Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Windows 10 plötzlich unbekanntes Benutzerkonto/eMail. Microsoftkonto gehackt? (https://www.trojaner-board.de/183348-windows-10-ploetzlich-unbekanntes-benutzerkonto-email-microsoftkonto-gehackt.html)

totti6169 06.12.2016 00:27
Windows 10 plötzlich unbekanntes Benutzerkonto/eMail. Microsoftkonto gehackt?
 
ich bin etwas verzweifelt. Habe vor ein paar Tagen Win10 neu aufgesetzt. Mein Benutzerkonto wurde wie immer angelegt.
Heute habe ich festgestellt, dass meine Windowsanmeldung unter einem mir unbekannten Namen und E-Mail Adresse erfolgt. Bei der Überprüfung der Benutzerkonten musste ich feststellen, das mein angelegtes Konto (mein Bild, meine Zuriffe auf Dateien usw.) anscheinend einen fremden Besitzer hat. "Leider" wird der PC von meiner Frau und Kind mitbenutzt. Ich kann daher nicht genau sagen wann es passiert ist.
Ist bei mir jetzt ALLES gehackt ?

Hier meine Logfiles:
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 05-12-2016
durchgeführt von totti (Administrator) auf HOME-PC (05-12-2016 23:05:16)
Gestartet von C:\Users\totti\Downloads
Geladene Profile: totti (Verfügbare Profile: Thorsten & ttjh1 & totti)
Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Logitech, Inc.) C:\Program Files\Logitech\SolarApp\L4301_Solar.exe
() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.25\aaHMSvc.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.08.15\AsusFanControlService.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Windows\System32\snmp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe
() C:\Program Files (x86)\ASUS\ASUS ROG Connect Plus\RC TweakIt Server\AsBclk.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
() C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
() C:\Program Files (x86)\ASUS\Front Base Driver\WBoxTT.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr64.exe
() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe
() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
() C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\AsPowerBar.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
(Logitech, Inc.) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(SAVITECH) C:\Program Files (x86)\SAVITECH\SVLoadSense\SVLoadSense.exe
() C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2UILauncher.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
() C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2Svc32.exe
() C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2Svc64.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD App Manager\WDAppManager.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD App Manager\Plugins\WD Sync\App\WDSyncService.exe
(ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7466.41227.0_x64__8wekyb3d8bbwe\HxMail.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7466.41227.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
() C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-07] (Microsoft Corporation)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [1735288 2016-09-30] (Logitech, Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8843784 2016-11-27] (Realtek Semiconductor)
HKLM\...\Run: [SVLoadSense] => c:\Program Files (x86)\SAVITECH\SVLoadSense\SVLoadSense.exe [1762000 2015-09-21] (SAVITECH)
HKLM\...\Run: [SS2UILauncher] => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2UILauncher.exe [557072 2016-08-12] ()
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322472 2015-06-23] (Intel Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-11-01] (Apple Inc.)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5564784 2015-02-12] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] => C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2013-01-28] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [AO Link Server] => C:\Program Files (x86)\ASUS\AI Suite III\Mobo Connect\ALRun.exe -start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM-x32\...\Run: [WDAppManager] => C:\Program Files (x86)\Western Digital\WD App Manager\AppManagerLauncher.exe [21384 2016-04-15] (Western Digital Technologies, Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{278623a9-5409-4fd0-84f9-306d087989c8}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{33feedbb-de7b-4bc4-8b69-96b9e6bac0b6}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{6abf8ccf-8799-4d9f-85cf-650277434338}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-11-27] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-11-27] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: t1674hax.default
FF ProfilePath: C:\Users\totti\AppData\Roaming\Mozilla\Firefox\Profiles\t1674hax.default [2016-12-05]
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-11-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-11-27] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-11-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-11-27] (Google Inc.)

Chrome:
=======
CHR Profile: C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default [2016-12-05]
CHR Extension: (Google Präsentationen) - C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-04]
CHR Extension: (Google Docs) - C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-04]
CHR Extension: (Google Drive) - C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-04]
CHR Extension: (YouTube) - C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-04]
CHR Extension: (Google Tabellen) - C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-04]
CHR Extension: (Google Docs Offline) - C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-04]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-12-04]
CHR Extension: (Google Mail) - C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-04]
CHR Extension: (Chrome Media Router) - C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-04]

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2016-11-27] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.25\aaHMSvc.exe [963544 2016-08-05] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2016-11-27] () [Datei ist nicht signiert]
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.08.15\AsusFanControlService.exe [419288 2016-05-27] (ASUSTeK Computer Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-06-23] (Intel Corporation)
R2 L4301_Solar; C:\Program Files\Logitech\SolarApp\L4301_Solar.exe [405744 2013-01-30] (Logitech, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
R2 SNMP; C:\WINDOWS\System32\snmp.exe [53248 2016-11-28] (Microsoft Corporation)
R2 SNMP; C:\WINDOWS\SysWOW64\snmp.exe [47104 2016-11-28] (Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10216688 2016-11-28] (TeamViewer GmbH)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [302968 2015-02-12] (Western Digital Technologies, Inc.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [18232 2016-08-02] (Intel(R) Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2013-01-28] (ASUSTek Computer Inc.)
R3 AndroidAFD; C:\Windows\SysWow64\drivers\AndroidAFDx64.sys [22192 2015-10-19] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2016-11-27] ()
S0 asstahci64; C:\WINDOWS\System32\drivers\asstahci64.sys [88936 2015-06-17] (Asmedia Technology)
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2016-11-27] ()
R3 ASUSfilter; C:\WINDOWS\System32\drivers\ASUSfilter.sys [48384 2013-03-28] (MCCI Corporation)
R3 ASUSfilter; C:\Windows\SysWOW64\drivers\ASUSfilter.sys [46152 2016-11-27] (MCCI Corporation)
S3 ASUSstpt; C:\WINDOWS\System32\drivers\ASUSstpt.sys [27392 2013-03-28] (MCCI Corporation)
S3 ASUSumsc; C:\WINDOWS\System32\drivers\ASUSumsc.sys [151808 2013-03-28] (MCCI Corporation)
S3 ASUSxpsp; C:\WINDOWS\System32\drivers\ASUSxpsp.sys [28416 2013-03-28] (MCCI Corporation)
S3 DSI_SiUSBXp_3_1; C:\WINDOWS\system32\drivers\DSI_SiUSBXp_3_1.sys [16384 2007-09-06] (Silicon Laboratories)
S3 dtultrascsibus; C:\WINDOWS\System32\drivers\dtultrascsibus.sys [30264 2016-04-17] (Disc Soft Ltd)
S3 dtultrausbbus; C:\WINDOWS\System32\drivers\dtultrausbbus.sys [47672 2016-04-17] (Disc Soft Ltd)
R3 e1dexpress; C:\WINDOWS\system32\DRIVERS\e1d65x64.sys [530416 2015-06-18] (Intel Corporation)
S2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [29264 2016-06-09] (Intel Corporation)
R4 IOMap; C:\WINDOWS\system32\drivers\IOMap64.sys [24824 2016-07-12] (ASUSTeK Computer Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-12-05] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R1 SvThLSNS; c:\Program Files (x86)\SAVITECH\SVLoadSense\x64\SvThLSNS.sys [15184 2015-09-21] (Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 WirelessKeyboardFilter; C:\WINDOWS\System32\drivers\WirelessKeyboardFilter.sys [49896 2016-07-22] (Microsoft Corporation)
S3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [63840 2015-09-21] (Intel Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-12-05 23:05 - 2016-12-05 23:05 - 00016899 _____ C:\Users\totti\Downloads\FRST.txt
2016-12-05 23:04 - 2016-12-05 23:05 - 02419712 _____ (Farbar) C:\Users\totti\Downloads\FRST64.exe
2016-12-05 22:59 - 2016-12-05 22:59 - 00000000 ___HD C:\OneDriveTemp
2016-12-05 22:30 - 2016-12-05 22:30 - 00101330 _____ C:\Users\Thorsten\Desktop\FRST.txt
2016-12-05 22:30 - 2016-12-05 22:30 - 00033068 _____ C:\Users\Thorsten\Desktop\Addition.txt
2016-12-05 22:29 - 2016-12-05 23:05 - 00000000 ____D C:\FRST
2016-12-05 22:29 - 2016-12-05 22:30 - 00101327 _____ C:\Users\Thorsten\Downloads\FRST.txt
2016-12-05 22:29 - 2016-12-05 22:30 - 00033065 _____ C:\Users\Thorsten\Downloads\Addition.txt
2016-12-05 22:28 - 2016-12-05 22:29 - 02419712 _____ (Farbar) C:\Users\Thorsten\Downloads\FRST64.exe
2016-12-05 20:19 - 2016-12-05 20:19 - 00000000 ____D C:\Program Files (x86)\ESET
2016-12-05 20:18 - 2016-12-05 20:18 - 00001741 _____ C:\22222222222222.txt
2016-12-05 20:17 - 2016-12-05 20:17 - 00002309 _____ C:\1111111111111111.txt
2016-12-05 19:02 - 2016-12-05 20:19 - 02870984 _____ (ESET) C:\Users\totti\Downloads\esetsmartinstaller_deu.exe
2016-12-05 18:58 - 2016-12-05 22:59 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-12-05 18:58 - 2016-12-05 18:58 - 00001171 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-12-05 18:58 - 2016-12-05 18:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-12-05 18:58 - 2016-12-05 18:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-12-05 18:58 - 2016-12-05 18:58 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-12-05 18:58 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-12-05 18:58 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-12-05 18:58 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-12-05 18:57 - 2016-12-05 18:57 - 22851472 _____ (Malwarebytes ) C:\Users\totti\Downloads\mbam-setup-2.2.1.1043.exe
2016-12-05 18:45 - 2016-12-05 18:45 - 00000000 ____D C:\Users\totti\AppData\Roaming\Macromedia
2016-12-05 18:38 - 2016-12-05 20:15 - 00000000 ____D C:\Users\totti\AppData\LocalLow\Mozilla
2016-12-05 18:38 - 2016-12-05 18:44 - 00000000 ____D C:\Users\totti\AppData\Local\Mozilla
2016-12-05 18:38 - 2016-12-05 18:38 - 00000000 ____D C:\Users\totti\AppData\Roaming\Mozilla
2016-12-04 23:49 - 2016-12-04 23:49 - 00000000 ____D C:\Users\totti\AppData\Local\PeerDistRepub
2016-12-04 23:07 - 2016-12-04 23:07 - 00030100 _____ C:\Users\totti\Downloads\entschuld13.pdf
2016-12-04 22:39 - 2016-12-04 22:39 - 00001359 _____ C:\Users\Public\Desktop\EaseUS Todo PCTrans.lnk
2016-12-04 22:39 - 2016-12-04 22:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Todo PCTrans
2016-12-04 22:39 - 2016-12-04 22:39 - 00000000 ____D C:\Program Files (x86)\EaseUS
2016-12-04 22:38 - 2016-12-05 18:44 - 00000000 ____D C:\Users\totti\AppData\Local\MicrosoftEdge
2016-12-04 22:38 - 2016-12-04 22:39 - 05335456 _____ (EaseUS ) C:\Users\totti\Downloads\pctrans.exe
2016-12-04 22:21 - 2016-12-04 21:37 - 02359296 ____H C:\Users\totti\NTUSER (2).DAT
2016-12-04 22:21 - 2016-12-04 21:37 - 02359296 ____H C:\Users\Thorsten\NTUSER - Kopie.DAT
2016-12-04 19:28 - 2016-12-04 19:28 - 00000000 ____D C:\Users\totti\AppData\Roaming\Intel Corporation
2016-12-04 19:27 - 2016-12-05 22:59 - 00000000 ___RD C:\Users\totti\OneDrive
2016-12-04 19:27 - 2016-12-04 19:28 - 00002383 _____ C:\Users\totti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-12-04 19:27 - 2016-12-04 19:27 - 00000000 ____D C:\Users\totti\AppData\Roaming\Skype
2016-12-04 19:27 - 2016-12-04 19:27 - 00000000 ____D C:\Users\totti\AppData\Roaming\Logishrd
2016-12-04 19:27 - 2016-12-04 19:27 - 00000000 ____D C:\Users\totti\AppData\Roaming\Apple Computer
2016-12-04 19:27 - 2016-12-04 19:27 - 00000000 ____D C:\Users\totti\AppData\Local\Western_Digital_Technolog
2016-12-04 19:27 - 2016-12-04 19:27 - 00000000 ____D C:\Users\totti\AppData\Local\SS22.2.28
2016-12-04 19:27 - 2016-12-04 19:27 - 00000000 ____D C:\Users\totti\AppData\Local\Comms
2016-12-04 19:26 - 2016-12-05 03:33 - 00000000 ____D C:\Users\totti
2016-12-04 19:26 - 2016-12-04 20:28 - 00000000 ____D C:\Users\totti\AppData\Local\Packages
2016-12-04 19:26 - 2016-12-04 19:41 - 00000000 ____D C:\Users\totti\AppData\Local\Google
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 _SHDL C:\Users\totti\Vorlagen
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 _SHDL C:\Users\totti\Startmenü
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 _SHDL C:\Users\totti\Netzwerkumgebung
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 _SHDL C:\Users\totti\Lokale Einstellungen
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 _SHDL C:\Users\totti\Eigene Dateien
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 _SHDL C:\Users\totti\Druckumgebung
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 _SHDL C:\Users\totti\Documents\Eigene Videos
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 _SHDL C:\Users\totti\Documents\Eigene Musik
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 _SHDL C:\Users\totti\Documents\Eigene Bilder
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 _SHDL C:\Users\totti\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 _SHDL C:\Users\totti\AppData\Local\Verlauf
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 _SHDL C:\Users\totti\AppData\Local\Anwendungsdaten
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 _SHDL C:\Users\totti\Anwendungsdaten
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 ____D C:\Users\totti\AppData\Roaming\Adobe
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 ____D C:\Users\totti\AppData\Local\VirtualStore
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 ____D C:\Users\totti\AppData\Local\TileDataLayer
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 ____D C:\Users\totti\AppData\Local\Publishers
2016-12-04 19:26 - 2016-12-04 19:26 - 00000000 ____D C:\Users\totti\AppData\Local\ConnectedDevicesPlatform
2016-12-04 19:26 - 2016-11-27 00:07 - 00000020 ___SH C:\Users\totti\ntuser.ini
2016-12-04 01:23 - 2016-12-04 01:23 - 00000000 ____D C:\Program Files (x86)\Hercules
2016-12-04 01:22 - 2016-12-04 01:23 - 31550240 _____ (Hercules) C:\Users\Thorsten\Downloads\HWNU-300_V3.7.exe
2016-12-04 00:30 - 2016-12-04 00:30 - 04640844 _____ C:\Users\Thorsten\Downloads\WLR-5100v1001-firmware-v30.zip
2016-12-04 00:30 - 2016-12-04 00:30 - 02952963 _____ C:\Users\Thorsten\Downloads\WLR-5100v1001-Full-Manual.pdf
2016-12-04 00:27 - 2016-12-04 00:27 - 02952963 _____ C:\Users\Thorsten\Downloads\manual (2).pdf
2016-12-03 18:32 - 2016-12-03 18:32 - 00000000 ____D C:\Users\Thorsten\AppData\Local\TeamViewer
2016-12-02 23:38 - 2016-12-04 19:15 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-12-02 23:38 - 2016-12-03 18:38 - 00000000 ____D C:\Users\Thorsten\AppData\Roaming\TeamViewer
2016-12-02 23:38 - 2016-12-02 23:38 - 00001112 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
2016-12-02 23:38 - 2016-12-02 23:38 - 00001100 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk
2016-12-02 23:35 - 2015-06-22 12:20 - 00000000 ____D C:\Users\Thorsten\Downloads\DIR-825_fw_revb_210b01_ALL_multi_20150609
2016-12-02 23:34 - 2016-12-02 23:37 - 12877352 _____ (TeamViewer GmbH) C:\Users\Thorsten\Downloads\TeamViewer_Setup_de-agkp.exe
2016-12-02 23:26 - 2016-12-02 23:26 - 05286401 _____ C:\Users\Thorsten\Downloads\DIR-825_fw_revb_210b01_ALL_multi_20150609.zip
2016-12-02 23:23 - 2016-12-02 23:23 - 00029312 _____ C:\Users\Thorsten\Downloads\config.bin
2016-12-02 21:07 - 2016-12-02 21:08 - 00000000 ____D C:\Users\Thorsten\AppData\Local\ElevatedDiagnostics
2016-12-02 19:13 - 2016-12-02 19:13 - 00720417 _____ C:\Users\Thorsten\Downloads\Anleitung_WLAN-Router_als_Accesspoint_mit_Hitron_oder_CiscoEPC3208_Kabelmodem.pdf
2016-12-02 02:36 - 2016-12-02 02:36 - 1214701263 _____ C:\WINDOWS\MEMORY.DMP
2016-12-02 02:36 - 2016-12-02 02:36 - 00586244 _____ C:\WINDOWS\Minidump\120216-8265-01.dmp
2016-12-02 02:36 - 2016-12-02 02:36 - 00000000 ____D C:\WINDOWS\Minidump
2016-12-02 01:51 - 2016-12-02 01:51 - 00000000 ____D C:\Users\ttjh1\AppData\Local\PeerDistRepub
2016-12-01 21:31 - 2016-12-01 21:31 - 00166225 _____ C:\Users\Thorsten\Downloads\AVM-Merry-Christmas_2016.zip
2016-12-01 02:33 - 2016-12-01 02:33 - 04851072 _____ C:\Users\Thorsten\Downloads\cfosspeed-v1020.exe
2016-11-30 12:10 - 2016-11-30 12:10 - 00000000 ____D C:\ProgramData\Trymedia
2016-11-30 12:10 - 2016-11-30 12:10 - 00000000 ____D C:\ProgramData\GoBit Games
2016-11-30 10:12 - 2016-11-30 10:12 - 00000000 ____D C:\Users\ttjh1\AppData\Roaming\Macromedia
2016-11-30 10:12 - 2016-11-30 10:12 - 00000000 ____D C:\Users\ttjh1\AppData\Local\Comms
2016-11-30 10:11 - 2016-11-30 10:11 - 00000000 ____D C:\Users\ttjh1\AppData\Roaming\Intel Corporation
2016-11-30 10:10 - 2016-12-01 19:13 - 00000000 ____D C:\Users\ttjh1\AppData\Local\ConnectedDevicesPlatform
2016-11-30 10:10 - 2016-11-30 16:32 - 00000000 ____D C:\Users\ttjh1\AppData\Local\Google
2016-11-30 10:10 - 2016-11-30 11:11 - 00000000 ____D C:\Users\ttjh1\AppData\Local\Packages
2016-11-30 10:10 - 2016-11-30 10:11 - 00002383 _____ C:\Users\ttjh1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-11-30 10:10 - 2016-11-30 10:10 - 00000020 ___SH C:\Users\ttjh1\ntuser.ini
2016-11-30 10:10 - 2016-11-30 10:10 - 00000000 ____D C:\Users\ttjh1\AppData\Roaming\Skype
2016-11-30 10:10 - 2016-11-30 10:10 - 00000000 ____D C:\Users\ttjh1\AppData\Roaming\Logishrd
2016-11-30 10:10 - 2016-11-30 10:10 - 00000000 ____D C:\Users\ttjh1\AppData\Roaming\Apple Computer
2016-11-30 10:10 - 2016-11-30 10:10 - 00000000 ____D C:\Users\ttjh1\AppData\Roaming\Adobe
2016-11-30 10:10 - 2016-11-30 10:10 - 00000000 ____D C:\Users\ttjh1\AppData\Local\Western_Digital_Technolog
2016-11-30 10:10 - 2016-11-30 10:10 - 00000000 ____D C:\Users\ttjh1\AppData\Local\VirtualStore
2016-11-30 10:10 - 2016-11-30 10:10 - 00000000 ____D C:\Users\ttjh1\AppData\Local\TileDataLayer
2016-11-30 10:10 - 2016-11-30 10:10 - 00000000 ____D C:\Users\ttjh1\AppData\Local\SS22.2.28
2016-11-30 10:10 - 2016-11-30 10:10 - 00000000 ____D C:\Users\ttjh1\AppData\Local\Publishers
2016-11-30 10:10 - 2016-11-30 10:10 - 00000000 ____D C:\Users\ttjh1\AppData\Local\MicrosoftEdge
2016-11-30 03:08 - 2016-11-30 03:28 - 00000000 ____D C:\Users\Thorsten\AppData\Roaming\Apple Computer
2016-11-30 03:08 - 2016-11-30 03:08 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-11-30 03:08 - 2016-11-30 03:08 - 00001822 _____ C:\Users\Public\Desktop\iTunes.lnk
2016-11-30 03:08 - 2016-11-30 03:08 - 00000000 ____D C:\Users\Thorsten\AppData\Local\Apple Computer
2016-11-30 03:08 - 2016-11-30 03:08 - 00000000 ____D C:\Users\Thorsten\AppData\Local\Apple
2016-11-30 03:08 - 2016-11-30 03:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-11-30 03:08 - 2016-11-30 03:08 - 00000000 ____D C:\ProgramData\Apple Computer
2016-11-30 03:08 - 2016-11-30 03:08 - 00000000 ____D C:\Program Files\iTunes
2016-11-30 03:08 - 2016-11-30 03:08 - 00000000 ____D C:\Program Files\iPod
2016-11-30 03:08 - 2016-11-30 03:08 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-11-30 03:08 - 2016-11-30 03:08 - 00000000 ____D C:\Program Files\Bonjour
2016-11-30 03:08 - 2016-11-30 03:08 - 00000000 ____D C:\Program Files (x86)\Bonjour
2016-11-30 03:08 - 2016-11-30 03:08 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2016-11-30 03:04 - 2016-11-30 03:07 - 177311560 _____ (Apple Inc.) C:\Users\Thorsten\Downloads\iTunes6464Setup.exe
2016-11-30 00:21 - 2016-11-30 00:21 - 00004566 _____ C:\Users\Thorsten\Downloads\oscam_2016-11-30_0021_oscam.log.tgz
2016-11-29 21:28 - 2016-11-29 21:28 - 00000582 _____ C:\Users\Thorsten\Downloads\Enable_Num_Lock_on_Sign-in_screen.reg
2016-11-29 02:32 - 2016-11-29 02:32 - 00003344 _____ C:\WINDOWS\System32\Tasks\SamsungMagician
2016-11-29 02:32 - 2016-11-29 02:32 - 00001298 _____ C:\Users\Public\Desktop\Samsung Magician.lnk
2016-11-29 02:32 - 2016-11-29 02:32 - 00000000 ____D C:\ProgramData\Samsung
2016-11-29 02:32 - 2016-11-29 02:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician
2016-11-29 02:32 - 2016-11-29 02:32 - 00000000 ____D C:\Program Files (x86)\Samsung
2016-11-29 02:31 - 2016-05-13 08:52 - 19226728 _____ (Samsung Electronics ) C:\Users\Thorsten\Downloads\Samsung_Magician_Setup_v497.exe
2016-11-29 02:30 - 2016-11-29 02:31 - 18946704 _____ C:\Users\Thorsten\Downloads\Samsung_Magician_Setup_v497.zip
2016-11-29 01:41 - 2016-11-29 01:41 - 00629880 _____ C:\Users\Thorsten\Downloads\oscam-emu-mips-freetz11281-fritz73xxOS62-webif-libusb_st
2016-11-29 01:36 - 2016-11-29 01:36 - 00213602 _____ C:\Users\Thorsten\Downloads\list_smargo-1 (3).20-emu11232-mips-freetz-linux-uclibc-libusb
2016-11-29 00:13 - 2016-11-29 00:13 - 04083028 _____ C:\Users\Thorsten\Downloads\WDAccess_1.4.5949.29996.zip
2016-11-29 00:13 - 2016-11-29 00:13 - 00000000 ____D C:\Users\Thorsten\AppData\Local\Western_Digital_Technolog
2016-11-29 00:11 - 2016-11-29 00:11 - 08497626 _____ C:\Users\Thorsten\Downloads\WDSync_1.3.5949.26210.zip
2016-11-28 23:48 - 2016-11-28 23:48 - 00000000 ____D C:\Users\Thorsten\Downloads\DIP5_10360
2016-11-28 23:43 - 2016-11-28 23:43 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2016-11-28 23:43 - 2016-11-28 23:28 - 00404752 _____ (Intel Corporation) C:\WINDOWS\system32\PROUnstl.exe
2016-11-28 23:43 - 2016-11-28 23:28 - 00001904 ____N C:\WINDOWS\system32\SetupBD.din
2016-11-28 23:40 - 2016-11-28 23:40 - 00000000 ____D C:\Users\Thorsten\Downloads\ROGConnectPlus_Win7-81-10_V10030
2016-11-28 23:40 - 2015-06-05 09:37 - 00192512 _____ (ASUSTeK Computer Inc.) C:\WINDOWS\SysWOW64\Drivers\UpdateHelper.dll
2016-11-28 23:39 - 2016-11-28 23:39 - 00001769 _____ C:\WINDOWS\Language_trs.ini
2016-11-28 23:39 - 2016-11-28 23:37 - 00011832 _____ C:\WINDOWS\SysWOW64\Drivers\AsInsHelp64.sys
2016-11-28 23:39 - 2016-11-28 23:37 - 00010216 _____ C:\WINDOWS\SysWOW64\Drivers\AsInsHelp32.sys
2016-11-28 23:37 - 2016-11-28 23:37 - 00000000 ____D C:\Users\Thorsten\Downloads\FRONTBASE-10117
2016-11-28 23:28 - 2016-11-28 23:28 - 00316736 _____ (Intel Corporation) C:\WINDOWS\system32\PRONtObj.dll
2016-11-28 23:28 - 2016-11-28 23:28 - 00155192 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iANSW60e.sys
2016-11-28 23:27 - 2016-11-28 23:27 - 00000000 ____D C:\Users\Thorsten\Downloads\Intel_Gigabit_Ethernet_Win7-81_V20230010_Win10_V20240010
2016-11-28 23:24 - 2016-11-28 23:43 - 00000000 ____D C:\Program Files\Intel
2016-11-28 23:24 - 2016-11-28 23:24 - 02037236 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2016-11-28 23:24 - 2016-11-28 23:24 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-11-28 23:24 - 2016-11-28 23:24 - 00000000 ____D C:\Users\Thorsten\Intel
2016-11-28 23:24 - 2016-11-28 23:24 - 00000000 ____D C:\Users\Thorsten\AppData\Roaming\Intel Corporation
2016-11-28 23:23 - 2016-11-28 23:23 - 00002056 _____ C:\Users\Public\Desktop\ASUS Boot Setting.lnk
2016-11-28 23:23 - 2016-11-28 23:23 - 00000000 ____D C:\Users\Thorsten\Downloads\ASUS_BootSetting_Win7-81-10_VER10022
2016-11-27 16:52 - 2016-11-27 17:02 - 00243656 _____ C:\Users\Thorsten\Downloads\Firefox Setup Stub 50.0 (2).exe
2016-11-27 16:15 - 2016-12-04 16:38 - 00004160 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{4564E7FE-E9AE-4766-8A69-A4964C928904}
2016-11-27 16:15 - 2016-11-27 16:15 - 02722395 _____ C:\Users\Thorsten\Downloads\jperf-2.0.2.zip
2016-11-27 16:15 - 2016-11-27 16:15 - 00000000 ____D C:\Users\Thorsten\Desktop\jperf-2.0.2
2016-11-27 16:12 - 2016-11-27 16:12 - 00606026 _____ C:\Users\Thorsten\Downloads\iperf-master.zip
2016-11-27 16:12 - 2016-11-27 16:12 - 00000000 ____D C:\Users\Thorsten\AppData\Roaming\Sun
2016-11-27 16:11 - 2016-11-27 16:15 - 00000000 ____D C:\ProgramData\Oracle
2016-11-27 16:11 - 2016-11-27 16:11 - 00737344 _____ (Oracle Corporation) C:\Users\Thorsten\Downloads\JavaSetup8u111.exe
2016-11-27 16:11 - 2016-11-27 16:11 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2016-11-27 16:11 - 2016-11-27 16:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-11-27 16:11 - 2016-11-27 16:11 - 00000000 ____D C:\Program Files (x86)\Java
2016-11-27 16:09 - 2016-12-05 21:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-11-27 16:09 - 2016-12-05 21:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-11-27 16:09 - 2016-11-27 16:16 - 00000000 ____D C:\Users\Thorsten\AppData\Local\Mozilla
2016-11-27 16:09 - 2016-11-27 16:10 - 00000000 ____D C:\Users\Thorsten\AppData\Roaming\Mozilla
2016-11-27 16:09 - 2016-11-27 16:09 - 00001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-11-27 16:09 - 2016-11-27 16:09 - 00001216 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-11-27 16:08 - 2016-11-27 16:09 - 00243656 _____ C:\Users\Thorsten\Downloads\Firefox Setup Stub 50.0 (1).exe
2016-11-27 16:05 - 2016-11-27 16:05 - 00248583 _____ C:\Users\Thorsten\Downloads\iperf-2.0.5.tar.gz
2016-11-27 15:42 - 2016-11-29 00:00 - 00000000 ____D C:\Users\Thorsten\AppData\Roaming\Wireshark
2016-11-27 15:22 - 2016-11-27 15:35 - 49242104 _____ (Wireshark development team) C:\Users\Thorsten\Downloads\Wireshark-win64-2.2.2.exe
2016-11-27 15:16 - 2016-11-27 15:16 - 02970395 _____ C:\Users\Thorsten\Downloads\cacti-0.8.8h.zip
2016-11-27 14:29 - 2016-11-27 14:29 - 00000000 ____D C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2016-11-27 14:13 - 2016-11-27 14:13 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-11-27 04:53 - 2016-11-27 04:53 - 00000000 ____D C:\Users\Thorsten\Downloads\Asmedia_USB3_V116351
2016-11-27 04:52 - 2016-11-27 14:14 - 00002685 _____ C:\Users\Public\Desktop\ASUS(R) Intel(R) Extreme Tuning Utility.lnk
2016-11-27 04:52 - 2016-11-27 14:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS(R) Intel(R) Extreme Tuning Utility
2016-11-27 04:52 - 2016-11-27 14:13 - 00000000 ____D C:\WINDOWS\System32\Tasks\Intel
2016-11-27 04:52 - 2016-11-27 04:54 - 00000000 ____D C:\Users\Thorsten\AppData\Local\SS22.2.28
2016-11-27 04:52 - 2016-11-27 04:52 - 00000000 ____D C:\Program Files\Microsoft Synchronization Services
2016-11-27 04:52 - 2016-11-27 04:52 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2016-11-27 04:52 - 2016-11-27 04:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2016-11-27 04:52 - 2016-11-27 04:52 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2016-11-27 04:52 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2016-11-27 04:52 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2016-11-27 04:52 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2016-11-27 04:52 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2016-11-27 04:50 - 2016-11-29 00:13 - 00000000 ____D C:\ProgramData\Package Cache
2016-11-27 04:50 - 2016-11-27 04:50 - 00003214 _____ C:\WINDOWS\System32\Tasks\SS2UILauncherRun
2016-11-27 04:50 - 2016-11-27 04:50 - 00003202 _____ C:\WINDOWS\System32\Tasks\SS2Svc64Run
2016-11-27 04:50 - 2016-11-27 04:50 - 00003194 _____ C:\WINDOWS\System32\Tasks\SS2Svc32Run
2016-11-27 04:50 - 2016-11-27 04:50 - 00001338 _____ C:\Users\Public\Desktop\Sonic Studio.lnk
2016-11-27 04:50 - 2016-11-27 04:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sonic Suite 2
2016-11-27 04:50 - 2016-11-27 04:50 - 00000000 ____D C:\Program Files\ASUSTeKcomputer.Inc
2016-11-27 04:50 - 2016-11-27 04:50 - 00000000 ____D C:\Program Files (x86)\SAVITECH
2016-11-27 04:50 - 2016-11-27 04:42 - 72520720 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2016-11-27 04:50 - 2016-11-27 04:42 - 06879938 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2016-11-27 04:50 - 2016-11-27 04:42 - 05593624 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2016-11-27 04:50 - 2016-11-27 04:42 - 03283248 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2016-11-27 04:50 - 2016-11-27 04:42 - 03203592 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2016-11-27 04:50 - 2016-11-27 04:42 - 02895104 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2016-11-27 04:50 - 2016-11-27 04:42 - 02073096 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2016-11-27 04:50 - 2016-11-27 04:42 - 01360528 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2016-11-27 04:50 - 2016-11-27 04:42 - 01003864 _____ (Nahimic Inc) C:\WINDOWS\system32\NahimicAPONSControl.dll
2016-11-27 04:50 - 2016-11-27 04:42 - 00689888 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2016-11-27 04:50 - 2016-11-27 04:42 - 00343712 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2016-11-27 04:50 - 2016-11-27 04:42 - 00192992 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2016-11-27 04:50 - 2016-11-27 04:42 - 00118600 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
2016-11-27 04:50 - 2016-11-27 04:42 - 00105312 _____ C:\WINDOWS\system32\audioLibVc.dll
2016-11-27 04:50 - 2016-11-27 04:41 - 00003008 ____N C:\WINDOWS\system32\Drivers\DTSU2P.DAT
2016-11-27 04:48 - 2016-11-27 04:48 - 00000000 ____D C:\Program Files\Realtek
2016-11-27 04:47 - 2016-11-27 04:41 - 02838232 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll
2016-11-27 04:46 - 2016-11-27 04:46 - 00000000 _____ C:\WINDOWS\SysWOW64\Drivers\1043_ASUSTeK_MAXIMUS VIII RANGER.alu
2016-11-27 04:42 - 2016-11-27 04:50 - 00000000 ___HD C:\Program Files (x86)\Temp
2016-11-27 04:42 - 2016-11-27 04:42 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-11-27 04:41 - 2016-12-05 22:59 - 01048576 _____ C:\WINDOWS\PE_Rom.dll
2016-11-27 04:41 - 2016-11-27 04:41 - 00000000 ____D C:\Users\Thorsten\Downloads\V7904_20160815_WHQL_DTS_StudioSound_SonicSuite_2228
2016-11-27 04:41 - 2016-07-12 19:04 - 00024824 ____N (ASUSTeK Computer Inc.) C:\WINDOWS\system32\Drivers\IOMap64.sys
2016-11-27 04:17 - 2016-11-28 23:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2016-11-27 04:17 - 2016-11-27 04:17 - 00000000 ____D C:\Program Files\ASUS
2016-11-27 04:17 - 2016-11-27 04:17 - 00000000 ____D C:\Program Files (x86)\ASM104xUSB3
2016-11-27 04:17 - 2016-11-27 04:15 - 00046152 _____ (MCCI Corporation) C:\WINDOWS\SysWOW64\Drivers\ASUSFILTER.sys
2016-11-27 04:17 - 2016-11-27 04:15 - 00014464 _____ C:\WINDOWS\SysWOW64\Drivers\AsUpIO.sys
2016-11-27 04:16 - 2016-12-04 01:23 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-11-27 04:16 - 2016-11-28 23:49 - 00000000 ____D C:\WINDOWS\System32\Tasks\ASUS
2016-11-27 04:16 - 2016-11-28 23:24 - 00000000 ____D C:\ProgramData\Intel
2016-11-27 04:16 - 2016-11-27 04:52 - 00000000 ____D C:\Program Files (x86)\Intel
2016-11-27 04:16 - 2015-10-19 17:22 - 00022192 _____ (ASUSTek Computer Inc.) C:\WINDOWS\SysWOW64\Drivers\AndroidAFDx64.sys
2016-11-27 04:16 - 2013-01-28 15:58 - 00014848 _____ (ASUSTek Computer Inc.) C:\WINDOWS\SysWOW64\Drivers\AiChargerPlus.sys
2016-11-27 04:15 - 2016-11-28 23:40 - 00000000 ____D C:\Program Files (x86)\ASUS
2016-11-27 04:15 - 2016-11-27 04:15 - 00028672 _____ (ASUSTek Computer Inc.) C:\WINDOWS\SysWOW64\AsIO.dll
2016-11-27 04:15 - 2016-11-27 04:15 - 00015232 _____ C:\WINDOWS\SysWOW64\Drivers\AsIO.sys
2016-11-27 04:15 - 2016-11-27 04:15 - 00000000 ____D C:\Users\Thorsten\Downloads\AISuite3_Win7-81-10_MaxVIII_Series_V10130
2016-11-27 04:14 - 2016-11-28 23:50 - 00000000 ____D C:\ProgramData\ASUS
2016-11-27 04:13 - 2016-11-27 04:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-11-27 04:13 - 2016-11-27 04:13 - 00000000 ____D C:\Program Files\7-Zip
2016-11-27 04:11 - 2016-11-27 04:14 - 122808649 _____ C:\Users\Thorsten\Downloads\DIP5_10360.zip
2016-11-27 04:11 - 2016-11-27 04:12 - 37822895 _____ C:\Users\Thorsten\Downloads\ASUS_XTU_V612208.zip
2016-11-27 04:06 - 2016-11-27 04:06 - 00001806 _____ C:\Users\Public\Desktop\HDClone.lnk
2016-11-27 04:06 - 2016-11-27 04:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HDClone 6 Free Edition
2016-11-27 04:05 - 2016-11-27 04:06 - 00000000 ____D C:\Program Files (x86)\HDClone 6 Free Edition
2016-11-27 02:54 - 2016-11-27 02:54 - 201326592 _____ C:\Users\Thorsten\Downloads\clonezilla-live-2.5.0-5-amd64.iso
2016-11-27 02:33 - 2016-11-27 02:33 - 00000000 ____D C:\Program Files\Common Files\Logishrd
2016-11-27 02:19 - 2016-11-27 02:19 - 141011376 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-11-27 02:19 - 2016-11-27 02:19 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-11-27 02:19 - 2016-11-27 02:09 - 00485032 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-11-27 02:16 - 2016-11-27 02:20 - 71601392 _____ C:\Users\Thorsten\Downloads\mc_windows_setup (1).exe
2016-11-27 01:13 - 2016-11-30 03:08 - 00000000 ____D C:\ProgramData\Apple
2016-11-27 01:13 - 2016-11-29 00:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital
2016-11-27 01:13 - 2016-11-29 00:11 - 00000000 ____D C:\ProgramData\Western Digital
2016-11-27 01:13 - 2016-11-29 00:11 - 00000000 ____D C:\Program Files (x86)\Western Digital
2016-11-27 01:13 - 2016-11-27 01:13 - 00001226 _____ C:\Users\Public\Desktop\WD My Cloud.lnk
2016-11-27 01:13 - 2016-11-27 01:13 - 00000000 ____D C:\Users\Thorsten\Downloads\WD_Quick_View_Setup_for_Windows
2016-11-27 01:13 - 2016-11-27 01:13 - 00000000 ____D C:\Users\Thorsten\AppData\Roaming\Macromedia
2016-11-27 01:13 - 2016-11-27 01:13 - 00000000 ____D C:\Users\Thorsten\AppData\Roaming\com.wd.WDMyCloud
2016-11-27 01:12 - 2016-11-27 01:13 - 63849440 _____ C:\Users\Thorsten\Downloads\WDMyCloud_win.exe
2016-11-27 01:12 - 2016-11-27 01:13 - 04341113 _____ C:\Users\Thorsten\Downloads\WD_Quick_View_Setup_for_Windows.zip
2016-11-27 01:09 - 2016-11-27 01:13 - 00000000 ____D C:\Users\Thorsten\AppData\Local\Western Digital
2016-11-27 01:08 - 2016-11-27 02:23 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-27 01:08 - 2016-11-27 02:23 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-27 01:08 - 2016-11-27 01:17 - 00000000 ____D C:\Users\Thorsten\AppData\Local\Google
2016-11-27 01:08 - 2016-11-27 01:09 - 71601392 _____ C:\Users\Thorsten\Downloads\mc_windows_setup.exe
2016-11-27 01:08 - 2016-11-27 01:08 - 01065376 _____ (Google Inc.) C:\Users\Thorsten\Downloads\ChromeSetup.exe
2016-11-27 01:08 - 2016-11-27 01:08 - 00004188 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-11-27 01:08 - 2016-11-27 01:08 - 00003956 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-11-27 01:08 - 2016-11-27 01:08 - 00002336 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-27 01:08 - 2016-11-27 01:08 - 00002324 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-11-27 01:08 - 2016-11-27 01:08 - 00000000 ____D C:\Program Files (x86)\Google
2016-11-27 00:43 - 2016-11-27 02:33 - 00000000 ____D C:\Users\Thorsten\AppData\Roaming\Logitech
2016-11-27 00:43 - 2016-11-27 00:43 - 00000000 ____D C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Logitech
2016-11-27 00:43 - 2016-11-27 00:43 - 00000000 ____D C:\Users\Thorsten\AppData\Local\Deployment
2016-11-27 00:14 - 2016-11-27 00:59 - 00000000 ____D C:\Users\Thorsten\AppData\Local\MicrosoftEdge
2016-11-27 00:11 - 2016-11-27 02:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2016-11-27 00:11 - 2016-11-27 02:34 - 00000000 ____D C:\ProgramData\Logishrd
2016-11-27 00:11 - 2016-11-27 02:33 - 00000000 ____D C:\Users\Thorsten\AppData\Roaming\Logishrd
2016-11-27 00:11 - 2016-11-27 02:33 - 00000000 ____D C:\Program Files\Logitech
2016-11-27 00:11 - 2016-11-27 00:11 - 00000000 ____D C:\Users\Thorsten\AppData\Local\PeerDistRepub
2016-11-27 00:10 - 2016-11-27 00:10 - 00003338 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task
2016-11-27 00:09 - 2016-11-27 00:10 - 00002392 _____ C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-11-27 00:09 - 2016-11-27 00:09 - 00000000 ____D C:\Users\Thorsten\AppData\Roaming\Skype
2016-11-27 00:09 - 2016-11-27 00:09 - 00000000 ____D C:\Users\Thorsten\AppData\Local\Comms
2016-11-27 00:09 - 2016-11-27 00:09 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-11-27 00:08 - 2016-11-27 00:08 - 00000000 ____D C:\Users\Thorsten\AppData\Local\Publishers
2016-11-27 00:07 - 2016-12-02 02:58 - 00000000 ____D C:\Users\Thorsten\AppData\Local\Packages
2016-11-27 00:07 - 2016-11-27 02:30 - 00000000 ____D C:\Users\Thorsten\AppData\Local\ConnectedDevicesPlatform
2016-11-27 00:07 - 2016-11-27 00:43 - 00000000 ____D C:\Users\Thorsten\AppData\Local\Apps\2.0
2016-11-27 00:07 - 2016-11-27 00:07 - 00000020 ___SH C:\Users\Thorsten\ntuser.ini
2016-11-27 00:07 - 2016-11-27 00:07 - 00000000 ____D C:\Users\Thorsten\AppData\Roaming\Adobe
2016-11-27 00:07 - 2016-11-27 00:07 - 00000000 ____D C:\Users\Thorsten\AppData\Local\VirtualStore
2016-11-27 00:07 - 2016-11-27 00:07 - 00000000 ____D C:\Users\Thorsten\AppData\Local\TileDataLayer
2016-11-26 23:55 - 2016-12-05 22:39 - 02390820 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\Default User
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Users\All Users
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\ProgramData\Vorlagen
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\ProgramData\Startmenü
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\ProgramData\Dokumente
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2016-11-26 23:54 - 2016-11-26 23:54 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2016-11-26 23:53 - 2016-11-26 23:53 - 00017426 _____ C:\Users\Thorsten\Desktop\Entfernte Apps.html
2016-11-26 23:53 - 2016-11-26 23:53 - 00016796 _____ C:\Users\ttjh1\Desktop\Entfernte Apps.html
2016-11-26 23:53 - 2016-07-16 12:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2016-11-26 23:50 - 2016-12-04 22:21 - 00000000 ____D C:\Users\Thorsten
2016-11-26 23:50 - 2016-12-02 23:35 - 00000000 ____D C:\Users\ttjh1
2016-11-26 23:50 - 2016-11-27 04:50 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\ttjh1\Vorlagen
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\ttjh1\Startmenü
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\ttjh1\Netzwerkumgebung
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\ttjh1\Lokale Einstellungen
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\ttjh1\Eigene Dateien
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\ttjh1\Druckumgebung
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\ttjh1\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\ttjh1\AppData\Local\Verlauf
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\ttjh1\AppData\Local\Anwendungsdaten
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\ttjh1\Anwendungsdaten
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\Thorsten\Vorlagen
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\Thorsten\Startmenü
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\Thorsten\Netzwerkumgebung
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\Thorsten\Lokale Einstellungen
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\Thorsten\Eigene Dateien
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\Thorsten\Druckumgebung
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\Thorsten\Documents\Eigene Videos
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\Thorsten\Documents\Eigene Musik
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\Thorsten\Documents\Eigene Bilder
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\Thorsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\Thorsten\AppData\Local\Verlauf
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\Thorsten\AppData\Local\Anwendungsdaten
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 _SHDL C:\Users\Thorsten\Anwendungsdaten
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 ____D C:\ProgramData\USOShared
2016-11-26 23:50 - 2016-11-26 23:50 - 00000000 ____D C:\ProgramData\NVIDIA
2016-11-26 23:49 - 2016-12-05 22:59 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-11-26 23:49 - 2016-12-05 22:35 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-11-26 23:49 - 2016-12-05 19:07 - 00198392 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-11-26 23:49 - 2016-11-26 23:49 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-11-26 23:49 - 2016-11-26 23:49 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-11-26 23:49 - 2016-11-26 23:49 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-11-26 23:49 - 2015-11-05 16:08 - 06358648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2016-11-26 23:49 - 2015-11-05 16:08 - 02983216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2016-11-26 23:49 - 2015-11-05 16:08 - 02554672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2016-11-26 23:49 - 2015-11-05 16:08 - 00938616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2016-11-26 23:49 - 2015-11-05 16:08 - 00385328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2016-11-26 23:49 - 2015-11-05 16:08 - 00062584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2016-11-26 23:49 - 2015-10-28 14:49 - 06027430 _____ C:\WINDOWS\system32\nvcoproc.bin
2016-11-26 23:48 - 2016-11-27 00:23 - 00000000 ____D C:\Windows.old
2016-11-26 23:48 - 2016-11-26 23:54 - 00000000 ___DC C:\WINDOWS\Panther
2016-11-26 23:48 - 2016-11-26 23:49 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2016-11-26 23:48 - 2016-11-26 23:48 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-11-26 23:48 - 2016-11-26 23:48 - 00000000 ____D C:\WINDOWS\InfusedApps
2016-11-26 23:47 - 2016-12-05 22:39 - 01092770 _____ C:\WINDOWS\system32\perfh007.dat
2016-11-26 23:47 - 2016-12-05 22:39 - 00247148 _____ C:\WINDOWS\system32\perfc007.dat
2016-11-26 23:47 - 2016-11-26 23:47 - 00305594 _____ C:\WINDOWS\system32\perfi007.dat
2016-11-26 23:47 - 2016-11-26 23:47 - 00040390 _____ C:\WINDOWS\system32\perfd007.dat
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\SysWOW64\de
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\SysWOW64\0409
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\system32\winrm
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\system32\WCN
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\system32\slmgr
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\system32\de
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\system32\0409
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\Setup
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\OCR
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\DigitalLocker
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\Program Files\MSBuild
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-11-26 23:47 - 2016-11-26 23:47 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-11-26 23:46 - 2016-10-29 00:56 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-11-26 23:46 - 2016-10-29 00:56 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-26 23:45 - 2016-12-05 21:16 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-11-26 23:45 - 2016-12-05 20:30 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-11-26 23:45 - 2016-12-04 00:40 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-11-26 23:45 - 2016-12-03 20:00 - 00000000 ___HD C:\Program Files\WindowsApps
2016-11-26 23:45 - 2016-11-30 00:16 - 00000000 ____D C:\WINDOWS\rescache
2016-11-26 23:45 - 2016-11-29 00:13 - 00000000 ____D C:\WINDOWS\Registration
2016-11-26 23:45 - 2016-11-27 04:55 - 00000000 ____D C:\WINDOWS\appcompat
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ___SD C:\WINDOWS\system32\dsc
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ___RD C:\Program Files\Windows Defender
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ____D C:\WINDOWS\system32\setup
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ____D C:\WINDOWS\system32\migwiz
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ____D C:\WINDOWS\ShellExperiences
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ____D C:\WINDOWS\Provisioning
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-11-26 23:45 - 2016-11-27 02:23 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-11-26 23:45 - 2016-11-27 02:22 - 00015425 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2016-11-26 23:45 - 2016-11-26 23:54 - 00000000 ____D C:\Program Files\Windows NT
2016-11-26 23:45 - 2016-11-26 23:53 - 00000000 __RHD C:\Users\Public\Libraries
2016-11-26 23:45 - 2016-11-26 23:53 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-11-26 23:45 - 2016-11-26 23:53 - 00000000 ____D C:\WINDOWS\system32\spool
2016-11-26 23:45 - 2016-11-26 23:53 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2016-11-26 23:45 - 2016-11-26 23:52 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-11-26 23:45 - 2016-11-26 23:50 - 00000000 ___RD C:\WINDOWS\PrintDialog
2016-11-26 23:45 - 2016-11-26 23:50 - 00000000 ___RD C:\WINDOWS\MiracastView
2016-11-26 23:45 - 2016-11-26 23:50 - 00000000 ____D C:\WINDOWS\CSC
2016-11-26 23:45 - 2016-11-26 23:49 - 00000000 ____D C:\WINDOWS\Help
2016-11-26 23:45 - 2016-11-26 23:48 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-11-26 23:45 - 2016-11-26 23:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2016-11-26 23:45 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2016-11-26 23:45 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2016-11-26 23:45 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Com
2016-11-26 23:45 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\SystemApps
2016-11-26 23:45 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-11-26 23:45 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\system32\MUI
2016-11-26 23:45 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\system32\Com
2016-11-26 23:45 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\IME
2016-11-26 23:45 - 2016-11-26 23:47 - 00000000 ____D C:\Program Files\Common Files\System
2016-11-26 23:45 - 2016-11-26 23:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 __SHD C:\Program Files\Windows Sidebar
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 __RSD C:\WINDOWS\Media
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ___SD C:\WINDOWS\system32\Nui
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ___SD C:\WINDOWS\system32\Configuration
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ___RD C:\WINDOWS\Offline Web Pages
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\Web
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\Vss
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\tracing
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\TAPI
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\ras
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SystemResources
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\WinMetadata
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\winevt
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\ras
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\ProximityToast
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\PointOfService
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\MsDtc
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\Ipmi
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\IME
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\icsxml
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\ias
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\GroupPolicyUsers
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\downlevel
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\DDFs
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\config\Journal
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\Bthprops
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\AppLocker
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\System
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SKB
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\security
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\schemas
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\SchCache
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\Resources
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\RemotePackages
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\PLA
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\Performance
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\ModemLogs
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\L2Schemas
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\InputMethod
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\Globalization
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\GameBarPresenceWriter
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\Cursors
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\Branding
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\addins
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\ProgramData\USOPrivate
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\ProgramData\Comms
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\Program Files\Common Files\Services
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\Program Files (x86)\Windows NT
2016-11-26 23:45 - 2016-11-26 23:45 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-11-26 23:45 - 2016-11-26 23:44 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2016-11-26 23:45 - 2016-11-26 23:44 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2016-11-26 23:45 - 2016-11-26 23:44 - 00215943 _____ C:\WINDOWS\system32\dssec.dat
2016-11-26 23:45 - 2016-11-26 23:44 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2016-11-26 23:45 - 2016-11-26 23:44 - 00027136 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll
2016-11-26 23:45 - 2016-11-26 23:44 - 00017463 _____ C:\WINDOWS\system32\Drivers\etc\services
2016-11-26 23:45 - 2016-11-26 23:44 - 00004096 _____ C:\WINDOWS\system32\config\VSMIDK
2016-11-26 23:45 - 2016-11-26 23:44 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2016-11-26 23:45 - 2016-11-26 23:44 - 00001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2016-11-26 23:45 - 2016-11-26 23:44 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2016-11-26 23:45 - 2016-11-26 23:44 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2016-11-26 23:45 - 2016-11-26 23:44 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT
2016-11-26 23:45 - 2016-11-26 23:44 - 00000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2016-11-26 23:45 - 2016-11-26 23:44 - 00000219 _____ C:\WINDOWS\system.ini
2016-11-26 23:45 - 2016-11-26 23:44 - 00000092 _____ C:\WINDOWS\win.ini
2016-11-26 23:44 - 2016-11-30 03:08 - 00000000 ____D C:\WINDOWS\INF
2016-11-26 23:42 - 2016-12-05 22:34 - 01835008 _____ C:\WINDOWS\system32\config\BBI
2016-11-26 23:42 - 2016-11-28 23:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-11-26 23:42 - 2016-11-26 23:49 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2016-11-26 23:42 - 2016-11-26 23:47 - 00000000 ____D C:\WINDOWS\servicing
2016-11-26 23:42 - 2016-11-26 23:45 - 00000000 ____D C:\WINDOWS\system32\SMI
2016-11-26 20:17 - 2016-11-26 20:17 - 00376528 _____ (Microsoft Corporation) C:\Users\Thorsten\Downloads\Nicht bestätigt 574898.crdownload
2016-11-26 04:07 - 2016-11-26 04:07 - 00000000 ____D C:\Users\Thorsten\Desktop\slenf2aw.fmg
2016-11-26 01:48 - 2016-11-26 01:48 - 25401064 _____ (Logitech Inc.) C:\Users\Thorsten\Downloads\Options_6.30.80 (1).exe
2016-11-26 01:31 - 2016-11-26 01:31 - 04147600 _____ ($Co_Name Inc.) C:\Users\Thorsten\Downloads\unifying250.exe
2016-11-25 18:57 - 2016-11-25 18:57 - 25401064 _____ (Logitech Inc.) C:\Users\Thorsten\Downloads\Options_6.30.80.exe
2016-11-20 20:10 - 2016-12-01 23:14 - 00000000 ____D C:\Users\Thorsten\AppData\LocalLow\Mozilla
2016-11-20 20:09 - 2016-11-20 20:09 - 00243656 _____ C:\Users\Thorsten\Downloads\Firefox Setup Stub 50.0.exe
2016-11-19 00:03 - 2016-11-19 00:03 - 02952963 _____ C:\Users\Thorsten\Downloads\manual (1).pdf
2016-11-19 00:01 - 2016-11-19 00:01 - 02952963 _____ C:\Users\Thorsten\Downloads\manual.pdf
2016-11-17 17:17 - 2016-11-17 17:17 - 00203900 _____ C:\Users\Thorsten\Downloads\3441119-3290097-Feedback.pdf
2016-11-17 17:07 - 2016-11-17 17:07 - 00183388 _____ C:\Users\Thorsten\Downloads\3440522-3289533-Feedback.pdf
2016-11-16 21:15 - 2016-11-16 21:15 - 00001518 _____ C:\Users\Thorsten\Downloads\LifeCam3.60 (1) - Verknüpfung.lnk
2016-11-16 21:15 - 2016-11-16 21:15 - 00001500 _____ C:\Users\Thorsten\Downloads\ifunbox_setup - Verknüpfung.lnk
2016-11-16 21:15 - 2016-11-16 21:15 - 00001482 _____ C:\Users\Thorsten\Downloads\LifeCam3.60 - Verknüpfung.lnk
2016-11-16 21:15 - 2016-11-16 21:15 - 00001080 _____ C:\Users\Thorsten\Downloads\node-v4.6.1.tar.gz - Verknüpfung.lnk
2016-11-14 18:18 - 2016-11-26 23:30 - 00000000 ___RD C:\Users\Thorsten\iCloudDrive
2016-11-13 03:54 - 2016-11-13 03:54 - 00000000 ____D C:\Users\Thorsten\Documents\Ashampoo Burning Studio 16
2016-11-10 03:48 - 2016-11-10 03:48 - 00504109 _____ C:\Users\Thorsten\Downloads\smartset (4).zip
2016-11-10 03:34 - 2016-11-10 03:35 - 00081878 _____ C:\Users\Thorsten\Downloads\TouchPro_Pro-G_DS_1.pdf
2016-11-10 00:02 - 2016-11-02 13:01 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-11-10 00:02 - 2016-11-02 13:01 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-11-10 00:02 - 2016-11-02 12:22 - 01570672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-11-10 00:02 - 2016-11-02 12:20 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-11-10 00:02 - 2016-11-02 12:13 - 01883784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-11-10 00:02 - 2016-11-02 12:13 - 00773720 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2016-11-10 00:02 - 2016-11-02 12:12 - 00376672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2016-11-10 00:02 - 2016-11-02 12:12 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-11-10 00:02 - 2016-11-02 12:10 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2016-11-10 00:02 - 2016-11-02 12:09 - 02257104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-11-10 00:02 - 2016-11-02 12:08 - 00576408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2016-11-10 00:02 - 2016-11-02 12:08 - 00186424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2016-11-10 00:02 - 2016-11-02 12:05 - 06657176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-11-10 00:02 - 2016-11-02 12:05 - 03892352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-11-10 00:02 - 2016-11-02 12:05 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-11-10 00:02 - 2016-11-02 12:05 - 00951904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-11-10 00:02 - 2016-11-02 12:05 - 00405856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-11-10 00:02 - 2016-11-02 12:04 - 04312248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-11-10 00:02 - 2016-11-02 12:03 - 00714592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2016-11-10 00:02 - 2016-11-02 12:02 - 00682816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2016-11-10 00:02 - 2016-11-02 12:02 - 00238056 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2016-11-10 00:02 - 2016-11-02 12:01 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-11-10 00:02 - 2016-11-02 12:01 - 00545936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-11-10 00:02 - 2016-11-02 12:00 - 08156080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-11-10 00:02 - 2016-11-02 12:00 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-11-10 00:02 - 2016-11-02 12:00 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2016-11-10 00:02 - 2016-11-02 11:59 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-11-10 00:02 - 2016-11-02 11:50 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-11-10 00:02 - 2016-11-02 11:49 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2016-11-10 00:02 - 2016-11-02 11:49 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-11-10 00:02 - 2016-11-02 11:47 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-11-10 00:02 - 2016-11-02 11:46 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-11-10 00:02 - 2016-11-02 11:44 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-11-10 00:02 - 2016-11-02 11:44 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthExt.dll
2016-11-10 00:02 - 2016-11-02 11:43 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-11-10 00:02 - 2016-11-02 11:42 - 00632832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll
2016-11-10 00:02 - 2016-11-02 11:42 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2016-11-10 00:02 - 2016-11-02 11:42 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2016-11-10 00:02 - 2016-11-02 11:40 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll
2016-11-10 00:02 - 2016-11-02 11:39 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2016-11-10 00:02 - 2016-11-02 11:38 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2016-11-10 00:02 - 2016-11-02 11:37 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe
2016-11-10 00:02 - 2016-11-02 11:36 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-11-10 00:02 - 2016-11-02 11:36 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe
2016-11-10 00:02 - 2016-11-02 11:33 - 12349952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-11-10 00:02 - 2016-11-02 11:33 - 03307520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-11-10 00:02 - 2016-11-02 11:32 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsext.dll
2016-11-10 00:02 - 2016-11-02 11:31 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2016-11-10 00:02 - 2016-11-02 11:31 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe
2016-11-10 00:02 - 2016-11-02 11:31 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2016-11-10 00:02 - 2016-11-02 11:31 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-11-10 00:02 - 2016-11-02 11:30 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-11-10 00:02 - 2016-11-02 11:30 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2016-11-10 00:02 - 2016-11-02 11:30 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2016-11-10 00:02 - 2016-11-02 11:30 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-11-10 00:02 - 2016-11-02 11:29 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-11-10 00:02 - 2016-11-02 11:29 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-11-10 00:02 - 2016-11-02 11:29 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2016-11-10 00:02 - 2016-11-02 11:29 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll
2016-11-10 00:02 - 2016-11-02 11:28 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-11-10 00:02 - 2016-11-02 11:28 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenterCPL.dll
2016-11-10 00:02 - 2016-11-02 11:28 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2016-11-10 00:02 - 2016-11-02 11:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2016-11-10 00:02 - 2016-11-02 11:28 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2016-11-10 00:02 - 2016-11-02 11:28 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2016-11-10 00:02 - 2016-11-02 11:28 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2016-11-10 00:02 - 2016-11-02 11:28 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chartv.dll
2016-11-10 00:02 - 2016-11-02 11:27 - 02458112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
2016-11-10 00:02 - 2016-11-02 11:27 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-11-10 00:02 - 2016-11-02 11:27 - 00580608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll
2016-11-10 00:02 - 2016-11-02 11:27 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2016-11-10 00:02 - 2016-11-02 11:27 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-11-10 00:02 - 2016-11-02 11:27 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2016-11-10 00:02 - 2016-11-02 11:26 - 02747392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2016-11-10 00:02 - 2016-11-02 11:26 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2016-11-10 00:02 - 2016-11-02 11:26 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2016-11-10 00:02 - 2016-11-02 11:26 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-11-10 00:02 - 2016-11-02 11:26 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll
2016-11-10 00:02 - 2016-11-02 11:26 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2016-11-10 00:02 - 2016-11-02 11:26 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2016-11-10 00:02 - 2016-11-02 11:26 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2016-11-10 00:02 - 2016-11-02 11:25 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2016-11-10 00:02 - 2016-11-02 11:25 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2016-11-10 00:02 - 2016-11-02 11:25 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2016-11-10 00:02 - 2016-11-02 11:25 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-11-10 00:02 - 2016-11-02 11:24 - 00940032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll
2016-11-10 00:02 - 2016-11-02 11:23 - 03106304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2016-11-10 00:02 - 2016-11-02 11:23 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys
2016-11-10 00:02 - 2016-11-02 11:22 - 13441024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-11-10 00:02 - 2016-11-02 11:22 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-11-10 00:02 - 2016-11-02 11:22 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-11-10 00:02 - 2016-11-02 11:21 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-11-10 00:02 - 2016-11-02 11:19 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\chartv.dll
2016-11-10 00:02 - 2016-11-02 11:19 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-11-10 00:02 - 2016-11-02 11:18 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2016-11-10 00:02 - 2016-11-02 11:18 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll
2016-11-10 00:02 - 2016-11-02 11:18 - 00779776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2016-11-10 00:02 - 2016-11-02 11:17 - 01282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-11-10 00:02 - 2016-11-02 11:17 - 00909824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2016-11-10 00:02 - 2016-11-02 11:17 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2016-11-10 00:02 - 2016-11-02 11:17 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2016-11-10 00:02 - 2016-11-02 11:16 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2016-11-10 00:02 - 2016-11-02 11:16 - 03133440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2016-11-10 00:02 - 2016-11-02 11:16 - 02512384 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2016-11-10 00:02 - 2016-11-02 11:16 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2016-11-10 00:02 - 2016-11-02 11:16 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-11-10 00:02 - 2016-11-02 11:16 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
2016-11-10 00:02 - 2016-11-02 11:16 - 00308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll
2016-11-10 00:02 - 2016-11-02 11:15 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2016-11-10 00:02 - 2016-11-02 11:15 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2016-11-10 00:02 - 2016-11-02 11:14 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-11-10 00:02 - 2016-11-02 09:20 - 00446896 _____ C:\WINDOWS\system32\ApnDatabase.xml
2016-11-10 00:01 - 2016-11-02 12:22 - 00601712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2016-11-10 00:01 - 2016-11-02 12:20 - 00378720 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-11-10 00:01 - 2016-11-02 12:15 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-11-10 00:01 - 2016-11-02 12:15 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-11-10 00:01 - 2016-11-02 12:14 - 07816544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-11-10 00:01 - 2016-11-02 12:13 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-11-10 00:01 - 2016-11-02 12:13 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-11-10 00:01 - 2016-11-02 12:13 - 00423776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2016-11-10 00:01 - 2016-11-02 12:12 - 02255712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-11-10 00:01 - 2016-11-02 12:08 - 00602464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-11-10 00:01 - 2016-11-02 12:08 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-11-10 00:01 - 2016-11-02 12:05 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-11-10 00:01 - 2016-11-02 12:04 - 02678056 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2016-11-10 00:01 - 2016-11-02 12:04 - 00596832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2016-11-10 00:01 - 2016-11-02 12:03 - 02750936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-11-10 00:01 - 2016-11-02 12:02 - 00848736 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-11-10 00:01 - 2016-11-02 12:02 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-11-10 00:01 - 2016-11-02 12:01 - 01425000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2016-11-10 00:01 - 2016-11-02 12:01 - 01415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2016-11-10 00:01 - 2016-11-02 12:01 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll
2016-11-10 00:01 - 2016-11-02 12:01 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2016-11-10 00:01 - 2016-11-02 12:00 - 22223968 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-11-10 00:01 - 2016-11-02 12:00 - 04130432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-11-10 00:01 - 2016-11-02 12:00 - 01061968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-11-10 00:01 - 2016-11-02 11:56 - 01609920 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2016-11-10 00:01 - 2016-11-02 11:56 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2016-11-10 00:01 - 2016-11-02 11:56 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-11-10 00:01 - 2016-11-02 11:56 - 00628552 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-11-10 00:01 - 2016-11-02 11:56 - 00322912 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll
2016-11-10 00:01 - 2016-11-02 11:55 - 00048992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\iorate.sys
2016-11-10 00:01 - 2016-11-02 11:48 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2016-11-10 00:01 - 2016-11-02 11:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2016-11-10 00:01 - 2016-11-02 11:48 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsext.dll
2016-11-10 00:01 - 2016-11-02 11:47 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2016-11-10 00:01 - 2016-11-02 11:47 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2016-11-10 00:01 - 2016-11-02 11:46 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2016-11-10 00:01 - 2016-11-02 11:45 - 00492032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-11-10 00:01 - 2016-11-02 11:45 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2016-11-10 00:01 - 2016-11-02 11:45 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2016-11-10 00:01 - 2016-11-02 11:44 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2016-11-10 00:01 - 2016-11-02 11:43 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8.dll
2016-11-10 00:01 - 2016-11-02 11:43 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2016-11-10 00:01 - 2016-11-02 11:43 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2016-11-10 00:01 - 2016-11-02 11:43 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2016-11-10 00:01 - 2016-11-02 11:42 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2016-11-10 00:01 - 2016-11-02 11:42 - 00549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenterCPL.dll
2016-11-10 00:01 - 2016-11-02 11:42 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-11-10 00:01 - 2016-11-02 11:42 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-11-10 00:01 - 2016-11-02 11:41 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2016-11-10 00:01 - 2016-11-02 11:40 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll
2016-11-10 00:01 - 2016-11-02 11:40 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-11-10 00:01 - 2016-11-02 11:39 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2016-11-10 00:01 - 2016-11-02 11:39 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll
2016-11-10 00:01 - 2016-11-02 11:38 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-11-10 00:01 - 2016-11-02 11:37 - 19415040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-11-10 00:01 - 2016-11-02 11:36 - 19415552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-11-10 00:01 - 2016-11-02 11:36 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetailsUpdate.dll
2016-11-10 00:01 - 2016-11-02 11:35 - 00336896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinfo32.exe
2016-11-10 00:01 - 2016-11-02 11:34 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-11-10 00:01 - 2016-11-02 11:34 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-11-10 00:01 - 2016-11-02 11:33 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-11-10 00:01 - 2016-11-02 11:32 - 00045056 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-11-10 00:01 - 2016-11-02 11:31 - 03196416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2016-11-10 00:01 - 2016-11-02 11:31 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll
2016-11-10 00:01 - 2016-11-02 11:31 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-11-10 00:01 - 2016-11-02 11:31 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2016-11-10 00:01 - 2016-11-02 11:31 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-11-10 00:01 - 2016-11-02 11:31 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-11-10 00:01 - 2016-11-02 11:30 - 12175360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-11-10 00:01 - 2016-11-02 11:30 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2016-11-10 00:01 - 2016-11-02 11:30 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-11-10 00:01 - 2016-11-02 11:30 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-11-10 00:01 - 2016-11-02 11:30 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll
2016-11-10 00:01 - 2016-11-02 11:29 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-11-10 00:01 - 2016-11-02 11:29 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2016-11-10 00:01 - 2016-11-02 11:29 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2016-11-10 00:01 - 2016-11-02 11:29 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2016-11-10 00:01 - 2016-11-02 11:29 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2016-11-10 00:01 - 2016-11-02 11:29 - 00276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2016-11-10 00:01 - 2016-11-02 11:29 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-11-10 00:01 - 2016-11-02 11:29 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2016-11-10 00:01 - 2016-11-02 11:28 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-11-10 00:01 - 2016-11-02 11:28 - 00807424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2016-11-10 00:01 - 2016-11-02 11:28 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-11-10 00:01 - 2016-11-02 11:28 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-11-10 00:01 - 2016-11-02 11:28 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCenter.dll
2016-11-10 00:01 - 2016-11-02 11:28 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.dll
2016-11-10 00:01 - 2016-11-02 11:28 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-11-10 00:01 - 2016-11-02 11:28 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2016-11-10 00:01 - 2016-11-02 11:28 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll
2016-11-10 00:01 - 2016-11-02 11:28 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2016-11-10 00:01 - 2016-11-02 11:28 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-11-10 00:01 - 2016-11-02 11:27 - 23677952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-11-10 00:01 - 2016-11-02 11:27 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
2016-11-10 00:01 - 2016-11-02 11:27 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-11-10 00:01 - 2016-11-02 11:27 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-11-10 00:01 - 2016-11-02 11:26 - 01880576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-11-10 00:01 - 2016-11-02 11:26 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-11-10 00:01 - 2016-11-02 11:26 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-11-10 00:01 - 2016-11-02 11:26 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-11-10 00:01 - 2016-11-02 11:26 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll
2016-11-10 00:01 - 2016-11-02 11:26 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-11-10 00:01 - 2016-11-02 11:25 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-11-10 00:01 - 2016-11-02 11:25 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-11-10 00:01 - 2016-11-02 11:25 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2016-11-10 00:01 - 2016-11-02 11:25 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-11-10 00:01 - 2016-11-02 11:24 - 03778560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-11-10 00:01 - 2016-11-02 11:23 - 02356736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2016-11-10 00:01 - 2016-11-02 11:23 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2016-11-10 00:01 - 2016-11-02 11:23 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll
2016-11-10 00:01 - 2016-11-02 11:23 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetailsUpdate.dll
2016-11-10 00:01 - 2016-11-02 11:22 - 13081600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-11-10 00:01 - 2016-11-02 11:22 - 00369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe
2016-11-10 00:01 - 2016-11-02 11:21 - 05111296 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2016-11-10 00:01 - 2016-11-02 11:20 - 02273792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-11-10 00:01 - 2016-11-02 11:20 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
2016-11-10 00:01 - 2016-11-02 11:19 - 08127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-11-10 00:01 - 2016-11-02 11:19 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-11-10 00:01 - 2016-11-02 11:19 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2016-11-10 00:01 - 2016-11-02 11:19 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2016-11-10 00:01 - 2016-11-02 11:19 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2016-11-10 00:01 - 2016-11-02 11:19 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll
2016-11-10 00:01 - 2016-11-02 11:18 - 01690112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-11-10 00:01 - 2016-11-02 11:18 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2016-11-10 00:01 - 2016-11-02 11:17 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-11-10 00:01 - 2016-11-02 11:17 - 00982528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-11-10 00:01 - 2016-11-02 11:16 - 04148736 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2016-11-10 00:01 - 2016-11-02 11:16 - 02688512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-11-10 00:01 - 2016-11-02 11:16 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-11-10 00:01 - 2016-11-02 11:16 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-11-10 00:01 - 2016-11-02 11:16 - 01637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-11-10 00:01 - 2016-11-02 11:16 - 01490944 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-11-10 00:01 - 2016-11-02 11:16 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-11-10 00:01 - 2016-11-02 11:16 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2016-11-10 00:01 - 2016-11-02 11:16 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-11-10 00:01 - 2016-11-02 11:15 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-11-10 00:01 - 2016-11-02 11:15 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-11-10 00:01 - 2016-11-02 11:15 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-11-10 00:01 - 2016-11-02 11:15 - 01348608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-11-10 00:01 - 2016-11-02 11:15 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2016-11-10 00:01 - 2016-11-02 11:13 - 03496960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2016-11-10 00:01 - 2016-11-02 11:13 - 03299840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2016-11-10 00:01 - 2016-11-02 11:13 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
2016-11-10 00:01 - 2016-11-02 10:11 - 00788624 _____ C:\WINDOWS\SysWOW64\locale.nls
2016-11-10 00:01 - 2016-11-02 10:11 - 00788624 _____ C:\WINDOWS\system32\locale.nls
2016-11-10 00:01 - 2016-08-02 05:30 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-11-08 18:21 - 2016-11-08 18:21 - 00201634 _____ C:\Users\Thorsten\Downloads\3422476-3265030-Feedback.pdf
2016-11-08 17:42 - 2016-11-08 17:42 - 00204175 _____ C:\Users\Thorsten\Downloads\3422449-3264996-Feedback.pdf
2016-11-08 17:29 - 2016-11-08 17:29 - 00184545 _____ C:\Users\Thorsten\Downloads\3422436-3264967-Feedback.pdf
2016-11-08 17:27 - 2016-11-08 17:27 - 00207692 _____ C:\Users\Thorsten\Downloads\3422408-3264956-Feedback.pdf
2016-11-08 16:58 - 2016-11-08 16:58 - 00213136 _____ C:\Users\Thorsten\Downloads\3422285-3264895-Feedback.pdf
2016-11-07 19:57 - 2016-11-07 19:57 - 00410392 _____ (Logitech) C:\Users\Thorsten\Downloads\MyHarmony-App (1).exe
2016-11-07 03:25 - 2016-11-07 03:25 - 02804122 _____ C:\Users\Thorsten\Downloads\enigma2-plugin-extensions-mediaportal_7.3.1_all.ipk
2016-11-07 03:23 - 2016-11-07 03:23 - 00820030 _____ C:\Users\Thorsten\Downloads\python-requests_2.11.1_git0_58d855e193-r1.1_mips32el.ipk
2016-11-07 03:23 - 2016-11-07 03:23 - 00184102 _____ C:\Users\Thorsten\Downloads\python-js2py_0.39_git0_144b1701fa-r1.1_mips32el.ipk
2016-11-07 03:23 - 2016-11-07 03:23 - 00016894 _____ C:\Users\Thorsten\Downloads\python-six_1.7.3-r1_mips32el.ipk
2016-11-07 02:41 - 2016-11-07 02:41 - 00000000 ____D C:\Users\Thorsten\Desktop\Neuer Ordner (2)

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-12-04 19:26 - 2016-02-13 18:32 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-11-30 10:11 - 2016-04-17 09:26 - 00000000 ___RD C:\Users\ttjh1\OneDrive
2016-11-28 23:36 - 2016-07-16 12:43 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TFTP.EXE
2016-11-28 23:35 - 2016-10-28 05:24 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmp.exe
2016-11-28 23:35 - 2016-10-28 05:24 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\snmp.exe
2016-11-28 23:35 - 2016-07-16 12:44 - 00194560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\snmpsnap.dll
2016-11-28 23:35 - 2016-07-16 12:44 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\evntwin.exe
2016-11-28 23:35 - 2016-07-16 12:44 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evntwin.exe
2016-11-28 23:35 - 2016-07-16 12:44 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\evntagnt.dll
2016-11-28 23:35 - 2016-07-16 12:44 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evntagnt.dll
2016-11-28 23:35 - 2016-07-16 12:44 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\hostmib.dll
2016-11-28 23:35 - 2016-07-16 12:44 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\lmmib2.dll
2016-11-28 23:35 - 2016-07-16 12:44 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hostmib.dll
2016-11-28 23:35 - 2016-07-16 12:44 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lmmib2.dll
2016-11-28 23:35 - 2016-07-16 12:44 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\evntcmd.exe
2016-11-28 23:35 - 2016-07-16 12:44 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evntcmd.exe
2016-11-28 23:35 - 2016-07-16 12:44 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64mib.dll
2016-11-28 23:35 - 2016-07-16 12:44 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmpmib.dll
2016-11-28 23:35 - 2016-07-16 12:44 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\snmpmib.dll
2016-11-28 23:35 - 2016-07-16 12:43 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmpsnap.dll
2016-11-28 23:35 - 2016-07-16 12:43 - 00107882 _____ C:\WINDOWS\SysWOW64\mib_ii.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00107882 _____ C:\WINDOWS\system32\mib_ii.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00048593 _____ C:\WINDOWS\SysWOW64\hostmib.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00048593 _____ C:\WINDOWS\system32\hostmib.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00034317 _____ C:\WINDOWS\SysWOW64\msiprip2.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00034317 _____ C:\WINDOWS\system32\msiprip2.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00030448 _____ C:\WINDOWS\SysWOW64\mcastmib.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00030448 _____ C:\WINDOWS\system32\mcastmib.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00026236 _____ C:\WINDOWS\SysWOW64\wins.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00026236 _____ C:\WINDOWS\system32\wins.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00026100 _____ C:\WINDOWS\SysWOW64\lmmib2.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00026100 _____ C:\WINDOWS\system32\lmmib2.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00022462 _____ C:\WINDOWS\SysWOW64\rfc2571.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00022462 _____ C:\WINDOWS\system32\rfc2571.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00021271 _____ C:\WINDOWS\SysWOW64\http.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00021271 _____ C:\WINDOWS\system32\http.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00015799 _____ C:\WINDOWS\SysWOW64\ipforwd.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00015799 _____ C:\WINDOWS\system32\ipforwd.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00015032 _____ C:\WINDOWS\SysWOW64\authserv.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00015032 _____ C:\WINDOWS\system32\authserv.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00014032 _____ C:\WINDOWS\SysWOW64\accserv.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00014032 _____ C:\WINDOWS\system32\accserv.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00013767 _____ C:\WINDOWS\SysWOW64\msipbtp.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00013767 _____ C:\WINDOWS\system32\msipbtp.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00006179 _____ C:\WINDOWS\SysWOW64\ftp.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00006179 _____ C:\WINDOWS\system32\ftp.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00004597 _____ C:\WINDOWS\SysWOW64\dhcp.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00004597 _____ C:\WINDOWS\system32\dhcp.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00004411 _____ C:\WINDOWS\SysWOW64\smi.mib
2016-11-28 23:35 - 2016-07-16 12:43 - 00004411 _____ C:\WINDOWS\system32\smi.mib
2016-11-27 04:42 - 2016-08-19 01:05 - 03133144 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2016-11-27 04:42 - 2016-08-19 01:04 - 05793528 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV2apo.dll
2016-11-27 04:42 - 2016-08-19 00:51 - 05258248 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2016-11-27 04:42 - 2016-08-19 00:51 - 00023696 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2016-11-27 00:34 - 2016-08-18 01:13 - 00000000 ____D C:\Windows10Upgrade
2016-11-27 00:10 - 2016-04-17 00:15 - 00000000 ___RD C:\Users\Thorsten\OneDrive
2016-11-26 23:29 - 2016-07-06 18:20 - 00009612 _____ C:\CYGWIN_SYSLOG.TXT
2016-11-25 03:26 - 2016-09-15 23:38 - 00000000 ____D C:\Users\Thorsten\Desktop\Cydia
2016-11-14 18:19 - 2016-04-21 21:16 - 00000000 ____D C:\Users\Thorsten\Documents\Outlook-Dateien
2016-11-14 04:00 - 2016-08-18 01:13 - 00000719 _____ C:\Users\Thorsten\Desktop\Windows 10-Upgrade-Assistent.lnk
2016-11-10 02:55 - 2016-05-06 17:19 - 00000000 ____D C:\Users\Thorsten\.dreamstream

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\Thorsten\NTUSER - Kopie.DAT
C:\Users\Thorsten\WDMyCloud_win.exe
C:\Users\totti\NTUSER (2).DAT


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2016-11-26 23:49

==================== Ende von FRST.txt ============================
Code:
eset online scan
C:\ProgramData\Logishrd\LogiOptions\Software\Current\dma_x64.dll        Variante von Win64/WebBar.B evtl. unerwünschte Anwendung
C:\Users\All Users\Logishrd\LogiOptions\Software\Current\dma_x64.dll        Variante von Win64/WebBar.B evtl. unerwünschte Anwendung
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\b\00000601000000073701.dat        Win32/Trustezeb.K Trojaner
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\c\20000702000000073701.dat        Variante von Win32/Kryptik.DHWI Trojaner
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\c\b0000702000000073701.dat        Win32/Trustezeb.J Trojaner
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\c\e0000502000000073701.dat        Variante von Win32/Injector.CQON Trojaner
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\d\e0000503000000073701.dat        Variante von Win32/Injector.CQON Trojaner
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\f\40000905000000073701.dat        Variante von Win32/Injector.UXF Trojaner
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\h\40000907000000073701.dat        Win32/Trustezeb.B Trojaner
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\i\40000908000000073701.dat        Win32/Trustezeb.B Trojaner
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\j\40000909000000073701.dat        Win32/Trustezeb.B Trojaner
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\j\f0000709000000073701.dat        Win32/Trustezeb.F Trojaner
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\k\4000090a000000073701.dat        Win32/Trustezeb.C Trojaner
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\l\4000090b000000073701.dat        Win32/Trustezeb.C Trojaner
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\m\2000070c000000073701.dat        Variante von MSIL/Injector.IFD Trojaner
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\m\4000090c000000073701.dat        Win32/Trustezeb.A Trojaner
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\n\2000070d000000073701.dat        Variante von MSIL/Injector.IBM Trojaner
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\n\4000090d000000073701.dat        Win32/Trustezeb.A Trojaner
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\o\4000090e000000073701.dat        Win32/Trustezeb.A Trojaner
C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\p\4000090f000000073701.dat        Win32/Trustezeb.A Trojaner
C:\Users\Thorsten\AppData\Local\Microsoft\Windows\INetCache\IE\1IKI76C9\logioptions_logitech[1].exe        Variante von Win32/WebBar.D evtl. unerwünschte Anwendung
C:\Users\Thorsten\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TM8BD2KG\request[1].htm        HTML/Refresh.BC Trojaner
C:\Users\Thorsten\AppData\Local\Temp\DMR\dmr_72.exe        Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung
C:\Users\Thorsten\AppData\Local\Temp\DMR\dmr_76.exe        Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung
C:\Users\Thorsten\AppData\Local\Temp\lu\nada_264_logioptions_logitech.exe        Variante von Win32/WebBar.D evtl. unerwünschte Anwendung
C:\Users\Thorsten\Desktop\Neuer Ordner\Wiiu\games\Super_Mario_3D_World_EUR_WiiU-ABSTRAKT\Share-Online.biz.htm        HTML/ScrInject.B Trojaner
C:\Users\Thorsten\Desktop\Neuer Ordner\Wiiu\games\Super_Mario_3D_World_EUR_WiiU-ABSTRAKT\Uploaded.htm        HTML/ScrInject.B Trojaner
C:\Users\Thorsten\Downloads\Options_6.30.80 (1).exe        Variante von Win32/WebBar.D evtl. unerwünschte Anwendung
C:\Users\Thorsten\Downloads\Options_6.30.80.exe        Variante von Win32/WebBar.D evtl. unerwünschte Anwendung
C:\Users\ttjh1\Downloads\NetSpeedMonitor 64 Bit - CHIP-Installer.exe        Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung
C:\Windows.old\Users\All Users\Logishrd\LogiOptions\Software\Current\dma_x64.dll        Variante von Win64/WebBar.B evtl. unerwünschte Anwendung
C:\Windows.old\Users\Thorsten\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00659b        Variante von Win32/WebBar.D evtl. unerwünschte Anwendung
C:\Windows.old\Users\Thorsten\AppData\Local\Microsoft\Windows\INetCache\IE\VZR6RD7Z\logioptions_logitech[1].exe        Variante von Win32/WebBar.D evtl. unerwünschte Anwendung
C:\Windows.old\Users\Thorsten\AppData\Local\Temp\DMR\dmr_72.exe        Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung
C:\Windows.old\Users\Thorsten\AppData\Local\Temp\lu\nada_264_logioptions_logitech.exe        Variante von Win32/WebBar.D evtl. unerwünschte Anwendung
D:\Users\All Users\Logishrd\LogiOptions\Software\Current\dma_x64.dll        Variante von Win64/WebBar.B evtl. unerwünschte Anwendung
D:\Users\Thorsten\Downloads\HP USB Disk Storage Format Tool - CHIP-Installer.exe        Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung

deeprybka 06.12.2016 05:39
:hallo:

Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das...:abklatsch:
  • Bitte arbeite alle Schritte der Reihe nach ab.
  • Lies die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem.
  • Führe bitte nur Scans durch, zu denen Du von mir aufgefordert wurdest.
  • Bitte kein Crossposting (posten in mehreren Foren).
  • Installiere oder deinstalliere während der Bereinigung keine Software, außer Du wurdest dazu aufgefordert.
  • Speichere alle unsere Tools auf dem Desktop ab. Link: So ladet Ihr unsere Tools richtig
  • Poste die Logfiles direkt in Deinen Thread in Code-Tags.
  • Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 24 Stunden nichts von mir liest, dann schreibe mir bitte eine PM.

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden.
Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert.
Adware & Co. können wir sehr gut entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Du mein clean :daumenhoc bekommst.


Los geht's:

Bitte auch Addition.txt posten.

totti6169 06.12.2016 16:18
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 05-12-2016
durchgeführt von totti (05-12-2016 23:05:47)
Gestartet von C:\Users\totti\Downloads
Windows 10 Pro Version 1607 (X64) (2016-11-26 22:54:06)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2586767532-3616519997-416612805-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2586767532-3616519997-416612805-503 - Limited - Disabled)
Gast (S-1-5-21-2586767532-3616519997-416612805-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2586767532-3616519997-416612805-1005 - Limited - Enabled)
jenny (S-1-5-21-2586767532-3616519997-416612805-1002 - Limited - Disabled)
Thorsten (S-1-5-21-2586767532-3616519997-416612805-1001 - Limited - Enabled) => C:\Users\Thorsten
totti (S-1-5-21-2586767532-3616519997-416612805-1006 - Administrator - Enabled) => C:\Users\totti
ttjh1 (S-1-5-21-2586767532-3616519997-416612805-1003 - Administrator - Enabled) => C:\Users\ttjh1

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
AI Suite 3 (HKLM-x32\...\{CD36E28B-6023-469A-91E7-049A2874EC13}) (Version: 1.01.49 - ASUSTeK Computer Inc.)
Apple Application Support (32-Bit) (HKLM-x32\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Asmedia USB Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.26.1 - Asmedia Technology)
ASUS Boot Setting (HKLM-x32\...\{7AAE9187-C24F-4073-A951-36C370E7A3A5}) (Version: 1.00.22 - ASUSTeK Computer Inc.)
ASUS ROG Connect Plus (HKLM-x32\...\{ECF51D37-52ED-4871-BF8B-FEA34B8B4120}) (Version: 1.00.30 - ASUSTeK Computer Inc.)
Asus Sonic Suite Plugins (HKLM-x32\...\{c5017606-8bde-4f85-94f4-ba61dcf59860}) (Version: 2.2.2801 - ASUSTeKcomputer.Inc)
ASUS(R) Intel(R) Extreme Tuning Utility (HKLM-x32\...\{969659ef-5e6c-4c40-8aec-6b1bd3819fab}) (Version: 6.1.2.208 - Intel Corporation)
ASUS(R) Intel(R) Extreme Tuning Utility (x32 Version: 6.1.2.208 - Intel Corporation) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CheckDevicesConfigurator (Version: 2.2.2801 - ASUSTeKcomputer.Inc) Hidden
EaseUS Todo PCTrans 9.0 (HKLM-x32\...\EaseUS Todo PCTrans_is1) (Version:  - EaseUS)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Front Base Driver (HKLM-x32\...\{3A02F836-5D7E-4DDE-ADAE-28DFA9B278DC}) (Version: 1.01.17 - ASUSTeK Computer Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
HDClone 6 Free Edition (HKLM\...\Miray.HDClone.fe.6.0.7.1031-{9111A38F-76E7-40B5-8E0F-EE2C0E43230D}) (Version: 6 - Miray Software AG)
Intel(R) Network Connections 20.2.4001.0 (HKLM\...\PROSetDX) (Version: 20.2.4001.0 - Intel)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation)
iTunes (HKLM\...\{554C62C7-E6BB-40F1-892B-F0AE02D3C135}) (Version: 12.5.3.17 - Apple Inc.)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
LauncherSetup (Version: 2.2.2801 - ASUSTeKcomputer.Inc) Hidden
Logitech Options (HKLM\...\LogiOptions) (Version:  - Logitech)
Logitech Solar App 1.10 (HKLM\...\SolarApp) (Version: 1.10.3 - Logitech)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40649 (HKLM-x32\...\{5d0723d3-cff7-4e07-8d0b-ada737deb5e6}) (Version: 12.0.40649.5 - Microsoft Corporation)
Mozilla Firefox 50.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.0.2 (x86 de)) (Version: 50.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.0.2.6177 - Mozilla)
NahimicSettingsConfigurator (Version: 2.2.2801 - ASUSTeKcomputer.Inc) Hidden
ProductDaemonSetup (Version: 2.2.2801 - ASUSTeKcomputer.Inc) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7904 - Realtek Semiconductor Corp.)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.9.7 - Samsung Electronics)
SonicRadarSetup (Version: 1.0.0.0 - ASUSTeKcomputer.Inc) Hidden
SonicStudioSetup (Version: 2.2.2801 - ASUSTeKcomputer.Inc) Hidden
SVLoadSense (HKLM-x32\...\{C4226734-F925-448C-8F15-0D5419F003DF}) (Version: 1.0.12 - SAVITECH)
SyncFileSetup (x86) (x32 Version: 1.3.5949.26210 - Western Digital Technologies, Inc) Hidden
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.71503 - TeamViewer)
WD Access (HKLM-x32\...\{046643f7-6206-46bb-8968-92c37fee39e0}) (Version: 1.4.5949.29996 - Western Digital Technologies, Inc.)
WD Access (x32 Version: 1.4.5949.29996 - Western Digital Technologies, Inc) Hidden
WD My Cloud (HKLM\...\{4B86F896-11DC-4711-BB60-81104832FA44}) (Version: 1.0.7.17 - Western Digital Technologies, Inc.)
WD Quick View (HKLM-x32\...\{BE1B25F9-5A51-4DB8-81FA-CE0CABC14D07}) (Version: 2.4.10.17 - Western Digital Technologies, Inc.)
WD Sync (HKLM-x32\...\{0d591303-bbc5-4645-a03b-1c3f75f1a762}) (Version: 1.3.5949.26210 - Western Digital Technologies, Inc.)
WiFi Station N (HKLM-x32\...\{155314D4-C46C-434A-9297-643E260232C0}) (Version: 3.7.0.0 - Hercules)
XTUPackage (HKLM-x32\...\{84D11A20-6E7F-4FBB-A2FB-117FCF871040}) (Version: 1.0.0 - ASUSTeK COMPUTER INC.)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {188B9885-CAC6-4C29-9051-F3FE2C0F4DF4} - System32\Tasks\SS2Svc32Run => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2Svc32.exe [2016-08-12] ()
Task: {188EF076-1076-41D7-875F-1DD8F69606C6} - System32\Tasks\SS2UILauncherRun => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2UILauncher.exe [2016-08-12] ()
Task: {2F5ACAD3-FDC4-49A4-91BF-D582F5424D5B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-27] (Google Inc.)
Task: {43B6F1BF-91BF-4BDD-BD97-EA8C0BE9C13F} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr.exe [2013-07-24] (ASUSTeK Computer Inc.)
Task: {5F4CF43C-7BEE-49B2-B0A0-8D7E6AC8A788} - System32\Tasks\ASUS\GpuFanHelper => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe [2016-03-07] (TODO: <Company name>)
Task: {81E98030-F60F-430C-AF12-C1A02FE6DF61} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2016-08-11] (ASUSTeK Computer Inc.)
Task: {8C538313-6404-41FF-867D-214170AAA8A1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-27] (Google Inc.)
Task: {8D28B0BE-DF11-4E05-BD63-4D7B59468AB9} - System32\Tasks\Intel\Intel Telemetry 2 (x86) => C:\Program Files (x86)\Intel\Telemetry 2.0\lrio.exe [2015-11-20] (Intel Corporation)
Task: {8DA5F8A2-2102-49F6-B97A-FF4B65DE6B9E} - System32\Tasks\SS2Svc64Run => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2Svc64.exe [2016-08-12] ()
Task: {9B4D2772-9992-4DE1-B9B9-6B5BCA519D46} - System32\Tasks\ASUS\RC TweakIt Server Execute => C:\Program Files (x86)\ASUS\ASUS ROG Connect Plus\RC TweakIt Server\AsBCLK.exe [2015-06-25] ()
Task: {A7857351-7FC8-4119-8720-ED706A5775D6} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2016-05-13] (Samsung Electronics.)
Task: {B230353A-C381-4FA6-9DF9-0B1C5FBB69CD} - System32\Tasks\ASUS\Push Notice Server Execute => C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe [2014-05-28] (ASUSTeK Computer Inc.)
Task: {B47F2739-667E-4812-8FF0-9BAC6C0FE401} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [2016-07-28] ()
Task: {F0820D76-C981-4B46-AD51-BFF9253FB633} - System32\Tasks\ASUS\WonderBox => C:\Program Files (x86)\ASUS\Front Base Driver\WBoxTT.exe [2015-08-05] ()

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 ____N () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-09-29 22:58 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-11-26 23:49 - 2015-11-05 16:08 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-11-27 04:15 - 2016-11-27 04:15 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
2016-10-05 18:17 - 2016-10-05 18:17 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-10-05 18:17 - 2016-10-05 18:17 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-11-27 04:16 - 2016-11-27 04:15 - 01360016 _____ () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
2016-08-12 12:17 - 2016-08-12 12:17 - 00287760 _____ () C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2OSD.dll
2016-08-12 12:17 - 2016-08-12 12:17 - 00209936 _____ () C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2DevProps.dll
2016-11-28 23:40 - 2015-06-25 10:42 - 01986872 _____ () C:\Program Files (x86)\ASUS\ASUS ROG Connect Plus\RC TweakIt Server\AsBCLK.exe
2016-11-27 04:16 - 2016-07-28 23:33 - 01269208 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
2016-09-29 22:58 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-12-04 19:27 - 2016-12-04 19:27 - 01864384 _____ () C:\Users\totti\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2016-11-28 23:39 - 2015-08-05 09:25 - 01384400 _____ () C:\Program Files (x86)\ASUS\Front Base Driver\WBoxTT.exe
2016-09-21 22:27 - 2016-09-07 05:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-11-10 00:02 - 2016-11-02 11:30 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-11-10 00:01 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-11-10 00:01 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-11-10 00:01 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-11-10 00:01 - 2016-11-02 11:15 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-11-10 00:01 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-11-10 00:01 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-11-27 04:16 - 2015-05-14 09:18 - 01075712 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe
2016-11-27 04:16 - 2014-08-28 10:37 - 00033424 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe
2016-11-27 04:16 - 2016-04-21 13:35 - 01529816 _____ () C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\AsPowerBar.exe
2016-11-27 04:50 - 2016-11-27 04:42 - 00105312 _____ () C:\WINDOWS\SYSTEM32\audioLibVc.dll
2016-08-12 12:15 - 2016-08-12 12:15 - 00557072 _____ () C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2UILauncher.exe
2016-08-12 12:15 - 2016-08-12 12:15 - 02741760 _____ () C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2svc32.exe
2016-08-12 12:18 - 2016-08-12 12:18 - 00486400 _____ () C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2svc64.exe
2016-12-05 20:19 - 2015-05-14 11:54 - 00422600 _____ () C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
2016-11-27 04:15 - 2016-12-05 22:35 - 00040232 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll
2016-11-27 04:15 - 2016-11-27 04:15 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll
2016-11-27 04:16 - 2015-09-17 10:58 - 00091648 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Log4cxxWrapper.dll
2016-11-27 04:16 - 2015-09-17 10:58 - 00147456 _____ () C:\Program Files (x86)\ASUS\AI Suite III\AssistFunc.dll
2016-11-27 04:16 - 2015-02-09 17:53 - 00872960 _____ () C:\Program Files (x86)\ASUS\AI Suite III\AI Charger+\AIChargerPlus.dll
2016-11-27 04:16 - 2016-08-15 10:36 - 04712752 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\dip4.dll
2016-11-27 04:16 - 2016-03-07 21:42 - 00091648 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\Log4cxxWrapper.dll
2016-11-27 04:16 - 2015-11-05 11:13 - 01464320 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Mobo Connect\MoboConnect.dll
2016-11-27 04:16 - 2015-09-17 10:58 - 00838456 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Version\Version.dll
2016-11-28 23:49 - 2016-08-02 15:05 - 00061440 _____ () C:\Program Files (x86)\ASUS\VGA COM\1.00.26\Exeio.dll
2016-11-28 23:49 - 2016-08-02 14:51 - 01752576 _____ () C:\Program Files (x86)\ASUS\VGA COM\1.00.26\Vender.dll
2016-11-28 23:48 - 2016-08-05 15:25 - 00669656 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.25\aaHMLib.dll
2016-11-27 04:17 - 2012-01-19 09:39 - 00028672 _____ () C:\Program Files (x86)\ASUS\AI Suite III\USB BIOS Flashback\PEInfo.dll
2016-08-12 12:14 - 2016-08-12 12:14 - 00256016 _____ () C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2OSD.dll
2016-08-12 12:14 - 2016-08-12 12:14 - 00178704 _____ () C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2DevProps.dll
2016-11-27 04:16 - 2015-09-17 10:58 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite III\ImageHelper.dll
2016-11-27 04:16 - 2015-09-17 10:58 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\pngio.dll
2016-11-27 04:17 - 2010-02-25 14:01 - 00139264 _____ () C:\Program Files (x86)\ASUS\AI Suite III\USB BIOS Flashback\Aszip.dll
2016-11-27 04:17 - 2015-10-14 14:47 - 02613248 _____ () C:\Program Files (x86)\ASUS\AI Suite III\USB BIOS Flashback\EzULIB_UFB.dll
2016-11-28 23:40 - 2015-06-05 09:37 - 00179712 _____ () C:\Program Files (x86)\ASUS\ASUS ROG Connect Plus\RC TweakIt Server\AsusService.dll
2016-11-27 04:16 - 2016-04-20 23:52 - 00260056 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4cTDPAction.dll
2016-11-27 04:16 - 2016-05-04 21:46 - 00786416 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4DIGIPowerControlAction.dll
2016-11-27 04:16 - 2016-04-20 23:52 - 00878040 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4EpuAction.dll
2016-11-27 04:16 - 2016-04-20 23:52 - 00828376 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4FanAction.dll
2016-11-27 04:16 - 2016-04-20 23:52 - 00838616 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4TurboVEVOAction.dll
2016-11-27 04:16 - 2013-11-20 10:10 - 00662016 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\aaHMLib.dll
2016-11-27 04:16 - 2013-07-02 10:40 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\pngio.dll
2016-08-12 12:15 - 2016-08-12 12:15 - 00098816 _____ () C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\sradarlauncher.dll
2016-12-04 19:27 - 2016-12-04 19:27 - 01383616 _____ () C:\Users\totti\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\ClientTelemetry.dll
2016-12-04 19:27 - 2016-12-04 19:27 - 00118976 _____ () C:\Users\totti\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileSyncViews.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2016-11-26 23:45 - 2016-11-26 23:44 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2586767532-3616519997-416612805-1006\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [{54E4918F-A16A-4FA9-9F2F-160EDBB8443A}] => C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE
FirewallRules: [{19192873-968D-4E2F-98DB-E134957E191E}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{9C5C5112-6DE2-41AD-A69F-BA05190A96A5}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8483DF55-D597-4E26-BD9B-C06CCC10B227}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{AD27A2B5-5842-4E00-8C06-FF9F7053163E}C:\users\thorsten\desktop\jperf-2.0.2\jperf-2.0.2\bin\iperf.exe] => C:\users\thorsten\desktop\jperf-2.0.2\jperf-2.0.2\bin\iperf.exe
FirewallRules: [UDP Query User{DFB24A96-1288-41E3-B341-14F1E1C3CBE9}C:\users\thorsten\desktop\jperf-2.0.2\jperf-2.0.2\bin\iperf.exe] => C:\users\thorsten\desktop\jperf-2.0.2\jperf-2.0.2\bin\iperf.exe
FirewallRules: [SNMP-In-UDP] => %SystemRoot%\system32\snmp.exe
FirewallRules: [SNMP-Out-UDP] => %SystemRoot%\system32\snmp.exe
FirewallRules: [SNMP-In-UDP-NoScope] => %SystemRoot%\system32\snmp.exe
FirewallRules: [SNMP-Out-UDP-NoScope] => %SystemRoot%\system32\snmp.exe
FirewallRules: [TCP Query User{7B5C2E71-F3E4-4159-8248-FCB8735D3F12}C:\program files (x86)\western digital\wd app manager\wdappmanager.exe] => C:\program files (x86)\western digital\wd app manager\wdappmanager.exe
FirewallRules: [UDP Query User{5930F899-70D2-401D-8760-CDFD22F72C6B}C:\program files (x86)\western digital\wd app manager\wdappmanager.exe] => C:\program files (x86)\western digital\wd app manager\wdappmanager.exe
FirewallRules: [{B5AF83E3-86A9-4279-9DAB-34A9F65B5BFB}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6FE7BDB7-317E-40D9-BA68-E88F174AC1AB}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{20B49414-1915-4941-A2B1-C73B8E532466}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{7EA22D8B-07BB-4F54-8384-E1DC8DCB9A35}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{E490789F-B35E-48B2-A406-23F972D5C058}] => C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{6D2571BC-0D6E-45F5-992C-9499BD739CC0}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{1E65D46E-9309-4FBF-8FC6-6C6C26FBEDE7}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{27370EAC-C5BD-4802-9745-008EDAADBC30}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{E159694B-A5B6-4723-997D-8131C58D391D}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [TCP Query User{92164D59-5689-4281-BB74-7EAA0DE82283}C:\program files (x86)\easeus\easeus todo pctrans\bin\pctrans.exe] => C:\program files (x86)\easeus\easeus todo pctrans\bin\pctrans.exe
FirewallRules: [UDP Query User{5DBC668B-0188-40A0-9693-12926839932A}C:\program files (x86)\easeus\easeus todo pctrans\bin\pctrans.exe] => C:\program files (x86)\easeus\easeus todo pctrans\bin\pctrans.exe
FirewallRules: [{005472F9-413B-4A50-9312-FDA5E1D351B1}] => C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
FirewallRules: [{A9FD5A86-CB20-4FC9-86F4-0D52136A8354}] => C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe

==================== Wiederherstellungspunkte =========================

28-11-2016 23:23:29 Installed ASUS Boot Setting

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Unbekanntes USB-Gerät (Fehler beim Anfordern einer Gerätebeschreibung.)
Description: Unbekanntes USB-Gerät (Fehler beim Anfordern einer Gerätebeschreibung.)
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard-USB-Hostcontroller)
Service:
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/05/2016 11:00:45 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_42191651c6827bb3.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_89c64d28dafea4b9.manifest.

Error: (12/05/2016 10:59:58 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\totti\Downloads\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_42191651c6827bb3.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_89c64d28dafea4b9.manifest.

Error: (12/05/2016 08:51:04 PM) (Source: Microsoft-Windows-EFS) (EventID: 4401) (User: HOME-PC)
Description: 7.488: Der EFS-Dienst*konnte keinen Benutzer für „Unternehmensdatenschutz“ bereitstellen. Fehlercode: 0x80070005.

Error: (12/05/2016 08:47:38 PM) (Source: Microsoft-Windows-EFS) (EventID: 4401) (User: HOME-PC)
Description: 7.488: Der EFS-Dienst*konnte keinen Benutzer für „Unternehmensdatenschutz“ bereitstellen. Fehlercode: 0x80070005.

Error: (12/05/2016 08:46:24 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_42191651c6827bb3.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_89c64d28dafea4b9.manifest.

Error: (12/05/2016 08:46:22 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "c:\program files (x86)\eset\eset online scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_42191651c6827bb3.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_89c64d28dafea4b9.manifest.

Error: (12/05/2016 08:46:19 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: HOME-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/05/2016 08:20:25 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_42191651c6827bb3.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_89c64d28dafea4b9.manifest.

Error: (12/05/2016 08:20:21 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_42191651c6827bb3.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_89c64d28dafea4b9.manifest.

Error: (12/05/2016 08:19:42 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "c:\users\totti\downloads\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_42191651c6827bb3.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.447_none_89c64d28dafea4b9.manifest.


Systemfehler:
=============
Error: (12/05/2016 11:01:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.

Error: (12/05/2016 11:01:54 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\totti\AppData\Local\Temp\ehdrv.sys

Error: (12/05/2016 11:01:53 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.

Error: (12/05/2016 11:01:53 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\totti\AppData\Local\Temp\ehdrv.sys

Error: (12/05/2016 11:01:53 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.

Error: (12/05/2016 11:01:53 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\totti\AppData\Local\Temp\ehdrv.sys

Error: (12/05/2016 11:01:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.

Error: (12/05/2016 11:01:37 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\totti\AppData\Local\Temp\ehdrv.sys

Error: (12/05/2016 11:01:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.

Error: (12/05/2016 11:01:36 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\totti\AppData\Local\Temp\ehdrv.sys


CodeIntegrity:
===================================
  Date: 2016-12-05 23:05:02.673
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-05 23:05:02.671
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-05 23:00:41.176
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2OSD.dll that did not meet the Store signing level requirements.

  Date: 2016-12-05 23:00:41.162
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2DevProps.dll that did not meet the Store signing level requirements.

  Date: 2016-12-05 22:35:07.016
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-12-05 22:33:05.801
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2OSD.dll that did not meet the Store signing level requirements.

  Date: 2016-12-05 22:33:05.788
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2DevProps.dll that did not meet the Store signing level requirements.

  Date: 2016-12-05 22:28:58.216
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-05 22:28:58.215
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-05 22:16:23.135
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Samsung\Samsung Magician\magdrvamd64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i5-6600K CPU @ 3.50GHz
Prozentuale Nutzung des RAM: 11%
Installierter physikalischer RAM: 32690.58 MB
Verfügbarer physikalischer RAM: 28843.98 MB
Summe virtueller Speicher: 37554.58 MB
Verfügbarer virtueller Speicher: 33559.18 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:464.67 GB) (Free:313.65 GB) NTFS
Drive d: (Samsung850) (Fixed) (Total:232.35 GB) (Free:76.77 GB) NTFS
Drive e: () (Fixed) (Total:232.33 GB) (Free:64.47 GB) NTFS
Drive f: (WD Black ) (Fixed) (Total:931.41 GB) (Free:652.5 GB) NTFS
Drive g: () (Fixed) (Total:465.66 GB) (Free:294.09 GB) NTFS
Drive h: (WD Elements black) (Fixed) (Total:1862.98 GB) (Free:1318.54 GB) NTFS
Drive i: () (CDROM) (Total:0.02 GB) (Free:0 GB) CDFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 5DAD4F98)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: FD91664C)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 2 (Size: 232.9 GB) (Disk ID: 5DAD4F98)

Partition: GPT.

========================================================
Disk: 3 (Size: 931.5 GB) (Disk ID: C032F668)
Partition 1: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

========================================================
Disk: 4 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 044B42CF)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 5 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: FB639362)
Partition 1: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

deeprybka 06.12.2016 17:18
Zitat:
Zitat von totti6169 (Beitrag 1627567)
Heute habe ich festgestellt, dass meine Windowsanmeldung unter einem mir unbekannten Namen und E-Mail Adresse erfolgt.
Verstehe ich nicht. Bitte erklären. Wenn es "Deine" Windowsanmeldung ist, dann ist sie doch nicht unbekannt?

Zitat:
Zitat von totti6169 (Beitrag 1627567)
Bei der Überprüfung der Benutzerkonten musste ich feststellen, das mein angelegtes Konto (mein Bild, meine Zuriffe auf Dateien usw.) anscheinend einen fremden Besitzer hat.
Welchen?

totti6169 06.12.2016 20:08
war etwas unglücklich ausgedrückt: Mein Benutzerkonto war nicht mehr unter meinem Namen und E-Mail Adresse vorhanden vorhanden. Es hieß jetz S S mit mit folgender E-Mai Adresse: batlautfinal@yandex.ru.
Die Anmeldung mit diesem Konto funktioniert mit meiner erfassten PIN. Nur das Passwort ist ein unbekanntes.

deeprybka 07.12.2016 17:30
Zitat:
Zitat von totti6169 (Beitrag 1627789)
Die Anmeldung mit diesem Konto funktioniert mit meiner erfassten PIN. Nur das Passwort ist ein unbekanntes.
Was meinst Du denn mit PIN?

Sorry, ich verstehe nur noch Bahnhof.

Wenn man sich bei W10 anmeldet, dann macht man das i.d.R. über ein Microsoft-Konto. Sprich eine Email-Adresse. Willst Du mir jetzt sagen, dass batlautfinal@yandex.ru die Anmelde-Email ist und Du das Passwort nicht weißt?

Das Konto muss ja jemand gehören der Zugriff auf den PC hat. Oder soll ein Trojaner das Passwort eintippen? Und warum soll Malware das überhaupt machen?

Code:
2016-12-04 22:38 - 2016-12-04 22:39 - 05335456 _____ (EaseUS ) C:\Users\totti\Downloads\pctrans.exe
2016-12-04 22:21 - 2016-12-04 21:37 - 02359296 ____H C:\Users\totti\NTUSER (2).DAT
2016-12-04 22:21 - 2016-12-04 21:37 - 02359296 ____H C:\Users\Thorsten\NTUSER - Kopie.DAT
Wer hat denn das rumkopiert?

totti6169 07.12.2016 21:38
Hallo deeprybka,

vorab erst einmal vielen Dank für deine Hilfe !

[QUOTEWas meinst Du denn mit PIN?

Sorry, ich verstehe nur noch Bahnhof.

Wenn man sich bei W10 anmeldet, dann macht man das i.d.R. über ein Microsoft-Konto. Sprich eine Email-Adresse. Willst Du mir jetzt sagen, dass batlautfinal@yandex.ru die Anmelde-Email ist und Du das Passwort nicht weißt?

Das Konto muss ja jemand gehören der Zugriff auf den PC hat. Oder soll ein Trojaner das Passwort eintippen? Und warum soll Malware das überhaupt machen? ][/QUOTE]

Es ist so wie du ungläubig vermutest. batlautfinal@yandex.ru ist die Anmelde-Email und ich kenne weder die E-Mail noch das Passwort. Ich kann mich aber über das Benutzerkonto mit der alternativen PIN Eingabe anmelden. Die entspricht meiner PIN (..und ist nicht 0000 oder 1234). Da es mein privater PC ist haben zu 100 % nur meine Wenigkeit, meine Frau und Tochter Zugriff. Wobei letztgenannten nicht einmal wüssten was ein Benutzerkonto ist oder gar wüssten wie mein ein solches erstellt. (etwas drastisch ausgedrückt)

Ich denke, das sich das Thema so langsam erledigt, da ich den PC besser verbrenne! Glaub es oder nicht: ich wollte Gestern spaßeshalber noch einmal versuchen ob ggf ein älteres von mir genutzte PW mit diesem E-Mail account geht. Den Benutzernamen konnte ich bei MS noch eingeben, beim versuch ein PW einzugeben meinte meine Tastatur das ein Finger dauerhaft auf einer Taste liegt .... aber weder ich noch meine Tastatur spinnen. Konnte nur noch einen Hard Reset machen. Als anschließen das Selbe in der Win Benutzerkontensteuerung passierte habe ich den Stecker gezogen und die halbe Nacht über meinen Raspberry und Handy alle mögliche passwörter geändert (E-Mails, icloud, NAS, Router usw. )

Zitat:
Wer hat denn das rumkopiert?
sorry, das war ich

lg
totti6169

deeprybka 08.12.2016 17:02
Machen wir mal unsere Routineprüfung auf Standard-Malware:

Schritt 1
Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

totti6169 09.12.2016 19:30
Code:
19:22:22.0132 0x27fc  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
19:22:22.0132 0x27fc  UEFI system
19:23:05.0651 0x27fc  ============================================================
19:23:05.0651 0x27fc  Current date / time: 2016/12/09 19:23:05.0651
19:23:05.0652 0x27fc  SystemInfo:
19:23:05.0652 0x27fc 
19:23:05.0652 0x27fc  OS Version: 10.0.14393 ServicePack: 0.0
19:23:05.0652 0x27fc  Product type: Workstation
19:23:05.0652 0x27fc  ComputerName: HOME-PC
19:23:05.0652 0x27fc  UserName: totti
19:23:05.0652 0x27fc  Windows directory: C:\WINDOWS
19:23:05.0652 0x27fc  System windows directory: C:\WINDOWS
19:23:05.0652 0x27fc  Running under WOW64
19:23:05.0652 0x27fc  Processor architecture: Intel x64
19:23:05.0652 0x27fc  Number of processors: 4
19:23:05.0652 0x27fc  Page size: 0x1000
19:23:05.0652 0x27fc  Boot type: Normal boot
19:23:05.0652 0x27fc  CodeIntegrityOptions = 0x0000C001
19:23:05.0652 0x27fc  ============================================================
19:23:05.0713 0x27fc  KLMD registered as C:\WINDOWS\system32\drivers\37315107.sys
19:23:05.0713 0x27fc  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.447, osProperties = 0x19
19:23:06.0145 0x27fc  System UUID: {32E4349E-6680-75A9-F219-6FFB837C823D}
19:23:06.0539 0x27fc  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:23:06.0542 0x27fc  Drive \Device\Harddisk1\DR1 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:23:06.0543 0x27fc  Drive \Device\Harddisk2\DR2 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:23:06.0895 0x27fc  Drive \Device\Harddisk3\DR3 - Size: 0x1D1BF100000 ( 1862.99 Gb ), SectorSize: 0x200, Cylinders: 0x3B5FD, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
19:23:07.0620 0x27fc  Drive \Device\Harddisk4\DR4 - Size: 0x7470AFDE00 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
19:23:07.0623 0x27fc  ============================================================
19:23:07.0623 0x27fc  \Device\Harddisk0\DR0:
19:23:07.0624 0x27fc  GPT partitions:
19:23:07.0624 0x27fc  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {673D8A49-07E4-4D52-AFAC-3A6AF0457C97}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0x1C101E
19:23:07.0624 0x27fc  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {C1C3E8E5-9561-4B9E-AB19-15C7DC453CAE}, Name: EFI system partition, StartLBA 0x1C1820, BlocksNum 0x63006
19:23:07.0624 0x27fc  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {DC75CCC1-46FA-402A-A7A2-073F086AC78D}, Name: Microsoft reserved partition, StartLBA 0x224828, BlocksNum 0x8000
19:23:07.0624 0x27fc  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {6CC1B1DD-EE57-46F6-A3E3-30C874FEFB55}, Name: Basic data partition, StartLBA 0x22C828, BlocksNum 0x3A156FDA
19:23:07.0624 0x27fc  MBR partitions:
19:23:07.0624 0x27fc  \Device\Harddisk1\DR1:
19:23:07.0627 0x27fc  MBR partitions:
19:23:07.0627 0x27fc  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
19:23:07.0627 0x27fc  \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x1D0B1800
19:23:07.0627 0x27fc  \Device\Harddisk2\DR2:
19:23:07.0627 0x27fc  MBR partitions:
19:23:07.0627 0x27fc  \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x746D4000
19:23:07.0627 0x27fc  \Device\Harddisk3\DR3:
19:23:07.0627 0x27fc  MBR partitions:
19:23:07.0627 0x27fc  \Device\Harddisk3\DR3\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xE8DF8000
19:23:07.0627 0x27fc  \Device\Harddisk4\DR4:
19:23:07.0628 0x27fc  MBR partitions:
19:23:07.0628 0x27fc  \Device\Harddisk4\DR4\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x3A352000
19:23:07.0628 0x27fc  ============================================================
19:23:07.0628 0x27fc  C: <-> \Device\Harddisk0\DR0\Partition4
19:23:07.0629 0x27fc  D: <-> \Device\Harddisk1\DR1\Partition2
19:23:07.0649 0x27fc  F: <-> \Device\Harddisk2\DR2\Partition1
19:23:07.0668 0x27fc  G: <-> \Device\Harddisk4\DR4\Partition1
19:23:08.0481 0x27fc  H: <-> \Device\Harddisk3\DR3\Partition1
19:23:08.0481 0x27fc  ============================================================
19:23:08.0481 0x27fc  Initialize success
19:23:08.0481 0x27fc  ============================================================
19:23:47.0547 0x2a20  ============================================================
19:23:47.0547 0x2a20  Scan started
19:23:47.0547 0x2a20  Mode: Manual; SigCheck; TDLFS;
19:23:47.0547 0x2a20  ============================================================
19:23:47.0547 0x2a20  KSN ping started
19:23:47.0773 0x2a20  KSN ping finished: true
19:23:49.0258 0x2a20  ================ Scan system memory ========================
19:23:49.0258 0x2a20  System memory - ok
19:23:49.0258 0x2a20  ================ Scan services =============================
19:23:49.0292 0x2a20  [ A7901875F89D011C38CF52C98ACF5B29, 782141AB1DD7ACDE6EA08B5BAFDE8BADD05B81D38C18E097D6D9C46102056EB1 ] 1394ohci        C:\WINDOWS\System32\drivers\1394ohci.sys
19:23:49.0326 0x2a20  1394ohci - ok
19:23:49.0332 0x2a20  [ EE1CCC54F75C24727A218F98FC5349DA, 0B0D26640BFA0F551B7087027E572D0BF2C5EAF50A4187C5A7D839180B7FF589 ] 3ware          C:\WINDOWS\system32\drivers\3ware.sys
19:23:49.0340 0x2a20  3ware - ok
19:23:49.0352 0x2a20  [ 73C73E1AA0D4D727A04AAAB120B7F56A, 5D311F11022994410DF5C67914D38B1F0D813EFD181EA234750286A272D67A1A ] ACPI            C:\WINDOWS\system32\drivers\ACPI.sys
19:23:49.0357 0x2a20  ACPI - ok
19:23:49.0357 0x2a20  [ 0935496EF9624B46B935CB35ECE1F205, A22A2A29195505A65E8626D60B00C86C23E0CABC1EB8345EA5ED523516CC21C0 ] AcpiDev        C:\WINDOWS\System32\drivers\AcpiDev.sys
19:23:49.0373 0x2a20  AcpiDev - ok
19:23:49.0373 0x2a20  [ D6794C31F4077B71433988787BAA926E, F16365C2F195AAE94D4740E6C3DF4C0CECEC6393CAD65425DCCD28CDBA6EC51A ] acpiex          C:\WINDOWS\system32\Drivers\acpiex.sys
19:23:49.0390 0x2a20  acpiex - ok
19:23:49.0393 0x2a20  [ FE5F656D6B35089DA39112E74EC6A85A, 5D81EE63998232A5B36DE47FE15B9D04D5BD02234CA133A2462AECA8C60A22ED ] acpipagr        C:\WINDOWS\System32\drivers\acpipagr.sys
19:23:49.0399 0x2a20  acpipagr - ok
19:23:49.0402 0x2a20  [ 2F242941E4DFF69B883D77A16F039557, 45C388365317C720654A659A9326B2BC0E9D84929C704654985597D5D620101C ] AcpiPmi        C:\WINDOWS\System32\drivers\acpipmi.sys
19:23:49.0409 0x2a20  AcpiPmi - ok
19:23:49.0411 0x2a20  [ C247E35A21682DA8D0DC3AF9F025FCC5, 455415EE3166B3043AD8A4DD50B688DB74242267FB555642441251EFA823E971 ] acpitime        C:\WINDOWS\System32\drivers\acpitime.sys
19:23:49.0418 0x2a20  acpitime - ok
19:23:49.0436 0x2a20  [ 49B9DB97AFC85DCCBDACDAB2E90085B7, 2A6C2A09F74EA15044F442CCFB54A0F24F105ADB915E5C78F02F59652DC29152 ] ADP80XX        C:\WINDOWS\system32\drivers\ADP80XX.SYS
19:23:49.0457 0x2a20  ADP80XX - ok
19:23:49.0457 0x2a20  [ 323AA1953ED9C01E23F740FA891FE064, 4CED6E3D61749316CDE28965C913E7ED462539DAAD637A29484F62AF47AD650D ] AFD            C:\WINDOWS\system32\drivers\afd.sys
19:23:49.0473 0x2a20  AFD - ok
19:23:49.0490 0x2a20  [ 23522E5D581F7722B1B5B86737CAE39C, FB81ABD304376A1E87B65F5E1B34477B628CEDB2091C5D754DE97464B6050C5B ] ahcache        C:\WINDOWS\system32\DRIVERS\ahcache.sys
19:23:49.0501 0x2a20  ahcache - ok
19:23:49.0511 0x2a20  [ 4BFB41025FA1C37205EDEEFDE36F7771, EA171520C0C8DAFA3D656EC4815393F77096C1E22EC9F39756B52D1565483102 ] AiChargerPlus  C:\WINDOWS\syswow64\drivers\AiChargerPlus.sys
19:23:49.0518 0x2a20  AiChargerPlus - ok
19:23:49.0520 0x2a20  [ D0905D4A945D01D4B28DB9E1BD5985F7, CF389CBCD3B99D1BAE34A42F723F1005C32213A394F691978076D3DF1727715C ] AJRouter        C:\WINDOWS\System32\AJRouter.dll
19:23:49.0524 0x2a20  AJRouter - ok
19:23:49.0524 0x2a20  [ 8FD51B3B35707A66080D7C8CB05E792D, FE52F3DC280D208FDDC75F6E3294B8D601E0D86F9BD3DB1ACC8FC296AC74C23B ] ALG            C:\WINDOWS\System32\alg.exe
19:23:49.0540 0x2a20  ALG - ok
19:23:49.0540 0x2a20  [ DF21E05E41E5AC3F13F304D91457649A, 7F48F2AD1DBE89A261113C76D7C23AD7D87D5599BCC31F8A558A8A10B81BF521 ] AmdK8          C:\WINDOWS\System32\drivers\amdk8.sys
19:23:49.0540 0x2a20  AmdK8 - ok
19:23:49.0555 0x2a20  [ 45D0AA4BB90B821DF92E8F19ABED0C5E, EA87A6E98DB3C5A88A844C04C6934E870B7004E783AA5211722115382A211B90 ] AmdPPM          C:\WINDOWS\System32\drivers\amdppm.sys
19:23:49.0555 0x2a20  AmdPPM - ok
19:23:49.0555 0x2a20  [ 74FFBC43B4B899C9A8CA06A892F2CE73, 8D599363C7F3D373F1859BAA4D06DD0F40BE78B56BE52B74DE6EA6EF99452004 ] amdsata        C:\WINDOWS\system32\drivers\amdsata.sys
19:23:49.0571 0x2a20  amdsata - ok
19:23:49.0571 0x2a20  [ AAB0F1D8D7E54761ABAB13AF161F1680, CF847990EFFA2828F5B1DB1A68F08A6C2C918E9612EDFFCF95C36BCABBBEA272 ] amdsbs          C:\WINDOWS\system32\drivers\amdsbs.sys
19:23:49.0587 0x2a20  amdsbs - ok
19:23:49.0587 0x2a20  [ F91BAAC4237C40352A807000F3B716F9, F7EFA08E5067C3D419C9D21EDB880BA08883A80DDF35F8B42EC3AB293FE5E03E ] amdxata        C:\WINDOWS\system32\drivers\amdxata.sys
19:23:49.0587 0x2a20  amdxata - ok
19:23:49.0587 0x2a20  [ 86E1C9CAD3A9C2345189308AF62DE14B, EA0C937A63B4360427C80DB55EB95A94E09E942AB5D2BF3BF534AC2E0E0ED2B2 ] AndroidAFD      C:\WINDOWS\syswow64\drivers\AndroidAFDx64.sys
19:23:49.0604 0x2a20  AndroidAFD - ok
19:23:49.0604 0x2a20  [ BC121C099C6C659126AD2102AFDFF8CF, 42B5EE293BDD7ADCE48173A01B30D8452564B9DA225EAF25E9292FE77C0FCF3E ] AppID          C:\WINDOWS\system32\drivers\appid.sys
19:23:49.0604 0x2a20  AppID - ok
19:23:49.0620 0x2a20  [ 74A24CF946279111D7F203B36569EC02, FD67D36804744B4FE3E20BA891852575E6C2DA6515643B2F4B4210118B0FCCDA ] AppIDSvc        C:\WINDOWS\System32\appidsvc.dll
19:23:49.0620 0x2a20  AppIDSvc - ok
19:23:49.0620 0x2a20  [ 73FAA5517CCD1332F00192A303CF2026, 75636222BFF381A3EECA010752DF7DC1603A395B91FF7FBF92127B5CA8EFFEE5 ] Appinfo        C:\WINDOWS\System32\appinfo.dll
19:23:49.0635 0x2a20  Appinfo - ok
19:23:49.0635 0x2a20  [ 7D811EA7A2AAA49B0446D42CBC1CD338, AFECE5E44E48F756C7EB81D95C9237552AF8A9C02CBE756E0F3D3C6524DE49AD ] Apple Mobile Device Service C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
19:23:49.0651 0x2a20  Apple Mobile Device Service - ok
19:23:49.0651 0x2a20  [ 68190E2BADF23BD782344970E5B5DE9E, 95D30EC12C7FDF5822CED8BC2F17669A6687A2FB262B4F0D15C8DCFF4E9AB33D ] applockerfltr  C:\WINDOWS\system32\drivers\applockerfltr.sys
19:23:49.0651 0x2a20  applockerfltr - ok
19:23:49.0667 0x2a20  [ 76A12AC673B0F8A607ACDD0583C247D4, CBC6C0EB82C7A8E3998344280BBB5A697AFA7206CA2BADFDA7ED6E7DD20E3DAC ] AppMgmt        C:\WINDOWS\System32\appmgmts.dll
19:23:49.0667 0x2a20  AppMgmt - ok
19:23:49.0682 0x2a20  [ 21DC11DA29484AE026E536F2EA7E79E5, 6E17B679494CB293DE13DFA18F79A9DFAFEEBAAE41943F95B5E1AE0720A5CA26 ] AppReadiness    C:\WINDOWS\system32\AppReadiness.dll
19:23:49.0704 0x2a20  AppReadiness - ok
19:23:49.0720 0x2a20  [ 6010A920FDE5BFE4EA056F9736FBDC06, F55F68D5AD1F272BC285E716E02090C62FC87476DD6CE7ABA6BE7EF8EF6178DE ] AppVClient      C:\WINDOWS\system32\AppVClient.exe
19:23:49.0736 0x2a20  AppVClient - ok
19:23:49.0736 0x2a20  [ B66ED2CB37F7E4696A51612AFBA08834, 70BA67AF7F1290E3145B873B53516F138E50D8AAC80CD00CBA66467ABC6643CB ] AppvStrm        C:\WINDOWS\system32\drivers\AppvStrm.sys
19:23:49.0751 0x2a20  AppvStrm - ok
19:23:49.0751 0x2a20  [ 8DC924848E20F890BEFC6B31136D46BE, B7603425B4970F505B5A3EB0F6652A9CDD188059BDC945D6DF2BADC2DF8F4B5D ] AppvVemgr      C:\WINDOWS\system32\drivers\AppvVemgr.sys
19:23:49.0751 0x2a20  AppvVemgr - ok
19:23:49.0767 0x2a20  [ 9ADC5A8BEE10E174F95349E9232D8E76, F322991323DCDC51199BB3AB0DA20F6C3CC7EE6E804400B473C610FDB895F0AE ] AppvVfs        C:\WINDOWS\system32\drivers\AppvVfs.sys
19:23:49.0767 0x2a20  AppvVfs - ok
19:23:49.0805 0x2a20  [ F9F4CFCB3845EABF81A654001C80854C, 2CB7BED0A838585903056E41D46C2604B5EECA3B6C673497A22BFFCAE7986C5F ] AppXSvc        C:\WINDOWS\system32\appxdeploymentserver.dll
19:23:49.0852 0x2a20  AppXSvc - ok
19:23:49.0852 0x2a20  [ E6AB1F0B4C3D4E0D2A88332D76FECD03, 0D3003EB979DA4546DCDD055011E24F13E34F683F02C9801CAC564D1809F11D2 ] arcsas          C:\WINDOWS\system32\drivers\arcsas.sys
19:23:49.0867 0x2a20  arcsas - ok
19:23:49.0883 0x2a20  [ BBF8F831C7720DD5135D8C4C8325187A, 2630C68200D7BD49A5772830D6B369C0EC337C2558A9562DD564DF042249ECC0 ] asComSvc        C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
19:23:49.0978 0x2a20  asComSvc - ok
19:23:49.0994 0x2a20  [ 56D377C9EE91F0778B44901B9DBBD38D, 4DB3699554BF2D977980AAC36F40D7BCD6AD1FAA6CA84A24939CF7BCFF54BB17 ] asHmComSvc      C:\Program Files (x86)\ASUS\AAHM\1.00.25\aaHMSvc.exe
19:23:50.0008 0x2a20  asHmComSvc - ok
19:23:50.0008 0x2a20  [ 798DE15F187C1F013095BBBEB6FB6197, 436CCAB6F62FA2D29827916E054ADE7ACAE485B3DE1D3E5C6C62D3DEBF1480E7 ] AsIO            C:\WINDOWS\syswow64\drivers\AsIO.sys
19:23:50.0027 0x2a20  AsIO - ok
19:23:50.0031 0x2a20  [ 3616CEE8DBBC5677F8E76EFC357AA9D9, F58ED13680B0C4B5F6DC445FDE55D5BFB78AAFC57272933573065081EAD68DF5 ] asmthub3        C:\WINDOWS\System32\drivers\asmthub3.sys
19:23:50.0036 0x2a20  asmthub3 - ok
19:23:50.0044 0x2a20  [ CB5C6A4562A1F9E96887739704A7AA9B, E58E2BCCAA0979B502418384510F13A83F53E43CDEB82517BFF5378816AF496A ] asmtxhci        C:\WINDOWS\System32\drivers\asmtxhci.sys
19:23:50.0053 0x2a20  asmtxhci - ok
19:23:50.0057 0x2a20  [ E42B80A2A0E0192626DC3AFCA1B95DE6, 8E8D9AC610B8D6D4CACC863CFAFB98E375632ADF1A6A96ECC2D131817C7564A9 ] asstahci64      C:\WINDOWS\system32\drivers\asstahci64.sys
19:23:50.0061 0x2a20  asstahci64 - ok
19:23:50.0075 0x2a20  [ 37F7DD839A711B5706B1264F4D8D4BDC, C949A7BB236C6C03E197EF7F9A6DF53E34EC35D925034351B5FD5D7DB62A770E ] AsSysCtrlService C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
19:23:50.0129 0x2a20  AsSysCtrlService - detected UnsignedFile.Multi.Generic ( 1 )
19:23:50.0388 0x2a20  Detect skipped due to KSN trusted
19:23:50.0389 0x2a20  AsSysCtrlService - ok
19:23:50.0392 0x2a20  [ 1392B92179B07B672720763D9B1028A5, B4D47EA790920A4531E3DF5A4B4B0721B7FEA6B49A35679F0652F1E590422602 ] AsUpIO          C:\WINDOWS\syswow64\drivers\AsUpIO.sys
19:23:50.0404 0x2a20  AsUpIO - ok
19:23:50.0411 0x2a20  [ 8B18DE4E8D649CFBFBFBC67C1AA13C57, E6FACE3BF363AE82105B63771DCA502DB82B188EC090086C7F960CE37A28E9E1 ] AsusFanControlService C:\Program Files (x86)\ASUS\AsusFanControlService\1.08.15\AsusFanControlService.exe
19:23:50.0420 0x2a20  AsusFanControlService - ok
19:23:50.0424 0x2a20  [ 82CE67C7AAD548F2584F69541CE7C8C9, 686F6AB361C859A816E93AAD0C7C3C22F9323DEDE4B73BBC1D79744021EBD392 ] ASUSfilter      C:\WINDOWS\System32\drivers\ASUSfilter.sys
19:23:50.0428 0x2a20  ASUSfilter - ok
19:23:50.0431 0x2a20  [ E2E6EE5795AA7E9851BF57186B303E88, D0BD161364A8B0475DFCBCD716BD329E9ABDE53098678D3E5A0238781949AA9E ] ASUSstpt        C:\WINDOWS\System32\drivers\ASUSstpt.sys
19:23:50.0434 0x2a20  ASUSstpt - ok
19:23:50.0438 0x2a20  [ 698BB5F9FD5270539D2500B54F42459D, 86CBB5B6E8C64D70005C328E2136F632CAA50E1DB78C81B8178BC2764809FE9A ] ASUSumsc        C:\WINDOWS\System32\drivers\ASUSumsc.sys
19:23:50.0441 0x2a20  ASUSumsc - ok
19:23:50.0441 0x2a20  [ 07BC7AF2D5F62CCDEB394D443F9B718F, B6240B6FA0CDB80B5B45D1C430B92F2046989D66243E76EC38FDA7582B75BEB8 ] ASUSxpsp        C:\WINDOWS\System32\drivers\ASUSxpsp.sys
19:23:50.0441 0x2a20  ASUSxpsp - ok
19:23:50.0441 0x2a20  [ 61C5A480C43E7E8E49C42869F49D0D3E, E610F0E4315ABA1D90AD4A1D7A68ABA2ACBB7FCA89E9D1798470365D52592D55 ] AsyncMac        C:\WINDOWS\System32\drivers\asyncmac.sys
19:23:50.0457 0x2a20  AsyncMac - ok
19:23:50.0457 0x2a20  [ A10F989A812B57B9695F6C305907C9C6, E2B292610079AA1A10696138DE8130905A8A834B75A8DED7EBF8B6732B77A0F4 ] atapi          C:\WINDOWS\system32\drivers\atapi.sys
19:23:50.0457 0x2a20  atapi - ok
19:23:50.0475 0x2a20  [ 2DC3D53FFA0D10EB8C911AE2DB7BF4CF, 8E0A4B5D610D487A216E70396A99ACC1BEA12C46A6681B1A39CD0FD01EDD406A ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll
19:23:50.0488 0x2a20  AudioEndpointBuilder - ok
19:23:50.0502 0x2a20  [ 7B993290E7691C446C16A56A431669BA, 004551934E27E9FC1A939C9BD1DEB850A216CBED9B18CB3317920F5656D9F6BF ] Audiosrv        C:\WINDOWS\System32\Audiosrv.dll
19:23:50.0523 0x2a20  Audiosrv - ok
19:23:50.0523 0x2a20  [ 6D90FDA2DC364B8EA1420F2F81585CC3, 10E6F23A213CFE49BE04BB7D366ADD4028D61D7114FEC67C30B5467DF6B36D4F ] AxInstSV        C:\WINDOWS\System32\AxInstSV.dll
19:23:50.0539 0x2a20  AxInstSV - ok
19:23:50.0539 0x2a20  [ 61BAC67048CA5C1D08C48FCC8012B613, 71B2A466FC38DA1029B471FBD2541D8FE359751A7B212AE0F420DB3645916450 ] b06bdrv        C:\WINDOWS\system32\drivers\bxvbda.sys
19:23:50.0554 0x2a20  b06bdrv - ok
19:23:50.0554 0x2a20  [ 68F72B05EBC6D1779C0D60A147C7CA0B, AA1C857BEE34865C6B901157FC22570D4CF45D950708BAD7AA333F120F2B474C ] BasicDisplay    C:\WINDOWS\System32\drivers\BasicDisplay.sys
19:23:50.0570 0x2a20  BasicDisplay - ok
19:23:50.0570 0x2a20  [ 23156E7EDAF613D839E2839746B168D3, CAEF8F9C7D3A338BD747AC9D5BFBE730D77B911E87BCF532EBB75E1F80916AFA ] BasicRender    C:\WINDOWS\System32\drivers\BasicRender.sys
19:23:50.0570 0x2a20  BasicRender - ok
19:23:50.0585 0x2a20  [ 3F5523DCEFE42B385659C5CB46A6B810, CA24A3DF002B19E7BDEDE9B5EB60623F299D0E78B2E4F58DCFC028D76DEFE52D ] bcmfn          C:\WINDOWS\System32\drivers\bcmfn.sys
19:23:50.0585 0x2a20  bcmfn - ok
19:23:50.0585 0x2a20  [ 0B750A6A6D847E73CA48ADD7A0F5A393, 6A43020F23846EFB1AFA3C070465B0059E9DF60DEB16899E09559462DF30939F ] bcmfn2          C:\WINDOWS\System32\drivers\bcmfn2.sys
19:23:50.0602 0x2a20  bcmfn2 - ok
19:23:50.0606 0x2a20  [ 2B4D3AEAAD02954F8C191BC2D67949AD, 8237C9AD556CFAF7442FF60F78608104BC17CE3134C89D986D49C38CC60B1518 ] BDESVC          C:\WINDOWS\System32\bdesvc.dll
19:23:50.0622 0x2a20  BDESVC - ok
19:23:50.0622 0x2a20  [ 0A508274355745EEF01C6BE3198D02C4, E2DB08AEE2368FA95FDB357BB31EA4EBF31679C3E72E109DB3D7CD1B5F7B828E ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
19:23:50.0622 0x2a20  Beep - ok
19:23:50.0637 0x2a20  [ 5125CBB61AC81168366BEB290399CB8E, B2A3095D45E2114DE2BD0E5A3AE20B3CE95EE517A35B9E1EAD05E231F38DBDCF ] BFE            C:\WINDOWS\System32\bfe.dll
19:23:50.0653 0x2a20  BFE - ok
19:23:50.0684 0x2a20  [ D876C567AB767258036F05E4766189FD, DE8BA67325CB64495BD454B8F9DDCAE82636253844FC68B360C7E1CF5D51DD0E ] BITS            C:\WINDOWS\System32\qmgr.dll
19:23:50.0714 0x2a20  BITS - ok
19:23:50.0724 0x2a20  [ B5C2F92EE1106DFE7BB1CCE4D35B6037, E399C390687589194D8AAD385055F0CFA7D52AD9E837D8FF95008B8EB2B34E50 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
19:23:50.0724 0x2a20  Bonjour Service - ok
19:23:50.0724 0x2a20  [ 9CD2A4821DE379305CACB2E99AD8953A, 89D700DFC3C59ACBBADB48954A28C0EBF8D6A11A9E63837689DD891868E43188 ] bowser          C:\WINDOWS\system32\DRIVERS\bowser.sys
19:23:50.0740 0x2a20  bowser - ok
19:23:50.0755 0x2a20  [ 2447BD15B41298622CC662249CD0F496, 013A326D2E3BF68D654BBABE2F1E5DF0FF0A153A4B95D570EE28F9BC0F5A78C3 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll
19:23:50.0771 0x2a20  BrokerInfrastructure - ok
19:23:50.0787 0x2a20  [ B3F32C630DD3F2F6A6091B89CFF13641, 7A9C53EF9AB9FF1DC392FD711B194A101DB36CA5BC799E817BEB446741089B76 ] Browser        C:\WINDOWS\System32\browser.dll
19:23:50.0787 0x2a20  Browser - ok
19:23:50.0787 0x2a20  [ 722036C26D2C4E50EC2A2EC5FD678846, 999468038AE01F0FF6881F4B2A2CB67BC636641188E95F10729E08ADBC3CB3DE ] BthAvrcpTg      C:\WINDOWS\System32\drivers\BthAvrcpTg.sys
19:23:50.0806 0x2a20  BthAvrcpTg - ok
19:23:50.0806 0x2a20  [ 77630A51FAF6A07922FEE835F4DED8F6, E096A9DC12885FD19575346A9693A66D0DDFF96C3155AD2040F2BF4249D1D609 ] BthEnum        C:\WINDOWS\System32\drivers\BthEnum.sys
19:23:50.0822 0x2a20  BthEnum - ok
19:23:50.0822 0x2a20  [ C2E31BE025D46D189E38DD1EDF07837A, 656528DCAAAF485EC57EE5C3021E96736634DE3B9C39CBCD2728E055ABD4C0A5 ] BthHFEnum      C:\WINDOWS\System32\drivers\bthhfenum.sys
19:23:50.0837 0x2a20  BthHFEnum - ok
19:23:50.0837 0x2a20  [ F7CD605FC0B0B22F3F6F247595E3A655, 1CD9140DE5415DDBEACD8667E63E5C95FD64D693B56302A0474E693E578BEAB0 ] bthhfhid        C:\WINDOWS\System32\drivers\BthHFHid.sys
19:23:50.0837 0x2a20  bthhfhid - ok
19:23:50.0853 0x2a20  [ B157D72BDA6A6DD6E9DC6BF338CD0CF8, B2AC26AE214151E5AD93DED78256BC0295DBF0133C854E7DEE4CD776D9C9A349 ] BthHFSrv        C:\WINDOWS\System32\BthHFSrv.dll
19:23:50.0853 0x2a20  BthHFSrv - ok
19:23:50.0869 0x2a20  [ 535DC41A33630AE4C262406F9E981C03, 599332589AA28D04189E19B87A4AE6FEEB60B40A7BC6E3B11240DA363A981C29 ] BTHMODEM        C:\WINDOWS\System32\drivers\bthmodem.sys
19:23:50.0869 0x2a20  BTHMODEM - ok
19:23:50.0869 0x2a20  [ 224BA1CB1F3C702F0D001D2AFC9793B1, F139F6F78C716E1167E16530AE31E4A26C2A69467BCB08A9A52A101B31DF7771 ] BthPan          C:\WINDOWS\System32\drivers\bthpan.sys
19:23:50.0894 0x2a20  BthPan - ok
19:23:50.0908 0x2a20  [ E6D5762958A839B119C041256149AAD6, 8FB489F6771C392347E333935E00024309A19F1D3143F365A039A9D2DE0A639C ] BTHPORT        C:\WINDOWS\System32\drivers\BTHport.sys
19:23:50.0923 0x2a20  BTHPORT - ok
19:23:50.0939 0x2a20  [ 96932F631F5CB9F5D1C8F99A71568EF3, 5E4C8955A2EE9DC76B4EBC383653EB753D76D6B017E1A5DD553AC16094D7F12A ] bthserv        C:\WINDOWS\system32\bthserv.dll
19:23:50.0939 0x2a20  bthserv - ok
19:23:50.0939 0x2a20  [ DC5955E589C55E2313D69B64E1A183F3, 06D703246D0813DE53D62885C8B7381135783673FF4BDDD5CC38FEB54901BB76 ] BTHUSB          C:\WINDOWS\System32\drivers\BTHUSB.sys
19:23:50.0954 0x2a20  BTHUSB - ok
19:23:50.0954 0x2a20  [ 23F9EF739F685E07482116425E7879AA, 0EBDF96A49A319C0BCF6F51FB6C8C392C017E1738B950C19C91FF43E14D73143 ] buttonconverter C:\WINDOWS\System32\drivers\buttonconverter.sys
19:23:50.0970 0x2a20  buttonconverter - ok
19:23:50.0970 0x2a20  [ 60EB6A4CE3E21887D302350631C16F26, 4270EFA22285C1A9336CF1220761E416950D2DA9C6A40D1D8452686CD5040DAB ] CapImg          C:\WINDOWS\System32\drivers\capimg.sys
19:23:50.0986 0x2a20  CapImg - ok
19:23:50.0986 0x2a20  [ F8FB51B9EF6372610E9B31A1D86B62FC, 7461584A8B39AC549AD7BAFFA509D4CD81EEE542808BC8EFC285863A0AE6432D ] cdfs            C:\WINDOWS\system32\DRIVERS\cdfs.sys
19:23:51.0003 0x2a20  cdfs - ok
19:23:51.0006 0x2a20  [ B737F6FB33A6F79BCBC293A5B32C1C4E, B2EAF621052A4CBEE78208ECF1AC9286BD1EB431019372254E442319308112F8 ] CDPSvc          C:\WINDOWS\System32\CDPSvc.dll
19:23:51.0022 0x2a20  CDPSvc - ok
19:23:51.0022 0x2a20  [ 2531EF3423A9FE1692005A41907E3BE3, 4E7D3E216937305B73CBCC5031F513CEC38F4FEFE3F2291DED5F37641221CCA0 ] CDPUserSvc      C:\WINDOWS\System32\CDPUserSvc.dll
19:23:51.0038 0x2a20  CDPUserSvc - ok
19:23:51.0038 0x2a20  [ 613D0137C269187FA298A157E3D14A18, 84BC268525F14BB27202CE242BF94D9E83BC91B50A0335908574F31B29A2F04D ] cdrom          C:\WINDOWS\System32\drivers\cdrom.sys
19:23:51.0053 0x2a20  cdrom - ok
19:23:51.0053 0x2a20  [ 9450FA11E9DE6715FCB71A519A8FF90B, B7E341C6E4CE967FCDD0D17A497C07E8A1C6B0AACE8A6E8E5D6C21EF73F13E16 ] CertPropSvc    C:\WINDOWS\System32\certprop.dll
19:23:51.0069 0x2a20  CertPropSvc - ok
19:23:51.0085 0x2a20  [ 0AED948DA8D5F08B3D6F12E4E2089736, 95E538E81DDBC83492C5F3820C82C78F050B4D74ACF12D7970EC84F93581AE29 ] cht4iscsi      C:\WINDOWS\system32\drivers\cht4sx64.sys
19:23:51.0095 0x2a20  cht4iscsi - ok
19:23:51.0123 0x2a20  [ 0002A0FDE087C1657AB31CE73077539C, 4DD6210B67E9633AB3240371590869DC833A4C986C74FC12A5D4FFFFD361848A ] cht4vbd        C:\WINDOWS\System32\drivers\cht4vx64.sys
19:23:51.0154 0x2a20  cht4vbd - ok
19:23:51.0154 0x2a20  [ 6B4F90A287D75CCD78694F6790C911B2, 73D7C31E9F475FA3FD568FCA9A953F968729AA114F63C06F38BF5198DAD67BD8 ] circlass        C:\WINDOWS\System32\drivers\circlass.sys
19:23:51.0170 0x2a20  circlass - ok
19:23:51.0170 0x2a20  [ 39591D8510CEC3BA6ED4330EE689B791, E827DEA20AB338308D6E4EEFEF551088088B77CD10BF08C8BE568090E04172E2 ] CLFS            C:\WINDOWS\system32\drivers\CLFS.sys
19:23:51.0186 0x2a20  CLFS - ok
19:23:51.0203 0x2a20  [ E133CFCBFABB3CB517BE9F42FEA5887C, DA699CDD5F3CC427354540C907BD24CCA7BAC3112C53918EB611CB4EEC7611DA ] ClipSVC        C:\WINDOWS\System32\ClipSVC.dll
19:23:51.0206 0x2a20  ClipSVC - ok
19:23:51.0222 0x2a20  [ EEC3A4A98AE1A337E3CD1483AD6F2E15, 764DA329984A95E092F5C15116DA34FA7FC27216C0862365D4BF10ADC97EC5C5 ] clreg          C:\WINDOWS\System32\drivers\registry.sys
19:23:51.0222 0x2a20  clreg - ok
19:23:51.0222 0x2a20  [ 429623E266EF067A44E8CF148E9DFB9B, A48AA85ACC52C7AD73DB2D6148B3F9FB5EAC33C8F8C5BB6D7D0A9D84B7C08E11 ] CmBatt          C:\WINDOWS\System32\drivers\CmBatt.sys
19:23:51.0238 0x2a20  CmBatt - ok
19:23:51.0238 0x2a20  [ 3E502EB1701CF54CF237B6250FBE38EA, E63F6F45D3990ACBCA96003F67C83697BA5B74B89F972C5E9CC45F90D05519FF ] CNG            C:\WINDOWS\system32\Drivers\cng.sys
19:23:51.0269 0x2a20  CNG - ok
19:23:51.0269 0x2a20  [ 3DB10C59405931E2C72EFB82C1AF97D1, 100B5450A70988DB1C1F8A5FDBB3553AF1A0D47B42A5AC71460DB92E26010CE6 ] cnghwassist    C:\WINDOWS\system32\DRIVERS\cnghwassist.sys
19:23:51.0269 0x2a20  cnghwassist - ok
19:23:51.0284 0x2a20  [ 34C935AF2A414572B412B3556586D783, 912981B88B0796576ECCD5EBE0C4728EC02D5D6A96B039447DCBA59B2583F25E ] CompositeBus    C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys
19:23:51.0284 0x2a20  CompositeBus - ok
19:23:51.0284 0x2a20  COMSysApp - ok
19:23:51.0302 0x2a20  [ 44EEEB2382F566999287E13F2067693C, 53A4A0C85EAD38030FF2078C67465E3710ECD03A08FF34E1E67B2E3E1CC70043 ] condrv          C:\WINDOWS\system32\drivers\condrv.sys
19:23:51.0307 0x2a20  condrv - ok
19:23:51.0307 0x2a20  [ 03DCC01047713690E312B013C60881AE, B98174222DDFDA2A31BAC4795D99FA07D1D03107ABDB27BF5069FAFBBF00D278 ] CoreMessagingRegistrar C:\WINDOWS\system32\coremessaging.dll
19:23:51.0338 0x2a20  CoreMessagingRegistrar - ok
19:23:51.0338 0x2a20  [ 5F06CAC4B09250CDDDD0180A08162924, A2EB0A57225E65FC264CFC9FAD858D8B54A015CDAE3DC904B1C4E9AAB40B1F06 ] CryptSvc        C:\WINDOWS\system32\cryptsvc.dll
19:23:51.0338 0x2a20  CryptSvc - ok
19:23:51.0353 0x2a20  [ 03214883D52FAD46573233852344C72C, 63DCCDD895EB804D205ABB8EA381B34FB0879D09E4D0EB0B28F9B2BB1024BAB7 ] CSC            C:\WINDOWS\system32\drivers\csc.sys
19:23:51.0369 0x2a20  CSC - ok
19:23:51.0385 0x2a20  [ BE35D1BAC3F18C9EB1C1CFBA31ED95E3, 4255475D173868A0E5583E844A1884E819E229838C4DEACAC47F1A4DEF388C9D ] CscService      C:\WINDOWS\System32\cscsvc.dll
19:23:51.0407 0x2a20  CscService - ok
19:23:51.0407 0x2a20  [ 039B5A8CBD5C75D1C46DF15F7C74D136, A5C8A41F2D406D37E147939F2058373ED091BFCC00CA7E829F887638CD3A2F64 ] dam            C:\WINDOWS\system32\drivers\dam.sys
19:23:51.0407 0x2a20  dam - ok
19:23:51.0422 0x2a20  [ A4700D1F78539C0ED32FA50E64F9C692, 5CB03B5F36307BA152245BAD29CB2AC703BBE8197ABC0338A7092ADEA1C3221A ] dc3d            C:\WINDOWS\System32\drivers\dc3d.sys
19:23:51.0422 0x2a20  dc3d - ok
19:23:51.0438 0x2a20  [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
19:23:51.0469 0x2a20  DcomLaunch - ok
19:23:51.0469 0x2a20  [ AE9F09F87755C18904656CB4F59F351D, B352A43B3B68B497D87B49C302AF3F37F36D56D49878AE3785C3D43597E5DC57 ] DcpSvc          C:\WINDOWS\system32\dcpsvc.dll
19:23:51.0485 0x2a20  DcpSvc - ok
19:23:51.0502 0x2a20  [ ABBD3EE724117242E28D31F19FBCFF03, 68EA91A969DD80A5DE28B0A8EAEB308837183713559C2C2FAEF991858C971393 ] defragsvc      C:\WINDOWS\System32\defragsvc.dll
19:23:51.0507 0x2a20  defragsvc - ok
19:23:51.0523 0x2a20  [ DD74F18227ACC837D9856E24282D446D, 6A760E44CD897952538CDFA8895FE11263D51AAA79CFF24C01F3862E919DA478 ] DeviceAssociationService C:\WINDOWS\system32\das.dll
19:23:51.0538 0x2a20  DeviceAssociationService - ok
19:23:51.0538 0x2a20  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] DeviceInstall  C:\WINDOWS\system32\umpnpmgr.dll
19:23:51.0554 0x2a20  DeviceInstall - ok
19:23:51.0554 0x2a20  [ CDF1B1B5C5951111791C236B2696C7F8, BF6C4BA545C8827B40DB69890DB4D2B2F9C583C5E3CFBDFD370B05891141458D ] DevQueryBroker  C:\WINDOWS\system32\DevQueryBroker.dll
19:23:51.0570 0x2a20  DevQueryBroker - ok
19:23:51.0570 0x2a20  [ 0D1D392ED2597F295956D058D33BD7C3, 2F7FE5A06D880F9E2A46C9803DD249DC40C2898C04E946D14E7EECCCC9F2B24F ] Dfsc            C:\WINDOWS\system32\Drivers\dfsc.sys
19:23:51.0590 0x2a20  Dfsc - ok
19:23:51.0597 0x2a20  [ F0D4400BA0F08610D9A551B15BF10B76, 83EB8FB272FC2DD2CC0659C2FB90AD0DAE88A88AB3951E03BCD933A25B601E10 ] Dhcp            C:\WINDOWS\system32\dhcpcore.dll
19:23:51.0614 0x2a20  Dhcp - ok
19:23:51.0617 0x2a20  [ CA7FEDDFCF61EF15A09C54DA2C07C49F, 346EF7709BA9E6BD48592B86FA46F9D956C847EF91F4980EEAD98269D0F0EF67 ] diagnosticshub.standardcollector.service C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
19:23:51.0624 0x2a20  diagnosticshub.standardcollector.service - ok
19:23:51.0655 0x2a20  [ CAD14E0AD1F03397E9B1C8733D76BEF4, 0035EF35F6520B1DF0E599C8A06D4163C52576BCE0976BF729B44DECDC506627 ] DiagTrack      C:\WINDOWS\system32\diagtrack.dll
19:23:51.0707 0x2a20  DiagTrack - ok
19:23:51.0707 0x2a20  [ 35B9D46560339A5A7F0CAC6ED702C817, F70480B01533B7029F90E2DE297E9E829660300DDE7A7D009B0AC2684E7691A7 ] disk            C:\WINDOWS\system32\drivers\disk.sys
19:23:51.0707 0x2a20  disk - ok
19:23:51.0726 0x2a20  [ 44A5CAF4E736BCD4360015BB3B841179, 8CD74620C3E163FF998CA8C09A999FED5C9EFDC88D07493192A57032D18CA973 ] DmEnrollmentSvc C:\WINDOWS\system32\Windows.Internal.Management.dll
19:23:51.0741 0x2a20  DmEnrollmentSvc - ok
19:23:51.0744 0x2a20  [ 815F45161A4571C2C44491564F3D5968, 32E7AE8414A178CE429C0CDFCF718E3C11C705FB3155EA5CA0EAD48AAE507B01 ] dmvsc          C:\WINDOWS\System32\drivers\dmvsc.sys
19:23:51.0751 0x2a20  dmvsc - ok
19:23:51.0754 0x2a20  [ 6E5EE6E420FECD64DE463C5F01CBFE71, F173C56895E80AA03D70CD78B3AB659C2EEAACFF43BE3B6EF3939D6F4AD4F62D ] dmwappushservice C:\WINDOWS\system32\dmwappushsvc.dll
19:23:51.0765 0x2a20  dmwappushservice - ok
19:23:51.0771 0x2a20  [ 7F8A3ABF7750326E18CE953CCE262670, 5DBD159E8A455A42764FC73CF7DCAC849B5896848C5589B00BD36697804C0A3B ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
19:23:51.0774 0x2a20  Dnscache - ok
19:23:51.0790 0x2a20  [ 8F46B4C3F9BA19C26A26D0A11137B20B, BA0A66DBA98D77FD85A7CD2D4593F2B2A1A3B4D32BBECBCFFBEB5A54DCB0D8ED ] dot3svc        C:\WINDOWS\System32\dot3svc.dll
19:23:51.0790 0x2a20  dot3svc - ok
19:23:51.0808 0x2a20  [ CA09EAEE92C6FDDC6B05057F11A0372D, 14DB5C186B69644AA93C445BF31CC9670204F95A47B77B6EACB19B4A316378AD ] DPS            C:\WINDOWS\system32\dps.dll
19:23:51.0808 0x2a20  DPS - ok
19:23:51.0808 0x2a20  [ AE6BD4C879A8C849E53947C92DF3B3A0, 8C29774CB2D30D901C54AAC0C8ACE709351EE40E5C8FB9951B2A18B4A03F28B7 ] drmkaud        C:\WINDOWS\system32\DRIVERS\drmkaud.sys
19:23:51.0823 0x2a20  drmkaud - ok
19:23:51.0823 0x2a20  [ 50AAD2A07BD8B90A8CFB4F6D7A4D165A, 2F29D81D4EDEE3AC9A9EFC6E6F7669E01F1438EC8CE27E844BED7435834218B7 ] DSI_SiUSBXp_3_1 C:\WINDOWS\system32\drivers\DSI_SiUSBXp_3_1.sys
19:23:51.0823 0x2a20  DSI_SiUSBXp_3_1 - ok
19:23:51.0839 0x2a20  [ 7433474BE77F065D2FA628671FE31A3E, 063ADDC68F48036749E6EC7B2F66284DB29F90F62E9468D16B4EF5A0FDC45E35 ] DsmSvc          C:\WINDOWS\System32\DeviceSetupManager.dll
19:23:51.0839 0x2a20  DsmSvc - ok
19:23:51.0854 0x2a20  [ 5FCA45C24501DA7390065D3706A9FC3F, 093FD840F1502ECC6F05B9723CA523B3F15CF39A5D2B9106E1267739B3F2C52C ] DsSvc          C:\WINDOWS\System32\DsSvc.dll
19:23:51.0854 0x2a20  DsSvc - ok
19:23:51.0870 0x2a20  [ 87932C8BE855063DD8FC542483E564A9, 4BBA77B45891047D4A9DC6E6FF6C6FF08275A686E6AD2F50CF3D3CD6AB66A998 ] dtultrascsibus  C:\WINDOWS\System32\drivers\dtultrascsibus.sys
19:23:51.0870 0x2a20  dtultrascsibus - ok
19:23:51.0870 0x2a20  [ EE02881FE4C95B6CA5EB4CF49460617E, A120A7D58F5431B5A5A74847BE808582E75E4876F52C35692243221046DAE1D9 ] dtultrausbbus  C:\WINDOWS\System32\drivers\dtultrausbbus.sys
19:23:51.0870 0x2a20  dtultrausbbus - ok
19:23:51.0912 0x2a20  [ 125C83C44EEE61E2ED5893F23AEF0FC9, D6599AFFA1A554124AEF6862C69027F9FF9B343362091439866641A1CFB0E76A ] DXGKrnl        C:\WINDOWS\System32\drivers\dxgkrnl.sys
19:23:51.0941 0x2a20  DXGKrnl - ok
19:23:51.0956 0x2a20  [ DF8EAF458365A63223DF8AE632B90373, D4ADAAEDCCA1F73B615B0885FEDCEDC3883283C53B56DE95B6E753F502BD2393 ] e1dexpress      C:\WINDOWS\system32\DRIVERS\e1d65x64.sys
19:23:51.0972 0x2a20  e1dexpress - ok
19:23:51.0972 0x2a20  [ 9FCE4EF7D5E274F862D9A2526B5F4779, 81D42D5475C2801C8E0C233A0BA827569D8A70590017C91C665C8B232D9BFAA9 ] EapHost        C:\WINDOWS\System32\eapsvc.dll
19:23:51.0988 0x2a20  EapHost - ok
19:23:52.0039 0x2a20  [ 7EC6FC0266D74BD47ABB130A328B70EC, 3856790AF967AB03B1A89F97328DC4D5A6854ACDA6169681A9AFB03D7CF791F9 ] ebdrv          C:\WINDOWS\system32\drivers\evbda.sys
19:23:52.0107 0x2a20  ebdrv - ok
19:23:52.0108 0x2a20  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] EFS            C:\WINDOWS\System32\lsass.exe
19:23:52.0108 0x2a20  EFS - ok
19:23:52.0124 0x2a20  [ 11881837014D517A234E0B3B5481A121, C05AC6B7ADE4A847EFC09150111E1AFB944E4AD14DF5A48F7CAAEB8423EE3427 ] EgisTec Service C:\Program Files (x86)\EgisTec BioExcess\EgisService.exe
19:23:52.0139 0x2a20  EgisTec Service - ok
19:23:52.0155 0x2a20  [ C8D2470259DCD1A94B7D59827ED44028, 0E2AEB3115E8A0198A307536587A87BB6470899821EA18E6B236AFD1CBAF138A ] EgisTec Ticket Service C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
19:23:52.0155 0x2a20  EgisTec Ticket Service - ok
19:23:52.0170 0x2a20  [ 8D74B8B5D6F7C5BC4C525BAF2B083FF1, DA5656F745B3911F96871887FDFDC40F4D9C820622A0AA27EFE4BA93662833CA ] EhStorClass    C:\WINDOWS\system32\drivers\EhStorClass.sys
19:23:52.0170 0x2a20  EhStorClass - ok
19:23:52.0170 0x2a20  [ 2A9817B5A9260D8F60D52E36BEF10443, AC1A0203221AFAF584C71317FA07AA1B6E61BE619E918B3B1E4AD57CCED1CF03 ] EhStorTcgDrv    C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
19:23:52.0186 0x2a20  EhStorTcgDrv - ok
19:23:52.0186 0x2a20  [ 80A7999DE02CE678B865832E1CE78CD6, 2576EBB6E4D630A906DE724F125099E52A962B5B68B9F9BCA849A7B29D8C8689 ] embeddedmode    C:\WINDOWS\System32\embeddedmodesvc.dll
19:23:52.0206 0x2a20  embeddedmode - ok
19:23:52.0208 0x2a20  [ B4264DEF962801CDB83C008DE30758D1, 57886688102BE727450BA45932044A5A389B5822A0C1C08C2AFFBA380F70C3F3 ] EntAppSvc      C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
19:23:52.0224 0x2a20  EntAppSvc - ok
19:23:52.0224 0x2a20  [ 77B60DEC7DCB4233E4A69D3F52E5DB24, 3A5C905E37A93899051497C90E5BA8E1D003B56C6906CADFD2F1CDF52052D248 ] ErrDev          C:\WINDOWS\System32\drivers\errdev.sys
19:23:52.0224 0x2a20  ErrDev - ok
19:23:52.0239 0x2a20  [ F89083AB8B9F51C0031C1CBD0A9A7E35, 9EE973A25134960E62D1A6A1E34AD9B3F7690E71C1AD31A23FA2081A73438754 ] EventSystem    C:\WINDOWS\system32\es.dll
19:23:52.0255 0x2a20  EventSystem - ok
19:23:52.0255 0x2a20  [ FCD2C63754C2E739A8EEAD9BC63F9DDC, C57A72ABA4C0BD71F914B9C8FF965DCFF585A205498F19A4584A4BAF7674839D ] exfat          C:\WINDOWS\system32\drivers\exfat.sys
19:23:52.0271 0x2a20  exfat - ok
19:23:52.0286 0x2a20  [ C077AA74EDDAF69985EB27597BCB342A, 8CE48D37E39A6DFA3C8E959CA92A49029100446DC40044EE009D55FB9CDE378A ] fastfat        C:\WINDOWS\system32\drivers\fastfat.sys
19:23:52.0286 0x2a20  fastfat - ok
19:23:52.0309 0x2a20  [ 77CE56471AF984800F318F3734D768C7, 72D540072374A56C2C497F0532A50705D3F0637F2C0C96B1D715F2EDFCA3AA2D ] Fax            C:\WINDOWS\system32\fxssvc.exe
19:23:52.0324 0x2a20  Fax - ok
19:23:52.0324 0x2a20  [ 99598ECA5E41996E005D5B9D9FF1EFA2, 91345CD50EF02431B69093505C1C5F5DC6A1AA6BF192EE9392ED4D5626B60462 ] fdc            C:\WINDOWS\System32\drivers\fdc.sys
19:23:52.0324 0x2a20  fdc - ok
19:23:52.0340 0x2a20  [ EF0DD43A4CBAB367BCA1AFBDC9971E4F, 73E161C45D63FDDE71EE2438137913724DC513860539D1E7F6BD861F5D1B33F3 ] fdPHost        C:\WINDOWS\system32\fdPHost.dll
19:23:52.0340 0x2a20  fdPHost - ok
19:23:52.0340 0x2a20  [ 34DAC585994CD3B4E910DE11C584EF3D, A6C6A4CB5413EA61F1A54E2D3AD71A311CEA2C26218544D2D2D4A5CFEC52DE8C ] FDResPub        C:\WINDOWS\system32\fdrespub.dll
19:23:52.0355 0x2a20  FDResPub - ok
19:23:52.0355 0x2a20  [ B68DA1FE3CA2311AFD38DD6905CA7F71, 4B395DFB1B47D2507CA4D9DC996A70D0A3BDB1A245CD6DA6C42B2A299AFCCF37 ] fhsvc          C:\WINDOWS\system32\fhsvc.dll
19:23:52.0377 0x2a20  fhsvc - ok
19:23:52.0380 0x2a20  [ F44F666B0EACC3181544FFCF8CA0FFC7, 83F771CF9DAE1C504B30731EEC55355EA1253174252DA2192ADF1D228B3735C3 ] FileCrypt      C:\WINDOWS\system32\drivers\filecrypt.sys
19:23:52.0387 0x2a20  FileCrypt - ok
19:23:52.0390 0x2a20  [ 78A210DDFDF2C9EC884631D2DAA573F0, 5D39C6EF4AC690A9749EEDBE2478FFF15A22877A2861EDA103C7BF1607B0C1BD ] FileInfo        C:\WINDOWS\system32\drivers\fileinfo.sys
19:23:52.0397 0x2a20  FileInfo - ok
19:23:52.0400 0x2a20  [ 1A97DB5E701A186989F3795223C3BE39, F7982220D4DF7E104955E63CACE352394E2577DEF49506EA126127F820EB62DF ] Filetrace      C:\WINDOWS\system32\drivers\filetrace.sys
19:23:52.0408 0x2a20  Filetrace - ok
19:23:52.0411 0x2a20  [ 46626665F0E5906E45619B4EFD6186B8, 37FDD3B8AD49FD29E54DA5567EA77F28A53498AE56348F7A2628E5E5549D638B ] flpydisk        C:\WINDOWS\System32\drivers\flpydisk.sys
19:23:52.0417 0x2a20  flpydisk - ok
19:23:52.0424 0x2a20  [ FDA72ACA14D516D18C33AFCD0FD9260F, 6509612DEC82EA74614B5C9A7B432305A1A468C97B88BED9E141DF2929B621B1 ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
19:23:52.0425 0x2a20  FltMgr - ok
19:23:52.0456 0x2a20  [ 49BF5C8182C3D2D6CD9F7EEDF1CFDB66, 0977EBE86B57FC370D27CA69D58122397D5D5369AF0C8DBCC492AE7AD55CBA2B ] FontCache      C:\WINDOWS\system32\FntCache.dll
19:23:52.0509 0x2a20  FontCache - ok
19:23:52.0509 0x2a20  [ 59241194DBDF30A2B4029E402F377900, 47A92E9CD8494C403B377799D395670A393766647E24CD83B15338CE2AA50266 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
19:23:52.0509 0x2a20  FontCache3.0.0.0 - ok
19:23:52.0509 0x2a20  [ B7C32510C5564551CFEEE89929863052, 333B6CA888CAF601F2B0EA5140EC839A4D1A03E63FD02693C501F7FB84AE21E9 ] FPWinIo        C:\WINDOWS\system32\drivers\FPWinIo.sys
19:23:52.0509 0x2a20  FPWinIo - ok
19:23:52.0538 0x2a20  [ 8B52024D3A5C3A12F1C4D75D30A976C5, 982F1C783966C9A6D255AA7DBAB6D225EBE0050A36176B8DE85E8ADBFE17FDF1 ] FrameServer    C:\WINDOWS\system32\FrameServer.dll
19:23:52.0564 0x2a20  FrameServer - ok
19:23:52.0567 0x2a20  [ D152CCBFC8251670BF0AAFE00D6BC782, 9DE82D8FC4E1DAF8FF23EE08C0B7CB5051A9224E64544D262CFA4996A41B04E1 ] FsDepends      C:\WINDOWS\system32\drivers\FsDepends.sys
19:23:52.0573 0x2a20  FsDepends - ok
19:23:52.0574 0x2a20  [ 6D6BB5C7363CD35FA715E826F3D029EE, C214F791EB39E8B25CE57ED9D6C1D56EE1AF6021BCB380980BD42A6338A6C9F7 ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
19:23:52.0574 0x2a20  Fs_Rec - ok
19:23:52.0590 0x2a20  [ 8EEC4925C03E375C4EC496E45C44139A, 06C5C7BCC28D3E435675F0759A09CAB726E971DF4BFC1DC3DCF503EABCDCCCC6 ] fvevol          C:\WINDOWS\system32\DRIVERS\fvevol.sys
19:23:52.0607 0x2a20  fvevol - ok
19:23:52.0609 0x2a20  [ EF78034773CE506323655A868C949144, DF195BEEE6704FBCC6D2D9E1BF6723E52ED502A1459F495B7D18481E6A79B5BC ] gencounter      C:\WINDOWS\System32\drivers\vmgencounter.sys
19:23:52.0609 0x2a20  gencounter - ok
19:23:52.0609 0x2a20  [ B55FEBC6A00DAA1FE074F020B6907516, 67071FBAC2ABA47AB71358A5F08E92E034A55343878F00137E90B3B1F7362976 ] genericusbfn    C:\WINDOWS\System32\drivers\genericusbfn.sys
19:23:52.0625 0x2a20  genericusbfn - ok
19:23:52.0629 0x2a20  [ DDD8A8CDDC7F13EF57D1DAAE71865936, 9D472A8689F72F24D40D5B94849690F53C67849FDF6162A94EF4FB330A3DA566 ] GPIOClx0101    C:\WINDOWS\system32\Drivers\msgpioclx.sys
19:23:52.0637 0x2a20  GPIOClx0101 - ok
19:23:52.0655 0x2a20  [ 713A176494CEC107E663CAD6C2B27F77, 76871D8CFBA8FCD8CFF96208AE84C658EBEC60270D978898B90EE9451AA1BCE1 ] gpsvc          C:\WINDOWS\System32\gpsvc.dll
19:23:52.0674 0x2a20  gpsvc - ok
19:23:52.0690 0x2a20  [ 7ACD8F69B5D6EC97E6D2C006E19BED88, FC69214C9308EA64B88EF4C3C95800586DDBB44C8540846B79A161BAD8203B6E ] GpuEnergyDrv    C:\WINDOWS\system32\drivers\gpuenergydrv.sys
19:23:52.0690 0x2a20  GpuEnergyDrv - ok
19:23:52.0690 0x2a20  [ A8FD9222E4D72596BB37DA8BE95C0BA4, 52FC3AA9F704300041E486E57FE863218E4CDF4C8EEE05CA6B99A296EFEE5737 ] gupdate        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:23:52.0708 0x2a20  gupdate - ok
19:23:52.0709 0x2a20  [ A8FD9222E4D72596BB37DA8BE95C0BA4, 52FC3AA9F704300041E486E57FE863218E4CDF4C8EEE05CA6B99A296EFEE5737 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:23:52.0709 0x2a20  gupdatem - ok
19:23:52.0709 0x2a20  [ 217230B984AB2954E2FA5E36578D7B08, BB7B79EA7501A28EB2A0303FDF66FB9D59D567994C25A1523CD6D2081C403AF6 ] HdAudAddService C:\WINDOWS\system32\DRIVERS\HdAudio.sys
19:23:52.0738 0x2a20  HdAudAddService - ok
19:23:52.0741 0x2a20  [ 10E3515FE5DBA6656FA62C29342EC4A1, 2051F10F74ED712B1766EB61E87FADE25AB3D0970BABFD320600D1B0D6377F26 ] HDAudBus        C:\WINDOWS\System32\drivers\HDAudBus.sys
19:23:52.0749 0x2a20  HDAudBus - ok
19:23:52.0752 0x2a20  [ B90D284B97CD4CA9DE7430AAAD887A56, 2F14F985C39B7801ED64590979CF2114924E9547F5B11D2B37A74DBFFDD9E7C5 ] HidBatt        C:\WINDOWS\System32\drivers\HidBatt.sys
19:23:52.0758 0x2a20  HidBatt - ok
19:23:52.0761 0x2a20  [ B2FE11643CC6ACDEE6C247DD36018FDB, 5796613C7DBF8B2A9E860E006FF1A245B6BE7D10E3F6685AD142B48E5C237B8C ] HidBth          C:\WINDOWS\System32\drivers\hidbth.sys
19:23:52.0769 0x2a20  HidBth - ok
19:23:52.0772 0x2a20  [ D24355488A2D4D2323518EC1AC7A6D9E, ED2176A2093726087EDDA25B86E9CDD4BA35F4E748E3A6DE0B15C4C97646B5C7 ] hidi2c          C:\WINDOWS\System32\drivers\hidi2c.sys
19:23:52.0774 0x2a20  hidi2c - ok
19:23:52.0774 0x2a20  [ 0AF9ABBA4F3F55C6C803890D64BC3C29, D3DE6FA308F8E7CD4F16387F46AE4B2F7EC9BBA07BF87652B660A0D645710571 ] hidinterrupt    C:\WINDOWS\System32\drivers\hidinterrupt.sys
19:23:52.0774 0x2a20  hidinterrupt - ok
19:23:52.0790 0x2a20  [ CDBCF8E9AB06D88A1E1191D32F320C5D, F76963AB7CF2BAB3A220013879AECD3976BFD851CFB66B5A69A9EA2541048861 ] HidIr          C:\WINDOWS\System32\drivers\hidir.sys
19:23:52.0790 0x2a20  HidIr - ok
19:23:52.0790 0x2a20  [ C900FE0DD6A1E2220084B8F1C427790C, 802194EBEDA1A50EDA300078B0888AAC1F17A42E67147B7B3B9C50AD8D4E5C89 ] hidserv        C:\WINDOWS\system32\hidserv.dll
19:23:52.0808 0x2a20  hidserv - ok
19:23:52.0809 0x2a20  [ D8536CB438CC4CCDAE047B768EED22B2, 4F666BFA3554F9ACA6B9D436BFA64474D5F30FB3E78F4E66068CCDF283D9867F ] HidUsb          C:\WINDOWS\System32\drivers\hidusb.sys
19:23:52.0809 0x2a20  HidUsb - ok
19:23:52.0829 0x2a20  [ 0AC1BD5A28FAA371EF34859FE703E515, 1DD1C33AF8D6EBE7C36FCD051F066E4039D2B47ABAECF7C68BC3933D567930B2 ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll
19:23:52.0844 0x2a20  HomeGroupListener - ok
19:23:52.0853 0x2a20  [ 86161A89F16851728802590EC7C92608, 3A3B05BB4E115410D27063B30C0EF3F18295F542050F329F1E466C81A9E23A46 ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll
19:23:52.0868 0x2a20  HomeGroupProvider - ok
19:23:52.0871 0x2a20  [ F5CA18197B4646E04DB9EB2D6642CC4D, 5BA3342DDF1BCB67E4156169FE9A33E7BC2641C729E9F1A80C0E80953C6AB114 ] HpSAMD          C:\WINDOWS\system32\drivers\HpSAMD.sys
19:23:52.0874 0x2a20  HpSAMD - ok
19:23:52.0890 0x2a20  [ A10C7C1E69FC90620C7BF2E51302A01F, D725AEAE38255CED73F4922A10F226215528706580B06D01C228488F93AC0397 ] HTTP            C:\WINDOWS\system32\drivers\HTTP.sys
19:23:52.0909 0x2a20  HTTP - ok
19:23:52.0909 0x2a20  [ 0C84C250F80EAEC2C9768464CC1A9626, 212E1003B78F9B98FEB084FD1FDB59B26A9DE4C9120F24D4361FBBF0F3C035E7 ] HvHost          C:\WINDOWS\System32\hvhostsvc.dll
19:23:52.0925 0x2a20  HvHost - ok
19:23:52.0925 0x2a20  [ 74FC79C52395B10FFD0B55CF22CF88FC, 94D977DA2092EE8C2A598AC48758A84BB22CB6378BD114C2D3B4172A07A9CACC ] hvservice      C:\WINDOWS\system32\drivers\hvservice.sys
19:23:52.0925 0x2a20  hvservice - ok
19:23:52.0925 0x2a20  [ 771EDDA9830A3079F996F34D681FB6E5, F452AD656872A1C8B2D6DCE232CE01EBD456C46F4934A7601E78470F2A2CBF38 ] hwpolicy        C:\WINDOWS\system32\drivers\hwpolicy.sys
19:23:52.0940 0x2a20  hwpolicy - ok
19:23:52.0940 0x2a20  [ 3B9F315E7FA72CC25228EB097DD9C694, B26F1E494428EF197A0C97645C05BB3CA093827A005D35C987F1D6778BC4E52C ] hyperkbd        C:\WINDOWS\System32\drivers\hyperkbd.sys
19:23:52.0940 0x2a20  hyperkbd - ok
19:23:52.0956 0x2a20  [ B54B30992620C97230013A74461C8517, CAF09BDCDD6DE2A39CB8AE2C65E6F8FE12D8E93D84BBEF6C6A98F872BF54A4E3 ] i8042prt        C:\WINDOWS\System32\drivers\i8042prt.sys
19:23:52.0956 0x2a20  i8042prt - ok
19:23:52.0956 0x2a20  [ C6B8743B213F06AA60943D8366FE968F, 758954F70B810063914B243115B2C753B2BCE40190F95C30ACBA0BF04EBD5B33 ] iagpio          C:\WINDOWS\System32\drivers\iagpio.sys
19:23:52.0976 0x2a20  iagpio - ok
19:23:52.0979 0x2a20  [ 9A2A2F3C69B9A30B6E78536F6D258BAD, 5E28E132A7300E6F5E0C6439D6BA00F1AEF66D729FF671FDA91274A25A921463 ] iai2c          C:\WINDOWS\System32\drivers\iai2c.sys
19:23:52.0986 0x2a20  iai2c - ok
19:23:52.0989 0x2a20  [ 5A0E850F8CD17791A3E6A3CF81D0CA28, 10A965A49D53360DD250E0758B6BB142872298A21C732EB026ACB93492C5C6CF ] iaLPSS2i_GPIO2  C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys
19:23:52.0997 0x2a20  iaLPSS2i_GPIO2 - ok
19:23:53.0001 0x2a20  [ 7508F1096803385D6376BFD0BD473AC4, 1F32EC23CDC94DCB9710E6663B5C3BD83568545DDC2C741CFC13550A4E4DD2BE ] iaLPSS2i_I2C    C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys
19:23:53.0007 0x2a20  iaLPSS2i_I2C - ok
19:23:53.0009 0x2a20  [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO    C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys
19:23:53.0009 0x2a20  iaLPSSi_GPIO - ok
19:23:53.0009 0x2a20  [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C    C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys
19:23:53.0025 0x2a20  iaLPSSi_I2C - ok
19:23:53.0041 0x2a20  [ 12859E1215AA083A42E7ADCDE5C061D1, 262F9C65C3FA7EB69C4FA7C6547E1C79DB49697A083309909BC78726A116557F ] iaStorA        C:\WINDOWS\system32\drivers\iaStorA.sys
19:23:53.0072 0x2a20  iaStorA - ok
19:23:53.0072 0x2a20  [ 97E553D03219D3D51705C7235D9EAEBD, 5D4578C8804AF32D1DC0868E34D6538138DC15F9568CA7E21051B1C82C0D8D55 ] iaStorAV        C:\WINDOWS\system32\drivers\iaStorAV.sys
19:23:53.0088 0x2a20  iaStorAV - ok
19:23:53.0105 0x2a20  [ 14E3DB5ADA7E2187A404129F4E5CE336, 5925C8E9DC00A6C682D6A3B37C6EBF2C325D37C8E4BF584F0B5AAC5A7B666E47 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
19:23:53.0110 0x2a20  IAStorDataMgrSvc - ok
19:23:53.0117 0x2a20  [ 8350FE3BCDE3428BC040877BB7E9EAEB, 77F9456351CA640C6B7862907C0580627E761EC807B551976A95657EB4D6CC20 ] iaStorV        C:\WINDOWS\system32\drivers\iaStorV.sys
19:23:53.0129 0x2a20  iaStorV - ok
19:23:53.0138 0x2a20  [ 3BA03F7C7700DDF4C383DDE9252F5817, 3E90F69D0010E7764349D9AE865D577E431FEBC67DA554B400BC808DD286E203 ] ibbus          C:\WINDOWS\System32\drivers\ibbus.sys
19:23:53.0141 0x2a20  ibbus - ok
19:23:53.0141 0x2a20  [ E54BFAB1679CCFBE2C28AD18BE9D0E5F, DAFFCFEBDADEE43FE657FFFFCFADA2F7AE62FCB29915540F620FDC0041A99CD1 ] ICCS            C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
19:23:53.0172 0x2a20  ICCS - ok
19:23:53.0172 0x2a20  [ 231ADCE77616144B8E3D29707B282C82, D2429E0CAABE3E3A50D62DEC6C9F8D13AC8786EB57D9075489425E623EC84165 ] ICCWDT          C:\WINDOWS\System32\drivers\ICCWDT.sys
19:23:53.0188 0x2a20  ICCWDT - ok
19:23:53.0206 0x2a20  [ 937AC47F7356554DA05D9722C356EB55, 9EABC9F19B4E1193B669D2674967F5C6F03FAD348EDF0615E3F78554FF9A83CC ] icssvc          C:\WINDOWS\System32\tetheringservice.dll
19:23:53.0210 0x2a20  icssvc - ok
19:23:53.0232 0x2a20  [ F2934208C0E50C0B971A7981AB90BED2, B936BFBBD71E731CC2CDB8B47D262F2EF09726FF921C2DA0841910CA2401423D ] IKEEXT          C:\WINDOWS\System32\ikeext.dll
19:23:53.0258 0x2a20  IKEEXT - ok
19:23:53.0261 0x2a20  [ 2A01C96DF5802D3434634E55C91232D8, A3ABEF36E2FD2CF5C371ADBF92566A09669A1D990ABE4677370F57F2EEAF8121 ] IndirectKmd    C:\WINDOWS\System32\drivers\IndirectKmd.sys
19:23:53.0268 0x2a20  IndirectKmd - ok
19:23:53.0326 0x2a20  [ 6BA2F4C3936BA77E1C1E48FBAF01A77E, EB469EB759B3651CFD100BD78C1FD9D63035E700601EC971382CFB375DA3FFFB ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys
19:23:53.0418 0x2a20  IntcAzAudAddService - ok
19:23:53.0424 0x2a20  [ F28C5A79A1698E9F1374569A1C0FB880, 9DD0A9539AFE0DB71C2CDE1E9649D4178C28E3740E99E54E3337E7DD32971D72 ] Intel(R) PROSet Monitoring Service C:\WINDOWS\system32\IProsetMonitor.exe
19:23:53.0440 0x2a20  Intel(R) PROSet Monitoring Service - ok
19:23:53.0440 0x2a20  [ 9F7E87F6595D065A8A200A291043045E, 6944F72F73EADC6C9B7691F2C1C6DF1898F22C88EFA78EC0BA8CB5FFD9CE057B ] intelide        C:\WINDOWS\system32\drivers\intelide.sys
19:23:53.0456 0x2a20  intelide - ok
19:23:53.0456 0x2a20  [ A6BD2E20AE1BC5CB2776C87C28E4F4CA, BD8BE67CED9A4982D785CE9ECBEFE868C3A2E37DF7F9592B9F9049B807A1554B ] intelpep        C:\WINDOWS\system32\drivers\intelpep.sys
19:23:53.0456 0x2a20  intelpep - ok
19:23:53.0471 0x2a20  [ 2A48DA39542636DB0FA3BA915385D1B3, 6CA0916F5F4B1E81AE6A6233276320599BFA7C129267177703E3BB6468FB4683 ] intelppm        C:\WINDOWS\System32\drivers\intelppm.sys
19:23:53.0471 0x2a20  intelppm - ok
19:23:53.0471 0x2a20  [ 6F50493D15629076EEC6A5B73A4D1C7D, 4BE8741D0239988084F8161E390511C5B9408FDD5E6946CE341840A706ADA2F9 ] iocbios2        C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys
19:23:53.0504 0x2a20  iocbios2 - ok
19:23:53.0507 0x2a20  [ 7C0766B89BACA46A5CEE48FD4F5DF2AD, 8843F02A3F2F395698D618C376283314A0D729B2C3C2AE8BFA13F0CB64F61097 ] IOMap          C:\WINDOWS\system32\drivers\IOMap64.sys
19:23:53.0511 0x2a20  IOMap - ok
19:23:53.0513 0x2a20  [ DB32758F3A7F6CCE81A5430080A2EA65, 36A26BAA884E96804F8EA0B12BB3E81BBE6D4EE704809904091445F36CAB5A29 ] iorate          C:\WINDOWS\system32\drivers\iorate.sys
19:23:53.0519 0x2a20  iorate - ok
19:23:53.0522 0x2a20  [ FE85D0A86CA7A5A99CF8CD04DE7F80AE, 544C01FC01EE728EB5667158207E5F4418FE77A88BA318192A834722DB766F4E ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
19:23:53.0525 0x2a20  IpFilterDriver - ok
19:23:53.0540 0x2a20  [ EF1BB0EF8A12C32DD88C409706B8145E, 7AEDE717C258C29592CC8AEC40F61617E5382646E5141E1C0941882ACE5C5758 ] iphlpsvc        C:\WINDOWS\System32\iphlpsvc.dll
19:23:53.0572 0x2a20  iphlpsvc - ok
19:23:53.0572 0x2a20  [ 450DBDD716C7911F83E05F78EE18BFA2, 43C0DA172F632131898F315A53DEDD1AE99FB0620AB32B3A5B99FEC498C9AAE5 ] IPMIDRV        C:\WINDOWS\System32\drivers\IPMIDrv.sys
19:23:53.0572 0x2a20  IPMIDRV - ok
19:23:53.0588 0x2a20  [ F1DAECC3B3D6399875D4F10529D6A77C, 6533D2F858816BE6570C998510919FCA2904EC6EF806F61C1FD325E88133111B ] IPNAT          C:\WINDOWS\system32\drivers\ipnat.sys
19:23:53.0598 0x2a20  IPNAT - ok
19:23:53.0609 0x2a20  [ C37FAF1F0CE458D124A326FC8A7FF08D, 0147897CDF6DC2AB7113672D2B62CB258303FB0482B084C23C2E7EFCDE0065B4 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
19:23:53.0621 0x2a20  iPod Service - ok
19:23:53.0625 0x2a20  [ 7475A2903BB704B446AA6309E34D3362, C94643A1626A9716015EBA7041A1224098501EB7DAA704CBFCAD3DC6F3CFC6AF ] irda            C:\WINDOWS\system32\drivers\irda.sys
19:23:53.0634 0x2a20  irda - ok
19:23:53.0636 0x2a20  [ 9725E7F0C64CE9916A5CDABE8D6E13C3, 04AF9E48FEF208A2850DF28352E8FDCBF4018982C72C0F67EE12C048C4070116 ] IRENUM          C:\WINDOWS\system32\drivers\irenum.sys
19:23:53.0641 0x2a20  IRENUM - ok
19:23:53.0641 0x2a20  [ 8C604213A2E73088BFFE6CD2E6F1AE53, B4C4FEE4D398A29F72EC27D5668071D7E68CD943FFFC38624DD5DF5BEBDF46D3 ] irmon          C:\WINDOWS\System32\irmon.dll
19:23:53.0641 0x2a20  irmon - ok
19:23:53.0641 0x2a20  [ 58040898883A96160D41739C80328BBF, 7F85C91C905811416E266A263DDEFCDCB0B45376AAE51B551AB636C16577DB9F ] isapnp          C:\WINDOWS\system32\drivers\isapnp.sys
19:23:53.0657 0x2a20  isapnp - ok
19:23:53.0657 0x2a20  [ C9FD02D62E09337B67B0C61EC8CA38CC, DC77E935ECC8474BE9018F0937CB11C137073582B20A0EE107CE247FD9E1F9C1 ] iScsiPrt        C:\WINDOWS\System32\drivers\msiscsi.sys
19:23:53.0672 0x2a20  iScsiPrt - ok
19:23:53.0672 0x2a20  [ 210808437570BDDEE71A43535E3A2D30, EF5DE6EE4FF58F44CDE4D4E7F298ABBC9086EC05CC3AE4903060DA878115AC1E ] kbdclass        C:\WINDOWS\System32\drivers\kbdclass.sys
19:23:53.0672 0x2a20  kbdclass - ok
19:23:53.0688 0x2a20  [ 0B779E9FC426CA2268D28181FA6C222F, 83292023A688C3044D096F22242EB954B7F7511BE8341D45FF0AFBD9CB9BCB4E ] kbdhid          C:\WINDOWS\System32\drivers\kbdhid.sys
19:23:53.0695 0x2a20  kbdhid - ok
19:23:53.0698 0x2a20  [ 813BA3EB2CE038F2A5382DDD75CAD60B, 99FA444027CAC247B54317730D54AB0C4C000AE076B97E47470FDA9834594312 ] kdnic          C:\WINDOWS\System32\drivers\kdnic.sys
19:23:53.0705 0x2a20  kdnic - ok
19:23:53.0708 0x2a20  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] KeyIso          C:\WINDOWS\system32\lsass.exe
19:23:53.0713 0x2a20  KeyIso - ok
19:23:53.0717 0x2a20  [ 705C0F8BCCEF6E7CB704CCB454192D7E, FC608C708E2C3BF7A66E57B95E19E71E5F5C87EF359D8BC1A817500B45DF9338 ] KSecDD          C:\WINDOWS\system32\Drivers\ksecdd.sys
19:23:53.0724 0x2a20  KSecDD - ok
19:23:53.0724 0x2a20  [ 55AD13E2BAFC5AB53A10F8C271F5D242, 058BEF14DCB95574BCAB985F04737BA89483937E8D8A74F7B4CEAFB7400C2397 ] KSecPkg        C:\WINDOWS\system32\Drivers\ksecpkg.sys
19:23:53.0740 0x2a20  KSecPkg - ok
19:23:53.0740 0x2a20  [ 4ED115CD1A1099705F56B5E0FFF97CC6, 9CC49DF2CD6AAAE405BA661D13EFC1E05111D1DE3D1E50C39C425AF1F075610B ] ksthunk        C:\WINDOWS\system32\drivers\ksthunk.sys
19:23:53.0755 0x2a20  ksthunk - ok
19:23:53.0755 0x2a20  [ 8125BDF7ADC261F75EF0CAD92456E350, 184797AA1D58C4FF743BA60D48590B88B781EE7779205E45E0679DEC79F3E185 ] KtmRm          C:\WINDOWS\system32\msdtckrm.dll
19:23:53.0771 0x2a20  KtmRm - ok
19:23:53.0771 0x2a20  [ 28A4BB5CCFA252FC1D9460E5FB22AB08, 85DC7F8191245FDBBD90DABC2D03D70B373550615125471C90C10550EF6D5EEB ] L4301_Solar    C:\Program Files\Logitech\SolarApp\L4301_Solar.exe
19:23:53.0787 0x2a20  L4301_Solar - ok
19:23:53.0787 0x2a20  [ 8CCAB08815B50AD78B823DB3F96C8604, 265E6D582EB7207B5CC577D61CB7BC3646F613047F168CD69BB776C37780EBF5 ] LanmanServer    C:\WINDOWS\system32\srvsvc.dll
19:23:53.0811 0x2a20  LanmanServer - ok
19:23:53.0811 0x2a20  [ B581907FD94F1FF148BF695331F67612, 05D1FFA456557A291566D788B8DE2485552E361EC3C0F63EA1A710BE940A5398 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll
19:23:53.0827 0x2a20  LanmanWorkstation - ok
19:23:53.0827 0x2a20  [ F8EBAA1FE6D3BF84752931DE1BFA0E2A, 2F3C512712BA709BBBBD779D9E792DBE324876C402CDCEF0345B8B7ABE1D232A ] lfsvc          C:\WINDOWS\System32\lfsvc.dll
19:23:53.0843 0x2a20  lfsvc - ok
19:23:53.0843 0x2a20  [ 5A23E4BE0CCF49663C4CF7EB74C20278, 9DF91014B13B7CED1C3D409F90858FD03EFC5C4347C98901B4DF0AFF2B77845D ] LicenseManager  C:\WINDOWS\system32\LicenseManagerSvc.dll
19:23:53.0843 0x2a20  LicenseManager - ok
19:23:53.0843 0x2a20  [ 5933A6673F00D8255C52957E40C2D601, 0AA1281F8B3F97E360592D1B35EE7D3D614F1AB46007F9884CFFB1C5E647575E ] lltdio          C:\WINDOWS\system32\drivers\lltdio.sys
19:23:53.0858 0x2a20  lltdio - ok
19:23:53.0858 0x2a20  [ 88A3C935725FA6EA1A228DCC26CF9C6F, 9B1F70644EEFA1EE7CE151A8A970430087339B7A6345F2E0252370929D4AFAC6 ] lltdsvc        C:\WINDOWS\System32\lltdsvc.dll
19:23:53.0874 0x2a20  lltdsvc - ok
19:23:53.0874 0x2a20  [ 3F858E28AEE6545FA1B64134DFD5C2CE, FFD7B4FB0A7B61BC6B76A172134673842F2CF00E96FA3ED4A8273DC525B6BB92 ] lmhosts        C:\WINDOWS\System32\lmhsvc.dll
19:23:53.0889 0x2a20  lmhosts - ok
19:23:53.0889 0x2a20  [ 8E1B0946948CCC0BC1FA3CB70374A795, 0B894C129A35E223FF9594725AC90916CBD597FAD2211A18FC2AE03EA8679597 ] LSI_SAS        C:\WINDOWS\system32\drivers\lsi_sas.sys
19:23:53.0889 0x2a20  LSI_SAS - ok
19:23:53.0907 0x2a20  [ 4F68163FC04C973500DC4DA0946917B0, DF060C29109EB3978CEDFE781999B0C4C1E8C0FDB133428058D8400C53315EEC ] LSI_SAS2i      C:\WINDOWS\system32\drivers\lsi_sas2i.sys
19:23:53.0912 0x2a20  LSI_SAS2i - ok
19:23:53.0912 0x2a20  [ E5AC5F2815938651CDCC27F425474673, 3AF0598982153C36A766506FA088F7B84333CC96FEBB050402547AFC613AF9F7 ] LSI_SAS3i      C:\WINDOWS\system32\drivers\lsi_sas3i.sys
19:23:53.0912 0x2a20  LSI_SAS3i - ok
19:23:53.0927 0x2a20  [ CCF6EC9FB9B8F18E05B4253E81013E48, EBE8D77FEE8B99BD8C29702404774D554673C96DF3FDF3DCEA9C99E22C2709FC ] LSI_SSS        C:\WINDOWS\system32\drivers\lsi_sss.sys
19:23:53.0927 0x2a20  LSI_SSS - ok
19:23:53.0943 0x2a20  [ 06276381A0797FD417E7068C1210FA06, 204144E9792216F952CED869ECB6B26FB466BF730B8A73FA4799B1EBC1A630AB ] LSM            C:\WINDOWS\System32\lsm.dll
19:23:53.0958 0x2a20  LSM - ok
19:23:53.0958 0x2a20  [ C9579D32219E5B936AC3A48D470117EC, E61A77191B6BA25D29B1221FEBBE826BBC11F825C0E35A72B4CEFFF8B7FE59A8 ] luafv          C:\WINDOWS\system32\drivers\luafv.sys
19:23:53.0974 0x2a20  luafv - ok
19:23:53.0974 0x2a20  [ ED5B42D75F3DEE93040B3930DA9F3009, E919DA20E46FE1C81CB76090B799DD858DD4771DB0EBDE4545DB4681A0AFFE8E ] MapsBroker      C:\WINDOWS\System32\moshost.dll
19:23:53.0990 0x2a20  MapsBroker - ok
19:23:53.0990 0x2a20  [ 78BFF5425E044086E74E78650A359FBB, 294738C10F3ED933D4EC40EA0659372FCF19A3C6D45D356917438CA495F2CB45 ] MBAMProtector  C:\WINDOWS\system32\drivers\mbam.sys
19:23:53.0990 0x2a20  MBAMProtector - ok
19:23:54.0012 0x2a20  [ 9611577752E293259C7DCE19E9026362, 8CB5DFD63FA15603BB6FA6B501E09ED7F4DE0E8F68CB28B78CECAC3711BEFD24 ] MBAMScheduler  C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
19:23:54.0043 0x2a20  MBAMScheduler - ok
19:23:54.0062 0x2a20  [ F1A89A34388B5626F1548D393B23ECB1, EA00AC76C4C8C9340753B58A3313C9177A9B98F9F1BDE08F184CD0F53D0C186F ] MBAMService    C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
19:23:54.0082 0x2a20  MBAMService - ok
19:23:54.0088 0x2a20  [ 78488AF2AB2111D67B3C4044707A519B, 7AA71B9C4C7949A1A21F60EF7CCEDE0079794990696B60557B5DC86F4D47223A ] MBAMSwissArmy  C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
19:23:54.0106 0x2a20  MBAMSwissArmy - ok
19:23:54.0109 0x2a20  [ 898415AC0B5F1D2A9A48ABCB68A6DC4B, E1FD9AE5E22E3E5A18288E66A6184E92A4B63A1274DCE147A7728BB09C6A225E ] MBAMWebAccessControl C:\WINDOWS\system32\drivers\mwac.sys
19:23:54.0113 0x2a20  MBAMWebAccessControl - ok
19:23:54.0116 0x2a20  [ C3CDCCF07486BD2616A7B82946E07AC0, 1EF95DAB2DA856BC7D7573B2EB2D9006DF337F827F0B56A161D0C97F45DB755E ] megasas        C:\WINDOWS\system32\drivers\megasas.sys
19:23:54.0122 0x2a20  megasas - ok
19:23:54.0126 0x2a20  [ 2CF0CB2A0ED68C5455371E84C16F9627, 1C9166B52140145F1968E83E52BFF041250811B23C770FE181A18A4BA060CA81 ] megasas2i      C:\WINDOWS\system32\drivers\MegaSas2i.sys
19:23:54.0132 0x2a20  megasas2i - ok
19:23:54.0141 0x2a20  [ FADB2FE017E69EECE0E1BA78661C2E8C, BE99B49031D8B4B670B6F6B6E829E54406779CF6F1D8AFE8AB79A73E6764AB2F ] megasr          C:\WINDOWS\system32\drivers\megasr.sys
19:23:54.0141 0x2a20  megasr - ok
19:23:54.0157 0x2a20  [ 86F565B0D41EBCCE7256B812F3A0442B, BACB5753D4501679B0C3D5D6B2D2D5233EC6B5BF76D0C2BD616EC460D5B9918F ] MEIx64          C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys
19:23:54.0180 0x2a20  MEIx64 - ok
19:23:54.0183 0x2a20  [ 55A417C3E41F2A98666CF929EC19108E, A38C262B2863C87E4151525BF26D6AC16E7982D370E2C6998EB15C88C4BC8254 ] MessagingService C:\WINDOWS\System32\MessagingService.dll
19:23:54.0191 0x2a20  MessagingService - ok
19:23:54.0206 0x2a20  [ FD60818B66B2E8A5415EA840E99A9D8F, 5D2F22909354534B821D958FBEF6A40EB4F642F53C7B509D00949096EF716F36 ] mlx4_bus        C:\WINDOWS\System32\drivers\mlx4_bus.sys
19:23:54.0224 0x2a20  mlx4_bus - ok
19:23:54.0224 0x2a20  [ 68F6977F1CFBAAC770D940A8C0326FA1, 90EE1E7DAC680EAA5AD50E9B0B9FD8FCE8DD6A02D5EF941B5AA5084CBD40BB80 ] MMCSS          C:\WINDOWS\system32\drivers\mmcss.sys
19:23:54.0224 0x2a20  MMCSS - ok
19:23:54.0224 0x2a20  [ D842ADDB5911945D51F61A0B1C8F36E3, 5EB93A1FD2D2D9FAB6121356E1AB18F2ADE9550D3033274AF7CA8F7FD51E59ED ] Modem          C:\WINDOWS\system32\drivers\modem.sys
19:23:54.0240 0x2a20  Modem - ok
19:23:54.0240 0x2a20  [ 9CCCB7FC3EDADEBA461D78615A6011A6, C120B58F25E8CCFD971EB78645C0682F367AD56DC15F2D8C1980CE75B04719DF ] monitor        C:\WINDOWS\System32\drivers\monitor.sys
19:23:54.0240 0x2a20  monitor - ok
19:23:54.0256 0x2a20  [ 27A07B2FB2E3057DA8DAEA4F25D843C7, 09D2B39E6B9AAEC879E5871DD6BCFF2AEF0B894F3B44649665A685F8B3CA6F27 ] mouclass        C:\WINDOWS\System32\drivers\mouclass.sys
19:23:54.0256 0x2a20  mouclass - ok
19:23:54.0256 0x2a20  [ 7BD6E7F7C9001AB21B8362CFFEE80B25, C470C3363EEF3A60409A5934988BFB9B72AE7C2BB63CC2C2D006D7EB1C797F6A ] mouhid          C:\WINDOWS\System32\drivers\mouhid.sys
19:23:54.0271 0x2a20  mouhid - ok
19:23:54.0271 0x2a20  [ F5BDAEE4B7D369D4C74668DCFBA3FF10, 100F39288E56AFE0D39D1CC235BDC9F3727C873CD3114E092DA7A08810BD3EB2 ] mountmgr        C:\WINDOWS\system32\drivers\mountmgr.sys
19:23:54.0271 0x2a20  mountmgr - ok
19:23:54.0271 0x2a20  [ 7AAFF443581F9B6F86CDF761ED0A437D, 6E159C875F5666E6D17C58628EEAF79818697355AFE213CE778BD3FEA04248C0 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
19:23:54.0287 0x2a20  MozillaMaintenance - ok
19:23:54.0287 0x2a20  [ 30844BD376F9D01E62C820BEF446F1F8, 910D672EDB544A20AEB4450B4D89830F46EDD28CE0021156176315C5D068A1B4 ] mpsdrv          C:\WINDOWS\system32\drivers\mpsdrv.sys
19:23:54.0303 0x2a20  mpsdrv - ok
19:23:54.0312 0x2a20  [ 779CFDB17EA07A6D26FEBBAC95B65772, 74D9542E8DCCD07396A45A45D2F500AA6F9DCC1DB785A6153EB3067E42F576A4 ] MpsSvc          C:\WINDOWS\system32\mpssvc.dll
19:23:54.0343 0x2a20  MpsSvc - ok
19:23:54.0343 0x2a20  [ 25D32BE04FE0A23FDF57FD5382757672, 64E39E3E21D9173FB1116B989D80C244C49DA827698A05AF5CC5CD1C6AE155DE ] MRxDAV          C:\WINDOWS\system32\drivers\mrxdav.sys
19:23:54.0343 0x2a20  MRxDAV - ok
19:23:54.0359 0x2a20  [ E671EDAB0726E05ECEF4058B4CD73C4D, 9F4C50E635CE2204E3291C8D3D7F658A969E80722B8B6F0304228D9B434C20EA ] mrxsmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
19:23:54.0375 0x2a20  mrxsmb - ok
19:23:54.0375 0x2a20  [ 200E4A385F5F370D8866BAE25B0D9D32, 114AD45000A0C74EAE26C3075BBFEF80B9386C69D58CE4436CAFCF13613EAEFA ] mrxsmb10        C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys
19:23:54.0390 0x2a20  mrxsmb10 - ok
19:23:54.0390 0x2a20  [ F7C22604CD8AFB9AF1C1E3CE39A5A09F, 3F7B39336F8A72525C667D45C9300CA6D017BDE17A6E23EF794BA59D2F3C78F3 ] mrxsmb20        C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys
19:23:54.0409 0x2a20  mrxsmb20 - ok
19:23:54.0412 0x2a20  [ 74C9D21523DAE0C18F413C196DF0058A, 3DB4B8CA368D9DD82FAE2C2BC828A21142C8D29780A7C8667188C447519FF702 ] MsBridge        C:\WINDOWS\system32\drivers\bridge.sys
19:23:54.0412 0x2a20  MsBridge - ok
19:23:54.0412 0x2a20  [ 308F08347923DEEDE7BC03EC7D485841, 72DB45CA11FE635DF9F8273C38CBEFB8DF5362ADA0CBF6D2B1E570365DC700C0 ] MSDTC          C:\WINDOWS\System32\msdtc.exe
19:23:54.0428 0x2a20  MSDTC - ok
19:23:54.0428 0x2a20  [ F01B849D9D4A8CEAF32D4FDBD0B83C92, D2473AC4C6E6C03DEF13EA73EC78FB878BDC95C047651BF79A16C9DEA82AD046 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
19:23:54.0444 0x2a20  Msfs - ok
19:23:54.0444 0x2a20  [ 22ECD8F5D1DFADF2011BBB1700CB871D, 8F9EFF51137394EFA5471B8A29C541710063B65806B075B4925A84D5B6BC3BBB ] msgpiowin32    C:\WINDOWS\System32\drivers\msgpiowin32.sys
19:23:54.0444 0x2a20  msgpiowin32 - ok
19:23:54.0444 0x2a20  [ FD870F6968A145E4D2BA8A8842686B03, 34B8F601F3B5E42B4D0A41E2AF7DB4EB4E5B627DA8DA9A2A2D46B153AF23AEB1 ] mshidkmdf      C:\WINDOWS\System32\drivers\mshidkmdf.sys
19:23:54.0459 0x2a20  mshidkmdf - ok
19:23:54.0459 0x2a20  [ 30364757963A028CE5DF0FBAAC270173, C72588A6A52FF8E418A15D2C407A4DB7EA768585423720145F8253D5CA519DC2 ] mshidumdf      C:\WINDOWS\System32\drivers\mshidumdf.sys
19:23:54.0459 0x2a20  mshidumdf - ok
19:23:54.0459 0x2a20  [ 6BB0FEDDAE7135FA37FFAFF4D9E0E876, B41A3C0FFDFC493D6325ED493445AFCED04EC9DFF2B38125616FC5419AD1ACC4 ] msisadrv        C:\WINDOWS\system32\drivers\msisadrv.sys
19:23:54.0475 0x2a20  msisadrv - ok
19:23:54.0475 0x2a20  [ 07E3E54734B14F43A4A95A849C0A0DE2, 314AA02EA84D267B32DBAEBEA6C1AC1A266DED1E8D35A17B41D1D2AC75E8049E ] MSiSCSI        C:\WINDOWS\system32\iscsiexe.dll
19:23:54.0490 0x2a20  MSiSCSI - ok
19:23:54.0490 0x2a20  msiserver - ok
19:23:54.0490 0x2a20  [ 13D614E6B51ECF36746C48CE829FA7F6, CAD63C0A4F7110093F84C58252C5803F14E3FC46584B79DA17EC86D49FEAEA64 ] MSKSSRV        C:\WINDOWS\system32\DRIVERS\MSKSSRV.sys
19:23:54.0508 0x2a20  MSKSSRV - ok
19:23:54.0511 0x2a20  [ 642CDE46351D5D2D90311E77072AB46D, B2D3033E607BA2F6E6B9CFB1CBF154CD0CE910EA473C56343EC81B9B94044CCA ] MsLldp          C:\WINDOWS\system32\drivers\mslldp.sys
19:23:54.0513 0x2a20  MsLldp - ok
19:23:54.0513 0x2a20  [ F2302A5CE63CA7673200FAFCEEEDB6AF, B8C44FC2DC0332183DE325CDBF511101F3307225295EDD428CE575A8DE15C223 ] MSPCLOCK        C:\WINDOWS\system32\DRIVERS\MSPCLOCK.sys
19:23:54.0528 0x2a20  MSPCLOCK - ok
19:23:54.0528 0x2a20  [ 6114512EA26E835BA522C63635429DB5, 0F91CE41B4555316A79AEF3047C152D538CC9C7C329987C9FD0E3D961AFC87C8 ] MSPQM          C:\WINDOWS\system32\DRIVERS\MSPQM.sys
19:23:54.0528 0x2a20  MSPQM - ok
19:23:54.0544 0x2a20  [ AA538E16E644D00E3BA5349BBA9598EC, 64A68B06883FE7ED34E04AB119BA819753F1222923EDD4E802C35D402B89D075 ] MsRPC          C:\WINDOWS\system32\drivers\MsRPC.sys
19:23:54.0559 0x2a20  MsRPC - ok
19:23:54.0559 0x2a20  [ 7ACFE7435317E791FF9EED2F49B402F2, EAF2CE12403A9D975112A22EDBC313EE63B926C070B35E62D515403DD34BD88D ] MsSecFlt        C:\WINDOWS\system32\drivers\mssecflt.sys
19:23:54.0559 0x2a20  MsSecFlt - ok
19:23:54.0575 0x2a20  [ 0543BEFD41EC4D25C7F7CF36409CEC7D, 631622CFEC49952C0470531B23FFFFF483DC0EFFEF7A97B1179A600392C05DDD ] mssmbios        C:\WINDOWS\System32\drivers\mssmbios.sys
19:23:54.0575 0x2a20  mssmbios - ok
19:23:54.0575 0x2a20  [ C1569E4DB8EFE3617847BF041A3C842F, 99ADE5E7F50E04CAEC737F7F90741CCA8EE628996BA5EB6C6BC62184884429B6 ] MSTEE          C:\WINDOWS\system32\DRIVERS\MSTEE.sys
19:23:54.0591 0x2a20  MSTEE - ok
19:23:54.0591 0x2a20  [ 130B16970154BA9876B09E5C4BAC63BE, BE3AF8FC5A26AB9C9DBA9C015C2E1FD3C4CD9CB423A2BBDABA91428BF8620553 ] MTConfig        C:\WINDOWS\System32\drivers\MTConfig.sys
19:23:54.0591 0x2a20  MTConfig - ok
19:23:54.0609 0x2a20  [ 15D987C8F6CCD4AC94E070C5986762CB, 452FB0C48B86C7F8F53794CC2DDBF2B900B03A0383B2DE8F6A830F8CB0AFBAD8 ] Mup            C:\WINDOWS\system32\Drivers\mup.sys
19:23:54.0613 0x2a20  Mup - ok
19:23:54.0613 0x2a20  [ 3D2C5B4995CA0751D32DEA0DE9FDFE44, A26958785FD9E05E2CA97078C9BB277CD44222BF5F7D9E8DC2F3F6AAAFFC6483 ] mvumis          C:\WINDOWS\system32\drivers\mvumis.sys
19:23:54.0613 0x2a20  mvumis - ok
19:23:54.0613 0x2a20  [ C009123B206C56854F4E88596035231D, 670403A40B425F77C90ECB048A0C8BC11FB19E40A8CECC2C3DCF79175B745863 ] mwlPSDFilter    C:\WINDOWS\system32\DRIVERS\mwlPSDFilter.sys
19:23:54.0628 0x2a20  mwlPSDFilter - ok
19:23:54.0628 0x2a20  [ BF3739EEB9F008B1DEBAC115089A53F8, 8546AB69087656259BBE17D6F80F4AB164B04171673CE2BF9FFD1B5C9584E9A4 ] mwlPSDNServ    C:\WINDOWS\system32\DRIVERS\mwlPSDNServ.sys
19:23:54.0628 0x2a20  mwlPSDNServ - ok
19:23:54.0628 0x2a20  [ 38DD143D95E7A01B86F219DDA9C28779, 5FA8C0595CCF835DBCE1CC5322E8FD4BFB6DFB6CF869BB7CB73F919445D469AA ] mwlPSDVDisk    C:\WINDOWS\system32\DRIVERS\mwlPSDVDisk.sys
19:23:54.0628 0x2a20  mwlPSDVDisk - ok
19:23:54.0644 0x2a20  [ DB31EBB04C871F422C36A0962DA7D38B, B1BC2344744F537FB2C7D07B415F860195B7795E185253F05C0817A3764FEC10 ] NativeWifiP    C:\WINDOWS\system32\DRIVERS\nwifi.sys
19:23:54.0660 0x2a20  NativeWifiP - ok
19:23:54.0675 0x2a20  [ C3D9870E680D9D843B18F4626C3858FE, 43596CAC9FB488F810FBA954C52BC4D13F7D32028C40ACFE33DFD7EE36A65C17 ] NcaSvc          C:\WINDOWS\System32\ncasvc.dll
19:23:54.0675 0x2a20  NcaSvc - ok
19:23:54.0691 0x2a20  [ 04CE2C0F0759EACD886BA4B658B60D5D, E34D0976FC5936C8629800D826DB127072D1DFC3D350EFACA3AA1B8119551762 ] NcbService      C:\WINDOWS\System32\ncbservice.dll
19:23:54.0691 0x2a20  NcbService - ok
19:23:54.0710 0x2a20  [ E6094065008FE423377294050E7CEA2D, 86E200227256407530E2C28243DEFBC3CB6E9497644404D9AD79DA242286DF7B ] NcdAutoSetup    C:\WINDOWS\System32\NcdAutoSetup.dll
19:23:54.0713 0x2a20  NcdAutoSetup - ok
19:23:54.0713 0x2a20  [ 629CB21AC49C8867E0F29DF1C16DB7B4, 20663E68C69D0A1A2FE99A0C2A9DEFABF49786A1DC8F7F4E1699458AF57D7E79 ] ndfltr          C:\WINDOWS\System32\drivers\ndfltr.sys
19:23:54.0729 0x2a20  ndfltr - ok
19:23:54.0744 0x2a20  [ D5564FC81350458ED570528C4E3B1CCF, DD3C5012492EF9BCE3BE635BBB3AA40B3C5F5FDBD795A76B327D9C994102AC2B ] NDIS            C:\WINDOWS\system32\drivers\ndis.sys
19:23:54.0777 0x2a20  NDIS - ok
19:23:54.0782 0x2a20  [ 6DD605338FAAF6BA17662AA874E0D162, 636607829F5D7C3B7A4683C0A2DD594360D72F2AA3F8710153BE32575AE34A15 ] NdisCap        C:\WINDOWS\system32\drivers\ndiscap.sys
19:23:54.0789 0x2a20  NdisCap - ok
19:23:54.0793 0x2a20  [ E34196F285F8B8879E1FF36C31F7179E, 77A4F24F995D4C0689C43F9956E08DCEC62517E4F8B1B9EAA1852B5293DB5B9A ] NdisImPlatform  C:\WINDOWS\system32\drivers\NdisImPlatform.sys
19:23:54.0805 0x2a20  NdisImPlatform - ok
19:23:54.0813 0x2a20  [ 1FAD2398673F30CEC616B89C46B7DCBA, 70302049E6AE2BC6B3A7A9DE54D3F940AD6A9771CC2EBCCEC65994E67A25ECB5 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
19:23:54.0823 0x2a20  NdisTapi - ok
19:23:54.0826 0x2a20  [ AEB8ECBE66CC46854066CB1F5623E179, 2F650A85A9DAE38887610C0B876621035616CEDB65D4BBBD7F1405616D218AAF ] Ndisuio        C:\WINDOWS\system32\drivers\ndisuio.sys
19:23:54.0833 0x2a20  Ndisuio - ok
19:23:54.0835 0x2a20  [ 7340104C2BF2F126714F7CDE85E63610, 45B64EC6F3A4C43F7D74806789067658C6EF0D44D36B841F4D26E1EBC95AF66C ] NdisVirtualBus  C:\WINDOWS\System32\drivers\NdisVirtualBus.sys
19:23:54.0841 0x2a20  NdisVirtualBus - ok
19:23:54.0841 0x2a20  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] NdisWan        C:\WINDOWS\System32\drivers\ndiswan.sys
19:23:54.0857 0x2a20  NdisWan - ok
19:23:54.0857 0x2a20  [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] ndiswanlegacy  C:\WINDOWS\system32\DRIVERS\ndiswan.sys
19:23:54.0873 0x2a20  ndiswanlegacy - ok
19:23:54.0873 0x2a20  [ 78A12E3DF035B5D054986949B19BE43C, AD9B34F89B9F27D473BD5FCE6694A40FCCB808B61ABEDD6F70F1AF6C7E73ABF8 ] ndproxy        C:\WINDOWS\system32\DRIVERS\NDProxy.sys
19:23:54.0888 0x2a20  ndproxy - ok
19:23:54.0888 0x2a20  [ 04C8859355C1DC9C0FA198D1894D71C2, E7C67E73009341B5D402470C686781B3C7BBE2531CE26665E08E711B990B1A77 ] Ndu            C:\WINDOWS\system32\drivers\Ndu.sys
19:23:54.0909 0x2a20  Ndu - ok
19:23:54.0912 0x2a20  [ EE00C544C025958AF50C7B199F3C8595, D774DB020D9C46D1AA0B2DB9FA2C36C4A9C38D904CC6929695321D32ACA0D4D1 ] Netaapl        C:\WINDOWS\System32\drivers\netaapl64.sys
19:23:54.0931 0x2a20  Netaapl - ok
19:23:54.0935 0x2a20  [ 6C76780A01FC2B885BD6E957B5C36B02, DB7834F03A765F65C773E772D8051AFADB22CA4B5074180AA397857A0C47A068 ] NetAdapterCx    C:\WINDOWS\system32\drivers\NetAdapterCx.sys
19:23:54.0943 0x2a20  NetAdapterCx - ok
19:23:54.0946 0x2a20  [ 5D1513BD6430307C9DB86C6E351372ED, D2AB709CF7CFA5B857B084AFC821914A975B7DDDCE154229981F19448973BD6D ] NetBIOS        C:\WINDOWS\system32\drivers\netbios.sys
19:23:54.0953 0x2a20  NetBIOS - ok
19:23:54.0957 0x2a20  [ 6FEBB0A847FFD5F057B9AC8889F1B9A7, 558BCC64C59079E6569F61CCE1219A124B3313FC4E6CB5CBCC94124D202FF19D ] NetBT          C:\WINDOWS\system32\DRIVERS\netbt.sys
19:23:54.0973 0x2a20  NetBT - ok
19:23:54.0973 0x2a20  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] Netlogon        C:\WINDOWS\system32\lsass.exe
19:23:54.0973 0x2a20  Netlogon - ok
19:23:54.0993 0x2a20  [ D3BF2DA9216A4CF22A97820A50A67EFF, D00CBE0A7ECFB449D9B48967A01EE56141404EBE229893D5A1710781AD5F2551 ] Netman          C:\WINDOWS\System32\netman.dll
19:23:55.0006 0x2a20  Netman - ok
19:23:55.0015 0x2a20  [ F2645D51DD8AABC8BC72358409410437, 8CB97628923D6CEA6EFAD7E666BE92C154060BD108C28D46287A520A14B18ADA ] netprofm        C:\WINDOWS\System32\netprofmsvc.dll
19:23:55.0034 0x2a20  netprofm - ok
19:23:55.0040 0x2a20  [ D65F295A049473E6A39EA9A0EA76CA32, 274FC0BA044EB2D14093AB0E561F7FACEE06A3F433C81343C8B926FA2F9BD251 ] NetSetupSvc    C:\WINDOWS\System32\NetSetupSvc.dll
19:23:55.0055 0x2a20  NetSetupSvc - ok
19:23:55.0058 0x2a20  [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:23:55.0074 0x2a20  NetTcpPortSharing - ok
19:23:55.0074 0x2a20  [ B996DE26A2E16053C9485F5905B05320, 30EB2CEB466A4F05A44F7CBFCDFD8CC3C27B5FCF1269C1B9410C48AB362D2A75 ] NgcCtnrSvc      C:\WINDOWS\System32\NgcCtnrSvc.dll
19:23:55.0101 0x2a20  NgcCtnrSvc - ok
19:23:55.0115 0x2a20  [ 54C31C2B815E2E26BB8158022F837C9C, CED660D1A58F635C6452F82FCB2EF8ACEEB7785E31617B2ADFD9EE69A2BDF2B8 ] NgcSvc          C:\WINDOWS\system32\ngcsvc.dll
19:23:55.0152 0x2a20  NgcSvc - ok
19:23:55.0158 0x2a20  [ 9B9F520C72EE33EAEC857124BB800243, DFA9386B272F4D86F3E4BE861A2FC4617261E1AA40576DDA610FC24AB4961A63 ] NlaSvc          C:\WINDOWS\System32\nlasvc.dll
19:23:55.0173 0x2a20  NlaSvc - ok
19:23:55.0173 0x2a20  [ 001CBD7A2CD45C4EB39C01C3C677EF73, F4AAF4D60DB1232921C7811A62287B55C7C098B7A1FF9A40D88AF58A5ABECBA2 ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
19:23:55.0173 0x2a20  Npfs - ok
19:23:55.0189 0x2a20  [ 90F5DC9802AAA00CD0B6E2AD9E7FFADC, 71C0777829299DECA6ACD42F38802DBE3C29A42CFBD8A396F39DFA44D1F55B6C ] npsvctrig      C:\WINDOWS\System32\drivers\npsvctrig.sys
19:23:55.0195 0x2a20  npsvctrig - ok
19:23:55.0201 0x2a20  [ 1993C85962692EF7024501E7FE92D466, F5BCAA8308495EBF8BB061C2015E07C202A779668D171364D7E312975BC18B10 ] nsi            C:\WINDOWS\system32\nsisvc.dll
19:23:55.0210 0x2a20  nsi - ok
19:23:55.0212 0x2a20  [ 0C6218321A09A7B51BA7FFAFBA4CCB21, 330B3FA793A78410B28DFC8250BBF24442E3BB80434A7938BB96F02337614E0D ] nsiproxy        C:\WINDOWS\system32\drivers\nsiproxy.sys
19:23:55.0219 0x2a20  nsiproxy - ok
19:23:55.0251 0x2a20  [ DB69C6DA8B3DDFDC547D455CA23A8250, AE495CEB18924C8B21F7F150FF17CD00880F2E222D7B5155661798E0535D63C4 ] NTFS            C:\WINDOWS\system32\drivers\NTFS.sys
19:23:55.0295 0x2a20  NTFS - ok
19:23:55.0300 0x2a20  [ 6E6DD6F9DD2A034CF85E94047DBDB992, 63D0A0756F551B7668D1CBAB24B29FD462C706E8A81690BC248D6C92061FE215 ] Null            C:\WINDOWS\system32\drivers\Null.sys
19:23:55.0307 0x2a20  Null - ok
19:23:55.0313 0x2a20  [ 1F346E981A76BA8B98540B3481C1D659, 701F49AD67AD23A5B935F8A2A8A64CBEC194368889FE8CF09EEE44192D25E3E3 ] NVHDA          C:\WINDOWS\system32\drivers\nvhda64v.sys
19:23:55.0320 0x2a20  NVHDA - ok
19:23:55.0472 0x2a20  [ E5613925525AEB14E5A479C5AD6C8ADB, 09782EE1D1B566DB2C1A90602D0A6795F226F22C75F41D9A0466584900AB3922 ] nvlddmkm        C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys
19:23:55.0620 0x2a20  nvlddmkm - ok
19:23:55.0625 0x2a20  [ D261DF41F0840F734856A2B4F5E072C7, 2E703556D0C919375D0B7770513456844B13362190643D5524663EC8546E0FF5 ] nvraid          C:\WINDOWS\system32\drivers\nvraid.sys
19:23:55.0625 0x2a20  nvraid - ok
19:23:55.0640 0x2a20  [ 23B702B555EB0436B9DAA0BC63DA65CE, D454F80D9657CFEC852F022C12D7B2C1A2D7D247ECC591EDB07B9369DFD8C99E ] nvstor          C:\WINDOWS\system32\drivers\nvstor.sys
19:23:55.0640 0x2a20  nvstor - ok
19:23:55.0656 0x2a20  [ 81470B9600F7504D0581BD4533F45CFC, 84DB158345C67AF54E0D9943F8F20B85FD78A15469A67F1F05A98FD8753A7EBF ] NvStUSB        C:\WINDOWS\System32\drivers\nvstusb.sys
19:23:55.0656 0x2a20  NvStUSB - ok
19:23:55.0672 0x2a20  [ 1CD8D5BF5E4058A2E12949D74A7E27FD, EB99D0451F28E20A06B9E184217B8B968C1BA968C24E1DD223C3AC648D968641 ] nvsvc          C:\WINDOWS\system32\nvvsvc.exe
19:23:55.0687 0x2a20  nvsvc - ok
19:23:55.0710 0x2a20  [ 17997DC2441F7E29CDFC6458E0392764, 636CCE2DA1EF8195B33F8D6D5C8CC151D58EBF08DC9AD8ACCCE7ABD41A69639F ] OneSyncSvc      C:\WINDOWS\System32\APHostService.dll
19:23:55.0714 0x2a20  OneSyncSvc - ok
19:23:55.0729 0x2a20  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] p2pimsvc        C:\WINDOWS\system32\pnrpsvc.dll
19:23:55.0729 0x2a20  p2pimsvc - ok
19:23:55.0745 0x2a20  [ 2BBCED66D7AFC968BDBB0E4D8524DF0A, 762D916390F9DE69B3EA1D31244224F910645F8E5CEF4C505B76B215BFDFCD9A ] p2psvc          C:\WINDOWS\system32\p2psvc.dll
19:23:55.0761 0x2a20  p2psvc - ok
19:23:55.0761 0x2a20  [ 6B81BF7853D161DB8AC62CD8B9C2DE6B, B2DC06D135FD2501217DDA7349556EB873309E02188D4C3901807BA24FAB30C7 ] Parport        C:\WINDOWS\System32\drivers\parport.sys
19:23:55.0776 0x2a20  Parport - ok
19:23:55.0776 0x2a20  [ 9DB326B54C03EF2892E7551D8B354036, 64CD77E8A4425E80CFB61DEE33C1A677A4044C6FC0614D74B20BDDD7C5D5334D ] partmgr        C:\WINDOWS\system32\drivers\partmgr.sys
19:23:55.0776 0x2a20  partmgr - ok
19:23:55.0792 0x2a20  [ CDD8EDF4C35BE6D6137112F5CC7A70DA, 80EECA6BC2E668E5652A5CA9B119CCCE2A2E421F0EED1FD0EAC20C42E77C02ED ] PcaSvc          C:\WINDOWS\System32\pcasvc.dll
19:23:55.0814 0x2a20  PcaSvc - ok
19:23:55.0814 0x2a20  [ 101CC1FD8D48ED1EF71F0840158D0E6D, A944D70DE230E3FBD8B371EF3BED1FCD12AAFD56945A8F5C44994AF13283FCCD ] pci            C:\WINDOWS\system32\drivers\pci.sys
19:23:55.0830 0x2a20  pci - ok
19:23:55.0830 0x2a20  [ 214DCC87E3898F738075D1341252A552, E721FBBC3510DDB848A8CAEA3B6031EE988F42252DBC3BF7BDB6ABD9A0D9FABD ] pciide          C:\WINDOWS\system32\drivers\pciide.sys
19:23:55.0830 0x2a20  pciide - ok
19:23:55.0830 0x2a20  [ AED76A3333B3A31536E430020E0226FC, EC255B79B0908E3C142D92E35B79D90A3F2594BA012CA2B1B04A6A8745153430 ] pcmcia          C:\WINDOWS\system32\drivers\pcmcia.sys
19:23:55.0845 0x2a20  pcmcia - ok
19:23:55.0845 0x2a20  [ E63FB38B6E75B39467492FBAD2CD512A, DB406C92BA2460C833A49B98EB5BD58348E868F643A0123B0C9B5315FFC6A124 ] pcw            C:\WINDOWS\system32\drivers\pcw.sys
19:23:55.0845 0x2a20  pcw - ok
19:23:55.0861 0x2a20  [ 9EA203A07EFA6D74F07F32EF0DAB5CA6, D851F1CC748B4CD0E263931668FFF2FE20D5778267F4FF2237D565CFC171B5AF ] pdc            C:\WINDOWS\system32\drivers\pdc.sys
19:23:55.0861 0x2a20  pdc - ok
19:23:55.0877 0x2a20  [ 1509A77F840AA9E72CF8247D0CF2FBDE, 2D47AD4D8F5C2D871E603FB6D72D25EFD0E63FA3A542DAADAB9D82ED074C0E0B ] PEAUTH          C:\WINDOWS\system32\drivers\peauth.sys
19:23:55.0892 0x2a20  PEAUTH - ok
19:23:55.0930 0x2a20  [ 2B55ACB1727A8E5E7514D2D75AC4EBEB, 5E7449F3EE0B15E400E405DE561ED2D3932259107A9D9320AE42CA1A5C5AB992 ] PeerDistSvc    C:\WINDOWS\system32\peerdistsvc.dll
19:23:55.0977 0x2a20  PeerDistSvc - ok
19:23:55.0977 0x2a20  [ 540116170E2135FCD5DDE77702166B67, CBEC51C2D47532F1781B3255040F303263420B204C2F8BB2B5D1EC342F57B285 ] percsas2i      C:\WINDOWS\system32\drivers\percsas2i.sys
19:23:55.0995 0x2a20  percsas2i - ok
19:23:55.0998 0x2a20  [ 8356F87553BF49C703CF382033815898, 245EB941566D848F134629690BF271B1CBEAB6440771D3D8D7AED3756835354E ] percsas3i      C:\WINDOWS\system32\drivers\percsas3i.sys
19:23:56.0005 0x2a20  percsas3i - ok
19:23:56.0018 0x2a20  [ CB5343FF52A702A9ACFAAE6BE972FE09, EAA5362D91D05D382DF4EBBAA3FD575456F23CAD531CC6F1270F8254892DBF02 ] PerfHost        C:\WINDOWS\SysWow64\perfhost.exe
19:23:56.0027 0x2a20  PerfHost - ok
19:23:56.0042 0x2a20  [ D0D57322ABC7473E54472D8374169CC5, BD14A13D6908C8669E56EF9401FD8A3D7C618E8B6556B36E634864E733BCA4B2 ] PhoneSvc        C:\WINDOWS\System32\PhoneService.dll
19:23:56.0058 0x2a20  PhoneSvc - ok

totti6169 09.12.2016 19:33
Code:
19:23:56.0058 0x2a20  [ B4AB2C0177715FFAED88A1223212043A, 1920792ADC78DD51EF98B6A9634D686EAED0848FB7EF74A0DCD3AEBA5AF41EC6 ] PimIndexMaintenanceSvc C:\WINDOWS\System32\PimIndexMaintenance.dll
19:23:56.0073 0x2a20  PimIndexMaintenanceSvc - ok
19:23:56.0105 0x2a20  [ F931F21E4287FE3ECCF09B54A232BBA2, CEB7AB3236E5F30214027092B7B695ED35F7A1E007DF4046797D1E4DFEF49EC8 ] pla            C:\WINDOWS\system32\pla.dll
19:23:56.0141 0x2a20  pla - ok
19:23:56.0141 0x2a20  [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] PlugPlay        C:\WINDOWS\system32\umpnpmgr.dll
19:23:56.0156 0x2a20  PlugPlay - ok
19:23:56.0156 0x2a20  [ 56D7A89423325121C4A9BD5C326414F3, 649048C23D1973C3504E26B35362AC99DFE9BF31FFE73F45B43306A212AEA34C ] PNRPAutoReg    C:\WINDOWS\system32\pnrpauto.dll
19:23:56.0172 0x2a20  PNRPAutoReg - ok
19:23:56.0172 0x2a20  [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] PNRPsvc        C:\WINDOWS\system32\pnrpsvc.dll
19:23:56.0188 0x2a20  PNRPsvc - ok
19:23:56.0188 0x2a20  [ F70CAC34B455D05EAA04B2F8FB58E1CB, 295BFFB3DA03C5CE5462C11D3240024B68AC06E8DEA9062A739BE2CCEE19EB5D ] PolicyAgent    C:\WINDOWS\System32\ipsecsvc.dll
19:23:56.0215 0x2a20  PolicyAgent - ok
19:23:56.0215 0x2a20  [ 60C8376B48BA96F07AEA536527433D44, EB988C119C3E71169B91ED2A744C71933DD35447DC4A8249E80EC24E9E7077D4 ] Power          C:\WINDOWS\system32\umpo.dll
19:23:56.0230 0x2a20  Power - ok
19:23:56.0230 0x2a20  [ 5645B9D9788CCA2C88B9534996ED2D6D, 4988942DF163DB5B9B1A08CE6B628D2C47C2E2EAA30AEAE4EFE21C8CF4C8DC5D ] PptpMiniport    C:\WINDOWS\System32\drivers\raspptp.sys
19:23:56.0246 0x2a20  PptpMiniport - ok
19:23:56.0277 0x2a20  [ 7196D3C2E2E3129814C8DAB91F9A7D1E, 6763E4BF8E846B597E78778E520F5BADC95608BAA4EA0AC84971384B5D976DD7 ] PrintNotify    C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
19:23:56.0362 0x2a20  PrintNotify - ok
19:23:56.0362 0x2a20  [ 372913E12677A8CBBBABDD8311894F9D, A5233D95A0D22D2A9DB214E7CB79A99D389B67189FF6A87D0AD4610A333A637F ] Processor      C:\WINDOWS\System32\drivers\processr.sys
19:23:56.0383 0x2a20  Processor - ok
19:23:56.0390 0x2a20  [ 1F115AF75EFBAC28479B4F94A3F8D4A3, BE8D8C50D985F6AF9DDC0F13BDBE2D55D600E1F5E344982536538B14EC484AA6 ] ProfSvc        C:\WINDOWS\system32\profsvc.dll
19:23:56.0406 0x2a20  ProfSvc - ok
19:23:56.0410 0x2a20  [ FC98407B85A31161851FDE245517574F, 2CCD706CF243934FCDA32B24CE0C385EA2E67F206E0306FA584496F583A20CD1 ] Psched          C:\WINDOWS\system32\drivers\pacer.sys
19:23:56.0418 0x2a20  Psched - ok
19:23:56.0423 0x2a20  [ 7A68710BAC9B6809314B86C0CB1CBC4A, C02D97993D1F6FE6EFBA5B1366B3A4FE8CE1136A95F3A2DA07BA59554C163501 ] QWAVE          C:\WINDOWS\system32\qwave.dll
19:23:56.0424 0x2a20  QWAVE - ok
19:23:56.0424 0x2a20  [ 819602BBBFDB0BD46DEA3715BF0DD452, D4007FF1E5296316B53436CA3598D6B1CF4F60AB77D5B02F3E595081EDD5D879 ] QWAVEdrv        C:\WINDOWS\system32\drivers\qwavedrv.sys
19:23:56.0440 0x2a20  QWAVEdrv - ok
19:23:56.0440 0x2a20  [ CDF47037A0939F56D11F699629C276AD, A63F2A3FE80FB8084E3870E907505694B79EE1D9E56E292C01D481FEFD2534B0 ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
19:23:56.0440 0x2a20  RasAcd - ok
19:23:56.0456 0x2a20  [ 28C2EA278070EE12701D0EDF8CB0EC36, F10288C1C6835840026DB30285345EF892DE989F43C948E7F4760B8895FF675F ] RasAgileVpn    C:\WINDOWS\System32\drivers\AgileVpn.sys
19:23:56.0456 0x2a20  RasAgileVpn - ok
19:23:56.0471 0x2a20  [ 7B82197BF35CC3BE59AEF8B706AB8A16, AB0216164A548A48CD21F5F035E57E867584A96890B9887EC08F8DABDD89F990 ] RasAuto        C:\WINDOWS\System32\rasauto.dll
19:23:56.0471 0x2a20  RasAuto - ok
19:23:56.0471 0x2a20  [ 17E565710172ED71B8531D8822E1C5D1, 0CA39ABD9E544DDAD9D9D7D1FC50444274C31E18F9BF73069051D9F62833698F ] Rasl2tp        C:\WINDOWS\System32\drivers\rasl2tp.sys
19:23:56.0496 0x2a20  Rasl2tp - ok
19:23:56.0507 0x2a20  [ 3C0A10FFC3CB95D249CA64D62BC912EF, 8A75398EF3FF4BBE822031B3D1C63BFC75ABE11AB35BC0451DFF3B1D56477D97 ] RasMan          C:\WINDOWS\System32\rasmans.dll
19:23:56.0515 0x2a20  RasMan - ok
19:23:56.0515 0x2a20  [ 9387DF155233D45D4E010F4F2FB52A57, CABC25DA4E512809AED0085767BDD94BF3C1DA792BFF8A009B5465D9110E7060 ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
19:23:56.0531 0x2a20  RasPppoe - ok
19:23:56.0531 0x2a20  [ F0F4EEDEEBEE7A4244FAFB96A16B5712, F64717E601BD5EB674003009507B8CDD6F69F00E8670D6895EC64786166A0E8D ] RasSstp        C:\WINDOWS\System32\drivers\rassstp.sys
19:23:56.0546 0x2a20  RasSstp - ok
19:23:56.0546 0x2a20  [ EDAF0E161BE98CCC4FC9671481600745, 50DB73C341086E346F6EF57E40A7C3A8F6279E5EBB53A67F9B71B7877EB75734 ] rdbss          C:\WINDOWS\system32\DRIVERS\rdbss.sys
19:23:56.0562 0x2a20  rdbss - ok
19:23:56.0562 0x2a20  [ 79A415E6FA915EFC00297DAB16EC2635, 47BB49F6D756214193D38A4AB182B541AAC180381C3111FF7F9B0AD4C44D8733 ] rdpbus          C:\WINDOWS\System32\drivers\rdpbus.sys
19:23:56.0578 0x2a20  rdpbus - ok
19:23:56.0586 0x2a20  [ 7135785C21CA79D270D11037C43D3F19, 654A3C65CF891ED8C82A740D10CF607FC7D709185E664DE03288CEB5B25F03A6 ] RDPDR          C:\WINDOWS\system32\drivers\rdpdr.sys
19:23:56.0595 0x2a20  RDPDR - ok
19:23:56.0600 0x2a20  [ 97A61A3CB2B5CB4FC32B3224EF333448, E4F2E8BCEE3639BE57BBC8A8E67FDE42C3A5158F1204684B0ECD216F4AA044A3 ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
19:23:56.0605 0x2a20  RdpVideoMiniport - ok
19:23:56.0611 0x2a20  [ 69BB204AE07EE84ECFAB1BF13C4BD04B, 1CA832CBF4AE4821EEA2A19F9519C2D1D00406B8CCE2A86FE3B33A5F293DB218 ] rdyboost        C:\WINDOWS\system32\drivers\rdyboost.sys
19:23:56.0620 0x2a20  rdyboost - ok
19:23:56.0625 0x2a20  [ 940D6F5A2B0A61EE4170DF84F6C95C20, F8EE846DC8015EDFE7CB5BEEDC977EAA9C586BAC2216DE69D8ECCBDBC7408649 ] ReFSv1          C:\WINDOWS\system32\drivers\ReFSv1.sys
19:23:56.0641 0x2a20  ReFSv1 - ok
19:23:56.0657 0x2a20  [ 13F6B64235C60167052364BF7D99E4CA, BC12EE00775F7456FB922FBD684BF3F0CFABA5BEBB6E162C23B41DED5C20A978 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
19:23:56.0672 0x2a20  RemoteAccess - ok
19:23:56.0690 0x2a20  [ 3183B161B1F05333F6C325577FEF3596, D6A89B2A021377B6F371E5B9EFC36FF018822B28F0ED41F8CD2F00C5C8605707 ] RemoteRegistry  C:\WINDOWS\system32\regsvc.dll
19:23:56.0704 0x2a20  RemoteRegistry - ok
19:23:56.0715 0x2a20  [ FA62C4E1D753B489832DD0A7033665EE, BB0B59ABC79CEFA949632179239D711944C29E93EBCE60E629DE75AF2C3268B2 ] RetailDemo      C:\WINDOWS\system32\RDXService.dll
19:23:56.0731 0x2a20  RetailDemo - ok
19:23:56.0731 0x2a20  [ E82F3B1918C6A5FE6EB761CDF1E772AF, 0C993FCB7BFD6E01B70A1821E0DEAFA2CB241AF8C2E6D4CC120F59C1B5F6FF5F ] RFCOMM          C:\WINDOWS\System32\drivers\rfcomm.sys
19:23:56.0746 0x2a20  RFCOMM - ok
19:23:56.0746 0x2a20  [ 5DAA644F17780FC4E3F4820A46D38FEC, 32C27FFA0A4608B164F4E709CD0D998AB73CA9713BE3E47F9DBC7B3D1B6C7453 ] RmSvc          C:\WINDOWS\System32\RMapi.dll
19:23:56.0762 0x2a20  RmSvc - ok
19:23:56.0762 0x2a20  [ 672724C8B21B7DC56646045DE4D5B860, 79986E80A92C949C543959F1E35647A9788DAB2892AC20B6DEA5C0BBC0CEDE9E ] RpcEptMapper    C:\WINDOWS\System32\RpcEpMap.dll
19:23:56.0762 0x2a20  RpcEptMapper - ok
19:23:56.0762 0x2a20  [ 109C1D609951E886D3643B15C1EDD1C2, 347D8E7C50EC7F96217C7421D9BC8A42C9DF50B94169CB58DCF857A63C33C2EA ] RpcLocator      C:\WINDOWS\system32\locator.exe
19:23:56.0778 0x2a20  RpcLocator - ok
19:23:56.0793 0x2a20  [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] RpcSs          C:\WINDOWS\system32\rpcss.dll
19:23:56.0822 0x2a20  RpcSs - ok
19:23:56.0826 0x2a20  [ 5FF28F097C9699097B473F8FC7C1AA7D, 695560F1DBD85073F3D6CB1FF16F16504CA044EA62E940E463A16BBA8B86E2FA ] rspndr          C:\WINDOWS\system32\drivers\rspndr.sys
19:23:56.0833 0x2a20  rspndr - ok
19:23:56.0845 0x2a20  [ 14190644E437A95B244BFC9B37ACDB61, 793142BF5BD234F6ADA35899CA0E3ED613BE7FD09D035E5851B8C893C20F98FB ] RTL8192su      C:\WINDOWS\System32\drivers\RTL8192su.sys
19:23:56.0858 0x2a20  RTL8192su - ok
19:23:56.0858 0x2a20  [ B5DAEE69BACA64D2BB004568E22D8756, C0072CF6B438ED756435A182D55AC55F3AD356ACBD483DE06A94893D3CA8CCC5 ] s3cap          C:\WINDOWS\System32\drivers\vms3cap.sys
19:23:56.0858 0x2a20  s3cap - ok
19:23:56.0873 0x2a20  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] SamSs          C:\WINDOWS\system32\lsass.exe
19:23:56.0873 0x2a20  SamSs - ok
19:23:56.0873 0x2a20  [ 5E73FB63E2DBC75FE0C17DEB0010CE0E, 9DAC47486262397D03BC01F7438CAB62CF33BD7B5283F5B9548C770A3D6D0ADC ] sbp2port        C:\WINDOWS\system32\drivers\sbp2port.sys
19:23:56.0889 0x2a20  sbp2port - ok
19:23:56.0889 0x2a20  [ 3CD0130FFDEAEACF0905B482F3934EA3, 1EC355B63135FD2563093EBB206741C0C4CCE0551A662F6DC86C875146A88B06 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.dll
19:23:56.0911 0x2a20  SCardSvr - ok
19:23:56.0916 0x2a20  [ 9EE060D6560FFBFBDB2ED5D6ED192294, 14387B69CD26D12BE31A23251B6AA8EDFC4D6CDE4FA558F0950DE91D2DD03946 ] ScDeviceEnum    C:\WINDOWS\System32\ScDeviceEnum.dll
19:23:56.0916 0x2a20  ScDeviceEnum - ok
19:23:56.0916 0x2a20  [ 3D9A82B03C92D1FEC42CB171D6F57778, DC027F02F5EB5F1D10DB6F405FB0C15D4D5C922445F5F3C916624113278AF072 ] scfilter        C:\WINDOWS\system32\DRIVERS\scfilter.sys
19:23:56.0938 0x2a20  scfilter - ok
19:23:56.0953 0x2a20  [ D4DB6B318A0A0C74A90260725A228C0B, 57BA2EF9D880488C785C806ABF9EE753A48E589129442D72F815CD6EFFA07B22 ] Schedule        C:\WINDOWS\system32\schedsvc.dll
19:23:56.0975 0x2a20  Schedule - ok
19:23:56.0975 0x2a20  [ 9055ADDFBA4C8B914C914CE693B55C0A, DB213AC36E14D856B81D2AFE46815402537A2ABEEA15032A9FF436F953129441 ] scmbus          C:\WINDOWS\system32\drivers\scmbus.sys
19:23:56.0990 0x2a20  scmbus - ok
19:23:56.0990 0x2a20  [ B6F2363584E62960846F7C3F00124A4F, 252189FF9D623CF69BF415FF7C7FE74B0BBF756B632420578BFAFF6595616CF7 ] scmdisk0101    C:\WINDOWS\System32\drivers\scmdisk0101.sys
19:23:56.0990 0x2a20  scmdisk0101 - ok
19:23:57.0010 0x2a20  [ 9450FA11E9DE6715FCB71A519A8FF90B, B7E341C6E4CE967FCDD0D17A497C07E8A1C6B0AACE8A6E8E5D6C21EF73F13E16 ] SCPolicySvc    C:\WINDOWS\System32\certprop.dll
19:23:57.0016 0x2a20  SCPolicySvc - ok
19:23:57.0016 0x2a20  [ 7C3D10BEC8B0DBA00A78C78EB10B3AE2, A671C9CB97977613576D70607E106C7A29B9EA9E875C7C5AF293EE5903D7AD0A ] sdbus          C:\WINDOWS\System32\drivers\sdbus.sys
19:23:57.0032 0x2a20  sdbus - ok
19:23:57.0032 0x2a20  [ F3714DBAA42C15F78FFCDFE4273214EB, 2D018970B92C5F0744FAE10A2FC298F3DCEA5C2EDEB760F4F0651337B9878ABF ] SDRSVC          C:\WINDOWS\System32\SDRSVC.dll
19:23:57.0049 0x2a20  SDRSVC - ok
19:23:57.0053 0x2a20  [ 120DFCB71D6C502613A9E2D50E16850C, 2C294010AD1C9C380CD5221A37720544178B7358C8C8553AF44055E4CEE5DAF5 ] sdstor          C:\WINDOWS\System32\drivers\sdstor.sys
19:23:57.0059 0x2a20  sdstor - ok
19:23:57.0062 0x2a20  [ EFD644DD091E1D94555FC3BBC95EA66D, FBDDA6680BEC378CCF12A32D9186020E884DA15A1E789D1531B1E687FC7B54B1 ] seclogon        C:\WINDOWS\system32\seclogon.dll
19:23:57.0069 0x2a20  seclogon - ok
19:23:57.0073 0x2a20  [ F48535714BED7DD784853889B4594B26, 9B4AB7E7293E79A8F6CC46C84F23E62AD3BD6E958FCE078CDBB125A69FAC7E50 ] SENS            C:\WINDOWS\System32\sens.dll
19:23:57.0082 0x2a20  SENS - ok
19:23:57.0084 0x2a20  Sense - ok
19:23:57.0091 0x2a20  [ 2B4E090D06C60853C5C00CF255F9E02A, 4D4DBA7B04519622612BD4A4F28318CA2F5646C84CAFF8C5ACC9BF4C6031894E ] SensorDataService C:\WINDOWS\System32\SensorDataService.exe
19:23:57.0131 0x2a20  SensorDataService - ok
19:23:57.0147 0x2a20  [ C09A42163878A082C3F0D0A3DFE95714, 8033DC38D0EDED3758DA6BF8C1955BE5FFE48863C079C589660B37D0E461300F ] SensorService  C:\WINDOWS\system32\SensorService.dll
19:23:57.0163 0x2a20  SensorService - ok
19:23:57.0168 0x2a20  [ E6F00415DADCEEC860E7AB42BFD19A65, 274CAF22F93D43B6DB6953730E3DF8DA94776B24EEE74B80AB4CD780BC1366A9 ] SensrSvc        C:\WINDOWS\system32\sensrsvc.dll
19:23:57.0180 0x2a20  SensrSvc - ok
19:23:57.0182 0x2a20  [ 401D706DDC0A7AF18C3DD228ADF74551, 27C0B38D7C2E3F6FF06201124E63483931F6071954B2B99EC0143C464238C0B7 ] SerCx          C:\WINDOWS\system32\drivers\SerCx.sys
19:23:57.0189 0x2a20  SerCx - ok
19:23:57.0193 0x2a20  [ 7084D11083F0CDCA8B5C76F9846ABF5D, F639920882B0E784D8CFAF0D4C0F0C411937B6831E5DD99B0ABFBFE06BA4742F ] SerCx2          C:\WINDOWS\system32\drivers\SerCx2.sys
19:23:57.0201 0x2a20  SerCx2 - ok
19:23:57.0203 0x2a20  [ 3FF478A8ED32A83C36581425F6282B6C, 787646A17098EA7CF36064D0A950C1D470D4A280C8C5AC40023D566E53860EAE ] Serenum        C:\WINDOWS\System32\drivers\serenum.sys
19:23:57.0210 0x2a20  Serenum - ok
19:23:57.0213 0x2a20  [ 92509187AA171A80521528B36F753E1D, FE0DA272B8A155ECC161E99586C4AE7EE17B1C84BC330DA1566C83B8E03FA825 ] Serial          C:\WINDOWS\System32\drivers\serial.sys
19:23:57.0216 0x2a20  Serial - ok
19:23:57.0216 0x2a20  [ 433D38FF6D08B993847EA2A10EB8CB52, 29BA75DB6D1AC761BBDFB5AC8874FC7D763E1CD10D290E369063B34CE951270F ] sermouse        C:\WINDOWS\System32\drivers\sermouse.sys
19:23:57.0216 0x2a20  sermouse - ok
19:23:57.0245 0x2a20  [ 82CF273F0E8F243789683DEB40757569, 5433D93A41C4BF04494E6158931C6AC3154888F7CD3A417253EC02FF7EA6D00E ] SessionEnv      C:\WINDOWS\system32\sessenv.dll
19:23:57.0256 0x2a20  SessionEnv - ok
19:23:57.0256 0x2a20  [ 697D3EE0740AEAB62B66ABCA1C83D13B, FCF54A0071ED04AD3FC8551C67FE5FD49089DC0510F753052CAC5972A65C9E3D ] sfloppy        C:\WINDOWS\System32\drivers\sfloppy.sys
19:23:57.0256 0x2a20  sfloppy - ok
19:23:57.0271 0x2a20  [ 832E933AA8DB9FD4733B96D8B6484D3F, 3A8E3D7ECA192EEE154CB568073B7211FDA06078EFC3BC7E961563A1BFDD0CAA ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
19:23:57.0298 0x2a20  SharedAccess - ok
19:23:57.0310 0x2a20  [ 482E6BE8A07832E824080D352075ACA1, 4123A76C8E805AF4FE229C53E9C174095C0937913BA81A63FE9B45C44AA5B15F ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
19:23:57.0331 0x2a20  ShellHWDetection - ok
19:23:57.0331 0x2a20  [ CF3BDF9EAD8D3EF671E9339B44B185BA, C17EC6D5B00F49D9C8B5B6C262A85F34ED71C58450659F006B3632AA84F68E23 ] shpamsvc        C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll
19:23:57.0347 0x2a20  shpamsvc - ok
19:23:57.0347 0x2a20  [ A34CE1830E45DA98932295FDE4B7908A, FC553ECF4D64B4B10B7FDE5352707785517A18D487A80665BAFC7261E3F35CDC ] SiSRaid2        C:\WINDOWS\system32\drivers\SiSRaid2.sys
19:23:57.0347 0x2a20  SiSRaid2 - ok
19:23:57.0347 0x2a20  [ A7B5C670770E908DA5FEF5BF1136E933, 8D3BB6FF65E631C34BE8EA766481B2FDB2E1E916A4FD67F86705A8975A136E6C ] SiSRaid4        C:\WINDOWS\system32\drivers\sisraid4.sys
19:23:57.0363 0x2a20  SiSRaid4 - ok
19:23:57.0363 0x2a20  [ D233EAE2A9D48485321816486ED635EF, 03AB49BE9CF15EB7EDC50C400E673B4DF0E5BFDA9A7811E157F2AF2F3CF38D49 ] smphost        C:\WINDOWS\System32\smphost.dll
19:23:57.0363 0x2a20  smphost - ok
19:23:57.0378 0x2a20  [ 0B217141AC1283655402CDB356577735, 6EFA4CA46CFC8B7156CE7E5CA89B7F7073E16D66C2FC13F4DB95FEB78CCF698F ] SmsRouter      C:\WINDOWS\system32\SmsRouterSvc.dll
19:23:57.0408 0x2a20  SmsRouter - ok
19:23:57.0413 0x2a20  [ 05EAA28938D976811BD86DDA93F572DB, 8D0A8668A6610804217DDF0A7A9054A0470343185672A614389013EAB3613717 ] SNMP            C:\WINDOWS\System32\snmp.exe
19:23:57.0424 0x2a20  SNMP - ok
19:23:57.0426 0x2a20  [ 6F4CE07D420FB657B5936F71101ABD41, CEC52984C56E578E0FFE12BE1B8148335F788B7D1751F2D0E79B944A41113C20 ] SNMPTRAP        C:\WINDOWS\System32\snmptrap.exe
19:23:57.0434 0x2a20  SNMPTRAP - ok
19:23:57.0443 0x2a20  [ C994DF90427103CCB80F893FFD2B1CE8, 7E4B08095C77E68D337A3425EEA38F8FEC4D103CA7661E34FD96BF518DFB4BCB ] spaceport      C:\WINDOWS\system32\drivers\spaceport.sys
19:23:57.0457 0x2a20  spaceport - ok
19:23:57.0458 0x2a20  [ E03264C4C25B568F92ED1656AD541E64, D42942BFFBC7213D204FAF84F4FE015FC23A6ACB29B5E752834EDBC17A3AC20D ] SpbCx          C:\WINDOWS\system32\drivers\SpbCx.sys
19:23:57.0458 0x2a20  SpbCx - ok
19:23:57.0474 0x2a20  [ 79DCE27E8C4CF6701BFE49EC2446BBF6, F51CBB7A45C3C878F41653FD5FBDC93CC302712B7725DAAB4D3475A1F4771E3D ] Spooler        C:\WINDOWS\System32\spoolsv.exe
19:23:57.0506 0x2a20  Spooler - ok
19:23:57.0572 0x2a20  [ 23529A00195CE71252FEBF647E56E27D, 8ADF7A1C96DAE005E9A974D90BE8954F88D49B6848252B88513C49E0A3BD9774 ] sppsvc          C:\WINDOWS\system32\sppsvc.exe
19:23:57.0656 0x2a20  sppsvc - ok
19:23:57.0671 0x2a20  [ E83830BB74AE8CBECEA0ECD94DE436F9, 4A34569A34260324EBD629039E1BF45A3527FC75B22D9A3DB6360A6EB365483A ] srv            C:\WINDOWS\system32\DRIVERS\srv.sys
19:23:57.0687 0x2a20  srv - ok
19:23:57.0710 0x2a20  [ 1312896CAE6AF0D4557DB7B37283C116, 9E3701DBBF0F45368A217549A7DFDA2543C4AB3AC9CCF65A73E1FE27CC4A278E ] srv2            C:\WINDOWS\system32\DRIVERS\srv2.sys
19:23:57.0729 0x2a20  srv2 - ok
19:23:57.0735 0x2a20  [ F13EE0DB1FB1D6946AC3228D7EFCFC8F, 109A809F0338FAB0F4045FA5EE33C6F0A994A9F586B2FBD8920A6AABA0E0EF66 ] srvnet          C:\WINDOWS\system32\DRIVERS\srvnet.sys
19:23:57.0741 0x2a20  srvnet - ok
19:23:57.0741 0x2a20  [ 44758105AB3EA34E815D4B6CA1153311, 7F223A20D2538C123BAC6F75BE0E126876A116F09502FD980C05B8916E26E1B7 ] SSDPSRV        C:\WINDOWS\System32\ssdpsrv.dll
19:23:57.0757 0x2a20  SSDPSRV - ok
19:23:57.0757 0x2a20  [ B97C7EC07218A8002323718202BF5E77, 39D3254383E3F49FD3E2DFF8212F4B5744D8D5E0A6BB320516C5EE525AD211EB ] SstpSvc        C:\WINDOWS\system32\sstpsvc.dll
19:23:57.0772 0x2a20  SstpSvc - ok
19:23:57.0824 0x2a20  [ FD881B87C853EB2F0B8B7B5CC71D6FE3, 780038C203C9277C366794302D90BC0AE75568863F1FB7044197BA20D798E4BA ] StateRepository C:\WINDOWS\system32\windows.staterepository.dll
19:23:57.0921 0x2a20  StateRepository - ok
19:23:57.0924 0x2a20  [ 29D26E1347AE1BBD4201014E19880B2C, 9E2153AD96CE4F189EEE43BB02515532C619FB1CA02D8F6DEF517AC3347AAA14 ] stexstor        C:\WINDOWS\system32\drivers\stexstor.sys
19:23:57.0924 0x2a20  stexstor - ok
19:23:57.0940 0x2a20  [ 91CB95B35481155BFE29C217CD237F27, CA66957DF1441D991453BEF02D768D44E5D9A484BC23C8874E8A7AC20904CB06 ] stisvc          C:\WINDOWS\System32\wiaservc.dll
19:23:57.0956 0x2a20  stisvc - ok
19:23:57.0956 0x2a20  [ 53EB8CE34B55A1EE63424C8DB7388BFC, 5AB59117BA8A2844EB8693CCC19B217AE039B28C87519F96E1C845FE9BF456C2 ] storahci        C:\WINDOWS\system32\drivers\storahci.sys
19:23:57.0971 0x2a20  storahci - ok
19:23:57.0971 0x2a20  [ C5E0ACE4771F5575D9D5B457ABF3AD03, 365880BC5AC313F25C313EFB7758301F98D9B2BF4C5FC9499F98C2B7F8407D96 ] storflt        C:\WINDOWS\system32\drivers\vmstorfl.sys
19:23:57.0971 0x2a20  storflt - ok
19:23:57.0987 0x2a20  [ B66D8C75C9BC59D637177AB3B1C569A6, 76252A631F03EEBF5FDC7693F6B0A5E73838CDBE3157114CC96B8BBE88B476BF ] stornvme        C:\WINDOWS\system32\drivers\stornvme.sys
19:23:57.0987 0x2a20  stornvme - ok
19:23:57.0987 0x2a20  [ BEBF85EB4D90E6996047DA027D0ED26E, DF109CF0F07CDD1B9B702C2A076D4DD5366DAAD971CC9359AF0358E79981706F ] storqosflt      C:\WINDOWS\system32\drivers\storqosflt.sys
19:23:58.0006 0x2a20  storqosflt - ok
19:23:58.0014 0x2a20  [ 6C982BC7E4DB161530A0D831718D7113, B0FAEACC91023031E53A161ECEFCF62764C96B8705E9089B4A7B4F7A2F3B6BAA ] StorSvc        C:\WINDOWS\system32\storsvc.dll
19:23:58.0029 0x2a20  StorSvc - ok
19:23:58.0032 0x2a20  [ 8E73037A6F8938475692FFCC26EBF385, F78C5CD1A3CD17AA831EEC82426B14006B4DDBC9085A4814E04E8C37FD6B05F7 ] storufs        C:\WINDOWS\system32\drivers\storufs.sys
19:23:58.0037 0x2a20  storufs - ok
19:23:58.0040 0x2a20  [ 9D9DED47DA10E845EFF2DD57C94C809B, 520D0CE7A867051B80C8141E351FE5A5BCE3C99776093F234DB77D3407B1F104 ] storvsc        C:\WINDOWS\system32\drivers\storvsc.sys
19:23:58.0041 0x2a20  storvsc - ok
19:23:58.0041 0x2a20  [ 224C92E442B1B8C20C274332F1ACF00D, CDE5DCFB7A21089464A6E2ABB29BBE08B184C3433C218756AA5902A8F67C0B2C ] svsvc          C:\WINDOWS\system32\svsvc.dll
19:23:58.0057 0x2a20  svsvc - ok
19:23:58.0057 0x2a20  [ F7BBFE134E2FB4F49BB836AA872FD505, CD8A5883C8A244BB35EAE4D112B45C27F047FEAA39CE539B4EBE462C6A5AED93 ] SvThLSNS        c:\Program Files (x86)\SAVITECH\SVLoadSense\x64\SvThLSNS.sys
19:23:58.0072 0x2a20  SvThLSNS - ok
19:23:58.0072 0x2a20  [ 505E0C40B5D0ADDCBB414640F59BD2E0, DF4B5E65FE6FF2224F298A2A2FAC9B648C082DFF8463148633647580A9FAD34D ] swenum          C:\WINDOWS\System32\drivers\swenum.sys
19:23:58.0072 0x2a20  swenum - ok
19:23:58.0088 0x2a20  [ 2EE27411B5904C63D723BEA391819F58, C88C11D460E90398E16011B8A2CED5EE5626084F24790EA6115532F8F70060C6 ] swprv          C:\WINDOWS\System32\swprv.dll
19:23:58.0110 0x2a20  swprv - ok
19:23:58.0114 0x2a20  [ 32F46FB0F290D16DAA452B289C985795, 73F88AAAA6026DB4C27F1D054145216DCC3F1960946FB2A7A90518DD1D5737CB ] Synth3dVsc      C:\WINDOWS\System32\drivers\Synth3dVsc.sys
19:23:58.0120 0x2a20  Synth3dVsc - ok
19:23:58.0135 0x2a20  [ FED48B19D6F55D7A3AB498D85729D1BA, FA5E0E02BC2E2DE108C55991E3B063CC947072228B53539F42F922661510DE7C ] SysMain        C:\WINDOWS\system32\sysmain.dll
19:23:58.0157 0x2a20  SysMain - ok
19:23:58.0173 0x2a20  [ D9FEA79BF6AF136F8E656AE045C2FEC8, E6F08A93348E035185F0F1C6B6277E636F4F25D1136E3ACCA63488DAEEC7114B ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll
19:23:58.0188 0x2a20  SystemEventsBroker - ok
19:23:58.0188 0x2a20  [ 86E7FD5C8DBEC1EB51C4368561402B75, 86EE61414CD5854E39E33F67BF5DA4377B569B3ED4D18882C470BC6784891DA1 ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
19:23:58.0204 0x2a20  TabletInputService - ok
19:23:58.0211 0x2a20  [ 3929C8FC134AC672C4F3F85160956257, CD3195CA58BA6F55EA0DDA2BE6AB58280AD1CA488D7AAA1539DD05FB99374F36 ] TapiSrv        C:\WINDOWS\System32\tapisrv.dll
19:23:58.0216 0x2a20  TapiSrv - ok
19:23:58.0248 0x2a20  [ 4F25E481124059CC593B4C68BC485640, 2814D2BA4E83D3B0F7569E6C6EE0C763D9801BC505D8ED84675D19C8573834DB ] Tcpip          C:\WINDOWS\system32\drivers\tcpip.sys
19:23:58.0294 0x2a20  Tcpip - ok
19:23:58.0332 0x2a20  [ 4F25E481124059CC593B4C68BC485640, 2814D2BA4E83D3B0F7569E6C6EE0C763D9801BC505D8ED84675D19C8573834DB ] Tcpip6          C:\WINDOWS\system32\drivers\tcpip.sys
19:23:58.0379 0x2a20  Tcpip6 - ok
19:23:58.0379 0x2a20  [ 8DBB1BE20C36E6D19BCC89EEA00B953C, 8B97A7E53E1D77363AFF6A5AAEAD89EBAE28DCB8D82753C804FD7CD5646500AF ] tcpipreg        C:\WINDOWS\system32\drivers\tcpipreg.sys
19:23:58.0379 0x2a20  tcpipreg - ok
19:23:58.0395 0x2a20  [ 9D2DD64A0B51C56285512DC9454340F6, ABB90CE6A55269F71AFB08E04969CF9A4EFD93F7A7189AF920EEE3E005214DDD ] tdx            C:\WINDOWS\system32\DRIVERS\tdx.sys
19:23:58.0395 0x2a20  tdx - ok
19:23:58.0517 0x2a20  [ 553DF8F873F595C870C17D47EEDD8188, FAF966BFDC83FD3EAFBE943B59FCA2C6AB439B520D33E69FCF3F86215471B450 ] TeamViewer      C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
19:23:58.0918 0x2a20  TeamViewer - ok
19:23:58.0933 0x2a20  [ 06130AFFECEB94525FC2352936576B70, 10EBE2C8FDC087D29E2FFB328F0F7905A5374AB8CC9FAE8699E7676DBC8CBF91 ] terminpt        C:\WINDOWS\System32\drivers\terminpt.sys
19:23:58.0933 0x2a20  terminpt - ok
19:23:58.0959 0x2a20  [ FB68E5F02316C42BE7282DA492351C6F, AC31D841FEA58B776127E138DB20F8D48E26FD8C00CE2FA9695EA14EBF159A0A ] TermService    C:\WINDOWS\System32\termsrv.dll
19:23:58.0987 0x2a20  TermService - ok
19:23:58.0991 0x2a20  [ 2AF438EC0D361A7BBB70E604A686602C, 4BE6A0461EB2CB94288614434A1CEC81C2ED46241721FD5BBD8ABE0680F7C804 ] Themes          C:\WINDOWS\system32\themeservice.dll
19:23:59.0004 0x2a20  Themes - ok
19:23:59.0011 0x2a20  [ 1482B8ED5CACA87992A882B853B83CEE, 613247F0E362A109090E8563D977DECC50C64D45D6962905FA84A2D59329045C ] TieringEngineService C:\WINDOWS\system32\TieringEngineService.exe
19:23:59.0025 0x2a20  TieringEngineService - ok
19:23:59.0025 0x2a20  [ 3B3C607C3C62DFBEF61938DA2CAB94DF, E5EEA7F45A7BBFDF6F0003CD77E39958C451DD1B4B401876B5619A3C20F5C370 ] tiledatamodelsvc C:\WINDOWS\system32\tileobjserver.dll
19:23:59.0057 0x2a20  tiledatamodelsvc - ok
19:23:59.0062 0x2a20  [ C1F8CBE2D4843E0CCC3EFEA2EC60D4AB, 9D07527D982066922318C77AECE99280DE55034C375ACE145E827A6BEB5C3B70 ] TimeBrokerSvc  C:\WINDOWS\System32\TimeBrokerServer.dll
19:23:59.0073 0x2a20  TimeBrokerSvc - ok
19:23:59.0078 0x2a20  [ 3D04046C468AD2868A093925B5E2AA0A, 44696259BEF49AC200DEE146DE0E4375B0CD09F9356CCFA22BD7AD8B53E48658 ] TPM            C:\WINDOWS\System32\drivers\tpm.sys
19:23:59.0087 0x2a20  TPM - ok
19:23:59.0091 0x2a20  [ 3B91F35089240F6187AD681A5EC28BDE, 3D035CB73BC8E7831DCD0FB7D9DAD91CE51D3D0F9D9C8B866A0009BD508B6702 ] TrkWks          C:\WINDOWS\System32\trkwks.dll
19:23:59.0100 0x2a20  TrkWks - ok
19:23:59.0104 0x2a20  [ AF343840E793BE63A9C646760BE8F2CD, 483FE55873A01DB7ACEC99B6823DAACC9EA7C67D36C6F12698113B31A7D5B8BE ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe
19:23:59.0112 0x2a20  TrustedInstaller - ok
19:23:59.0116 0x2a20  [ A6F4025664C9D4BC2A9EDAB4092706D7, 89808A1679C0E716F86F06EE7701DCC289200894F0FA1F120DA2AC3A45FDB312 ] tsusbflt        C:\WINDOWS\system32\drivers\TsUsbFlt.sys
19:23:59.0123 0x2a20  tsusbflt - ok
19:23:59.0125 0x2a20  [ 37A96AD493E110C0BF1EE0AC0F9E7DBD, F2A6894A4AEE18DF2B92222CDB0801A13AEEB7212071F0431430788339B30E23 ] TsUsbGD        C:\WINDOWS\System32\drivers\TsUsbGD.sys
19:23:59.0125 0x2a20  TsUsbGD - ok
19:23:59.0125 0x2a20  [ 5A91FDBA4D3FCB56DAEB8C091B3EB8E1, 8AB91F4423125267FA8509A1C3A9AD1CBD642FA6A96D8789F9AB8CB75ABAD58C ] tsusbhub        C:\WINDOWS\system32\drivers\tsusbhub.sys
19:23:59.0140 0x2a20  tsusbhub - ok
19:23:59.0140 0x2a20  [ AF62F7CFDCC1ADFE43F6A8374DA13F86, 81ABCFB49BA93622693B2515BDC31D36586E1F1BD31DC28FCD9C26B78D5C1064 ] TTHID          C:\WINDOWS\System32\drivers\Cinergy_Hybrid-Stick_HID.sys
19:23:59.0161 0x2a20  TTHID - ok
19:23:59.0165 0x2a20  [ 79E264287F17D56D768440B0270466DE, ABF9DC95C5E939B30BFD9BF9EDFDB3BD78A9DFCB055B945965303B6A60E6D7A7 ] tunnel          C:\WINDOWS\System32\drivers\tunnel.sys
19:23:59.0174 0x2a20  tunnel - ok
19:23:59.0178 0x2a20  [ F723552F65D44FE693DB1A383825B3A8, EF8C343C4EB5EEA4EC830378EF576CCD6CD4EEDEDD486C0F29697044E8C71F45 ] tzautoupdate    C:\WINDOWS\system32\tzautoupdate.dll
19:23:59.0189 0x2a20  tzautoupdate - ok
19:23:59.0192 0x2a20  [ AA65954F512BA097DD190790876DD991, C1BB2B8F54F064D01190327B5E7949EBBDA21D6FC6F94D9FCD20F685C2F855FA ] UASPStor        C:\WINDOWS\System32\drivers\uaspstor.sys
19:23:59.0199 0x2a20  UASPStor - ok
19:23:59.0202 0x2a20  [ AB6268022C3A5B529075A39C33904DA6, 2717F1704640201F2681711543EA39A74C3E89C7DB232EC5DD89FD8AA6F07846 ] UcmCx0101      C:\WINDOWS\system32\Drivers\UcmCx.sys
19:23:59.0210 0x2a20  UcmCx0101 - ok
19:23:59.0214 0x2a20  [ 7ED2EDA43D21C7A5F589A7960E265C52, 7DB8A595236FBB8A264D7AB155201357212855050ABB5B1036EF32F1223FDCC2 ] UcmTcpciCx0101  C:\WINDOWS\system32\Drivers\UcmTcpciCx.sys
19:23:59.0221 0x2a20  UcmTcpciCx0101 - ok
19:23:59.0225 0x2a20  [ 169351463039B45F5CDED9768879F712, 990C8C4AEF9ED7FF6BCEAE67F7BDAA037777B142B8D96A74F8715C941A5C63C6 ] UcmUcsi        C:\WINDOWS\System32\drivers\UcmUcsi.sys
19:23:59.0225 0x2a20  UcmUcsi - ok
19:23:59.0225 0x2a20  [ 08A9E3AD29B215484FBB68CDC175DF3A, 3EFFF99C3BC4A1454E3D2B5177AE587ED3041AB4CE2A95BA7E28A2124E38E1E5 ] Ucx01000        C:\WINDOWS\system32\drivers\ucx01000.sys
19:23:59.0241 0x2a20  Ucx01000 - ok
19:23:59.0241 0x2a20  [ DA70AEE267491AA56BC63AA0C0C96CA2, 0A0AADB27607F9292BB3CE000CFDDB19BD4CA09EAAD926C4925CB43B17817AD9 ] UdeCx          C:\WINDOWS\system32\drivers\udecx.sys
19:23:59.0241 0x2a20  UdeCx - ok
19:23:59.0256 0x2a20  [ FBC5ECF6D5A868D0B116C2DBB02B8168, 945AA76C60ABAD6075B5C8F9172C018F75BCF393A1CB8B329F5E68E664627775 ] udfs            C:\WINDOWS\system32\DRIVERS\udfs.sys
19:23:59.0272 0x2a20  udfs - ok
19:23:59.0287 0x2a20  [ BC8B8BE4EB7D33145A7A4A7761825C13, 1C3EFAB5B55FA09854E914B595F15056CA89B35B12D0449499C5A74AD9FE0FA3 ] UDXTTM6010      C:\WINDOWS\system32\DRIVERS\UDXTTM6010.sys
19:23:59.0318 0x2a20  UDXTTM6010 - ok
19:23:59.0318 0x2a20  [ B918E40FAA9CD118CCA4AD388B748C98, 4B539B7B656F02C5E5BAEE52A677757B05CC11C5500D619850A564C28FAB8115 ] UEFI            C:\WINDOWS\System32\drivers\UEFI.sys
19:23:59.0318 0x2a20  UEFI - ok
19:23:59.0318 0x2a20  [ 166B17AE1DD24D8BA8CA474C7C31148F, D34E786277093278F58EFAC957279DC4ED43A190538C875B80F5B1E0A0C30381 ] UevAgentDriver  C:\WINDOWS\system32\drivers\UevAgentDriver.sys
19:23:59.0334 0x2a20  UevAgentDriver - ok
19:23:59.0349 0x2a20  [ FCA4D901FB9934DAB82ED31C4EE89A11, 8EDF8DD71C13DE77AC83D1086670E9E90C69DE379F1CF768C8B9C789254C04AA ] UevAgentService C:\WINDOWS\system32\AgentService.exe
19:23:59.0388 0x2a20  UevAgentService - ok
19:23:59.0394 0x2a20  [ 0FD75222C1AD2687AB365BEBEA400DD4, AD10DBCA59EB7D34FD8F963CE267F36774A9BC613F8D637903B12AC88C328E8A ] Ufx01000        C:\WINDOWS\system32\drivers\ufx01000.sys
19:23:59.0404 0x2a20  Ufx01000 - ok
19:23:59.0408 0x2a20  [ C1A78C53E01C641AE41BFA65797819F5, 0B9FE1BD724B3315199A1B1DA2F03255E4FE744DA3CE6CD0F77699A8E42E9359 ] UfxChipidea    C:\WINDOWS\System32\drivers\UfxChipidea.sys
19:23:59.0415 0x2a20  UfxChipidea - ok
19:23:59.0419 0x2a20  [ 767307212110EBEFB93EC9A5BE9E85B9, 368797400FE54802CE74F34B773CE2AF09EB8DEA6C035B55419A52F0B5A6FAD0 ] ufxsynopsys    C:\WINDOWS\System32\drivers\ufxsynopsys.sys
19:23:59.0426 0x2a20  ufxsynopsys - ok
19:23:59.0431 0x2a20  [ 8578F83EC5175920F2D8586FFF9DCE47, 049A16AC87F93E761150C8286633FFCA62EE85F5645DDE77D36BD0EB6481FF83 ] UI0Detect      C:\WINDOWS\system32\UI0Detect.exe
19:23:59.0439 0x2a20  UI0Detect - ok
19:23:59.0441 0x2a20  [ DC460AAA18CA2342FBBFB2DF9B044472, 14D45E059C596AE97506D26705F248CA1C2269160B31A60341060E8A93146CBD ] umbus          C:\WINDOWS\System32\drivers\umbus.sys
19:23:59.0441 0x2a20  umbus - ok
19:23:59.0441 0x2a20  [ C3CF0377917ECE6D65D7623E1E61568F, 4909695E04CBC86BFCFFBC15F332C367521054B7B4D3C141C7CA6B2E40E090B9 ] UmPass          C:\WINDOWS\System32\drivers\umpass.sys
19:23:59.0457 0x2a20  UmPass - ok
19:23:59.0457 0x2a20  [ 640CF093C1CF16D5FD317616CA348F31, BEC34D1AACA83BF5A84CE01F6A668E3CA5A33C56A446DC42EFFF7C43D22E1AE6 ] UmRdpService    C:\WINDOWS\System32\umrdp.dll
19:23:59.0473 0x2a20  UmRdpService - ok
19:23:59.0488 0x2a20  [ B8272BB8D4982C496FDC704809C38E02, F93855D932FB1DBBCC86E82C0FE0DC9ECF93BBD629D2CA9D0BE7E075E114B7FF ] UnistoreSvc    C:\WINDOWS\System32\unistore.dll
19:23:59.0518 0x2a20  UnistoreSvc - ok
19:23:59.0534 0x2a20  [ 6CDA3536F6BAB7896A57EAB7DC07F379, 8FBE6457ECD1ABB518D9800EBA8A017774FFAA8EABD2EDC0825181A12FE9AEF6 ] upnphost        C:\WINDOWS\System32\upnphost.dll
19:23:59.0550 0x2a20  upnphost - ok
19:23:59.0550 0x2a20  [ 6B46FC140C9AF68E6E7697D66D59CB4D, F018B4784D65F1A8140A6EA69C35D6A7ECE01738694052FD54AFD2B81A8F2FF8 ] UrsChipidea    C:\WINDOWS\System32\drivers\urschipidea.sys
19:23:59.0550 0x2a20  UrsChipidea - ok
19:23:59.0566 0x2a20  [ B4402E7F0923F660270442CE76877ABE, 1C2DD26EAB71F75EA576E8DAABAF71FD7DC3DF807CF025617C774CEF33C0B718 ] UrsCx01000      C:\WINDOWS\system32\drivers\urscx01000.sys
19:23:59.0572 0x2a20  UrsCx01000 - ok
19:23:59.0575 0x2a20  [ 9DD431F1B94789CFB527E5D19261F124, 8F5A249A97C5B14B282E3147DD21951D2AD34B651E762814C12F4C26D74EC70C ] UrsSynopsys    C:\WINDOWS\System32\drivers\urssynopsys.sys
19:23:59.0581 0x2a20  UrsSynopsys - ok
19:23:59.0584 0x2a20  [ F957092C63CD71D85903CA0D8370F473, 4DEC2FC20329F248135DA24CB6694FD972DCCE8B1BBEA8D872FDE41939E96AAF ] USBAAPL64      C:\WINDOWS\System32\Drivers\usbaapl64.sys
19:23:59.0606 0x2a20  USBAAPL64 - ok
19:23:59.0611 0x2a20  [ C87E32B90F085970D9637FBAD45EF6FE, C180EACD2EE479277DA5DBF39E43B428BD7945141B2451CB3946B0C1E495E76F ] usbccgp        C:\WINDOWS\System32\drivers\usbccgp.sys
19:23:59.0619 0x2a20  usbccgp - ok
19:23:59.0622 0x2a20  [ 0B663856474AC41924D9E9112203858F, 9E09F2A6279B48CAC09F8C7AA1F1BE02864D540C2ED1460CBA9FABCF0A546A1E ] usbcir          C:\WINDOWS\System32\drivers\usbcir.sys
19:23:59.0630 0x2a20  usbcir - ok
19:23:59.0634 0x2a20  [ F83D2250256203AC5DA5E8601C1AFDD7, AC0D90E2DB3051798B9D287CF3D0E92FED4000822E65A82775A29CF896B76F04 ] usbehci        C:\WINDOWS\System32\drivers\usbehci.sys
19:23:59.0640 0x2a20  usbehci - ok
19:23:59.0641 0x2a20  [ 7FFD26742321919590ED77FCA556D65F, F7FAB63C36F8519F5A7B9091C507F3CB580C390322FAF9155CCE7F66C965B968 ] usbhub          C:\WINDOWS\System32\drivers\usbhub.sys
19:23:59.0657 0x2a20  usbhub - ok
19:23:59.0657 0x2a20  [ 7A749B2863B5561BE34B39E8E249AD8F, E5B67DFAF5407007FD0CC408D6B4BA19DF59584819FC715E9F9E0FBF3EA00AAB ] USBHUB3        C:\WINDOWS\System32\drivers\UsbHub3.sys
19:23:59.0672 0x2a20  USBHUB3 - ok
19:23:59.0672 0x2a20  [ D2109F1F4FEBF1DAC415CDC5DE876479, C8A871EBD0E5EF004BA622A73DAC36C03608CD317FDCD0A6A98608DF4CC10D55 ] usbohci        C:\WINDOWS\System32\drivers\usbohci.sys
19:23:59.0688 0x2a20  usbohci - ok
19:23:59.0688 0x2a20  [ 29C9572F2D061CFC3C0BD48A3163E343, 2527DCC9E6D421F5DC40051C787A5270EB077746785465C9AA2A2AEEF47307D5 ] usbprint        C:\WINDOWS\System32\drivers\usbprint.sys
19:23:59.0688 0x2a20  usbprint - ok
19:23:59.0706 0x2a20  [ 429477D6DEF3321FF7D3EF23CAAADA00, BB7D2AFE99736AAFFA8B0B2DABF7D6A6D5CB9563B1DE6A7E86CE7DC9D27F31C0 ] usbser          C:\WINDOWS\System32\drivers\usbser.sys
19:23:59.0714 0x2a20  usbser - ok
19:23:59.0718 0x2a20  [ 0CC16F7B91C57AE9A4E44425A295FDAA, 7CEE11955E5742DA390601F565412C14A7481B8747C495CCD246696C56B426DC ] USBSTOR        C:\WINDOWS\System32\drivers\USBSTOR.SYS
19:23:59.0719 0x2a20  USBSTOR - ok
19:23:59.0719 0x2a20  [ C917D09064CDBD18F75ADC9B2C48F847, A7F6223346CCD7E84186CD0C0715014F8E3A4398298925A43290224678620D23 ] usbuhci        C:\WINDOWS\System32\drivers\usbuhci.sys
19:23:59.0734 0x2a20  usbuhci - ok
19:23:59.0734 0x2a20  [ 95BCCEFBC40D06484CF16144FE79B8A5, 8ABA73C5FFEDD319FB96B807AD08716698E557522478DF1A2C5D662675636AE0 ] USBXHCI        C:\WINDOWS\System32\drivers\USBXHCI.SYS
19:23:59.0750 0x2a20  USBXHCI - ok
19:23:59.0774 0x2a20  [ 4CC81AB9D380A6264FF4C0C1512CF965, 76C33053D1C9155B0F3F8392FF982AD4EABEE2BBBEE89EA41DBFE8E436973EB0 ] UserDataSvc    C:\WINDOWS\System32\userdataservice.dll
19:23:59.0810 0x2a20  UserDataSvc - ok
19:23:59.0827 0x2a20  [ AA24C61D88E36BA1144072227922173D, 2EBBC827E740F72EA2E75745E585378189BC0DEE91CACD7FA31BDBC5EFCF8733 ] UserManager    C:\WINDOWS\System32\usermgr.dll
19:23:59.0857 0x2a20  UserManager - ok
19:23:59.0857 0x2a20  [ C75B1B48BCAADEB0275C1EBE2EAE742D, 19875B87BDB23E5B60D6D3173FDF7A7634E81E43501529A56FFCCEE21B7E3B71 ] UsoSvc          C:\WINDOWS\system32\usocore.dll
19:23:59.0872 0x2a20  UsoSvc - ok
19:23:59.0888 0x2a20  [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] VaultSvc        C:\WINDOWS\system32\lsass.exe
19:23:59.0888 0x2a20  VaultSvc - ok
19:23:59.0888 0x2a20  [ 0CBDE344FB48E42D78E29469F202ADBC, A1C3FBA5409DD3BBEAF1D3CE2583D6C8A621C0E4F534155EC540AFD67BC9E8CA ] vdrvroot        C:\WINDOWS\system32\drivers\vdrvroot.sys
19:23:59.0906 0x2a20  vdrvroot - ok
19:23:59.0917 0x2a20  [ 0783EDE1FA94649ED7F3CEF6A734041A, 1A13A613EF6B67459031C7994FFC6F32F73E02E0F123A171618E4F011C635684 ] vds            C:\WINDOWS\System32\vds.exe
19:23:59.0934 0x2a20  vds - ok
19:23:59.0934 0x2a20  [ 723195568C8755CAD57F7933C5F2C5C2, 5C403799F67223605F825BC16D217C1EF5E1A0DDF00AC6380FE8976339B67D9B ] VerifierExt    C:\WINDOWS\system32\drivers\VerifierExt.sys
19:23:59.0950 0x2a20  VerifierExt - ok
19:23:59.0950 0x2a20  [ 46ADD0CD4473AAEF1C68266A803F704D, D521E46891253884CF8285E864FAE63F2E8E0974AD8D2EB4D910E8A35350844F ] vhdmp          C:\WINDOWS\System32\drivers\vhdmp.sys
19:23:59.0981 0x2a20  vhdmp - ok
19:23:59.0981 0x2a20  [ 7929228F0E8B0C2FA0495A17A4FC27F6, 1F1667B10A96B1D85ED165F62A5C0EF28C37F828B8280EA08BFCC1BAC03F2C90 ] vhf            C:\WINDOWS\System32\drivers\vhf.sys
19:23:59.0981 0x2a20  vhf - ok
19:23:59.0981 0x2a20  [ AEE432ED868831B1F068E373598F6D93, BAE91F47B0CB94B826CA010B490AD924D7B715911DF3FCE62F9165F3B571105C ] vmbus          C:\WINDOWS\system32\drivers\vmbus.sys
19:23:59.0997 0x2a20  vmbus - ok
19:23:59.0997 0x2a20  [ 9444B23FC694B5F90F21B0FC7F10D8DD, 86F92856F5C985DD8E5993B51E85E1F47EF8C9B2FB37468998C94266963BB4BD ] VMBusHID        C:\WINDOWS\System32\drivers\VMBusHID.sys
19:23:59.0997 0x2a20  VMBusHID - ok
19:24:00.0013 0x2a20  [ 4D0287F566B36536DD812A54C015FC4A, 01D6508CA59CF04A47902B1F7C202FD14A81240E0B447588D919DD1072B040CF ] vmgid          C:\WINDOWS\System32\drivers\vmgid.sys
19:24:00.0019 0x2a20  vmgid - ok
19:24:00.0019 0x2a20  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicguestinterface C:\WINDOWS\System32\icsvc.dll
19:24:00.0035 0x2a20  vmicguestinterface - ok
19:24:00.0035 0x2a20  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicheartbeat  C:\WINDOWS\System32\icsvc.dll
19:24:00.0050 0x2a20  vmicheartbeat - ok
19:24:00.0050 0x2a20  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmickvpexchange C:\WINDOWS\System32\icsvc.dll
19:24:00.0066 0x2a20  vmickvpexchange - ok
19:24:00.0066 0x2a20  [ 0F621B52259D88A719AA20C6D04E3D72, 80B0528CCDE6E1B6F092787E1C0769C649698B196602859A5855134F0ECCBAE5 ] vmicrdv        C:\WINDOWS\System32\icsvcext.dll
19:24:00.0082 0x2a20  vmicrdv - ok
19:24:00.0097 0x2a20  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicshutdown    C:\WINDOWS\System32\icsvc.dll
19:24:00.0114 0x2a20  vmicshutdown - ok
19:24:00.0119 0x2a20  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmictimesync    C:\WINDOWS\System32\icsvc.dll
19:24:00.0119 0x2a20  vmictimesync - ok
19:24:00.0135 0x2a20  [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicvmsession  C:\WINDOWS\System32\icsvc.dll
19:24:00.0135 0x2a20  vmicvmsession - ok
19:24:00.0151 0x2a20  [ 0F621B52259D88A719AA20C6D04E3D72, 80B0528CCDE6E1B6F092787E1C0769C649698B196602859A5855134F0ECCBAE5 ] vmicvss        C:\WINDOWS\System32\icsvcext.dll
19:24:00.0166 0x2a20  vmicvss - ok
19:24:00.0166 0x2a20  [ 29075915F9BDC3437F8BED71C067D399, 2C7718080C11DFDD4C9A2085537F78F5633369B4A27D9C64168F0249594A4AA2 ] volmgr          C:\WINDOWS\system32\drivers\volmgr.sys
19:24:00.0166 0x2a20  volmgr - ok
19:24:00.0182 0x2a20  [ 6BDB6CE6D2D9E3D3F28F1C97E12B62E2, 5E77D7AF858D7B90FF395F39B86D6F96413D1DDEA28BC9FB40C5524A4DF6DAD0 ] volmgrx        C:\WINDOWS\system32\drivers\volmgrx.sys
19:24:00.0182 0x2a20  volmgrx - ok
19:24:00.0197 0x2a20  [ BF2546583BB75F01DDA60A7921DFB230, 579BD0BC55F4F03CD8D1FCDAC3975A1649C688820F2F7FC1AD354132D9E3BEE9 ] volsnap        C:\WINDOWS\system32\drivers\volsnap.sys
19:24:00.0215 0x2a20  volsnap - ok
19:24:00.0217 0x2a20  [ AC2E20A74D09D24485BE8396CE04F07B, 23FCE8BEE01B89E5CDCA536D75DBA6DCE3E92E13178A66836CEB7829310A89D1 ] volume          C:\WINDOWS\system32\drivers\volume.sys
19:24:00.0220 0x2a20  volume - ok
19:24:00.0220 0x2a20  [ 92F6E3E6D3F1795263EB34B37F74AEF7, 33AB1ECCA1216AF1995E1DB4F11E48156FF62391D7C176C8A4CC1037B9CB3A27 ] vpci            C:\WINDOWS\System32\drivers\vpci.sys
19:24:00.0220 0x2a20  vpci - ok
19:24:00.0235 0x2a20  [ FD9BCB8920973CEAD4D49DC7A6D8A618, 34AB4A485FB40DF737600006D8323BE927FB0BDA2BC170F4C123BE775EAE7CC8 ] vsmraid        C:\WINDOWS\system32\drivers\vsmraid.sys
19:24:00.0235 0x2a20  vsmraid - ok
19:24:00.0265 0x2a20  [ 01FFD5AF533F2CFDF26DDDC9313731C1, BFF0F2E57CD2358AC8F519F6F5692A46D97EC4E9B763D47101CEF31712FD4738 ] VSS            C:\WINDOWS\system32\vssvc.exe
19:24:00.0305 0x2a20  VSS - ok
19:24:00.0313 0x2a20  [ 0C111F220798CCE80484026E06822379, B98A5E44D3ABA67E6DE99E18BF3C2C606923E6269E262665C721F672ACBBED2A ] VSTXRAID        C:\WINDOWS\system32\drivers\vstxraid.sys
19:24:00.0323 0x2a20  VSTXRAID - ok
19:24:00.0325 0x2a20  [ 607639716E9DB1CEF4E18B5B229293B4, 1D997177093F907EFE8A04AD10443BB9C355C0D7657DBD449E7EE7FCABC3ECBC ] vwifibus        C:\WINDOWS\System32\drivers\vwifibus.sys
19:24:00.0325 0x2a20  vwifibus - ok
19:24:00.0325 0x2a20  [ B1ED64E628763148BF84FBE23F2AD711, 6182A39675E6049BC3DD353694720795A8E3D0331509AA8ABA4883D5C569AD5E ] vwififlt        C:\WINDOWS\system32\drivers\vwififlt.sys
19:24:00.0340 0x2a20  vwififlt - ok
19:24:00.0340 0x2a20  [ 76C1CC611352499326001F25A3ED15F8, 228BFA8A01BB1B3868576D509A2EA6F3D37FEDC8F12D4DC4E0A84CE926C6D1B1 ] W32Time        C:\WINDOWS\system32\w32time.dll
19:24:00.0372 0x2a20  W32Time - ok
19:24:00.0372 0x2a20  [ 55D00B785A7587F4263D125817871283, B92400B229099C1E243F2B149881A1423A2E9C8CA2D77D868B9B923BFDEC7FF2 ] WacomPen        C:\WINDOWS\System32\drivers\wacompen.sys
19:24:00.0372 0x2a20  WacomPen - ok
19:24:00.0387 0x2a20  [ 1483BE4D0135C378CB61D3CD73AB3E03, B7309C9E4F370860C507BF52D17234CDF4A7FAE95D2D822714E07EF5DEC0249B ] WalletService  C:\WINDOWS\system32\WalletService.dll
19:24:00.0408 0x2a20  WalletService - ok
19:24:00.0412 0x2a20  [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
19:24:00.0423 0x2a20  wanarp - ok
19:24:00.0426 0x2a20  [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarpv6        C:\WINDOWS\system32\DRIVERS\wanarp.sys
19:24:00.0436 0x2a20  wanarpv6 - ok
19:24:00.0458 0x2a20  [ 30B8286F8FE1AE90A583100D45E02247, 3C86A4A5E21F9A1267EA231B20914E0A162BA4C25FE8917AD3AB6D504DA5BE0C ] wbengine        C:\WINDOWS\system32\wbengine.exe
19:24:00.0499 0x2a20  wbengine - ok
19:24:00.0515 0x2a20  [ 7C4FAE7A8D55C897E5AE681B245A005F, 7E1E6299579BF02E89C5B828A1C19A43FF4E1F43D46D058F8DC0A8E6421C86A7 ] WbioSrvc        C:\WINDOWS\System32\wbiosrvc.dll
19:24:00.0536 0x2a20  WbioSrvc - ok
19:24:00.0536 0x2a20  [ E330144B97D493AA886000DCAAA8DAF5, ED86F46F5A76FD8F06CA98BD61B174ADB9AD4B065394356872708DF8B614E4F9 ] wcifs          C:\WINDOWS\system32\drivers\wcifs.sys
19:24:00.0553 0x2a20  wcifs - ok
19:24:00.0565 0x2a20  [ 32960EA9CF836D7DD77767DCB68CE230, 679446A4FAB0331C181D2716CAEA225267C6164BB9867E360C5B3D6AB1083195 ] Wcmsvc          C:\WINDOWS\System32\wcmsvc.dll
19:24:00.0591 0x2a20  Wcmsvc - ok
19:24:00.0600 0x2a20  [ D50645235A507B0546B1B5CF7D0B8849, 19F5FE10C953B8EE8EEDA9A9F7F2E97AA193BB085E7FC364066686089ADD1C9F ] wcncsvc        C:\WINDOWS\System32\wcncsvc.dll
19:24:00.0618 0x2a20  wcncsvc - ok
19:24:00.0621 0x2a20  [ AEA1093B751339267D8C8C1EF3D669CF, 8F3325E7FB16BD856A0593C36F2E3E018909038C52CD5F92E116E0C1366F31CB ] wcnfs          C:\WINDOWS\system32\drivers\wcnfs.sys
19:24:00.0625 0x2a20  wcnfs - ok
19:24:00.0625 0x2a20  [ D520B1B849B6D4D707AB31722B952C2D, 149BABB7BD63C1F212ADD9306C84FFB2A5CE6DC435BD3213EAB787E9B222C61F ] WdBoot          C:\WINDOWS\system32\drivers\WdBoot.sys
19:24:00.0625 0x2a20  WdBoot - ok
19:24:00.0641 0x2a20  [ DF166352F6E356BFA33A66DD37A96AA7, 3993C22810A490281F74BF26210C9A868BF8E99A0CB090BA8E0250A5D2BC1EB2 ] WDDriveService  C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
19:24:00.0641 0x2a20  WDDriveService - ok
19:24:00.0656 0x2a20  [ 5030C76047D756263093A47B82970868, E772F15973F6DE36851DD230F1F4190746CD81CA1E7284DC074711C4BF45CAF0 ] Wdf01000        C:\WINDOWS\system32\drivers\Wdf01000.sys
19:24:00.0672 0x2a20  Wdf01000 - ok
19:24:00.0672 0x2a20  [ 29FF9199EDEB4F5470BB134D1A2563D2, 94713F98A6EA6042203D5DD0DE6758F5F0F331F7D4BB05E91EF20CEEEBD6780F ] WdFilter        C:\WINDOWS\system32\drivers\WdFilter.sys
19:24:00.0688 0x2a20  WdFilter - ok
19:24:00.0688 0x2a20  [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiServiceHost  C:\WINDOWS\system32\wdi.dll
19:24:00.0703 0x2a20  WdiServiceHost - ok
19:24:00.0703 0x2a20  [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiSystemHost  C:\WINDOWS\system32\wdi.dll
19:24:00.0720 0x2a20  WdiSystemHost - ok
19:24:00.0736 0x2a20  [ 8CB606A3057355FD5A9DBDD1A0AC94EF, 6DD0B4A2270633086EBB569A00B87430EE6EF173525E341404B15845B57BE86D ] wdiwifi        C:\WINDOWS\system32\DRIVERS\wdiwifi.sys
19:24:00.0752 0x2a20  wdiwifi - ok
19:24:00.0752 0x2a20  [ 17CF416CFF408190F5A4CBD79AB12E55, E376C8865C7EA633AE20D2CF940E4C7584AC783BAAF7941780FB6C4C84802F33 ] WdNisDrv        C:\WINDOWS\system32\Drivers\WdNisDrv.sys
19:24:00.0767 0x2a20  WdNisDrv - ok
19:24:00.0767 0x2a20  WdNisSvc - ok
19:24:00.0767 0x2a20  [ 3570C4E14F85CE0B537D126727ACA91C, A474C9E6B6E4E5945C63367C1D3D24D4782C4A4FEB00FAE15DFED099D8283078 ] WebClient      C:\WINDOWS\System32\webclnt.dll
19:24:00.0783 0x2a20  WebClient - ok
19:24:00.0783 0x2a20  [ 1785F9C96A0BDEC1F6E0C79EF412F342, D6D4EDA69457BEDDA69C2F60FC4C2FAC97D46CD8E9C1804CCD68F169383583E3 ] Wecsvc          C:\WINDOWS\system32\wecsvc.dll
19:24:00.0798 0x2a20  Wecsvc - ok
19:24:00.0798 0x2a20  [ B9175D63527B05131F2FA504CF0265F2, 1E43A17788F1B6A29E2889C81E0BE100D64BD3A9DEE7C154D9581F01D2D7D05F ] WEPHOSTSVC      C:\WINDOWS\system32\wephostsvc.dll
19:24:00.0819 0x2a20  WEPHOSTSVC - ok
19:24:00.0821 0x2a20  [ 5C58EC0C9D4DE04DCDE56F6DCEA62080, 8ED386EDF4C39C339CE0BB2AC7E199C38705E5A6B3F56A4987B9A8ABD19BB59F ] wercplsupport  C:\WINDOWS\System32\wercplsupport.dll
19:24:00.0821 0x2a20  wercplsupport - ok
19:24:00.0836 0x2a20  [ F899B355CC95AF26AB36E84E8A0DD685, C400F2F80FFF6473FEF066943C4A2AFF0FFE988A4F755757A2E5005C2A10DAD8 ] WerSvc          C:\WINDOWS\System32\WerSvc.dll
19:24:00.0836 0x2a20  WerSvc - ok
19:24:00.0836 0x2a20  [ E1785942AC51FEE6826CDF02075C5AA9, 56FE7017684086F4F9C3A2C0D3AC00369BA0938BA3987EEBEE9A75B8E3CA0AE1 ] WFPLWFS        C:\WINDOWS\system32\drivers\wfplwfs.sys
19:24:00.0852 0x2a20  WFPLWFS - ok
19:24:00.0852 0x2a20  [ B154618505A6A9026EFA6AB8C4123BF1, 713648D71AA027B4472E7E75B942630DBE7383687984B02A5E99C9E4192C95EB ] WiaRpc          C:\WINDOWS\System32\wiarpc.dll
19:24:00.0867 0x2a20  WiaRpc - ok
19:24:00.0867 0x2a20  [ 0CF79A0EACFFBB75A50A469A27696D02, E112BF7B5A8D0B0AD2EA0E7B9FD4E8CFEC9371C8E94A60248292D688AFE715C4 ] WIMMount        C:\WINDOWS\system32\drivers\wimmount.sys
19:24:00.0867 0x2a20  WIMMount - ok
19:24:00.0867 0x2a20  WinDefend - ok
19:24:00.0883 0x2a20  [ 0DE131733317EB4BE67028366B0CAAC6, AC7DADBF03A3752B4D33CA19F03DBCEDD6F56893C2DA25C98B0AB07063D990E3 ] WindowsTrustedRT C:\WINDOWS\system32\drivers\WindowsTrustedRT.sys
19:24:00.0883 0x2a20  WindowsTrustedRT - ok
19:24:00.0883 0x2a20  [ 92EB5D38BDF10C790450F3E46BF93A0E, 0FC027398DBD43EDC1F7D703C0B6DB20294DF34E67C9288442039B1A5663CE1B ] WindowsTrustedRTProxy C:\WINDOWS\system32\drivers\WindowsTrustedRTProxy.sys
19:24:00.0899 0x2a20  WindowsTrustedRTProxy - ok
19:24:00.0914 0x2a20  [ C2A3B07F0118D61086C99BDCBAB6A6A3, 04D646BEF1C6F427503C594F0ECBB33140C3991A3A7AFB66B2C9581E358F9FD2 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll
19:24:00.0936 0x2a20  WinHttpAutoProxySvc - ok
19:24:00.0936 0x2a20  [ F95DE20312ACCA7761446DE152BD1F7C, F6C5ACA500C2182437F4A7402BD81C3A2B77C0BBD78BA31FB574DC1997FCBFE6 ] WinMad          C:\WINDOWS\System32\drivers\winmad.sys
19:24:00.0936 0x2a20  WinMad - ok
19:24:00.0952 0x2a20  [ CD49CA8E3280ACEEC5ECF431A59F5EFD, 75F48EFC6DEE9E06B490703EE47602AFDEA51505285B02D2CF884601E71857CC ] Winmgmt        C:\WINDOWS\system32\wbem\WMIsvc.dll
19:24:00.0952 0x2a20  Winmgmt - ok
19:24:00.0999 0x2a20  [ A26570B4A21AD6F4D597148D3C22274E, 594BD3B9B9B4027E5A7025CAB715378FB565FC5E00A0315A2EC3A6EFBC9CC72E ] WinRM          C:\WINDOWS\system32\WsmSvc.dll
19:24:01.0061 0x2a20  WinRM - ok
19:24:01.0068 0x2a20  [ 4EFB346BFDAEEB29316AA52BBB9852B1, 4BC5554F44BD9549D0A929D77BD410FA3EB502A7D0170303D369268672505494 ] WINUSB          C:\WINDOWS\System32\drivers\WinUSB.SYS
19:24:01.0076 0x2a20  WINUSB - ok
19:24:01.0079 0x2a20  [ 8B9AFF5F08E66A6F1F1063DEC9457FB6, 98F2AF6988D125521FD34CAA48B9652922F0C8ECFAE9B0C1DF4B3CE6B9CF500F ] WinVerbs        C:\WINDOWS\System32\drivers\winverbs.sys
19:24:01.0085 0x2a20  WinVerbs - ok
19:24:01.0088 0x2a20  [ 3A627A24EAC6CEC3BA59548AA70BAD6E, C4B908CEB2D6F7F14C635AE02E20B16DAF795073975AE3967627D27E8ABAB015 ] WirelessKeyboardFilter C:\WINDOWS\System32\drivers\WirelessKeyboardFilter.sys
19:24:01.0094 0x2a20  WirelessKeyboardFilter - ok
19:24:01.0105 0x2a20  [ ECD999D8412A3473C26B118F89DB9908, 5FB9B93E4B5482CCFF01D805DFA386FD8D3441BC81E7BD5DF89EE3078FD724F3 ] wisvc          C:\WINDOWS\system32\flightsettings.dll
19:24:01.0123 0x2a20  wisvc - ok
19:24:01.0141 0x2a20  [ 7671078AEF4C0203B053A9642C401FF7, BBFADA89CD31F20ADDBFAFAD2E492C72D82BF2F8B823BB6773F04D229B62534C ] WlanSvc        C:\WINDOWS\System32\wlansvc.dll
19:24:01.0213 0x2a20  WlanSvc - ok
19:24:01.0244 0x2a20  [ 8CBA7957D7F7B48C0D396E40AA2FBCDA, 15B0B46B0C6B90350948BA4780C0AADC16FD1754F56D14F5F5C23560190EFAFF ] wlidsvc        C:\WINDOWS\system32\wlidsvc.dll
19:24:01.0291 0x2a20  wlidsvc - ok
19:24:01.0296 0x2a20  [ 6F4F4F5A007D1710BD76FB311DA97C07, FC0FEA4364F6BA4E31DBC82735D09D429CA3BE9AFCFF5D5E1263D8B27FC2CE3E ] WmiAcpi        C:\WINDOWS\System32\drivers\wmiacpi.sys
19:24:01.0302 0x2a20  WmiAcpi - ok
19:24:01.0308 0x2a20  [ 3CDDFF6CAD962C5EF1C52FD667C358B6, F6F09145E9461EB17172988D26749FCF36920A1A683459334D04A6D072B31A92 ] wmiApSrv        C:\WINDOWS\system32\wbem\WmiApSrv.exe
19:24:01.0319 0x2a20  wmiApSrv - ok
19:24:01.0321 0x2a20  WMPNetworkSvc - ok
19:24:01.0325 0x2a20  [ 43C8D087B31C592163B33A4BDA540E40, 3A6C4E5E56931B29321DCC723585F2F0E804EF4DCDEAB2A8687F30FC3AE70E43 ] Wof            C:\WINDOWS\system32\drivers\Wof.sys
19:24:01.0325 0x2a20  Wof - ok
19:24:01.0356 0x2a20  [ 909CB4BBF7B08E78C363000E09E79A6F, 217205D1B5EE03274AFF9405AED6D2A5665CBA4C3876E84B53DA44920CDF9CB1 ] workfolderssvc  C:\WINDOWS\system32\workfolderssvc.dll
19:24:01.0408 0x2a20  workfolderssvc - ok
19:24:01.0414 0x2a20  [ F02930EB91596042F2221397D60AFCE5, 10E2AB0993B67CBAA9E11C68280608965064EC9F7E0C570F5B453FACADB8AB5D ] WPDBusEnum      C:\WINDOWS\system32\wpdbusenum.dll
19:24:01.0422 0x2a20  WPDBusEnum - ok
19:24:01.0425 0x2a20  [ 75A9284F01FE7CB1A7D5EAE5C1EB4F33, 390EF23AEA06D8711555F7979FF8BE0620B53C1A551638C4EC6FB7C6678965B3 ] WpdUpFltr      C:\WINDOWS\system32\drivers\WpdUpFltr.sys
19:24:01.0431 0x2a20  WpdUpFltr - ok
19:24:01.0436 0x2a20  [ 60E2EB3E7B7F15C25E02462159F90707, D8344B529EEC0D4922CAC3E6897CC9F191ACF1376017BE38ED6BF6019F1ED181 ] WpnService      C:\WINDOWS\system32\WpnService.dll
19:24:01.0441 0x2a20  WpnService - ok
19:24:01.0441 0x2a20  [ C7C91FB86A3C6CD7619725A88ED1884C, 132C43C518F37BF303D768BD5FB0AB835F693C43FE693937D804A34E940D770F ] WpnUserService  C:\WINDOWS\System32\WpnUserService.dll
19:24:01.0457 0x2a20  WpnUserService - ok
19:24:01.0457 0x2a20  [ 36D7B73ADC3E10607ED6EC874AFB5D1E, 1737B3E4D2CA76BB27903BF460E4960E6A0BC32D35069AC7C5E4B07F625F3282 ] ws2ifsl        C:\WINDOWS\system32\drivers\ws2ifsl.sys
19:24:01.0457 0x2a20  ws2ifsl - ok
19:24:01.0473 0x2a20  [ FF190115CBA067F58C981F0A9F43ABDF, C90353C748C02DB38B561C250682E12C82985A6F7ED7D497AF5DE10EC243FCBA ] wscsvc          C:\WINDOWS\System32\wscsvc.dll
19:24:01.0473 0x2a20  wscsvc - ok
19:24:01.0488 0x2a20  [ 696EC2EAA2A42A137CCBB9A84D6917C0, 424089F4F373962AF8357C5D4D43F35948989BE3F58EAD3690F565F4C1BBC66F ] WSDPrintDevice  C:\WINDOWS\System32\drivers\WSDPrint.sys
19:24:01.0488 0x2a20  WSDPrintDevice - ok
19:24:01.0488 0x2a20  WSearch - ok
19:24:01.0524 0x2a20  [ 6BA66FE47BFAF223AEE6C98F28EB4D8E, 3B380329594DAD5BB50301F5A8A912BF6121788F395133C70C893879F68450FB ] wuauserv        C:\WINDOWS\system32\wuaueng.dll
19:24:01.0571 0x2a20  wuauserv - ok
19:24:01.0587 0x2a20  [ AED7FE551E8672B824A56324076183EB, FFE543AAEFDEFFE6B20C244DB141A9425BDA88ED36F4870F0B70FEC433BDF0C1 ] WudfPf          C:\WINDOWS\system32\drivers\WudfPf.sys
19:24:01.0587 0x2a20  WudfPf - ok
19:24:01.0587 0x2a20  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFRd          C:\WINDOWS\System32\drivers\WUDFRd.sys
19:24:01.0602 0x2a20  WUDFRd - ok
19:24:01.0602 0x2a20  [ 47F6450F28BAA32B2AB0D6BE00996249, C8A47D6ADF89AD613AB685C6224B9099DCEFDCD8ABCF703542AFDC356404116E ] wudfsvc        C:\WINDOWS\System32\WUDFSvc.dll
19:24:01.0621 0x2a20  wudfsvc - ok
19:24:01.0621 0x2a20  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFWpdFs      C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
19:24:01.0637 0x2a20  WUDFWpdFs - ok
19:24:01.0637 0x2a20  [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFWpdMtp      C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
19:24:01.0658 0x2a20  WUDFWpdMtp - ok
19:24:01.0677 0x2a20  [ E231728BC515A4B85543AF74A1FEDFCB, 5D250D7D789B5BB56BFA2E7A109BCEB3686B7636C54D89F4E9804101D145C955 ] WwanSvc        C:\WINDOWS\System32\wwansvc.dll
19:24:01.0714 0x2a20  WwanSvc - ok
19:24:01.0721 0x2a20  [ F39D6915451D9226AC9A5E7AE70E2ABA, E05D678DC0423A4D0EB8B3BB5A942721BB4F3B0BED22748252DBD6053FE956F1 ] XblAuthManager  C:\WINDOWS\System32\XblAuthManager.dll
19:24:01.0752 0x2a20  XblAuthManager - ok
19:24:01.0768 0x2a20  [ 765FF96467A26C4C03281ECA426EC2D9, 2526B03C518D72F429C29BA4D4F11707AF277BF71520A1A92238A932950AE161 ] XblGameSave    C:\WINDOWS\System32\XblGameSave.dll
19:24:01.0812 0x2a20  XblGameSave - ok
19:24:01.0819 0x2a20  [ C1E85B4FB08B4CCF16841B165910148B, AB33A6630BFC0E230BA464F721DD4ABB7DF79DF2D81C9C7366CC0BA2251F09F3 ] xboxgip        C:\WINDOWS\System32\drivers\xboxgip.sys
19:24:01.0824 0x2a20  xboxgip - ok
19:24:01.0840 0x2a20  [ 335E6F2BE58523B295945C840C185B00, 94ED7E2CB212A3D55B8A2CB90CD1D02A6AF92DC0DDD487CB5B7CAC9883343460 ] XboxNetApiSvc  C:\WINDOWS\system32\XboxNetApiSvc.dll
19:24:01.0871 0x2a20  XboxNetApiSvc - ok
19:24:01.0871 0x2a20  [ 63088A3361D9A308F328F11E9099DD87, E03FDB932FC57F199C8F8A8EADA338BDF7D2F9C6CB8FAB679A92B48B1E5AFE8A ] xinputhid      C:\WINDOWS\System32\drivers\xinputhid.sys
19:24:01.0887 0x2a20  xinputhid - ok
19:24:01.0887 0x2a20  [ DA23F650B065D94FE6AA0B7AFA41E618, 393B8959251F98FAA3AB0AD9FD78F96A09DE12815CF5EB37ACE8986E869EAE00 ] XTU3SERVICE    C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe
19:24:01.0910 0x2a20  XTU3SERVICE - ok
19:24:01.0913 0x2a20  [ 127702D90B07657E8421817D2D50A097, 3969817D67C21D7D4E146BC137557C62AB22FEC2FA55D36177D781BE83D3573B ] XtuAcpiDriver  C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys
19:24:01.0922 0x2a20  XtuAcpiDriver - ok
19:24:01.0923 0x2a20  ================ Scan global ===============================
19:24:01.0926 0x2a20  [ 0C710DB449712EE13ACE733695DB7780, BBC7875B38D318CE4E88979D083AC72E8993254A466A8A6882DDE9E0C3B687A3 ] C:\WINDOWS\system32\basesrv.dll
19:24:01.0930 0x2a20  [ C509CCD23B086DFC9EAF86E280043672, BF431DC1C618BAF0CB67976C5A8BCCDC3F3CB266F83C614D605BA559BA8EDFD8 ] C:\WINDOWS\system32\winsrv.dll
19:24:01.0935 0x2a20  [ 1EE06E957B0B2CA52D26DA7861E160EF, 4B743A1C7010138F5F6684BBCF7CAD6FD05F49920BDD3FDB776347AA6B44AB94 ] C:\WINDOWS\system32\sxssrv.dll
19:24:01.0941 0x2a20  [ 133390D061D94917125DC666DA67ECD0, 69D6FFF3E0A0C4D77A62B4D71E1E3A8D10D93C46782A1B05F0EC4B8919C384B9 ] C:\WINDOWS\system32\services.exe
19:24:01.0941 0x2a20  [ Global ] - ok
19:24:01.0941 0x2a20  ================ Scan MBR ==================================
19:24:01.0941 0x2a20  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
19:24:01.0957 0x2a20  \Device\Harddisk0\DR0 - ok
19:24:01.0972 0x2a20  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
19:24:02.0004 0x2a20  \Device\Harddisk1\DR1 - ok
19:24:02.0020 0x2a20  [ B9E0D9356AB54111DDE6320FCE645407 ] \Device\Harddisk2\DR2
19:24:02.0237 0x2a20  \Device\Harddisk2\DR2 - ok
19:24:02.0237 0x2a20  [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk3\DR3
19:24:02.0622 0x2a20  \Device\Harddisk3\DR3 - ok
19:24:02.0622 0x2a20  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk4\DR4
19:24:03.0069 0x2a20  \Device\Harddisk4\DR4 - ok
19:24:03.0069 0x2a20  ================ Scan VBR ==================================
19:24:03.0069 0x2a20  [ 78523583CA6A6DEE7854D3336B92F906 ] \Device\Harddisk0\DR0\Partition1
19:24:03.0069 0x2a20  \Device\Harddisk0\DR0\Partition1 - ok
19:24:03.0069 0x2a20  [ 452258E009D4DB2878D53DC3074D58A1 ] \Device\Harddisk0\DR0\Partition2
19:24:03.0069 0x2a20  \Device\Harddisk0\DR0\Partition2 - ok
19:24:03.0069 0x2a20  [ C1EB29D8A43C21EBC5A7AC2B28AC40D7 ] \Device\Harddisk0\DR0\Partition3
19:24:03.0069 0x2a20  \Device\Harddisk0\DR0\Partition3 - ok
19:24:03.0069 0x2a20  [ 55871C9CBE6275B568CE6AED207D8191 ] \Device\Harddisk0\DR0\Partition4
19:24:03.0069 0x2a20  \Device\Harddisk0\DR0\Partition4 - ok
19:24:03.0069 0x2a20  [ D11B4C361A9F8617C0687C8E94A3736C ] \Device\Harddisk1\DR1\Partition1
19:24:03.0085 0x2a20  \Device\Harddisk1\DR1\Partition1 - ok
19:24:03.0085 0x2a20  [ 123AF78A7E344B7B8B9F28B9C0CD440A ] \Device\Harddisk1\DR1\Partition2
19:24:03.0085 0x2a20  \Device\Harddisk1\DR1\Partition2 - ok
19:24:03.0085 0x2a20  [ 715EE248E377D4779729118EEFC76B31 ] \Device\Harddisk2\DR2\Partition1
19:24:03.0085 0x2a20  \Device\Harddisk2\DR2\Partition1 - ok
19:24:03.0085 0x2a20  [ 5DB2964D79F1D8BF196A1BFF5708EE05 ] \Device\Harddisk3\DR3\Partition1
19:24:03.0085 0x2a20  \Device\Harddisk3\DR3\Partition1 - ok
19:24:03.0085 0x2a20  [ 20F33A7D33C7E0CCDF360C06D6E4F463 ] \Device\Harddisk4\DR4\Partition1
19:24:03.0085 0x2a20  \Device\Harddisk4\DR4\Partition1 - ok
19:24:03.0085 0x2a20  ================ Scan generic autorun ======================
19:24:03.0085 0x2a20  WindowsDefender - ok
19:24:03.0085 0x2a20  [ C7645D43451C6D94D87F4D07BDE59C89, 495BBA47FC43EE23054FCD419F2F00457162D1C04296900C6AEA551102A810F3 ] C:\Windows\system32\rundll32.exe
19:24:03.0101 0x2a20  Logitech Download Assistant - ok
19:24:03.0138 0x2a20  [ 9E14107C0C1E0E5AFF69FFABB410308A, EAAFC052D584E189744D38F5521CA86E32BB539D387B829FAC5EFA22DADF9E9E ] C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
19:24:03.0154 0x2a20  LogiOptions - ok
19:24:03.0270 0x2a20  [ 882A2894A07A1349C8796728F501DE52, A4136A55D632B86A2577D9950469A73A0595F57AF0386679DB7D982935A720B7 ] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
19:24:03.0439 0x2a20  RTHDVCPL - ok
19:24:03.0480 0x2a20  [ 45C02F67FB4FD15A61779F365E4C6994, FE833FFCB0CBD4911B9096BC017C857740B902F3BC4D03EFC9C8E32A32E42DDC ] c:\Program Files (x86)\SAVITECH\SVLoadSense\SVLoadSense.exe
19:24:03.0571 0x2a20  SVLoadSense - ok
19:24:03.0589 0x2a20  [ AD561616DD9092D3BB5EAE9DCCD1A651, 92E563CBCE177A8E75EE26BD2529DC33D398A3DC81DF9F11FBEE40D89C7654C1 ] C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2UILauncher.exe
19:24:03.0625 0x2a20  SS2UILauncher - ok
19:24:03.0625 0x2a20  [ BAEDADCD6509201F82CE5B404AB14814, 8C39C18CE00DB254F370D9C4AA80E88BF67C457240F3D30A58E39DBF9B96F44B ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
19:24:03.0641 0x2a20  IAStorIcon - detected UnsignedFile.Multi.Generic ( 1 )
19:24:03.0904 0x2a20  Detect skipped due to KSN trusted
19:24:03.0904 0x2a20  IAStorIcon - ok
19:24:03.0904 0x2a20  [ D91AB5CCE502F95726AC1E035C867BC6, A27B2AAB26C844454A0CEA97F861623C518A837B9DF41778AC7F4E9184E6BC8C ] C:\Program Files\iTunes\iTunesHelper.exe
19:24:03.0904 0x2a20  iTunesHelper - ok
19:24:03.0973 0x2a20  [ 44F7F1C8873201DE4F68389DD478A425, 04A0E29E697BD58719DF8EE3C904B336B1A5FDB21B867E7CF2C6F9BAE8AD0113 ] C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
19:24:04.0054 0x2a20  WD Quick View - ok
19:24:04.0058 0x2a20  [ 26443C4332B966C44481D1DE8D1BCBB4, 2407EE6A227D2F52AE0AB270FCBECB00242F715B4A63CE2E0362D388740FB67B ] C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
19:24:04.0073 0x2a20  ASUS AiChargerPlus Execute - ok
19:24:04.0073 0x2a20  AO Link Server - ok
19:24:04.0073 0x2a20  [ 5153C06FC9D4D094D1A785545928B134, 0037C935722663F9EF028F841DE222FC6418E9D60939AB60C965807E67A458DC ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
19:24:04.0089 0x2a20  SunJavaUpdateSched - ok
19:24:04.0089 0x2a20  [ 2493166C8392AD396E30E1EAF2EE41F8, 567D92BCE8B0CD89B78B56AF9BD3EF068CDD10539EA72751C18D9F4568AEEADB ] C:\Program Files (x86)\Western Digital\WD App Manager\AppManagerLauncher.exe
19:24:04.0122 0x2a20  WDAppManager - ok
19:24:04.0125 0x2a20  [ 450D08D1FB8E5D4F14A6F2FD99531017, 4A48B5DC4997E241ED7F49B0AA05110C50667117FCE284EBBAF4D41428AF997D ] C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
19:24:04.0125 0x2a20  EgisTecPMMUpdate - ok
19:24:04.0140 0x2a20  [ 5DA6B2FA3E3F95BB3B63A53C7D7E8A68, AA41FC5106D2336BF55AE69CD4BD36EF09641CF02A186AE6660D0BFAD1C78710 ] C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
19:24:04.0140 0x2a20  EgisUpdate - ok
19:24:04.0140 0x2a20  [ B6B3B59B8BD615BED4CD0BEEF20BC88F, CFC2E2A9ACD4DDB002D3A1672182071C0E7A2573F3473DB91743B415E0B93AAD ] C:\Program Files (x86)\EgisTec BioExcess\EgisTSR.exe
19:24:04.0156 0x2a20  VitaKeyTSR - ok
19:24:04.0272 0x2a20  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
19:24:04.0403 0x2a20  OneDriveSetup - ok
19:24:04.0521 0x2a20  [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
19:24:04.0626 0x2a20  OneDriveSetup - ok
19:24:04.0657 0x2a20  [ E0DE46964C1BB0F337B85829DEDE92B8, 00CD5B3DC02D1129A9FB3510C69FB1F31630004A952FF9B1E584C2266E0E7D99 ] C:\Users\Thorsten\AppData\Local\Microsoft\OneDrive\OneDrive.exe
19:24:04.0688 0x2a20  OneDrive - ok
19:24:04.0704 0x2a20  [ 9131DC75E7AA3AC61DB05D88EB69913F, 21D6888DDDB0DCEF5373287AEACAB174CE7C23434C40AA6E705BC1457EFDB226 ] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
19:24:04.0721 0x2a20  GoogleChromeAutoLaunch_9906BCA8B778C22137C71ED2D82220B6 - ok
19:24:04.0728 0x2a20  [ F4F684066175B77E0C3A000549D2922C, 935C1861DF1F4018D698E8B65ABFA02D7E9037D8F68CA3C2065B6CA165D44AD2 ] C:\WINDOWS\system32\cmd.exe
19:24:04.0741 0x2a20  Uninstall C:\Users\Thorsten\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\amd64 - ok
19:24:04.0741 0x2a20  [ F4F684066175B77E0C3A000549D2922C, 935C1861DF1F4018D698E8B65ABFA02D7E9037D8F68CA3C2065B6CA165D44AD2 ] C:\WINDOWS\system32\cmd.exe
19:24:04.0757 0x2a20  Uninstall 17.3.6517.0809\amd64 - ok
19:24:04.0757 0x2a20  [ F4F684066175B77E0C3A000549D2922C, 935C1861DF1F4018D698E8B65ABFA02D7E9037D8F68CA3C2065B6CA165D44AD2 ] C:\WINDOWS\system32\cmd.exe
19:24:04.0784 0x2a20  Uninstall 17.3.6517.0809 - ok
19:24:04.0795 0x2a20  [ 1D7DD340E13DF9585EABB849CFC3E11B, 31CCD9753402DC030C641214B4ECB48A757BCD9F427A143A88745C62EFF87766 ] C:\Users\ttjh1\AppData\Local\Microsoft\OneDrive\OneDrive.exe
19:24:04.0809 0x2a20  OneDrive - ok
19:24:04.0830 0x2a20  [ 44348495F9D6ED21F4EFB3FF80677D99, 05B76248764B2BF7F9229626D7EFAFF96B724D38A82969EBE376CBE879E30450 ] C:\Users\totti\AppData\Local\Microsoft\OneDrive\OneDrive.exe
19:24:04.0841 0x2a20  OneDrive - ok
19:24:04.0857 0x2a20  [ F4F684066175B77E0C3A000549D2922C, 935C1861DF1F4018D698E8B65ABFA02D7E9037D8F68CA3C2065B6CA165D44AD2 ] C:\WINDOWS\system32\cmd.exe
19:24:04.0873 0x2a20  Uninstall 17.3.6705.1122\amd64 - ok
19:24:04.0873 0x2a20  [ F4F684066175B77E0C3A000549D2922C, 935C1861DF1F4018D698E8B65ABFA02D7E9037D8F68CA3C2065B6CA165D44AD2 ] C:\WINDOWS\system32\cmd.exe
19:24:04.0888 0x2a20  Uninstall 17.3.6705.1122 - ok
19:24:04.0888 0x2a20  Waiting for KSN requests completion. In queue: 273
19:24:05.0918 0x2a20  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x61100 ( enabled : updated )
19:24:05.0924 0x2a20  Win FW state via NFP2: enabled ( trusted )
19:24:06.0040 0x2a20  ============================================================
19:24:06.0040 0x2a20  Scan finished
19:24:06.0040 0x2a20  ============================================================
19:24:06.0041 0x290c  Detected object count: 0
19:24:06.0041 0x290c  Actual detected object count: 0

deeprybka 09.12.2016 19:34
Schritt 1
Downloade Dir HitmanProhttp://deeprybka.trojaner-board.de/b.../hitmanpro.pngauf Deinen Desktop:

HitmanPro-32 Bit Version
HitmanPro-64 Bit Version
´Jetzt bitte Suchscan durchführen:

Schritt 2

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


totti6169 10.12.2016 03:29
Code:
HitmanPro 3.7.15.281
www.hitmanpro.com

  Computer name . . . . : HOME-PC
  Windows . . . . . . . : 10.0.0.14393.X64/4
  User name . . . . . . : HOME-PC\totti
  UAC . . . . . . . . . : Enabled
  License . . . . . . . : Free

  Scan date . . . . . . : 2016-12-10 03:20:49
  Scan mode . . . . . . : Normal
  Scan duration . . . . : 2m 55s
  Disk access mode  . . : Direct disk access (SRB)
  Cloud . . . . . . . . : Internet
  Reboot  . . . . . . . : No

  Threats . . . . . . . : 3
  Traces  . . . . . . . : 9

  Objects scanned . . . : 2.134.311
  Files scanned . . . . : 173.992
  Remnants scanned  . . : 857.314 files / 1.103.005 keys

Malware _____________________________________________________________________

  C:\Users\totti\Downloads\K-Lite_Codec_Pack_1265_Mega_CB-DL-Manager.exe
      Size . . . . . . . : 566.904 bytes
      Age  . . . . . . . : 0.2 days (2016-12-09 23:27:09)
      Entropy  . . . . . : 6.9
      SHA-256  . . . . . : BB5B1A340CA914DBC98C4E8B3F7819799E69BB1BD7AAE11D0AE7981AC4373A7F
      RSA Key Size . . . : 2048
      Authenticode . . . : Valid
    > Kaspersky  . . . . : not-a-virus:HEUR:Downloader.Win32.DownloaderGuide.gen
      Fuzzy  . . . . . . : 101.0
      Forensic Cluster
        -338.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00110a
        -331.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00110b
        -330.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00110c
        -330.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00110d
        -329.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00110e
        -328.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00110f
        -328.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001110
        -328.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001111
        -328.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001112
        -327.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001113
        -327.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001114
        -327.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001115
        -322.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001116
        -306.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001117
        -306.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001118
        -306.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001119
        -288.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00111a
        -284.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00111b
        -284.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00111c
        -284.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00111d
        -282.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00111e
        -282.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00111f
        -275.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001120
        -272.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001121
        -272.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001122
        -260.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001123
        -260.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001124
        -260.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001125
        -259.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001126
        -259.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001127
        -255.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001128
        -252.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001129
        -245.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00112a
        -244.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00112b
        -244.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00112c
        -244.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00112d
        -244.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00112e
        -240.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000041
        -239.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000042
        -239.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000043
        -230.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00112f
        -230.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001130
        -230.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001131
        -230.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001132
        -229.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001133
        -229.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001134
        -229.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001135
        -226.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001136
        -225.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001137
        -224.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001138
        -221.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001139
        -220.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00113a
        -218.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00113b
        -214.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00113c
        -211.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00113d
        -211.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00113e
        -211.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00113f
        -210.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001140
        -210.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001141
        -210.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001142
        -201.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001143
        -194.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001144
        -194.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001145
        -194.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001146
        -194.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001147
        -194.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001148
        -194.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001149
        -194.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00114a
        -194.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00114b
        -194.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00114c
        -193.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00114d
        -189.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00114e
        -179.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00114f
        -179.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001150
        -175.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001151
        -175.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001152
        -174.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001153
        -164.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001154
        -156.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001155
        -156.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001156
        -156.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001157
        -155.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001158
        -155.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001159
        -155.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00115a
        -155.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00115b
        -155.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00115c
        -155.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00115d
        -155.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00115e
        -155.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00115f
        -155.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001160
        -155.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001161
        -155.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001162
        -155.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001163
        -154.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001164
        -154.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001165
        -154.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001166
        -154.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001167
        -154.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001169
        -154.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00116a
        -152.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00116b
        -152.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00116c
        -152.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00116d
        -152.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00116e
        -152.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00116f
        -152.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001170
        -152.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001171
        -150.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.computerbild.de_0.localstorage
        -150.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.computerbild.de_0.localstorage-journal
        -150.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_a3143730321.cdn.optimizely.com_0.localstorage
        -150.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_a3143730321.cdn.optimizely.com_0.localstorage-journal
        -150.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001172
        -144.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001173
        -139.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001174
        -139.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001175
        -139.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001177
        -139.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001178
        -138.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001179
        -138.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00117a
        -138.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000044
        -138.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000045
        -138.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000046
        -134.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00117b
        -128.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00117c
        -128.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00117d
        -128.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00117e
        -128.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00117f
        -127.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001180
        -127.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001181
        -127.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001182
        -127.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001184
        -127.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001185
        -127.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001186
        -127.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001187
        -127.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001188
        -127.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001189
        -126.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00118a
        -126.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00118b
        -126.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00118c
        -114.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00118d
        -114.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00118e
        -94.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00118f
        -84.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001190
        -72.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001191
        -64.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001192
        -54.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001193
        -49.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001194
        -49.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001195
        -49.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001196
        -49.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001197
        -49.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001198
        -49.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001199
        -49.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00119a
        -47.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00119b
        -47.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00119c
        -47.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00119d
        -34.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00119e
        -34.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00119f
        -21.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011a0
        -21.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011a1
        -21.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011a2
        -20.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011a3
        -20.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011a4
        -20.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011a5
        -20.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011a6
        -20.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011a7
        -20.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011a8
        -20.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011a9
        -10.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011aa
        -10.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011ab
        -9.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011ac
        -9.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011ad
        -6.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011ae
        -5.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011af
        -5.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011b0
        -5.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011b1
        -5.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011b2
        -5.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011b3
        -5.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011b4
        -5.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011b5
        -4.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011b6
        -4.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011b7
        -4.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011b8
        -4.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011b9
        -4.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011ba
        -4.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011bb
        -4.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011bc
        -4.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011bd
        -4.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011be
        -4.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011bf
        -4.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011c0
        -4.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011c1
        -4.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011c2
        -4.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011c3
        -4.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011c4
        -4.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011c5
        -4.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011c6
        -4.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011c7
        -4.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011c8
        -4.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011c9
        -4.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011ca
        -4.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011cb
        -4.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011cc
        -4.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011cd
        -4.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011ce
        -4.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011cf
        -4.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011d0
        -4.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011d1
        -4.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011d2
        -4.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011d3
        -4.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011d4
        -4.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011d5
        -4.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011d6
        -4.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011d8
        -4.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011d9
        -4.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011da
        -4.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011db
        -4.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011dc
        -4.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011dd
        -3.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011de
        -3.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011df
        -3.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011e0
        -2.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011e1
        -2.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011e2
        -1.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011e3
          0.0s C:\Users\totti\Downloads\K-Lite_Codec_Pack_1265_Mega_CB-DL-Manager.exe
          1.3s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\44\F0B3DC7AE69B49C8.dat
          1.6s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\10\D38454007D024886.dat
          1.6s C:\Windows\Logs\WindowsUpdate\WindowsUpdate.20161209.232711.404.1.etl
          8.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011e4
          9.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011e5
          9.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011e6
          9.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011e7
          9.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011e8
          9.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011e9
        10.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011ea
        12.3s C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{AB4C9775-AD8F-4B3C-8454-AE68A3C4AEB9}
        12.5s C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{FE78516F-E3FB-499A-AD79-13A5D8BB83AC}
        14.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011eb
        14.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011ec
        14.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011ed
        18.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011ee
        18.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011ef
        18.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011f0
        19.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011f1
        19.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011f2
        19.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011f3
        19.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011f4
        19.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011f5
        19.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011f6
        19.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011f7
        19.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011f8
        19.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011f9
        19.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011fa
        19.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011fb
        19.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011fc
        19.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011fe
        19.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0011ff
        19.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001200
        19.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001201
        19.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001202
        20.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001203
        20.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001204
        20.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001205
        20.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001206
        20.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001207
        20.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000047
        20.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001208
        20.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001209
        20.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000048
        20.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000049
        20.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00120a
        20.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00120b
        21.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00120c
        21.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00120d
        21.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00120e
        21.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00120f
        22.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001210
        22.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001211
        22.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001212
        22.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001213
        22.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001214
        22.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001215
        22.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001216
        22.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001217
        22.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001218
        22.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001219
        23.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00121a
        23.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00121b
        23.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00121c
        26.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_renderer.qmerce.com_0.localstorage
        26.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_renderer.qmerce.com_0.localstorage-journal
        28.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_00004a
        31.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00121d
        33.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00121e
        42.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00121f
        42.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001220
        50.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_00004b
        50.4s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_00004c
        50.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_00004d
        51.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_00004e
        51.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_00004f
        53.8s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000050
        58.9s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000051
        61.3s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000052
        65.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000053
        69.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Media Cache\f_000054
        69.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001221
        70.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001222
        70.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001223
        70.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001224
        70.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001226
        70.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001227
        71.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001228
        71.0s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001229
        71.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00122a
        71.2s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00122b
        71.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00122c
        71.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00122d
        71.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00122e
        71.6s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00122f
        71.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001230
        71.7s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001231
        72.1s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001232
        72.5s C:\Users\totti\AppData\Local\Google\Chrome\User Data\Default\Cache\f_001233

  C:\Users\ttjh1\Downloads\NetSpeedMonitor 64 Bit - CHIP-Installer.exe
      Size . . . . . . . : 1.473.544 bytes
      Age  . . . . . . . : 187.2 days (2016-06-05 21:44:33)
      Entropy  . . . . . : 7.2
      SHA-256  . . . . . : 23944257A41EDD24E9B73C8F9D594C4D274E3F342DD16A0A63954578A7AFDA85
      Needs elevation  . : Yes
      RSA Key Size . . . : 2048
      Authenticode . . . : Valid
    > Kaspersky  . . . . : not-a-virus:Downloader.Win32.DownloadSponsor.pe
      Fuzzy  . . . . . . : 103.0


Suspicious files ____________________________________________________________

  C:\Users\Thorsten\Downloads\FRST64.exe
      Size . . . . . . . : 2.419.712 bytes
      Age  . . . . . . . : 4.2 days (2016-12-05 22:28:39)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 73A98F66CB64732FBE7C225F365A5EF6BF2BC269DD57BEAF43A5859EC378F53D
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
        Program has no publisher information but prompts the user for permission elevation.
        Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
        Authors name is missing in version info. This is not common to most programs.
        Version control is missing. This file is probably created by an individual. This is not typical for most programs.
        Time indicates that the file appeared recently on this computer.
      Forensic Cluster
        -20.6s C:\Users\Thorsten\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000e9a
        -5.9s C:\Users\Thorsten\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000e9b
        -5.5s C:\Users\Thorsten\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000e9c
        -4.7s C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\3\h\b0002207000000031013.dat
        -2.0s C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\3\i\b0002208000000031000.dat
          0.0s C:\Users\Thorsten\Downloads\FRST64.exe
          3.3s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\15\A4E488937C9FC857.dat
          3.3s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\4\15\A4E488937C9FC857.dat

  C:\Users\totti\Downloads\FRST64.exe
      Size . . . . . . . : 2.419.712 bytes
      Age  . . . . . . . : 4.2 days (2016-12-05 23:04:38)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 73A98F66CB64732FBE7C225F365A5EF6BF2BC269DD57BEAF43A5859EC378F53D
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
        Program has no publisher information but prompts the user for permission elevation.
        Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
        Authors name is missing in version info. This is not common to most programs.
        Version control is missing. This file is probably created by an individual. This is not typical for most programs.
        Time indicates that the file appeared recently on this computer.
      Forensic Cluster
          0.0s C:\Users\totti\Downloads\FRST64.exe
          1.4s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\4\82\F68D22BE6772CE12.dat
          1.4s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\4\82\
          2.2s C:\ProgramData\Microsoft\Windows Defender\Scans\History\Store\E33360CDF9217EDA9A7496DFEB69E82A
          3.2s C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{6DB62634-6F4D-4025-847C-55BF9B3D1059}
          3.7s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\1\82\F68D22BE6772CE12.dat
        23.7s C:\Users\totti\AppData\Local\Packages\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\AC\Microsoft\Windows\
        23.7s C:\Users\totti\AppData\Local\Packages\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy\AC\Microsoft\
        23.9s C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{63F9501A-7F0B-4D7A-9FBB-A815D50EF030}
        28.5s C:\FRST\Hives\ERDNT.INF
        28.5s C:\FRST\Hives\ERDNT.CON
        28.5s C:\FRST\Hives\BCD
        28.5s C:\FRST\Hives\SYSTEM
        28.6s C:\FRST\Hives\SOFTWARE
        28.8s C:\FRST\Hives\DEFAULT
        28.8s C:\FRST\Hives\SECURITY
        28.8s C:\FRST\Hives\SAM
        28.8s C:\FRST\Hives\Users\
        28.8s C:\FRST\Hives\Users\00000001\
        28.8s C:\FRST\Hives\Users\00000001\NTUSER.DAT
        28.8s C:\FRST\Hives\Users\00000002\
        28.8s C:\FRST\Hives\Users\00000002\UsrClass.dat
        28.9s C:\FRST\Hives\ERDNT.EXE
        28.9s C:\FRST\Hives\ERDNTWIN.LOC
        28.9s C:\FRST\Hives\ERDNTDOS.LOC
        29.0s C:\ProgramData\Microsoft\Windows Defender\Scans\MetaStore\2\82\F68D22BE6772CE12.dat
        29.2s C:\Users\totti\AppData\Local\Microsoft\Windows\INetCookies\3P1U9K67.cookie
        29.2s C:\Users\totti\AppData\Local\Microsoft\Windows\INetCache\IE\H8UBV6HX\up64[1]
        38.5s C:\Users\totti\Downloads\FRST.txt


Malware remnants ____________________________________________________________

  mysearchdial.com
  C:\Users\Thorsten\AppData\Local\Google\Chrome\User Data\Default\Web Data


Potential Unwanted Programs _________________________________________________

  istartsurf
  C:\Users\Thorsten\AppData\Local\Google\Chrome\User Data\Default\Web Data

  istartsurf.com
  C:\Users\Thorsten\AppData\Local\Google\Chrome\User Data\Default\Web Data

  search.snapdo.com
  C:\Users\Thorsten\AppData\Local\Google\Chrome\User Data\Default\Web Data

  webssearches
  C:\Users\Thorsten\AppData\Local\Google\Chrome\User Data\Default\Web Data

deeprybka 10.12.2016 16:54
Und ESET bitte sobald fertig...:)

totti6169 10.12.2016 17:17
Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=feaf1c9f5f7e9843bc8d5bcfe210587a
# end=init
# utc_time=2016-12-05 07:19:46
# local_time=2016-12-05 08:19:46 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 31633
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=feaf1c9f5f7e9843bc8d5bcfe210587a
# end=updated
# utc_time=2016-12-05 07:23:53
# local_time=2016-12-05 08:23:53 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=feaf1c9f5f7e9843bc8d5bcfe210587a
# end=restart
# utc_time=2016-12-05 07:46:19
# local_time=2016-12-05 08:46:19 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 0 12297795 0 0
# scanned=103859
# found=29
# cleaned=0
# scan_time=1346
sh=78D53E1560E2C815F597BB5D6B8ADE9CC58E7A6C ft=1 fh=4e3af72ed1709949 vn="Variante von Win64/WebBar.B evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\Logishrd\LogiOptions\Software\Current\dma_x64.dll"
sh=78D53E1560E2C815F597BB5D6B8ADE9CC58E7A6C ft=1 fh=4e3af72ed1709949 vn="Variante von Win64/WebBar.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\Logishrd\LogiOptions\Software\Current\dma_x64.dll"
sh=AC1FE70A83AE8A92A98AFC21D0004DFA6F829762 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.K Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\b\00000601000000073701.dat"
sh=D14CEDF453B7957273E5A6C1A61CCD0B31E2466C ft=0 fh=0000000000000000 vn="Variante von Win32/Kryptik.DHWI Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\c\20000702000000073701.dat"
sh=9027E23BFA2361937D6615E272BFBBEFB672DCF9 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.J Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\c\b0000702000000073701.dat"
sh=A4D6BD2132D8BE0AA3E7785D55AFEBE451CF68BD ft=0 fh=0000000000000000 vn="Variante von Win32/Injector.CQON Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\c\e0000502000000073701.dat"
sh=627FD5D763393596EC365CDCDFA7C457A7AABFBA ft=0 fh=0000000000000000 vn="Variante von Win32/Injector.CQON Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\d\e0000503000000073701.dat"
sh=F2C88FE7DA932106FC831CC5410D1389C8A5C434 ft=0 fh=0000000000000000 vn="Variante von Win32/Injector.UXF Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\f\40000905000000073701.dat"
sh=8219477394B6BE1B09E06314344FE3BB3645AD6B ft=0 fh=0000000000000000 vn="Win32/Trustezeb.B Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\h\40000907000000073701.dat"
sh=275A01050BA932988D516C1D1B2F517920E654BC ft=0 fh=0000000000000000 vn="Win32/Trustezeb.B Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\i\40000908000000073701.dat"
sh=FB682CCC821D9EF2D0B1F6DCD73A8BA1AEE82223 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.B Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\j\40000909000000073701.dat"
sh=D6F2AD9B9587DF4270899085ABF6731AF9901306 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.F Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\j\f0000709000000073701.dat"
sh=4EB6C3381F599D0DA6A2436DA6AF6D8B5BC3613B ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\k\4000090a000000073701.dat"
sh=02097C0699DD499B5AFA94B797CCE9EB004434C0 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\l\4000090b000000073701.dat"
sh=23708D6804B12C321D4CC32F2A5958EB9FDE3411 ft=0 fh=0000000000000000 vn="Variante von MSIL/Injector.IFD Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\m\2000070c000000073701.dat"
sh=DEF16A055EA86A4DBBAC9A8039883275262398D1 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.A Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\m\4000090c000000073701.dat"
sh=13AB643534D05DB15C26577D3310D134A3233928 ft=0 fh=0000000000000000 vn="Variante von MSIL/Injector.IBM Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\n\2000070d000000073701.dat"
sh=48EDAFB041EAB1EF104492713AB6D8E96094BDD0 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.A Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\n\4000090d000000073701.dat"
sh=DC7B9E493C7EAB5AC8C84B653C565BEA631A1EC4 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.A Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\o\4000090e000000073701.dat"
sh=7442F86B550A40D70323E9F887CC5266ED3FA433 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.A Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\p\4000090f000000073701.dat"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\AppData\Local\Microsoft\Windows\INetCache\IE\1IKI76C9\logioptions_logitech[1].exe"
sh=6EA63D6E8E82BED8A8E47ADDCEA228E03846240C ft=0 fh=0000000000000000 vn="HTML/Refresh.BC Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TM8BD2KG\request[1].htm"
sh=9516BE8DF910FF582FE5B967C7C38BE2AD334C2B ft=1 fh=d3d62eb55e18ca8c vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\AppData\Local\Temp\DMR\dmr_72.exe"
sh=9516BE8DF910FF582FE5B967C7C38BE2AD334C2B ft=1 fh=d3d62eb55e18ca8c vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\AppData\Local\Temp\DMR\dmr_76.exe"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\AppData\Local\Temp\lu\nada_264_logioptions_logitech.exe"
sh=11AC44F373A3BE1DBFD932784A284ADA18461CFC ft=0 fh=0000000000000000 vn="HTML/ScrInject.B Trojaner" ac=I fn="C:\Users\Thorsten\Desktop\Neuer Ordner\Wiiu\games\Super_Mario_3D_World_EUR_WiiU-ABSTRAKT\Share-Online.biz.htm"
sh=050DD3DA5BE861FA17A2C4C3CDE8B60CDB77FACB ft=0 fh=0000000000000000 vn="HTML/ScrInject.B Trojaner" ac=I fn="C:\Users\Thorsten\Desktop\Neuer Ordner\Wiiu\games\Super_Mario_3D_World_EUR_WiiU-ABSTRAKT\Uploaded.htm"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\Downloads\Options_6.30.80 (1).exe"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\Downloads\Options_6.30.80.exe"
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=feaf1c9f5f7e9843bc8d5bcfe210587a
# end=init
# utc_time=2016-12-05 10:00:06
# local_time=2016-12-05 11:00:06 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 31635
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=feaf1c9f5f7e9843bc8d5bcfe210587a
# end=updated
# utc_time=2016-12-05 10:02:01
# local_time=2016-12-05 11:02:01 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=feaf1c9f5f7e9843bc8d5bcfe210587a
# engine=31635
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-12-05 11:16:29
# local_time=2016-12-06 12:16:29 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 0 12310405 0 0
# scanned=588458
# found=37
# cleaned=0
# scan_time=4467
sh=78D53E1560E2C815F597BB5D6B8ADE9CC58E7A6C ft=1 fh=4e3af72ed1709949 vn="Variante von Win64/WebBar.B evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\Logishrd\LogiOptions\Software\Current\dma_x64.dll"
sh=78D53E1560E2C815F597BB5D6B8ADE9CC58E7A6C ft=1 fh=4e3af72ed1709949 vn="Variante von Win64/WebBar.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\Logishrd\LogiOptions\Software\Current\dma_x64.dll"
sh=AC1FE70A83AE8A92A98AFC21D0004DFA6F829762 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.K Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\b\00000601000000073701.dat"
sh=D14CEDF453B7957273E5A6C1A61CCD0B31E2466C ft=0 fh=0000000000000000 vn="Variante von Win32/Kryptik.DHWI Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\c\20000702000000073701.dat"
sh=9027E23BFA2361937D6615E272BFBBEFB672DCF9 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.J Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\c\b0000702000000073701.dat"
sh=A4D6BD2132D8BE0AA3E7785D55AFEBE451CF68BD ft=0 fh=0000000000000000 vn="Variante von Win32/Injector.CQON Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\c\e0000502000000073701.dat"
sh=627FD5D763393596EC365CDCDFA7C457A7AABFBA ft=0 fh=0000000000000000 vn="Variante von Win32/Injector.CQON Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\d\e0000503000000073701.dat"
sh=F2C88FE7DA932106FC831CC5410D1389C8A5C434 ft=0 fh=0000000000000000 vn="Variante von Win32/Injector.UXF Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\f\40000905000000073701.dat"
sh=8219477394B6BE1B09E06314344FE3BB3645AD6B ft=0 fh=0000000000000000 vn="Win32/Trustezeb.B Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\h\40000907000000073701.dat"
sh=275A01050BA932988D516C1D1B2F517920E654BC ft=0 fh=0000000000000000 vn="Win32/Trustezeb.B Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\i\40000908000000073701.dat"
sh=FB682CCC821D9EF2D0B1F6DCD73A8BA1AEE82223 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.B Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\j\40000909000000073701.dat"
sh=D6F2AD9B9587DF4270899085ABF6731AF9901306 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.F Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\j\f0000709000000073701.dat"
sh=4EB6C3381F599D0DA6A2436DA6AF6D8B5BC3613B ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\k\4000090a000000073701.dat"
sh=02097C0699DD499B5AFA94B797CCE9EB004434C0 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\l\4000090b000000073701.dat"
sh=23708D6804B12C321D4CC32F2A5958EB9FDE3411 ft=0 fh=0000000000000000 vn="Variante von MSIL/Injector.IFD Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\m\2000070c000000073701.dat"
sh=DEF16A055EA86A4DBBAC9A8039883275262398D1 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.A Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\m\4000090c000000073701.dat"
sh=13AB643534D05DB15C26577D3310D134A3233928 ft=0 fh=0000000000000000 vn="Variante von MSIL/Injector.IBM Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\n\2000070d000000073701.dat"
sh=48EDAFB041EAB1EF104492713AB6D8E96094BDD0 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.A Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\n\4000090d000000073701.dat"
sh=DC7B9E493C7EAB5AC8C84B653C565BEA631A1EC4 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.A Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\o\4000090e000000073701.dat"
sh=7442F86B550A40D70323E9F887CC5266ED3FA433 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.A Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\p\4000090f000000073701.dat"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\AppData\Local\Microsoft\Windows\INetCache\IE\1IKI76C9\logioptions_logitech[1].exe"
sh=6EA63D6E8E82BED8A8E47ADDCEA228E03846240C ft=0 fh=0000000000000000 vn="HTML/Refresh.BC Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TM8BD2KG\request[1].htm"
sh=9516BE8DF910FF582FE5B967C7C38BE2AD334C2B ft=1 fh=d3d62eb55e18ca8c vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\AppData\Local\Temp\DMR\dmr_72.exe"
sh=9516BE8DF910FF582FE5B967C7C38BE2AD334C2B ft=1 fh=d3d62eb55e18ca8c vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\AppData\Local\Temp\DMR\dmr_76.exe"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\AppData\Local\Temp\lu\nada_264_logioptions_logitech.exe"
sh=11AC44F373A3BE1DBFD932784A284ADA18461CFC ft=0 fh=0000000000000000 vn="HTML/ScrInject.B Trojaner" ac=I fn="C:\Users\Thorsten\Desktop\Neuer Ordner\Wiiu\games\Super_Mario_3D_World_EUR_WiiU-ABSTRAKT\Share-Online.biz.htm"
sh=050DD3DA5BE861FA17A2C4C3CDE8B60CDB77FACB ft=0 fh=0000000000000000 vn="HTML/ScrInject.B Trojaner" ac=I fn="C:\Users\Thorsten\Desktop\Neuer Ordner\Wiiu\games\Super_Mario_3D_World_EUR_WiiU-ABSTRAKT\Uploaded.htm"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\Downloads\Options_6.30.80 (1).exe"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\Downloads\Options_6.30.80.exe"
sh=C3044944CB7C876CFAEE6FBAC7E596F91BE5401D ft=1 fh=89384885b6ce704f vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ttjh1\Downloads\NetSpeedMonitor 64 Bit - CHIP-Installer.exe"
sh=78D53E1560E2C815F597BB5D6B8ADE9CC58E7A6C ft=1 fh=4e3af72ed1709949 vn="Variante von Win64/WebBar.B evtl. unerwünschte Anwendung" ac=I fn="C:\Windows.old\Users\All Users\Logishrd\LogiOptions\Software\Current\dma_x64.dll"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Windows.old\Users\Thorsten\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00659b"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Windows.old\Users\Thorsten\AppData\Local\Microsoft\Windows\INetCache\IE\VZR6RD7Z\logioptions_logitech[1].exe"
sh=928A536FBFF196495B90E4BD51B932485B84A099 ft=1 fh=748b6a41a833329e vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows.old\Users\Thorsten\AppData\Local\Temp\DMR\dmr_72.exe"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Windows.old\Users\Thorsten\AppData\Local\Temp\lu\nada_264_logioptions_logitech.exe"
sh=78D53E1560E2C815F597BB5D6B8ADE9CC58E7A6C ft=1 fh=4e3af72ed1709949 vn="Variante von Win64/WebBar.B evtl. unerwünschte Anwendung" ac=I fn="D:\Users\All Users\Logishrd\LogiOptions\Software\Current\dma_x64.dll"
sh=2CB28F975406C7E6CA2B0861E1BD6B3AC3E0DBD6 ft=1 fh=e150e21647711374 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="D:\Users\Thorsten\Downloads\HP USB Disk Storage Format Tool - CHIP-Installer.exe"
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=feaf1c9f5f7e9843bc8d5bcfe210587a
# end=init
# utc_time=2016-12-10 02:34:26
# local_time=2016-12-10 03:34:26 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 31687
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=feaf1c9f5f7e9843bc8d5bcfe210587a
# end=updated
# utc_time=2016-12-10 02:36:25
# local_time=2016-12-10 03:36:25 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=feaf1c9f5f7e9843bc8d5bcfe210587a
# engine=31687
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-12-10 10:29:49
# local_time=2016-12-10 11:29:49 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 49536 12696405 0 0
# scanned=1721358
# found=308
# cleaned=0
# scan_time=28404
sh=78D53E1560E2C815F597BB5D6B8ADE9CC58E7A6C ft=1 fh=4e3af72ed1709949 vn="Variante von Win64/WebBar.B evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\Logishrd\LogiOptions\Software\Current\dma_x64.dll"
sh=78D53E1560E2C815F597BB5D6B8ADE9CC58E7A6C ft=1 fh=4e3af72ed1709949 vn="Variante von Win64/WebBar.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\Logishrd\LogiOptions\Software\Current\dma_x64.dll"
sh=AC1FE70A83AE8A92A98AFC21D0004DFA6F829762 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.K Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\b\00000601000000073701.dat"
sh=D14CEDF453B7957273E5A6C1A61CCD0B31E2466C ft=0 fh=0000000000000000 vn="Variante von Win32/Kryptik.DHWI Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\c\20000702000000073701.dat"
sh=9027E23BFA2361937D6615E272BFBBEFB672DCF9 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.J Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\c\b0000702000000073701.dat"
sh=A4D6BD2132D8BE0AA3E7785D55AFEBE451CF68BD ft=0 fh=0000000000000000 vn="Variante von Win32/Injector.CQON Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\c\e0000502000000073701.dat"
sh=627FD5D763393596EC365CDCDFA7C457A7AABFBA ft=0 fh=0000000000000000 vn="Variante von Win32/Injector.CQON Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\d\e0000503000000073701.dat"
sh=F2C88FE7DA932106FC831CC5410D1389C8A5C434 ft=0 fh=0000000000000000 vn="Variante von Win32/Injector.UXF Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\f\40000905000000073701.dat"
sh=8219477394B6BE1B09E06314344FE3BB3645AD6B ft=0 fh=0000000000000000 vn="Win32/Trustezeb.B Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\h\40000907000000073701.dat"
sh=275A01050BA932988D516C1D1B2F517920E654BC ft=0 fh=0000000000000000 vn="Win32/Trustezeb.B Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\i\40000908000000073701.dat"
sh=FB682CCC821D9EF2D0B1F6DCD73A8BA1AEE82223 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.B Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\j\40000909000000073701.dat"
sh=D6F2AD9B9587DF4270899085ABF6731AF9901306 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.F Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\j\f0000709000000073701.dat"
sh=4EB6C3381F599D0DA6A2436DA6AF6D8B5BC3613B ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\k\4000090a000000073701.dat"
sh=02097C0699DD499B5AFA94B797CCE9EB004434C0 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\l\4000090b000000073701.dat"
sh=23708D6804B12C321D4CC32F2A5958EB9FDE3411 ft=0 fh=0000000000000000 vn="Variante von MSIL/Injector.IFD Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\m\2000070c000000073701.dat"
sh=DEF16A055EA86A4DBBAC9A8039883275262398D1 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.A Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\m\4000090c000000073701.dat"
sh=13AB643534D05DB15C26577D3310D134A3233928 ft=0 fh=0000000000000000 vn="Variante von MSIL/Injector.IBM Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\n\2000070d000000073701.dat"
sh=48EDAFB041EAB1EF104492713AB6D8E96094BDD0 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.A Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\n\4000090d000000073701.dat"
sh=DC7B9E493C7EAB5AC8C84B653C565BEA631A1EC4 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.A Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\o\4000090e000000073701.dat"
sh=7442F86B550A40D70323E9F887CC5266ED3FA433 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.A Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Comms\Unistore\data\7\p\4000090f000000073701.dat"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\AppData\Local\Microsoft\Windows\INetCache\IE\1IKI76C9\logioptions_logitech[1].exe"
sh=6EA63D6E8E82BED8A8E47ADDCEA228E03846240C ft=0 fh=0000000000000000 vn="HTML/Refresh.BC Trojaner" ac=I fn="C:\Users\Thorsten\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TM8BD2KG\request[1].htm"
sh=9516BE8DF910FF582FE5B967C7C38BE2AD334C2B ft=1 fh=d3d62eb55e18ca8c vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\AppData\Local\Temp\DMR\dmr_72.exe"
sh=9516BE8DF910FF582FE5B967C7C38BE2AD334C2B ft=1 fh=d3d62eb55e18ca8c vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\AppData\Local\Temp\DMR\dmr_76.exe"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\AppData\Local\Temp\lu\nada_264_logioptions_logitech.exe"
sh=11AC44F373A3BE1DBFD932784A284ADA18461CFC ft=0 fh=0000000000000000 vn="HTML/ScrInject.B Trojaner" ac=I fn="C:\Users\Thorsten\Desktop\Neuer Ordner\Wiiu\games\Super_Mario_3D_World_EUR_WiiU-ABSTRAKT\Share-Online.biz.htm"
sh=050DD3DA5BE861FA17A2C4C3CDE8B60CDB77FACB ft=0 fh=0000000000000000 vn="HTML/ScrInject.B Trojaner" ac=I fn="C:\Users\Thorsten\Desktop\Neuer Ordner\Wiiu\games\Super_Mario_3D_World_EUR_WiiU-ABSTRAKT\Uploaded.htm"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\Downloads\Options_6.30.80 (1).exe"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Thorsten\Downloads\Options_6.30.80.exe"
sh=C3044944CB7C876CFAEE6FBAC7E596F91BE5401D ft=1 fh=89384885b6ce704f vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ttjh1\Downloads\NetSpeedMonitor 64 Bit - CHIP-Installer.exe"
sh=78D53E1560E2C815F597BB5D6B8ADE9CC58E7A6C ft=1 fh=4e3af72ed1709949 vn="Variante von Win64/WebBar.B evtl. unerwünschte Anwendung" ac=I fn="C:\Windows.old\Users\All Users\Logishrd\LogiOptions\Software\Current\dma_x64.dll"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Windows.old\Users\Thorsten\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00659b"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Windows.old\Users\Thorsten\AppData\Local\Microsoft\Windows\INetCache\IE\VZR6RD7Z\logioptions_logitech[1].exe"
sh=928A536FBFF196495B90E4BD51B932485B84A099 ft=1 fh=748b6a41a833329e vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows.old\Users\Thorsten\AppData\Local\Temp\DMR\dmr_72.exe"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="C:\Windows.old\Users\Thorsten\AppData\Local\Temp\lu\nada_264_logioptions_logitech.exe"
sh=78D53E1560E2C815F597BB5D6B8ADE9CC58E7A6C ft=1 fh=4e3af72ed1709949 vn="Variante von Win64/WebBar.B evtl. unerwünschte Anwendung" ac=I fn="D:\Users\All Users\Logishrd\LogiOptions\Software\Current\dma_x64.dll"
sh=2CB28F975406C7E6CA2B0861E1BD6B3AC3E0DBD6 ft=1 fh=e150e21647711374 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="D:\Users\Thorsten\Downloads\HP USB Disk Storage Format Tool - CHIP-Installer.exe"
sh=78D53E1560E2C815F597BB5D6B8ADE9CC58E7A6C ft=1 fh=4e3af72ed1709949 vn="Variante von Win64/WebBar.B evtl. unerwünschte Anwendung" ac=I fn="D:\Windows.old\Users\All Users\Logishrd\LogiOptions\Software\Current\dma_x64.dll"
sh=78D53E1560E2C815F597BB5D6B8ADE9CC58E7A6C ft=1 fh=4e3af72ed1709949 vn="Variante von Win64/WebBar.B evtl. unerwünschte Anwendung" ac=I fn="F:\Documents and Settings\All Users\Logishrd\LogiOptions\Software\Current\dma_x64.dll"
sh=AC1FE70A83AE8A92A98AFC21D0004DFA6F829762 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.K Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\b\00000601000000073701.dat"
sh=D14CEDF453B7957273E5A6C1A61CCD0B31E2466C ft=0 fh=0000000000000000 vn="Variante von Win32/Kryptik.DHWI Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\c\20000702000000073701.dat"
sh=9027E23BFA2361937D6615E272BFBBEFB672DCF9 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.J Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\c\b0000702000000073701.dat"
sh=A4D6BD2132D8BE0AA3E7785D55AFEBE451CF68BD ft=0 fh=0000000000000000 vn="Variante von Win32/Injector.CQON Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\c\e0000502000000073701.dat"
sh=627FD5D763393596EC365CDCDFA7C457A7AABFBA ft=0 fh=0000000000000000 vn="Variante von Win32/Injector.CQON Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\d\e0000503000000073701.dat"
sh=F2C88FE7DA932106FC831CC5410D1389C8A5C434 ft=0 fh=0000000000000000 vn="Variante von Win32/Injector.UXF Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\f\40000905000000073701.dat"
sh=8219477394B6BE1B09E06314344FE3BB3645AD6B ft=0 fh=0000000000000000 vn="Win32/Trustezeb.B Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\h\40000907000000073701.dat"
sh=275A01050BA932988D516C1D1B2F517920E654BC ft=0 fh=0000000000000000 vn="Win32/Trustezeb.B Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\i\40000908000000073701.dat"
sh=FB682CCC821D9EF2D0B1F6DCD73A8BA1AEE82223 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.B Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\j\40000909000000073701.dat"
sh=D6F2AD9B9587DF4270899085ABF6731AF9901306 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.F Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\j\f0000709000000073701.dat"
sh=4EB6C3381F599D0DA6A2436DA6AF6D8B5BC3613B ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\k\4000090a000000073701.dat"
sh=02097C0699DD499B5AFA94B797CCE9EB004434C0 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\l\4000090b000000073701.dat"
sh=23708D6804B12C321D4CC32F2A5958EB9FDE3411 ft=0 fh=0000000000000000 vn="Variante von MSIL/Injector.IFD Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\m\2000070c000000073701.dat"
sh=DEF16A055EA86A4DBBAC9A8039883275262398D1 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.A Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\m\4000090c000000073701.dat"
sh=13AB643534D05DB15C26577D3310D134A3233928 ft=0 fh=0000000000000000 vn="Variante von MSIL/Injector.IBM Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\n\2000070d000000073701.dat"
sh=48EDAFB041EAB1EF104492713AB6D8E96094BDD0 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.A Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\n\4000090d000000073701.dat"
sh=DC7B9E493C7EAB5AC8C84B653C565BEA631A1EC4 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.A Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\o\4000090e000000073701.dat"
sh=7442F86B550A40D70323E9F887CC5266ED3FA433 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.A Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Comms\Unistore\data\7\p\4000090f000000073701.dat"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Microsoft\Windows\INetCache\IE\1IKI76C9\logioptions_logitech[1].exe"
sh=6EA63D6E8E82BED8A8E47ADDCEA228E03846240C ft=0 fh=0000000000000000 vn="HTML/Refresh.BC Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\TM8BD2KG\request[1].htm"
sh=9516BE8DF910FF582FE5B967C7C38BE2AD334C2B ft=1 fh=d3d62eb55e18ca8c vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Temp\DMR\dmr_72.exe"
sh=9516BE8DF910FF582FE5B967C7C38BE2AD334C2B ft=1 fh=d3d62eb55e18ca8c vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Temp\DMR\dmr_76.exe"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="F:\Documents and Settings\Thorsten\AppData\Local\Temp\lu\nada_264_logioptions_logitech.exe"
sh=11AC44F373A3BE1DBFD932784A284ADA18461CFC ft=0 fh=0000000000000000 vn="HTML/ScrInject.B Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\Desktop\Neuer Ordner\Wiiu\games\Super_Mario_3D_World_EUR_WiiU-ABSTRAKT\Share-Online.biz.htm"
sh=050DD3DA5BE861FA17A2C4C3CDE8B60CDB77FACB ft=0 fh=0000000000000000 vn="HTML/ScrInject.B Trojaner" ac=I fn="F:\Documents and Settings\Thorsten\Desktop\Neuer Ordner\Wiiu\games\Super_Mario_3D_World_EUR_WiiU-ABSTRAKT\Uploaded.htm"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="F:\Documents and Settings\Thorsten\Downloads\Options_6.30.80 (1).exe"
sh=F8BE0890A1B99B9A2C993CDC60AF046908927486 ft=1 fh=31e4305cd3f1d2c4 vn="Variante von Win32/WebBar.D evtl. unerwünschte Anwendung" ac=I fn="F:\Documents and Settings\Thorsten\Downloads\Options_6.30.80.exe"
sh=C3044944CB7C876CFAEE6FBAC7E596F91BE5401D ft=1 fh=89384885b6ce704f vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="F:\Documents and Settings\ttjh1\Downloads\NetSpeedMonitor 64 Bit - CHIP-Installer.exe"
sh=37FDB0E58E70BEABAFBAC4C50E6CBAA59B89EEE5 ft=0 fh=0000000000000000 vn="Variante von Win32/Adware.BrowSecX.AR Anwendung" ac=I fn="F:\HOME-PC\Backup Set 2015-10-11 200835\Backup Files 2015-10-11 200835\Backup files 8.zip"
sh=78D53E1560E2C815F597BB5D6B8ADE9CC58E7A6C ft=1 fh=4e3af72ed1709949 vn="Variante von Win64/WebBar.B evtl. unerwünschte Anwendung" ac=I fn="F:\Users\All Users\Logishrd\LogiOptions\Software\Current\dma_x64.dll"
sh=DD569E70A6786216BFEB2E06442F644D3CED4929 ft=1 fh=9cf58ecb99ccae65 vn="Win32/Toolbar.Babylon evtl. unerwünschte Anwendung" ac=I fn="F:\Users\Thorsten\AppData\Local\Temp\is1070216317\MyBabylonTB.exe"
sh=86714522B37ED784615FC105793F0EDA2EE9D76B ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="F:\Users\Thorsten\AppData\Roaming\OpenCandy\OpenCandy_0181FAC22AA54A5D97FBE1D8AA98F393\LinkuryInstaller.msi"
sh=63EDCEFCB99BE2DB7D0734B7FDBDE7D88A236F01 ft=1 fh=94b3273b155dd2fb vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="F:\Users\Thorsten\AppData\Roaming\OpenCandy\OpenCandy_0181FAC22AA54A5D97FBE1D8AA98F393\LinkuryInstaller_p1v5.exe"
sh=2162094F11A8982D46AE975538C89A7A56EBFB30 ft=1 fh=b4afbcb73b25d784 vn="Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung" ac=I fn="G:\$Recycle.Bin\S-1-5-21-841948778-772456818-3102405132-1001\$R09HRF2.exe"
sh=D6C6175B942737CBEF0A1042095AB68516B0F97F ft=1 fh=c20ed2af470aa448 vn="Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung" ac=I fn="G:\$Recycle.Bin\S-1-5-21-841948778-772456818-3102405132-1001\$R1K4JDO.exe"
sh=D6C6175B942737CBEF0A1042095AB68516B0F97F ft=1 fh=c20ed2af470aa448 vn="Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung" ac=I fn="G:\$Recycle.Bin\S-1-5-21-841948778-772456818-3102405132-1001\$R27UN9B.exe"
sh=8FFC5FA3BDC425E0DA87D834E0093ACBCC26075B ft=1 fh=99c632bbf10bb611 vn="Win32/Packed.ScrambleWrapper.C evtl. unerwünschte Anwendung" ac=I fn="G:\$Recycle.Bin\S-1-5-21-841948778-772456818-3102405132-1001\$RCK5YYL.exe"
sh=9B82EB02B7726EB99B3539A64B8FAACB72222082 ft=1 fh=e6c8db4ef0dbf8d7 vn="Win32/DomaIQ.H evtl. unerwünschte Anwendung" ac=I fn="G:\$Recycle.Bin\S-1-5-21-841948778-772456818-3102405132-1001\$RLW6BJZ.exe"
sh=88B690970B4EC771E872B540F73098F0DFD930E4 ft=1 fh=ba89339f900475c7 vn="Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung" ac=I fn="G:\$Recycle.Bin\S-1-5-21-841948778-772456818-3102405132-1001\$RVOUJKL.exe"
sh=9B82EB02B7726EB99B3539A64B8FAACB72222082 ft=1 fh=e6c8db4ef0dbf8d7 vn="Win32/DomaIQ.H evtl. unerwünschte Anwendung" ac=I fn="G:\$Recycle.Bin\S-1-5-21-841948778-772456818-3102405132-1001\$RXWAU53.exe"
sh=535083D61D58BC4975012BC060A7D06DC6012DDE ft=1 fh=0d7c9d1074a9eb70 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="G:\Program Files\ConduitEngine\ConduitEngine.dll"
sh=4CBEA1ADF328E3DAF17DE451C4DEDB9FF17DEA43 ft=1 fh=0527b0215a5e6faa vn="Variante von Win32/Toolbar.Conduit.AR evtl. unerwünschte Anwendung" ac=I fn="G:\Program Files\ConduitEngine\ConduitEngineUninstall.exe"
sh=9E65377522C06482B376E8C17BE5822B357C5BB5 ft=1 fh=a057379578883b80 vn="Variante von Win32/HackTool.Crack.DM Trojaner" ac=I fn="G:\Program Files\DAEMON Tools Pro\DTCommonRes.dll"
sh=C8ED29CF039F3DAAB8E5BF160CA541D424F1631A ft=1 fh=b97a03e253ae60b9 vn="Variante von Win32/Adware.SpeedingUpMyPC.AL Anwendung" ac=I fn="G:\Program Files\Driver Pro\DPSchedule.exe"
sh=D4BD507F917917B829EB9FCE79A29047635E3668 ft=1 fh=6a4bd6f73db15183 vn="Win32/Adware.SpeedingUpMyPC.C Anwendung" ac=I fn="G:\Program Files\Driver Pro\DPSmartScan.exe"
sh=D277F5FC4485D569BF4887243B1C2EBF7CD4E5DB ft=1 fh=a462282cfbd78069 vn="Variante von Win32/Adware.SpeedingUpMyPC.AL Anwendung" ac=I fn="G:\Program Files\Driver Pro\DPUninstaller.exe"
sh=D12F9D4711BE592EA7C85EA5B34F3BFCDF86FB90 ft=1 fh=d4051548bbdf3ceb vn="Variante von Win32/Adware.SpeedingUpMyPC.AG Anwendung" ac=I fn="G:\Program Files\Driver Pro\DriverPro.exe"
sh=78D53E1560E2C815F597BB5D6B8ADE9CC58E7A6C ft=1 fh=4e3af72ed1709949 vn="Variante von Win64/WebBar.B evtl. unerwünschte Anwendung" ac=I fn="G:\Users\All Users\Logishrd\LogiOptions\Software\Current\dma_x64.dll"
sh=A6FD149D506F3EE6FFD460BECEDF628AACD3CAF1 ft=1 fh=c2e118c96fb78a0e vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\GoogleChromeRemotePlugin.dll"
sh=C8C8B305076C61FC91D073A54DE0EA50FC67619A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\50WHA9YC\ads_only_5_m[1].js"
sh=C7C186E54D042C9DCAACD170347F10C188AEC85D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\50WHA9YC\arcadi2_m[1].js"
sh=140BE41E58E7CB6E9B38B4ED892886CED78C2E58 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\50WHA9YC\corticas_m[1].js"
sh=1ACBDE6A28470C5787F8BA42ADA7279029BA4D32 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\50WHA9YC\cortica_m[1].js"
sh=DED4D5AC65600899CE571E960D7B9D20DBEFD9BB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\50WHA9YC\coupish_m[1].js"
sh=83CDCE21D2E22142F1D24D0C225529B9D8485EAB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\50WHA9YC\dealply_m[1].js"
sh=64E1E6B4EF399CFE19D4D144505F344FF97E8CCB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\50WHA9YC\intext_fa_m[1].js"
sh=FB769B3B65B545D39552BC5E5F106D62EC09B9E3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\50WHA9YC\monetizationLoader[1].js"
sh=D9E733FDF0D484D87633C4AC3784F0E9931C531B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\50WHA9YC\monetizationLoader[2].js"
sh=431AC6F8406F059B0E9126386C40A2EE543E5EC3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.M evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\50WHA9YC\resources_background[1].js"
sh=1F2641FFCA5C1DACAAA217BE7C9989F7AC05C1A1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\50WHA9YC\similar_web_m[1].js"
sh=5BD7B82662A263F1138F5E2A90138A8BFA5C4853 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\50WHA9YC\widdit_m[1].js"
sh=D466CE5076CDBA688A4C4FAFE614E0EAFCCF0086 ft=0 fh=0000000000000000 vn="Win32/bProtector.F evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8NFWNK03\pack[2].7z"
sh=35EE5BDB974F620F3924F9F405CA5E9E4D360706 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCXS9211\ads_only_5_m[1].js"
sh=089CC10FABD94FCFF67B2C2A2A0FE6437CC67E5C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.P evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCXS9211\appApiMessage[1].js"
sh=6B4372E517F582ED30D5A7FE077C6EB3592889AE ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCXS9211\coupish_m[1].js"
sh=5F4085D36D3743A164582B9628469218ECD72EBA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCXS9211\getdeal_m[1].js"
sh=4AD40410B772BA23B08FE8EADE8AC75B46FBF70B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCXS9211\intext_5_m[1].js"
sh=24C0EE2DBAD341EE7D515AA440918FB25C556288 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCXS9211\intext_adv_m[1].js"
sh=E008307C95AD4C1D040B009D307E13C03146B1BF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCXS9211\jollywallet_m[1].js"
sh=6E9E9DF1AB9D6241C43D6019BF1026B5F2460A8F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCXS9211\revizer_p_m[1].js"
sh=064998775930A5B4DEFAC1B64A38B7FBD90334F5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCXS9211\similar_web_m[1].js"
sh=9239C2FAB9BFCC2F3089888467DEFB4C784BB694 ft=1 fh=a0e417f6f875ee28 vn="Mehrere Bedrohungen" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCXS9211\SingAlong_1060-1052_v114[1]"
sh=4E7B680E849A1337D71405401B55648BA7072A22 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCXS9211\superfish_no_coupons_m[1].js"
sh=B000BD27F2700253BC968C68DF16B5F3F7C5282E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCXS9211\superfish_no_coupons_m[2].js"
sh=414BA1B7AEF9A844B50F88BC0548E60F296EF5F5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PORYTW29\corticas_ru_m[1].js"
sh=EE0C01CA81EBB2B46504012816E1B3EC0FE5F29C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PORYTW29\cortica_m[1].js"
sh=61E8A9701240F4FF703EB36F781BE14D0891449D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PORYTW29\coupons_intext_ads_5_m[1].js"
sh=B32E8B7B8D9079D02EA3F8F9B0B35048B12A3F07 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PORYTW29\icm_m[1].js"
sh=54C882ADC94298EEED33D4249151BE9EB810BBA3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PORYTW29\jollywallet_m[1].js"
sh=9516EE6BB795B5ADF1449C8AB2A69CBA58C56719 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PORYTW29\luck_m[1].js"
sh=CF138C16214F3451EE8CF965CB30532461AA0614 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PORYTW29\superfish_no_search_no_coupons_m[1].js"
sh=176D4038122B1FF7370825F721F36F73103C5873 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PORYTW29\superfish_pricora_m[1].js"
sh=D67303051C4C06CDA7B352169D649F4AEFF862B6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZD12F3MS\arcadi3_m[1].js"
sh=8BABE6BD92D6DA686154873CD5EB0B796C8FA42D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZD12F3MS\coupons_intext_ads_5_m[1].js"
sh=6D2F2235E6E222A4C85EEA5503BBA4FC94C3D81C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZD12F3MS\CrossriderUtils[1].js"
sh=4975A002E2B6A6FCFED7E6C03BBA5E61B5840B70 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZD12F3MS\dealply_m[1].js"
sh=A25A0BC1A2A0420B02091E83382150FEFF594239 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZD12F3MS\ibario_pops_m[1].js"
sh=1D0D0004624903CF66D059CC3EFB513926B2B8BC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZD12F3MS\icm_m[1].js"
sh=1AC368C818CCE85AA9B40A2F5D683BC9296242F3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZD12F3MS\intext_5_m[1].js"
sh=63362C65C083ABF77E174E7351F333927EB9A5C9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZD12F3MS\luck_m[1].js"
sh=AC76360969B4C1DEABBF392242705FF7A8BF5922 ft=0 fh=0000000000000000 vn="Win32/bProtector.F evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZD12F3MS\pack[1].7z"
sh=8FD569B99135D833A11DEF2C89FFF814D311A9EE ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZD12F3MS\revizer_ws_m[1].js"
sh=91A2DA51A06017D4FB10D2259CA572160B9B4CA9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZD12F3MS\superfish_m[1].js"
sh=69C3AF55C20BCCC3E20E0FD53946E475A79FC691 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZD12F3MS\superfish_m[2].js"
sh=4975A002E2B6A6FCFED7E6C03BBA5E61B5840B70 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Mozilla\Firefox\Profiles\iuim0fod.default\Cache\1\92\A5268d01"
sh=BF566FFA5F66FCFA0BFA14484C1EB43BC0FB08A2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Mozilla\Firefox\Profiles\iuim0fod.default\Cache\3\16\CFB4Cd01"
sh=E43B41E6D5F01A6321B98FBD6387227A08CBECF7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Mozilla\Firefox\Profiles\iuim0fod.default\Cache\4\39\9D74Bd01"
sh=6C39FBDF70AB21D5CD5F02897014D70A173C0771 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Mozilla\Firefox\Profiles\iuim0fod.default\Cache\6\58\18A64d01"
sh=E008307C95AD4C1D040B009D307E13C03146B1BF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Mozilla\Firefox\Profiles\iuim0fod.default\Cache\8\AA\ED51Bd01"
sh=54C882ADC94298EEED33D4249151BE9EB810BBA3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Mozilla\Firefox\Profiles\iuim0fod.default\Cache\A\B9\50C7Ed01"
sh=8990E276CAA3CF2ED2209CBF57913165E8E340AD ft=1 fh=938c9632c995d755 vn="Variante von MSIL/Toolbar.Linkury.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\BrowserHelper.exe"
sh=A2B585B74CE69BE4BD1E10E08A1F96B21A0B8CB6 ft=1 fh=4e6c174265a6a556 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Interop.SHDocVw.dll"
sh=070F0EF16B1870B20C482FA44EEBE8294F23A9A9 ft=1 fh=2eb7a04530ad975e vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\MACTrackBarLib.dll"
sh=21C6BD07C36AC3C681F93FFB573C30F2C606DC3F ft=1 fh=37a0abbf9b55f981 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\NDde.dll"
sh=B17BDD9A791CC884A0C340D74FC40D53C11A96C1 ft=1 fh=541488a5ad412f96 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Newtonsoft.Json.dll"
sh=8D305D5A743C4FA6193FC21FD3341698332FA128 ft=1 fh=067245ea1f058098 vn="Variante von Win32/Toolbar.Linkury.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\QuickShare.exe"
sh=B64AEE904CDE1749CE7EA1D917C0A1E5D48DA3BC ft=1 fh=514902572a97660f vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll"
sh=24F80D0093FBC348E1DD4DC668B778E647D4C976 ft=1 fh=8cb54be7ec2f0bdb vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll"
sh=F88A3C1636FF8B51AA1FAB5BF185A196562A6FCA ft=1 fh=f29543b6b4e93ad4 vn="Variante von Win32/Toolbar.Linkury.F evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll"
sh=729105B22149AAF88493E60F9F5A6792EFC80C78 ft=1 fh=d346a96f69bff003 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll"
sh=A80B229DF2FA04B6BC5C7D7A47F2755EA3843AF6 ft=1 fh=d52ed53f52f9438a vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll"
sh=84D1910DEC5C3FABFD1E1D44841259E7F5FE7A54 ft=1 fh=c44c8e31de4f5cf2 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll"
sh=FA906415E199EBEF0A19DA0986B5A893DD0B4959 ft=1 fh=32aea522a4a49f3b vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll"
sh=C68CAEED0189A8CC3ED0DD861033A113F0B7055F ft=1 fh=fe0e02f5d66bbd56 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.Base.dll"
sh=4D01F3A72C792D23C2AC483D8F616706CBA86E57 ft=1 fh=3e4b5be84ac3f79a vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ChromeLocalPlugin.dll"
sh=F27791C7915CC30B27ECA57AAF06D0E0D25BC09D ft=1 fh=84cdce3c65118ae1 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.DefaultBrowser.dll"
sh=A649D0044923FA0780913912485B812BBE464726 ft=1 fh=7b9159063eee9b42 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.FireFoxLocalPlugin.dll"
sh=5340D7875DFB8A55C23D3E9A5E52E2930388AC68 ft=1 fh=83dfdf4f25571383 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll"
sh=63A154FA3956A42D257DAA5F4A2FC3326AFA3CF4 ft=1 fh=a7b6901cd7f62787 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ShareManagerLocalPlugin.dll"
sh=37DEA2DE9DD5AC6EE15198160AA74835D5B64B4A ft=1 fh=2de7094191406f20 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll"
sh=BF92DD0CB2C6355E29756B94D4F1868C17047823 ft=1 fh=a6ab022afad9e54c vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessEntities.dll"
sh=662A11BE1087BB9F3F397294B5296F275F334A01 ft=1 fh=b4ca62093e1ba8f6 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll"
sh=3B9C0A0859685B6FC5BCA2A9074B693419E7452D ft=1 fh=b0a84723e8ab01f7 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll"
sh=2E24B96C6CCE9A64DEAF2985663FFC202F305E26 ft=1 fh=137bf65d41a7b0e1 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Personalization.Settings.PersonalizationSettingsManager.dll"
sh=82777106EA45BB35964B2D96F1CC162F82B2D4F7 ft=1 fh=317270a10cb1140f vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Personalization.Settings.PublisherSettingsManager.dll"
sh=3539EE5A4F2DFF2B2BB7B44D8BA2530B26CC07A6 ft=1 fh=f2889898a5483011 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Personalization.Settings.UserSettingsManager.dll"
sh=33CBECF595EC2352AA6ADF45210C2A811092A29F ft=1 fh=cd5bff7f28956953 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll"
sh=63368DE3C80EA6661DCC540F3E71B6F774AC56F6 ft=1 fh=2f9bb30bb76cc95f vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.BrowserHelperUtils.dll"
sh=0A62394F6C8912C5461507153F7084E8D1AA26C2 ft=1 fh=6d993863a49d2b20 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.GeneralUtilities.dll"
sh=F9DB06B27441D96BEABDB9DB548EEA683442A753 ft=1 fh=4508ccec1153f725 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll"
sh=5492FE0DA2E9F29F8008916C5D83B727930B4A53 ft=1 fh=802a037d81e6c97c vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll"
sh=F6A20C5EB7369E2878E23540A94D7BD6ACD6D437 ft=1 fh=2403be0b577fc584 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.NetSeer.dll"
sh=3B4FC42A542441B5727F10B4910EF1CDE4FACD53 ft=1 fh=0354afc6c5a6c2d5 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll"
sh=443BCB73249D73F6650D7D89416CD70F44FCEEBE ft=1 fh=1880b86997065064 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.ProductsRemovalLibary.dll"
sh=28ED102EB58DA8F22E7D73D3040E46E8B1D45EF1 ft=1 fh=62ae878b03043e2f vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.ProductUninstaller.dll"
sh=DADC791B713F8F9F2D51421C80533E0CD59BAB94 ft=1 fh=f4cac559f4370f47 vn="Variante von MSIL/Toolbar.Linkury.C evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.SetBrowsersSettings.dll"
sh=24BA4E2BBD5136FFECFED26323FE8A72F7F2738F ft=1 fh=39224725b94bb06e vn="Variante von MSIL/Toolbar.Linkury.AS evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.SetBrowsersSettingsAutoUpdater.dll"
sh=EB1782B2723D8EE10249597059C3C3B36D6201AC ft=1 fh=c3052f775fd58929 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.ShortcutsLibrary.dll"
sh=74686000C2D33B8AC91E835A1BD4FB69FE2923A3 ft=1 fh=b49770d7bfa93155 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll"
sh=8F8C37FF51527ACA1DB9A1680CB0281B89F0FFED ft=1 fh=ec30a536e181f5ec vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll"
sh=3BD0FB8092AEF7E95531C37432DC224055624676 ft=1 fh=6501640a08136ae6 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.XmlSerializers.dll"
sh=CBF9AF7E8DED8C1B4314E263137D72583E662BFD ft=1 fh=8794e8c87b304c6a vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.Translations.dll"
sh=B79F217C622C0B5B6DAA19B3C74D2F087A1CFD3A ft=1 fh=a7b9390926b62c50 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.UninstallScreen.dll"
sh=F9389F48421E4A22F80A3BFC646050D4570D2FA1 ft=1 fh=7f35a7f5e0568bba vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.UrlHistorySupplier.dll"
sh=CC8B6A07E8F48C236194745F3C1212AB10B8A0FC ft=1 fh=16dfeb9c8f4444db vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll"
sh=8F2E7716BE9E1C71D5215CE4BE5EC926483C7AD8 ft=1 fh=77c79c9f87e268d9 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\SmartbarInternetExplorerBHO.dll"
sh=8F2E7716BE9E1C71D5215CE4BE5EC926483C7AD8 ft=1 fh=77c79c9f87e268d9 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\SmartbarInternetExplorerBHO2.dll"
sh=866D243BC86FE5FC60209F450E20EC9B095F9030 ft=1 fh=992f160aaecfc783 vn="Variante von MSIL/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension.dll"
sh=866D243BC86FE5FC60209F450E20EC9B095F9030 ft=1 fh=992f160aaecfc783 vn="Variante von MSIL/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension2.dll"
sh=4E1859C68B485319F073A43575C1FF619AA1E82E ft=1 fh=ae77c318e1a23889 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe"
sh=A6FD149D506F3EE6FFD460BECEDF628AACD3CAF1 ft=1 fh=c2e118c96fb78a0e vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\GoogleChromeRemotePlugin.dll"
sh=22F6244F7101C7606598B297999FD61CF74DE280 ft=1 fh=6fa47544827ee62a vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\ar\Smartbar.Resources.LanguageSettings.resources.dll"
sh=E8A59ACD6A0C80D97C8ADF0DA29C75ADD6E415DD ft=1 fh=e4761d541f40a67f vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll"
sh=0FCFEC24FD73D4F15567BD261E70673B485986FC ft=1 fh=17fac77928ecd0af vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\es\Smartbar.Resources.LanguageSettings.resources.dll"
sh=EF4529F6D6ED96A1615BE1F2BA541BACA5844190 ft=1 fh=dab3c819e78cf271 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\fr\Smartbar.Resources.LanguageSettings.resources.dll"
sh=52EC8EA3384AFADB66589E275EB894B4924CB652 ft=1 fh=fc2f9713cd4001d7 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\he\Smartbar.Resources.LanguageSettings.resources.dll"
sh=C7E054C7BA58AE2D703DB29C52346A3ED84FEF57 ft=1 fh=53532950b9749a4f vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_20.dll"
sh=C546BA3CA78F93EB65DCCEA191BC40B9F940E2EA ft=1 fh=6fd80785d353cf5d vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_21.dll"
sh=7C15DA5A80F24F0383C992CFB03CF68E95A464B1 ft=1 fh=be427aaf403ae2ff vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_22.dll"
sh=95544372D9D68E8AFAE5E9DA8B07C14CE5406ABB ft=1 fh=dd489ec711c15129 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_23.dll"
sh=BA8871127FB23B24A8963B6A5992DED58259E590 ft=1 fh=65df87dcc97c6ea8 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_24.dll"
sh=400E3ACE4D1F8D697919AA7B1F941E8CDD2FC735 ft=1 fh=02362f902529ea69 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\it\Smartbar.Resources.LanguageSettings.resources.dll"
sh=59093E1D20DC233C5116B3C03DF1367A088B1536 ft=1 fh=eadc1f3a0144d9ec vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\nl\Smartbar.Resources.LanguageSettings.resources.dll"
sh=A24E0308386680857DE0CF2FA0EB1BC60B93E303 ft=1 fh=54e672e8b7a42c53 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\pt\Smartbar.Resources.LanguageSettings.resources.dll"
sh=AB2D4EF9EC062B299201D91662B199F821E5A850 ft=1 fh=b457e29583ba1fa6 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\ru\Smartbar.Resources.LanguageSettings.resources.dll"
sh=BCDC173F925130FFD31E9BF0D11377076FCAB3DF ft=1 fh=d2bc47b1b9271ad1 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Application\tr\Smartbar.Resources.LanguageSettings.resources.dll"
sh=C454D15B75DADFDA42FC58C76D2FF72212A9A213 ft=1 fh=53b864a121d00884 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.DMP.dll"
sh=DAB495D4C36C18A1547F938BB95DE9AE37B6B737 ft=1 fh=8e57c39575e4e045 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.MessengerPlugin.dll"
sh=238D68911D5B3614CC0D6D2A8E7AE76AE515B811 ft=1 fh=c7731cdd54332ea7 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.NotepadPlugin.dll"
sh=76B151721539533DD63E01CB2F175ADB5DAE9409 ft=1 fh=142af487ae64d514 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.ScreenCapturePlugin.dll"
sh=391A8B6792FEDD4D711BA3A117ED039BFBAD8D6F ft=1 fh=bcc98d01cbefe114 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.UninstallProductsPlugin.dll"
sh=95DBF48C3F1B9F0175A7BBB3578E1CB2F8C57ADB ft=1 fh=f0f560a5a66a039a vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.WeatherPlugin.dll"
sh=7BCC2AD191C8751897858F205B9CBA2FAC4BA519 ft=1 fh=a6ff2d0b145de3f5 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.WordPlugin.dll"
sh=4368ED4EFE437D5D313A3EB7794D9CC3114FA8C4 ft=1 fh=18e2fb87f85d379c vn="Win32/FileScout.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\2877.tmp"
sh=38BF08580CDB18595ED765EFDE3B2167FE909A0F ft=1 fh=51f85deb90e36917 vn="MSIL/MyPCBackup.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\BackupSetup.exe"
sh=EE002E71BC8A354FCCA40BBA75D56B87F1211AAE ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\che50FF.tmp"
sh=A982B10271B66D4153E5C4CBDF76796877E343FA ft=1 fh=16aeb78f4f898e6e vn="Variante von Win32/Toolbar.Babylon.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\MixiDJToolbar.exe"
sh=1574A9C7440D9941D68F4C0E6ACCDE68063B5934 ft=1 fh=e3349bd8bc1a76dd vn="Mehrere Bedrohungen" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\SingAlong.exe"
sh=1BDF326D4F61733D0A2597D99BB902E41065ED75 ft=1 fh=ec9bdfc727260747 vn="Variante von MSIL/Toolbar.Linkury.P evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\SmartbarExeInstaller.exe"
sh=9239C2FAB9BFCC2F3089888467DEFB4C784BB694 ft=1 fh=a0e417f6f875ee28 vn="Mehrere Bedrohungen" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\sngalng.exe"
sh=58495F0458EDDC16D9A14A6E84CEE9C61AAE5E52 ft=1 fh=85d80dff1da9eafb vn="Variante von Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\0E9E2FBA-BAB0-7891-AB7A-7036ED40CB4F\BabMaint.exe"
sh=56371D74005B39D794FF8F30891F27BACECA56C8 ft=1 fh=c3e79ff37423ee01 vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\0E9E2FBA-BAB0-7891-AB7A-7036ED40CB4F\BUSolution.dll"
sh=B63A526551150E80C479E6F076E82DD5A7FB7FBE ft=1 fh=407239d3df8cef81 vn="Win32/Toolbar.Babylon.U evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\0E9E2FBA-BAB0-7891-AB7A-7036ED40CB4F\CrxInstaller.dll"
sh=C179EC7FD95F96DE417DF6954395F005930420A5 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\0E9E2FBA-BAB0-7891-AB7A-7036ED40CB4F\delta1.crx"
sh=7759A3318DE2ABC3755EBB7F50322C6D586B5286 ft=1 fh=e3d39714b3bfb2a0 vn="Win32/Toolbar.Babylon.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\0E9E2FBA-BAB0-7891-AB7A-7036ED40CB4F\IEHelper.dll"
sh=C93CCF890C1E509C8FCE0001F591EE542810BE4B ft=1 fh=1ba84391c3067840 vn="Win32/Toolbar.Montiera.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\0E9E2FBA-BAB0-7891-AB7A-7036ED40CB4F\MyBabylonTB.exe"
sh=935F58155F74B051F9123B6022B7D358B52B146F ft=1 fh=4132c7bb6eed2e50 vn="Variante von Win32/Toolbar.Babylon.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\0E9E2FBA-BAB0-7891-AB7A-7036ED40CB4F\Setup.exe"
sh=58495F0458EDDC16D9A14A6E84CEE9C61AAE5E52 ft=1 fh=85d80dff1da9eafb vn="Variante von Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\3D780657-BAB0-7891-B4AE-EEEEDF4146C8\Latest\BabMaint.exe"
sh=DED201AE02FB9EA3646489AFEDA49270C4620D9C ft=1 fh=c71c001196f8c3ac vn="Variante von Win32/Toolbar.Babylon.C evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\3D780657-BAB0-7891-B4AE-EEEEDF4146C8\Latest\BExternal.dll"
sh=56371D74005B39D794FF8F30891F27BACECA56C8 ft=1 fh=c3e79ff37423ee01 vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\3D780657-BAB0-7891-B4AE-EEEEDF4146C8\Latest\BUSolution.dll"
sh=B63A526551150E80C479E6F076E82DD5A7FB7FBE ft=1 fh=407239d3df8cef81 vn="Win32/Toolbar.Babylon.U evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\3D780657-BAB0-7891-B4AE-EEEEDF4146C8\Latest\CrxInstaller.dll"
sh=7759A3318DE2ABC3755EBB7F50322C6D586B5286 ft=1 fh=e3d39714b3bfb2a0 vn="Win32/Toolbar.Babylon.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\3D780657-BAB0-7891-B4AE-EEEEDF4146C8\Latest\IEHelper.dll"
sh=9862A05F8F25964656DCAA7C6D032E4D0F7BA500 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\3D780657-BAB0-7891-B4AE-EEEEDF4146C8\Latest\mixiDj.crx"
sh=D5BC3F514C1E1FD608FA02E4432CA31EA715D7BF ft=1 fh=020cfad13de95356 vn="Win32/Toolbar.Montiera.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\3D780657-BAB0-7891-B4AE-EEEEDF4146C8\Latest\MyBabylonTB.exe"
sh=68C0DA61CCDF2D030CA8F7571FCA8885ABB32AE4 ft=1 fh=48d59b359e56918a vn="Variante von Win32/Toolbar.Babylon.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\3D780657-BAB0-7891-B4AE-EEEEDF4146C8\Latest\Setup.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\bus2A1\CrxUpdater_d.exe"
sh=FB619AC99F7351E7D0CA693213CFED92AD652136 ft=1 fh=d78e03289ad1e84e vn="Variante von Win32/Toolbar.Babylon.AE evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\bus2BE0\BUSolution.dll"
sh=A5B2C42049A8340306CD976682585AAC803F3A89 ft=1 fh=6d4efb7db87b3c41 vn="Variante von Win32/Toolbar.Babylon.AE evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\bus425D\fntupdtr.exe"
sh=671E3E4E9E4C9A039D9AD1479A0C91E670AF18E3 ft=1 fh=d643e79c9fb8f862 vn="Win32/Toolbar.Babylon.AE evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\bus58EA\BUSolution.dll"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\busA6B\CrxUpdater_d.exe"
sh=1BC7381ED81FE4BE5FF57D7C524FF9405D752E4B ft=1 fh=31dc6aae04e14a9e vn="Win32/DomaIQ.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\0lYgaw04EsPjIfy\DomaIQ.exe"
sh=EC7350DCAE40314EECE454075AAE2C31CC9D4870 ft=1 fh=d8c657e0508922ac vn="Win32/DomaIQ.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\0lYgaw04EsPjIfy\DomaIQ10.exe"
sh=CD32179FFE4FD298CFAB8ACA6A11FEC8568FDA56 ft=0 fh=0000000000000000 vn="Win32/DomaIQ.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\0lYgaw04EsPjIfy\exes.zip"
sh=9B82EB02B7726EB99B3539A64B8FAACB72222082 ft=1 fh=e6c8db4ef0dbf8d7 vn="Win32/DomaIQ.H evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\0lYgaw04EsPjIfy\installer.exe"
sh=372BA1ACD1E57D5F185713D83B15B280945E367A ft=1 fh=41beb9eb0f94c4e1 vn="Mehrere Bedrohungen" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\0lYgaw04EsPjIfy\software\Addlyrics.exe"
sh=CC41CADBBD6BA6ED0BFDD17798B4C9F94D7955E0 ft=1 fh=e26a6656a404b558 vn="Variante von Win32/Toolbar.Babylon.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\0lYgaw04EsPjIfy\software\Delta Babylon.exe"
sh=F43A66F5AC79276A3E27467D5DD100DDCFA61891 ft=1 fh=80399c2706f2ad8c vn="Variante von Win32/Hao123.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\0lYgaw04EsPjIfy\software\Format-Factory.exe"
sh=0CB314A079E7A0B23C5B4E7E7AAC7DD0E7E26550 ft=1 fh=2df14979b5d1142b vn="Variante von Win32/SpeedingUpMyPC.B Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\0lYgaw04EsPjIfy\software\OptimizerPro.exe"
sh=1BC7381ED81FE4BE5FF57D7C524FF9405D752E4B ft=1 fh=31dc6aae04e14a9e vn="Win32/DomaIQ.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\wqk2oQ5UwIgqAQI\DomaIQ.exe"
sh=EC7350DCAE40314EECE454075AAE2C31CC9D4870 ft=1 fh=d8c657e0508922ac vn="Win32/DomaIQ.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\wqk2oQ5UwIgqAQI\DomaIQ10.exe"
sh=CD32179FFE4FD298CFAB8ACA6A11FEC8568FDA56 ft=0 fh=0000000000000000 vn="Win32/DomaIQ.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\wqk2oQ5UwIgqAQI\exes.zip"
sh=9B82EB02B7726EB99B3539A64B8FAACB72222082 ft=1 fh=e6c8db4ef0dbf8d7 vn="Win32/DomaIQ.H evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\wqk2oQ5UwIgqAQI\installer.exe"
sh=1BC7381ED81FE4BE5FF57D7C524FF9405D752E4B ft=1 fh=31dc6aae04e14a9e vn="Win32/DomaIQ.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\Y7Zj39RkHOwktM6\DomaIQ.exe"
sh=EC7350DCAE40314EECE454075AAE2C31CC9D4870 ft=1 fh=d8c657e0508922ac vn="Win32/DomaIQ.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\Y7Zj39RkHOwktM6\DomaIQ10.exe"
sh=CD32179FFE4FD298CFAB8ACA6A11FEC8568FDA56 ft=0 fh=0000000000000000 vn="Win32/DomaIQ.G evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\Y7Zj39RkHOwktM6\exes.zip"
sh=9B82EB02B7726EB99B3539A64B8FAACB72222082 ft=1 fh=e6c8db4ef0dbf8d7 vn="Win32/DomaIQ.H evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\Y7Zj39RkHOwktM6\installer.exe"
sh=4483993FD8FADA2D566306C3EDCBAEA9C005E227 ft=1 fh=fb7cd5db217c30e0 vn="Win32/Adware.SpeedingUpMyPC Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\Y7Zj39RkHOwktM6\software\Driverpro.exe"
sh=86BC15F28BC0F35693868A4B3EA924D2081D036B ft=1 fh=d6a2a71c4c4546b9 vn="Variante von Win32/Hao123.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\Y7Zj39RkHOwktM6\software\Format-Factory"
sh=25592B49FFB4E3E9647DAE84B6E5C4AB780CDFF7 ft=1 fh=2ebeeb4379b1c9b2 vn="Win32/DownWare.N evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\Y7Zj39RkHOwktM6\software\Mixi Dj Yahoo.exe"
sh=E0D659617CDE986DFCD04E9BB42E250CEB6D34EF ft=1 fh=d971949cada49ada vn="Win32/DownWare.N evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\DM\Y7Zj39RkHOwktM6\software\QuickShare1.exe"
sh=6511B37C7ACE73216D35C2AA7AF2034E1780EB56 ft=1 fh=c71c0011fd19b3c0 vn="Variante von Win32/Toolbar.Babylon.C evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\F8C7B83F-BAB0-7891-A2AC-3B07A4531600\BExternal.dll"
sh=F2FB5115B7D03E90F6E9D4B1F6E882385AA00F5F ft=1 fh=f2472f77ed228eaa vn="Variante von Win32/Toolbar.Babylon.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\F8C7B83F-BAB0-7891-A2AC-3B07A4531600\IEHelper.dll"
sh=CAE38F7984A73FA129EB5FD190410A68C81350C2 ft=1 fh=b629c1bd568509dc vn="Variante von Win32/Toolbar.Babylon.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\F8C7B83F-BAB0-7891-A2AC-3B07A4531600\Setup.exe"
sh=DED201AE02FB9EA3646489AFEDA49270C4620D9C ft=1 fh=c71c001196f8c3ac vn="Variante von Win32/Toolbar.Babylon.C evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\F8C7B83F-BAB0-7891-A2AC-3B07A4531600\Latest\BExternal.dll"
sh=7759A3318DE2ABC3755EBB7F50322C6D586B5286 ft=1 fh=e3d39714b3bfb2a0 vn="Win32/Toolbar.Babylon.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\F8C7B83F-BAB0-7891-A2AC-3B07A4531600\Latest\IEHelper.dll"
sh=C93CCF890C1E509C8FCE0001F591EE542810BE4B ft=1 fh=1ba84391c3067840 vn="Win32/Toolbar.Montiera.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\F8C7B83F-BAB0-7891-A2AC-3B07A4531600\Latest\MyBabylonTB.exe"
sh=0DFF286CC197580AD8BC374E1E7B57A321A0DF30 ft=1 fh=b5e362bb150f743a vn="Variante von Win32/Toolbar.Babylon.E evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\F8C7B83F-BAB0-7891-A2AC-3B07A4531600\Latest\Setup.exe"
sh=014A531D3CC8C338B54050E33F8169D8ACAD204C ft=1 fh=35b367b6db82c840 vn="Variante von Win32/Toolbar.Babylon.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\ibtmpc810632\component_612.decrpt"
sh=222CC84EBEC4C34BB2046AB3B875843F44175265 ft=1 fh=cef1ab5f7c8c5502 vn="Win32/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\ibtmpc810632\component_625"
sh=10865E388F36174297EC4ECDAFD6265B331BFDCD ft=1 fh=c71442a0f17f9a09 vn="Win32/Toolbar.Montiera.B evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\nseC301.tmp\mt.dll"
sh=10865E388F36174297EC4ECDAFD6265B331BFDCD ft=1 fh=c71442a0f17f9a09 vn="Win32/Toolbar.Montiera.B evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\nsz2378.tmp\mt.dll"
sh=8598A291DAC2BE7B8EEE469D40D3307999BA2D12 ft=0 fh=0000000000000000 vn="Variante von MSIL/Toolbar.Linkury.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\Smartbar\LinkuryInstaller.msi"
sh=1E9E261D85783EEDEC0B3E8CB7BDCD6BDC4CCC82 ft=0 fh=0000000000000000 vn="Variante von MSIL/Toolbar.Linkury.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\Smartbar\26bd7386-e546-41bb-ba63-886152ebd2d3\LinkuryInstaller.msi"
sh=31D020E4B21930C9DAB92C13741F8B26E69FA79E ft=0 fh=0000000000000000 vn="Variante von MSIL/Toolbar.Linkury.A evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\Smartbar\934faaad-8ac9-423b-8166-8e363f9345cd\LinkuryInstaller.msi"
sh=E0814D0F17EE1122F6D3507DC676030F8E1CC133 ft=1 fh=0e0f46db8e6ee8c4 vn="Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\upd2348\BabMaint.x"
sh=7664F6A327E5201011200E703489577A0971AB77 ft=1 fh=c71c0011451c6a93 vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Local\Temp\upd2348\BUSolution.x"
sh=C179EC7FD95F96DE417DF6954395F005930420A5 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Roaming\BabSolution\CR\delta1.crx"
sh=E0814D0F17EE1122F6D3507DC676030F8E1CC133 ft=1 fh=0e0f46db8e6ee8c4 vn="Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Roaming\BabSolution\Shared\BabMaint.exe"
sh=671E3E4E9E4C9A039D9AD1479A0C91E670AF18E3 ft=1 fh=d643e79c9fb8f862 vn="Win32/Toolbar.Babylon.AE evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Roaming\BabSolution\Shared\BUSolution.dll"
sh=C7E054C7BA58AE2D703DB29C52346A3ED84FEF57 ft=1 fh=53532950b9749a4f vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Roaming\Mozilla\Firefox\Profiles\iuim0fod.default\extensions\staged\{d0d57ce3-9ce0-4175-aa1d-2823b2807a50}\components\SmartbarFireFoxRemotePlugin_20.dll"
sh=C546BA3CA78F93EB65DCCEA191BC40B9F940E2EA ft=1 fh=6fd80785d353cf5d vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Roaming\Mozilla\Firefox\Profiles\iuim0fod.default\extensions\staged\{d0d57ce3-9ce0-4175-aa1d-2823b2807a50}\components\SmartbarFireFoxRemotePlugin_21.dll"
sh=7C15DA5A80F24F0383C992CFB03CF68E95A464B1 ft=1 fh=be427aaf403ae2ff vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Roaming\Mozilla\Firefox\Profiles\iuim0fod.default\extensions\staged\{d0d57ce3-9ce0-4175-aa1d-2823b2807a50}\components\SmartbarFireFoxRemotePlugin_22.dll"
sh=95544372D9D68E8AFAE5E9DA8B07C14CE5406ABB ft=1 fh=dd489ec711c15129 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Roaming\Mozilla\Firefox\Profiles\iuim0fod.default\extensions\staged\{d0d57ce3-9ce0-4175-aa1d-2823b2807a50}\components\SmartbarFireFoxRemotePlugin_23.dll"
sh=BA8871127FB23B24A8963B6A5992DED58259E590 ft=1 fh=65df87dcc97c6ea8 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Roaming\Mozilla\Firefox\Profiles\iuim0fod.default\extensions\staged\{d0d57ce3-9ce0-4175-aa1d-2823b2807a50}\components\SmartbarFireFoxRemotePlugin_24.dll"
sh=C7E054C7BA58AE2D703DB29C52346A3ED84FEF57 ft=1 fh=53532950b9749a4f vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Roaming\Mozilla\Firefox\Profiles\iuim0fod.default\extensions\{d0d57ce3-9ce0-4175-aa1d-2823b2807a50}\components\SmartbarFireFoxRemotePlugin_20.dll"
sh=C546BA3CA78F93EB65DCCEA191BC40B9F940E2EA ft=1 fh=6fd80785d353cf5d vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Roaming\Mozilla\Firefox\Profiles\iuim0fod.default\extensions\{d0d57ce3-9ce0-4175-aa1d-2823b2807a50}\components\SmartbarFireFoxRemotePlugin_21.dll"
sh=7C15DA5A80F24F0383C992CFB03CF68E95A464B1 ft=1 fh=be427aaf403ae2ff vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Roaming\Mozilla\Firefox\Profiles\iuim0fod.default\extensions\{d0d57ce3-9ce0-4175-aa1d-2823b2807a50}\components\SmartbarFireFoxRemotePlugin_22.dll"
sh=95544372D9D68E8AFAE5E9DA8B07C14CE5406ABB ft=1 fh=dd489ec711c15129 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Roaming\Mozilla\Firefox\Profiles\iuim0fod.default\extensions\{d0d57ce3-9ce0-4175-aa1d-2823b2807a50}\components\SmartbarFireFoxRemotePlugin_23.dll"
sh=BA8871127FB23B24A8963B6A5992DED58259E590 ft=1 fh=65df87dcc97c6ea8 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\AppData\Roaming\Mozilla\Firefox\Profiles\iuim0fod.default\extensions\{d0d57ce3-9ce0-4175-aa1d-2823b2807a50}\components\SmartbarFireFoxRemotePlugin_24.dll"
sh=45CB09F6D53416D32A5DB89E06038DCE8734CC8F ft=1 fh=b1634e7f08f95eeb vn="Win32/Toolbar.Conduit.S evtl. unerwünschte Anwendung" ac=I fn="G:\Users\Jaqueline\Downloads\video_downloader.exe"
sh=F947AA34205F4C7C9202197D2FFE9D21E5938708 ft=1 fh=e3f519acea9fec13 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="G:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll"
sh=31D020E4B21930C9DAB92C13741F8B26E69FA79E ft=0 fh=0000000000000000 vn="Variante von MSIL/Toolbar.Linkury.A evtl. unerwünschte Anwendung" ac=I fn="G:\Windows\Installer\5916a.msi"
sh=E380C75C9904013FB23E09EB8B819B8B4998FD6A ft=1 fh=8a21180e008fd756 vn="Mehrere Bedrohungen" ac=I fn="G:\Windows\Temp\Optimizer_Pro.exe"
sh=4745B13310B631E7FEB471C61B9D8AB6957361E4 ft=1 fh=ab7c80c0896dc8a9 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="H:\Downloads\Dark_Theme - CHIP-Installer (1).exe"
sh=18EFA4C5D3735D55D09545B9EE384318D7FD8110 ft=1 fh=3d8373cf06f87863 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="H:\Downloads\Dark_Theme - CHIP-Installer (2).exe"
sh=E84CB57A26F61F6FB8775217DC1BF6F581D3861F ft=1 fh=b4b4f9ae6d60d828 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="H:\Downloads\Dark_Theme - CHIP-Installer.exe"
sh=AAB839ADE030E3A8C9B7390D7312F7E6BE747CDE ft=1 fh=a59fb2a1c2dd8d19 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="H:\Downloads\MediaPortal - CHIP-Installer.exe"
sh=9D99CB7E5815E3CCC57C13E683BAB40E36AA01D8 ft=1 fh=f9d10bbe128bbd43 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="H:\Downloads\micro SIM Schablone PDF Vorlage - CHIP-Installer.exe"
sh=A83F6778B2ADD25FDCC07E88281CD8E51626125F ft=1 fh=b8478270aad51b6a vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="H:\Downloads\Nano SIM Schablone PDF Vorlage - CHIP-Installer.exe"
sh=721A21BED12C81369FC15DFDD15735579179A346 ft=1 fh=b6805804fb0b6121 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="H:\Downloads\VLC media player 64 Bit - CHIP-Installer.exe"
sh=F12564CB8B3F002984DC99D16BC5A0CD7F09ADEC ft=0 fh=0000000000000000 vn="BAT/Qhost.NOV Trojaner" ac=I fn="H:\Downloads\Adobe Creative Cloud Collection 2015\Adobe Creative Cloud Collection 2015\Adobe Creative Cloud Collection 2015\Aktivierung für alle Versionen\XFORCE Cloud 2015\Adobe Block.cmd"
sh=741DB16CB93F22FC73D7564A67210DE82923C0D6 ft=0 fh=0000000000000000 vn="Variante von Win32/Packed.Themida verdächtige Datei" ac=I fn="H:\Downloads\DAEMON Tools Pro Advanced v6.1.0.0483\DAEMON Tools Pro Advanced v6.1.0.0483.rar"
sh=60F3B729AFFF0BD2E449D7BC67E6047E722480E2 ft=1 fh=2d7bef2a04f77cfd vn="Variante von Win32/Packed.Themida verdächtige Datei" ac=I fn="H:\Downloads\DAEMON Tools Pro Advanced v6.1.0.0483\DAEMON Tools Pro Advanced v6.1.0.0483\Activator_DTP\activator.exe"
sh=F12564CB8B3F002984DC99D16BC5A0CD7F09ADEC ft=0 fh=0000000000000000 vn="BAT/Qhost.NOV Trojaner" ac=I fn="H:\FileHistory\totti\HOME-PC\Data\$OF\979\981 (2015_10_14 22_35_17 UTC).cmd"
sh=2A2B0D1BDF59D203AEDCCF60E0ED1EDF12EFE52F ft=1 fh=b58b6ff5e352b598 vn="Win32/SmartFileAdvisor.B evtl. unerwünschte Anwendung" ac=I fn="H:\Neuer Ordner (2)\Neuer Ordner\Transcend\Alcohol 120% 2.0.2 Build 5830 Retail\Alcohol120_retail_2.0.2.5830.exe"
sh=052529D1B57123707DE6304CA2A2E8832E80A1F1 ft=1 fh=487ceb503c81f5f9 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="H:\Neuer Ordner (2)\Program Files (x86)\Conduit\Community Alerts\Alert.dll"
sh=2217E1961154CF4B0C3B3214571B5786CCBC9684 ft=1 fh=dce4548ffcc95958 vn="Win32/Toolbar.MyWebSearch.M evtl. unerwünschte Anwendung" ac=I fn="H:\Neuer Ordner (2)\Program Files (x86)\FunWebProducts\Installr\1.bin\F3EZSETP.DLL"
sh=BB975EE11563FEB8F5AE1EA682E97A00D689F4E9 ft=1 fh=e477418542ff9b15 vn="Win32/Toolbar.MyWebSearch evtl. unerwünschte Anwendung" ac=I fn="H:\Neuer Ordner (2)\Program Files (x86)\FunWebProducts\Installr\1.bin\F3PLUGIN.DLL"
sh=7545E5D53E00AA6872BF879DEC70FC81ABF60595 ft=1 fh=c086fa962fcc649c vn="Win32/Toolbar.MyWebSearch evtl. unerwünschte Anwendung" ac=I fn="H:\Neuer Ordner (2)\Program Files (x86)\FunWebProducts\Installr\1.bin\NPFUNWEB.DLL"

deeprybka 10.12.2016 18:01
Liste der Anhänge anzeigen (Anzahl: 1)
Schritt 1

http://filepony.de/icon/frst.pnghttp://deeprybka.trojaner-board.de/b...st/frstfix.png

Speichere die angehängte fixlist.txt bitte in das Verzeichnis ab, in dem sich auch die FRST-Anwendung befindet. (Download-Ordner)
  • Starte FRST und drücke auf den Entfernen-Button.
  • Das Tool erstellt eine "Fixlog.txt" -Datei.
  • Poste mir bitte deren Inhalt.


Alle Zeitangaben in WEZ +1. Es ist jetzt 01:30 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131