Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Keylogger / Hacker auf meinem Rechner ? (https://www.trojaner-board.de/172695-keylogger-hacker-meinem-rechner.html)

icrowz 03.11.2015 22:27
Keylogger / Hacker auf meinem Rechner ?
 
Hey Trojaner-Board Community !
Gibt es eine Möglichkeit, das ein Hacker über Masnahmen gegen ihn bescheid weiß ?
Nehmen mir an ein Hacker ist auf meinem PC und ich bekomme Hilfe von diesem Forum.. kann er sich dagegen wehren ?

Denn ich hatte hier bereits Hilfe von cosinus bekommen, bezüglich eines Hackers auf meinem PC.
Laut den Files war ja alles sicher, doch heute hat soebend jemand auf meinem Freund seinem Facebook Profil einen Chronik Post hinterlassen, indem sowas wie eine "Selbstmord"Nachricht steht und dann im Binde strich mein realer Name (Also quasi "..... - Mustername".
Ich war der einzige dem er seine Email, die auf diesen Facebook Account verknüpft war anvertraut hatte, dazu wohnt er nicht in meiner Nähe das heißt niemand von seiner Seite aus kennt mich.
Meine Befürchtung ist das ein Hacker immernoch auf meinem Rechner hockt und die Email ausnutzte.

Hab soebend mal ein Scan mit Anti Malwarebytes durchgeführt und folgende Malware wurde gefunden :
RiskWare.Injector.DC
Es läuft nebenbei noch ein Scan mit Microsoft Security Essentials.. werde dies hier editieren falls dieser auch fand.

Microsoft Security Essentials hat keine Bedrohungen gefunden.
LOGFILE VON MBAM =
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 03.11.2015
Suchlaufzeit: 17:53
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.2.0.1024
Malware-Datenbank: v2015.11.03.06
Rootkit-Datenbank: v2015.10.28.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Jurij

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 370116
Abgelaufene Zeit: 2 Std., 18 Min., 49 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 147
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ar, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\bg, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ca, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\cs, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\da, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\de, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\el, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\en_GB, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\en_US, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\es, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\es_419, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\et, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fi, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fil, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fr, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\he, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\hi, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\hu, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\id, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\it, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ja, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ko, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\lt, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\lv, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ms, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\nl, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\no, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pl, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pt_BR, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pt_PT, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ro, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ru, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sk, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sl, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sr, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sv, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\th, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\tr, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\uk, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\vi, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\zh_CN, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\zh_TW, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_metadata, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ar, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\bg, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ca, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\cs, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\da, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\de, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\el, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\en_GB, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\en_US, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\es, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\es_419, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\et, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\eu, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\fi, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\fil, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\fr, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\he, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\hi, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\hr, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\hu, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\id, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\it, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ja, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ko, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\lt, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\lv, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ms, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\nl, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\no, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\pl, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\pt_BR, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\pt_PT, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ro, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ru, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\sk, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\sl, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\sr, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\sv, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\th, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\tr, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\uk, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\vi, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\zh_CN, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\zh_TW, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_metadata, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\audio, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\_metadata, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\_platform_specific, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\_platform_specific\x86-64_de, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\css, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\html, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\bg, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ca, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\cs, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\da, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\de, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\el, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\en, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\en_GB, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\es, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\es_419, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\et, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fi, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fil, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fr, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hi, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hr, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hu, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\id, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\it, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ja, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ko, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\lt, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\lv, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\nb, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\nl, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pl, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pt_BR, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pt_PT, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ro, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ru, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sk, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sl, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sr, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sv, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\th, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\tr, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\uk, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\vi, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\zh_CN, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\zh_TW, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_metadata, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],

Dateien: 167
RiskWare.Injector.DC, C:\$Recycle.Bin\S-1-5-21-3664667551-2409294277-1249802818-1002\$REOCD9R.rar, In Quarantäne, [7c266910117ad165eb37c7533fc22bd5],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\manifest.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\icon_128.png, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\icon_16.png, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\main.html, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\main.js, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ar\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\bg\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ca\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\cs\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\da\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\de\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\el\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\en_GB\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\en_US\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\es\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\es_419\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\et\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fi\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fil\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fr\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\he\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\hi\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\hu\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\id\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\it\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ja\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ko\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\lt\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\lv\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ms\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\nl\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\no\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pl\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pt_BR\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pt_PT\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ro\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ru\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sk\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sl\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sr\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sv\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\th\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\tr\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\uk\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\vi\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\zh_CN\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\zh_TW\messages.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_metadata\computed_hashes.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_metadata\verified_contents.json, In Quarantäne, [7032bbbeec9f88ae8343ce9c887c10f0],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\manifest.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\128.png, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ar\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\bg\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ca\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\cs\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\da\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\de\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\el\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\en_GB\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\en_US\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\es\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\es_419\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\et\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\eu\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\fi\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\fil\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\fr\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\he\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\hi\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\hr\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\hu\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\id\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\it\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ja\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ko\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\lt\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\lv\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ms\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\nl\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\no\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\pl\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\pt_BR\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\pt_PT\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ro\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\ru\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\sk\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\sl\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\sr\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\sv\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\th\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\tr\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\uk\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\vi\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\zh_CN\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_locales\zh_TW\messages.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\_metadata\verified_contents.json, In Quarantäne, [ecb6b8c169221c1a9c2a87e3c53fc63a],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\manifest.json, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_de.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_en-au.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_en-gb.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_es.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_fr.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_it.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_ja.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_ko.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_pt-br.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\hotword_ru.nmf, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\audio\chime.wav, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\_metadata\verified_contents.json, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\_platform_specific\x86-64_de\hotword-x86-64.nexe, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0\_platform_specific\x86-64_de\hotword.data, In Quarantäne, [a5fde693ef9cc07634923b2f22e2847c],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\manifest.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\craw_background.js, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\craw_window.js, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\css\craw_window.css, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\html\craw_window.html, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\flapper.gif, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\icon_128.png, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\icon_16.png, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button.png, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button_close.png, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button_hover.png, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button_maximize.png, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\images\topbar_floating_button_pressed.png, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\bg\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ca\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\cs\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\da\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\de\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\el\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\en\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\en_GB\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\es\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\es_419\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\et\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fi\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fil\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\fr\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hi\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hr\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\hu\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\id\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\it\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ja\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ko\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\lt\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\lv\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\nb\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\nl\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pl\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pt_BR\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\pt_PT\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ro\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\ru\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sk\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sl\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sr\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\sv\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\th\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\tr\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\uk\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\vi\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\zh_CN\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_locales\zh_TW\messages.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],
PUP.Optional.HijackModifiedExtension, C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\_metadata\verified_contents.json, In Quarantäne, [673b9cdde7a4e254804677f3887c21df],

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

schrauber 04.11.2015 07:44
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


icrowz 04.11.2015 13:27
Hi schrauber !
Hier die Logs (Musste 2x scannen da es sich beim 1x aufhing und nichtsmehr geschah)
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:31-10-2015
durchgeführt von Jurij (Administrator) auf JURIJ-PC (04-11-2015 13:20:35)
Gestartet von C:\Users\Jurij\Desktop
Geladene Profile: Jurij (Verfügbare Profile: Jurij)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\SysWOW64\ASGT.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Spotify Ltd) C:\Users\Jurij\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
() C:\Program Files (x86)\puush\puush.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\IskuFXMonitor.exe
() C:\Program Files (x86)\Drakonia Configurator\hid.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Comvigo, Inc.) C:\Windows\SysWOW64\qimlsrv.exe
() C:\Program Files (x86)\Drakonia Configurator\trayicon.exe
(Comvigo, Inc.) C:\Windows\SysWOW64\dsrviml.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Tweaking.com) C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\InGameEngine\32bit\RazerIngameEngine.exe
(Akamai Technologies, Inc.) C:\Users\Jurij\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Jurij\AppData\Local\Akamai\netsession_win.exe
(Razer, Inc.) C:\Users\Jurij\AppData\Local\Razer\InGameEngine\cache\RzStats.Manager\RzCefRenderProcess.exe
(Microsoft Corporation) C:\Windows\System32\WerFault.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2655520 2015-10-12] (NVIDIA Corporation)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin)
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [593216 2015-08-11] (Razer Inc.)
HKLM-x32\...\Run: [RoccatIskuFX] => C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\IskuFXMonitor.exe [540672 2013-10-30] (ROCCAT GmbH)
HKLM-x32\...\Run: [GamingMouse] => C:\Program Files (x86)\Drakonia Configurator\hid.exe [248832 2013-10-29] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5579624 2015-08-03] (LogMeIn Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Run: [Spotify Web Helper] => C:\Users\Jurij\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2030912 2015-10-16] (Spotify Ltd)
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2901584 2015-10-14] (Valve Corporation)
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Run: [Google Update] => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-27] (Google Inc.)
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Run: [Akamai NetSession Interface] => C:\Users\Jurij\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [568904 2015-03-30] ()
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [57987712 2015-09-27] (Skype Technologies S.A.)
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Run: [Spotify] => C:\Users\Jurij\AppData\Roaming\Spotify\Spotify.exe [7736128 2015-10-16] (Spotify Ltd)
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\MountPoints2: {f0d86f61-9947-11e2-bbee-806e6f6e6963} - D:\CheckID.exe
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\MountPoints2: {f90d2151-cf62-11e2-ad4b-50e549d5d956} - I:\pushinst.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\IML.lnk [2012-03-08]
ShortcutTarget: IML.lnk -> C:\Windows\System32\iml.vbs ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\IML64.lnk [2012-03-08]
ShortcutTarget: IML64.lnk -> C:\Windows\SysWOW64\iml.vbs ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{9106BDDB-C90E-4647-9C55-A5FBB5383351}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{E7CD1151-626B-4E98-A821-DAF3118EE00B}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.hyrican.de
HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de
SearchScopes: HKLM -> {75A5E870-8BBF-4E29-95B9-47CD95A69A57} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {75A5E870-8BBF-4E29-95B9-47CD95A69A57} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002 -> {75A5E870-8BBF-4E29-95B9-47CD95A69A57} URL =
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-21] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-21] (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] ()
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll [2013-04-03] (Adobe Systems, Inc.)
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-21] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2015-03-09] (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-10-03] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-10-03] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3664667551-2409294277-1249802818-1002: @talk.google.com/GoogleTalkPlugin -> C:\Users\Jurij\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-3664667551-2409294277-1249802818-1002: @talk.google.com/O1DPlugin -> C:\Users\Jurij\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-3664667551-2409294277-1249802818-1002: @tools.google.com/Google Update;version=3 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin HKU\S-1-5-21-3664667551-2409294277-1249802818-1002: @tools.google.com/Google Update;version=9 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Jurij\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Jurij\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)

Chrome:
=======
CHR Profile: C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-04]
CHR Extension: (Google-Suche) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-29]
CHR Extension: (Google Mail) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]
CHR Profile: C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Drive) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-26]
CHR Extension: (Adblock Plus) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-09-23]
CHR Extension: (Google-Suche) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Google Text & Tabellen Offline) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-04]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-25]
CHR Extension: (Google Mail) - C:\Users\Jurij\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-13]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [Datei ist nicht signiert]
R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [Datei ist nicht signiert]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1225216 2015-10-02] ()
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156384 2015-10-12] (NVIDIA Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-08-03] (LogMeIn, Inc.)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1873696 2015-10-12] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5568288 2015-10-12] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-07-25] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-07-06] ()
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187048 2015-06-23] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 Realtek11nSU; C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW76.sys [96768 2013-02-14] (Advanced Micro Devices) [Datei ist nicht signiert]
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-04] (AVM Berlin)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 fwlanusb4; C:\Windows\System32\DRIVERS\fwlanusb4.sys [1293824 2010-10-04] (AVM GmbH)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [24496 2011-12-19] (Intel Corporation)
S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [637360 2011-12-19] (Intel Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
S3 NVFLASH; C:\Windows\system32\drivers\nvflash.sys [15648 2014-01-06] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20768 2015-10-12] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
S3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [32768 2014-06-09] (Windows (R) Win 7 DDK provider)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-06-12] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129472 2015-06-27] (Razer, Inc.)
S3 RZSURROUNDVADService; C:\Windows\System32\drivers\RzSurroundVAD.sys [40640 2015-07-29] (Windows (R) Win 7 DDK provider)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-08-15] (Apple, Inc.) [Datei ist nicht signiert]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 RTL8192cu; system32\DRIVERS\RTL8192cu.sys [X]
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-11-04 13:19 - 2015-11-04 13:21 - 00021151 _____ C:\Users\Jurij\Desktop\FRST.txt
2015-11-04 13:18 - 2015-11-04 13:18 - 02198016 _____ (Farbar) C:\Users\Jurij\Downloads\FRST64.exe
2015-11-04 13:18 - 2015-11-04 13:18 - 02198016 _____ (Farbar) C:\Users\Jurij\Desktop\FRST64.exe
2015-11-03 17:52 - 2015-11-03 22:25 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-11-03 17:52 - 2015-11-03 17:52 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-11-03 17:52 - 2015-11-03 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-11-03 17:52 - 2015-11-03 17:52 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-11-03 17:52 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-11-03 17:52 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-11-03 17:52 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-11-03 15:45 - 2015-11-03 15:46 - 22908888 _____ (Malwarebytes ) C:\Users\Jurij\Downloads\mbam-setup-2.2.0.1024.exe
2015-11-03 15:45 - 2015-11-03 15:45 - 00000000 ____D C:\Users\Jurij\AppData\Local\niemiro
2015-11-03 12:32 - 2015-11-03 12:32 - 02546102 _____ C:\Users\Jurij\Downloads\CrystalDiskInfo6_1_12.zip
2015-10-27 12:23 - 2015-10-27 12:24 - 00000000 ____D C:\Users\Jurij\AppData\Roaming\Infamous GTAV Menu
2015-10-27 12:21 - 2015-10-27 12:21 - 01198013 _____ C:\Users\Jurij\Downloads\Infamous_mpgh.net.rar
2015-10-20 13:18 - 2015-10-20 13:18 - 00000000 _____ C:\Users\Jurij\Desktop\Neues Textdokument.txt
2015-10-15 17:34 - 2015-09-18 20:22 - 00025432 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-10-15 17:34 - 2015-09-18 20:19 - 01291264 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-10-15 17:34 - 2015-09-18 20:19 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-10-15 17:34 - 2015-09-18 20:19 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-10-15 17:34 - 2015-09-18 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-10-15 17:34 - 2015-09-18 20:19 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-10-15 17:34 - 2015-09-18 20:09 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-10-14 12:50 - 2015-08-06 19:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-10-14 12:50 - 2015-08-06 19:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-10-14 12:50 - 2015-08-06 18:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-10-14 12:50 - 2015-08-06 18:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2015-10-14 12:49 - 2015-09-18 20:31 - 00391784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-10-14 12:49 - 2015-09-18 19:58 - 00345688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-10-14 12:49 - 2015-09-16 05:48 - 25851904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-10-14 12:49 - 2015-09-16 05:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-10-14 12:49 - 2015-09-16 05:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-10-14 12:49 - 2015-09-16 05:22 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-10-14 12:49 - 2015-09-16 05:21 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-10-14 12:49 - 2015-09-16 05:21 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-10-14 12:49 - 2015-09-16 05:21 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-10-14 12:49 - 2015-09-16 05:21 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-10-14 12:49 - 2015-09-16 05:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-10-14 12:49 - 2015-09-16 05:14 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-10-14 12:49 - 2015-09-16 05:13 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-10-14 12:49 - 2015-09-16 05:10 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-10-14 12:49 - 2015-09-16 05:09 - 05990912 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-10-14 12:49 - 2015-09-16 05:08 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-10-14 12:49 - 2015-09-16 05:08 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-10-14 12:49 - 2015-09-16 05:08 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-10-14 12:49 - 2015-09-16 05:08 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-10-14 12:49 - 2015-09-16 05:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-10-14 12:49 - 2015-09-16 04:58 - 20357632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-10-14 12:49 - 2015-09-16 04:58 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-10-14 12:49 - 2015-09-16 04:50 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-10-14 12:49 - 2015-09-16 04:46 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-10-14 12:49 - 2015-09-16 04:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-10-14 12:49 - 2015-09-16 04:45 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-10-14 12:49 - 2015-09-16 04:43 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-10-14 12:49 - 2015-09-16 04:41 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-10-14 12:49 - 2015-09-16 04:33 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-10-14 12:49 - 2015-09-16 04:33 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-10-14 12:49 - 2015-09-16 04:32 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-10-14 12:49 - 2015-09-16 04:32 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-10-14 12:49 - 2015-09-16 04:31 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-10-14 12:49 - 2015-09-16 04:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-10-14 12:49 - 2015-09-16 04:29 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-10-14 12:49 - 2015-09-16 04:29 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-10-14 12:49 - 2015-09-16 04:28 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-10-14 12:49 - 2015-09-16 04:28 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-10-14 12:49 - 2015-09-16 04:26 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-10-14 12:49 - 2015-09-16 04:26 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-10-14 12:49 - 2015-09-16 04:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-10-14 12:49 - 2015-09-16 04:24 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-10-14 12:49 - 2015-09-16 04:23 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-10-14 12:49 - 2015-09-16 04:22 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-10-14 12:49 - 2015-09-16 04:22 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-10-14 12:49 - 2015-09-16 04:22 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-10-14 12:49 - 2015-09-16 04:15 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-10-14 12:49 - 2015-09-16 04:11 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-10-14 12:49 - 2015-09-16 04:10 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-10-14 12:49 - 2015-09-16 04:07 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-10-14 12:49 - 2015-09-16 04:06 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-10-14 12:49 - 2015-09-16 04:05 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-10-14 12:49 - 2015-09-16 04:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-10-14 12:49 - 2015-09-16 04:04 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-10-14 12:49 - 2015-09-16 03:59 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-10-14 12:49 - 2015-09-16 03:58 - 12853760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-10-14 12:49 - 2015-09-16 03:58 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-10-14 12:49 - 2015-09-16 03:56 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-10-14 12:49 - 2015-09-16 03:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-10-14 12:49 - 2015-09-16 03:55 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-10-14 12:49 - 2015-09-16 03:48 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-10-14 12:49 - 2015-09-16 03:37 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-10-14 12:49 - 2015-09-16 03:34 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-10-14 12:49 - 2015-09-16 03:32 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-10-14 12:47 - 2015-09-29 04:16 - 05569472 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-10-14 12:47 - 2015-09-29 04:13 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-10-14 12:47 - 2015-09-29 04:11 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-10-14 12:47 - 2015-09-29 04:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-10-14 12:47 - 2015-09-29 04:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-10-14 12:47 - 2015-09-29 04:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-10-14 12:47 - 2015-09-29 04:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-10-14 12:47 - 2015-09-29 04:11 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-10-14 12:47 - 2015-09-29 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-10-14 12:47 - 2015-09-29 04:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-10-14 12:47 - 2015-09-29 04:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-10-14 12:47 - 2015-09-29 04:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-10-14 12:47 - 2015-09-29 04:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-10-14 12:47 - 2015-09-29 04:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-10-14 12:47 - 2015-09-29 04:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-10-14 12:47 - 2015-09-29 04:05 - 03990976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-10-14 12:47 - 2015-09-29 04:05 - 03936192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-10-14 12:47 - 2015-09-29 04:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-10-14 12:47 - 2015-09-29 04:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-10-14 12:47 - 2015-09-29 04:02 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:59 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-10-14 12:47 - 2015-09-29 03:59 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-10-14 12:47 - 2015-09-29 03:59 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-10-14 12:47 - 2015-09-29 03:59 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-10-14 12:47 - 2015-09-29 03:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-10-14 12:47 - 2015-09-29 03:59 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-10-14 12:47 - 2015-09-29 03:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-10-14 12:47 - 2015-09-29 03:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-10-14 12:47 - 2015-09-29 03:58 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-10-14 12:47 - 2015-09-29 03:58 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-10-14 12:47 - 2015-09-29 03:57 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-10-14 12:47 - 2015-09-29 03:57 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-10-14 12:47 - 2015-09-29 03:57 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-10-14 12:47 - 2015-09-29 03:57 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-10-14 12:47 - 2015-09-29 03:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-10-14 12:47 - 2015-09-29 03:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 02:50 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-10-14 12:47 - 2015-09-29 02:49 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-10-14 12:47 - 2015-09-29 02:49 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-10-14 12:47 - 2015-09-29 02:43 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-10-14 12:47 - 2015-09-29 02:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-10-14 12:47 - 2015-09-29 02:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 02:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 02:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-10-14 12:47 - 2015-09-29 02:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-10-14 12:47 - 2015-09-25 19:07 - 03168768 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-10-14 12:47 - 2015-09-25 19:07 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-10-14 12:47 - 2015-09-25 19:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-10-14 12:47 - 2015-09-25 19:07 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-10-14 12:47 - 2015-09-25 19:07 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-10-14 12:47 - 2015-09-25 19:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-10-14 12:47 - 2015-09-25 19:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-10-14 12:47 - 2015-09-25 19:06 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-10-14 12:47 - 2015-09-25 19:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-10-14 12:47 - 2015-09-25 19:06 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-10-14 12:47 - 2015-09-25 19:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-10-14 12:47 - 2015-09-25 18:59 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-10-14 12:47 - 2015-09-25 18:59 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-10-14 12:47 - 2015-09-25 18:59 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-10-14 12:47 - 2015-09-25 18:59 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-10-14 12:47 - 2015-09-25 18:58 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-10-14 12:47 - 2015-09-15 19:17 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-10-14 12:47 - 2015-09-15 19:17 - 00097112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-10-14 12:47 - 2015-09-15 19:11 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-10-14 12:47 - 2015-09-15 19:11 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-10-14 12:47 - 2015-09-15 19:11 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-10-14 12:47 - 2015-09-15 19:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-10-14 12:47 - 2015-09-15 19:11 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-10-14 12:47 - 2015-09-15 19:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-10-14 12:47 - 2015-09-15 19:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-10-14 12:47 - 2015-09-15 18:36 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-10-14 12:47 - 2015-09-15 18:36 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-10-14 12:47 - 2015-09-15 18:36 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-10-14 12:47 - 2015-09-15 18:35 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-10-14 12:46 - 2015-10-01 19:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-10-14 12:46 - 2015-10-01 19:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-10-14 12:46 - 2015-10-01 19:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-10-14 12:46 - 2015-10-01 19:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-10-14 12:46 - 2015-10-01 19:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-10-14 12:46 - 2015-10-01 19:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-10-14 12:46 - 2015-10-01 19:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-10-14 12:46 - 2015-10-01 18:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-10-14 12:46 - 2015-10-01 18:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-10-14 12:45 - 2015-07-18 14:08 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2015-10-14 12:45 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2015-10-10 09:33 - 2015-10-03 03:18 - 00102520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-10-10 09:31 - 2015-10-03 06:06 - 42914096 _____ C:\Windows\system32\nvcompiler.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 37882488 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 22306936 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 18359928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 17395512 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 16541040 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 15716648 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 15002304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 14832968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 13518496 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 12032200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 11114616 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-10-10 09:31 - 2015-10-03 06:06 - 02869880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 02489976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 01905456 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435850.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 01564976 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435850.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00877176 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00861816 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00689456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00673912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00512720 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00467912 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00422240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00414000 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00388024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00369272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00177416 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00155976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-10-10 09:31 - 2015-10-03 06:06 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-10-09 18:59 - 2015-11-03 17:52 - 00000080 _____ C:\Users\Jurij\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-11-04 13:21 - 2013-03-30 15:47 - 01940252 _____ C:\Windows\WindowsUpdate.log
2015-11-04 13:20 - 2015-09-14 15:23 - 00000000 ____D C:\FRST
2015-11-04 13:18 - 2014-01-02 02:02 - 00000000 ____D C:\Users\Jurij\AppData\Local\Akamai
2015-11-04 13:17 - 2013-03-30 16:23 - 00000000 ____D C:\Users\Jurij\AppData\Roaming\Skype
2015-11-04 13:16 - 2014-04-13 18:09 - 00000000 ____D C:\Users\Jurij\AppData\Local\LogMeIn Hamachi
2015-11-04 13:16 - 2013-10-19 18:32 - 00000000 ____D C:\Users\Jurij\AppData\Roaming\Spotify
2015-11-04 13:15 - 2013-10-19 18:35 - 00000000 ____D C:\Users\Jurij\AppData\Local\Spotify
2015-11-04 13:14 - 2015-09-15 20:04 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0efe94f5fadaf.job
2015-11-04 13:14 - 2013-03-30 16:22 - 00000000 ____D C:\Program Files (x86)\Steam
2015-11-04 13:14 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-04 13:13 - 2013-12-29 13:42 - 00000000 ____D C:\ProgramData\NVIDIA
2015-11-04 13:13 - 2010-11-21 04:47 - 01011252 _____ C:\Windows\PFRO.log
2015-11-04 13:13 - 2009-07-14 05:51 - 00026264 _____ C:\Windows\setupact.log
2015-11-03 22:09 - 2015-09-15 20:04 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0efe9503e2a11.job
2015-11-03 21:58 - 2015-09-14 19:53 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002UA1d0ef1e9cc6df2e.job
2015-11-03 21:25 - 2013-03-31 15:38 - 00000000 ____D C:\Users\Jurij\AppData\Roaming\TS3Client
2015-11-03 20:58 - 2015-09-14 19:53 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002Core1d0ef1e9c219c12.job
2015-11-03 12:53 - 2013-04-07 16:54 - 00000000 ____D C:\Users\Jurij\Desktop\Bilder
2015-11-03 12:53 - 2011-04-12 08:43 - 00645116 _____ C:\Windows\system32\perfh007.dat
2015-11-03 12:53 - 2011-04-12 08:43 - 00130686 _____ C:\Windows\system32\perfc007.dat
2015-11-03 12:53 - 2009-07-14 06:13 - 01516610 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-03 10:50 - 2009-07-14 05:45 - 00024400 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-03 10:50 - 2009-07-14 05:45 - 00024400 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-03 10:34 - 2013-03-30 15:56 - 00000000 ____D C:\Users\Jurij
2015-11-03 10:33 - 2015-04-04 16:25 - 00000000 ___SD C:\Windows\system32\GWX
2015-11-03 10:33 - 2014-10-05 17:19 - 00000000 ____D C:\Users\Jurij\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-11-03 10:33 - 2014-01-27 15:17 - 00000000 ____D C:\Users\Jurij\AppData\Roaming\puush
2015-11-03 10:33 - 2013-11-03 10:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-11-03 10:33 - 2011-04-12 08:54 - 00000000 ___RD C:\Users\Public\Recorded TV
2015-11-03 10:33 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2015-11-01 17:50 - 2015-07-03 15:48 - 00000948 _____ C:\Users\Jurij\Desktop\Accs.txt
2015-10-26 15:53 - 2013-04-04 14:51 - 00000000 ____D C:\Users\Jurij\AppData\Local\CrashDumps
2015-10-24 09:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2015-10-23 09:46 - 2015-07-23 15:44 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2015-10-21 20:58 - 2013-11-13 14:29 - 01464566 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2015-10-21 16:40 - 2015-07-06 13:38 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2015-10-21 16:40 - 2015-07-06 13:36 - 00000000 ____D C:\Program Files\Rockstar Games
2015-10-21 10:12 - 2013-10-21 10:39 - 00000000 ____D C:\ProgramData\Oracle
2015-10-21 09:44 - 2014-04-19 16:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-10-21 09:43 - 2015-08-27 12:28 - 00000000 ____D C:\Users\Jurij\.oracle_jre_usage
2015-10-21 09:43 - 2015-05-20 16:06 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-10-21 09:42 - 2015-05-20 16:06 - 00000000 ____D C:\Program Files (x86)\Java
2015-10-20 15:48 - 2015-09-13 16:46 - 00000000 ____D C:\AdwCleaner
2015-10-19 15:43 - 2015-01-02 16:23 - 00000000 ____D C:\Users\Jurij\AppData\Roaming\.minecraft
2015-10-18 14:50 - 2015-07-15 20:44 - 00000169 _____ C:\Users\Jurij\Documents\ClownfishForTeamspeak.ini
2015-10-15 19:53 - 2014-12-11 13:29 - 00000000 ____D C:\Windows\system32\appraiser
2015-10-15 19:53 - 2014-05-06 19:29 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-10-12 04:05 - 2014-06-03 15:46 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-10-12 04:05 - 2013-12-28 15:56 - 01423304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-10-12 04:04 - 2014-06-03 15:46 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-10-12 04:04 - 2013-12-28 15:56 - 01710752 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-10-10 09:34 - 2013-12-28 15:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-10-10 09:34 - 2013-12-28 15:36 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-10-09 14:36 - 2013-03-30 16:23 - 00000000 ____D C:\ProgramData\Skype
2015-10-08 19:39 - 2015-04-04 16:25 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-10-08 16:13 - 2015-02-19 13:26 - 00000000 ____D C:\Users\Jurij\AppData\Local\Steam
2015-10-07 14:28 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-01-24 19:34 - 2015-01-24 19:34 - 0000096 _____ () C:\Users\Jurij\AppData\Roaming\version2.xml
2015-08-14 12:34 - 2015-08-14 12:34 - 0001464 _____ () C:\Users\Jurij\AppData\Local\recently-used.xbel
2014-10-31 20:03 - 2014-10-31 20:03 - 0000017 _____ () C:\Users\Jurij\AppData\Local\resmon.resmoncfg
2015-05-06 12:43 - 2015-05-06 12:44 - 0000800 _____ () C:\Users\Jurij\AppData\Local\Temp-log.txt
2011-05-22 14:09 - 2011-05-22 14:09 - 0019624 _____ () C:\ProgramData\iml.xml

Einige Dateien in TEMP:
====================
C:\Users\Jurij\AppData\Local\Temp\jre-8u65-windows-au.exe
C:\Users\Jurij\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Jurij\AppData\Local\Temp\nvStInst.exe
C:\Users\Jurij\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-11-02 15:39

==================== Ende von FRST.txt ============================

icrowz 04.11.2015 13:28
Addition
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:31-10-2015
durchgeführt von Jurij (2015-11-04 13:22:16)
Gestartet von C:\Users\Jurij\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2013-03-30 14:56:38)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3664667551-2409294277-1249802818-500 - Administrator - Disabled)
Gast (S-1-5-21-3664667551-2409294277-1249802818-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3664667551-2409294277-1249802818-1008 - Limited - Enabled)
Jurij (S-1-5-21-3664667551-2409294277-1249802818-1002 - Administrator - Enabled) => C:\Users\Jurij

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.83 - Adobe Systems Incorporated)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.2.122 - Adobe Systems, Inc.)
Akamai NetSession Interface (HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Akamai) (Version:  - Akamai Technologies, Inc)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.6.8.3 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.6.8.3 - ASUSTek COMPUTER INC.) Hidden
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version:  - AVM Berlin)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
CrystalDiskInfo 6.5.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.5.2 - Crystal Dew World)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
Drakonia Black (HKLM-x32\...\{2EAD3327-2F92-455F-A675-E5CC4980B67A}}_is1) (Version:  - )
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
GIMP 2.8.4 (HKLM\...\GIMP-2_is1) (Version: 2.8.4 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
GPUTweakStreaming (HKLM-x32\...\InstallShield_{D2A41AA7-4313-43D5-AA39-7E3FBBE0556D}) (Version: 1.0.3.5 - ASUS)
GPUTweakStreaming (x32 Version: 1.0.3.5 - ASUS) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version:  - Rockstar North)
IM Lock (HKLM-x32\...\IMLock) (Version:  - Comvigo, Inc.)
Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.383 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.383 - LogMeIn, Inc.) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 358.50 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.5.15.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.15.54 - NVIDIA Corporation)
NVIDIA Grafiktreiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.50 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA nView 136.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 136.53 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.5.20.5318 - Electronic Arts, Inc.)
paint.net (HKLM\...\{DF3A46D9-67B3-44B2-9D01-25C8BA772C8A}) (Version: 4.0.6 - dotPDN LLC)
Pixlr-o-matic (HKLM-x32\...\Pixlromatic) (Version: 2.1 - UNKNOWN)
Pixlr-o-matic (x32 Version: 2.1 - UNKNOWN) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.27405 - Razer Inc.)
ROCCAT Isku FX Keyboard Driver (HKLM-x32\...\{DC69933C-E7B0-455D-8E54-FAC1EEF046FF}) (Version:  - Roccat GmbH)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.8 - Rockstar Games)
SHIELD Streaming (Version: 4.1.500 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.15.54 - NVIDIA Corporation) Hidden
Skype™ 7.12 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.12.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\...\Spotify) (Version: 1.0.16.104.g3b776c9e - Spotify AB)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab (HKLM-x32\...\{0F659036-14C7-4622-9505-35A0DC93526A}) (Version: 6.1.3.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36897 - TeamViewer)
Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)
Tweaking.com - Windows Repair (HKLM-x32\...\Tweaking.com - Windows Repair) (Version: 3.5.0 - Tweaking.com)
Unturned (HKLM-x32\...\Steam App 304930) (Version:  - Nelson Sexton)
VPNAutoconnect (HKLM-x32\...\{D0D7FF19-F218-4783-B79F-01CD1EF19900}) (Version: 1.13 - globalip)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Worms Revolution (HKLM-x32\...\Steam App 200170) (Version:  - Team17 Digital Ltd.)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3664667551-2409294277-1249802818-1002_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Jurij\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => Keine Datei

==================== Wiederherstellungspunkte =========================

25-10-2015 12:49:58 Windows Update
01-11-2015 11:28:04 Windows Update
02-11-2015 20:02:47 Steam wird entfernt
02-11-2015 20:03:40 Steam wird entfernt
03-11-2015 10:29:05 Wiederherstellungsvorgang
03-11-2015 10:46:08 Windows Update
03-11-2015 21:27:35 JRT Pre-Junkware Removal

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2015-09-13 20:47 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1      localhost

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {11FFD156-2EE3-4DCC-ADFF-98D441BF269F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {16463BB4-D28B-4484-BBA6-EEAE23FC9B1B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {2127EFE1-23E7-4762-8DCF-D98075DDC605} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002Core1d0ef1e9c219c12 => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {2B373424-CA34-4B8C-8E10-AD8B09FE2B89} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002UA1d0ef1e9cc6df2e => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {3649336E-8152-42C7-A634-A8215271B19D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {43C7EA40-B179-4551-B1DB-A9B01C5F3E9C} - System32\Tasks\{A0DCBDCC-CAA7-4887-9272-AB1E7BDE046B} => pcalua.exe -a "C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\BEsetup\Setup_BattlEyeARMA2OA.exe" -d "C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\BEsetup"
Task: {4DE9AF9D-4B7E-40BB-B7EC-978FBEA258A0} - System32\Tasks\{DF2A0920-5625-4042-8956-BC43D1CA1DD4} => C:\Riot Games\League of Legends\lol.launcher.exe [2014-01-21] ()
Task: {568F9AFA-FBAE-4324-8A94-BC6086BA9E49} - System32\Tasks\GoogleUpdateTaskMachineUA1d0e1ace4cbd36f => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {58C05B7F-023D-400F-927C-89EB80E6E50E} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe [2015-03-12] (Tweaking.com)
Task: {6B8D57A3-CE09-440F-8753-6FECE4169244} - System32\Tasks\{ECEB1B52-2FAF-4205-9CB0-AF6A9EE23077} => pcalua.exe -a "C:\Program Files (x86)\Steam\steam.exe" -c steam://uninstall/42750
Task: {6E85957A-5BA3-4686-906C-0F2C9F9D3E89} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-15] (Adobe Systems Incorporated)
Task: {8940148E-E8BB-4AA6-8AD0-E931EFD67DC5} - System32\Tasks\{99B73145-1ADA-4E9B-A9A1-C539C7E93135} => pcalua.exe -a "D:\C-Media 8738\setup.exe" -d "D:\C-Media 8738"
Task: {8ACD8B4C-6304-40A1-B642-84AA7D4E3BC8} - System32\Tasks\GoogleUpdateTaskMachineUA1d0efe9503e2a11 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {8B5ECB26-B9F5-415B-BB86-5A32C3F0E004} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002Core => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {982E0444-0C37-4651-8C0C-4C28B7DE42CE} - System32\Tasks\{5072EFEC-2C38-4B0B-99F5-B6D36CA91D5C} => pcalua.exe -a "C:\Program Files (x86)\Steam\SteamApps\common\Arma 2\BEsetup\setup_BattlEyeARMA2.exe" -d "C:\Program Files (x86)\Steam\SteamApps\common\Arma 2\BEsetup"
Task: {9B609740-21E9-4D9F-B2CD-8D53C2D73C3A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002UA => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {A9827B2D-BDA2-4955-88AC-8874AF828ED7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {B6830BC3-5F57-4A39-B066-A50F979DCDF4} - System32\Tasks\{15F2937B-77D6-41CD-B182-4EEA27F80DA1} => Chrome.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?source=lightinstaller&page=tsInstall
Task: {CCA18C70-0B14-4911-8CE6-4CEC08EF9DF5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002UA1d0e0fc50430e90 => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {DD23C88E-38CD-4596-A453-324E477AA93E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002Core1d0e0fc4f448696 => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {E4FFE34E-EBF0-4B4B-A3F4-DEE0639F43D0} - System32\Tasks\GoogleUpdateTaskMachineCore1d0efe94f5fadaf => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {E944DF1D-4256-40DE-9A43-AEB72483C617} - System32\Tasks\{177D1D1B-2979-455A-9D14-328B4C413B45} => pcalua.exe -a C:\Users\Jurij\Downloads\vcredist_x64.exe -d C:\Users\Jurij\Downloads
Task: {EDCF6C86-BBA8-45D2-B8AC-26F875F6DBA9} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation)
Task: {F782E641-9EF3-4901-9E76-5861D27B0589} - System32\Tasks\GoogleUpdateTaskMachineCore1d0e1ace40aa37b => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0e1ace40aa37b.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0efe94f5fadaf.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0e1ace4cbd36f.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0efe9503e2a11.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002Core.job => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002Core1d0e0fc4f448696.job => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002Core1d0ef1e9c219c12.job => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002UA.job => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002UA1d0e0fc50430e90.job => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3664667551-2409294277-1249802818-1002UA1d0ef1e9cc6df2e.job => C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2013-12-29 13:42 - 2015-10-03 03:49 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-01-17 10:24 - 2012-01-17 10:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe
2014-05-22 16:42 - 2014-07-06 11:55 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-06-23 20:11 - 2015-06-23 20:11 - 00187048 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-01-10 14:41 - 2015-03-30 10:49 - 00568904 _____ () C:\Program Files (x86)\puush\puush.exe
2014-10-29 10:50 - 2013-10-29 14:49 - 00248832 _____ () C:\Program Files (x86)\Drakonia Configurator\hid.exe
2014-10-29 10:50 - 2013-06-26 17:01 - 00240640 _____ () C:\Program Files (x86)\Drakonia Configurator\trayicon.exe
2015-07-08 07:58 - 2015-07-08 07:58 - 00292352 _____ () C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
2015-03-31 13:10 - 2015-10-12 04:05 - 00013088 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-11-02 20:19 - 2015-10-05 17:18 - 00778752 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-01-20 16:21 - 2015-07-03 17:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-11-02 20:19 - 2015-07-03 17:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-11-02 20:19 - 2015-07-03 17:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2014-05-22 12:33 - 2015-10-14 21:56 - 02423376 _____ () C:\Program Files (x86)\Steam\video.dll
2015-11-02 20:18 - 2015-09-24 01:33 - 02549248 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-11-02 20:18 - 2015-09-24 01:33 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-11-02 20:18 - 2015-09-24 01:33 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-11-02 20:18 - 2015-09-24 01:33 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-11-02 20:18 - 2015-09-24 01:33 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2013-11-03 10:48 - 2015-10-14 21:56 - 00705104 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-09-05 02:42 - 2015-09-05 02:42 - 00137728 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll
2014-07-17 11:56 - 2012-07-08 15:31 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\hiddriver.dll
2014-10-29 10:50 - 2013-01-15 17:06 - 00061952 _____ () C:\Program Files (x86)\Drakonia Configurator\HidDevice.dll
2014-10-29 10:50 - 2013-11-05 16:31 - 00249856 _____ () C:\Program Files (x86)\Drakonia Configurator\language.dll
2013-11-03 10:48 - 2015-10-08 23:20 - 45010208 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2012-11-29 22:59 - 2012-11-29 22:59 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2015-10-25 18:11 - 2015-10-20 15:08 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libglesv2.dll
2015-10-25 18:11 - 2015-10-20 15:08 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libegl.dll
2014-12-14 14:56 - 2014-11-26 03:12 - 40622592 _____ () C:\Users\Jurij\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libcef.dll
2014-12-14 14:56 - 2014-11-26 03:12 - 00911360 _____ () C:\Users\Jurij\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libglesv2.dll
2014-12-14 14:56 - 2014-11-26 03:12 - 00134144 _____ () C:\Users\Jurij\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3664667551-2409294277-1249802818-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Jurij\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\startupreg: 4StoryPrePatch => C:\Program Files (x86)\Gameforge4D\4Story_DE\PrePatch.exe
MSCONFIG\startupreg: ApnTBMon => "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
MSCONFIG\startupreg: Clownfish => "C:\Program Files (x86)\Clownfish\Clownfish.exe"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{9440AE1D-5CCE-4725-9F24-CCE8EA4B5808}] => (Allow) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [{1ED63443-2D7A-4A43-90CA-74DE8CFDAA87}] => (Allow) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [{F0445F39-E63B-4C51-ADEF-C441609864D1}] => (Allow) LPort=1542
FirewallRules: [{A7FFF58D-DA77-4334-A893-157D883F7176}] => (Allow) LPort=1542
FirewallRules: [{E4B0C635-94DE-49E3-935F-D07EA0304FD5}] => (Allow) LPort=53
FirewallRules: [{5A164349-1D22-4807-9DB5-0BBEFC0C4AB4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\icr0wz\counter-strike source\hl2.exe
FirewallRules: [{F6686B74-F2DB-49CB-8C8A-E1B25E59596B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\icr0wz\counter-strike source\hl2.exe
FirewallRules: [{37B7B5D9-FEBC-45A8-8E9F-F0E50D185180}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AMD Driver Updater, Vista and 7, 64 bit\Setup.exe
FirewallRules: [{129946BB-128C-4748-A96D-CAFB7BF470E9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AMD Driver Updater, Vista and 7, 64 bit\Setup.exe
FirewallRules: [TCP Query User{337725AD-5C54-41B5-A1C1-6885D8F5F8DA}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{A2A7E334-E92C-40A4-BCBF-60FCD25ADDC8}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{7090FCC1-A810-40A8-B62E-3F1723447F72}C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe
FirewallRules: [UDP Query User{2AD6FF17-77CC-435B-A645-6ACBFB76150D}C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe
FirewallRules: [TCP Query User{A0522974-AB40-406F-8474-8A537F3470A6}C:\program files (x86)\metin2\metin2client.bin] => (Allow) C:\program files (x86)\metin2\metin2client.bin
FirewallRules: [UDP Query User{D49F32A9-3370-43DE-8C73-FAD60BCB9E0F}C:\program files (x86)\metin2\metin2client.bin] => (Allow) C:\program files (x86)\metin2\metin2client.bin
FirewallRules: [{31402ED2-A53E-4178-B8D6-4931C77F7744}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{4AA9F9F3-AF00-467C-92C1-03FE7457EE08}] => (Allow) LPort=2869
FirewallRules: [{4DA70384-07DB-4573-9D15-B55F4E3655E3}] => (Allow) LPort=1900
FirewallRules: [{3DC0D551-09C9-4269-9B0D-AC4D589EC617}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [TCP Query User{C8EC8459-BC04-4C65-85DC-CC60686EAB9A}C:\windows\syswow64\javaw.exe] => (Allow) C:\windows\syswow64\javaw.exe
FirewallRules: [UDP Query User{A17F7107-BEE0-4CD2-AF84-ECF58BE3A828}C:\windows\syswow64\javaw.exe] => (Allow) C:\windows\syswow64\javaw.exe
FirewallRules: [TCP Query User{47D30931-EBC7-4DF8-A233-D1D870162895}C:\users\jurij\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\jurij\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{C2A32B53-6B3D-442E-99C5-96E9838679C7}C:\users\jurij\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\jurij\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{5DC440DC-5312-4105-8E6B-0EEA459DA13E}] => (Allow) C:\Program Files (x86)\eFusion\BlackShot\system\blackshot.exe
FirewallRules: [{447C528C-1B33-4C1A-AEE8-98C8ACDC74AB}] => (Allow) C:\Program Files (x86)\eFusion\BlackShot\system\blackshot.exe
FirewallRules: [TCP Query User{F48BE1C0-95C5-451E-967F-96736D649FF8}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5m.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5m.dat
FirewallRules: [UDP Query User{E60ED45E-2604-4098-99C1-5D2011269AB1}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5m.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 3\iw5m.dat
FirewallRules: [TCP Query User{DB5B79DD-F3E4-4202-9CB7-0AF7D5B421C8}C:\users\jurij\desktop\hardcore reloaded\metin2client.bin] => (Allow) C:\users\jurij\desktop\hardcore reloaded\metin2client.bin
FirewallRules: [UDP Query User{C16E7D0F-2451-4557-9D20-F9357DB87B4F}C:\users\jurij\desktop\hardcore reloaded\metin2client.bin] => (Allow) C:\users\jurij\desktop\hardcore reloaded\metin2client.bin
FirewallRules: [TCP Query User{872B1634-2D2B-4249-9740-1813ABB7E58A}C:\users\jurij\appdata\local\apps\2.0\j8odbza0.9m0\h5x6yyd7.q0v\laun...app_59711684aa47878d_0001.0022_dbc7638856abd3d0\launcher.exe] => (Allow) C:\users\jurij\appdata\local\apps\2.0\j8odbza0.9m0\h5x6yyd7.q0v\laun...app_59711684aa47878d_0001.0022_dbc7638856abd3d0\launcher.exe
FirewallRules: [UDP Query User{7E5D2371-607C-463A-AB3C-7148E3B32BFA}C:\users\jurij\appdata\local\apps\2.0\j8odbza0.9m0\h5x6yyd7.q0v\laun...app_59711684aa47878d_0001.0022_dbc7638856abd3d0\launcher.exe] => (Allow) C:\users\jurij\appdata\local\apps\2.0\j8odbza0.9m0\h5x6yyd7.q0v\laun...app_59711684aa47878d_0001.0022_dbc7638856abd3d0\launcher.exe
FirewallRules: [TCP Query User{F1B9C1D3-E908-4B6A-8AB4-4E39C342F62A}C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe] => (Allow) C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe
FirewallRules: [UDP Query User{2AAE00C7-3869-4581-80DC-31A952862849}C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe] => (Allow) C:\ubisoft\ghost recon online\pdc-live\ghostrecononline.exe
FirewallRules: [{31433860-7F0B-4709-A367-A5A1B7BCBFE6}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{ECCA9167-7DA9-41E1-9648-374F7AFF1EA0}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{E195C404-3126-4FBA-B8A1-DE51DEA38CDF}C:\users\jurij\appdata\local\apps\2.0\j8odbza0.9m0\h5x6yyd7.q0v\laun...app_59711684aa47878d_0001.0022_1e93dac3d4f95050\launcher.exe] => (Allow) C:\users\jurij\appdata\local\apps\2.0\j8odbza0.9m0\h5x6yyd7.q0v\laun...app_59711684aa47878d_0001.0022_1e93dac3d4f95050\launcher.exe
FirewallRules: [UDP Query User{370CE28E-3DAA-4CB4-98B5-480BA2EA81E0}C:\users\jurij\appdata\local\apps\2.0\j8odbza0.9m0\h5x6yyd7.q0v\laun...app_59711684aa47878d_0001.0022_1e93dac3d4f95050\launcher.exe] => (Allow) C:\users\jurij\appdata\local\apps\2.0\j8odbza0.9m0\h5x6yyd7.q0v\laun...app_59711684aa47878d_0001.0022_1e93dac3d4f95050\launcher.exe
FirewallRules: [TCP Query User{40ED4D4C-60FE-476D-BC65-452E703A534D}C:\users\jurij\desktop\terraria\terrariaserver.exe] => (Allow) C:\users\jurij\desktop\terraria\terrariaserver.exe
FirewallRules: [UDP Query User{1EC97667-69B9-449C-B436-02383578F981}C:\users\jurij\desktop\terraria\terrariaserver.exe] => (Allow) C:\users\jurij\desktop\terraria\terrariaserver.exe
FirewallRules: [{9AA7BF97-C365-4EF7-806F-0DF918761C35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Terraria\Terraria.exe
FirewallRules: [{5FFB472D-F895-4EDB-99AE-35151EA879F9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Terraria\Terraria.exe
FirewallRules: [{4F43019F-C471-4799-84FC-84F07731EAF8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{E80D235E-3A6D-4D59-A61A-BD2D664C622A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [TCP Query User{3E123C52-E541-41FF-B74E-1DE0088F9CE5}C:\users\jurij\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\jurij\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{F47C00B5-BD81-488E-AE18-B0D86D9C72FD}C:\users\jurij\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\jurij\appdata\local\akamai\netsession_win.exe
FirewallRules: [{FC82470D-BD3E-46C1-9A81-23A9E936B66D}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{DDC8FA0F-E692-4637-950F-715956FA785B}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [TCP Query User{FD3DC54B-998C-4E40-B1BB-0AD8494CBC57}C:\users\jurij\desktop\spiele\hardcore reloaded\bin\metin2client.bin] => (Allow) C:\users\jurij\desktop\spiele\hardcore reloaded\bin\metin2client.bin
FirewallRules: [UDP Query User{BC28CB7D-32DA-48D1-B928-F0A389B72AAD}C:\users\jurij\desktop\spiele\hardcore reloaded\bin\metin2client.bin] => (Allow) C:\users\jurij\desktop\spiele\hardcore reloaded\bin\metin2client.bin
FirewallRules: [TCP Query User{E04ADE5C-9F85-45C9-B48F-0B8B89A7BB9F}C:\users\jurij\desktop\spiele\playworld 3 2013\playworld3.exe] => (Allow) C:\users\jurij\desktop\spiele\playworld 3 2013\playworld3.exe
FirewallRules: [UDP Query User{1FC56ADF-78BE-4178-88EE-77BAB5C976B1}C:\users\jurij\desktop\spiele\playworld 3 2013\playworld3.exe] => (Allow) C:\users\jurij\desktop\spiele\playworld 3 2013\playworld3.exe
FirewallRules: [TCP Query User{38C87281-5E8B-46F0-9A55-CA4AE94771BB}C:\users\jurij\desktop\spiele\metin2\hardcore reloaded\bin\metin2client.bin] => (Allow) C:\users\jurij\desktop\spiele\metin2\hardcore reloaded\bin\metin2client.bin
FirewallRules: [UDP Query User{712B2CEF-66B4-4536-988C-2B28DA620B9D}C:\users\jurij\desktop\spiele\metin2\hardcore reloaded\bin\metin2client.bin] => (Allow) C:\users\jurij\desktop\spiele\metin2\hardcore reloaded\bin\metin2client.bin
FirewallRules: [{18A72D97-FD5F-44F9-A036-CF2EF92A214E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{807B1347-2F6D-437D-BF7C-FE6E6A2AE29B}C:\program files (x86)\survivors beta\survivers_beta_3.exe] => (Allow) C:\program files (x86)\survivors beta\survivers_beta_3.exe
FirewallRules: [UDP Query User{B16D0BB5-4D25-4E42-8A39-2F1CF5277310}C:\program files (x86)\survivors beta\survivers_beta_3.exe] => (Allow) C:\program files (x86)\survivors beta\survivers_beta_3.exe
FirewallRules: [{93EF5C39-F335-4B56-80CF-FE6324D7AC82}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe
FirewallRules: [{C9D53C96-C110-4E7B-9D3C-B64A2D5C8ED6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe
FirewallRules: [{D21F8F5E-4136-4FD8-81EF-A62F41641219}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe
FirewallRules: [{E58082E1-79F1-4638-AC18-FB0CD6D21D35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe
FirewallRules: [{5852FA68-3899-43FC-A254-FD9B9C79FDE6}] => (Allow) C:\Users\Jurij\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{75EF04F5-004F-4A2F-B556-34A1A710443F}] => (Allow) C:\Users\Jurij\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{17441DC5-3C7D-43A3-833D-9D83087C2CE7}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{07A4A857-989C-4D78-9E03-A762744AE3B2}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{C4A0EE93-9D8D-462E-9137-1125E69508E3}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{5EE35CA8-2692-43CA-B649-C21979C224CA}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [TCP Query User{9299A908-8BBC-4404-8EF8-0CB1F3C83292}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
FirewallRules: [UDP Query User{6B73F492-83F8-4F58-B57C-2FB64EB2CFD7}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
FirewallRules: [TCP Query User{1ACBC3A2-CE77-4184-B5E4-75DB71743B8B}C:\users\jurij\desktop\spiele\terraria\terrariaserver.exe] => (Allow) C:\users\jurij\desktop\spiele\terraria\terrariaserver.exe
FirewallRules: [UDP Query User{9D9D92AF-7EC9-46DC-ADF1-D7D75FA10E5B}C:\users\jurij\desktop\spiele\terraria\terrariaserver.exe] => (Allow) C:\users\jurij\desktop\spiele\terraria\terrariaserver.exe
FirewallRules: [TCP Query User{49810CE9-49C2-40D8-AD42-7ADC97D658A7}C:\users\jurij\desktop\terraria\terraria-server\terrariaserver.exe] => (Allow) C:\users\jurij\desktop\terraria\terraria-server\terrariaserver.exe
FirewallRules: [UDP Query User{75D8668B-FAFA-46FF-999D-ACD2C46B4358}C:\users\jurij\desktop\terraria\terraria-server\terrariaserver.exe] => (Allow) C:\users\jurij\desktop\terraria\terraria-server\terrariaserver.exe
FirewallRules: [TCP Query User{16768DAF-90FD-4F41-9AC7-EA84001C6109}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{4F1439CB-1232-4E80-BDFB-B14F88CE92E4}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{C0D299E5-B807-4203-83C2-5916D23C1FD4}C:\users\jurij\desktop\juicymt2 client 2014 (pvp-fun)\.juicymt2 - clientstarter.exe] => (Allow) C:\users\jurij\desktop\juicymt2 client 2014 (pvp-fun)\.juicymt2 - clientstarter.exe
FirewallRules: [UDP Query User{B06D04B5-7CB7-4144-904D-F68FA698F2BD}C:\users\jurij\desktop\juicymt2 client 2014 (pvp-fun)\.juicymt2 - clientstarter.exe] => (Allow) C:\users\jurij\desktop\juicymt2 client 2014 (pvp-fun)\.juicymt2 - clientstarter.exe
FirewallRules: [{F27267F3-2C69-4A4E-A602-FC10A8CB8C8D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8B374E23-33C5-411E-AD53-A757A415C0EE}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{D1D694FB-14FB-4E0B-9245-4621BDFED750}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [UDP Query User{EB59254B-2966-4C0A-AE47-1635313C254C}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [TCP Query User{E73266D5-419B-4495-BAC5-5305B07162EA}C:\users\jurij\desktop\lavanda2-client\lavanda.exe] => (Block) C:\users\jurij\desktop\lavanda2-client\lavanda.exe
FirewallRules: [UDP Query User{5F4D30A1-0BFB-4FF0-AE82-AFAE0B02F373}C:\users\jurij\desktop\lavanda2-client\lavanda.exe] => (Block) C:\users\jurij\desktop\lavanda2-client\lavanda.exe
FirewallRules: [{259F8433-87BD-4F0A-9FDF-6E0FE820031B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{6AB2A8DC-C0EE-47A8-AD36-BB387FBC9141}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [TCP Query User{B3D104D9-5A17-41E3-8F6E-24DDA39EB71B}C:\users\jurij\desktop\terraria server\terrariaserver.exe] => (Allow) C:\users\jurij\desktop\terraria server\terrariaserver.exe
FirewallRules: [UDP Query User{1BF6B589-E0E8-45E9-A222-EA9AAF649C7E}C:\users\jurij\desktop\terraria server\terrariaserver.exe] => (Allow) C:\users\jurij\desktop\terraria server\terrariaserver.exe
FirewallRules: [TCP Query User{7691EB8F-5CBF-40E1-B32E-CD79B81AEB17}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [UDP Query User{771AE757-DC86-475F-B03F-F6C9C24EC8D7}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [TCP Query User{B3570E80-B416-4B51-98B7-CEA1D112DC0C}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [UDP Query User{268F7F6E-39FF-4927-947F-2C8F3D445B03}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [{DFB5696E-9042-4E1C-ACD9-9699CF5C5001}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe
FirewallRules: [{577374F2-D1E6-4127-B414-3BEC186D3339}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe
FirewallRules: [{B424F1BD-6DC5-4B73-94A6-38D6902FD53B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{71D7BF62-ECB6-447C-B1B6-66130B904D61}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{A5133026-5048-4C70-85A2-3F7818058FBF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{0E5681F3-FFA2-4071-B49B-22DFCE7F5618}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [TCP Query User{4E072B08-BBE1-4513-BC81-B9A571C51877}C:\users\jurij\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\jurij\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{7532A9A4-4B27-4527-BCE5-729EE001A971}C:\users\jurij\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\jurij\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{B8ACACEC-0BFD-40F6-8941-6B70A4F86AF6}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{944F2439-1120-4E53-B2AA-81FFE2855CBE}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{5E29FF06-46AA-48F3-B3BC-9E8203D34398}] => (Allow) C:\Nexon\Combat Arms EU\NMService.exe
FirewallRules: [{B74D0AE2-892D-4202-9978-5D9CB696AD5A}] => (Allow) C:\Nexon\Combat Arms EU\NMService.exe
FirewallRules: [TCP Query User{5A757047-D79A-4EAB-963F-FA0A602DCF6F}C:\nexon\combat arms eu\engine.exe] => (Allow) C:\nexon\combat arms eu\engine.exe
FirewallRules: [UDP Query User{CCFD899D-A82B-48DC-98E4-84BB2EFF6860}C:\nexon\combat arms eu\engine.exe] => (Allow) C:\nexon\combat arms eu\engine.exe
FirewallRules: [TCP Query User{F0E0F93A-D92E-4944-BCB7-CF69318F884A}C:\users\jurij\desktop\spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\jurij\desktop\spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{F4A4E20F-5F77-4102-BFED-58918C8ABD33}C:\users\jurij\desktop\spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\jurij\desktop\spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{0CC08BCB-3EBB-451F-B34F-0117C9E9B800}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [{A7D6AC67-7C31-470F-9C49-DB02A36E0A2A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [TCP Query User{CBF14AD4-EEFA-4CA9-9115-4DB18C5974C5}C:\users\jurij\desktop\dark-fusion\fusion-network.exe] => (Block) C:\users\jurij\desktop\dark-fusion\fusion-network.exe
FirewallRules: [UDP Query User{52112552-7679-4C95-B21E-A1A5424D9571}C:\users\jurij\desktop\dark-fusion\fusion-network.exe] => (Block) C:\users\jurij\desktop\dark-fusion\fusion-network.exe
FirewallRules: [TCP Query User{3C391BBA-FD1C-4E5A-B4A6-542202BF37CC}C:\users\jurij\desktop\dark-fusion\metin2client.exe] => (Allow) C:\users\jurij\desktop\dark-fusion\metin2client.exe
FirewallRules: [UDP Query User{B527AF9C-A739-41B3-9BD6-688BF8CFEFDA}C:\users\jurij\desktop\dark-fusion\metin2client.exe] => (Allow) C:\users\jurij\desktop\dark-fusion\metin2client.exe
FirewallRules: [{F1A4AE15-66E1-4649-B8BC-9FFA99192E03}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{BD65FEBC-A791-4A55-AC5D-190BC8067E91}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{B14EB856-B1A9-4E30-84C4-88233BB75AF8}C:\program files\rockstar games\grand theft auto v\gta5.exe] => (Allow) C:\program files\rockstar games\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{2D26A3C0-9020-4148-816A-081831415066}C:\program files\rockstar games\grand theft auto v\gta5.exe] => (Allow) C:\program files\rockstar games\grand theft auto v\gta5.exe
FirewallRules: [{825B5C0F-4FBC-4B05-AB86-4D7D9AECC9D5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Alan Wake\AlanWake.exe
FirewallRules: [{ED505CE2-DE95-4BFE-8F4B-2E8BC62733A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Alan Wake\AlanWake.exe
FirewallRules: [{A6EDF869-F097-4CE3-BAFC-B2F378AC96AF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{165C8D21-FF45-4C80-933C-5ACE4AA75916}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{46C186E4-5E64-4F1A-B2BE-A788DE4B23C1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{5CC77AD5-64C3-41BB-8DE5-C23AAC69CEDC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{5848585C-91AB-437F-B7D3-77BBC9D28290}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7FA2A4E0-971A-4D61-BCEF-601245AABDB9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\WormsRevolution\WormsRevolution.exe
FirewallRules: [{412434D4-C9DA-4B58-B4E4-2AB92D5B1F13}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\WormsRevolution\WormsRevolution.exe
FirewallRules: [{90CCFF52-AC3A-41D5-96DC-B79ECF453D4E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
FirewallRules: [{7ADAC114-7E9A-4D91-B465-C234D701B583}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
FirewallRules: [TCP Query User{E58C4458-2442-470F-855D-0902ED32B7D2}C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe
FirewallRules: [UDP Query User{58B37A27-707E-465F-88D2-9B3C03C6AFAA}C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe
FirewallRules: [{49225AB4-B4DB-4AB6-A338-46347F54359F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Unturned\Unturned.exe
FirewallRules: [{FEA1409F-51B4-43F6-8E49-0E4F8D8B3517}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Unturned\Unturned.exe
FirewallRules: [TCP Query User{9F739448-F913-4F32-9E33-EB3E4FED8EB1}C:\users\jurij\desktop\takania2-client1.0.1\metin2client_normal.exe] => (Allow) C:\users\jurij\desktop\takania2-client1.0.1\metin2client_normal.exe
FirewallRules: [UDP Query User{FA4E0AC7-30B9-4486-BB83-E722D0B27F73}C:\users\jurij\desktop\takania2-client1.0.1\metin2client_normal.exe] => (Allow) C:\users\jurij\desktop\takania2-client1.0.1\metin2client_normal.exe
FirewallRules: [{7241226E-732C-4A80-8751-2412867BE5C8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{9E70E24D-9346-4F22-A8FA-319AEB1F6221}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{945BB8E4-53D4-4825-89DE-EE6670D02DED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{47EF494B-07A1-47E3-83E6-32E52E7AEA6E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{B3413B33-2E37-4F13-BEC7-661B2CE3E451}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{756CFB43-F347-45C4-A9C4-65B5953EDDDF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{5A9D03C2-758A-4498-93C5-2EE6DE71FE35}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{31FF4CA9-23AB-466F-92BF-DE534D865B90}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{1729BE53-2934-480D-A111-AC9EB58BF3B5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{D9429D79-A8E0-4EC9-BE66-2FEBB54B042B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{496C1ABD-CAA1-4D84-B139-170792B3C4A5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{DB7902F4-E98B-4BA9-8B7B-D54840D76979}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{B72EE9A1-286D-4635-936B-1612A32308DF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{CEA29E4F-9B53-4011-8022-CD0532BE1D0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{93B2FE6C-B0B4-4DFA-B886-B46EBCE11AB9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/04/2015 01:20:29 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 31.10.2015.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: b98

Startzeit: 01d116faf8b46bc4

Endzeit: 0

Anwendungspfad: C:\Users\Jurij\Desktop\FRST64.exe

Berichts-ID: 66913d90-82ee-11e5-a1b3-246511c21be8

Error: (11/04/2015 01:18:25 PM) (Source: MsiInstaller) (EventID: 11310) (User: Jurij-PC)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Jurij\AppData\Local\Akamai\admintool.exe.  Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.

Error: (11/04/2015 01:17:58 PM) (Source: MsiInstaller) (EventID: 11310) (User: Jurij-PC)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Jurij\AppData\Local\Akamai\admintool.exe.  Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.

Error: (11/04/2015 01:14:34 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz  konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet.  0x0.

Error: (11/04/2015 01:14:33 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Kontext:  Anwendung, SystemIndex Katalog

Error: (11/04/2015 01:14:33 PM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Error: (11/03/2015 06:44:21 PM) (Source: MsiInstaller) (EventID: 11310) (User: Jurij-PC)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Jurij\AppData\Local\Akamai\admintool.exe.  Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.

Error: (11/03/2015 06:43:47 PM) (Source: MsiInstaller) (EventID: 11310) (User: Jurij-PC)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Jurij\AppData\Local\Akamai\admintool.exe.  Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.

Error: (11/03/2015 02:43:07 PM) (Source: MsiInstaller) (EventID: 11310) (User: Jurij-PC)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Jurij\AppData\Local\Akamai\admintool.exe.  Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.

Error: (11/03/2015 02:42:23 PM) (Source: MsiInstaller) (EventID: 11310) (User: Jurij-PC)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Jurij\AppData\Local\Akamai\admintool.exe.  Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.


Systemfehler:
=============
Error: (11/04/2015 01:14:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Realtek11nSU" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (11/04/2015 01:14:06 PM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als
Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser
Konfiguration nicht gestartet zu sein.

Error: (11/03/2015 10:40:16 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (11/03/2015 10:35:39 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (11/03/2015 10:35:39 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht.

Error: (11/03/2015 10:35:03 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Realtek11nSU" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (11/03/2015 10:34:49 AM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als
Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser
Konfiguration nicht gestartet zu sein.

Error: (11/03/2015 10:24:39 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: WMPNetworkSvc0x80004005

Error: (11/03/2015 10:24:14 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Realtek11nSU" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (11/03/2015 10:24:14 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Razer Game Scanner" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053


CodeIntegrity:
===================================
  Date: 2014-01-03 14:57:10.596
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Jurij\AppData\Local\Temp\{78763763-3E17-4C48-8DCD-A259951E16A4}\{4D46B1FB-0E09-4EF4-83AA-355CEF2E4343}\cmiainfo.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-01-03 14:57:10.537
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Jurij\AppData\Local\Temp\{78763763-3E17-4C48-8DCD-A259951E16A4}\{4D46B1FB-0E09-4EF4-83AA-355CEF2E4343}\cmiainfo.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-01-03 14:50:00.571
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Jurij\AppData\Local\Temp\{A35007C3-ABE0-476E-9CB7-0D79ABC20480}\{4D46B1FB-0E09-4EF4-83AA-355CEF2E4343}\cmiainfo.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-01-03 14:50:00.494
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Jurij\AppData\Local\Temp\{A35007C3-ABE0-476E-9CB7-0D79ABC20480}\{4D46B1FB-0E09-4EF4-83AA-355CEF2E4343}\cmiainfo.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Speicherinformationen ===========================

Prozessor: AMD FX(tm)-4100 Quad-Core Processor
Prozentuale Nutzung des RAM: 41%
Installierter physikalischer RAM: 8173.54 MB
Verfügbarer physikalischer RAM: 4805.4 MB
Summe virtueller Speicher: 16345.28 MB
Verfügbarer virtueller Speicher: 12940.56 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:455.66 GB) (Free:207.23 GB) NTFS
Drive i: () (Removable) (Total:3.8 GB) (Free:1.73 GB) FAT32

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 3DBBA2DC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=455.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=10 GB) - (Type=27)

========================================================
Disk: 1 (Size: 3.8 GB) (Disk ID: 32E6E468)
Partition 1: (Active) - (Size=3.8 GB) - (Type=0C)

==================== Ende von Addition.txt ============================

schrauber 04.11.2015 20:43
hi,

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

icrowz 05.11.2015 16:21
Hallo schrauber !
Danke für deine Antwort, die Logs werde ich morgen posten, doch ich habe noch eine Frage.
Ich bin nun von MSE auf Avira Free Antivir umgestiegen, und Avira hatte einen Fund :
"PUA/OpenCandy.Gen" hieß der Virus.
Laut Antivir ist es ein Virus der Programme installiert (solch einen Virus mit einer ähnlichen Funktion,jedoch anderem Namen hatte ich bereits bei meinem altem Problem, als ich solch einen Hacker auf dem PC hatte) und meine Frage ist nun, ob ich ihn aus der Quarantäne löschen kann ? (Also ob ich auf das X in der Quarantäne drücken soll).
Ich lasse den Virus erstmal in der Quarantäne, da er dort ja nichts anrichten kann und warte auf deine Antwort !
Laut Internet gibt es Viren die sich reproduzieren können, wenn man sie aus der Quarantäne entfernt...
Darum die Nachfrage
http://puu.sh/l9AQB/ab6945ae7d.png

Hallo schrauber ! Ist es wichtig welche Reinfolge bei den Scans ?
MBAR lies sich anfangs nicht updaten, also hab ich mit TDSSKiller angefangen...
Folgendes kam heraus :
Code:
15:30:00.0007 0x1ec8  TDSS rootkit removing tool 3.1.0.5 Jul 24 2015 12:29:57
15:30:03.0378 0x1ec8  ============================================================
15:30:03.0378 0x1ec8  Current date / time: 2015/11/05 15:30:03.0378
15:30:03.0378 0x1ec8  SystemInfo:
15:30:03.0378 0x1ec8 
15:30:03.0378 0x1ec8  OS Version: 6.1.7601 ServicePack: 1.0
15:30:03.0378 0x1ec8  Product type: Workstation
15:30:03.0379 0x1ec8  ComputerName: JURIJ-PC
15:30:03.0379 0x1ec8  UserName: Jurij
15:30:03.0379 0x1ec8  Windows directory: C:\Windows
15:30:03.0379 0x1ec8  System windows directory: C:\Windows
15:30:03.0379 0x1ec8  Running under WOW64
15:30:03.0379 0x1ec8  Processor architecture: Intel x64
15:30:03.0379 0x1ec8  Number of processors: 4
15:30:03.0379 0x1ec8  Page size: 0x1000
15:30:03.0379 0x1ec8  Boot type: Normal boot
15:30:03.0379 0x1ec8  ============================================================
15:30:06.0310 0x1ec8  KLMD registered as C:\Windows\system32\drivers\88403019.sys
15:30:06.0586 0x1ec8  System UUID: {913AC0BD-1E95-8274-67FA-1875EB7CF3E9}
15:30:07.0035 0x1ec8  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
15:30:07.0040 0x1ec8  Drive \Device\Harddisk1\DR1 - Size: 0xF3C00000 ( 3.81 Gb ), SectorSize: 0x200, Cylinders: 0x1F1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
15:30:07.0053 0x1ec8  ============================================================
15:30:07.0053 0x1ec8  \Device\Harddisk0\DR0:
15:30:07.0053 0x1ec8  MBR partitions:
15:30:07.0053 0x1ec8  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
15:30:07.0053 0x1ec8  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x38F53000
15:30:07.0053 0x1ec8  \Device\Harddisk1\DR1:
15:30:07.0054 0x1ec8  MBR partitions:
15:30:07.0054 0x1ec8  \Device\Harddisk1\DR1\Partition1: MBR, Type 0xC, StartLBA 0x20, BlocksNum 0x79DFE0
15:30:07.0054 0x1ec8  ============================================================
15:30:07.0078 0x1ec8  C: <-> \Device\Harddisk0\DR0\Partition2
15:30:07.0078 0x1ec8  ============================================================
15:30:07.0078 0x1ec8  Initialize success
15:30:07.0078 0x1ec8  ============================================================
15:31:07.0805 0x4154  ============================================================
15:31:07.0805 0x4154  Scan started
15:31:07.0805 0x4154  Mode: Manual; SigCheck; TDLFS;
15:31:07.0805 0x4154  ============================================================
15:31:07.0805 0x4154  KSN ping started
15:31:38.0901 0x4154  KSN ping finished: true
15:31:40.0816 0x4154  ================ Scan system memory ========================
15:31:40.0816 0x4154  System memory - ok
15:31:40.0817 0x4154  ================ Scan services =============================
15:31:41.0157 0x4154  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
15:31:41.0293 0x4154  1394ohci - ok
15:31:41.0315 0x4154  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
15:31:41.0336 0x4154  ACPI - ok
15:31:41.0382 0x4154  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi        C:\Windows\system32\drivers\acpipmi.sys
15:31:41.0462 0x4154  AcpiPmi - ok
15:31:41.0617 0x4154  [ 013697369EAFFA675D0671607F036020, 65611C775AC4681E46A6565E5A7A4FF3363C66EBDC98C4C58AFB365D40BE23B6 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
15:31:41.0632 0x4154  AdobeARMservice - ok
15:31:41.0836 0x4154  [ 9B3355B29942AF67F014EA90CE1EA960, FBB155F72984045BCD99CC2059B9EDAABD3A52104C3864A290D8A355991F94D3 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
15:31:41.0855 0x4154  AdobeFlashPlayerUpdateSvc - ok
15:31:42.0014 0x4154  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx        C:\Windows\system32\drivers\adp94xx.sys
15:31:42.0041 0x4154  adp94xx - ok
15:31:42.0064 0x4154  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci        C:\Windows\system32\drivers\adpahci.sys
15:31:42.0083 0x4154  adpahci - ok
15:31:42.0103 0x4154  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320        C:\Windows\system32\drivers\adpu320.sys
15:31:42.0120 0x4154  adpu320 - ok
15:31:42.0169 0x4154  [ 83BFCCAC53795E8A5055A93672D0C46C, B2B03473D950A5BA9DE59D81E7B14C1FAFF17B2A4D8A5808588F5CC21D63B291 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
15:31:42.0253 0x4154  AeLookupSvc - ok
15:31:42.0321 0x4154  [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD            C:\Windows\system32\drivers\afd.sys
15:31:42.0402 0x4154  AFD - ok
15:31:42.0420 0x4154  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
15:31:42.0433 0x4154  agp440 - ok
15:31:42.0472 0x4154  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG            C:\Windows\System32\alg.exe
15:31:42.0519 0x4154  ALG - ok
15:31:42.0551 0x4154  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
15:31:42.0562 0x4154  aliide - ok
15:31:42.0652 0x4154  [ 20C8A3E435A47F0408A1EA674AFA6194, 568EBB4EE65E6945024F4D67B541BD0170E35C32E7ED4D0AD59D33D933E430D5 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
15:31:42.0727 0x4154  AMD External Events Utility - ok
15:31:42.0767 0x4154  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
15:31:42.0779 0x4154  amdide - ok
15:31:42.0797 0x4154  [ 6A2EEB0C4133B20773BB3DD0B7B377B4, E4CB35C6937C70A145A13E5AE5B34A271B49101DA623171ACBFDA8601E5A70EA ] amdiox64        C:\Windows\system32\DRIVERS\amdiox64.sys
15:31:42.0812 0x4154  amdiox64 - ok
15:31:42.0821 0x4154  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8          C:\Windows\system32\drivers\amdk8.sys
15:31:42.0856 0x4154  AmdK8 - ok
15:31:43.0688 0x4154  [ 0B45C18B0F3EE996D25BAA4E74884B83, 9E9CE2E02A4E4BF8A87870EF23F8B7D6762785EE9959A64DF45E67B30DE3B63C ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
15:31:44.0105 0x4154  amdkmdag - ok
15:31:44.0180 0x4154  [ 0E57258E5CC4CC7A9A9A877AFDF0CEC6, 2C3DCB347CD6DAF6F2C8A2531D5165F776855F05D1675A36B9D78BC2C8E0B324 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys
15:31:44.0220 0x4154  amdkmdap - ok
15:31:44.0240 0x4154  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
15:31:44.0257 0x4154  AmdPPM - ok
15:31:44.0305 0x4154  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
15:31:44.0331 0x4154  amdsata - ok
15:31:44.0350 0x4154  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
15:31:44.0367 0x4154  amdsbs - ok
15:31:44.0386 0x4154  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata        C:\Windows\system32\drivers\amdxata.sys
15:31:44.0408 0x4154  amdxata - ok
15:31:44.0686 0x4154  [ 6B31C215750CD41567E962D22839EE44, FF0B92807296B88DE37F9F2EB27FF7B73AA998B98074AA54A949A2B79690AFE5 ] AntiVirMailService C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
15:31:44.0720 0x4154  AntiVirMailService - ok
15:31:44.0798 0x4154  [ 18B0643B3B504E0FDCFCE0C8743B29C7, 1D4C004AD5066F52A4AA039F5364814F8F6B04EC1F704A5A3110172AD465661C ] AntiVirSchedulerService C:\Program Files (x86)\Avira\Antivirus\sched.exe
15:31:44.0820 0x4154  AntiVirSchedulerService - ok
15:31:44.0866 0x4154  [ 18B0643B3B504E0FDCFCE0C8743B29C7, 1D4C004AD5066F52A4AA039F5364814F8F6B04EC1F704A5A3110172AD465661C ] AntiVirService  C:\Program Files (x86)\Avira\Antivirus\avguard.exe
15:31:44.0887 0x4154  AntiVirService - ok
15:31:44.0933 0x4154  [ D84E576299C73B0B1DC477D2B99958C4, D6703C2B63B9FA87C2DA009CC7B6DF76C3603C6A9874B152D685A1B92EE2DF28 ] AntiVirWebService C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
15:31:44.0971 0x4154  AntiVirWebService - ok
15:31:45.0010 0x4154  [ 27DABFB4A6B0140C34DBEC713469592B, A355170D353AFBF0DE4EF53282F8404788FBBD0E2A1B7282B1B2925923E83141 ] AppID          C:\Windows\system32\drivers\appid.sys
15:31:45.0073 0x4154  AppID - ok
15:31:45.0114 0x4154  [ ABC373B9C6275D45F17DB559408FFD1B, 12B355393BEBE2D1D24D7A9DA5E69E03E334899407503BC1CADCF7BE39828223 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
15:31:45.0148 0x4154  AppIDSvc - ok
15:31:45.0178 0x4154  [ 3EA5DA3F459F6ED19E10166965F6892F, F5618A5FA72C5E57BCFA6F2ECB840B1AEC60C72840AF3C1D94D5FCDB5ED2BF5E ] Appinfo        C:\Windows\System32\appinfo.dll
15:31:45.0202 0x4154  Appinfo - ok
15:31:45.0215 0x4154  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc            C:\Windows\system32\drivers\arc.sys
15:31:45.0229 0x4154  arc - ok
15:31:45.0239 0x4154  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys
15:31:45.0253 0x4154  arcsas - ok
15:31:45.0286 0x4154  [ E536856E96A7605EBF580D62A868E5FE, 70D0F6ECB05E923C1B274605CB3320091D35D7622003FF7E4806645519C70F01 ] ASGT            C:\Windows\SysWOW64\ASGT.exe
15:31:45.0310 0x4154  ASGT - detected UnsignedFile.Multi.Generic ( 1 )
15:31:51.0460 0x4154  Detect skipped due to KSN trusted
15:31:51.0460 0x4154  ASGT - ok
15:31:51.0569 0x4154  [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
15:31:51.0593 0x4154  aspnet_state - ok
15:31:51.0606 0x4154  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
15:31:51.0809 0x4154  AsyncMac - ok
15:31:51.0856 0x4154  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi          C:\Windows\system32\drivers\atapi.sys
15:31:51.0871 0x4154  atapi - ok
15:31:51.0924 0x4154  [ ED3A041014FBBFDC23D6C04F9C7A5D79, A039D8F4C0EA2101898A253E13DFED5FA8500C412ACC47835415E27C9BD068FF ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys
15:31:51.0986 0x4154  AtiHDAudioService - detected UnsignedFile.Multi.Generic ( 1 )
15:31:58.0092 0x4154  Detect skipped due to KSN trusted
15:31:58.0092 0x4154  AtiHDAudioService - ok
15:31:58.0466 0x4154  [ 0B45C18B0F3EE996D25BAA4E74884B83, 9E9CE2E02A4E4BF8A87870EF23F8B7D6762785EE9959A64DF45E67B30DE3B63C ] atikmdag        C:\Windows\system32\DRIVERS\atikmdag.sys
15:31:58.0772 0x4154  atikmdag - ok
15:31:58.0827 0x4154  [ E82E61F46D1336447F4DEFF8C074F13E, 9FC152B33F1D9F5684B687743E943AA26AC17A1093F4C31A43C7012E70BC302E ] AtiPcie        C:\Windows\system32\drivers\AtiPcie64.sys
15:31:58.0837 0x4154  AtiPcie - ok
15:31:58.0901 0x4154  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
15:31:58.0990 0x4154  AudioEndpointBuilder - ok
15:31:59.0033 0x4154  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv        C:\Windows\System32\Audiosrv.dll
15:31:59.0067 0x4154  AudioSrv - ok
15:31:59.0135 0x4154  [ 03C6DEB5C74C8140C2167677DBE2F79A, D5C727B007C5B486DECE1A1B83D8155299DD7CB46DC8208CE9185C5BAE5CC33A ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
15:31:59.0160 0x4154  avgntflt - ok
15:31:59.0175 0x4154  [ 043E5F34C3878C844568658B79B3E55C, D13D8FC5205562E02F252C0EE1AB2236C9212445D6EC3715041EBDF993CB467F ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
15:31:59.0192 0x4154  avipbb - ok
15:31:59.0318 0x4154  [ 6C4B9A2FF6924405E9ABFB558049D4DD, 9AB314B9ECF41832589726556A93CEAAE2AE774B1738A46A027E833B73A72118 ] Avira.ServiceHost C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
15:31:59.0357 0x4154  Avira.ServiceHost - ok
15:31:59.0367 0x4154  [ 390184FAD8FCC1B6DA25AEBAE928C3B6, 537B0E0FAE080B55D70E990BBA0F7F22903CA340F6A42039BAD617A8ECF59119 ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
15:31:59.0382 0x4154  avkmgr - ok
15:31:59.0481 0x4154  [ C6F4C466B654C1BE98AF31418BB5AC30, 62AA4456F8E22A6E508EB44DE4309615057117AAF923C13BBED15AA39630E76B ] AVM WLAN Connection Service C:\Program Files (x86)\avmwlanstick\WlanNetService.exe
15:31:59.0541 0x4154  AVM WLAN Connection Service - detected UnsignedFile.Multi.Generic ( 1 )
15:32:05.0667 0x4154  Detect skipped due to KSN trusted
15:32:05.0668 0x4154  AVM WLAN Connection Service - ok
15:32:05.0716 0x4154  [ 1DC2F715792CF33428AD7993ACBD224D, 129FBD517E016914CD61C35894C0B9B2074E680F1EB21201597E5C13CAF4529F ] avmeject        C:\Windows\system32\drivers\avmeject.sys
15:32:05.0742 0x4154  avmeject - ok
15:32:05.0793 0x4154  [ 080860E03F0219AF0A0377A02292741F, F0A151509BFEBFE639CC15388847EB2EDA298CFAE0AC4A1358A1472F42320249 ] avnetflt        C:\Windows\system32\DRIVERS\avnetflt.sys
15:32:05.0806 0x4154  avnetflt - ok
15:32:05.0853 0x4154  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
15:32:05.0918 0x4154  AxInstSV - ok
15:32:05.0948 0x4154  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv        C:\Windows\system32\drivers\bxvbda.sys
15:32:06.0010 0x4154  b06bdrv - ok
15:32:06.0034 0x4154  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
15:32:06.0069 0x4154  b57nd60a - ok
15:32:06.0096 0x4154  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
15:32:06.0166 0x4154  BDESVC - ok
15:32:06.0183 0x4154  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
15:32:06.0247 0x4154  Beep - ok
15:32:06.0383 0x4154  [ 12A7660F0666033B98510A1C45EE0C34, 280350B3E960479A0CE4848916804950CF241846162955EB9D12E725CFF0ADD7 ] BEService      C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
15:32:06.0450 0x4154  BEService - ok
15:32:06.0484 0x4154  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE            C:\Windows\System32\bfe.dll
15:32:06.0552 0x4154  BFE - ok
15:32:06.0617 0x4154  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll
15:32:06.0770 0x4154  BITS - ok
15:32:06.0799 0x4154  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\drivers\blbdrive.sys
15:32:06.0832 0x4154  blbdrive - ok
15:32:06.0858 0x4154  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
15:32:06.0880 0x4154  bowser - ok
15:32:06.0892 0x4154  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
15:32:06.0932 0x4154  BrFiltLo - ok
15:32:06.0948 0x4154  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
15:32:06.0964 0x4154  BrFiltUp - ok
15:32:07.0010 0x4154  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser        C:\Windows\System32\browser.dll
15:32:07.0043 0x4154  Browser - ok
15:32:07.0062 0x4154  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
15:32:07.0120 0x4154  Brserid - ok
15:32:07.0128 0x4154  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
15:32:07.0169 0x4154  BrSerWdm - ok
15:32:07.0173 0x4154  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
15:32:07.0197 0x4154  BrUsbMdm - ok
15:32:07.0218 0x4154  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
15:32:07.0232 0x4154  BrUsbSer - ok
15:32:07.0247 0x4154  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
15:32:07.0279 0x4154  BTHMODEM - ok
15:32:07.0301 0x4154  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv        C:\Windows\system32\bthserv.dll
15:32:07.0338 0x4154  bthserv - ok
15:32:07.0355 0x4154  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
15:32:07.0394 0x4154  cdfs - ok
15:32:07.0409 0x4154  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom          C:\Windows\system32\DRIVERS\cdrom.sys
15:32:07.0428 0x4154  cdrom - ok
15:32:07.0462 0x4154  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc    C:\Windows\System32\certprop.dll
15:32:07.0521 0x4154  CertPropSvc - ok
15:32:07.0529 0x4154  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys
15:32:07.0551 0x4154  circlass - ok
15:32:07.0594 0x4154  [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS            C:\Windows\system32\CLFS.sys
15:32:07.0617 0x4154  CLFS - ok
15:32:07.0702 0x4154  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:32:07.0725 0x4154  clr_optimization_v2.0.50727_32 - ok
15:32:07.0798 0x4154  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
15:32:07.0814 0x4154  clr_optimization_v2.0.50727_64 - ok
15:32:07.0881 0x4154  [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
15:32:07.0927 0x4154  clr_optimization_v4.0.30319_32 - ok
15:32:07.0957 0x4154  [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
15:32:07.0990 0x4154  clr_optimization_v4.0.30319_64 - ok
15:32:08.0008 0x4154  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys
15:32:08.0023 0x4154  CmBatt - ok
15:32:08.0066 0x4154  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
15:32:08.0078 0x4154  cmdide - ok
15:32:08.0170 0x4154  [ 27667A788130A7F7A5858DE27572E6D7, 5501D80BCCB7A811ECCED3828DFD0A5D948BBED8504E9BCC4A3BFB840DD41CBC ] CNG            C:\Windows\system32\Drivers\cng.sys
15:32:08.0220 0x4154  CNG - ok
15:32:08.0256 0x4154  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
15:32:08.0268 0x4154  Compbatt - ok
15:32:08.0281 0x4154  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
15:32:08.0297 0x4154  CompositeBus - ok
15:32:08.0302 0x4154  COMSysApp - ok
15:32:08.0313 0x4154  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk        C:\Windows\system32\drivers\crcdisk.sys
15:32:08.0324 0x4154  crcdisk - ok
15:32:08.0361 0x4154  [ 7BC3E861F7E8EB543A630090FAE779E0, 52A538F25C853AAC9706CD0D4EBF80B1963391AA175895CFD9D44C8ABBFCFB74 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
15:32:08.0393 0x4154  CryptSvc - ok
15:32:08.0496 0x4154  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
15:32:08.0551 0x4154  DcomLaunch - ok
15:32:08.0594 0x4154  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc      C:\Windows\System32\defragsvc.dll
15:32:08.0638 0x4154  defragsvc - ok
15:32:08.0654 0x4154  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
15:32:08.0709 0x4154  DfsC - ok
15:32:08.0759 0x4154  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
15:32:08.0813 0x4154  Dhcp - ok
15:32:08.0880 0x4154  [ EC3F433D00365F1A9BC3411BCA7C7140, 0852D747359DE573504EBBDB99DA26D3BFA8B3C7A4836F8E3A5AD94B5571AD5C ] DiagTrack      C:\Windows\system32\diagtrack.dll
15:32:08.0961 0x4154  DiagTrack - ok
15:32:08.0974 0x4154  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
15:32:09.0007 0x4154  discache - ok
15:32:09.0011 0x4154  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\drivers\disk.sys
15:32:09.0026 0x4154  Disk - ok
15:32:09.0076 0x4154  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
15:32:09.0107 0x4154  Dnscache - ok
15:32:09.0142 0x4154  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc        C:\Windows\System32\dot3svc.dll
15:32:09.0195 0x4154  dot3svc - ok
15:32:09.0223 0x4154  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS            C:\Windows\system32\dps.dll
15:32:09.0265 0x4154  DPS - ok
15:32:09.0299 0x4154  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
15:32:09.0328 0x4154  drmkaud - ok
15:32:09.0408 0x4154  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
15:32:09.0457 0x4154  DXGKrnl - ok
15:32:09.0463 0x4154  EagleX64 - ok
15:32:09.0515 0x4154  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost        C:\Windows\System32\eapsvc.dll
15:32:09.0602 0x4154  EapHost - ok
15:32:09.0770 0x4154  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv          C:\Windows\system32\drivers\evbda.sys
15:32:09.0895 0x4154  ebdrv - ok
15:32:09.0935 0x4154  [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] EFS            C:\Windows\System32\lsass.exe
15:32:09.0980 0x4154  EFS - ok
15:32:10.0097 0x4154  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr        C:\Windows\ehome\ehRecvr.exe
15:32:10.0179 0x4154  ehRecvr - ok
15:32:10.0218 0x4154  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched        C:\Windows\ehome\ehsched.exe
15:32:10.0250 0x4154  ehSched - ok
15:32:10.0300 0x4154  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor        C:\Windows\system32\drivers\elxstor.sys
15:32:10.0328 0x4154  elxstor - ok
15:32:10.0345 0x4154  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
15:32:10.0362 0x4154  ErrDev - ok
15:32:10.0395 0x4154  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem    C:\Windows\system32\es.dll
15:32:10.0464 0x4154  EventSystem - ok
15:32:10.0489 0x4154  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat          C:\Windows\system32\drivers\exfat.sys
15:32:10.0527 0x4154  exfat - ok
15:32:10.0543 0x4154  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat        C:\Windows\system32\drivers\fastfat.sys
15:32:10.0582 0x4154  fastfat - ok
15:32:10.0639 0x4154  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax            C:\Windows\system32\fxssvc.exe
15:32:10.0690 0x4154  Fax - ok
15:32:10.0704 0x4154  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc            C:\Windows\system32\drivers\fdc.sys
15:32:10.0719 0x4154  fdc - ok
15:32:10.0735 0x4154  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost        C:\Windows\system32\fdPHost.dll
15:32:10.0769 0x4154  fdPHost - ok
15:32:10.0785 0x4154  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
15:32:10.0843 0x4154  FDResPub - ok
15:32:10.0869 0x4154  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
15:32:10.0883 0x4154  FileInfo - ok
15:32:10.0904 0x4154  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
15:32:10.0939 0x4154  Filetrace - ok
15:32:10.0951 0x4154  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
15:32:10.0965 0x4154  flpydisk - ok
15:32:10.0987 0x4154  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
15:32:11.0007 0x4154  FltMgr - ok
15:32:11.0064 0x4154  [ D5A775990A7C202A037378FDBCDB6141, 27AD242914FAFB7A27B3045C0F0F6AFE6873FE331A51D8BB29A63B5D84C72EFB ] FontCache      C:\Windows\system32\FntCache.dll
15:32:11.0144 0x4154  FontCache - ok
15:32:11.0224 0x4154  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
15:32:11.0238 0x4154  FontCache3.0.0.0 - ok
15:32:11.0244 0x4154  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
15:32:11.0257 0x4154  FsDepends - ok
15:32:11.0294 0x4154  [ B16B626996C74B564005BA855C5DEE90, B432C669EB610C262B18F3F8308EEE1B910DE7F7BC2A8EB5483419DC52A07AE1 ] fssfltr        C:\Windows\system32\DRIVERS\fssfltr.sys
15:32:11.0330 0x4154  fssfltr - ok
15:32:11.0480 0x4154  [ 812E1BA5C52A78F13EA6AA10DF708B1D, CF1C4D8E072CF0D66C977DFA4C852E5CE757843BEAF5D29454D26A9AC5766E61 ] fsssvc          C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
15:32:11.0559 0x4154  fsssvc - ok
15:32:11.0572 0x4154  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
15:32:11.0583 0x4154  Fs_Rec - ok
15:32:11.0642 0x4154  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
15:32:11.0675 0x4154  fvevol - ok
15:32:11.0779 0x4154  [ 4632BB93B668004965246D7911E2DD05, B4CCFFC488C94A0D82A6CC11A9BA2616B339217164719EABA3CF59913EA899FB ] fwlanusb4      C:\Windows\system32\DRIVERS\fwlanusb4.sys
15:32:11.0863 0x4154  fwlanusb4 - ok
15:32:11.0883 0x4154  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
15:32:11.0898 0x4154  gagp30kx - ok
15:32:12.0063 0x4154  [ B17D0BDBDDF4BD4709D6CA3147D409C0, B83F0D9891190226D2D7D50DE27B61B5FC04B6942C37B78856C45B3309527D9B ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
15:32:12.0101 0x4154  GfExperienceService - ok
15:32:12.0141 0x4154  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc          C:\Windows\System32\gpsvc.dll
15:32:12.0213 0x4154  gpsvc - ok
15:32:12.0289 0x4154  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:32:12.0315 0x4154  gupdate - ok
15:32:12.0331 0x4154  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
15:32:12.0346 0x4154  gupdatem - ok
15:32:12.0371 0x4154  [ 1E6438D4EA6E1174A3B3B1EDC4DE660B, F9995CFEC7BBFE10B06EEE04CA6B49658275C43096E57747BFF9C2C31A0F9011 ] hamachi        C:\Windows\system32\DRIVERS\hamachi.sys
15:32:12.0381 0x4154  hamachi - ok
15:32:12.0491 0x4154  [ 2ADED86ED9B92885378467CFEE9ABE8F, 78703B6E51C5E7DCFFBA9F15C404DB2A0054FE8F2F92B7AD470B08498995712A ] Hamachi2Svc    C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
15:32:12.0559 0x4154  Hamachi2Svc - ok
15:32:12.0605 0x4154  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
15:32:12.0625 0x4154  hcw85cir - ok
15:32:12.0647 0x4154  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
15:32:12.0673 0x4154  HdAudAddService - ok
15:32:12.0683 0x4154  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
15:32:12.0719 0x4154  HDAudBus - ok
15:32:12.0737 0x4154  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt        C:\Windows\system32\drivers\HidBatt.sys
15:32:12.0776 0x4154  HidBatt - ok
15:32:12.0795 0x4154  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
15:32:12.0837 0x4154  HidBth - ok
15:32:12.0868 0x4154  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr          C:\Windows\system32\drivers\hidir.sys
15:32:12.0904 0x4154  HidIr - ok
15:32:12.0943 0x4154  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv        C:\Windows\system32\hidserv.dll
15:32:12.0980 0x4154  hidserv - ok
15:32:13.0023 0x4154  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
15:32:13.0051 0x4154  HidUsb - ok
15:32:13.0093 0x4154  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
15:32:13.0142 0x4154  hkmsvc - ok
15:32:13.0192 0x4154  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
15:32:13.0257 0x4154  HomeGroupListener - ok
15:32:13.0299 0x4154  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
15:32:13.0334 0x4154  HomeGroupProvider - ok
15:32:13.0358 0x4154  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
15:32:13.0371 0x4154  HpSAMD - ok
15:32:13.0455 0x4154  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
15:32:13.0543 0x4154  HTTP - ok
15:32:13.0562 0x4154  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
15:32:13.0574 0x4154  hwpolicy - ok
15:32:13.0589 0x4154  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
15:32:13.0619 0x4154  i8042prt - ok
15:32:13.0659 0x4154  [ 8180A2392E732E8871589B54FAB6991F, 20FF47D16702925531AF55402A29062F359DD61D029690A02A5C191494B4E302 ] iaStor          C:\Windows\system32\drivers\iaStor.sys
15:32:13.0689 0x4154  iaStor - ok
15:32:13.0711 0x4154  [ 3A2C1EBCC6E5A7540AF36C36208F87D2, 8B97521CAF158B74595286BA969024D5AC89CC40650482DB95EF654DC71CFCF3 ] iaStorA        C:\Windows\system32\drivers\iaStorA.sys
15:32:13.0736 0x4154  iaStorA - ok
15:32:13.0834 0x4154  [ 1200D69DA2328EA64CDC448F08D5E57B, D81D6CBB6A4F61C8B134B06AFCEF5712524340CB972D9D6077912F8EDBB66C5E ] iaStorF        C:\Windows\system32\drivers\iaStorF.sys
15:32:13.0870 0x4154  iaStorF - ok
15:32:13.0925 0x4154  [ E6A6A5462E693D63F7C6729945C48E9E, F6D278092F5CBF3A6C075839D4C937818A2C962884BF18C21C54243CC3AD6973 ] iaStorS        C:\Windows\system32\drivers\iaStorS.sys
15:32:14.0018 0x4154  iaStorS - ok
15:32:14.0049 0x4154  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
15:32:14.0087 0x4154  iaStorV - ok
15:32:14.0178 0x4154  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc          C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
15:32:14.0226 0x4154  idsvc - ok
15:32:14.0231 0x4154  IEEtwCollectorService - ok
15:32:14.0245 0x4154  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp          C:\Windows\system32\drivers\iirsp.sys
15:32:14.0258 0x4154  iirsp - ok
15:32:14.0316 0x4154  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
15:32:14.0364 0x4154  IKEEXT - ok
15:32:14.0531 0x4154  [ 8CAA2A543155675D09B0D5239E31EC99, 033CF96E110136A59E01C4D26FE3681862C0993938959059A37A34DC1C0E1D49 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
15:32:14.0665 0x4154  IntcAzAudAddService - ok
15:32:14.0712 0x4154  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
15:32:14.0741 0x4154  intelide - ok
15:32:14.0757 0x4154  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\drivers\intelppm.sys
15:32:14.0774 0x4154  intelppm - ok
15:32:14.0822 0x4154  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
15:32:14.0857 0x4154  IPBusEnum - ok
15:32:14.0870 0x4154  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:32:14.0906 0x4154  IpFilterDriver - ok
15:32:14.0981 0x4154  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
15:32:15.0028 0x4154  iphlpsvc - ok
15:32:15.0041 0x4154  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV        C:\Windows\system32\drivers\IPMIDrv.sys
15:32:15.0070 0x4154  IPMIDRV - ok
15:32:15.0094 0x4154  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
15:32:15.0152 0x4154  IPNAT - ok
15:32:15.0169 0x4154  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
15:32:15.0187 0x4154  IRENUM - ok
15:32:15.0201 0x4154  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
15:32:15.0214 0x4154  isapnp - ok
15:32:15.0263 0x4154  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
15:32:15.0303 0x4154  iScsiPrt - ok
15:32:15.0323 0x4154  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
15:32:15.0338 0x4154  kbdclass - ok
15:32:15.0342 0x4154  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
15:32:15.0364 0x4154  kbdhid - ok
15:32:15.0379 0x4154  [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] KeyIso          C:\Windows\system32\lsass.exe
15:32:15.0408 0x4154  KeyIso - ok
15:32:15.0451 0x4154  [ 3A8C03156C3E31E70EF84E48CA179B46, E25E43D53BB6EE1B5F34C95B4FAD111B37A36367B8D047B10FC614DEE13658E2 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
15:32:15.0465 0x4154  KSecDD - ok
15:32:15.0515 0x4154  [ C6330F7C2E92A00E6773E82F79078AFC, D8B851BF4FCE85F2A269F0B46BC7EC5A118FCFDACE8460E7B54C1A7CE306774A ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
15:32:15.0550 0x4154  KSecPkg - ok
15:32:15.0563 0x4154  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk        C:\Windows\system32\drivers\ksthunk.sys
15:32:15.0627 0x4154  ksthunk - ok
15:32:15.0737 0x4154  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm          C:\Windows\system32\msdtckrm.dll
15:32:15.0805 0x4154  KtmRm - ok
15:32:15.0862 0x4154  [ B8040D3B97B16B89701E31A17353856C, 41690ACB26536B0AA1CC3B5388F824C9C1CD9648957C8488BAE5F3D57BEE3D85 ] L1C            C:\Windows\system32\DRIVERS\L1C62x64.sys
15:32:15.0877 0x4154  L1C - ok
15:32:15.0949 0x4154  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll
15:32:15.0992 0x4154  LanmanServer - ok
15:32:16.0048 0x4154  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
15:32:16.0109 0x4154  LanmanWorkstation - ok
15:32:16.0130 0x4154  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
15:32:16.0192 0x4154  lltdio - ok
15:32:16.0267 0x4154  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc        C:\Windows\System32\lltdsvc.dll
15:32:16.0312 0x4154  lltdsvc - ok
15:32:16.0351 0x4154  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts        C:\Windows\System32\lmhsvc.dll
15:32:16.0390 0x4154  lmhosts - ok
15:32:16.0443 0x4154  [ D6BF6FD055BD719F3D62E51B90857159, A7777D18E404164B4DA531AD94D2A712D9CC6A9288795B7388037752A558E96F ] LMIGuardianSvc  C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
15:32:16.0463 0x4154  LMIGuardianSvc - ok
15:32:16.0487 0x4154  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
15:32:16.0503 0x4154  LSI_FC - ok
15:32:16.0509 0x4154  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS        C:\Windows\system32\drivers\lsi_sas.sys
15:32:16.0523 0x4154  LSI_SAS - ok
15:32:16.0533 0x4154  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
15:32:16.0548 0x4154  LSI_SAS2 - ok
15:32:16.0556 0x4154  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
15:32:16.0571 0x4154  LSI_SCSI - ok
15:32:16.0585 0x4154  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv          C:\Windows\system32\drivers\luafv.sys
15:32:16.0640 0x4154  luafv - ok
15:32:16.0713 0x4154  [ 47701ECA633574E122687693B5C5D35C, 1DB12767462347504956450FAD0D90B6E682E2E8959A6C5DF3792C3C3DA289B1 ] mbamchameleon  C:\Windows\system32\drivers\mbamchameleon.sys
15:32:16.0725 0x4154  mbamchameleon - ok
15:32:16.0798 0x4154  [ CFBC6C6D8A492697CABD1D353EE64933, DDAA844908324740C891EB8F08E2A8BB00457063B31C4A762745C1C2415FC12D ] MBAMProtector  C:\Windows\system32\drivers\mbam.sys
15:32:16.0810 0x4154  MBAMProtector - ok
15:32:16.0910 0x4154  [ 40C126CB15FAB7D6C66490DCA9C1AED2, B32CEE2D2409232C245427D5E9647FDF59AF1D8AB5E8A98EE2D1F1314599FD14 ] MBAMService    C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
15:32:16.0969 0x4154  MBAMService - ok
15:32:17.0014 0x4154  [ 78488AF2AB2111D67B3C4044707A519B, 7AA71B9C4C7949A1A21F60EF7CCEDE0079794990696B60557B5DC86F4D47223A ] MBAMSwissArmy  C:\Windows\system32\drivers\MBAMSwissArmy.sys
15:32:17.0028 0x4154  MBAMSwissArmy - ok
15:32:17.0049 0x4154  [ D61070CFAD43038DC56AEAD9BFE9CE2A, BD77AEF60E7FD2015CB14A464799304359547146C14A47F8D25274ACFA2E42D5 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
15:32:17.0061 0x4154  MBAMWebAccessControl - ok
15:32:17.0088 0x4154  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc        C:\Windows\system32\Mcx2Svc.dll
15:32:17.0106 0x4154  Mcx2Svc - ok
15:32:17.0120 0x4154  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas        C:\Windows\system32\drivers\megasas.sys
15:32:17.0132 0x4154  megasas - ok
15:32:17.0151 0x4154  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
15:32:17.0169 0x4154  MegaSR - ok
15:32:17.0207 0x4154  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS          C:\Windows\system32\mmcss.dll
15:32:17.0241 0x4154  MMCSS - ok
15:32:17.0255 0x4154  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem          C:\Windows\system32\drivers\modem.sys
15:32:17.0291 0x4154  Modem - ok
15:32:17.0328 0x4154  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor        C:\Windows\system32\DRIVERS\monitor.sys
15:32:17.0344 0x4154  monitor - ok
15:32:17.0350 0x4154  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
15:32:17.0363 0x4154  mouclass - ok
15:32:17.0374 0x4154  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
15:32:17.0390 0x4154  mouhid - ok
15:32:17.0407 0x4154  [ 67050452C0118BAF2883928E6FCCFE47, 335FC0AEB7B47DCC7CE0CF3F424EB60ACB1327D2FF6515F04D9AC03A10FF1E31 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
15:32:17.0423 0x4154  mountmgr - ok
15:32:17.0452 0x4154  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
15:32:17.0468 0x4154  mpio - ok
15:32:17.0485 0x4154  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
15:32:17.0521 0x4154  mpsdrv - ok
15:32:17.0551 0x4154  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
15:32:17.0618 0x4154  MpsSvc - ok
15:32:17.0669 0x4154  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
15:32:17.0740 0x4154  MRxDAV - ok
15:32:17.0794 0x4154  [ ACB6782973BD93760D597FC7BB37E692, 9B6EC2858D236DCE61FD5E0247F4D947A5DC484C9C0AABFDAF8270ABA392E787 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
15:32:17.0848 0x4154  mrxsmb - ok
15:32:17.0887 0x4154  [ 262BF7BB7D0E44CFAA9B12A1E0A6EDF1, CCC3A4CE929C7C8B07C1038BBE8425590CE14F5C37E1D5608978A3AD2F41519C ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:32:17.0926 0x4154  mrxsmb10 - ok
15:32:17.0968 0x4154  [ 8C0376974AA28398FF501E78C04ACB30, 81CE67BE933F67F760A72BF9B581F33BC151D98970765FE4425450A2EF450409 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:32:18.0008 0x4154  mrxsmb20 - ok
15:32:18.0047 0x4154  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
15:32:18.0060 0x4154  msahci - ok
15:32:18.0114 0x4154  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm          C:\Windows\system32\drivers\msdsm.sys
15:32:18.0138 0x4154  msdsm - ok
15:32:18.0176 0x4154  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC          C:\Windows\System32\msdtc.exe
15:32:18.0207 0x4154  MSDTC - ok
15:32:18.0239 0x4154  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
15:32:18.0277 0x4154  Msfs - ok
15:32:18.0313 0x4154  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
15:32:18.0345 0x4154  mshidkmdf - ok
15:32:18.0361 0x4154  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
15:32:18.0372 0x4154  msisadrv - ok
15:32:18.0418 0x4154  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
15:32:18.0456 0x4154  MSiSCSI - ok
15:32:18.0460 0x4154  msiserver - ok
15:32:18.0474 0x4154  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
15:32:18.0528 0x4154  MSKSSRV - ok
15:32:18.0546 0x4154  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
15:32:18.0596 0x4154  MSPCLOCK - ok
15:32:18.0621 0x4154  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
15:32:18.0655 0x4154  MSPQM - ok
15:32:18.0681 0x4154  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
15:32:18.0704 0x4154  MsRPC - ok
15:32:18.0721 0x4154  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
15:32:18.0734 0x4154  mssmbios - ok
15:32:18.0739 0x4154  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
15:32:18.0794 0x4154  MSTEE - ok
15:32:18.0822 0x4154  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
15:32:18.0836 0x4154  MTConfig - ok
15:32:18.0841 0x4154  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup            C:\Windows\system32\Drivers\mup.sys
15:32:18.0854 0x4154  Mup - ok
15:32:18.0916 0x4154  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
15:32:19.0000 0x4154  napagent - ok
15:32:19.0079 0x4154  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
15:32:19.0111 0x4154  NativeWifiP - ok
15:32:19.0209 0x4154  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys
15:32:19.0245 0x4154  NDIS - ok
15:32:19.0260 0x4154  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
15:32:19.0293 0x4154  NdisCap - ok
15:32:19.0310 0x4154  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
15:32:19.0359 0x4154  NdisTapi - ok
15:32:19.0385 0x4154  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
15:32:19.0440 0x4154  Ndisuio - ok
15:32:19.0463 0x4154  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
15:32:19.0500 0x4154  NdisWan - ok
15:32:19.0509 0x4154  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
15:32:19.0546 0x4154  NDProxy - ok
15:32:19.0561 0x4154  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
15:32:19.0596 0x4154  NetBIOS - ok
15:32:19.0674 0x4154  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
15:32:20.0086 0x4154  NetBT - ok
15:32:20.0115 0x4154  [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] Netlogon        C:\Windows\system32\lsass.exe
15:32:20.0154 0x4154  Netlogon - ok
15:32:20.0182 0x4154  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
15:32:20.0228 0x4154  Netman - ok
15:32:20.0259 0x4154  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:32:20.0276 0x4154  NetMsmqActivator - ok
15:32:20.0293 0x4154  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:32:20.0309 0x4154  NetPipeActivator - ok
15:32:20.0341 0x4154  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
15:32:20.0384 0x4154  netprofm - ok
15:32:20.0392 0x4154  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:32:20.0409 0x4154  NetTcpActivator - ok
15:32:20.0415 0x4154  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
15:32:20.0430 0x4154  NetTcpPortSharing - ok
15:32:20.0468 0x4154  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960        C:\Windows\system32\drivers\nfrd960.sys
15:32:20.0481 0x4154  nfrd960 - ok
15:32:20.0537 0x4154  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll
15:32:20.0569 0x4154  NlaSvc - ok
15:32:20.0586 0x4154  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
15:32:20.0642 0x4154  Npfs - ok
15:32:20.0667 0x4154  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi            C:\Windows\system32\nsisvc.dll
15:32:20.0701 0x4154  nsi - ok
15:32:20.0717 0x4154  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
15:32:20.0777 0x4154  nsiproxy - ok
15:32:20.0878 0x4154  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
15:32:20.0954 0x4154  Ntfs - ok
15:32:20.0974 0x4154  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
15:32:21.0006 0x4154  Null - ok
15:32:21.0038 0x4154  [ EA4F586EC10A09E2514D03D3E7AB89BF, D9799CC66AEAFB3A83CE82BBC20082F5E3370AB7942B8426D71AA91B1FE2B5F7 ] NVFLASH        C:\Windows\system32\drivers\nvflash.sys
15:32:21.0071 0x4154  NVFLASH - ok
15:32:21.0101 0x4154  [ B9E5A80F646DDFEF158773722A466EA3, 028979FE600D17DA70445F44D81FAE4EDA3478FCC81FA5506133CCAC37C4E2BF ] NVHDA          C:\Windows\system32\drivers\nvhda64v.sys
15:32:21.0119 0x4154  NVHDA - ok
15:32:21.0485 0x4154  [ 36BAB895547EA82892292F05FA02142E, 224D165CE3ECB0EF35C18D09507AB43ADC4A7AD12E507F31230012943C83BEDB ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
15:32:21.0914 0x4154  nvlddmkm - ok
15:32:22.0096 0x4154  [ C2909BD26906E1D05D77B1D48B48E94A, 5642571FFDBDC63F0E3B1477337103517ABF7C50EBEDA63EF8E162E44C7B2538 ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
15:32:22.0150 0x4154  NvNetworkService - ok
15:32:22.0177 0x4154  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
15:32:22.0192 0x4154  nvraid - ok
15:32:22.0203 0x4154  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
15:32:22.0219 0x4154  nvstor - ok
15:32:22.0337 0x4154  [ 60C9EC53F9CFBFBE38E9C79B88A6B19F, D89D6C62AB0A3224D850B639E4D7D7265BF183BEE0C60F27FEDDF0194504B078 ] NvStreamKms    C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
15:32:22.0350 0x4154  NvStreamKms - ok
15:32:22.0539 0x4154  [ 5A773713C332F8760ABB915C24675E8F, DA453D341529B34188D5B235B17BD0FDAE84129539FC212F34B9FCC42DC0549C ] NvStreamSvc    C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
15:32:22.0682 0x4154  NvStreamSvc - ok
15:32:22.0763 0x4154  [ 6B245B7F96F901891636814B5A7A9088, BC6DF13929AEBA2CF5DC8449FF9D5F73497DF8E9760AFA93B56543D86BE940C3 ] nvsvc          C:\Windows\system32\nvvsvc.exe
15:32:22.0798 0x4154  nvsvc - ok
15:32:22.0826 0x4154  [ 35DFC12FD7E44B7CB8CCD7E5A2B3975A, 36E0E39646636F6E027691E5C3903C51479B3F707BDEA40F460FD27E357DA14E ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
15:32:22.0840 0x4154  nvvad_WaveExtensible - ok
15:32:22.0850 0x4154  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
15:32:22.0864 0x4154  nv_agp - ok
15:32:22.0875 0x4154  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
15:32:22.0905 0x4154  ohci1394 - ok
15:32:23.0021 0x4154  [ 29B093BA6759118DB14AF41026385E03, 660176D122344A79E52FFD9FE3D32D1967D9B22BC4AD76549D839B09693D0713 ] Origin Client Service C:\Program Files (x86)\Origin\OriginClientService.exe
15:32:23.0109 0x4154  Origin Client Service - ok
15:32:23.0131 0x4154  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
15:32:23.0169 0x4154  p2pimsvc - ok
15:32:23.0199 0x4154  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
15:32:23.0226 0x4154  p2psvc - ok
15:32:23.0245 0x4154  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport        C:\Windows\system32\drivers\parport.sys
15:32:23.0266 0x4154  Parport - ok
15:32:23.0304 0x4154  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr        C:\Windows\system32\drivers\partmgr.sys
15:32:23.0320 0x4154  partmgr - ok
15:32:23.0366 0x4154  [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc          C:\Windows\System32\pcasvc.dll
15:32:23.0424 0x4154  PcaSvc - ok
15:32:23.0443 0x4154  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci            C:\Windows\system32\drivers\pci.sys
15:32:23.0461 0x4154  pci - ok
15:32:23.0506 0x4154  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
15:32:23.0520 0x4154  pciide - ok
15:32:23.0562 0x4154  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
15:32:23.0579 0x4154  pcmcia - ok
15:32:23.0592 0x4154  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw            C:\Windows\system32\drivers\pcw.sys
15:32:23.0606 0x4154  pcw - ok
15:32:23.0654 0x4154  [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
15:32:23.0705 0x4154  PEAUTH - ok
15:32:23.0803 0x4154  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
15:32:23.0837 0x4154  PerfHost - ok
15:32:23.0904 0x4154  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla            C:\Windows\system32\pla.dll
15:32:24.0015 0x4154  pla - ok
15:32:24.0057 0x4154  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
15:32:24.0193 0x4154  PlugPlay - ok
15:32:24.0239 0x4154  PnkBstrA - ok
15:32:24.0326 0x4154  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
15:32:24.0421 0x4154  PNRPAutoReg - ok
15:32:24.0453 0x4154  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
15:32:24.0474 0x4154  PNRPsvc - ok
15:32:24.0551 0x4154  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
15:32:24.0618 0x4154  PolicyAgent - ok
15:32:24.0676 0x4154  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power          C:\Windows\system32\umpo.dll
15:32:24.0713 0x4154  Power - ok
15:32:24.0754 0x4154  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
15:32:24.0803 0x4154  PptpMiniport - ok
15:32:24.0843 0x4154  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor      C:\Windows\system32\drivers\processr.sys
15:32:24.0879 0x4154  Processor - ok
15:32:24.0912 0x4154  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc        C:\Windows\system32\profsvc.dll
15:32:24.0938 0x4154  ProfSvc - ok
15:32:24.0958 0x4154  [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] ProtectedStorage C:\Windows\system32\lsass.exe
15:32:24.0971 0x4154  ProtectedStorage - ok
15:32:24.0989 0x4154  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
15:32:25.0025 0x4154  Psched - ok
15:32:25.0091 0x4154  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
15:32:25.0227 0x4154  ql2300 - ok
15:32:25.0258 0x4154  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
15:32:25.0276 0x4154  ql40xx - ok
15:32:25.0319 0x4154  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE          C:\Windows\system32\qwave.dll
15:32:25.0346 0x4154  QWAVE - ok
15:32:25.0361 0x4154  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
15:32:25.0383 0x4154  QWAVEdrv - ok
15:32:25.0392 0x4154  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
15:32:25.0447 0x4154  RasAcd - ok
15:32:25.0482 0x4154  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn    C:\Windows\system32\DRIVERS\AgileVpn.sys
15:32:25.0517 0x4154  RasAgileVpn - ok
15:32:25.0537 0x4154  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto        C:\Windows\System32\rasauto.dll
15:32:25.0574 0x4154  RasAuto - ok
15:32:25.0597 0x4154  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp        C:\Windows\system32\DRIVERS\rasl2tp.sys
15:32:25.0632 0x4154  Rasl2tp - ok
15:32:25.0660 0x4154  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
15:32:25.0731 0x4154  RasMan - ok
15:32:25.0758 0x4154  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
15:32:25.0811 0x4154  RasPppoe - ok
15:32:25.0831 0x4154  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp        C:\Windows\system32\DRIVERS\rassstp.sys
15:32:25.0887 0x4154  RasSstp - ok
15:32:25.0990 0x4154  [ 170C5DE900F60768C380ECD8A812512F, BFD085C32CF25E8261EF4BCFA5903A496785BCDA08037F4EB580BBDEDF42B656 ] Razer Game Scanner Service C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
15:32:26.0005 0x4154  Razer Game Scanner Service - ok
15:32:26.0027 0x4154  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
15:32:26.0069 0x4154  rdbss - ok
15:32:26.0088 0x4154  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys
15:32:26.0104 0x4154  rdpbus - ok
15:32:26.0117 0x4154  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
15:32:26.0157 0x4154  RDPCDD - ok
15:32:26.0173 0x4154  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
15:32:26.0206 0x4154  RDPENCDD - ok
15:32:26.0212 0x4154  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
15:32:26.0244 0x4154  RDPREFMP - ok
15:32:26.0331 0x4154  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
15:32:26.0370 0x4154  RdpVideoMiniport - ok
15:32:26.0419 0x4154  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD          C:\Windows\system32\drivers\RDPWD.sys
15:32:26.0448 0x4154  RDPWD - ok
15:32:26.0474 0x4154  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
15:32:26.0491 0x4154  rdyboost - ok
15:32:26.0527 0x4154  Realtek11nSU - ok
15:32:26.0553 0x4154  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
15:32:26.0612 0x4154  RemoteAccess - ok
15:32:26.0643 0x4154  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
15:32:26.0705 0x4154  RemoteRegistry - ok
15:32:26.0727 0x4154  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
15:32:26.0762 0x4154  RpcEptMapper - ok
15:32:26.0801 0x4154  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
15:32:26.0820 0x4154  RpcLocator - ok
15:32:26.0841 0x4154  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs          C:\Windows\system32\rpcss.dll
15:32:26.0892 0x4154  RpcSs - ok
15:32:26.0905 0x4154  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
15:32:26.0941 0x4154  rspndr - ok
15:32:26.0945 0x4154  RTL8192cu - ok
15:32:26.0949 0x4154  RTL8192su - ok
15:32:26.0990 0x4154  [ 2ADA9F126235A56EDC9F90C888E4D142, 4CE692D045F6F8A7A1D309376648E81066F6EBAF94580F2ED0B0FFC1FE6FE44E ] RZMAELSTROMVADService C:\Windows\system32\drivers\RzMaelstromVAD.sys
15:32:27.0039 0x4154  RZMAELSTROMVADService - ok
15:32:27.0078 0x4154  [ 0C90E6CEA576095888E779E5BD9DD060, 8A13A92D5A8E577E2B919CC879FA8CFA1FAD0A6BFF0CF4FCC59B8E74AB22A673 ] rzpmgrk        C:\Windows\system32\drivers\rzpmgrk.sys
15:32:27.0094 0x4154  rzpmgrk - ok
15:32:27.0139 0x4154  [ 288471F132C7249F598032D03575F083, 9E3430D5E0E93BC4A5DCCC985053912065E65722BFC2EAF431BC1DA91410434C ] rzpnk          C:\Windows\system32\drivers\rzpnk.sys
15:32:27.0159 0x4154  rzpnk - ok
15:32:27.0192 0x4154  [ ED82FB8A5330D728193644D7F136B865, D5D3DFD1934B6EF373C20A346D130EEFFB6B493045B6A89EA2EBDF45B05F5372 ] RZSURROUNDVADService C:\Windows\system32\drivers\RzSurroundVAD.sys
15:32:27.0209 0x4154  RZSURROUNDVADService - ok
15:32:27.0225 0x4154  [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] SamSs          C:\Windows\system32\lsass.exe
15:32:27.0238 0x4154  SamSs - ok
15:32:27.0253 0x4154  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
15:32:27.0267 0x4154  sbp2port - ok
15:32:27.0308 0x4154  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
15:32:27.0362 0x4154  SCardSvr - ok
15:32:27.0387 0x4154  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
15:32:27.0441 0x4154  scfilter - ok
15:32:27.0551 0x4154  [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule        C:\Windows\system32\schedsvc.dll
15:32:27.0624 0x4154  Schedule - ok
15:32:27.0663 0x4154  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc    C:\Windows\System32\certprop.dll
15:32:27.0696 0x4154  SCPolicySvc - ok
15:32:27.0709 0x4154  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
15:32:27.0735 0x4154  SDRSVC - ok
15:32:27.0747 0x4154  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
15:32:27.0819 0x4154  secdrv - ok
15:32:27.0834 0x4154  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll
15:32:27.0909 0x4154  seclogon - ok
15:32:27.0938 0x4154  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll
15:32:28.0001 0x4154  SENS - ok
15:32:28.0008 0x4154  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
15:32:28.0043 0x4154  SensrSvc - ok
15:32:28.0066 0x4154  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum        C:\Windows\system32\drivers\serenum.sys
15:32:28.0081 0x4154  Serenum - ok
15:32:28.0098 0x4154  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\drivers\serial.sys
15:32:28.0126 0x4154  Serial - ok
15:32:28.0155 0x4154  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys
15:32:28.0216 0x4154  sermouse - ok
15:32:28.0243 0x4154  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
15:32:28.0288 0x4154  SessionEnv - ok
15:32:28.0313 0x4154  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk        C:\Windows\system32\drivers\sffdisk.sys
15:32:28.0329 0x4154  sffdisk - ok
15:32:28.0356 0x4154  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
15:32:28.0397 0x4154  sffp_mmc - ok
15:32:28.0435 0x4154  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd        C:\Windows\system32\drivers\sffp_sd.sys
15:32:28.0453 0x4154  sffp_sd - ok
15:32:28.0497 0x4154  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy        C:\Windows\system32\drivers\sfloppy.sys
15:32:28.0511 0x4154  sfloppy - ok
15:32:28.0561 0x4154  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
15:32:28.0606 0x4154  SharedAccess - ok
15:32:28.0670 0x4154  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
15:32:28.0730 0x4154  ShellHWDetection - ok
15:32:28.0757 0x4154  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
15:32:28.0769 0x4154  SiSRaid2 - ok
15:32:28.0778 0x4154  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
15:32:28.0792 0x4154  SiSRaid4 - ok
15:32:28.0838 0x4154  [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate    C:\Program Files (x86)\Skype\Updater\Updater.exe
15:32:28.0860 0x4154  SkypeUpdate - ok
15:32:28.0879 0x4154  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb            C:\Windows\system32\DRIVERS\smb.sys
15:32:28.0917 0x4154  Smb - ok
15:32:28.0938 0x4154  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
15:32:28.0953 0x4154  SNMPTRAP - ok
15:32:28.0969 0x4154  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr          C:\Windows\system32\drivers\spldr.sys
15:32:28.0981 0x4154  spldr - ok
15:32:29.0040 0x4154  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler        C:\Windows\System32\spoolsv.exe
15:32:29.0114 0x4154  Spooler - ok
15:32:29.0233 0x4154  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
15:32:29.0393 0x4154  sppsvc - ok
15:32:29.0451 0x4154  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify    C:\Windows\system32\sppuinotify.dll
15:32:29.0511 0x4154  sppuinotify - ok
15:32:29.0682 0x4154  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv            C:\Windows\system32\DRIVERS\srv.sys
15:32:29.0728 0x4154  srv - ok
15:32:29.0757 0x4154  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
15:32:29.0782 0x4154  srv2 - ok
15:32:29.0795 0x4154  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
15:32:29.0813 0x4154  srvnet - ok
15:32:29.0834 0x4154  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
15:32:29.0873 0x4154  SSDPSRV - ok
15:32:29.0889 0x4154  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc        C:\Windows\system32\sstpsvc.dll
15:32:29.0927 0x4154  SstpSvc - ok
15:32:30.0020 0x4154  [ D31201BD8782752BD69DBE1E5DDF9AC5, 98B72690B4E6CC1B694C655DD31CB1FB56B76B62A32CFB748AF78F4C072D9740 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
15:32:30.0049 0x4154  Steam Client Service - ok
15:32:30.0162 0x4154  [ C368FAF3084E3978462159F1DDAFF54F, F7DD88038E002EF3D2BCA648FE7CF0F92347E901C5F495D8D8E4D24076E895CD ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
15:32:30.0181 0x4154  Stereo Service - ok
15:32:30.0189 0x4154  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
15:32:30.0202 0x4154  stexstor - ok
15:32:30.0262 0x4154  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
15:32:30.0325 0x4154  stisvc - ok
15:32:30.0347 0x4154  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\drivers\swenum.sys
15:32:30.0363 0x4154  swenum - ok
15:32:30.0409 0x4154  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv          C:\Windows\System32\swprv.dll
15:32:30.0476 0x4154  swprv - ok
15:32:30.0569 0x4154  [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain        C:\Windows\system32\sysmain.dll
15:32:30.0689 0x4154  SysMain - ok
15:32:30.0708 0x4154  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
15:32:30.0731 0x4154  TabletInputService - ok
15:32:30.0748 0x4154  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv        C:\Windows\System32\tapisrv.dll
15:32:30.0792 0x4154  TapiSrv - ok
15:32:30.0812 0x4154  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS            C:\Windows\System32\tbssvc.dll
15:32:30.0871 0x4154  TBS - ok
15:32:30.0968 0x4154  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
15:32:31.0057 0x4154  Tcpip - ok
15:32:31.0118 0x4154  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
15:32:31.0173 0x4154  TCPIP6 - ok
15:32:31.0205 0x4154  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
15:32:31.0236 0x4154  tcpipreg - ok
15:32:31.0254 0x4154  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
15:32:31.0278 0x4154  TDPIPE - ok
15:32:31.0292 0x4154  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP          C:\Windows\system32\drivers\tdtcp.sys
15:32:31.0326 0x4154  TDTCP - ok
15:32:31.0360 0x4154  [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
15:32:31.0392 0x4154  tdx - ok
15:32:31.0650 0x4154  [ C0C121B537DA3AD87481C0502CACE462, E0FC2AC71B60C796DCD03217A510C47425FB7783713FCCC477130E69715D2B8D ] TeamViewer      C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
15:32:31.0792 0x4154  TeamViewer - ok
15:32:31.0822 0x4154  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\drivers\termdd.sys
15:32:31.0834 0x4154  TermDD - ok
15:32:31.0920 0x4154  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService    C:\Windows\System32\termsrv.dll
15:32:31.0993 0x4154  TermService - ok
15:32:32.0022 0x4154  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
15:32:32.0072 0x4154  Themes - ok
15:32:32.0109 0x4154  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER    C:\Windows\system32\mmcss.dll
15:32:32.0146 0x4154  THREADORDER - ok
15:32:32.0189 0x4154  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
15:32:32.0229 0x4154  TrkWks - ok
15:32:32.0309 0x4154  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
15:32:32.0378 0x4154  TrustedInstaller - ok
15:32:32.0428 0x4154  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
15:32:32.0442 0x4154  tssecsrv - ok
15:32:32.0485 0x4154  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
15:32:32.0515 0x4154  TsUsbFlt - ok
15:32:32.0555 0x4154  [ AD64450A4ABE076F5CB34CC08EEACB07, B5C386635441A19178E7FEEE299BA430C8D72F9110866C13A216B12A1080AD12 ] TsUsbGD        C:\Windows\system32\drivers\TsUsbGD.sys
15:32:32.0574 0x4154  TsUsbGD - ok
15:32:32.0588 0x4154  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
15:32:32.0644 0x4154  tunnel - ok
15:32:32.0665 0x4154  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
15:32:32.0679 0x4154  uagp35 - ok
15:32:32.0704 0x4154  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
15:32:32.0749 0x4154  udfs - ok
15:32:32.0765 0x4154  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect      C:\Windows\system32\UI0Detect.exe
15:32:32.0788 0x4154  UI0Detect - ok
15:32:32.0807 0x4154  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
15:32:32.0822 0x4154  uliagpkx - ok
15:32:32.0834 0x4154  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus          C:\Windows\system32\DRIVERS\umbus.sys
15:32:32.0857 0x4154  umbus - ok
15:32:32.0875 0x4154  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\drivers\umpass.sys
15:32:32.0893 0x4154  UmPass - ok
15:32:32.0918 0x4154  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
15:32:32.0973 0x4154  upnphost - ok
15:32:33.0023 0x4154  [ 5C3BE22E485B9BF11FCEFDC676C728D0, F55061066ECF6920D56518A677BB538C18B7F1BB150ED6DB3591408F44E8D53A ] USBAAPL64      C:\Windows\system32\Drivers\usbaapl64.sys
15:32:33.0046 0x4154  USBAAPL64 - detected UnsignedFile.Multi.Generic ( 1 )
15:32:43.0134 0x4154  USBAAPL64 ( UnsignedFile.Multi.Generic ) - warning
15:32:55.0742 0x4154  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
15:32:55.0768 0x4154  usbaudio - ok
15:32:55.0817 0x4154  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp        C:\Windows\system32\DRIVERS\usbccgp.sys
15:32:55.0881 0x4154  usbccgp - ok
15:32:55.0934 0x4154  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
15:32:55.0967 0x4154  usbcir - ok
15:32:56.0003 0x4154  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci        C:\Windows\system32\DRIVERS\usbehci.sys
15:32:56.0033 0x4154  usbehci - ok
15:32:56.0079 0x4154  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
15:32:56.0124 0x4154  usbhub - ok
15:32:56.0160 0x4154  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci        C:\Windows\system32\DRIVERS\usbohci.sys
15:32:56.0175 0x4154  usbohci - ok
15:32:56.0214 0x4154  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
15:32:56.0241 0x4154  usbprint - ok
15:32:56.0264 0x4154  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan        C:\Windows\system32\drivers\usbscan.sys
15:32:56.0311 0x4154  usbscan - ok
15:32:56.0327 0x4154  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR        C:\Windows\system32\DRIVERS\USBSTOR.SYS
15:32:56.0369 0x4154  USBSTOR - ok
15:32:56.0405 0x4154  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci        C:\Windows\system32\drivers\usbuhci.sys
15:32:56.0443 0x4154  usbuhci - ok
15:32:56.0475 0x4154  [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
15:32:56.0493 0x4154  usbvideo - ok
15:32:56.0536 0x4154  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms          C:\Windows\System32\uxsms.dll
15:32:56.0594 0x4154  UxSms - ok
15:32:56.0615 0x4154  [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] VaultSvc        C:\Windows\system32\lsass.exe
15:32:56.0630 0x4154  VaultSvc - ok
15:32:56.0641 0x4154  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
15:32:56.0653 0x4154  vdrvroot - ok
15:32:56.0682 0x4154  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds            C:\Windows\System32\vds.exe
15:32:56.0742 0x4154  vds - ok
15:32:56.0762 0x4154  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga            C:\Windows\system32\DRIVERS\vgapnp.sys
15:32:56.0779 0x4154  vga - ok
15:32:56.0793 0x4154  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave        C:\Windows\System32\drivers\vga.sys
15:32:56.0847 0x4154  VgaSave - ok
15:32:56.0874 0x4154  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp          C:\Windows\system32\drivers\vhdmp.sys
15:32:56.0892 0x4154  vhdmp - ok
15:32:56.0938 0x4154  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
15:32:56.0950 0x4154  viaide - ok
15:32:56.0971 0x4154  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
15:32:56.0984 0x4154  volmgr - ok
15:32:57.0006 0x4154  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
15:32:57.0033 0x4154  volmgrx - ok
15:32:57.0054 0x4154  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap        C:\Windows\system32\drivers\volsnap.sys
15:32:57.0075 0x4154  volsnap - ok
15:32:57.0099 0x4154  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid        C:\Windows\system32\drivers\vsmraid.sys
15:32:57.0115 0x4154  vsmraid - ok
15:32:57.0199 0x4154  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS            C:\Windows\system32\vssvc.exe
15:32:57.0315 0x4154  VSS - ok
15:32:57.0337 0x4154  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
15:32:57.0353 0x4154  vwifibus - ok
15:32:57.0367 0x4154  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
15:32:57.0408 0x4154  vwififlt - ok
15:32:57.0475 0x4154  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time        C:\Windows\system32\w32time.dll
15:32:57.0521 0x4154  W32Time - ok
15:32:57.0537 0x4154  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
15:32:57.0573 0x4154  WacomPen - ok
15:32:57.0597 0x4154  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
15:32:57.0631 0x4154  WANARP - ok
15:32:57.0636 0x4154  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
15:32:57.0670 0x4154  Wanarpv6 - ok
15:32:57.0731 0x4154  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
15:32:57.0814 0x4154  wbengine - ok
15:32:57.0833 0x4154  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
15:32:57.0874 0x4154  WbioSrvc - ok
15:32:57.0907 0x4154  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc        C:\Windows\System32\wcncsvc.dll
15:32:57.0937 0x4154  wcncsvc - ok
15:32:57.0944 0x4154  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
15:32:57.0996 0x4154  WcsPlugInService - ok
15:32:58.0009 0x4154  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys
15:32:58.0021 0x4154  Wd - ok
15:32:58.0077 0x4154  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
15:32:58.0129 0x4154  Wdf01000 - ok
15:32:58.0168 0x4154  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\Windows\system32\wdi.dll
15:32:58.0217 0x4154  WdiServiceHost - ok
15:32:58.0222 0x4154  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost  C:\Windows\system32\wdi.dll
15:32:58.0237 0x4154  WdiSystemHost - ok
15:32:58.0278 0x4154  [ 4E89FC53493704BF835F0300DC201C34, FB3080725E144D93512DED81047D21C0582BC3412250EFF37E039108D7351F53 ] WebClient      C:\Windows\System32\webclnt.dll
15:32:58.0307 0x4154  WebClient - ok
15:32:58.0327 0x4154  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
15:32:58.0367 0x4154  Wecsvc - ok
15:32:58.0388 0x4154  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
15:32:58.0426 0x4154  wercplsupport - ok
15:32:58.0442 0x4154  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
15:32:58.0479 0x4154  WerSvc - ok
15:32:58.0488 0x4154  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
15:32:58.0522 0x4154  WfpLwf - ok
15:32:58.0543 0x4154  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
15:32:58.0555 0x4154  WIMMount - ok
15:32:58.0594 0x4154  WinDefend - ok
15:32:58.0614 0x4154  WinHttpAutoProxySvc - ok
15:32:58.0695 0x4154  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
15:32:58.0768 0x4154  Winmgmt - ok
15:32:58.0860 0x4154  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM          C:\Windows\system32\WsmSvc.dll
15:32:58.0989 0x4154  WinRM - ok
15:32:59.0042 0x4154  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\drivers\WinUsb.sys
15:32:59.0059 0x4154  WinUsb - ok
15:32:59.0098 0x4154  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc        C:\Windows\System32\wlansvc.dll
15:32:59.0151 0x4154  Wlansvc - ok
15:32:59.0344 0x4154  [ 357CABBF155AFD1D3926E62539D2A3A7, C43CFF84E7D930B4999DC061AB0766B57AAD7540B3E6EE54605B10ECE90825F5 ] wlidsvc        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
15:32:59.0429 0x4154  wlidsvc - ok
15:32:59.0450 0x4154  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi        C:\Windows\system32\drivers\wmiacpi.sys
15:32:59.0490 0x4154  WmiAcpi - ok
15:32:59.0549 0x4154  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
15:32:59.0580 0x4154  wmiApSrv - ok
15:32:59.0624 0x4154  WMPNetworkSvc - ok
15:32:59.0638 0x4154  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
15:32:59.0667 0x4154  WPCSvc - ok
15:32:59.0686 0x4154  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
15:32:59.0713 0x4154  WPDBusEnum - ok
15:32:59.0731 0x4154  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
15:32:59.0784 0x4154  ws2ifsl - ok
15:32:59.0817 0x4154  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\system32\wscsvc.dll
15:32:59.0862 0x4154  wscsvc - ok
15:32:59.0866 0x4154  WSearch - ok
15:32:59.0974 0x4154  [ 291778E1A36716182AFBC1731B2DFEAB, C0B928CCCE8C496C90C42E0D294BAB51DC67C02B0D20CFB6A16B0AE1F51CC497 ] wuauserv        C:\Windows\system32\wuaueng.dll
15:33:00.0120 0x4154  wuauserv - ok
15:33:00.0170 0x4154  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
15:33:00.0211 0x4154  WudfPf - ok
15:33:00.0233 0x4154  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\drivers\WUDFRd.sys
15:33:00.0267 0x4154  WUDFRd - ok
15:33:00.0307 0x4154  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
15:33:00.0324 0x4154  wudfsvc - ok
15:33:00.0371 0x4154  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc        C:\Windows\System32\wwansvc.dll
15:33:00.0430 0x4154  WwanSvc - ok
15:33:00.0447 0x4154  ================ Scan global ===============================
15:33:00.0496 0x4154  [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\Windows\system32\basesrv.dll
15:33:00.0610 0x4154  [ 4AD1C61152A0199E3D7F9A82C07AC629, A4A42C7757EB084EE368A6BC4EBAB0C47BE41B0B4119A6AECD1B8E3332A7C5D5 ] C:\Windows\system32\winsrv.dll
15:33:00.0645 0x4154  [ 4AD1C61152A0199E3D7F9A82C07AC629, A4A42C7757EB084EE368A6BC4EBAB0C47BE41B0B4119A6AECD1B8E3332A7C5D5 ] C:\Windows\system32\winsrv.dll
15:33:00.0772 0x4154  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
15:33:00.0826 0x4154  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe
15:33:00.0843 0x4154  [ Global ] - ok
15:33:00.0843 0x4154  ================ Scan MBR ==================================
15:33:00.0856 0x4154  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
15:33:01.0139 0x4154  \Device\Harddisk0\DR0 - ok
15:33:01.0144 0x4154  [ E5FA06ACA0D60BA9C870D0EF3D9898C9 ] \Device\Harddisk1\DR1
15:33:01.0213 0x4154  \Device\Harddisk1\DR1 - ok
15:33:01.0214 0x4154  ================ Scan VBR ==================================
15:33:01.0216 0x4154  [ 966EF2D42AB9FDC284879B73B54370FC ] \Device\Harddisk0\DR0\Partition1
15:33:01.0237 0x4154  \Device\Harddisk0\DR0\Partition1 - ok
15:33:01.0240 0x4154  [ D1BF9184093D35D8CD4A914017F276BF ] \Device\Harddisk0\DR0\Partition2
15:33:01.0242 0x4154  \Device\Harddisk0\DR0\Partition2 - ok
15:33:01.0245 0x4154  [ 6B294BA0225077CD07100F968D8B8449 ] \Device\Harddisk1\DR1\Partition1
15:33:01.0247 0x4154  \Device\Harddisk1\DR1\Partition1 - ok
15:33:01.0247 0x4154  ================ Scan generic autorun ======================
15:33:01.0247 0x4154  Nvtmru - ok
15:33:01.0287 0x4154  [ DD81D91FF3B0763C392422865C9AC12E, F5691B8F200E3196E6808E932630E862F8F26F31CD949981373F23C9D87DB8B9 ] C:\Windows\system32\rundll32.exe
15:33:01.0302 0x4154  ShadowPlay - ok
15:33:01.0467 0x4154  [ 6BE70A935DFD72F47C29757305B50B1E, 6E76D7CA8C417750C2AFAD45344F5863CEA7798A2993716E21DE1997789D1746 ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
15:33:01.0537 0x4154  NvBackend - ok
15:33:01.0566 0x4154  Adobe Reader Speed Launcher - ok
15:33:01.0677 0x4154  [ 504C916D52ABA407FD4DC1E709AEA71E, 8F279620247481F28DF7D9FD4A81173396E39EB807E24587E89CAF1172CC846C ] C:\Program Files (x86)\avmwlanstick\wlangui.exe
15:33:01.0821 0x4154  AVMWlanClient - detected UnsignedFile.Multi.Generic ( 1 )
15:33:07.0956 0x4154  Detect skipped due to KSN trusted
15:33:07.0956 0x4154  AVMWlanClient - ok
15:33:08.0049 0x4154  [ 9CD2CE59011503579C102E4BA12968BE, A52469C8E272A319F56654BB72719050AAEF3484A67B4E6F598EBF707BFF1C06 ] C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
15:33:08.0072 0x4154  Razer Synapse - ok
15:33:08.0168 0x4154  [ 3ED4B26BD399D9328A770B16113057A9, 9C1408559C08B8D531E21E4D2D7B1DBEB0B012F8AFE1AC4362FD59FA210D9769 ] C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\IskuFXMonitor.exe
15:33:08.0187 0x4154  RoccatIskuFX - detected UnsignedFile.Multi.Generic ( 1 )
15:33:14.0312 0x4154  RoccatIskuFX ( UnsignedFile.Multi.Generic ) - warning
15:33:20.0191 0x4154  [ 5E7601CCBC2A98A4457E50612E0AEE73, 3F5FDCF1BEC5B134433F62ADD5C2931F700F2B7CBEDB0A98EF1362BF6E9FAC03 ] C:\Program Files (x86)\Drakonia Configurator\hid.exe
15:33:20.0203 0x4154  GamingMouse - detected UnsignedFile.Multi.Generic ( 1 )
15:33:26.0359 0x4154  GamingMouse ( UnsignedFile.Multi.Generic ) - warning
15:33:32.0395 0x4154  [ 02B8BC2531917B205D509E6D8661DAFF, 9466DADD36A6B7FA4FB2C84B3F268CCEE65AA05D6DC93E70DE6F47F98D396B06 ] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
15:33:32.0609 0x4154  LogMeIn Hamachi Ui - ok
15:33:32.0665 0x4154  [ FCEC6F664FA7E5FE323165FBC9314470, 4E5AB1E6C3D2881D95E74F2F28649A7DBC4919CA249829A0E4CD9804E401A025 ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
15:33:32.0691 0x4154  SunJavaUpdateSched - ok
15:33:32.0780 0x4154  [ A8E69DA21AEEB9DAA55D90E87AC1A549, 175AF750A1DF53555D0CB6C61312CEE37E2CB182873041A8AE38C57EA01DC2F5 ] C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe
15:33:32.0808 0x4154  Avira SystrayStartTrigger - ok
15:33:33.0035 0x4154  [ C1A86A6D6847DEFF009EAE85BA0C1F20, 7DC2A823FA281117B335B74876469C788A5C81534251179BE86F3FB35F1B6D67 ] C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
15:33:33.0065 0x4154  avgnt - ok
15:33:33.0386 0x4154  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
15:33:33.0552 0x4154  Sidebar - ok
15:33:33.0608 0x4154  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
15:33:33.0630 0x4154  mctadmin - ok
15:33:33.0661 0x4154  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
15:33:33.0703 0x4154  Sidebar - ok
15:33:33.0709 0x4154  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
15:33:33.0728 0x4154  mctadmin - ok
15:33:34.0018 0x4154  [ 9D0D72B696B8CDF9AE368E542FD042CE, 8CD19E8B609041A6C226D57D40509175827C75DEF93378B53A814060BB7A9E0B ] C:\Users\Jurij\AppData\Roaming\Spotify\SpotifyWebHelper.exe
15:33:34.0074 0x4154  Spotify Web Helper - ok
15:33:34.0241 0x4154  [ D5218EE66173405B26B716EBA68133F6, 265820925538A075E753701DC36F89702B3E4C0BE73B8166138495092F339E43 ] C:\Program Files (x86)\Steam\steam.exe
15:33:34.0316 0x4154  Steam - ok
15:33:34.0425 0x4154  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] C:\Users\Jurij\AppData\Local\Google\Update\GoogleUpdate.exe
15:33:34.0453 0x4154  Google Update - ok
15:33:34.0706 0x4154  [ D6E2ED7F1F7BE7CCB8676491BF950B57, CBF07EE746F2C27ACC532E83ADC43FBE954DC3C598C4333F13B1A7615AEA9AD5 ] C:\Users\Jurij\AppData\Local\Akamai\netsession_win.exe
15:33:34.0824 0x4154  Akamai NetSession Interface - ok
15:33:34.0901 0x4154  [ 42CD0245D2BE7184E774BC89DAA4F6C2, EDF4942E9A27478241CB33ECC8F75239AD0E294D1CD2202DB9F707BD6873B2FC ] C:\Program Files (x86)\puush\puush.exe
15:33:34.0926 0x4154  puush - ok
15:33:34.0970 0x4154  Skype - ok
15:33:35.0259 0x4154  [ DC8DC7ED86A259614D3B2186B2F841EB, 6F305431EE35849D637AF41F213B716D936311015483422FA294E9435B82AB2A ] C:\Users\Jurij\AppData\Roaming\Spotify\Spotify.exe
15:33:35.0535 0x4154  Spotify - ok
15:33:35.0576 0x4154  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
15:33:35.0618 0x4154  Sidebar - ok
15:33:35.0625 0x4154  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
15:33:35.0647 0x4154  mctadmin - ok
15:33:35.0676 0x4154  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
15:33:35.0718 0x4154  Sidebar - ok
15:33:35.0725 0x4154  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
15:33:35.0744 0x4154  mctadmin - ok
15:33:35.0746 0x4154  Waiting for KSN requests completion. In queue: 18
15:33:36.0746 0x4154  Waiting for KSN requests completion. In queue: 18
15:33:37.0746 0x4154  Waiting for KSN requests completion. In queue: 18
15:33:38.0746 0x4154  Waiting for KSN requests completion. In queue: 18
15:33:39.0746 0x4154  Waiting for KSN requests completion. In queue: 18
15:33:40.0746 0x4154  Waiting for KSN requests completion. In queue: 18
15:33:41.0746 0x4154  Waiting for KSN requests completion. In queue: 18
15:33:41.0839 0x09b8  Object required for P2P: [ D5218EE66173405B26B716EBA68133F6 ] C:\Program Files (x86)\Steam\steam.exe
15:33:42.0746 0x4154  Waiting for KSN requests completion. In queue: 5
15:33:43.0746 0x4154  Waiting for KSN requests completion. In queue: 5
15:33:44.0746 0x4154  Waiting for KSN requests completion. In queue: 5
15:33:45.0746 0x4154  Waiting for KSN requests completion. In queue: 5
15:33:46.0747 0x4154  Waiting for KSN requests completion. In queue: 5
15:33:47.0747 0x4154  Waiting for KSN requests completion. In queue: 5
15:33:48.0747 0x4154  Waiting for KSN requests completion. In queue: 5
15:33:49.0747 0x4154  Waiting for KSN requests completion. In queue: 5
15:33:50.0747 0x4154  Waiting for KSN requests completion. In queue: 5
15:33:51.0747 0x4154  Waiting for KSN requests completion. In queue: 5
15:33:52.0747 0x4154  Waiting for KSN requests completion. In queue: 5
15:33:53.0747 0x4154  Waiting for KSN requests completion. In queue: 5
15:33:54.0747 0x4154  Waiting for KSN requests completion. In queue: 5
15:33:55.0747 0x4154  Waiting for KSN requests completion. In queue: 5
15:33:56.0747 0x4154  Waiting for KSN requests completion. In queue: 5
15:33:57.0747 0x4154  Waiting for KSN requests completion. In queue: 5
15:33:58.0747 0x4154  Waiting for KSN requests completion. In queue: 5
15:33:59.0747 0x4154  Waiting for KSN requests completion. In queue: 5
15:34:00.0747 0x4154  Waiting for KSN requests completion. In queue: 5
15:34:01.0747 0x4154  Waiting for KSN requests completion. In queue: 5
15:34:01.0849 0x09b8  Object send P2P result: false
15:34:01.0849 0x09b8  Object required for P2P: [ DC8DC7ED86A259614D3B2186B2F841EB ] C:\Users\Jurij\AppData\Roaming\Spotify\Spotify.exe
15:34:02.0747 0x4154  Waiting for KSN requests completion. In queue: 1
15:34:03.0748 0x4154  Waiting for KSN requests completion. In queue: 1
15:34:04.0748 0x4154  Waiting for KSN requests completion. In queue: 1
15:34:05.0748 0x4154  Waiting for KSN requests completion. In queue: 1
15:34:06.0748 0x4154  Waiting for KSN requests completion. In queue: 1
15:34:07.0748 0x4154  Waiting for KSN requests completion. In queue: 1
15:34:08.0748 0x4154  Waiting for KSN requests completion. In queue: 1
15:34:09.0748 0x4154  Waiting for KSN requests completion. In queue: 1
15:34:10.0748 0x4154  Waiting for KSN requests completion. In queue: 1
15:34:11.0748 0x4154  Waiting for KSN requests completion. In queue: 1
15:34:12.0748 0x4154  Waiting for KSN requests completion. In queue: 1
15:34:13.0748 0x4154  Waiting for KSN requests completion. In queue: 1
15:34:14.0748 0x4154  Waiting for KSN requests completion. In queue: 1
15:34:15.0294 0x09b8  Object send P2P result: true
15:34:15.0763 0x4154  AV detected via SS2: Avira Antivirus, C:\Program Files (x86)\Avira\Antivirus\wsctool.exe ( 15.0.13.202 ), 0x41000 ( enabled : updated )
15:34:15.0774 0x4154  Win FW state via NFP2: enabled ( trusted )
15:34:21.0569 0x4154  ============================================================
15:34:21.0569 0x4154  Scan finished
15:34:21.0569 0x4154  ============================================================
15:34:21.0576 0x101c  Detected object count: 3
15:34:21.0576 0x101c  Actual detected object count: 3
15:35:13.0732 0x101c  USBAAPL64 ( UnsignedFile.Multi.Generic ) - skipped by user
15:35:13.0732 0x101c  USBAAPL64 ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:35:13.0732 0x101c  RoccatIskuFX ( UnsignedFile.Multi.Generic ) - skipped by user
15:35:13.0732 0x101c  RoccatIskuFX ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:35:13.0733 0x101c  GamingMouse ( UnsignedFile.Multi.Generic ) - skipped by user
15:35:13.0733 0x101c  GamingMouse ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:35:56.0908 0x3c6c  Deinitialize success
Und MBAR (HAB MBAR NACH TDSS KILLER AUSGEFÜHRT (Falls die Reihenfolge Einwirkungen hat)!!!!)
http://puu.sh/lakwi/28b8db7a40.jpg

schrauber 05.11.2015 21:53
Zitat:
Laut Internet gibt es Viren die sich reproduzieren können, wenn man sie aus der Quarantäne entfernt.
Quatsch. Wenn Du sie aus der Quarantäne freilässt, ja, aber nicht wenn Du die Quarantäne leerst.

Logs sehen alle gut aus.

icrowz 06.11.2015 11:12
Hi schrauber !
Danke für die Antwort
Findest du es aber nicht seltsam?Natürlich glaub ich dir doch hab ich halt eine Frage. Nun die Logs sagen aus es ist sauber.. aber es müsste doch theoretisch was auftauchen wenn doch etwas auf meinem PC ist/war.. oder nicht?
Denn ich hab ja nichts weiter gemacht als Virenscan und erstellen vom Log via FRST.
TDSS Killer hatte 3 Funde (Warum auch immer meine Tastatur und Mausdriver als Problem angesehen wurden.. und noch irgendwas ohne Namen)
Denn dieser Virus den ich da in der Quarantän hab hat ja die Aufgabe andere Programme zu installieren
Werde den Virus heute aus der Quarantäne löschen.

schrauber 07.11.2015 12:53
Der Fund der bei dir in Quarantäne ist ist nur eine PUP Datei.
Emsisoft erweitert Ihr Wissen: Was ist ein PUP? | Emsisoft Blog


Alle Zeitangaben in WEZ +1. Es ist jetzt 02:46 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131