Trojaner-Board - adwCleaner meldet 7 Bedrohungen

Ok, ich hab schon bei adwCleaner auf "Entfernen" geklickt, weil erst keine Antwort kam, aber hier für den Fall, dass noch was übrig bleibt, meine Ergebnisse:
FRsT.txt:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 17-12-2016

durchgeführt von Lukas (Administrator) auf LAPTOP-3Q09D8VC (17-12-2016 13:00:42)

Gestartet von C:\Users\Lukas\Downloads

Geladene Profile: Lukas (Verfügbare Profile: Lukas)

Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe

() C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe

(Windows (R) Win 7 DDK provider) C:\Windows\System32\AdminService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe

(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe

() C:\Windows\SysWOW64\PnkBstrB.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

() C:\Windows\System32\igfxTray.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe

() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe

(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

() C:\OEM\Preload\FubTracking\FubTracking.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\Install\{766862E4-0F44-48FC-A103-4B57406BC787}\DropboxClient_16.4.29.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client_16.4.29\Dropbox.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040792 2015-07-07] (Realtek Semiconductor)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-06-15] (NVIDIA Corporation)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-09-23] (Apple Inc.)

HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-10-05] (Microsoft Corporation)

HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [25778760 2016-12-12] (Dropbox, Inc.)

HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [975248 2015-09-23] (Cisco Systems, Inc.)

HKU\S-1-5-21-141774289-2908194920-1088501678-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2860832 2016-10-13] (Valve Corporation)

HKU\S-1-5-21-141774289-2908194920-1088501678-1001\...\Run: [Spotify Web Helper] => C:\Users\Lukas\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1554032 2016-07-21] (Spotify Ltd)

HKU\S-1-5-21-141774289-2908194920-1088501678-1001\...\Run: [Spotify] => C:\Users\Lukas\AppData\Roaming\Spotify\Spotify.exe [6913648 2016-07-21] (Spotify Ltd)

HKU\S-1-5-21-141774289-2908194920-1088501678-1001\...\Run: [HP Officejet 4630 series (NET)] => C:\Program Files\HP\HP Officejet 4630 series\Bin\ScanToPCActivationApp.exe [3487240 2014-07-21] (Hewlett-Packard Development Company, LP)

HKU\S-1-5-21-141774289-2908194920-1088501678-1001\...\MountPoints2: {d5357db0-727d-11e6-9bf0-2c600cf7ec7b} - "E:\HiSuiteDownLoader.exe" 

ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-12-12] (Dropbox, Inc.)

Startup: C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Telegram.lnk [2016-09-20]

ShortcutTarget: Telegram.lnk -> C:\Users\Lukas\AppData\Roaming\Telegram Desktop\Telegram.exe (Telegram Messenger LLP)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.188.1

Tcpip\..\Interfaces\{afd0be91-850e-46dd-91d5-79e818f0d798}: [DhcpNameServer] 192.168.188.1

Tcpip\..\Interfaces\{c702f46a-d0a4-4ee2-8e4c-6f575e6fdc4d}: [DhcpNameServer] 192.168.188.1
 

Internet Explorer:

==================

HKU\S-1-5-21-141774289-2908194920-1088501678-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer15.msn.com/?pc=ACTE

HKU\S-1-5-21-141774289-2908194920-1088501678-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer15.msn.com/?pc=ACTE

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-09-07] (Oracle Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-07] (Oracle Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
 

FireFox:

========

FF DefaultProfile: awm2ghh6.default

FF ProfilePath: C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\awm2ghh6.default [2016-12-17]

FF Extension: (YouTube Plus) - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\awm2ghh6.default\Extensions\particle@particlecore.github.io.xpi [2016-12-14]

FF Extension: (uBlock Origin) - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\awm2ghh6.default\Extensions\uBlock0@raymondhill.net.xpi [2016-11-30]

FF Extension: (LeechBlock) - C:\Users\Lukas\AppData\Roaming\Mozilla\Firefox\Profiles\awm2ghh6.default\Extensions\{a95d8332-e4b4-6e7f-98ac-20b733364387} [2016-11-01]

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-09-06] ()

FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)

FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-07] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-07] (Oracle Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-09-06] ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()

FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)

FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Keine Datei]

FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Keine Datei]

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
 

Chrome: 

=======

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-09-02] (Apple Inc.)

R2 AtherosSvc; C:\WINDOWS\system32\AdminService.exe [355760 2016-07-19] (Windows (R) Win 7 DDK provider)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1415176 2016-09-17] ()

S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-05-08] (Dropbox, Inc.)

S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-05-08] (Dropbox, Inc.)

R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [42096 2016-12-05] (Dropbox, Inc.)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368 2016-06-15] (NVIDIA Corporation)

R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [351120 2015-08-06] (Intel Corporation)

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)

S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Datei ist nicht signiert]

R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Datei ist nicht signiert]

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [223008 2015-06-24] (Intel Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-06-15] (NVIDIA Corporation)

R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-06-15] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-06-15] (NVIDIA Corporation)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2141192 2016-09-24] (Electronic Arts)

R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2206224 2016-09-24] (Electronic Arts)

R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [66872 2016-09-06] ()

R2 PnkBstrB; C:\WINDOWS\SysWOW64\PnkBstrB.exe [107832 2016-09-06] ()

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [21344 2015-09-04] (Acer Incorporated)

R3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [38216 2016-04-06] (SoftEther Corporation)

S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()

R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvacwu.inf_amd64_9934c34dc6ca0c4b\nvlddmkm.sys [13754936 2016-09-12] (NVIDIA Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-06-15] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)

S3 Qcamain; C:\WINDOWS\System32\drivers\Qcamainx64.sys [2276352 2015-07-10] (Qualcomm Atheros, Inc.) [Datei ist nicht signiert]

R3 Qcamain10x64; C:\WINDOWS\System32\drivers\Qcamain10x64.sys [2336768 2016-07-16] (Qualcomm Atheros, Inc.)

S3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [14688 2015-09-04] (Acer Incorporated)

R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [886528 2015-05-29] (Realtek                                            )

R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [402136 2015-05-27] (Realsil Semiconductor Corporation)

R1 SeLow; C:\WINDOWS\system32\DRIVERS\SeLow_x64.sys [51024 2016-04-06] (SoftEther Corporation)

R2 Sentinel64; C:\WINDOWS\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc.)

R3 SynRMIHID; C:\WINDOWS\system32\DRIVERS\SynRMIHID.sys [47784 2015-07-29] (Synaptics Incorporated)

S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [52592 2015-09-23] (Cisco Systems, Inc.)

S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)

R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

S3 dbx; system32\DRIVERS\dbx.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-12-17 13:00 - 2016-12-17 13:04 - 00019246 _____ C:\Users\Lukas\Downloads\FRST.txt

2016-12-17 13:00 - 2016-12-17 13:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox

2016-12-17 13:00 - 2016-12-17 13:00 - 00000000 ____D C:\FRST

2016-12-17 12:59 - 2016-12-17 12:59 - 02420224 _____ (Farbar) C:\Users\Lukas\Downloads\FRST64.exe

2016-12-14 13:33 - 2016-12-14 15:44 - 00000000 ____D C:\AdwCleaner

2016-12-14 13:32 - 2016-12-14 13:33 - 03968464 _____ C:\Users\Lukas\Downloads\AdwCleaner_6.040.exe

2016-12-14 12:42 - 2016-12-09 11:18 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2016-12-14 12:42 - 2016-12-09 11:15 - 08168000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2016-12-14 12:42 - 2016-12-09 11:14 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll

2016-12-14 12:42 - 2016-12-09 11:01 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll

2016-12-14 12:42 - 2016-12-09 10:57 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll

2016-12-14 12:42 - 2016-12-09 10:36 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2016-12-14 12:42 - 2016-12-09 10:36 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2016-12-14 12:42 - 2016-12-09 10:33 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll

2016-12-14 12:42 - 2016-12-09 10:30 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll

2016-12-14 12:42 - 2016-12-09 10:28 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll

2016-12-14 12:41 - 2016-12-09 11:42 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2016-12-14 12:41 - 2016-12-09 11:42 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2016-12-14 12:41 - 2016-12-09 11:34 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2016-12-14 12:41 - 2016-12-09 11:34 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2016-12-14 12:41 - 2016-12-09 11:33 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2016-12-14 12:41 - 2016-12-09 11:33 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2016-12-14 12:41 - 2016-12-09 11:32 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2016-12-14 12:41 - 2016-12-09 11:29 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll

2016-12-14 12:41 - 2016-12-09 11:28 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll

2016-12-14 12:41 - 2016-12-09 11:19 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll

2016-12-14 12:41 - 2016-12-09 11:18 - 02913144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2016-12-14 12:41 - 2016-12-09 11:18 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2016-12-14 12:41 - 2016-12-09 11:18 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi

2016-12-14 12:41 - 2016-12-09 11:18 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe

2016-12-14 12:41 - 2016-12-09 11:15 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll

2016-12-14 12:41 - 2016-12-09 11:14 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll

2016-12-14 12:41 - 2016-12-09 11:10 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll

2016-12-14 12:41 - 2016-12-09 11:10 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2016-12-14 12:41 - 2016-12-09 11:09 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe

2016-12-14 12:41 - 2016-12-09 11:01 - 01503544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll

2016-12-14 12:41 - 2016-12-09 10:59 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2016-12-14 12:41 - 2016-12-09 10:57 - 06668040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2016-12-14 12:41 - 2016-12-09 10:52 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2016-12-14 12:41 - 2016-12-09 10:52 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll

2016-12-14 12:41 - 2016-12-09 10:51 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll

2016-12-14 12:41 - 2016-12-09 10:45 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2016-12-14 12:41 - 2016-12-09 10:45 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll

2016-12-14 12:41 - 2016-12-09 10:41 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll

2016-12-14 12:41 - 2016-12-09 10:40 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys

2016-12-14 12:41 - 2016-12-09 10:38 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll

2016-12-14 12:41 - 2016-12-09 10:37 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll

2016-12-14 12:41 - 2016-12-09 10:37 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll

2016-12-14 12:41 - 2016-12-09 10:36 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll

2016-12-14 12:41 - 2016-12-09 10:36 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll

2016-12-14 12:41 - 2016-12-09 10:33 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll

2016-12-14 12:41 - 2016-12-09 10:31 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll

2016-12-14 12:41 - 2016-12-09 10:31 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2016-12-14 12:41 - 2016-12-09 10:29 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2016-12-14 12:41 - 2016-12-09 10:27 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2016-12-14 12:41 - 2016-12-09 10:27 - 05114368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll

2016-12-14 12:41 - 2016-12-09 10:27 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll

2016-12-14 12:41 - 2016-12-09 10:26 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2016-12-14 12:41 - 2016-12-09 10:24 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2016-12-14 12:41 - 2016-12-09 10:23 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2016-12-14 12:41 - 2016-12-09 10:22 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll

2016-12-14 12:41 - 2016-12-09 10:22 - 02688512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll

2016-12-14 12:41 - 2016-12-09 10:21 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2016-12-14 12:41 - 2016-12-09 10:21 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll

2016-12-14 12:41 - 2016-12-09 10:20 - 03198464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll

2016-12-14 12:41 - 2016-12-09 10:19 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll

2016-12-14 12:41 - 2016-12-09 10:19 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll

2016-12-14 12:41 - 2016-12-09 10:19 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll

2016-12-14 12:41 - 2016-12-09 10:19 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll

2016-12-14 12:41 - 2016-12-09 10:19 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll

2016-12-14 12:41 - 2016-12-09 10:18 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll

2016-12-14 12:41 - 2016-12-09 10:16 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2016-12-14 12:41 - 2016-12-09 10:16 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll

2016-12-14 12:41 - 2016-12-09 10:15 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll

2016-12-14 12:41 - 2016-12-09 10:15 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll

2016-12-14 12:41 - 2016-12-09 10:15 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll

2016-12-14 12:40 - 2016-12-09 11:30 - 00377184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys

2016-12-14 12:40 - 2016-12-09 11:27 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll

2016-12-14 12:40 - 2016-12-09 11:20 - 02677544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll

2016-12-14 12:40 - 2016-12-09 11:20 - 02189664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2016-12-14 12:40 - 2016-12-09 11:20 - 01738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll

2016-12-14 12:40 - 2016-12-09 11:20 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2016-12-14 12:40 - 2016-12-09 11:20 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2016-12-14 12:40 - 2016-12-09 11:19 - 00168424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll

2016-12-14 12:40 - 2016-12-09 11:18 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll

2016-12-14 12:40 - 2016-12-09 11:18 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2016-12-14 12:40 - 2016-12-09 11:11 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2016-12-14 12:40 - 2016-12-09 11:01 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll

2016-12-14 12:40 - 2016-12-09 11:00 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll

2016-12-14 12:40 - 2016-12-09 10:59 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll

2016-12-14 12:40 - 2016-12-09 10:56 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll

2016-12-14 12:40 - 2016-12-09 10:47 - 22563328 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2016-12-14 12:40 - 2016-12-09 10:42 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll

2016-12-14 12:40 - 2016-12-09 10:41 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll

2016-12-14 12:40 - 2016-12-09 10:37 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll

2016-12-14 12:40 - 2016-12-09 10:36 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll

2016-12-14 12:40 - 2016-12-09 10:34 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll

2016-12-14 12:40 - 2016-12-09 10:34 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll

2016-12-14 12:40 - 2016-12-09 10:32 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2016-12-14 12:40 - 2016-12-09 10:31 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll

2016-12-14 12:40 - 2016-12-09 10:30 - 23677952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2016-12-14 12:40 - 2016-12-09 10:30 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2016-12-14 12:40 - 2016-12-09 10:28 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2016-12-14 12:40 - 2016-12-09 10:27 - 19417088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2016-12-14 12:40 - 2016-12-09 10:26 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2016-12-14 12:40 - 2016-12-09 10:25 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll

2016-12-14 12:40 - 2016-12-09 10:22 - 01490944 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2016-12-14 12:40 - 2016-12-09 10:21 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2016-12-14 12:40 - 2016-12-09 10:21 - 01512960 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2016-12-14 12:40 - 2016-12-09 10:20 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2016-12-14 12:40 - 2016-12-09 10:20 - 00730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll

2016-12-14 12:40 - 2016-12-09 10:20 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll

2016-12-14 12:40 - 2016-12-09 10:20 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe

2016-12-14 12:40 - 2016-12-09 10:18 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2016-12-14 12:40 - 2016-12-09 10:18 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll

2016-12-14 12:40 - 2016-12-09 10:17 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll

2016-12-14 12:40 - 2016-12-09 10:17 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll

2016-12-14 12:40 - 2016-12-09 10:16 - 01880576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll

2016-12-14 12:40 - 2016-12-09 09:54 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll

2016-12-14 12:29 - 2016-12-14 12:29 - 00000222 _____ C:\Users\Lukas\Desktop\Hearts of Iron IV.url

2016-12-13 15:39 - 2016-11-11 11:22 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll

2016-12-13 15:39 - 2016-11-11 11:14 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll

2016-12-13 15:39 - 2016-11-11 11:13 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2016-12-13 15:39 - 2016-11-11 11:13 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys

2016-12-13 15:39 - 2016-11-11 11:12 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys

2016-12-13 15:39 - 2016-11-11 11:03 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2016-12-13 15:39 - 2016-11-11 11:03 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll

2016-12-13 15:39 - 2016-11-11 11:01 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll

2016-12-13 15:39 - 2016-11-11 10:57 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2016-12-13 15:39 - 2016-11-11 10:56 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2016-12-13 15:39 - 2016-11-11 10:56 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll

2016-12-13 15:39 - 2016-11-11 10:56 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll

2016-12-13 15:39 - 2016-11-11 10:56 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll

2016-12-13 15:39 - 2016-11-11 10:29 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll

2016-12-13 15:39 - 2016-11-11 10:26 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll

2016-12-13 15:39 - 2016-11-11 10:26 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll

2016-12-13 15:39 - 2016-11-11 10:25 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe

2016-12-13 15:39 - 2016-11-11 10:25 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll

2016-12-13 15:39 - 2016-11-11 10:24 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll

2016-12-13 15:39 - 2016-11-11 10:24 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2016-12-13 15:39 - 2016-11-11 10:23 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll

2016-12-13 15:39 - 2016-11-11 10:22 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe

2016-12-13 15:39 - 2016-11-11 10:22 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe

2016-12-13 15:39 - 2016-11-11 10:21 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll

2016-12-13 15:39 - 2016-11-11 10:21 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll

2016-12-13 15:39 - 2016-11-11 10:21 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll

2016-12-13 15:39 - 2016-11-11 10:20 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll

2016-12-13 15:39 - 2016-11-11 10:20 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll

2016-12-13 15:39 - 2016-11-11 10:20 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe

2016-12-13 15:39 - 2016-11-11 10:20 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll

2016-12-13 15:39 - 2016-11-11 10:19 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll

2016-12-13 15:39 - 2016-11-11 10:19 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll

2016-12-13 15:39 - 2016-11-11 10:19 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2016-12-13 15:39 - 2016-11-11 10:19 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll

2016-12-13 15:39 - 2016-11-11 10:18 - 17188352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2016-12-13 15:39 - 2016-11-11 10:18 - 00967168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2016-12-13 15:39 - 2016-11-11 10:14 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll

2016-12-13 15:39 - 2016-11-11 10:13 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll

2016-12-13 15:39 - 2016-11-11 10:11 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2016-12-13 15:39 - 2016-11-11 10:11 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2016-12-13 15:39 - 2016-11-11 10:08 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll

2016-12-13 15:39 - 2016-11-11 10:07 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll

2016-12-13 15:39 - 2016-11-11 10:06 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll

2016-12-13 15:39 - 2016-11-11 10:04 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll

2016-12-13 15:39 - 2016-11-11 10:04 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll

2016-12-13 15:39 - 2016-11-11 10:04 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll

2016-12-13 15:39 - 2016-11-11 10:03 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll

2016-12-13 15:39 - 2016-11-11 08:49 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll

2016-12-13 15:39 - 2016-11-11 08:48 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll

2016-12-13 15:39 - 2016-11-11 08:47 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll

2016-12-13 15:39 - 2016-11-11 08:42 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2016-12-13 15:39 - 2016-11-11 08:42 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll

2016-12-13 15:39 - 2016-11-11 08:42 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll

2016-12-13 15:39 - 2016-11-11 08:42 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll

2016-12-13 15:39 - 2016-11-11 08:41 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe

2016-12-13 15:39 - 2016-11-11 08:25 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll

2016-12-13 15:39 - 2016-11-11 08:25 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll

2016-12-13 15:39 - 2016-11-11 08:24 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll

2016-12-13 15:39 - 2016-11-11 08:23 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll

2016-12-13 15:39 - 2016-11-11 08:21 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll

2016-12-13 15:39 - 2016-11-11 08:19 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll

2016-12-13 15:39 - 2016-11-11 08:19 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll

2016-12-13 15:39 - 2016-11-11 08:19 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll

2016-12-13 15:39 - 2016-11-11 08:18 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll

2016-12-13 15:39 - 2016-11-11 08:17 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe

2016-12-13 15:39 - 2016-11-11 08:15 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll

2016-12-13 15:39 - 2016-11-11 08:15 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll

2016-12-13 15:39 - 2016-11-11 08:15 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll

2016-12-13 15:39 - 2016-11-11 08:10 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll

2016-12-13 15:39 - 2016-11-11 08:09 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll

2016-12-13 15:39 - 2016-11-11 08:09 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll

2016-12-13 15:39 - 2016-11-11 08:06 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll

2016-12-13 15:39 - 2016-11-11 08:06 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll

2016-12-13 15:39 - 2016-11-11 08:05 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll

2016-12-13 15:39 - 2016-11-11 08:05 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll

2016-12-13 15:39 - 2016-11-11 08:04 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll

2016-12-13 15:39 - 2016-11-11 08:04 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll

2016-12-13 15:39 - 2016-11-11 08:04 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll

2016-12-13 15:39 - 2016-11-11 08:04 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll

2016-12-13 15:39 - 2016-11-11 08:03 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll

2016-12-13 15:38 - 2016-11-11 11:15 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll

2016-12-13 15:38 - 2016-11-11 11:15 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll

2016-12-13 15:38 - 2016-11-11 11:14 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll

2016-12-13 15:38 - 2016-11-11 11:14 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll

2016-12-13 15:38 - 2016-11-11 11:13 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2016-12-13 15:38 - 2016-11-11 11:08 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll

2016-12-13 15:38 - 2016-11-11 11:03 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll

2016-12-13 15:38 - 2016-11-11 11:02 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll

2016-12-13 15:38 - 2016-11-11 11:02 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe

2016-12-13 15:38 - 2016-11-11 11:01 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2016-12-13 15:38 - 2016-11-11 11:01 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll

2016-12-13 15:38 - 2016-11-11 11:00 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys

2016-12-13 15:38 - 2016-11-11 11:00 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys

2016-12-13 15:38 - 2016-11-11 11:00 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys

2016-12-13 15:38 - 2016-11-11 10:59 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys

2016-12-13 15:38 - 2016-11-11 10:57 - 04130432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2016-12-13 15:38 - 2016-11-11 10:57 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll

2016-12-13 15:38 - 2016-11-11 10:56 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2016-12-13 15:38 - 2016-11-11 10:56 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll

2016-12-13 15:38 - 2016-11-11 10:56 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe

2016-12-13 15:38 - 2016-11-11 10:56 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll

2016-12-13 15:38 - 2016-11-11 10:55 - 01600624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2016-12-13 15:38 - 2016-11-11 10:55 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll

2016-12-13 15:38 - 2016-11-11 10:55 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll

2016-12-13 15:38 - 2016-11-11 10:54 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll

2016-12-13 15:38 - 2016-11-11 10:51 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe

2016-12-13 15:38 - 2016-11-11 10:31 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll

2016-12-13 15:38 - 2016-11-11 10:28 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe

2016-12-13 15:38 - 2016-11-11 10:28 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll

2016-12-13 15:38 - 2016-11-11 10:27 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe

2016-12-13 15:38 - 2016-11-11 10:27 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe

2016-12-13 15:38 - 2016-11-11 10:26 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys

2016-12-13 15:38 - 2016-11-11 10:26 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys

2016-12-13 15:38 - 2016-11-11 10:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe

2016-12-13 15:38 - 2016-11-11 10:25 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll

2016-12-13 15:38 - 2016-11-11 10:25 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll

2016-12-13 15:38 - 2016-11-11 10:25 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll

2016-12-13 15:38 - 2016-11-11 10:25 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll

2016-12-13 15:38 - 2016-11-11 10:25 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll

2016-12-13 15:38 - 2016-11-11 10:24 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll

2016-12-13 15:38 - 2016-11-11 10:24 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll

2016-12-13 15:38 - 2016-11-11 10:24 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll

2016-12-13 15:38 - 2016-11-11 10:24 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll

2016-12-13 15:38 - 2016-11-11 10:24 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll

2016-12-13 15:38 - 2016-11-11 10:24 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll

2016-12-13 15:38 - 2016-11-11 10:23 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll

2016-12-13 15:38 - 2016-11-11 10:23 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll

2016-12-13 15:38 - 2016-11-11 10:23 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll

2016-12-13 15:38 - 2016-11-11 10:22 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll

2016-12-13 15:38 - 2016-11-11 10:22 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll

2016-12-13 15:38 - 2016-11-11 10:21 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll

2016-12-13 15:38 - 2016-11-11 10:21 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll

2016-12-13 15:38 - 2016-11-11 10:21 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll

2016-12-13 15:38 - 2016-11-11 10:20 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll

2016-12-13 15:38 - 2016-11-11 10:20 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll

2016-12-13 15:38 - 2016-11-11 10:20 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll

2016-12-13 15:38 - 2016-11-11 10:20 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll

2016-12-13 15:38 - 2016-11-11 10:20 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll

2016-12-13 15:38 - 2016-11-11 10:20 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll

2016-12-13 15:38 - 2016-11-11 10:20 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe

2016-12-13 15:38 - 2016-11-11 10:20 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll

2016-12-13 15:38 - 2016-11-11 10:19 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2016-12-13 15:38 - 2016-11-11 10:19 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe

2016-12-13 15:38 - 2016-11-11 10:19 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll

2016-12-13 15:38 - 2016-11-11 10:19 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll

2016-12-13 15:38 - 2016-11-11 10:19 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll

2016-12-13 15:38 - 2016-11-11 10:19 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll

2016-12-13 15:38 - 2016-11-11 10:18 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll

2016-12-13 15:38 - 2016-11-11 10:18 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll

2016-12-13 15:38 - 2016-11-11 10:17 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl

2016-12-13 15:38 - 2016-11-11 10:17 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll

2016-12-13 15:38 - 2016-11-11 10:17 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll

2016-12-13 15:38 - 2016-11-11 10:16 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll

2016-12-13 15:38 - 2016-11-11 10:16 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll

2016-12-13 15:38 - 2016-11-11 10:16 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll

2016-12-13 15:38 - 2016-11-11 10:16 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll

2016-12-13 15:38 - 2016-11-11 10:16 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll

2016-12-13 15:38 - 2016-11-11 10:16 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll

2016-12-13 15:38 - 2016-11-11 10:15 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys

2016-12-13 15:38 - 2016-11-11 10:15 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll

2016-12-13 15:38 - 2016-11-11 10:15 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe

2016-12-13 15:38 - 2016-11-11 10:14 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll

2016-12-13 15:38 - 2016-11-11 10:14 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll

2016-12-13 15:38 - 2016-11-11 10:14 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys

2016-12-13 15:38 - 2016-11-11 10:14 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll

2016-12-13 15:38 - 2016-11-11 10:13 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll

2016-12-13 15:38 - 2016-11-11 10:13 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll

2016-12-13 15:38 - 2016-11-11 10:12 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll

2016-12-13 15:38 - 2016-11-11 10:11 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll

2016-12-13 15:38 - 2016-11-11 10:11 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll

2016-12-13 15:38 - 2016-11-11 10:09 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll

2016-12-13 15:38 - 2016-11-11 10:09 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll

2016-12-13 15:38 - 2016-11-11 10:07 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll

2016-12-13 15:38 - 2016-11-11 10:07 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll

2016-12-13 15:38 - 2016-11-11 10:07 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2016-12-13 15:38 - 2016-11-11 10:07 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll

2016-12-13 15:38 - 2016-11-11 10:07 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe

2016-12-13 15:38 - 2016-11-11 10:07 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll

2016-12-13 15:38 - 2016-11-11 10:07 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll

2016-12-13 15:38 - 2016-11-11 10:06 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll

2016-12-13 15:38 - 2016-11-11 10:06 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll

2016-12-13 15:38 - 2016-11-11 10:05 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll

2016-12-13 15:38 - 2016-11-11 10:05 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll

2016-12-13 15:38 - 2016-11-11 10:05 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2016-12-13 15:38 - 2016-11-11 10:05 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll

2016-12-13 15:38 - 2016-11-11 10:05 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2016-12-13 15:38 - 2016-11-11 10:04 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe

2016-12-13 15:38 - 2016-11-11 10:04 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll

2016-12-13 15:38 - 2016-11-11 10:04 - 02317312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2016-12-13 15:38 - 2016-11-11 10:04 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll

2016-12-13 15:38 - 2016-11-11 10:04 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll

2016-12-13 15:38 - 2016-11-11 10:04 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll

2016-12-13 15:38 - 2016-11-11 10:04 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll

2016-12-13 15:38 - 2016-11-11 10:04 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll

2016-12-13 15:38 - 2016-11-11 10:03 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll

2016-12-13 15:38 - 2016-11-11 10:03 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2016-12-13 15:38 - 2016-11-11 10:03 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2016-12-13 15:38 - 2016-11-11 10:03 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll

2016-12-13 15:38 - 2016-11-11 10:03 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll

2016-12-13 15:38 - 2016-11-11 10:03 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll

2016-12-13 15:38 - 2016-11-11 10:03 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2016-12-13 15:38 - 2016-11-11 10:03 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll

2016-12-13 15:38 - 2016-11-11 10:02 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll

2016-12-13 15:38 - 2016-11-11 10:02 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll

2016-12-13 15:38 - 2016-11-11 10:02 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll

2016-12-13 15:38 - 2016-11-11 09:39 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2016-12-13 15:38 - 2016-11-11 09:01 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll

2016-12-13 15:38 - 2016-11-11 09:01 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll

2016-12-13 15:38 - 2016-11-11 09:01 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll

2016-12-13 15:38 - 2016-11-11 09:00 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2016-12-13 15:38 - 2016-11-11 08:59 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2016-12-13 15:38 - 2016-11-11 08:54 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll

2016-12-13 15:38 - 2016-11-11 08:49 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll

2016-12-13 15:38 - 2016-11-11 08:49 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll

2016-12-13 15:38 - 2016-11-11 08:47 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2016-12-13 15:38 - 2016-11-11 08:47 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll

2016-12-13 15:38 - 2016-11-11 08:42 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2016-12-13 15:38 - 2016-11-11 08:42 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll

2016-12-13 15:38 - 2016-11-11 08:42 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll

2016-12-13 15:38 - 2016-11-11 08:42 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll

2016-12-13 15:38 - 2016-11-11 08:41 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2016-12-13 15:38 - 2016-11-11 08:38 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll

2016-12-13 15:38 - 2016-11-11 08:28 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll

2016-12-13 15:38 - 2016-11-11 08:27 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe

2016-12-13 15:38 - 2016-11-11 08:27 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe

2016-12-13 15:38 - 2016-11-11 08:26 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe

2016-12-13 15:38 - 2016-11-11 08:24 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll

2016-12-13 15:38 - 2016-11-11 08:24 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll

2016-12-13 15:38 - 2016-11-11 08:24 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll

2016-12-13 15:38 - 2016-11-11 08:23 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll

2016-12-13 15:38 - 2016-11-11 08:22 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe

2016-12-13 15:38 - 2016-11-11 08:22 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll

2016-12-13 15:38 - 2016-11-11 08:21 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe

2016-12-13 15:38 - 2016-11-11 08:21 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll

2016-12-13 15:38 - 2016-11-11 08:20 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll

2016-12-13 15:38 - 2016-11-11 08:20 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll

2016-12-13 15:38 - 2016-11-11 08:20 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe

2016-12-13 15:38 - 2016-11-11 08:19 - 13868544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2016-12-13 15:38 - 2016-11-11 08:19 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll

2016-12-13 15:38 - 2016-11-11 08:19 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll

2016-12-13 15:38 - 2016-11-11 08:19 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll

2016-12-13 15:38 - 2016-11-11 08:19 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe

2016-12-13 15:38 - 2016-11-11 08:18 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll

2016-12-13 15:38 - 2016-11-11 08:18 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl

2016-12-13 15:38 - 2016-11-11 08:18 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll

2016-12-13 15:38 - 2016-11-11 08:18 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll

2016-12-13 15:38 - 2016-11-11 08:18 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll

2016-12-13 15:38 - 2016-11-11 08:17 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll

2016-12-13 15:38 - 2016-11-11 08:16 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2016-12-13 15:38 - 2016-11-11 08:15 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2016-12-13 15:38 - 2016-11-11 08:15 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll

2016-12-13 15:38 - 2016-11-11 08:14 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll

2016-12-13 15:38 - 2016-11-11 08:13 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll

2016-12-13 15:38 - 2016-11-11 08:12 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll

2016-12-13 15:38 - 2016-11-11 08:10 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll

2016-12-13 15:38 - 2016-11-11 08:08 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll

2016-12-13 15:38 - 2016-11-11 08:06 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe

2016-12-13 15:38 - 2016-11-11 08:06 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll

2016-12-13 15:38 - 2016-11-11 08:06 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll

2016-12-13 15:38 - 2016-11-11 08:06 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll

2016-12-13 15:38 - 2016-11-11 08:04 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2016-12-13 15:38 - 2016-11-11 08:04 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll

2016-12-13 15:38 - 2016-11-11 08:03 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll

2016-12-13 15:38 - 2016-11-11 08:03 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2016-12-13 15:38 - 2016-11-11 08:03 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll

2016-12-13 15:38 - 2016-11-11 08:03 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll

2016-12-13 15:38 - 2016-11-11 08:03 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll

2016-12-13 15:38 - 2016-11-11 08:03 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll

2016-12-13 15:38 - 2016-11-11 08:02 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll

2016-12-05 21:07 - 2016-12-05 21:07 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys

2016-12-05 21:07 - 2016-12-05 21:07 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys

2016-12-05 21:07 - 2016-12-05 21:07 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys

2016-12-05 21:07 - 2016-12-05 21:07 - 00042096 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe

2016-11-30 20:07 - 2016-11-30 20:07 - 00000000 ____D C:\Users\Lukas\AppData\Local\pip

2016-11-30 20:06 - 2016-11-30 20:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 2.7

2016-11-30 20:05 - 2016-11-30 20:06 - 00000000 ____D C:\Python27

2016-11-30 20:05 - 2016-11-30 20:05 - 00001854 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Geomatica 2016.lnk

2016-11-30 20:05 - 2016-11-30 20:05 - 00001848 _____ C:\Users\Public\Desktop\Geomatica 2016.lnk

2016-11-30 20:05 - 2016-11-30 20:05 - 00000000 ____D C:\ProgramData\SafeNet Sentinel

2016-11-30 20:05 - 2016-11-30 20:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PCI Geomatics

2016-11-30 20:05 - 2009-09-17 07:05 - 00145448 _____ (SafeNet, Inc.) C:\WINDOWS\system32\Drivers\sentinel64.sys

2016-11-30 20:04 - 2016-11-30 20:04 - 00000000 ____D C:\Users\Lukas\Documents\Downloaded Installations

2016-11-30 20:00 - 2016-11-30 20:00 - 00000000 ____D C:\PCI Geomatics

2016-11-30 19:55 - 2016-11-30 19:57 - 447753754 _____ C:\Users\Lukas\Downloads\Geomatica-2016-Software-centos7.0.1406-x86_64.bin

2016-11-30 19:55 - 2016-11-30 19:57 - 347809534 _____ C:\Users\Lukas\Downloads\Geomatica-2016-Data-centos7.0.1406-x86_64.bin

2016-11-30 19:54 - 2016-11-30 19:56 - 669879437 _____ C:\Users\Lukas\Downloads\Geomatica2016-Windows64-Software-Install.zip

2016-11-30 19:52 - 2016-11-30 19:52 - 00001503 _____ C:\Users\Lukas\Desktop\Cisco AnyConnect Secure Mobility Client.lnk

2016-11-30 19:52 - 2016-11-30 19:52 - 00000000 ____D C:\Users\Lukas\.cisco

2016-11-30 19:48 - 2016-11-30 19:48 - 00000000 ____D C:\Users\Lukas\AppData\Local\Cisco

2016-11-30 19:48 - 2016-11-30 19:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco

2016-11-30 19:48 - 2016-11-30 19:48 - 00000000 ____D C:\ProgramData\Cisco

2016-11-30 19:48 - 2016-11-30 19:48 - 00000000 ____D C:\Program Files (x86)\Cisco

2016-11-30 19:48 - 2015-09-23 18:20 - 00129520 ____R (Cisco Systems, Inc.) C:\WINDOWS\system32\Drivers\acsock64.sys

2016-11-26 15:32 - 2016-11-26 15:31 - 00485032 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe

2016-11-26 13:41 - 2016-12-17 12:57 - 00000000 ____D C:\Users\Lukas\AppData\LocalLow\Mozilla

2016-11-24 16:52 - 2016-12-13 23:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-11-24 16:49 - 2016-11-24 16:50 - 1513308160 _____ C:\Users\Lukas\Downloads\ubuntu-16.04.1-desktop-amd64.iso

2016-11-24 15:36 - 2016-11-24 15:38 - 1781137408 _____ C:\Users\Lukas\Downloads\linuxmint-18-mate-64bit.iso

2016-11-24 15:32 - 2016-11-24 15:35 - 00000000 ____D C:\Program Files (x86)\LinuxLive USB Creator

2016-11-24 15:32 - 2016-11-24 15:32 - 00000000 ____D C:\Users\Lukas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LinuxLive USB Creator

2016-11-24 15:31 - 2016-11-24 15:31 - 06160320 _____ (LinuxLive USB Creator) C:\Users\Lukas\Downloads\LinuxLive USB Creator 2.9.4.exe
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-12-17 13:04 - 2016-10-05 19:14 - 00247812 _____ C:\WINDOWS\system32\perfh011.dat

2016-12-17 13:04 - 2016-10-05 19:14 - 00127826 _____ C:\WINDOWS\system32\perfc011.dat

2016-12-17 13:04 - 2016-07-16 23:51 - 00788244 _____ C:\WINDOWS\system32\perfh007.dat

2016-12-17 13:04 - 2016-07-16 23:51 - 00169596 _____ C:\WINDOWS\system32\perfc007.dat

2016-12-17 13:04 - 2015-08-31 12:01 - 02378446 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2016-12-17 13:01 - 2016-05-08 15:47 - 00000000 ___RD C:\Users\Lukas\Dropbox

2016-12-17 13:01 - 2016-05-08 15:45 - 00000000 ____D C:\Program Files (x86)\Dropbox

2016-12-17 12:58 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness

2016-12-17 12:57 - 2016-10-05 18:39 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat

2016-12-17 12:57 - 2016-01-07 20:16 - 00000000 __SHD C:\Users\Lukas\IntelGraphicsProfiles

2016-12-17 12:56 - 2016-10-05 19:07 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2016-12-17 12:56 - 2016-10-05 18:33 - 00000000 ____D C:\WINDOWS\system32\SleepStudy

2016-12-14 15:42 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps

2016-12-14 15:39 - 2016-10-05 18:45 - 00000000 ____D C:\Users\Lukas

2016-12-14 15:37 - 2016-10-05 18:33 - 00368424 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2016-12-14 15:36 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences

2016-12-14 15:36 - 2016-07-16 07:04 - 00262144 _____ C:\WINDOWS\system32\config\BBI

2016-12-14 15:17 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache

2016-12-14 13:30 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp

2016-12-14 13:24 - 2016-01-11 15:37 - 00000000 ____D C:\WINDOWS\system32\MRT

2016-12-14 13:21 - 2016-01-11 15:37 - 135632432 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2016-12-14 12:53 - 2016-01-07 20:58 - 00000000 ____D C:\Program Files (x86)\Steam

2016-12-14 12:41 - 2016-09-05 12:18 - 00000000 ____D C:\Users\Lukas\Documents\Paradox Interactive

2016-12-14 12:36 - 2016-01-07 20:57 - 00000000 ____D C:\Users\Lukas\AppData\Roaming\Telegram Desktop

2016-12-14 12:07 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports

2016-12-14 12:07 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF

2016-12-13 23:32 - 2016-04-27 06:56 - 00000000 __RHD C:\Users\Public\AccountPictures

2016-12-13 23:30 - 2016-05-08 15:45 - 00001244 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job

2016-12-13 23:30 - 2016-05-08 15:45 - 00001240 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job

2016-12-13 23:29 - 2016-01-08 10:52 - 00000000 ____D C:\Program Files (x86)\Avira

2016-12-13 23:29 - 2016-01-07 22:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2016-12-13 16:12 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2016-12-13 16:12 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe

2016-12-13 16:12 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2016-12-13 16:12 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe

2016-12-13 16:12 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr

2016-12-13 16:12 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism

2016-12-13 16:12 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep

2016-12-13 16:12 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Dism

2016-12-13 16:12 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\servicing

2016-12-12 00:56 - 2016-07-16 12:49 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2016-12-12 00:56 - 2016-07-16 12:49 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2016-12-10 21:46 - 2016-10-05 19:07 - 00004304 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA

2016-12-10 21:46 - 2016-10-05 19:07 - 00004072 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore

2016-11-30 20:04 - 2015-10-21 15:55 - 00000000 ____D C:\ProgramData\Package Cache

2016-11-30 20:00 - 2015-10-21 16:02 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2016-10-12 17:13 - 2016-10-12 17:13 - 0000401 _____ () C:\Users\Lukas\AppData\Roaming\Stereonet9Prefs.txt

2016-09-08 19:22 - 2016-09-08 19:22 - 0003584 _____ () C:\Users\Lukas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2016-10-15 13:52 - 2016-10-15 13:52 - 0004776 _____ () C:\Users\Lukas\AppData\Local\recently-used.xbel

2016-03-21 13:56 - 2016-03-21 13:56 - 0000057 _____ () C:\ProgramData\Ament.ini

2016-10-05 18:40 - 2016-10-05 18:40 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2016-12-14 13:21
 

==================== Ende von FRST.txt ============================

Und die Addition.txt:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 17-12-2016

durchgeführt von Lukas (17-12-2016 13:04:38)

Gestartet von C:\Users\Lukas\Downloads

Windows 10 Home Version 1607 (X64) (2016-10-05 18:11:04)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-141774289-2908194920-1088501678-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-141774289-2908194920-1088501678-503 - Limited - Disabled)

Gast (S-1-5-21-141774289-2908194920-1088501678-501 - Limited - Disabled)

Lukas (S-1-5-21-141774289-2908194920-1088501678-1001 - Administrator - Enabled) => C:\Users\Lukas
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)

Amnesia: The Dark Descent (HKLM-x32\...\Steam App 57300) (Version:  - Frictional Games)

Apple Application Support (32-Bit) (HKLM-x32\...\{A50679D9-6CBD-4FCD-BACB-62EF3894F6F3}) (Version: 4.0.3 - Apple Inc.)

Apple Application Support (64-Bit) (HKLM\...\{1F72FDD5-A069-45B4-928F-D0F16492DC69}) (Version: 4.0.3 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{FD244E19-6EFE-4A2D-948A-0D45D4C168BE}) (Version: 9.0.0.26 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)

Awesomenauts (HKLM\...\Steam App 204300) (Version:  - Ronimo Games)

Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.0.0.0 - Electronic Arts)

Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.7.1 - EA Digital Illusions CE AB)

BattlEye Uninstall (HKLM-x32\...\BattlEye for A2) (Version:  - )

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

Cisco AnyConnect Secure Mobility Client  (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 4.1.06020 - Cisco Systems, Inc.)

Cisco AnyConnect Secure Mobility Client (x32 Version: 4.1.06020 - Cisco Systems, Inc.) Hidden

Civilization III (HKLM-x32\...\{0AD84416-63A4-4CF3-BDDF-8FA866711FB0}) (Version:  - )

Dead Space (HKLM\...\Steam App 17470) (Version:  - EA Redwood Shores)

Dead Space™ 3 (HKLM-x32\...\{D4329609-4102-4F8C-B83F-7FE024EEA314}) (Version: 1.0.0.0 - Electronic Arts, Inc.)

Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.13263.0 - Electronic Arts)

Dropbox (HKLM-x32\...\Dropbox) (Version: 16.4.29 - Dropbox, Inc.)

Dropbox Update Helper (x32 Version: 1.3.59.1 - Dropbox, Inc.) Hidden

Europa Universalis IV (HKLM\...\Steam App 236850) (Version:  - Paradox Development Studio)

Far Cry (HKLM\...\Steam App 13520) (Version:  - Crytek Studios)

Far Cry 2 (HKLM\...\Steam App 19900) (Version:  - Ubisoft Montreal)

Geomatica 2016 (HKLM-x32\...\{CECC2FED-D416-3461-B1FC-7A7D933BCC28}) (Version: 2016.0 - PCI Geomatics)

Half-Life (HKLM-x32\...\Steam App 70) (Version:  - Valve)

Half-Life 2: Episode One (HKLM-x32\...\Steam App 380) (Version:  - Valve)

Half-Life 2: Episode Two (HKLM-x32\...\Steam App 420) (Version:  - Valve)

Half-Life: Blue Shift (HKLM\...\Steam App 130) (Version:  - Gearbox Software)

Hatoful Boyfriend (HKLM\...\Steam App 310080) (Version:  - Mediatonic)

Hearts of Iron IV (HKLM\...\Steam App 394360) (Version:  - Paradox Development Studio)

HP Officejet 4630 series - Grundlegende Software für das Gerät (HKLM\...\{3566FFED-696A-4260-8F12-073426CAC951}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)

Hyperdimension Neptunia Re;Birth2 Sisters Generation (HKLM\...\Steam App 351710) (Version:  - Compile Heart)

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1153 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4268 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation)

Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.253.0 - Intel Corporation)

Intel® Chipsatz-Gerätesoftware (x32 Version: 10.1.1.7 - Intel(R) Corporation) Hidden

Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)

IrfanView 64 (remove only) (HKLM\...\IrfanView64) (Version: 4.42 - Irfan Skiljan)

iTunes (HKLM\...\{96984DE8-1DB8-425C-AC8C-3098BC696F04}) (Version: 12.3.0.44 - Apple Inc.)

Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)

LinuxLive USB Creator (HKLM-x32\...\LinuxLive USB Creator) (Version: 2.9 - Thibaut Lauziere)

Medal of Honor: Pacific Assault™ (HKLM-x32\...\{56CFA833-F44F-4199-8C58-7F8B38F2BC7B}) (Version: 1.2.1.280 - Electronic Arts)

MegaTagmension Blanc + Neptune VS Zombies (HKLM\...\Steam App 496810) (Version:  - IDEA FACTORY)

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Chart Controls for Microsoft .NET Framework 3.5 (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.0.0 - Microsoft Corporation)

Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

MiKTeX 2.9 (HKLM\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)

Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)

Mozilla Firefox 50.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.0.2 (x86 de)) (Version: 50.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.0.2.6177 - Mozilla)

NVIDIA GeForce Experience 2.11.4.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.1 - NVIDIA Corporation)

NVIDIA Grafiktreiber 353.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.54 - NVIDIA Corporation)

NVIDIA PhysX (HKLM-x32\...\{46ED2B64-85C7-4E1F-920C-A555B21F2E4C}) (Version: 9.11.1111 - NVIDIA Corporation)

Origin (HKLM-x32\...\Origin) (Version: 10.0.2.33129 - Electronic Arts, Inc.)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)

Python 2.7.10 (64-bit) (HKLM\...\{E2B51919-207A-43EB-AE78-733F9C6797C3}) (Version: 2.7.10150 - Python Software Foundation)

QGIS 2.18 2.18.0 Las (HKLM\...\QGIS 2.18) (Version:  - QGIS Development Team)

Qualcomm Atheros QCA9377 Wireless LAN & Bluetooth Installer (HKLM-x32\...\{3241744A-BA36-41F0-B4AA-EF3946D00632}) (Version: 11.0.0.067 - Qualcomm Atheros)

R for Windows 3.3.2 (HKLM\...\R for Windows 3.3.2_is1) (Version: 3.3.2 - R Core Team)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10125.31214 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7553 - Realtek Semiconductor Corp.)

Sentinel System Driver Installer 7.5.2 (HKLM-x32\...\{504B7439-03BB-4C23-B17E-A1EC2D1D47B1}) (Version: 7.5.2 - SafeNet, Inc.)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)

SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.11.4.1 - NVIDIA Corporation) Hidden

Sid Meier's Civilization V (HKLM-x32\...\steam app 8930) (Version:  - 2K Games, Inc.)

Spore (HKLM-x32\...\Steam App 17390) (Version:  - Maxis™)

Spotify (HKU\S-1-5-21-141774289-2908194920-1088501678-1001\...\Spotify) (Version: 1.0.33.106.g60b5d1f0 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)

Utawarerumono English v1.1 (HKLM-x32\...\Utawarerumono English) (Version:  - )

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.2 - VideoLAN)

WinRAR 5.31 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {23693890-A8CB-4B5A-8CC3-48016D4D66B8} - System32\Tasks\{7E714088-5008-4807-A409-339D78D3E88B} => pcalua.exe -a D:\ANNOfinder.exe -d D:\

Task: {3B082FCF-93ED-4ACB-BE54-64FFEAF5FF41} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG

Task: {407E6DB0-07F3-4F52-A9F7-20878F6843F5} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-05-08] (Dropbox, Inc.)

Task: {845545CB-9EF7-4DDB-BDA8-8A770F2495E9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

Task: {A35D4CF3-65A4-4DD7-8056-F017EFD547B0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

Task: {C026BC7B-365C-46B1-B036-4EA08AB03259} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

Task: {C0B11103-84A7-4438-8361-AD1EB94F2C97} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-05-08] (Dropbox, Inc.)

Task: {D76F28CF-5AFB-48D0-A178-4D81E7A1CA4D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

Task: {E4D2B341-AB91-404E-BC83-41ACFC160E28} - System32\Tasks\FUBTrackingByPLD => C:\OEM\Preload\FubTracking\FubTracking.exe [2015-05-14] ()

Task: {F7247C16-926C-4B90-9F80-384FB032A903} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-12-14] (Microsoft Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

ShortcutWithArgument: C:\Users\Lukas\Desktop\QGIS\QGIS 2.18\QGIS Desktop 2.18.0.lnk -> C:\Program Files\QGIS 2.18\bin\nircmd.exe (NirSoft) -> exec hide C:\PROGRA~1\QGIS2~1.18\bin\qgis.bat

ShortcutWithArgument: C:\Users\Lukas\Desktop\QGIS\QGIS 2.18\SAGA GIS (2.1.2).lnk -> C:\Program Files\QGIS 2.18\bin\nircmd.exe (NirSoft) -> exec hide C:\PROGRA~1\QGIS2~1.18\bin\saga_gui.bat C:\PROGRA~1\QGIS2~1.18\apps\saga\saga_gui.exe
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll

2016-12-14 12:41 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2016-10-05 18:40 - 2016-08-01 13:54 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2015-05-19 08:11 - 2015-05-19 08:11 - 00007680 _____ () C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe

2016-02-04 13:35 - 2016-09-06 15:32 - 00066872 _____ () C:\WINDOWS\SysWoW64\PnkBstrA.exe

2015-09-23 16:47 - 2015-09-23 16:47 - 00085800 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2015-09-23 16:47 - 2015-09-23 16:47 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2016-09-22 21:11 - 2016-06-15 02:14 - 00369208 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll

2016-09-22 21:11 - 2016-06-15 02:14 - 00289848 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll

2016-09-22 21:11 - 2016-06-15 02:14 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll

2016-09-22 21:11 - 2016-06-15 02:14 - 03613240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll

2016-02-04 13:35 - 2016-09-06 15:32 - 00107832 _____ () C:\WINDOWS\SysWoW64\PnkBstrB.exe

2016-12-14 12:41 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll

2016-10-05 19:17 - 2016-10-05 19:17 - 00959168 _____ () C:\Users\Lukas\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\amd64\ClientTelemetry.dll

2016-10-05 19:25 - 2016-10-05 19:25 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll

2016-12-14 12:41 - 2016-12-09 10:41 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll

2016-11-11 13:09 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-11-11 13:09 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-11-11 13:09 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll

2016-11-11 13:09 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-11-11 13:09 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2016-09-22 21:11 - 2016-06-15 02:14 - 02667576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll

2016-09-22 21:11 - 2016-06-15 02:14 - 01990200 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll

2016-09-22 21:11 - 2016-06-15 02:14 - 01842232 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll

2016-09-22 21:11 - 2016-06-15 02:14 - 00208952 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll

2015-09-02 10:46 - 2015-08-06 07:28 - 00396688 _____ () C:\WINDOWS\system32\igfxTray.exe

2016-09-22 21:11 - 2016-06-15 02:14 - 00035896 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll

2016-09-22 21:11 - 2016-06-15 02:14 - 00921656 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll

2015-10-21 16:02 - 2015-02-09 04:18 - 00124440 _____ () C:\Program Files\Realtek\Audio\HDA\FMAPP.exe

2015-10-21 16:41 - 2015-05-14 08:10 - 00030976 _____ () C:\OEM\Preload\FubTracking\FubTracking.exe

2015-09-23 18:53 - 2015-09-23 18:53 - 00063376 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll

2016-09-14 09:24 - 2016-09-24 17:52 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll

2016-10-05 19:16 - 2016-10-05 19:16 - 00679624 _____ () C:\Users\Lukas\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\ClientTelemetry.dll

2015-10-21 16:13 - 2016-06-15 02:14 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2015-06-24 00:07 - 2015-06-24 00:07 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

2016-05-08 15:46 - 2016-11-11 21:36 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd

2016-05-08 15:46 - 2016-11-11 21:36 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd

2016-05-08 15:46 - 2016-11-11 21:36 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd

2016-05-08 15:46 - 2016-12-12 15:17 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd

2016-05-08 15:46 - 2016-11-11 21:36 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd

2016-12-17 13:00 - 2016-12-12 15:16 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd

2016-05-08 15:46 - 2016-11-11 21:37 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd

2016-12-17 13:00 - 2016-12-12 15:16 - 01682760 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd

2016-12-17 13:00 - 2016-12-12 15:16 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd

2016-12-17 13:00 - 2016-11-11 21:36 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd

2016-12-17 13:00 - 2016-11-11 21:37 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd

2016-12-17 13:00 - 2016-11-11 21:36 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll

2016-05-08 15:46 - 2016-11-11 21:38 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd

2016-08-29 17:04 - 2016-12-12 15:17 - 00021312 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd

2016-12-17 13:00 - 2016-12-12 15:16 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd

2016-12-17 13:00 - 2016-12-12 15:16 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd

2016-12-17 13:00 - 2016-11-11 21:36 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll

2016-12-17 13:00 - 2016-11-11 21:38 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd

2016-05-08 15:46 - 2016-11-11 21:38 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd

2016-05-08 15:46 - 2016-11-11 21:39 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd

2016-05-08 15:46 - 2016-12-12 15:17 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd

2016-05-08 15:46 - 2016-11-11 21:38 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd

2016-08-29 17:04 - 2016-12-12 15:17 - 00025424 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd

2016-05-08 15:46 - 2016-11-11 21:38 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd

2016-05-08 15:46 - 2016-11-11 21:38 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd

2016-05-08 15:46 - 2016-11-11 21:38 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd

2016-05-08 15:46 - 2016-11-11 21:39 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd

2016-05-08 15:46 - 2016-11-11 21:39 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd

2016-05-08 15:46 - 2016-11-11 21:38 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd

2016-05-08 15:46 - 2016-11-11 21:39 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd

2016-12-17 13:00 - 2016-12-12 15:16 - 00246592 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd

2016-12-17 13:00 - 2016-12-12 15:16 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd

2016-08-29 17:04 - 2016-11-11 21:37 - 00241104 _____ () C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd

2016-12-17 13:00 - 2016-12-12 15:16 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd

2016-05-08 15:46 - 2016-11-11 21:39 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd

2016-05-08 15:46 - 2016-12-12 15:17 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd

2016-05-08 15:46 - 2016-12-12 15:17 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi._winffi_iphlpapi.pyd

2016-05-08 15:46 - 2016-12-12 15:17 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror._winffi_winerror.pyd

2016-05-08 15:46 - 2016-12-12 15:17 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet._winffi_wininet.pyd

2016-05-08 15:46 - 2016-11-11 21:39 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd

2016-05-08 15:46 - 2016-12-12 15:17 - 00022352 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd

2016-12-17 13:00 - 2016-12-12 15:16 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd

2016-12-17 13:00 - 2016-11-11 21:35 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll

2016-12-17 13:00 - 2016-12-12 15:16 - 00031568 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd

2016-12-17 13:00 - 2016-12-05 21:07 - 00293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll

2016-12-17 13:00 - 2016-12-12 15:16 - 00084280 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL

2016-12-17 13:00 - 2016-12-12 15:16 - 01826096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd

2016-05-08 15:46 - 2016-11-11 21:37 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd

2016-12-17 13:00 - 2016-12-12 15:16 - 00531248 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd

2016-12-17 13:00 - 2016-12-12 15:17 - 03928880 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd

2016-12-17 13:00 - 2016-12-12 15:16 - 01972528 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd

2016-12-17 13:00 - 2016-12-12 15:17 - 00133424 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd

2016-12-17 13:00 - 2016-12-12 15:17 - 00224056 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd

2016-12-17 13:00 - 2016-12-12 15:16 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd

2016-08-29 17:04 - 2016-12-12 15:17 - 00020288 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32._winffi_user32.pyd

2016-12-17 13:00 - 2016-11-11 21:42 - 00017864 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll

2016-12-17 13:00 - 2016-11-11 21:42 - 01631184 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll

2016-12-17 13:00 - 2016-12-12 15:16 - 00042808 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd

2016-12-17 13:00 - 2016-12-12 15:17 - 00171320 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd

2016-12-17 13:00 - 2016-12-12 15:16 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd

2016-05-08 15:46 - 2016-12-12 15:17 - 00037192 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd

2016-05-08 15:46 - 2016-11-11 21:39 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd

2016-08-29 17:04 - 2016-12-12 15:17 - 00024904 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd

2016-12-17 13:00 - 2016-12-12 15:16 - 00546096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2015-07-10 12:04 - 2015-07-10 12:02 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-141774289-2908194920-1088501678-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Lukas\Pictures\Wallpaper\Anime\Kram\8IbciU3.png

DNS Servers: 192.168.188.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

HKLM\...\StartupApproved\Run: => "iTunesHelper"

HKU\S-1-5-21-141774289-2908194920-1088501678-1001\...\StartupApproved\StartupFolder: => "Telegram.lnk"

HKU\S-1-5-21-141774289-2908194920-1088501678-1001\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-141774289-2908194920-1088501678-1001\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-141774289-2908194920-1088501678-1001\...\StartupApproved\Run: => "Skype"

HKU\S-1-5-21-141774289-2908194920-1088501678-1001\...\StartupApproved\Run: => "Spotify"

HKU\S-1-5-21-141774289-2908194920-1088501678-1001\...\StartupApproved\Run: => "Spotify Web Helper"

HKU\S-1-5-21-141774289-2908194920-1088501678-1001\...\StartupApproved\Run: => "HP Officejet 4630 series (NET)"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => LPort=139

FirewallRules: [{5F75BD9D-429E-4362-B1E1-9DBE88779DF5}] => C:\Program Files (x86)\Steam\steamapps\common\MegaTagmension Blanc + Neptune VS Zombies\MegaTagmension Blanc.exe

FirewallRules: [{64AE482C-C236-4DF4-A13D-E96495F19F41}] => C:\Program Files (x86)\Steam\steamapps\common\MegaTagmension Blanc + Neptune VS Zombies\MegaTagmension Blanc.exe

FirewallRules: [{D97FBEDE-26CD-4821-A86C-30F28FBED793}] => C:\Program Files (x86)\Steam\steamapps\common\Europa Universalis IV\eu4.exe

FirewallRules: [{55A10D8F-3CB6-4694-BA24-1270BCFB4CDB}] => C:\Program Files (x86)\Steam\steamapps\common\Europa Universalis IV\eu4.exe

FirewallRules: [{A134FB64-F969-4A92-9B99-F0130EC3732E}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{02EDD188-390D-4488-95CB-742E9F69BF2E}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{E1B0AA48-F3BD-43BD-90F4-3056402FE0F5}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{31C84443-279E-4053-8FB9-EB1C332506FF}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{F859A9DD-6079-4033-A33C-C863D2C7157D}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{09642376-3DBC-4663-8184-96176377905C}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{838FBA89-7BD7-4FE3-BF98-E26C698E4B06}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{4535A39E-2613-42EC-8B49-72CC4488C195}] => C:\Program Files (x86)\Steam\steamapps\common\Awesomenauts\AwesomenautsLauncher.exe

FirewallRules: [{E70E12E3-4704-496B-BC85-F2F97AF613A8}] => C:\Program Files (x86)\Steam\steamapps\common\Awesomenauts\AwesomenautsLauncher.exe

FirewallRules: [{5E4B9C3B-E8C1-4D2F-8D84-F6030BDE3787}] => C:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe

FirewallRules: [{81EDD7D0-CD60-4104-9FE9-8D5492A9FAB4}] => C:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe

FirewallRules: [UDP Query User{157B8A87-DFD1-493F-95F3-8487B295517E}C:\program files\java\jre1.8.0_101\bin\javaw.exe] => C:\program files\java\jre1.8.0_101\bin\javaw.exe

FirewallRules: [TCP Query User{407444D5-21D2-48DE-9CF1-A6B0EA9476C5}C:\program files\java\jre1.8.0_101\bin\javaw.exe] => C:\program files\java\jre1.8.0_101\bin\javaw.exe

FirewallRules: [{A0E4939D-CFE1-4BCD-88AA-DBB875F2DC95}] => C:\Program Files (x86)\Origin Games\Mirrors Edge\Binaries\MirrorsEdge.exe

FirewallRules: [{B04A1A45-8E46-417F-AB02-A9AF70480797}] => C:\Program Files (x86)\Origin Games\Mirrors Edge\Binaries\MirrorsEdge.exe

FirewallRules: [{CDCEA377-0FEE-42C3-A6DC-0EB6093923F8}] => C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe

FirewallRules: [{B9C8CF90-35D2-45EE-BBAA-3B67D3820652}] => C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe

FirewallRules: [{3AB93181-8FCE-4967-8297-481005869DF6}] => C:\Program Files (x86)\Steam\steamapps\common\Dead Space\Dead Space.exe

FirewallRules: [{023EFCC9-BEE1-47D4-AFC1-D801ECA3526B}] => C:\Program Files (x86)\Steam\steamapps\common\Dead Space\Dead Space.exe

FirewallRules: [{31475F3D-755C-4A8A-B12D-A46B6F146FE0}] => C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{184ED29E-177E-4DC8-9B2E-2FE5243C7B60}] => C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{376DAF82-0197-415C-A13A-59D9194434DE}] => C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{0C98261F-83E9-46F4-80AF-76A016F2A4DE}] => C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{E545E5ED-2BA1-4817-9800-5F2A01AF0A79}] => C:\Program Files (x86)\Steam\steamapps\common\Dishonored\Binaries\Win32\Dishonored.exe

FirewallRules: [{0AE1897C-5E98-4D41-A4E5-D2C36B0847BD}] => C:\Program Files (x86)\Steam\steamapps\common\Dishonored\Binaries\Win32\Dishonored.exe

FirewallRules: [{9CAC682D-7F09-4438-8956-96DC35FAB341}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{C1288324-16D0-4077-8877-914A50E6343A}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{943EF336-A46D-4970-BF16-58D0409860D7}] => C:\Program Files (x86)\Steam\steamapps\common\Neptunia Rebirth2\NeptuniaReBirth2.exe

FirewallRules: [{DBD9BE08-AD43-4793-A735-10B9A328CAE4}] => C:\Program Files (x86)\Steam\steamapps\common\Neptunia Rebirth2\NeptuniaReBirth2.exe

FirewallRules: [{8C62717F-4B21-40A1-93A2-B7019A89CCF1}] => C:\Program Files (x86)\Steam\steamapps\common\Neptunia Rebirth1\NeptuniaReBirth1.exe

FirewallRules: [{8357FA89-0CF4-4A46-9BB3-80A2AB605C34}] => C:\Program Files (x86)\Steam\steamapps\common\Neptunia Rebirth1\NeptuniaReBirth1.exe

FirewallRules: [UDP Query User{C9B9C823-7DCB-486D-98F0-D150BF24FBF2}C:\program files (x86)\origin games\battlefield 4\bf4.exe] => C:\program files (x86)\origin games\battlefield 4\bf4.exe

FirewallRules: [TCP Query User{BDBC6159-2954-4232-B1CB-C8EE5F7856BB}C:\program files (x86)\origin games\battlefield 4\bf4.exe] => C:\program files (x86)\origin games\battlefield 4\bf4.exe

FirewallRules: [{D659DFE3-0D8F-40EE-827D-BB0117F5F7C8}] => C:\Program Files (x86)\Origin Games\Dragon Age\bin_ship\daorigins.exe

FirewallRules: [{B8CC1C25-B5CA-4A77-9120-975DA664F495}] => C:\Program Files (x86)\Origin Games\Dragon Age\bin_ship\daorigins.exe

FirewallRules: [UDP Query User{A31F0F81-789A-4553-8757-1EF1B4724ECA}C:\program files (x86)\origin games\battlefield 3\bf3.exe] => C:\program files (x86)\origin games\battlefield 3\bf3.exe

FirewallRules: [TCP Query User{E23512CF-51D8-4791-9B94-67FB097AC248}C:\program files (x86)\origin games\battlefield 3\bf3.exe] => C:\program files (x86)\origin games\battlefield 3\bf3.exe

FirewallRules: [{70F9FC73-B580-4FC5-8639-4C2B7DBA6FD3}] => C:\Program Files (x86)\Steam\steamapps\common\FarCry\Bin32\FarCryConfigurator.exe

FirewallRules: [{ADDE0FA6-1B25-42B6-9E15-03CB28C1C9C9}] => C:\Program Files (x86)\Steam\steamapps\common\FarCry\Bin32\FarCryConfigurator.exe

FirewallRules: [{A31FD367-E737-43B0-953E-B4C88BF28D57}] => C:\Program Files (x86)\Steam\steamapps\common\FarCry\Bin32\FarCry.exe

FirewallRules: [{1AD23B27-5E37-4948-9788-7ADF398F4022}] => C:\Program Files (x86)\Steam\steamapps\common\FarCry\Bin32\FarCry.exe

FirewallRules: [{094A2C6B-8250-499F-83FF-1877FCB96E8A}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{5CFD45DA-F52B-47A6-B56A-9A9131E1C1C2}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{38617738-8F97-4BCF-A1D9-124CE848A021}] => C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{7104B907-A35C-4C70-BA0C-3EBE6F3CD4DA}] => C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{82DE0A3B-F7B7-4377-B829-43A2C2BD34BE}] => C:\Program Files (x86)\Steam\steamapps\common\Amnesia The Dark Descent\Amnesia.exe

FirewallRules: [{A4E30D9F-BA94-4202-902C-6F2CF9E20BBB}] => C:\Program Files (x86)\Steam\steamapps\common\Amnesia The Dark Descent\Amnesia.exe

FirewallRules: [{56EDBF29-F008-4CE9-AC52-B0232BE9F812}] => C:\Program Files (x86)\Steam\steamapps\common\Amnesia The Dark Descent\Launcher.exe

FirewallRules: [{05DA619D-59DF-4BF5-9F52-BCDDD76E0E33}] => C:\Program Files (x86)\Steam\steamapps\common\Amnesia The Dark Descent\Launcher.exe

FirewallRules: [{1157F61C-BD3F-4408-82E1-F853BFBCD4FF}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 2\bin\FarCry2.exe

FirewallRules: [{23239E60-3541-43DE-811F-FE425430DFDE}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 2\bin\FarCry2.exe

FirewallRules: [{30A6FE6C-8F88-4526-85D0-5A9CC9E88873}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 2\bin\FC2Editor.exe

FirewallRules: [{17AC76CC-70E2-4D7B-ACC7-948BD4655C86}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 2\bin\FC2Editor.exe

FirewallRules: [{33252DA0-DA11-4DE7-81E3-D3EBEBC7395D}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 2\bin\FC2BenchmarkTool.exe

FirewallRules: [{0FE167BA-A538-4D60-9139-213BE74B4566}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 2\bin\FC2BenchmarkTool.exe

FirewallRules: [{A944DB43-D6C2-4D31-A1EE-66B5985EFE24}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 2\bin\FC2ServerLauncher.exe

FirewallRules: [{EFBDCC1F-ABC5-4F6B-85E0-A4330B2575C3}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 2\bin\FC2ServerLauncher.exe

FirewallRules: [TCP Query User{8A086227-3ED9-44DB-B944-EFA47AD760F7}C:\users\lukas\appdata\roaming\spotify\spotify.exe] => C:\users\lukas\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{389395B9-3946-4B4F-9503-5E514860EB27}C:\users\lukas\appdata\roaming\spotify\spotify.exe] => C:\users\lukas\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{FC6ED14B-6E29-4366-A68A-619C9B3E1F12}C:\program files (x86)\origin games\battlefield 4\bf4.exe] => C:\program files (x86)\origin games\battlefield 4\bf4.exe

FirewallRules: [UDP Query User{47C25032-0D73-46F3-B9D5-FF91F80C37DB}C:\program files (x86)\origin games\battlefield 4\bf4.exe] => C:\program files (x86)\origin games\battlefield 4\bf4.exe

FirewallRules: [{76FB31A3-65A0-4E6E-A3CA-ECE05CCD41DC}] => C:\Program Files\HP\HP Officejet 4630 series\bin\FaxApplications.exe

FirewallRules: [{93128B36-EDAA-45D7-867B-03674C9971C1}] => C:\Program Files\HP\HP Officejet 4630 series\bin\DigitalWizards.exe

FirewallRules: [{E0CD8AED-82CC-4AAE-A266-C96E34B4F776}] => C:\Program Files\HP\HP Officejet 4630 series\bin\SendAFax.exe

FirewallRules: [{BCA99887-BBA4-4A3F-82D4-0CCD40DB68CA}] => C:\Program Files\HP\HP Officejet 4630 series\Bin\DeviceSetup.exe

FirewallRules: [{5D5B18D9-704B-433A-9507-6A379A7ECE51}] => LPort=5357

FirewallRules: [{1CA781A0-3719-44E2-8D45-BB9E2DC9DAA7}] => C:\Program Files\HP\HP Officejet 4630 series\Bin\HPNetworkCommunicatorCom.exe

FirewallRules: [TCP Query User{7D41C721-1F2F-45A1-B7E3-96894C832898}C:\users\lukas\appdata\roaming\spotify\spotify.exe] => C:\users\lukas\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{D0F49EBD-73BB-4F02-A87D-8E12C40C8156}C:\users\lukas\appdata\roaming\spotify\spotify.exe] => C:\users\lukas\appdata\roaming\spotify\spotify.exe

FirewallRules: [{B172DD8F-946C-4CFF-89AC-67A5080E0CE2}] => C:\Program Files (x86)\Origin Games\Medal of Honor Pacific Assault\mohpa.exe

FirewallRules: [{FBFF56C2-0143-444A-8E96-6A7E3D0FAA3C}] => C:\Program Files (x86)\Origin Games\Medal of Honor Pacific Assault\mohpa.exe

FirewallRules: [{7F5046B8-E7F6-49B0-A747-8533087F43C2}] => C:\Program Files (x86)\Origin Games\Medal of Honor Pacific Assault\mohpa_setup.exe

FirewallRules: [{60743A1D-041A-4857-8126-830FDE2081C4}] => C:\Program Files (x86)\Origin Games\Medal of Honor Pacific Assault\mohpa_setup.exe

FirewallRules: [{FF67AD3F-BDAC-432E-A056-412B6A28FFA9}] => C:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe

FirewallRules: [{B6E4318E-7B6C-4A68-879F-D01DE0078A41}] => C:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe

FirewallRules: [{0C2D43A0-AF99-4C3B-AE6A-CB1E4A6385F5}] => C:\Program Files\SoftEther VPN Client\vpncmgr.exe

FirewallRules: [{63861B77-6E78-4116-AC18-A065632AB302}] => C:\Program Files\SoftEther VPN Client\vpnclient.exe

FirewallRules: [{B8184CC3-F762-49A7-A290-9F4912635EA0}] => C:\Program Files\SoftEther VPN Client\vpncmd_x64.exe

FirewallRules: [{656EBE2F-0662-42E9-975B-E70E05A77688}] => C:\Program Files\SoftEther VPN Client\vpncmd.exe

FirewallRules: [{06C5C60F-B84B-4434-BAA5-8170F2F5553A}] => C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe

FirewallRules: [{79338E9F-AF50-4752-B2B0-C1DF11C0A80F}] => C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe

FirewallRules: [{6405E0C9-78F3-472A-91A6-23115AA5FE3E}] => C:\Program Files (x86)\Steam\steamapps\common\Hatoful Boyfriend\hatoful.exe

FirewallRules: [{F0783C20-08C0-4176-BF25-76FA5F52488C}] => C:\Program Files (x86)\Steam\steamapps\common\Hatoful Boyfriend\hatoful.exe

FirewallRules: [TCP Query User{97780C44-DA0F-4AAF-8F96-BAFDB84173C3}C:\users\lukas\desktop\sauerbraten\bin\sauerbraten.exe] => C:\users\lukas\desktop\sauerbraten\bin\sauerbraten.exe

FirewallRules: [UDP Query User{C1EB2AFC-8837-41D5-925F-9B8E853DDE9B}C:\users\lukas\desktop\sauerbraten\bin\sauerbraten.exe] => C:\users\lukas\desktop\sauerbraten\bin\sauerbraten.exe

FirewallRules: [TCP Query User{77CB75F1-890A-4782-B2CE-64A63BE78887}C:\users\lukas\desktop\far cry 2\bin\farcry2.exe] => C:\users\lukas\desktop\far cry 2\bin\farcry2.exe

FirewallRules: [UDP Query User{123B53DE-1E61-4F1F-9C37-335A3037A6B5}C:\users\lukas\desktop\far cry 2\bin\farcry2.exe] => C:\users\lukas\desktop\far cry 2\bin\farcry2.exe

FirewallRules: [TCP Query User{7C63D704-6D64-4DB8-91AA-3AC8D736B1C0}C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe

FirewallRules: [UDP Query User{04EE9A31-AD64-4D2B-AA79-10C915727962}C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => C:\program files (x86)\steam\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe

FirewallRules: [{2B2F3AEB-A529-42E1-AEF9-7AE7B5F5F9CB}] => C:\Program Files (x86)\Steam\steamapps\common\Awesomenauts\Beta\AwesomenautsLauncher.exe

FirewallRules: [{6A748366-0385-4F3F-9E5E-83B1D62C373B}] => C:\Program Files (x86)\Steam\steamapps\common\Awesomenauts\Beta\AwesomenautsLauncher.exe

FirewallRules: [{8D7EE8A5-F4C8-4B44-B73E-463620560F4D}] => C:\Program Files (x86)\Steam\steamapps\common\Hearts of Iron IV\hoi4.exe

FirewallRules: [{A3A2147E-B0D6-4E2C-BAD5-5A92071E5347}] => C:\Program Files (x86)\Steam\steamapps\common\Hearts of Iron IV\hoi4.exe

FirewallRules: [{444353E6-5D0C-4F80-8062-D9B9C9760F64}] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
 

==================== Wiederherstellungspunkte =========================
 

29-11-2016 18:12:24 Windows Update

30-11-2016 19:48:01 Installed Cisco AnyConnect Secure Mobility Client

05-12-2016 00:23:44 Windows Update

13-12-2016 15:15:05 Windows Update
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64

Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Cisco Systems

Service: vpnva

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (12/17/2016 01:00:51 PM) (Source: DbxSvc) (EventID: 320) (User: )

Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.
 

Error: (12/17/2016 01:00:47 PM) (Source: DbxSvc) (EventID: 270) (User: )

Description: Filter Unload failed with: (-2145452013) Der angegebene Filter wurde nicht gefunden.
 

Error: (12/17/2016 12:56:55 PM) (Source: DbxSvc) (EventID: 320) (User: )

Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.
 

Error: (12/14/2016 03:42:53 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: consent.exe, Version: 10.0.14393.0, Zeitstempel: 0x57899acd

Name des fehlerhaften Moduls: Windows.UI.Xaml.dll, Version: 10.0.14393.479, Zeitstempel: 0x58258ce8

Ausnahmecode: 0xc000027b

Fehleroffset: 0x00000000004de865

ID des fehlerhaften Prozesses: 0x1f18

Startzeit der fehlerhaften Anwendung: 0x01d25618573bff8f

Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\consent.exe

Pfad des fehlerhaften Moduls: C:\Windows\System32\Windows.UI.Xaml.dll

Berichtskennung: f9f05116-c4b4-474c-9c70-b34181ae062c

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/14/2016 03:37:27 PM) (Source: DbxSvc) (EventID: 320) (User: )

Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.
 

Error: (12/14/2016 03:33:18 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 50.0.2.6177, Zeitstempel: 0x583e5197

Name des fehlerhaften Moduls: mozglue.dll, Version: 50.0.2.6177, Zeitstempel: 0x583e4b91

Ausnahmecode: 0x80000003

Fehleroffset: 0x0000ed43

ID des fehlerhaften Prozesses: 0x834

Startzeit der fehlerhaften Anwendung: 0x01d256167a55d47b

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Mozilla Firefox\mozglue.dll

Berichtskennung: aba1e5e3-ca66-476b-9a1f-24260cf8ff4c

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/14/2016 12:25:25 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: NvStreamUserAgent.exe, Version: 7.1.2084.9592, Zeitstempel: 0x57605c64

Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.14393.479, Zeitstempel: 0x5825887f

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000030bdd

ID des fehlerhaften Prozesses: 0x254

Startzeit der fehlerhaften Anwendung: 0x01d255fcc3db3dba

Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll

Berichtskennung: 084762c4-fae8-40b0-9140-27907feb8dca

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/14/2016 12:25:14 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: NvStreamUserAgent.exe, Version: 7.1.2084.9592, Zeitstempel: 0x57605c64

Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.14393.479, Zeitstempel: 0x5825887f

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000030bdd

ID des fehlerhaften Prozesses: 0x2178

Startzeit der fehlerhaften Anwendung: 0x01d255fcbd9a7dc3

Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll

Berichtskennung: 1bc9ee26-c317-46b9-a48a-c57d31241fe7

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/14/2016 12:25:04 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: NvStreamUserAgent.exe, Version: 7.1.2084.9592, Zeitstempel: 0x57605c64

Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.14393.479, Zeitstempel: 0x5825887f

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000030bdd

ID des fehlerhaften Prozesses: 0x164

Startzeit der fehlerhaften Anwendung: 0x01d255fcb77b0760

Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll

Berichtskennung: ae0019c3-1a1a-4240-94c8-7cef2abc10af

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/14/2016 12:24:54 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: NvStreamUserAgent.exe, Version: 7.1.2084.9592, Zeitstempel: 0x57605c64

Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.14393.479, Zeitstempel: 0x5825887f

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000030bdd

ID des fehlerhaften Prozesses: 0x1c8c

Startzeit der fehlerhaften Anwendung: 0x01d255fcb0eeb6ed

Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll

Berichtskennung: 2ffec594-0703-4430-902c-1fed4b85c4ab

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 
 

Systemfehler:

=============

Error: (12/17/2016 12:59:19 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "Plattformdienst für verbundene Geräte" wurde mit folgendem Fehler beendet: 

Unbekannter Fehler
 

Error: (12/17/2016 12:57:28 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}

 und der APPID 

{F72671A9-012C-4725-9D2F-2A4D32D65169}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (12/17/2016 12:57:15 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 und der APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (12/17/2016 12:57:15 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 und der APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (12/17/2016 12:56:46 PM) (Source: EventLog) (EventID: 6008) (User: )

Description: Das System wurde zuvor am ‎14.‎12.‎2016 um 15:37:16 unerwartet heruntergefahren.
 

Error: (12/17/2016 12:56:21 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT-AUTORITÄT)

Description: 32212256845159568
 

Error: (12/14/2016 03:40:16 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 und der APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (12/14/2016 03:40:16 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 und der APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (12/14/2016 03:40:15 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}

 und der APPID 

{F72671A9-012C-4725-9D2F-2A4D32D65169}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (12/14/2016 03:39:45 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "Plattformdienst für verbundene Geräte" wurde mit folgendem Fehler beendet: 

Unbekannter Fehler
 
 

CodeIntegrity:

===================================

  Date: 2016-12-14 13:21:23.705

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvacwu.inf_amd64_9934c34dc6ca0c4b\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2016-12-14 13:21:16.604

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2016-11-26 15:53:44.366

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvacwu.inf_amd64_9934c34dc6ca0c4b\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2016-11-26 15:53:43.199

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i5-5200U CPU @ 2.20GHz

Prozentuale Nutzung des RAM: 33%

Installierter physikalischer RAM: 8106.45 MB

Verfügbarer physikalischer RAM: 5417.34 MB

Summe virtueller Speicher: 9386.45 MB

Verfügbarer virtueller Speicher: 6781.32 MB
 

==================== Laufwerke ================================
 

Drive c: (Acer) (Fixed) (Total:930.91 GB) (Free:647.4 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: F432D08A)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================