17 07:57 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll

2015-09-30 21:58 - 2015-09-17 07:57 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll

2015-09-30 21:58 - 2015-09-17 07:56 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll

2015-09-30 21:58 - 2015-09-17 07:55 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll

2015-09-30 21:58 - 2015-09-17 07:55 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2015-09-30 21:58 - 2015-09-17 07:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll

2015-09-30 21:58 - 2015-09-17 07:55 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe

2015-09-30 21:58 - 2015-09-17 07:55 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll

2015-09-30 21:58 - 2015-09-17 07:54 - 00780288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll

2015-09-30 21:58 - 2015-09-17 07:52 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll

2015-09-30 21:58 - 2015-09-17 07:52 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll

2015-09-30 21:58 - 2015-09-17 07:52 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll

2015-09-30 21:58 - 2015-09-17 07:52 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll

2015-09-30 21:58 - 2015-09-17 07:52 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll

2015-09-30 21:58 - 2015-09-17 07:52 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll

2015-09-30 21:58 - 2015-09-17 07:51 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll

2015-09-30 21:58 - 2015-09-17 07:51 - 01067520 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2015-09-30 21:58 - 2015-09-17 07:51 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll

2015-09-30 21:58 - 2015-09-17 07:50 - 00929280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2015-09-30 21:58 - 2015-09-17 07:50 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll

2015-09-30 21:58 - 2015-09-17 07:50 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys

2015-09-30 21:58 - 2015-09-17 07:50 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll

2015-09-30 21:58 - 2015-09-17 07:50 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys

2015-09-30 21:58 - 2015-09-17 07:49 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWebproxy.dll

2015-09-30 21:58 - 2015-09-17 07:49 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationGeofences.dll

2015-09-30 21:58 - 2015-09-17 07:49 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWiFiAdapter.dll

2015-09-30 21:58 - 2015-09-17 07:49 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll

2015-09-30 21:58 - 2015-09-17 07:48 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll

2015-09-30 21:58 - 2015-09-17 07:48 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll

2015-09-30 21:58 - 2015-09-17 07:48 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll

2015-09-30 21:58 - 2015-09-17 07:48 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll

2015-09-30 21:58 - 2015-09-17 07:48 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll

2015-09-30 21:58 - 2015-09-17 07:47 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll

2015-09-30 21:58 - 2015-09-17 07:47 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll

2015-09-30 21:58 - 2015-09-17 07:47 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll

2015-09-30 21:58 - 2015-09-17 07:46 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll

2015-09-30 21:58 - 2015-09-17 07:46 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2015-09-30 21:58 - 2015-09-17 07:46 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2015-09-30 21:58 - 2015-09-17 07:46 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll

2015-09-30 21:58 - 2015-09-17 07:46 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll

2015-09-30 21:58 - 2015-09-17 07:46 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe

2015-09-30 21:58 - 2015-09-17 07:46 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll

2015-09-30 21:58 - 2015-09-17 07:45 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll

2015-09-30 21:58 - 2015-09-17 07:45 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll

2015-09-30 21:58 - 2015-09-17 07:44 - 01844736 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll

2015-09-30 21:58 - 2015-09-17 07:44 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll

2015-09-30 21:58 - 2015-09-17 07:44 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll

2015-09-30 21:58 - 2015-09-17 07:43 - 00378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll

2015-09-30 21:58 - 2015-09-17 07:43 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll

2015-09-30 21:58 - 2015-09-17 07:41 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll

2015-09-30 21:58 - 2015-09-17 07:39 - 00587264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll

2015-09-30 21:58 - 2015-09-17 07:37 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll

2015-09-30 21:58 - 2015-09-17 07:34 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll

2015-09-30 21:58 - 2015-09-17 07:32 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll

2015-09-30 21:58 - 2015-09-17 07:32 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll

2015-09-30 21:58 - 2015-09-17 07:32 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll

2015-09-30 21:58 - 2015-09-17 07:31 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll

2015-09-30 21:58 - 2015-09-17 07:30 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2015-09-30 21:58 - 2015-09-17 07:29 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll

2015-09-30 21:58 - 2015-09-17 07:29 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll

2015-09-30 21:58 - 2015-09-17 07:29 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll

2015-09-30 21:58 - 2015-09-17 07:16 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll

2015-09-30 21:58 - 2015-09-13 03:41 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll

2015-09-30 21:57 - 2015-09-25 02:35 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll

2015-09-30 21:57 - 2015-09-25 02:34 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll

2015-09-30 21:57 - 2015-09-25 01:34 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll

2015-09-30 21:57 - 2015-09-25 01:34 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll

2015-09-30 21:57 - 2015-09-25 01:00 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll

2015-09-30 21:57 - 2015-09-25 00:24 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll

2015-09-30 21:57 - 2015-09-17 08:11 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll

2015-09-30 21:57 - 2015-09-17 08:10 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll

2015-09-30 21:57 - 2015-09-17 08:09 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll

2015-09-30 21:57 - 2015-09-17 08:03 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll

2015-09-30 21:57 - 2015-09-17 08:03 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe

2015-09-30 21:57 - 2015-09-17 08:02 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll

2015-09-30 21:57 - 2015-09-17 08:02 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll

2015-09-30 21:57 - 2015-09-17 07:56 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll

2015-09-30 21:57 - 2015-09-17 07:55 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll

2015-09-30 21:57 - 2015-09-17 07:55 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll

2015-09-30 21:57 - 2015-09-17 07:54 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2015-09-30 21:57 - 2015-09-17 07:52 - 01216512 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll

2015-09-30 21:57 - 2015-09-17 07:52 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll

2015-09-30 21:57 - 2015-09-17 07:52 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll

2015-09-30 21:57 - 2015-09-17 07:51 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll

2015-09-30 21:57 - 2015-09-17 07:50 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeWiFi.dll

2015-09-30 21:57 - 2015-09-17 07:50 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeCell.dll

2015-09-30 21:57 - 2015-09-17 07:49 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2015-09-30 21:57 - 2015-09-17 07:49 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll

2015-09-30 21:57 - 2015-09-17 07:49 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationCrowdsource.dll

2015-09-30 21:57 - 2015-09-17 07:49 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeIP.dll

2015-09-30 21:57 - 2015-09-17 07:46 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncmlhook.dll

2015-09-30 21:57 - 2015-09-17 07:45 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll

2015-09-30 21:57 - 2015-09-17 07:43 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll

2015-09-30 21:57 - 2015-09-17 07:39 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2015-09-30 21:57 - 2015-09-17 07:36 - 01171456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll

2015-09-30 21:57 - 2015-09-17 07:33 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll

2015-09-30 21:57 - 2015-09-17 07:28 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll

2015-09-30 21:26 - 2015-09-30 21:25 - 00014080 _____ (Microsoft) C:\Users\Birk\AppData\Roaming\LaunchBrowser_ed.exe

2015-09-29 22:07 - 2015-10-06 11:16 - 00028067 _____ C:\WINDOWS\avmfwlanci.log

2015-09-28 20:52 - 2015-09-28 20:52 - 00050677 _____ C:\Users\Birk\Downloads\Addition.txt

2015-09-28 20:49 - 2015-10-06 12:34 - 00000000 ___DC C:\FRST

2015-09-28 20:49 - 2015-10-06 12:33 - 00020129 _____ C:\Users\Birk\Downloads\FRST.txt

2015-09-28 20:48 - 2015-09-28 20:49 - 02192384 _____ (Farbar) C:\Users\Birk\Downloads\FRST64.exe

2015-09-28 14:44 - 2015-09-28 14:44 - 00000000 ____D C:\Users\Birk\AppData\Local\ftblauncher

2015-09-28 11:41 - 2015-09-28 11:42 - 00912631 _____ C:\Users\Birk\Downloads\adblock_plus-2.6.10-an_sm_tb_fx.zip

2015-09-27 20:10 - 2015-09-27 20:10 - 00003276 _____ C:\WINDOWS\System32\Tasks\{19C21EC3-9429-4740-B815-79D2CC43123D}

2015-09-27 20:08 - 2015-09-27 20:08 - 00003388 _____ C:\WINDOWS\System32\Tasks\{F48EBD7B-8933-4080-9A67-B798F4097A09}

2015-09-27 20:04 - 2015-09-27 20:04 - 00003226 _____ C:\WINDOWS\System32\Tasks\{1691C428-799A-44EC-A3FA-5CF375BAD376}

2015-09-27 19:56 - 2015-09-27 21:07 - 00000000 ____D C:\Program Files (x86)\Feed Notifier

2015-09-27 19:55 - 2015-09-27 19:55 - 00000000 ____D C:\Users\Birk\AppData\Local\CrashRpt

2015-09-27 16:12 - 2015-09-27 19:57 - 00000588 ____C C:\task.vbs

2015-09-27 16:01 - 2015-09-27 16:01 - 18819272 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe

2015-09-27 16:00 - 2015-09-27 16:00 - 00000000 ____D C:\Users\Birk\AppData\Local\Publishers

2015-09-22 22:06 - 2015-09-22 22:06 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

2015-09-21 09:18 - 2015-09-28 00:31 - 00000000 ____D C:\Users\Birk\Documents\My Games

2015-09-21 09:17 - 2015-09-21 09:23 - 00000000 ____D C:\Users\Birk\AppData\Local\Darksiders2

2015-09-21 09:17 - 2015-09-21 09:17 - 00000000 ____D C:\Users\Birk\AppData\Local\Steam

2015-09-21 09:17 - 2015-09-21 09:17 - 00000000 ____D C:\Users\Birk\AppData\Local\CEF

2015-09-20 22:30 - 2015-09-28 21:17 - 00000000 ____D C:\Users\Birk\AppData\Local\VirtualStore

2015-09-20 17:38 - 2015-09-20 17:38 - 00000000 ____D C:\Users\Birk\AppData\Local\gegl-0.2

2015-09-20 06:46 - 2015-09-20 06:46 - 00000017 _____ C:\Users\Birk\AppData\Local\resmon.resmoncfg

2015-09-20 01:38 - 2015-09-28 20:33 - 00000000 ____D C:\WINDOWS\system32\log

2015-09-20 00:55 - 2015-09-20 00:55 - 00000000 ____D C:\Program Files (x86)\LucasArts

2015-09-20 00:36 - 2015-10-01 11:44 - 00000000 ____D C:\Users\Birk\AppData\Local\Adobe

2015-09-20 00:30 - 2015-09-25 15:15 - 00000000 ____D C:\Users\Birk\AppData\Roaming\Kalypso Media

2015-09-20 00:30 - 2015-09-20 00:33 - 00000000 ____D C:\ProgramData\oosJofav

2015-09-19 21:32 - 2015-09-19 21:24 - 00041784 ____N (Beijing Rising Information Technology Co., Ltd.) C:\WINDOWS\system32\Drivers\hvm.sys

2015-09-19 21:32 - 2015-09-19 21:23 - 00119168 _____ (Beijing Rising Information Technology Co., Ltd.) C:\WINDOWS\system32\Drivers\sysmon.sys

2015-09-19 21:25 - 2015-09-19 21:25 - 00000000 ____D C:\Users\Birk\AppData\Local\NetworkTiles

2015-09-19 21:10 - 2015-10-05 18:42 - 00000000 ____D C:\ProgramData\clp

2015-09-19 21:05 - 2015-09-19 21:05 - 00000000 ____D C:\ProgramData\Common Toolkit Suite

2015-09-19 21:02 - 2015-09-19 21:02 - 02381192 _____ (SPAMfighter ApS) C:\Users\Birk\Downloads\spywarefighter.exe

2015-09-19 19:16 - 2015-09-19 19:28 - 00000000 __RDC C:\RavBin

2015-09-19 19:16 - 2015-09-19 19:16 - 00003504 _____ C:\WINDOWS\System32\Tasks\RsDelayLauncher_{8A34248E-7D35-4832-8378-7659E0B0A380}

2015-09-19 19:16 - 2015-09-19 19:16 - 00000150 _RSHC C:\rising.ini

2015-09-19 19:16 - 2015-04-09 07:00 - 00071760 ____N (Beijing Rising Information Technology Co., Ltd.) C:\WINDOWS\system32\Drivers\rsutils.sys

2015-09-19 19:16 - 2014-07-30 04:44 - 00091928 ____N (Beijing Rising Information Technology Co., Ltd.) C:\WINDOWS\SysWOW64\vpatch.dll

2015-09-19 19:16 - 2014-01-02 09:37 - 00325400 ____N (Beijing Rising Information Technology Co., Ltd.) C:\WINDOWS\system32\ravext64.dll

2015-09-19 19:16 - 2013-12-30 09:33 - 00256280 ____N (Beijing Rising Information Technology Co., Ltd.) C:\WINDOWS\SysWOW64\ravext.dll

2015-09-19 19:16 - 2012-09-06 02:30 - 00240472 ____N (Beijing Rising Information Technology Co., Ltd.) C:\WINDOWS\SysWOW64\bsmain.exe

2015-09-19 19:16 - 2012-02-29 09:49 - 00011888 ____N (Beijing Rising Information Technology Co., Ltd.) C:\WINDOWS\system32\Drivers\rsndisp.sys

2015-09-19 19:14 - 2015-10-06 11:13 - 00000318 _____ C:\WINDOWS\Tasks\QQBrowser Udpater Task(Core).job

2015-09-19 19:14 - 2015-10-05 22:47 - 00000314 _____ C:\WINDOWS\Tasks\QQBrowser Udpater Task.job

2015-09-19 19:14 - 2015-09-19 19:14 - 00003276 _____ C:\WINDOWS\System32\Tasks\QQBrowser Udpater Task

2015-09-19 19:14 - 2015-09-19 19:14 - 00002662 _____ C:\WINDOWS\System32\Tasks\QQBrowser Udpater Task(Core)

2015-09-19 18:41 - 2015-09-19 18:41 - 00000000 ____D C:\Users\Birk\AppData\Roaming\WB_CFG

2015-09-19 18:41 - 2015-09-19 18:41 - 00000000 _____ C:\ProgramData\inf.dat

2015-09-19 18:40 - 2015-10-06 12:30 - 00000462 _____ C:\WINDOWS\Tasks\Adobe Flash box Files Update Ver 2015919.job

2015-09-19 18:40 - 2015-09-20 06:46 - 00000000 ____D C:\ProgramData\4997GameBox_Data

2015-09-19 18:40 - 2015-09-19 18:41 - 00004824 _____ C:\WINDOWS\SysWOW64\Oatihpu.ini

2015-09-19 18:40 - 2015-09-19 18:41 - 00002536 _____ C:\WINDOWS\SysWOW64\OatihpuOff.ini

2015-09-19 18:40 - 2015-09-19 18:41 - 00002536 _____ C:\WINDOWS\system32\OatihpuOff.ini

2015-09-19 18:40 - 2015-09-19 18:40 - 00003614 _____ C:\WINDOWS\System32\Tasks\Adobe Flash box Files Update Ver 2015919

2015-09-19 18:40 - 2015-09-19 18:40 - 00000000 ____D C:\WINDOWS\system32\pap

2015-09-19 18:40 - 2015-09-19 18:40 - 00000000 ____D C:\Users\Birk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\7k7k游戏盒子(919)

2015-09-19 18:40 - 2015-09-19 18:40 - 00000000 ____D C:\Users\Birk\AppData\LocalLow\VirtualStore

2015-09-19 18:40 - 2015-09-19 18:40 - 00000000 ____D C:\Users\Birk\AppData\LocalLow\Company

2015-09-19 18:40 - 2015-09-19 18:40 - 00000000 ____D C:\Users\Birk\AppData\Local\Tempfolder

2015-09-19 18:40 - 2015-09-19 18:40 - 00000000 ____D C:\ProgramData\uiksdl201591916

2015-09-19 18:40 - 2015-09-19 18:40 - 00000000 ____D C:\ProgramData\adb

2015-09-19 18:40 - 2015-09-19 18:23 - 00353648 _____ C:\WINDOWS\system32\Oatihpu64.dll

2015-09-19 18:40 - 2015-09-19 18:22 - 00283504 _____ C:\WINDOWS\SysWOW64\Oatihpu.dll

2015-09-19 18:39 - 2015-09-19 19:03 - 00000000 ____D C:\Users\Birk\AppData\LocalLow\Unity

2015-09-19 18:39 - 2015-09-19 19:03 - 00000000 ____D C:\Users\Birk\AppData\Local\Unity

2015-09-19 18:39 - 2015-09-19 18:39 - 00000000 ____D C:\Users\Public\QiYi

2015-09-19 18:38 - 2015-09-19 18:38 - 00000000 ____D C:\Users\Birk\AppData\Local\Sony Corporation

2015-09-19 18:37 - 2015-09-19 18:37 - 00000000 ____D C:\Program Files (x86)\baidu

2015-09-19 18:34 - 2015-10-06 11:18 - 00003542 _____ C:\WINDOWS\System32\Tasks\Gniguiluss

2015-09-19 18:34 - 2015-09-29 18:23 - 00000000 ____D C:\ProgramData\Gniguiluss

2015-09-19 18:34 - 2015-09-19 19:56 - 00000000 ____D C:\Users\Birk\AppData\Local\Mozilla

2015-09-19 18:34 - 2015-09-19 18:34 - 00003186 _____ C:\WINDOWS\System32\Tasks\Seventh

2015-09-19 18:34 - 2015-09-19 18:34 - 00003174 _____ C:\WINDOWS\System32\Tasks\Sixth

2015-09-19 18:34 - 2015-09-19 18:34 - 00000000 ____D C:\Users\Birk\AppData\Local\Macromedia

2015-09-19 18:34 - 2015-09-19 18:34 - 00000000 ____D C:\Users\Birk\AppData\Local\ext_funfeedr

2015-09-19 18:33 - 2015-09-20 01:54 - 00000000 ____D C:\Users\Birk\AppData\Roaming\Common

2015-09-19 18:30 - 2015-09-28 11:35 - 00000004 _____ C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7

2015-09-19 18:29 - 2015-09-19 18:29 - 00003160 _____ C:\WINDOWS\System32\Tasks\cfr3011

2015-09-19 18:28 - 2015-09-27 16:13 - 00000102 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

2015-09-19 02:20 - 2013-08-22 15:25 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak

2015-09-19 02:19 - 2015-09-19 02:19 - 00000000 ____D C:\Program Files (x86)\mbot_de_014010090

2015-09-19 02:18 - 2015-09-19 02:18 - 00000000 ____D C:\Users\Birk\AppData\Local\Geckofx

2015-09-18 01:19 - 2015-09-19 19:01 - 00000000 ____D C:\ProgramData\Screentime

2015-09-17 13:21 - 2015-09-17 13:21 - 00186880 _____ (TODO: <Company name>) C:\WINDOWS\system32\rsrcs.dll

2015-09-09 18:14 - 2015-08-27 08:36 - 03620736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2015-09-09 18:14 - 2015-08-27 08:32 - 00608936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2015-09-09 18:14 - 2015-08-27 07:59 - 02880032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2015-09-09 18:14 - 2015-08-27 07:54 - 00541248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2015-09-09 18:14 - 2015-08-27 07:54 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll

2015-09-09 18:14 - 2015-08-27 07:51 - 02350592 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll

2015-09-09 18:14 - 2015-08-27 07:51 - 01774592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll

2015-09-09 18:14 - 2015-08-27 07:49 - 01008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll

2015-09-09 18:14 - 2015-08-27 07:47 - 12503552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2015-09-09 18:14 - 2015-08-27 07:43 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2015-09-09 18:14 - 2015-08-27 07:43 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2015-09-09 18:14 - 2015-08-27 07:42 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll

2015-09-09 18:14 - 2015-08-27 07:42 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.PicturePassword.dll

2015-09-09 18:14 - 2015-08-27 07:42 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll

2015-09-09 18:14 - 2015-08-27 07:39 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll

2015-09-09 18:14 - 2015-08-27 07:23 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll

2015-09-09 18:14 - 2015-08-27 07:16 - 02153472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll

2015-09-09 18:14 - 2015-08-27 07:16 - 01612288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll

2015-09-09 18:14 - 2015-08-27 07:12 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2015-09-09 18:14 - 2015-08-27 07:12 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2015-09-09 18:14 - 2015-08-27 07:11 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll

2015-09-09 18:14 - 2015-08-27 07:11 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll

2015-09-09 18:14 - 2015-08-27 07:09 - 11262464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2015-09-09 18:14 - 2015-08-27 07:08 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll

2015-09-08 18:37 - 2015-09-08 18:37 - 00000000 ____D C:\WINDOWS\SysWOW64\directx

2015-09-07 20:58 - 2015-09-14 20:58 - 00000000 ____D C:\WINDOWS\System32\Tasks\NCH Software

2015-09-07 20:58 - 2015-09-07 20:58 - 00001259 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoStage Diashow-Ersteller.lnk

2015-09-07 20:58 - 2015-09-07 20:58 - 00001229 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Audio-Editor.lnk

2015-09-07 20:58 - 2015-09-07 20:58 - 00001217 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prism Videodatei-Konverter.lnk

2015-09-07 20:58 - 2015-09-07 20:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Videoverwandte Programme

2015-09-07 20:57 - 2015-09-20 01:42 - 00000000 ____D C:\ProgramData\NCH Software

2015-09-07 20:57 - 2015-09-20 01:42 - 00000000 ____D C:\Program Files (x86)\NCH Software

2015-09-07 20:57 - 2015-09-08 20:31 - 00000000 ____D C:\Users\Birk\AppData\Roaming\NCH Software

2015-09-07 20:57 - 2015-09-07 20:57 - 00001245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoPad Video-Editor.lnk

2015-09-07 02:19 - 2015-09-07 02:19 - 00000939 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk

2015-09-07 02:18 - 2015-09-07 02:19 - 00000000 ____D C:\Program Files\GIMP 2

2015-09-07 01:22 - 2015-09-20 01:48 - 00000000 ____D C:\Users\Birk\.thumbnails

2015-09-07 01:16 - 2015-09-20 17:38 - 00000000 ____D C:\Users\Birk\.gimp-2.8

2015-09-07 01:08 - 2015-09-07 01:08 - 00000000 ____D C:\Users\Birk\AppData\Roaming\Avanquest Software

2015-09-06 21:02 - 2015-10-06 11:37 - 00000000 ____D C:\Program Files\OBS

2015-09-06 21:02 - 2015-10-06 11:37 - 00000000 ____D C:\Program Files (x86)\OBS
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-10-06 12:28 - 2015-08-05 22:41 - 00000000 ____D C:\Users\Birk

2015-10-06 12:14 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sru

2015-10-06 11:23 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\AppReadiness

2015-10-06 11:20 - 2015-08-05 22:58 - 01790124 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2015-10-06 11:20 - 2015-07-10 18:34 - 00772342 _____ C:\WINDOWS\system32\perfh007.dat

2015-10-06 11:20 - 2015-07-10 18:34 - 00154170 _____ C:\WINDOWS\system32\perfc007.dat

2015-10-06 11:17 - 2015-01-28 15:17 - 00004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{18F0F7A2-D14E-4364-A210-F284D1BA159C}

2015-10-06 11:13 - 2015-07-10 14:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2015-10-06 11:12 - 2015-07-10 11:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI

2015-10-05 22:41 - 2014-12-04 20:16 - 00000000 ____D C:\Program Files (x86)\Steam

2015-10-05 18:41 - 2015-09-03 19:36 - 00000000 ____D C:\WINDOWS\Minidump

2015-10-05 16:20 - 2015-04-26 14:29 - 00000000 ____D C:\Users\Birk\AppData\Roaming\.minecraft

2015-10-04 15:53 - 2015-08-28 17:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2015-10-03 17:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\rescache

2015-10-03 13:37 - 2013-12-26 15:03 - 00000000 ___DC C:\Update

2015-10-03 13:28 - 2015-08-05 22:37 - 00000000 ____D C:\WINDOWS\SysWOW64\sda

2015-10-03 13:28 - 2015-06-04 06:05 - 00384760 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsPStor.sys

2015-10-03 13:28 - 2015-06-04 06:05 - 00100600 _____ (Realtek Semiconductor.) C:\WINDOWS\system32\RtCRX64.dll

2015-10-03 13:22 - 2014-04-16 10:22 - 00000000 ___DC C:\AdwCleaner

2015-10-03 13:03 - 2014-02-23 13:35 - 00000000 ____D C:\Users\Birk\Desktop\Sonstiges

2015-10-03 13:02 - 2015-08-05 22:41 - 00000000 ___RD C:\Users\Birk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-10-01 17:57 - 2015-07-10 11:05 - 00000000 __RHD C:\Users\Default

2015-10-01 17:53 - 2015-07-10 13:04 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12

2015-10-01 17:53 - 2015-07-10 13:04 - 00000000 ___SD C:\WINDOWS\system32\F12

2015-10-01 17:53 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\PurchaseDialog

2015-10-01 17:53 - 2015-07-10 13:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-10-01 17:53 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2015-10-01 17:53 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform

2015-10-01 17:53 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\appraiser

2015-10-01 17:53 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Provisioning

2015-10-01 17:52 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\L2Schemas

2015-10-01 15:23 - 2015-07-10 12:55 - 00000000 ____D C:\WINDOWS\CbsTemp

2015-09-28 20:50 - 2015-08-05 23:43 - 00000008 __RSH C:\ProgramData\ntuser.pol

2015-09-27 21:36 - 2015-01-12 17:06 - 00000000 ____D C:\Program Files\CCleaner

2015-09-27 20:06 - 2014-12-04 19:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2015-09-27 20:00 - 2013-09-03 01:59 - 00000000 ____D C:\Program Files (x86)\Adobe

2015-09-24 23:32 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\NDF

2015-09-22 08:38 - 2015-05-22 15:18 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2

2015-09-20 01:59 - 2013-09-03 01:46 - 00000000 ____D C:\Program Files (x86)\Sony

2015-09-20 01:59 - 2013-09-03 01:42 - 00000000 ____D C:\ProgramData\Sony Corporation

2015-09-20 01:59 - 2013-09-03 01:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2015-09-19 19:37 - 2014-12-03 18:57 - 00000000 ____D C:\Users\Birk\AppData\Local\Packages

2015-09-19 18:49 - 2015-07-18 10:19 - 00000085 _____ C:\WINDOWS\wininit.ini

2015-09-19 18:49 - 2015-05-22 15:18 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2015-09-19 18:40 - 2015-07-10 13:00 - 00680256 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll

2015-09-19 18:40 - 2015-07-10 13:00 - 00534064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll

2015-09-19 00:52 - 2015-02-16 17:06 - 00000000 ____D C:\Program Files (x86)\Minecraft

2015-09-19 00:48 - 2015-08-05 23:22 - 00000000 ___RD C:\Users\Birk\OneDrive

2015-09-13 22:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\FxsTmp

2015-09-12 18:56 - 2015-07-20 20:20 - 00000000 ____D C:\Users\Birk\AppData\Roaming\.technic

2015-09-10 01:32 - 2015-07-10 18:46 - 00000000 ____D C:\Program Files\Windows Journal

2015-09-09 18:28 - 2014-12-06 01:08 - 00000000 ____D C:\WINDOWS\system32\MRT

2015-09-08 21:01 - 2015-08-05 23:25 - 00000000 ___DC C:\Windows.old

2015-09-08 18:37 - 2015-02-28 22:56 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2015-09-30 21:26 - 2015-09-30 21:26 - 0032038 _____ () C:\Users\Birk\AppData\Roaming\Edge.ico

2015-09-30 21:26 - 2015-09-30 21:25 - 0014080 _____ (Microsoft) C:\Users\Birk\AppData\Roaming\LaunchBrowser_ed.exe

2015-09-30 21:26 - 2015-09-30 21:25 - 0000182 _____ () C:\Users\Birk\AppData\Roaming\LaunchBrowser_ed.exe.config

2015-04-20 16:05 - 2015-04-20 16:05 - 1246720 _____ () C:\Users\Birk\AppData\Roaming\VOgRNRWXQzAUJNDa9ICVwWvJX.exe

2015-09-20 06:46 - 2015-09-20 06:46 - 0000017 _____ () C:\Users\Birk\AppData\Local\resmon.resmoncfg

2015-08-05 22:37 - 2015-08-05 22:37 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

2015-09-19 18:41 - 2015-09-19 18:41 - 0000000 _____ () C:\ProgramData\inf.dat

2015-09-19 18:28 - 2015-09-27 16:13 - 0000102 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
 

Dateien, die verschoben oder gelöscht werden sollten:

====================

C:\ProgramData\inf.dat

C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
 
 

Einige Dateien in TEMP:

====================

C:\Users\Birk\AppData\Local\Temp\6595.exe

C:\Users\Birk\AppData\Local\Temp\beeddejbeh.exe

C:\Users\Birk\AppData\Local\Temp\fsdA664.exe

C:\Users\Birk\AppData\Local\Temp\mytmpinstaller.exe

C:\Users\Birk\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll

[2015-07-10 13:00] - [2015-09-19 18:40] - 0680256 ____A (Microsoft Corporation) 254A5B8551F4286937FAD84D2228BE37
 

C:\WINDOWS\SysWOW64\dnsapi.dll

[2015-07-10 13:00] - [2015-09-19 18:40] - 0534064 ____A (Microsoft Corporation) 7DCF6205A5CED02045FB7AA924EB0C7D
 

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-10-03 13:28
 

==================== Ende von FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:04-10-2015

durchgeführt von Birk (2015-10-06 12:36:08)

Gestartet von C:\Users\Birk\Downloads

Windows 10 Home (X64) (2015-08-05 21:16:53)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-2214603426-1893447350-2076376546-500 - Administrator - Disabled) => C:\Users\Administrator

Birk (S-1-5-21-2214603426-1893447350-2076376546-1002 - Administrator - Enabled) => C:\Users\Birk

DefaultAccount (S-1-5-21-2214603426-1893447350-2076376546-503 - Limited - Disabled)

Gast (S-1-5-21-2214603426-1893447350-2076376546-501 - Limited - Disabled) => C:\Users\Gast

HomeGroupUser$ (S-1-5-21-2214603426-1893447350-2076376546-1004 - Limited - Enabled)

UpdatusUser (S-1-5-21-2214603426-1893447350-2076376546-1001 - Limited - Enabled) => C:\Users\UpdatusUser
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: SPYWAREfighter (Enabled - Up to date) {11BFB622-B506-BBFD-BBD5-E74259B04899}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)

Adobe Reader XI  MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.00 - Adobe Systems Incorporated)

AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version:  - AVM Berlin)

Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)

Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 6.30.223.181 - Broadcom Corporation)

Broadcom Wireless Utility (HKLM\...\{4CDA59B9-7AD3-4283-9F5C-BC469FF975B6}) (Version: 6.30.59.125 - Broadcom Corporation)

CCleaner (HKLM\...\CCleaner) (Version: 5.07 - Piriform)

Darksiders II (HKLM-x32\...\Steam App 50650) (Version:  - Vigil Games)

Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)

Einstellungen für VAIO Media Server (HKLM\...\{62A172B2-550E-499D-9A82-5190D18390AA}) (Version: 1.1.0.02220 - Sony Corporation)

ESDL (x32 Version: 1.0.0 - Sony Corporation) Hidden

FDUx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden

Fighters (x32 Version: 4.5.151 - SPAMFIGHTER ApS) Hidden

Gameforge Live 2.0.8 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.8 - Gameforge)

GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)

Google Update Helper (x32 Version: 1.3.21.169 - Google Inc.) Hidden

Hardcore-RELOADED (HKLM-x32\...\{B984FEBB-5953-4474-BD37-F3A6DEA90FE9}) (Version: 2.1.1 - Hardcore-RELOADED)

Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)

Intel AppUp(R) center (HKLM-x32\...\Intel AppUp(R) center 41800) (Version: 3.8.0.41800.66 - Intel)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3958 - Intel Corporation)

Intel(R) PROSet/Wireless NFC-Software (HKLM\...\Intel(R) PROSet/Wireless NFC-Software) (Version: 1.1.1.003 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)

Java 7 Update 13 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417013FF}) (Version: 7.0.130 - Oracle)

Java 7 Update 13 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217013FF}) (Version: 7.0.130 - Oracle)

LEGO® Indiana Jones™ 2 (x32 Version: 1.00.0000 - LucasArts) Hidden

LEGO® Indiana Jones™ 2:*Die neuen Abenteuer (HKLM-x32\...\InstallShield_{11192AA7-FBE3-4150-9667-EE7279CCC769}) (Version: 1.00.0000 - LucasArts)

Metin2 (HKLM-x32\...\Metin2_is1) (Version:  - Gameforge 4D GmbH)

Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)

Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60310.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)

Mozilla Firefox 41.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0.1 (x86 de)) (Version: 41.0.1 - Mozilla)

Networkx64 (Version: 1.0.0 - Sony Corporation) Hidden

NVIDIA Grafiktreiber 327.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.62 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)

PhotoStage Diashow-Ersteller (HKLM-x32\...\PhotoStage) (Version: 3.24 - NCH Software)

Prism Videodatei-Konverter (HKLM-x32\...\Prism) (Version: 2.27 - NCH Software)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9600.28145 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.10.1226.2012 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)

Restore (x32 Version: 1.0.0 - Sony Corporation) Hidden

Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)

Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 2.14.2983.6 - Hi-Rez Studios)

SSLx64 (Version: 1.0.0 - Sony Corporation ) Hidden

SSLx86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.5.0 - Synaptics Incorporated)

VAIO - Xperia Link (HKLM-x32\...\{D91558BF-D1F3-411F-AEFE-8774CB406512}) (Version: 1.3.2.07020 - Sony Corporation)

VAIO BIOS Data Transfer Utility (x32 Version: 1.0.0.02050 - Sony Corporation) Hidden

VAIO Care (HKLM\...\{EC635BC0-0D7C-4CA2-9B87-2A330C298CB2}) (Version: 8.2.0.15030 - Sony Corporation)

VAIO Care-Hardwarediagnose-Plugin (HKLM-x32\...\{EC153498-00E1-4C9C-89BE-81527C6750BE}) (Version: 4.8.0.13250 - Sony Corporation)

VAIO Control Center (HKLM-x32\...\{8E797841-A110-41FD-B17A-3ABC0641187A}) (Version: 6.2.0.03070 - Sony Corporation)

VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.11.0.13250 - Sony Corporation)

VAIO Easy Connect (x32 Version: 8.2.0.14170 - Sony Corporation) Hidden

VAIO Gesture Control (HKLM-x32\...\{692955F2-DE9F-4078-8FAA-858D6F3A1776}) (Version: 2.2.0.01230 - Sony Corporation)

VAIO Gesture Control (x32 Version: 2.2.0.01230 - Sony Corporation) Hidden

VAIO Sample Music (HKLM-x32\...\{FBEE3D44-0933-4B84-BB6A-49957F89187F}) (Version: 1.0.0.03051 - Sony Corporation)

VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 7.0.1.02280 - Sony Corporation)

VAIO*CPU-Lüfterdiagnose (HKLM-x32\...\{BCE6E3D7-B565-4E1B-AC77-F780666A35FB}) (Version: 1.2.0.03050 - Sony Corporation)

VCCx64 (Version: 1.0.0 - Sony Corporation) Hidden

VCCx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden

VHD (x32 Version: 1.0.0 - Sony Corporation) Hidden

VideoPad Video-Editor (HKLM-x32\...\VideoPad) (Version: 4.02 - NCH Software)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)

VPMx64 (Version: 1.0.0 - Sony Corporation ) Hidden

VSSTx64 (Version: 1.0.0 - Sony Corporation ) Hidden

VSSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden

VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden

VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden

VWSTx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden

WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 6.12 - NCH Software)

WIDCOMM Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.4900 - Broadcom Corporation)

WinRAR 5.11 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)

Worms 4 Mayhem (HKLM-x32\...\{45E7C481-3EF4-4FCB-AF0B-19F70D618F0C}) (Version: 1.01.0000 - Codemasters)

XperiaLinkx86 (x32 Version: 1.0.0 - Sony Corporation) Hidden
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-2214603426-1893447350-2076376546-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

CustomCLSID: HKU\S-1-5-21-2214603426-1893447350-2076376546-1002_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AC}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)

CustomCLSID: HKU\S-1-5-21-2214603426-1893447350-2076376546-1002_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AD}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
 

==================== Wiederherstellungspunkte =========================
 

25-09-2015 15:13:13 Removed DUNGEONS Game of the Year edition

27-09-2015 17:42:33 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030

01-10-2015 15:20:26 Windows Update
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2013-08-22 15:25 - 2015-09-22 08:37 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0210AD02-3B98-4789-9650-AEAC6D45D7D6} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)

Task: {057E79DE-9A87-47F0-B618-66321C332663} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

Task: {0AA7BDF0-D640-4845-99CE-02E07623B293} - System32\Tasks\Adobe Flash box Files Update Ver 2015919 => C:\ProgramData\uiksdl201591916\calibre.exe [2015-09-19] (eyuwi)

Task: {109688AE-A8B9-458E-9A04-4EE97F3AEA88} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {1106ACD3-F4B9-42F2-AB0E-B6336D416E64} - System32\Tasks\QQBrowser Udpater Task => C:\Program Files (x86)\Tencent\QQBrowser\QQBrowser.exe

Task: {179339B0-0D84-4231-A486-D39A6848E411} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: {1FC09C33-A090-4D43-8918-21D83A1BB663} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {27027E7D-1758-4086-8271-9B130877BF2D} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2013-02-02] (Sony Corporation)

Task: {278D6946-F747-4CF8-A549-4FD7F532B627} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)

Task: {27EE364D-2876-4613-B4CA-154486651DE1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-06-01] (Piriform Ltd)

Task: {281717B0-5423-47B8-BBB7-59FC992E702A} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG

Task: {28F90FA0-97A7-4CB0-B5D8-A4386B1C701B} - System32\Tasks\QQBrowser Udpater Task(Core) => C:\Program Files (x86)\Tencent\QQBrowser\QQBrowser.exe

Task: {332A7187-D8D6-407B-8187-DE1449E936CF} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {349209AE-6B50-4061-969A-1751A1FCB1FC} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIOControlCenterSystem => C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe [2013-03-08] (Sony Corporation)

Task: {36AD00F8-00CF-4CC8-8EE7-EC3D39647B76} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2013-02-02] (Sony Corporation)

Task: {38FB8C86-93F6-46F7-A667-09C971FA3885} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2014-02-28] (Sony Corporation)

Task: {4267AC08-89C5-4458-B0FD-B310B79BF136} - System32\Tasks\Sony Corporation\VAIO Update\Launch Application => C:\Program Files\SONY\VAIO Update\ShellExeProxy.exe [2014-02-28] (Sony Corporation)

Task: {4BF32711-D5B1-421D-BD53-231F66A21B61} - System32\Tasks\Sony Corporation\VAIO Control Center\NetworkSetting\NetworkSetting Logon Start => C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient

Task: {4ECF4417-8350-4911-8C29-3C18BCA33884} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)

Task: {5554B620-A6EE-482C-81B5-F9A4C28FE4AF} - System32\Tasks\cfr3011 => C:\PROGRA~2\FASTSE~1\cfr3011.exe

Task: {5C5A8450-20DA-44D9-AD58-F9D44627CF3D} - System32\Tasks\Sony Corporation\VAIO Care\UploadPOT => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)

Task: {68FC3E08-6F49-4A09-9E26-5D0D4D6B550C} - System32\Tasks\{F3C920E1-80A6-42B0-83D2-C330FD672796} => pcalua.exe -a C:\ProgramData\HealthAlert\uninstall.exe -c /kb=y /ic=1

Task: {68FDEB28-D56E-4914-8AB7-64A0877F422A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: {783D573E-9979-4823-BD0E-A6D136ED17F9} - System32\Tasks\Sony Corporation\Xperia Link\Xperia Link Logon Start => C:\Program Files (x86)\Sony\Xperia Link\Xperia Link.exe [2014-07-03] (Sony Corporation)

Task: {7C52CE8D-95F0-4535-B1C5-CE06487EB74F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG

Task: {7EA5C794-315A-4D76-BA58-B8E391A4F32C} - System32\Tasks\Sixth => C:\Users\Birk\AppData\Roaming\Sixth\Sixth.exe

Task: {8DE60648-D3CC-452B-AB40-470A931E7F13} - System32\Tasks\Sony Corporation\VAIO Care\CheckSystemInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)

Task: {98364ED8-C652-4A78-8917-D6AF6EC358F1} - System32\Tasks\{0E252D74-BFBE-426E-BFAE-BCD88571749F} => pcalua.exe -a "C:\Program Files (x86)\Search Extensions\uninstall.exe" -d "C:\Program Files (x86)\Search Extensions"

Task: {9D78DC18-6884-4407-8D77-F0E353AD19E6} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG

Task: {9E949CCB-FBAA-46DE-A597-029CBD99BC33} - System32\Tasks\Sony Corporation\VAIO Care\CRMReminder => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)

Task: {A2A8F78F-B184-4E46-BD36-67C580B0A1B2} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG

Task: {ABEAB7D5-5418-4C70-AE16-C8DB7394EEAB} - System32\Tasks\Gniguiluss => C:\ProgramData\Gniguiluss\1.0.6.1\eoimknue.exe [2015-09-29] ()

Task: {ACAE9D6E-DA4B-466C-85C9-E7B1C6B6FE86} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG

Task: {B03210A1-C3C6-4AB9-949E-056A25C5075D} - System32\Tasks\Sony Corporation\VAIO Gesture Control\VCGULogonTask => C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe [2013-01-23] (Sony Corporation)

Task: {B04B458E-E261-4DEB-9EC9-2FB490EA8D16} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG

Task: {B277C0E5-93B9-4737-9062-5214AB8C29A6} - System32\Tasks\{19C21EC3-9429-4740-B815-79D2CC43123D} => pcalua.exe -a "C:\Program Files\Common Files\Goobzo\GBUpdate\smUninstall.exe"

Task: {BF44738B-3B22-4418-BF19-FCD29CA7C497} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG

Task: {C6BA5E31-225B-4412-ABD0-C6B0CA74839D} - System32\Tasks\RsDelayLauncher_{8A34248E-7D35-4832-8378-7659E0B0A380} => C:\PROGRAM FILES (X86)\RISING\RAV\rsdelaylauncher.exe

Task: {C97875A7-DE4C-4A7C-9B38-9F30DAC04275} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)

Task: {D399ADD9-9860-4CB2-927C-671BAE47E3AF} - System32\Tasks\Sony Corporation\VAIO Care\VCRLog => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)

Task: {D416A5CB-ECA0-41DD-B6CE-1D1A113E4FF0} - System32\Tasks\{F48EBD7B-8933-4080-9A67-B798F4097A09} => pcalua.exe -a "C:\Program Files (x86)\MyBrowser\MyBrowser\Application\39.5.2171.95\Installer\setup.exe" -c --uninstall --system-level

Task: {DF222E2A-2866-4603-808E-6AA317C64704} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2014-03-01] (Sony Corporation)

Task: {E1168DD3-D7FB-4CAD-9166-AC06890ED80A} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-08-26] (Microsoft Corporation)

Task: {E7EE88BB-1B8F-4AAA-A8FC-D2CBDB46BE85} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)

Task: {EB88EA98-ED6A-4009-B24E-4EBD528BDAD2} - System32\Tasks\Sony Corporation\VAIO Care\GetPOTInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2013-02-26] (Sony Corporation)

Task: {ED9A0046-E0F7-4A22-BF67-78B610845D6C} - System32\Tasks\Sony Corporation\VAIO Hardware Diagnostics\VHDInformationCheck => C:\Program Files (x86)\Sony\VAIO Recovery\plugins\InformationCheck.exe [2013-01-25] (Sony Corporation)

Task: {F4141F59-045D-4B29-AB6C-F901A873513B} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIOControlCenterUser => C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe [2013-03-08] (Sony Corporation)

Task: {F9C00362-5FB5-417B-850E-15AD96B379B9} - System32\Tasks\{1691C428-799A-44EC-A3FA-5CF375BAD376} => pcalua.exe -a C:\ProgramData\KeyStream\uninstall.exe

Task: {FB4344DF-0A75-495A-B486-990F2D6CFBA0} - System32\Tasks\Seventh => C:\Users\Birk\AppData\Roaming\Seventh\Seventh.exe
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\Adobe Flash box Files Update Ver 2015919.job => C:\ProgramData\uiksdl201591916\calibre.exe/check_update C:\ProgramData\uiksdl201591916\BIRK-LAPTOP\Birk6This task detect has update for box files.Ver

Task: C:\WINDOWS\Tasks\QQBrowser Udpater Task(Core).job => C:\Program Files (x86)\Tencent\QQBrowser\QQBrowser.exe

Task: C:\WINDOWS\Tasks\QQBrowser Udpater Task.job => C:\Program Files (x86)\Tencent\QQBrowser\QQBrowser.exe

Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-07-10 13:00 - 2015-07-10 13:00 - 00028160 _____ () C:\WINDOWS\SYSTEM32\efsext.dll

2015-08-05 23:59 - 2015-07-15 04:04 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll

2015-08-05 22:36 - 2015-07-23 03:10 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2015-08-20 14:02 - 2015-08-11 11:14 - 00404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll

2015-09-30 21:59 - 2015-09-17 08:48 - 02494712 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2015-09-29 18:23 - 2015-09-29 18:23 - 00161280 _____ () C:\ProgramData\Gniguiluss\1.0.6.1\eoimknue.exe

2015-09-30 21:59 - 2015-09-17 08:48 - 02494712 _____ () C:\WINDOWS\System32\CoreUIComponents.dll

2015-09-30 21:58 - 2015-09-17 07:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll

2015-09-30 22:00 - 2015-09-17 07:44 - 06569472 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2015-09-30 21:57 - 2015-09-17 07:42 - 00471040 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2015-09-30 21:58 - 2015-09-17 07:42 - 01808384 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2015-09-30 21:59 - 2015-09-17 07:43 - 02274816 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2015-09-19 21:24 - 2015-09-19 21:24 - 03992360 _____ () C:\ProgramData\Common Toolkit Suite\AVEngine\Defs\vdb\SAVI.DLL

2015-09-19 21:29 - 2015-09-19 21:29 - 00227624 _____ () C:\ProgramData\Common Toolkit Suite\AVEngine\Defs\vdb\OSDP.DLL

2015-09-19 21:31 - 2015-09-19 21:31 - 04986152 _____ () C:\ProgramData\Common Toolkit Suite\AVEngine\Defs\vdb\VEEX.DLL

2013-09-03 01:27 - 2013-01-23 11:26 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

2015-09-19 18:40 - 2015-09-19 18:40 - 00561472 _____ () C:\ProgramData\uiksdl201591916\amui.dll

2015-09-19 18:40 - 2015-09-19 18:40 - 01597760 _____ () C:\ProgramData\uiksdl201591916\gboxi.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\13653cf7076b0afcf78dddc4:Win32App

AlternateDataStreams: C:\19b6841e773bc13a1c93:Win32App

AlternateDataStreams: C:\1b2d977528c862a0b9c55579:Win32App

AlternateDataStreams: C:\5c0aa62ab1228c77126721bec9:Win32App

AlternateDataStreams: C:\b1bd1fba3abc9b8e437a:Win32App

AlternateDataStreams: C:\beb3775127164cdb279c23ac4f40e8:Win32App

AlternateDataStreams: C:\d53f53563571dd1f92bb92d7fc11:Win32App

AlternateDataStreams: C:\Program Files\CCleaner:Win32App

AlternateDataStreams: C:\Program Files (x86)\GameforgeLive:Win32App

AlternateDataStreams: C:\Program Files (x86)\Hi-Rez Studios:Win32App

AlternateDataStreams: C:\Program Files (x86)\Microsoft Silverlight:Win32App

AlternateDataStreams: C:\Program Files (x86)\Minecraft:Win32App

AlternateDataStreams: C:\Program Files (x86)\WinRAR:Win32App

AlternateDataStreams: C:\WINDOWS\SysWOW64:Win32App

AlternateDataStreams: C:\ProgramData\regid.1991-06.com.microsoft:Win32App

AlternateDataStreams: C:\ProgramData\Sony Corporation:Win32App

AlternateDataStreams: C:\ProgramData\TEMP:5133A494

AlternateDataStreams: C:\ProgramData\TEMP:9BB8C675
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\aeriagames.com -> hxxps://aeriagames.com

IE trusted site: HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\aeriagames.com -> hxxp://aeriagames.com
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-2214603426-1893447350-2076376546-1001\Control Panel\Desktop\\Wallpaper -> 

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Birk\Pictures\Profil-Bilder\Hintergrund bilder\summer-high-definition_032159369_26.jpg

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKLM\...\StartupApproved\Run32: => "YTDownloader"

HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"

HKLM\...\StartupApproved\Run32: => "Aeria Ignite"

HKLM\...\StartupApproved\Run32: => "SDTray"

HKU\S-1-5-21-2214603426-1893447350-2076376546-1001\...\StartupApproved\Run: => "Browser Infrastructure Helper"

HKU\S-1-5-21-2214603426-1893447350-2076376546-1001\...\StartupApproved\Run: => "YTDownloader"

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\StartupApproved\Run: => "Browser Infrastructure Helper"

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\StartupApproved\Run: => "YTDownloader"

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\StartupApproved\Run: => "CCleaner Monitoring"

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\StartupApproved\Run: => "Speech Recognition"

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\StartupApproved\Run: => "Akamai NetSession Interface"

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\StartupApproved\Run: => "SpybotPostWindows10UpgradeReInstall"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{EAEFA7BE-A432-4E84-BD3D-DED66ADBB1C5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{BBD1A624-DB43-4346-9729-3B3A5018B3A6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{1DE61DB2-9632-4979-86B4-92AB73B014DD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{7F1B3233-C3C3-46AE-A725-0EF10A6A6B82}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{6784A19D-BC3B-4F40-9073-5D363B133B46}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe

FirewallRules: [{70C66166-EB82-4F62-8B97-B47785736BAF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe

FirewallRules: [{36B2EFA7-FCE6-446B-B549-870BE1505224}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe

FirewallRules: [{F6AB715C-2350-4455-B39F-36735BF1E6CB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe

FirewallRules: [UDP Query User{080C0581-1549-4651-A65B-84860CCB2E00}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Block) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [TCP Query User{4D04ACA5-98FF-4C62-8EBB-8B60735724FF}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Block) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [UDP Query User{757CE9F2-BBA1-4B09-9F97-32B0EBAE1815}C:\program files (x86)\codemasters\worms 4 mayhem\worms 4 mayhem.exe] => (Allow) C:\program files (x86)\codemasters\worms 4 mayhem\worms 4 mayhem.exe

FirewallRules: [TCP Query User{9C15C0D6-003D-4778-851D-E27CBD9CFD54}C:\program files (x86)\codemasters\worms 4 mayhem\worms 4 mayhem.exe] => (Allow) C:\program files (x86)\codemasters\worms 4 mayhem\worms 4 mayhem.exe

FirewallRules: [{04918943-92CC-4D2F-8B2D-C9AB394CC55A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{E8CD55E9-CE8B-4B21-9629-9074F15DC774}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [UDP Query User{6B081665-5E84-44A3-B4E1-000EDB6E5411}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{7E11F338-AD78-4F12-8183-0076C6BF6FFF}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{1A6F4200-F293-4476-8029-7D44C4868C89}C:\program files (x86)\codemasters\worms 4 mayhem\worms 4 mayhem.exe] => (Allow) C:\program files (x86)\codemasters\worms 4 mayhem\worms 4 mayhem.exe

FirewallRules: [TCP Query User{B7D7FFE7-D8D6-4191-8F46-6AF4C5F96BF6}C:\program files (x86)\codemasters\worms 4 mayhem\worms 4 mayhem.exe] => (Allow) C:\program files (x86)\codemasters\worms 4 mayhem\worms 4 mayhem.exe

FirewallRules: [UDP Query User{D3811E55-89A0-4903-BB98-0F653719F648}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{04183347-F58A-49AC-BA7E-94CA97E594E7}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{CBF6FEE0-F268-4A21-881D-90AC56677BC9}E:\warcraft iii\war3.exe] => (Allow) E:\warcraft iii\war3.exe

FirewallRules: [TCP Query User{066B0FC6-2235-48B5-965C-57EC4FA27374}E:\warcraft iii\war3.exe] => (Allow) E:\warcraft iii\war3.exe

FirewallRules: [UDP Query User{9B9C2D03-A32A-4EEB-8376-BE83CB86EB68}E:\warcraft iii\war3.exe] => (Allow) E:\warcraft iii\war3.exe

FirewallRules: [TCP Query User{17FB2750-3209-4ECE-9A14-7F407B289708}E:\warcraft iii\war3.exe] => (Allow) E:\warcraft iii\war3.exe

FirewallRules: [UDP Query User{5EAED8E5-1ECD-4A4B-B5D8-2F04A6AB611B}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{896CF879-2DFE-4D21-BD5A-9A482D193F36}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [{51FA7190-EF19-47BC-9B67-02D095B2A001}] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{66343A10-15AC-494F-B7F2-EEED1C9B33EF}] => (Allow) LPort=25565

FirewallRules: [{3AEE8380-0C0C-4B47-AABB-024033815795}] => (Allow) LPort=25565

FirewallRules: [UDP Query User{452D259E-1045-4662-AF7E-3FA2ED6A1D78}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [TCP Query User{8EACAB11-124A-40C0-86AD-6CAC781D41F6}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{BAC4B4DC-8470-4675-A09A-832E442543B6}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{7243A0D2-8CD6-4C6A-AC7F-C05BBB3E754F}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{5094A3CE-02AF-425C-A01D-8F12ECE865DF}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{B5FDA7D2-E1A0-4F72-8B91-1A95C3595AAC}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [{774DAEE8-AAF9-4475-B4CE-1BC4695E5BC2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{D121116A-045A-4EAB-B7D6-16C3767DE25D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{5D15E15E-457B-4A80-9FD8-F56350C29E20}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{BB0AAF39-66EB-4133-A714-E9D28749BDB2}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{96690530-A22D-420C-B73E-EB5D1E584A9D}] => (Allow) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe

FirewallRules: [{44A8A21B-FF74-40D2-88C9-7E5343E87DEB}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{F4A310A3-5260-4BB9-90C9-6350658A44EF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{C4192145-8899-481E-A4F7-CC0EA05CAF83}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{D673AC2A-7148-4C54-9673-981DF11703EC}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [TCP Query User{9BDABF1D-6A6D-4CA4-86D2-DEE2225D8828}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [UDP Query User{F8F8E3A3-0AA1-4A52-8FCF-DA64D0CAEFA0}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [{DAC0A6D4-834D-4ACF-AFFE-B052C98A8F20}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Darksiders 2\Darksiders2.exe

FirewallRules: [{98241093-694D-4AD3-B792-E9172937765F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Darksiders 2\Darksiders2.exe

FirewallRules: [{68CA0458-6A0B-45EB-B8D1-2B6A1D897828}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe

FirewallRules: [{29A5054A-837D-443A-9715-15E1D1D36A67}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe

FirewallRules: [{631CF6C9-665F-43E0-9820-E717C784EE91}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe

FirewallRules: [{8E3146CE-537A-4908-A890-BFEFE48C153E}] => (Allow) C:\Program Files (x86)\speed browser\Application\browser.exe
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (10/06/2015 12:36:13 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83

Name des fehlerhaften Moduls: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000011aa

ID des fehlerhaften Prozesses: 0x1050

Startzeit der fehlerhaften Anwendung: 0xGmer-19357.exe0

Pfad der fehlerhaften Anwendung: Gmer-19357.exe1

Pfad des fehlerhaften Moduls: Gmer-19357.exe2

Berichtskennung: Gmer-19357.exe3

Vollständiger Name des fehlerhaften Pakets: Gmer-19357.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Gmer-19357.exe5
 

Error: (10/06/2015 12:30:44 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 10.0.10240.16431, Zeitstempel: 0x55c9bd76

Name des fehlerhaften Moduls: SHELL32.dll, Version: 10.0.10240.16463, Zeitstempel: 0x55d5656c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000009bd85

ID des fehlerhaften Prozesses: 0x1090

Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0

Pfad der fehlerhaften Anwendung: Explorer.EXE1

Pfad des fehlerhaften Moduls: Explorer.EXE2

Berichtskennung: Explorer.EXE3

Vollständiger Name des fehlerhaften Pakets: Explorer.EXE4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Explorer.EXE5
 

Error: (10/06/2015 11:12:11 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: BIRK-LAPTOP)

Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (10/05/2015 11:53:50 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: BIRK-LAPTOP)

Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (10/05/2015 11:25:37 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 10.0.10240.16431, Zeitstempel: 0x55c9bd76

Name des fehlerhaften Moduls: SHELL32.dll, Version: 10.0.10240.16463, Zeitstempel: 0x55d5656c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000009bd85

ID des fehlerhaften Prozesses: 0xd44

Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0

Pfad der fehlerhaften Anwendung: Explorer.EXE1

Pfad des fehlerhaften Moduls: Explorer.EXE2

Berichtskennung: Explorer.EXE3

Vollständiger Name des fehlerhaften Pakets: Explorer.EXE4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Explorer.EXE5
 

Error: (10/05/2015 09:43:10 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: calibre.exe, Version: 1.1.15.616, Zeitstempel: 0x52367478

Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10240.16430, Zeitstempel: 0x55c599e1

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00045e93

ID des fehlerhaften Prozesses: 0x5b4

Startzeit der fehlerhaften Anwendung: 0xcalibre.exe0

Pfad der fehlerhaften Anwendung: calibre.exe1

Pfad des fehlerhaften Moduls: calibre.exe2

Berichtskennung: calibre.exe3

Vollständiger Name des fehlerhaften Pakets: calibre.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: calibre.exe5
 

Error: (10/05/2015 08:38:41 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: BIRK-LAPTOP)

Description: Bei der Aktivierung der App „Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreen“ ist folgender Fehler aufgetreten: -2147221165. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (10/05/2015 06:31:05 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 10.0.10240.16431, Zeitstempel: 0x55c9bd76

Name des fehlerhaften Moduls: SHELL32.dll, Version: 10.0.10240.16463, Zeitstempel: 0x55d5656c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000009bd85

ID des fehlerhaften Prozesses: 0x1b98

Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0

Pfad der fehlerhaften Anwendung: explorer.exe1

Pfad des fehlerhaften Moduls: explorer.exe2

Berichtskennung: explorer.exe3

Vollständiger Name des fehlerhaften Pakets: explorer.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5
 

Error: (10/05/2015 05:29:30 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 10.0.10240.16431, Zeitstempel: 0x55c9bd76

Name des fehlerhaften Moduls: SHELL32.dll, Version: 10.0.10240.16463, Zeitstempel: 0x55d5656c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000009bd85

ID des fehlerhaften Prozesses: 0x1d28

Startzeit der fehlerhaften Anwendung: 0xexplorer.exe0

Pfad der fehlerhaften Anwendung: explorer.exe1

Pfad des fehlerhaften Moduls: explorer.exe2

Berichtskennung: explorer.exe3

Vollständiger Name des fehlerhaften Pakets: explorer.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: explorer.exe5
 

Error: (10/05/2015 04:27:36 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 10.0.10240.16431, Zeitstempel: 0x55c9bd76

Name des fehlerhaften Moduls: SHELL32.dll, Version: 10.0.10240.16463, Zeitstempel: 0x55d5656c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000009bd85

ID des fehlerhaften Prozesses: 0x1e38

Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0

Pfad der fehlerhaften Anwendung: Explorer.EXE1

Pfad des fehlerhaften Moduls: Explorer.EXE2

Berichtskennung: Explorer.EXE3

Vollständiger Name des fehlerhaften Pakets: Explorer.EXE4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Explorer.EXE5
 
 

Systemfehler:

=============

Error: (10/06/2015 11:23:48 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070003 fehlgeschlagen: Groove Music
 

Error: (10/06/2015 11:23:35 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070003 fehlgeschlagen: Pel·lícules i programes
 

Error: (10/06/2015 11:23:22 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070003 fehlgeschlagen: Microsoft Solitaire Collection
 

Error: (10/06/2015 11:23:02 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070003 fehlgeschlagen: Store
 

Error: (10/06/2015 11:22:49 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070003 fehlgeschlagen: Microsoft Phone Companion
 

Error: (10/06/2015 11:22:40 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070003 fehlgeschlagen: Microsoft Photos
 

Error: (10/06/2015 11:22:26 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073cf9 fehlgeschlagen: Microsoft Photos
 

Error: (10/06/2015 11:22:26 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070003 fehlgeschlagen: Microsoft Photos
 

Error: (10/06/2015 11:22:03 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070003 fehlgeschlagen: Xbox
 

Error: (10/06/2015 11:21:37 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073cf9 fehlgeschlagen: Windows Camera
 
 

CodeIntegrity:

===================================

  Date: 2015-10-05 18:45:30.506

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2015-10-01 15:51:34.808

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\dnsapi.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-10-01 15:51:20.611

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\dnsapi.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-10-01 15:51:20.585

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\dnsapi.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-10-01 15:51:20.559

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\dnsapi.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-10-01 15:51:20.533

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\dnsapi.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-10-01 15:51:20.501

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\dnsapi.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-10-01 15:20:36.583

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-10-01 11:43:31.739

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\dnsapi.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-10-01 11:43:31.700

  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\dnsapi.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Pentium(R) CPU 2117U @ 1.80GHz

Prozentuale Nutzung des RAM: 37%

Installierter physikalischer RAM: 8070.8 MB

Verfügbarer physikalischer RAM: 5056.32 MB

Summe virtueller Speicher: 9606.8 MB

Verfügbarer virtueller Speicher: 6475.63 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:437.95 GB) (Free:297.31 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 465.8 GB) (Disk ID: 02F793F2)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================

GMER funktionierte nicht*

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 
 

Error, 06.10.2015 15:59, SYSTEM, BIRK-LAPTOP, Update, Bad md5 or size: akadomains, 11, 

Error, 06.10.2015 15:59, SYSTEM, BIRK-LAPTOP, Update, Bad md5 or size: akaips, 11, 

Update, 06.10.2015 15:59, SYSTEM, BIRK-LAPTOP, Manual, AKA Domain Database, 0.0.0.0, 2015.9.11.2, 

Update, 06.10.2015 15:59, SYSTEM, BIRK-LAPTOP, Manual, AKA IP Database, 0.0.0.0, 2015.9.11.2, 

Update, 06.10.2015 15:59, SYSTEM, BIRK-LAPTOP, Manual, Domain Database, 0.0.0.0, 2015.10.6.3, 

Update, 06.10.2015 15:59, SYSTEM, BIRK-LAPTOP, Manual, IP Database, 0.0.0.0, 2015.10.6.2, 

Update, 06.10.2015 15:59, SYSTEM, BIRK-LAPTOP, Manual, Remediation Database, 2015.5.13.1, 2015.9.30.1, 

Update, 06.10.2015 15:59, SYSTEM, BIRK-LAPTOP, Manual, Rootkit Database, 2015.6.2.1, 2015.10.6.1, 

Update, 06.10.2015 15:59, SYSTEM, BIRK-LAPTOP, Manual, Malware Database, 2015.6.3.3, 2015.10.6.3, 
 

(end)

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 7.6.4 (09.28.2015:1)

OS: Windows 10 Home x64

Ran by Birk on 06.10.2015 at 17:23:26,01

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 

Successfully deleted: [Service] drvagent64 [Reboot required]
 
 
 

~~~ Tasks
 

Successfully deleted: [Task] C:\WINDOWS\system32\tasks\Gniguiluss

Successfully deleted: [Task] C:\WINDOWS\system32\tasks\QQBrowser Udpater Task

Successfully deleted: [Task] C:\WINDOWS\system32\tasks\QQBrowser Udpater Task(Core)

Successfully deleted: [Task] C:\WINDOWS\Tasks\QQBrowser Udpater Task(Core).job

Successfully deleted: [Task] C:\WINDOWS\Tasks\QQBrowser Udpater Task.job
 
 
 

~~~ Registry Values
 

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer
 
 
 

~~~ Files
 

Successfully deleted: [File] C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] C:\Users\Birk\Appdata\Local\crashrpt

Successfully deleted: [Folder] C:\Users\Birk\Appdata\Local\installer

Successfully deleted: [Folder] C:\Users\Birk\Appdata\LocalLow\company

Successfully deleted: [Folder] C:\Users\Public\qiyi

Successfully deleted: [Folder] C:\WINDOWS\SysWOW64\ai_recyclebin

Successfully deleted: [Folder] C:\ProgramData\uiksdl201591916
 
 
 

~~~ FireFox
 

Successfully deleted the following from C:\Users\Birk\AppData\Roaming\mozilla\firefox\profiles\aasdbd5n.default-1443433894913\prefs.js
 

user_pref(extensions.a6a1a03975fde4c8690f6b883c36bc17d88519bfe704d8cae3851239com74253.74253.internaldb.__ICM_LITE__fifty_test_rules.value, %7B%22DE%22%3A%7B%22ALL%22%3A%5B%
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 06.10.2015 at 17:27:59,66

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:27-09-2015 01

durchgeführt von Birk (Administrator) auf BIRK-LAPTOP (06-10-2015 17:31:32)

Gestartet von C:\Users\Birk\Downloads

Geladene Profile: Birk (Verfügbare Profile: UpdatusUser & Birk & Administrator & Gast)

Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Preventon Technologies Limited) C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVWatchService.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Preventon Technologies Limited) C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVScanningService.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)

HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.exe [10590208 2013-03-14] (Broadcom Corporation)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3928264 2015-05-27] (Synaptics Incorporated)

HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin)

HKLM\...\Policies\Explorer: [NoFolderOptions] 0

HKLM\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\Run: [Speech Recognition] => C:\WINDOWS\Speech\Common\sapisvr.exe [45056 2015-07-10] (Microsoft Corporation)

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\MountPoints2: {461c7f39-cef7-11e3-824f-806e6f6e6963} - "D:\autorun.exe" 

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\MountPoints2: {73e2bd98-6cc4-11e3-be74-0c84dcf636ac} - "E:\pushinst.exe" 

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\...\MountPoints2: {ccb30605-9e88-11e4-be8a-0c84dcf636ac} - "F:\pushinst.exe" 

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> none

AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [176904 2015-07-23] (NVIDIA Corporation)

ShellIconOverlayIdentifiers: [Fatlfn] -> {646BAAE7-7538-4866-8EEE-974C0AA910AB} =>  Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  Keine Datei

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\..\Interfaces\{75c84c69-d965-405d-9cde-0a6bf9d640f2}: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{84d1984e-0943-4b0c-9323-5c23cffcdbae}: [NameServer] 192.168.178.1

Tcpip\..\Interfaces\{d10eb9e6-1147-4f35-b422-fb6163ee8e33}: [NameServer] 8.8.8.8,8.8.4.4

Tcpip\..\Interfaces\{d10eb9e6-1147-4f35-b422-fb6163ee8e33}: [DhcpNameServer] 192.168.178.1
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130878428700418758&GUID=58F89681-4E70-4E55-A70E-4D8AAA245A35

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130878428710246746&GUID=58F89681-4E70-4E55-A70E-4D8AAA245A35

HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130878428700441451&GUID=58F89681-4E70-4E55-A70E-4D8AAA245A35

HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130878428700447701&GUID=58F89681-4E70-4E55-A70E-4D8AAA245A35

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130878650832125081&GUID=58F89681-4E70-4E55-A70E-4D8AAA245A35

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://vaioportal.sony.eu

HKU\S-1-5-21-2214603426-1893447350-2076376546-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://vaioportal.sony.eu

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

SearchScopes: HKLM-x32 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1

SearchScopes: HKU\S-1-5-21-2214603426-1893447350-2076376546-1002 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}

SearchScopes: HKU\S-1-5-21-2214603426-1893447350-2076376546-1002 -> {F33BECA0-6B78-4D55-A67E-587BABFA0F3F} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-&_nkw={searchTerms}
 

FireFox:

========

FF ProfilePath: C:\Users\Birk\AppData\Roaming\Mozilla\Firefox\Profiles\aasdbd5n.default-1443433894913

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-10-01] ()

FF Plugin: @java.com/DTPlugin,version=10.13.2 -> C:\Windows\system32\npDeployJava1.dll [2013-09-03] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.13.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-09-03] (Oracle Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-10-01] ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-01-23] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-01-23] (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=10.13.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-09-03] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.13.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-09-03] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll [2011-03-09] ( Microsoft Corporation)

FF Plugin-x32: @rising.com.cn/nprising -> C:\Program Files (x86)\Rising\RAV\nprising.dll [Keine Datei]

FF Plugin-x32: Adobe Reader -> c:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-2214603426-1893447350-2076376546-1002: @rising.com.cn/nprising -> C:\Program Files (x86)\Rising\RAV\nprising.dll Keine Datei

FF Plugin HKU\S-1-5-21-2214603426-1893447350-2076376546-1002: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll [2013-02-19] (Intel)

FF Plugin HKU\S-1-5-21-2214603426-1893447350-2076376546-1002: intel.com/AppUpx64 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll [2013-02-19] (Intel)

FF Extension: fbchathistoryfirechmcom - C:\Users\Birk\AppData\Roaming\Mozilla\Firefox\Profiles\aasdbd5n.default-1443433894913\Extensions\fbchathistory@firechm.com [2015-10-01]

FF Extension: resteasyquickmediasolutionscom - C:\Users\Birk\AppData\Roaming\Mozilla\Firefox\Profiles\aasdbd5n.default-1443433894913\Extensions\rest-easy@quickmediasolutions.com [2015-10-01]

FF Extension: SilentBlockschuzakjp - C:\Users\Birk\AppData\Roaming\Mozilla\Firefox\Profiles\aasdbd5n.default-1443433894913\Extensions\SilentBlock@schuzak.jp [2015-10-01]

FF Extension: A5475360A7EA437b9A7929208F476940 - C:\Users\Birk\AppData\Roaming\Mozilla\Firefox\Profiles\aasdbd5n.default-1443433894913\Extensions\{A5475360-A7EA-437b-9A79-29208F476940} [2015-10-01]

FF Extension: AF445D67154C4c69A17B7F392BCC36A3 - C:\Users\Birk\AppData\Roaming\Mozilla\Firefox\Profiles\aasdbd5n.default-1443433894913\Extensions\{AF445D67-154C-4c69-A17B-7F392BCC36A3} [2015-10-01]

FF Extension: Adblock Plus - C:\Users\Birk\AppData\Roaming\Mozilla\Firefox\Profiles\aasdbd5n.default-1443433894913\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-09-28]

FF HKLM-x32\...\Firefox\Extensions: [arthurj8283@gmail.com] - C:\Users\Birk\AppData\Roaming\Mozilla\Firefox\Profiles\bh8meza8.default-1425064794684\extensions\arthurj8283@gmail.com => nicht gefunden

FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\browser\defaults\preferences\prefs.js [2015-09-27]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AV Engine Scanning Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVScanningService.exe [2009912 2015-07-27] (Preventon Technologies Limited)

R2 AV Watch Service; C:\Program Files (x86)\Common Files\Common Toolkit Suite\AVEngine\AVWatchService.exe [400528 2015-07-27] (Preventon Technologies Limited)

S2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [Datei ist nicht signiert]

S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2015-03-27] (Broadcom Corporation.)

S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [8704 2015-09-02] (Hi-Rez Studios) [Datei ist nicht signiert]

S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319888 2015-07-11] (Intel Corporation)

S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129824 2013-01-23] (Intel Corporation)

S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166688 2013-01-23] (Intel Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)

S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [629336 2013-09-28] (Sony Corporation)

S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [3611808 2015-07-22] (INCA Internet Co., Ltd.)

S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2013-01-06] (Sony Corporation)

S3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1642544 2014-02-28] (Sony Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

S2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe [6070272 2013-03-14] (Broadcom Corporation) [Datei ist nicht signiert]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 AVFSFilter; C:\Windows\system32\DRIVERS\avfsfilter.sys [13720 2015-07-27] ()

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [173312 2015-03-27] (Broadcom Corporation.)

R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7488176 2015-04-13] (Broadcom Corporation)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation)

S3 dump_wmimmc; C:\Users\Birk\Desktop\Sonstiges\Tools\GameforgeLive\Metin 2\GameforgeLive\Games\DEU_deu\Metin2\GameGuard\dump_wmimmc.sys [183144 2015-09-04] ()

R3 fwlanusbn; C:\Windows\system32\DRIVERS\fwlanusbn.sys [714368 2010-10-22] (AVM GmbH)

S3 hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [44296 2015-02-17] (LogMeIn Inc.)

R1 HyperVM; C:\WINDOWS\system32\drivers\hvm.sys [41784 2015-09-19] (Beijing Rising Information Technology Co., Ltd.)

R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)

R1 rsutils; C:\Windows\System32\DRIVERS\rsutils.sys [71760 2015-04-09] (Beijing Rising Information Technology Co., Ltd.)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-05-27] (Synaptics Incorporated)

R0 sysmon; C:\Windows\System32\DRIVERS\sysmon.sys [119168 2015-09-19] (Beijing Rising Information Technology Co., Ltd.)

S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)

S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-10-06 17:27 - 2015-10-06 17:27 - 00002091 _____ C:\Users\Birk\Desktop\JRT.txt

2015-10-06 17:22 - 2015-10-06 17:23 - 01798976 _____ (Malwarebytes) C:\Users\Birk\Downloads\JRT.exe

2015-10-06 17:13 - 2015-10-06 17:13 - 00016148 _____ C:\WINDOWS\system32\BIRK-LAPTOP_Birk_HistoryPrediction.bin

2015-10-06 17:07 - 2015-10-06 17:07 - 00000923 _____ C:\Users\Birk\Desktop\mbam.txt

2015-10-06 15:58 - 2015-10-06 15:59 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2015-10-06 15:58 - 2015-10-06 15:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-10-06 15:58 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys

2015-10-06 15:58 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2015-10-06 15:58 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys

2015-10-06 15:56 - 2015-10-06 15:58 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Birk\Downloads\mbam-setup-2.1.8.1057.exe

2015-10-06 12:37 - 2015-10-06 12:37 - 00069907 ____C C:\Users\Birk\Desktop\FRST_06-10-2015_12-37-03.txt

2015-10-06 12:37 - 2015-10-06 12:37 - 00048512 ____C C:\Users\Birk\Desktop\Addition_06-10-2015_12-37-03.txt

2015-10-06 12:35 - 2015-10-06 12:36 - 00380416 _____ C:\Users\Birk\Downloads\Gmer-19357.exe

2015-10-06 12:29 - 2015-10-06 12:29 - 02193920 _____ (Farbar) C:\Users\Birk\Downloads\FRST64(1).exe

2015-10-06 12:28 - 2015-10-06 12:29 - 00000470 _____ C:\Users\Birk\Downloads\defogger_disable.log

2015-10-06 12:28 - 2015-10-06 12:28 - 00050477 _____ C:\Users\Birk\Downloads\Defogger.exe

2015-10-06 12:28 - 2015-10-06 12:28 - 00000000 _____ C:\Users\Birk\defogger_reenable

2015-10-06 11:43 - 2015-10-06 11:43 - 00688992 ____R (Swearware) C:\Users\Birk\Downloads\dds.com

2015-10-06 11:15 - 2015-10-06 11:15 - 00000795 _____ C:\WINDOWS\setupact.log

2015-10-06 11:15 - 2015-10-06 11:15 - 00000000 _____ C:\WINDOWS\setuperr.log

2015-10-05 18:41 - 2015-10-05 18:41 - 707215728 _____ C:\WINDOWS\MEMORY.DMP

2015-10-05 18:41 - 2015-10-05 18:41 - 00357784 _____ C:\WINDOWS\Minidump\100515-33640-01.dmp

2015-10-03 13:35 - 2015-10-03 13:35 - 00000000 ____D C:\ProgramData\Rising

2015-10-03 13:28 - 2015-10-03 13:28 - 09907448 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll

2015-10-03 13:28 - 2015-10-03 13:28 - 00000000 ____D C:\WINDOWS\LastGood.Tmp

2015-10-01 17:57 - 2015-10-06 17:14 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log

2015-10-01 17:57 - 2015-09-15 18:12 - 00812008 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2015-10-01 17:57 - 2015-09-15 18:12 - 00178152 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2015-10-01 17:55 - 2015-10-06 17:11 - 00015580 _____ C:\WINDOWS\PFRO.log

2015-10-01 17:55 - 2015-10-01 17:56 - 00223736 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2015-10-01 15:50 - 2015-10-01 15:51 - 36282350 _____ C:\Users\Birk\Downloads\install_flash_player_19.zip

2015-10-01 15:48 - 2015-10-01 15:48 - 01152716 _____ C:\Users\Birk\Downloads\2938740_hd.mp4.crdownload

2015-09-30 22:00 - 2015-09-17 08:49 - 06487248 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2015-09-30 22:00 - 2015-09-17 08:28 - 05120056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2015-09-30 22:00 - 2015-09-17 08:12 - 16708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2015-09-30 22:00 - 2015-09-17 08:07 - 21875712 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2015-09-30 22:00 - 2015-09-17 08:04 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll

2015-09-30 22:00 - 2015-09-17 08:00 - 24595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2015-09-30 22:00 - 2015-09-17 07:54 - 03781120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2015-09-30 22:00 - 2015-09-17 07:53 - 07055872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll

2015-09-30 22:00 - 2015-09-17 07:51 - 13027840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2015-09-30 22:00 - 2015-09-17 07:51 - 02660864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll

2015-09-30 22:00 - 2015-09-17 07:47 - 07523328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2015-09-30 22:00 - 2015-09-17 07:45 - 19325440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2015-09-30 22:00 - 2015-09-17 07:40 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll

2015-09-30 22:00 - 2015-09-17 07:37 - 18806272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2015-09-30 22:00 - 2015-09-17 07:35 - 05079552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll

2015-09-30 21:59 - 2015-09-25 02:13 - 01276416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll

2015-09-30 21:59 - 2015-09-25 01:17 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2015-09-30 21:59 - 2015-09-25 01:06 - 01423872 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll

2015-09-30 21:59 - 2015-09-25 01:01 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll

2015-09-30 21:59 - 2015-09-25 01:00 - 01205248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll

2015-09-30 21:59 - 2015-09-25 00:42 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll

2015-09-30 21:59 - 2015-09-25 00:25 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll

2015-09-30 21:59 - 2015-09-25 00:25 - 00625152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll

2015-09-30 21:59 - 2015-09-17 08:50 - 02464216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2015-09-30 21:59 - 2015-09-17 08:50 - 01563392 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll

2015-09-30 21:59 - 2015-09-17 08:49 - 08020816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2015-09-30 21:59 - 2015-09-17 08:49 - 01563472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll

2015-09-30 21:59 - 2015-09-17 08:49 - 00894256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys

2015-09-30 21:59 - 2015-09-17 08:48 - 02824248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll

2015-09-30 21:59 - 2015-09-17 08:48 - 02494712 _____ C:\WINDOWS\system32\CoreUIComponents.dll

2015-09-30 21:59 - 2015-09-17 08:48 - 02432336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2015-09-30 21:59 - 2015-09-17 08:48 - 02156400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll

2015-09-30 21:59 - 2015-09-17 08:48 - 01983824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2015-09-30 21:59 - 2015-09-17 08:48 - 00809352 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll

2015-09-30 21:59 - 2015-09-17 08:48 - 00784136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll

2015-09-30 21:59 - 2015-09-17 08:47 - 01397088 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll

2015-09-30 21:59 - 2015-09-17 08:44 - 00781976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll

2015-09-30 21:59 - 2015-09-17 08:43 - 00966416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll

2015-09-30 21:59 - 2015-09-17 08:37 - 01295712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll

2015-09-30 21:59 - 2015-09-17 08:28 - 02154808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2015-09-30 21:59 - 2015-09-17 08:27 - 01766952 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2015-09-30 21:59 - 2015-09-17 08:26 - 02446648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll

2015-09-30 21:59 - 2015-09-17 08:26 - 00646672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll

2015-09-30 21:59 - 2015-09-17 08:25 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll

2015-09-30 21:59 - 2015-09-17 08:21 - 00658528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll

2015-09-30 21:59 - 2015-09-17 08:20 - 00764416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll

2015-09-30 21:59 - 2015-09-17 08:06 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll

2015-09-30 21:59 - 2015-09-17 08:05 - 02226688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2015-09-30 21:59 - 2015-09-17 08:04 - 00910848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll

2015-09-30 21:59 - 2015-09-17 08:00 - 03248640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll

2015-09-30 21:59 - 2015-09-17 08:00 - 02417664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll

2015-09-30 21:59 - 2015-09-17 07:57 - 02228736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll

2015-09-30 21:59 - 2015-09-17 07:56 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll

2015-09-30 21:59 - 2015-09-17 07:55 - 02236416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2015-09-30 21:59 - 2015-09-17 07:55 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll

2015-09-30 21:59 - 2015-09-17 07:52 - 01181696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll

2015-09-30 21:59 - 2015-09-17 07:51 - 01203712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll

2015-09-30 21:59 - 2015-09-17 07:49 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2015-09-30 21:59 - 2015-09-17 07:49 - 01290240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll

2015-09-30 21:59 - 2015-09-17 07:49 - 01010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll

2015-09-30 21:59 - 2015-09-17 07:48 - 02093056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll

2015-09-30 21:59 - 2015-09-17 07:45 - 04791296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2015-09-30 21:59 - 2015-09-17 07:45 - 01331200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll

2015-09-30 21:59 - 2015-09-17 07:45 - 00869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll

2015-09-30 21:59 - 2015-09-17 07:44 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll

2015-09-30 21:59 - 2015-09-17 07:43 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll

2015-09-30 21:59 - 2015-09-17 07:42 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll

2015-09-30 21:59 - 2015-09-17 07:40 - 01918464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll

2015-09-30 21:59 - 2015-09-17 07:40 - 01162240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll

2015-09-30 21:59 - 2015-09-17 07:38 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll

2015-09-30 21:59 - 2015-09-17 07:35 - 02207232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2015-09-30 21:59 - 2015-09-17 07:35 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll

2015-09-30 21:59 - 2015-09-17 07:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll

2015-09-30 21:59 - 2015-09-17 07:32 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2015-09-30 21:59 - 2015-09-17 07:31 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2015-09-30 21:59 - 2015-09-17 07:29 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll

2015-09-30 21:59 - 2015-09-17 07:26 - 00899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll

2015-09-30 21:59 - 2015-09-13 04:05 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll

2015-09-30 21:58 - 2015-09-25 01:24 - 00796160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll

2015-09-30 21:58 - 2015-09-25 01:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll

2015-09-30 21:58 - 2015-09-25 01:23 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2015-09-30 21:58 - 2015-09-25 01:08 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2015-09-30 21:58 - 2015-09-25 01:07 - 01382400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2015-09-30 21:58 - 2015-09-25 01:05 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll

2015-09-30 21:58 - 2015-09-25 01:01 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll

2015-09-30 21:58 - 2015-09-25 01:00 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll

2015-09-30 21:58 - 2015-09-25 01:00 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll

2015-09-30 21:58 - 2015-09-25 00:53 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll

2015-09-30 21:58 - 2015-09-25 00:43 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll

2015-09-30 21:58 - 2015-09-25 00:43 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll

2015-09-30 21:58 - 2015-09-25 00:25 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll

2015-09-30 21:58 - 2015-09-25 00:25 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll

2015-09-30 21:58 - 2015-09-25 00:25 - 00525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll

2015-09-30 21:58 - 2015-09-25 00:19 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll

2015-09-30 21:58 - 2015-09-19 07:14 - 00102304 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll

2015-09-30 21:58 - 2015-09-17 08:50 - 00099664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys

2015-09-30 21:58 - 2015-09-17 08:50 - 00088384 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll

2015-09-30 21:58 - 2015-09-17 08:49 - 00553808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2015-09-30 21:58 - 2015-09-17 08:49 - 00501008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2015-09-30 21:58 - 2015-09-17 08:48 - 00584656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll

2015-09-30 21:58 - 2015-09-17 08:48 - 00555768 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll

2015-09-30 21:58 - 2015-09-17 08:48 - 00537080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll

2015-09-30 21:58 - 2015-09-17 08:48 - 00516448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS

2015-09-30 21:58 - 2015-09-17 08:48 - 00505696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2015-09-30 21:58 - 2015-09-17 08:48 - 00476760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll

2015-09-30 21:58 - 2015-09-17 08:48 - 00406864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS

2015-09-30 21:58 - 2015-09-17 08:48 - 00395088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2015-09-30 21:58 - 2015-09-17 08:48 - 00332624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys

2015-09-30 21:58 - 2015-09-17 08:48 - 00278352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys

2015-09-30 21:58 - 2015-09-17 08:48 - 00243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2015-09-30 21:58 - 2015-09-17 08:39 - 00081488 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2015-09-30 21:58 - 2015-09-17 08:37 - 01168736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2015-09-30 21:58 - 2015-09-17 08:28 - 01357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll

2015-09-30 21:58 - 2015-09-17 08:28 - 00441168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2015-09-30 21:58 - 2015-09-17 08:28 - 00407608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2015-09-30 21:58 - 2015-09-17 08:28 - 00074880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll

2015-09-30 21:58 - 2015-09-17 08:27 - 00454512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll

2015-09-30 21:58 - 2015-09-17 08:26 - 01895568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll

2015-09-30 21:58 - 2015-09-17 08:26 - 00508248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll

2015-09-30 21:58 - 2015-09-17 08:26 - 00434376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll

2015-09-30 21:58 - 2015-09-17 08:26 - 00428128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll

2015-09-30 21:58 - 2015-09-17 08:09 - 00269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll

2015-09-30 21:58 - 2015-09-17 08:08 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll

2015-09-30 21:58 - 2015-09-17 08:08 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Speech.Pal.dll

2015-09-30 21:58 - 2015-09-17 08:08 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe

2015-09-30 21:58 - 2015-09-17 08:06 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll

2015-09-30 21:58 - 2015-09-17 08:06 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll

2015-09-30 21:58 - 2015-09-17 08:05 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll

2015-09-30 21:58 - 2015-09-17 08:04 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll

2015-09-30 21:58 - 2015-09-17 08:03 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll

2015-09-30 21:58 - 2015-09-17 08:03 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll

2015-09-30 21:58 - 2015-09-17 08:03 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe

2015-09-30 21:58 - 2015-09-17 08:00 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll

2015-09-30 21:58 - 2015-09-17 08:00 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KeywordDetectorMsftSidAdapter.dll

2015-09-30 21:58 - 2015-09-17 07:58 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll

2015-09-30 21:58 - 2015-09-17 07:57 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll

2015-09-30 21:58 - 2015-09-17 07:57 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll

2015-09-30 21:58 - 2015-09-17 07:57 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll

2015-09-30 21:58 - 2015-09-17 07:56 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll

2015-09-30 21:58 - 2015-09-17 07:55 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx02000.dll

2015-09-30 21:58 - 2015-09-17 07:55 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2015-09-30 21:58 - 2015-09-17 07:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll

2015-09-30 21:58 - 2015-09-17 07:55 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe

2015-09-30 21:58 - 2015-09-17 07:55 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll

2015-09-30 21:58 - 2015-09-17 07:54 - 00780288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll

2015-09-30 21:58 - 2015-09-17 07:52 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll

2015-09-30 21:58 - 2015-09-17 07:52 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll

2015-09-30 21:58 - 2015-09-17 07:52 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll

2015-09-30 21:58 - 2015-09-17 07:52 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll

2015-09-30 21:58 - 2015-09-17 07:52 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll

2015-09-30 21:58 - 2015-09-17 07:52 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll

2015-09-30 21:58 - 2015-09-17 07:51 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll

2015-09-30 21:58 - 2015-09-17 07:51 - 01067520 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2015-09-30 21:58 - 2015-09-17 07:51 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll

2015-09-30 21:58 - 2015-09-17 07:50 - 00929280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2015-09-30 21:58 - 2015-09-17 07:50 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll

2015-09-30 21:58 - 2015-09-17 07:50 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys

2015-09-30 21:58 - 2015-09-17 07:50 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll

2015-09-30 21:58 - 2015-09-17 07:50 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys

2015-09-30 21:58 - 2015-09-17 07:49 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWebproxy.dll

2015-09-30 21:58 - 2015-09-17 07:49 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationGeofences.dll

2015-09-30 21:58 - 2015-09-17 07:49 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationWiFiAdapter.dll

2015-09-30 21:58 - 2015-09-17 07:49 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll

2015-09-30 21:58 - 2015-09-17 07:48 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll

2015-09-30 21:58 - 2015-09-17 07:48 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll

2015-09-30 21:58 - 2015-09-17 07:48 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll

2015-09-30 21:58 - 2015-09-17 07:48 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll

2015-09-30 21:58 - 2015-09-17 07:48 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll

2015-09-30 21:58 - 2015-09-17 07:47 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll

2015-09-30 21:58 - 2015-09-17 07:47 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll

2015-09-30 21:58 - 2015-09-17 07:47 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll

2015-09-30 21:58 - 2015-09-17 07:46 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll

2015-09-30 21:58 - 2015-09-17 07:46 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2015-09-30 21:58 - 2015-09-17 07:46 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2015-09-30 21:58 - 2015-09-17 07:46 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll

2015-09-30 21:58 - 2015-09-17 07:46 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll

2015-09-30 21:58 - 2015-09-17 07:46 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe

2015-09-30 21:58 - 2015-09-17 07:46 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll

2015-09-30 21:58 - 2015-09-17 07:45 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll

2015-09-30 21:58 - 2015-09-17 07:45 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll

2015-09-30 21:58 - 2015-09-17 07:44 - 01844736 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll

2015-09-30 21:58 - 2015-09-17 07:44 - 00599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll

2015-09-30 21:58 - 2015-09-17 07:44 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncutil.dll

2015-09-30 21:58 - 2015-09-17 07:43 - 00378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll

2015-09-30 21:58 - 2015-09-17 07:43 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll

2015-09-30 21:58 - 2015-09-17 07:41 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll

2015-09-30 21:58 - 2015-09-17 07:39 - 00587264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll

2015-09-30 21:58 - 2015-09-17 07:37 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll

2015-09-30 21:58 - 2015-09-17 07:34 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll

2015-09-30 21:58 - 2015-09-17 07:32 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll

2015-09-30 21:58 - 2015-09-17 07:32 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll

2015-09-30 21:58 - 2015-09-17 07:32 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll

2015-09-30 21:58 - 2015-09-17 07:31 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll

2015-09-30 21:58 - 2015-09-17 07:30 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2015-09-30 21:58 - 2015-09-17 07:29 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll

2015-09-30 21:58 - 2015-09-17 07:29 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll

2015-09-30 21:58 - 2015-09-17 07:29 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll

2015-09-30 21:58 - 2015-09-17 07:16 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll

2015-09-30 21:58 - 2015-09-13 03:41 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll

2015-09-30 21:57 - 2015-09-25 02:35 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll

2015-09-30 21:57 - 2015-09-25 02:34 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll

2015-09-30 21:57 - 2015-09-25 01:34 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll

2015-09-30 21:57 - 2015-09-25 01:34 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll

2015-09-30 21:57 - 2015-09-25 01:00 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll

2015-09-30 21:57 - 2015-09-25 00:24 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll

2015-09-30 21:57 - 2015-09-17 08:11 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll

2015-09-30 21:57 - 2015-09-17 08:10 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll

2015-09-30 21:57 - 2015-09-17 08:09 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll

2015-09-30 21:57 - 2015-09-17 08:03 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll

2015-09-30 21:57 - 2015-09-17 08:03 - 00154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe

2015-09-30 21:57 - 2015-09-17 08:02 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll

2015-09-30 21:57 - 2015-09-17 08:02 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll

2015-09-30 21:57 - 2015-09-17 07:56 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll

2015-09-30 21:57 - 2015-09-17 07:55 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll

2015-09-30 21:57 - 2015-09-17 07:55 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll

2015-09-30 21:57 - 2015-09-17 07:54 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2015-09-30 21:57 - 2015-09-17 07:52 - 01216512 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcenter.dll

2015-09-30 21:57 - 2015-09-17 07:52 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll

2015-09-30 21:57 - 2015-09-17 07:52 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll

2015-09-30 21:57 - 2015-09-17 07:51 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll

2015-09-30 21:57 - 2015-09-17 07:50 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeWiFi.dll

2015-09-30 21:57 - 2015-09-17 07:50 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeCell.dll

2015-09-30 21:57 - 2015-09-17 07:49 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2015-09-30 21:57 - 2015-09-17 07:49 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll

2015-09-30 21:57 - 2015-09-17 07:49 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationCrowdsource.dll

2015-09-30 21:57 - 2015-09-17 07:49 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationPeIP.dll

2015-09-30 21:57 - 2015-09-17 07:46 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\syncmlhook.dll

2015-09-30 21:57 - 2015-09-17 07:45 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll

2015-09-30 21:57 - 2015-09-17 07:43 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll

2015-09-30 21:57 - 2015-09-17 07:39 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2015-09-30 21:57 - 2015-09-17 07:36 - 01171456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcenter.dll

2015-09-30 21:57 - 2015-09-17 07:33 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll

2015-09-30 21:57 - 2015-09-17 07:28 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll

2015-09-30 21:26 - 2015-09-30 21:25 - 00014080 _____ (Microsoft) C:\Users\Birk\AppData\Roaming\LaunchBrowser_ed.exe

2015-09-29 22:07 - 2015-10-06 17:15 - 00030639 _____ C:\WINDOWS\avmfwlanci.log

2015-09-28 20:52 - 2015-10-06 12:37 - 00048512 _____ C:\Users\Birk\Downloads\Addition.txt

2015-09-28 20:49 - 2015-10-06 17:31 - 00015630 _____ C:\Users\Birk\Downloads\FRST.txt

2015-09-28 20:49 - 2015-10-06 17:31 - 00000000 ___DC C:\FRST

2015-09-28 20:48 - 2015-09-28 20:49 - 02192384 _____ (Farbar) C:\Users\Birk\Downloads\FRST64.exe

2015-09-28 14:44 - 2015-09-28 14:44 - 00000000 ____D C:\Users\Birk\AppData\Local\ftblauncher

2015-09-28 11:41 - 2015-09-28 11:42 - 00912631 _____ C:\Users\Birk\Downloads\adblock_plus-2.6.10-an_sm_tb_fx.zip

2015-09-27 20:10 - 2015-09-27 20:10 - 00003276 _____ C:\WINDOWS\System32\Tasks\{19C21EC3-9429-4740-B815-79D2CC43123D}

2015-09-27 20:08 - 2015-09-27 20:08 - 00003388 _____ C:\WINDOWS\System32\Tasks\{F48EBD7B-8933-4080-9A67-B798F4097A09}

2015-09-27 20:04 - 2015-09-27 20:04 - 00003226 _____ C:\WINDOWS\System32\Tasks\{1691C428-799A-44EC-A3FA-5CF375BAD376}

2015-09-27 19:56 - 2015-09-27 21:07 - 00000000 ____D C:\Program Files (x86)\Feed Notifier

2015-09-27 16:01 - 2015-09-27 16:01 - 18819272 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe

2015-09-27 16:00 - 2015-09-27 16:00 - 00000000 ____D C:\Users\Birk\AppData\Local\Publishers

2015-09-22 22:06 - 2015-09-22 22:06 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

2015-09-21 09:18 - 2015-09-28 00:31 - 00000000 ____D C:\Users\Birk\Documents\My Games

2015-09-21 09:17 - 2015-09-21 09:23 - 00000000 ____D C:\Users\Birk\AppData\Local\Darksiders2

2015-09-21 09:17 - 2015-09-21 09:17 - 00000000 ____D C:\Users\Birk\AppData\Local\Steam

2015-09-21 09:17 - 2015-09-21 09:17 - 00000000 ____D C:\Users\Birk\AppData\Local\CEF

2015-09-20 22:30 - 2015-09-28 21:17 - 00000000 ____D C:\Users\Birk\AppData\Local\VirtualStore

2015-09-20 17:38 - 2015-09-20 17:38 - 00000000 ____D C:\Users\Birk\AppData\Local\gegl-0.2

2015-09-20 06:46 - 2015-09-20 06:46 - 00000017 _____ C:\Users\Birk\AppData\Local\resmon.resmoncfg

2015-09-20 01:38 - 2015-09-28 20:33 - 00000000 ____D C:\WINDOWS\system32\log

2015-09-20 00:55 - 2015-09-20 00:55 - 00000000 ____D C:\Program Files (x86)\LucasArts

2015-09-20 00:36 - 2015-10-01 11:44 - 00000000 ____D C:\Users\Birk\AppData\Local\Adobe

2015-09-20 00:30 - 2015-09-25 15:15 - 00000000 ____D C:\Users\Birk\AppData\Roaming\Kalypso Media

2015-09-19 21:32 - 2015-09-19 21:24 - 00041784 ____N (Beijing Rising Information Technology Co., Ltd.) C:\WINDOWS\system32\Drivers\hvm.sys

2015-09-19 21:32 - 2015-09-19 21:23 - 00119168 _____ (Beijing Rising Information Technology Co., Ltd.) C:\WINDOWS\system32\Drivers\sysmon.sys

2015-09-19 21:25 - 2015-09-19 21:25 - 00000000 ____D C:\Users\Birk\AppData\Local\NetworkTiles

2015-09-19 21:10 - 2015-10-05 18:42 - 00000000 ____D C:\ProgramData\clp

2015-09-19 21:05 - 2015-09-19 21:05 - 00000000 ____D C:\ProgramData\Common Toolkit Suite

2015-09-19 21:02 - 2015-09-19 21:02 - 02381192 _____ (SPAMfighter ApS) C:\Users\Birk\Downloads\spywarefighter.exe

2015-09-19 19:16 - 2015-09-19 19:28 - 00000000 __RDC C:\RavBin

2015-09-19 19:16 - 2015-09-19 19:16 - 00003504 _____ C:\WINDOWS\System32\Tasks\RsDelayLauncher_{8A34248E-7D35-4832-8378-7659E0B0A380}

2015-09-19 19:16 - 2015-09-19 19:16 - 00000150 _RSHC C:\rising.ini

2015-09-19 19:16 - 2015-04-09 07:00 - 00071760 ____N (Beijing Rising Information Technology Co., Ltd.) C:\WINDOWS\system32\Drivers\rsutils.sys

2015-09-19 19:16 - 2014-07-30 04:44 - 00091928 ____N (Beijing Rising Information Technology Co., Ltd.) C:\WINDOWS\SysWOW64\vpatch.dll

2015-09-19 19:16 - 2014-01-02 09:37 - 00325400 ____N (Beijing Rising Information Technology Co., Ltd.) C:\WINDOWS\system32\ravext64.dll

2015-09-19 19:16 - 2013-12-30 09:33 - 00256280 ____N (Beijing Rising Information Technology Co., Ltd.) C:\WINDOWS\SysWOW64\ravext.dll

2015-09-19 19:16 - 2012-09-06 02:30 - 00240472 ____N (Beijing Rising Information Technology Co., Ltd.) C:\WINDOWS\SysWOW64\bsmain.exe

2015-09-19 19:16 - 2012-02-29 09:49 - 00011888 ____N (Beijing Rising Information Technology Co., Ltd.) C:\WINDOWS\system32\Drivers\rsndisp.sys

2015-09-19 18:41 - 2015-09-19 18:41 - 00000000 ____D C:\Users\Birk\AppData\Roaming\WB_CFG

2015-09-19 18:41 - 2015-09-19 18:41 - 00000000 _____ C:\ProgramData\inf.dat

2015-09-19 18:40 - 2015-10-06 17:30 - 00000462 _____ C:\WINDOWS\Tasks\Adobe Flash box Files Update Ver 2015919.job

2015-09-19 18:40 - 2015-09-20 06:46 - 00000000 ____D C:\ProgramData\4997GameBox_Data

2015-09-19 18:40 - 2015-09-19 18:41 - 00004824 _____ C:\WINDOWS\SysWOW64\Oatihpu.ini

2015-09-19 18:40 - 2015-09-19 18:41 - 00002536 _____ C:\WINDOWS\SysWOW64\OatihpuOff.ini

2015-09-19 18:40 - 2015-09-19 18:41 - 00002536 _____ C:\WINDOWS\system32\OatihpuOff.ini

2015-09-19 18:40 - 2015-09-19 18:40 - 00003614 _____ C:\WINDOWS\System32\Tasks\Adobe Flash box Files Update Ver 2015919

2015-09-19 18:40 - 2015-09-19 18:40 - 00000000 ____D C:\WINDOWS\system32\pap

2015-09-19 18:40 - 2015-09-19 18:40 - 00000000 ____D C:\Users\Birk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\7k7k游戏盒子(919)

2015-09-19 18:40 - 2015-09-19 18:40 - 00000000 ____D C:\Users\Birk\AppData\Local\Tempfolder

2015-09-19 18:40 - 2015-09-19 18:40 - 00000000 ____D C:\ProgramData\adb

2015-09-19 18:39 - 2015-09-19 19:03 - 00000000 ____D C:\Users\Birk\AppData\Local\Unity

2015-09-19 18:38 - 2015-09-19 18:38 - 00000000 ____D C:\Users\Birk\AppData\Local\Sony Corporation

2015-09-19 18:37 - 2015-10-06 17:07 - 00000000 ____D C:\Program Files (x86)\baidu

2015-09-19 18:34 - 2015-09-19 19:56 - 00000000 ____D C:\Users\Birk\AppData\Local\Mozilla

2015-09-19 18:34 - 2015-09-19 18:34 - 00000000 ____D C:\Users\Birk\AppData\Local\Macromedia

2015-09-19 18:33 - 2015-09-20 01:54 - 00000000 ____D C:\Users\Birk\AppData\Roaming\Common

2015-09-19 18:30 - 2015-09-28 11:35 - 00000004 _____ C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7

2015-09-19 02:20 - 2013-08-22 15:25 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak

2015-09-19 02:18 - 2015-09-19 02:18 - 00000000 ____D C:\Users\Birk\AppData\Local\Geckofx

2015-09-18 01:19 - 2015-09-19 19:01 - 00000000 ____D C:\ProgramData\Screentime

2015-09-17 13:21 - 2015-09-17 13:21 - 00186880 _____ (TODO: <Company name>) C:\WINDOWS\system32\rsrcs.dll

2015-09-09 18:14 - 2015-08-27 08:36 - 03620736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2015-09-09 18:14 - 2015-08-27 08:32 - 00608936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2015-09-09 18:14 - 2015-08-27 07:59 - 02880032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2015-09-09 18:14 - 2015-08-27 07:54 - 00541248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2015-09-09 18:14 - 2015-08-27 07:54 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll

2015-09-09 18:14 - 2015-08-27 07:51 - 02350592 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll

2015-09-09 18:14 - 2015-08-27 07:51 - 01774592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll

2015-09-09 18:14 - 2015-08-27 07:49 - 01008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll

2015-09-09 18:14 - 2015-08-27 07:47 - 12503552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2015-09-09 18:14 - 2015-08-27 07:43 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2015-09-09 18:14 - 2015-08-27 07:43 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2015-09-09 18:14 - 2015-08-27 07:42 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll

2015-09-09 18:14 - 2015-08-27 07:42 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.PicturePassword.dll

2015-09-09 18:14 - 2015-08-27 07:42 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll

2015-09-09 18:14 - 2015-08-27 07:39 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll

2015-09-09 18:14 - 2015-08-27 07:23 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll

2015-09-09 18:14 - 2015-08-27 07:16 - 02153472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll

2015-09-09 18:14 - 2015-08-27 07:16 - 01612288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll

2015-09-09 18:14 - 2015-08-27 07:12 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2015-09-09 18:14 - 2015-08-27 07:12 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2015-09-09 18:14 - 2015-08-27 07:11 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll

2015-09-09 18:14 - 2015-08-27 07:11 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll

2015-09-09 18:14 - 2015-08-27 07:09 - 11262464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2015-09-09 18:14 - 2015-08-27 07:08 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll

2015-09-08 18:37 - 2015-09-08 18:37 - 00000000 ____D C:\WINDOWS\SysWOW64\directx

2015-09-07 20:58 - 2015-09-14 20:58 - 00000000 ____D C:\WINDOWS\System32\Tasks\NCH Software

2015-09-07 20:58 - 2015-09-07 20:58 - 00001259 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoStage Diashow-Ersteller.lnk

2015-09-07 20:58 - 2015-09-07 20:58 - 00001229 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Audio-Editor.lnk

2015-09-07 20:58 - 2015-09-07 20:58 - 00001217 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prism Videodatei-Konverter.lnk

2015-09-07 20:58 - 2015-09-07 20:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Videoverwandte Programme

2015-09-07 20:57 - 2015-09-20 01:42 - 00000000 ____D C:\ProgramData\NCH Software

2015-09-07 20:57 - 2015-09-20 01:42 - 00000000 ____D C:\Program Files (x86)\NCH Software

2015-09-07 20:57 - 2015-09-08 20:31 - 00000000 ____D C:\Users\Birk\AppData\Roaming\NCH Software

2015-09-07 20:57 - 2015-09-07 20:57 - 00001245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoPad Video-Editor.lnk

2015-09-07 02:19 - 2015-09-07 02:19 - 00000939 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk

2015-09-07 02:18 - 2015-09-07 02:19 - 00000000 ____D C:\Program Files\GIMP 2

2015-09-07 01:22 - 2015-09-20 01:48 - 00000000 ____D C:\Users\Birk\.thumbnails

2015-09-07 01:16 - 2015-09-20 17:38 - 00000000 ____D C:\Users\Birk\.gimp-2.8

2015-09-07 01:08 - 2015-09-07 01:08 - 00000000 ____D C:\Users\Birk\AppData\Roaming\Avanquest Software

2015-09-06 21:02 - 2015-10-06 11:37 - 00000000 ____D C:\Program Files\OBS

2015-09-06 21:02 - 2015-10-06 11:37 - 00000000 ____D C:\Program Files (x86)\OBS
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-10-06 17:30 - 2014-02-23 13:35 - 00000000 ____D C:\Users\Birk\Desktop\Sonstiges

2015-10-06 17:23 - 2015-01-28 15:17 - 00004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{18F0F7A2-D14E-4364-A210-F284D1BA159C}

2015-10-06 17:12 - 2015-07-10 14:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2015-10-06 17:12 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sru

2015-10-06 17:11 - 2015-07-10 11:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI

2015-10-06 17:08 - 2015-07-10 18:35 - 00000000 ____D C:\WINDOWS\SKB

2015-10-06 15:58 - 2014-12-30 17:56 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-10-06 15:53 - 2014-12-04 20:16 - 00000000 ____D C:\Program Files (x86)\Steam

2015-10-06 12:28 - 2015-08-05 22:41 - 00000000 ____D C:\Users\Birk

2015-10-06 11:23 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\AppReadiness

2015-10-06 11:20 - 2015-08-05 22:58 - 01790124 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2015-10-06 11:20 - 2015-07-10 18:34 - 00772342 _____ C:\WINDOWS\system32\perfh007.dat

2015-10-06 11:20 - 2015-07-10 18:34 - 00154170 _____ C:\WINDOWS\system32\perfc007.dat

2015-10-05 18:41 - 2015-09-03 19:36 - 00000000 ____D C:\WINDOWS\Minidump

2015-10-05 16:20 - 2015-04-26 14:29 - 00000000 ____D C:\Users\Birk\AppData\Roaming\.minecraft

2015-10-04 15:53 - 2015-08-28 17:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2015-10-03 17:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\rescache

2015-10-03 13:37 - 2013-12-26 15:03 - 00000000 ___DC C:\Update

2015-10-03 13:28 - 2015-08-05 22:37 - 00000000 ____D C:\WINDOWS\SysWOW64\sda

2015-10-03 13:28 - 2015-06-04 06:05 - 00384760 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsPStor.sys

2015-10-03 13:28 - 2015-06-04 06:05 - 00100600 _____ (Realtek Semiconductor.) C:\WINDOWS\system32\RtCRX64.dll

2015-10-03 13:22 - 2014-04-16 10:22 - 00000000 ___DC C:\AdwCleaner

2015-10-03 13:02 - 2015-08-05 22:41 - 00000000 ___RD C:\Users\Birk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2015-10-01 17:57 - 2015-07-10 11:05 - 00000000 __RHD C:\Users\Default

2015-10-01 17:53 - 2015-07-10 13:04 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12

2015-10-01 17:53 - 2015-07-10 13:04 - 00000000 ___SD C:\WINDOWS\system32\F12

2015-10-01 17:53 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\PurchaseDialog

2015-10-01 17:53 - 2015-07-10 13:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility

2015-10-01 17:53 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2015-10-01 17:53 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform

2015-10-01 17:53 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\appraiser

2015-10-01 17:53 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Provisioning

2015-10-01 17:52 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\L2Schemas

2015-10-01 15:23 - 2015-07-10 12:55 - 00000000 ____D C:\WINDOWS\CbsTemp

2015-09-27 21:36 - 2015-01-12 17:06 - 00000000 ____D C:\Program Files\CCleaner

2015-09-27 20:06 - 2014-12-04 19:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2015-09-27 20:00 - 2013-09-03 01:59 - 00000000 ____D C:\Program Files (x86)\Adobe

2015-09-24 23:32 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\NDF

2015-09-22 08:38 - 2015-05-22 15:18 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2

2015-09-20 01:59 - 2013-09-03 01:46 - 00000000 ____D C:\Program Files (x86)\Sony

2015-09-20 01:59 - 2013-09-03 01:42 - 00000000 ____D C:\ProgramData\Sony Corporation

2015-09-20 01:59 - 2013-09-03 01:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2015-09-19 19:37 - 2014-12-03 18:57 - 00000000 ____D C:\Users\Birk\AppData\Local\Packages

2015-09-19 18:49 - 2015-07-18 10:19 - 00000085 _____ C:\WINDOWS\wininit.ini

2015-09-19 18:49 - 2015-05-22 15:18 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2015-09-19 18:40 - 2015-07-10 13:00 - 00680256 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll

2015-09-19 18:40 - 2015-07-10 13:00 - 00534064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll

2015-09-19 00:52 - 2015-02-16 17:06 - 00000000 ____D C:\Program Files (x86)\Minecraft

2015-09-19 00:48 - 2015-08-05 23:22 - 00000000 ___RD C:\Users\Birk\OneDrive

2015-09-13 22:04 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\FxsTmp

2015-09-12 18:56 - 2015-07-20 20:20 - 00000000 ____D C:\Users\Birk\AppData\Roaming\.technic

2015-09-10 01:32 - 2015-07-10 18:46 - 00000000 ____D C:\Program Files\Windows Journal

2015-09-09 18:28 - 2014-12-06 01:08 - 00000000 ____D C:\WINDOWS\system32\MRT

2015-09-08 21:01 - 2015-08-05 23:25 - 00000000 ___DC C:\Windows.old

2015-09-08 18:37 - 2015-02-28 22:56 - 00000000 ___HD C:\WINDOWS\msdownld.tmp
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2015-09-30 21:26 - 2015-09-30 21:26 - 0032038 _____ () C:\Users\Birk\AppData\Roaming\Edge.ico

2015-09-30 21:26 - 2015-09-30 21:25 - 0014080 _____ (Microsoft) C:\Users\Birk\AppData\Roaming\LaunchBrowser_ed.exe

2015-09-30 21:26 - 2015-09-30 21:25 - 0000182 _____ () C:\Users\Birk\AppData\Roaming\LaunchBrowser_ed.exe.config

2015-09-20 06:46 - 2015-09-20 06:46 - 0000017 _____ () C:\Users\Birk\AppData\Local\resmon.resmoncfg

2015-08-05 22:37 - 2015-08-05 22:37 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

2015-09-19 18:41 - 2015-09-19 18:41 - 0000000 _____ () C:\ProgramData\inf.dat
 

Dateien, die verschoben oder gelöscht werden sollten:

====================

C:\ProgramData\inf.dat
 
 

Einige Dateien in TEMP:

====================

C:\Users\Birk\AppData\Local\Temp\beeddejbeh.exe

C:\Users\Birk\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll

[2015-07-10 13:00] - [2015-09-19 18:40] - 0680256 ____A (Microsoft Corporation) 254A5B8551F4286937FAD84D2228BE37
 

C:\WINDOWS\SysWOW64\dnsapi.dll

[2015-07-10 13:00] - [2015-09-19 18:40] - 0534064 ____A (Microsoft Corporation) 7DCF6205A5CED02045FB7AA924EB0C7D
 

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-10-03 13:28
 

==================== Ende von FRST.txt ============================

Hey,

es ist derzeit irgendwie nicht möglich den AdwCleaner zu downloaden; weder auf chip.de , noch auf "eurer" Seite. Immer wenn der Download startet, endet er mit "Fehlgeschlagen".