Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Infizierung durch Botnet? (https://www.trojaner-board.de/187490-infizierung-botnet.html)

KitsuneNoir 17.11.2017 13:56
Infizierung durch Botnet?
 
Hallo,

ich habe das Gefühl von einem Botnet infiziert zu sein. Mbam konnte nichts finden, aber viele Internetseite lassen sich seit ca 2 Wochen nicht mehr von mir besuchen. Jedes Mal steht da, dass ich als Bot erkannt werde und daher kein Zugang zu ebay, amazon &co bekomme.
Außerdem ist meine Datenträgerauslastung im Taskmanager konstant bei 85-100%, auch wenn ich gar kein Programm geöffnet habe.

Anbei meine FRST und Mbam files (meinen Namen habe ich immer mít **** unkenntlich gemacht)

Danke schon mal im voraus für die Zeit die ihr euch nehmt!

FRST Addition

Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 16-11-2017
durchgeführt von **** (17-11-2017 12:54:15)
Gestartet von C:\Users\****\Desktop
Windows 10 Home Version 1703 15063.726 (X64) (2017-10-06 08:41:22)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1978501624-1710891274-1159157696-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1978501624-1710891274-1159157696-503 - Limited - Disabled)
Gast (S-1-5-21-1978501624-1710891274-1159157696-501 - Limited - Disabled)
**** (S-1-5-21-1978501624-1710891274-1159157696-1001 - Administrator - Enabled) => C:\Users\****

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe After Effects CC 2018 (HKLM-x32\...\AEFT_15_0_0) (Version: 15.0.0 - Adobe Systems Incorporated)
Adobe Audition CC 2018 (HKLM-x32\...\AUDT_11_0_0) (Version: 11.0.0 - Adobe Systems Incorporated)
Adobe Bridge CC 2018 (HKLM-x32\...\KBRG_8_0) (Version: 8.0 - Adobe Systems Incorporated)
Adobe Character Animator CC (Beta) (HKLM-x32\...\ANMLBETA_1_0_6) (Version: 1.0.6 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.3.0.256 - Adobe Systems Incorporated)
Adobe Dimension CC (HKLM-x32\...\ESHR_1_0) (Version: 1.0 - Adobe Systems Incorporated)
Adobe Dreamweaver CC 2018 (HKLM-x32\...\DRWV_18_0) (Version: 18.0 - Adobe Systems Incorporated)
Adobe Fuse CC (Beta) (HKLM-x32\...\{B57067F9-E97B-46EE-94F5-179373B81A6C}) (Version: 1.0 - Adobe Systems Incorporated)
Adobe Illustrator CC 2018 (HKLM-x32\...\ILST_22_0_1) (Version: 22.0.1 - Adobe Systems Incorporated)
Adobe InDesign CC 2018 (HKLM-x32\...\IDSN_13_0_1) (Version: 13.0.1 - Adobe Systems Incorporated)
Adobe Lightroom CC (HKLM-x32\...\LRCC_1_0_1) (Version: 1.0.1 - Adobe Systems Incorporated)
Adobe Lightroom Classic CC (HKLM-x32\...\LTRM_7_0_1) (Version: 7.0.1 - Adobe Systems Incorporated)
Adobe Media Encoder CC 2018 (HKLM-x32\...\AME_12_0_0) (Version: 12.0.0 - Adobe Systems Incorporated)
Adobe Muse CC 2018 (HKLM-x32\...\MUSE_2018_0) (Version: 2018.0.0.685 - Adobe Systems Incorporated)
Adobe Photoshop CC 2018 (HKLM-x32\...\PHSP_19_0_1) (Version: 19.0.1 - Adobe Systems Incorporated)
Adobe Premiere Pro CC 2018 (HKLM-x32\...\PPRO_12_0_0) (Version: 12.0.0 - Adobe Systems Incorporated)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 384.94 - NVIDIA Corporation) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{D811A40A-9791-497C-B9DC-2D89C8E95EA1}) (Version: 6.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{8B47B514-F5D2-4E0D-B951-6E250618A7CD}) (Version: 6.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{31A0B634-BCF4-4D3F-8336-87FEACFEE142}) (Version: 11.0.1.2 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{C1BBFD2A-BCDD-45B3-8C0B-66BD434970A8}) (Version: 2.4.8.1 - Apple Inc.)
Autodesk Fusion 360 (HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\...\73e72ada57b7480280f7a6f4a289729f) (Version: 2.0.3706 - Autodesk, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CINEMA 4D Student 18.057 (HKLM\...\MAXONAF7D8B6B) (Version: 18.057 - MAXON Computer GmbH)
CPUID ROG CPU-Z 1.81 (HKLM\...\CPUID ROG CPU-Z_is1) (Version: 1.81 - CPUID, Inc.)
CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version:  - CyberGhost S.A.)
Dropbox (HKLM-x32\...\Dropbox) (Version: 39.4.49 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.65.1 - Dropbox, Inc.) Hidden
iCloud (HKLM\...\{FF99A618-BCA5-4658-B9FF-CCF57C177610}) (Version: 7.1.0.34 - Apple Inc.)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
iTunes (HKLM\...\{24607015-8D34-4AF3-9092-AC83847AE073}) (Version: 12.7.1.14 - Apple Inc.)
KeyShot 6 64 bit (HKLM-x32\...\KeyShot 6_64) (Version: 6.1 64 bit - Luxion ApS)
Malwarebytes Version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Microsoft OneDrive (HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\...\OneDriveSetup.exe) (Version: 17.3.7076.1026 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
NVIDIA GeForce Experience 3.10.0.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.10.0.95 - NVIDIA Corporation)
OpenOffice 4.1.3 (HKLM-x32\...\{8D5FCC56-BB9F-4122-923C-71753F50F6F5}) (Version: 4.13.9783 - Apache Software Foundation)
Opera Stable 48.0.2685.52 (HKLM-x32\...\Opera 48.0.2685.52) (Version: 48.0.2685.52 - Opera Software)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8198 - Realtek Semiconductor Corp.)
Samsung Data Migration (HKLM-x32\...\{D4DE3DB4-7734-47E5-8D92-B80146311406}) (Version: 2.7 - Samsung)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 5.0.0.790 - Samsung Electronics)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SUPER (C) v2017.Build.71+3D+Recorder Version released on (2017/ (HKLM-x32\...\{FF02DB05-F906-405E-B62B-1780A236C052}_is1) (Version: released on (2017/04/07), - eRightSoft)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
Uplay (HKLM-x32\...\Uplay) (Version: 4.8 - Ubisoft)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version:  - Ubisoft)
WinRAR 5.50 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1978501624-1710891274-1159157696-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-B62F646E4967}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1978501624-1710891274-1159157696-1001_Classes\CLSID\{C4F0910E-E0B4-4E68-8086-452730C7A26A}\InprocServer32 -> C:\Users\****\AppData\Local\Autodesk\webdeploy\production\49d03f9fc343664d5942b9c34209b4f6b73c6c2d\NPreview10.dll ()
CustomCLSID: HKU\S-1-5-21-1978501624-1710891274-1159157696-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
ShellIconOverlayIdentifiers: [  DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
ShellIconOverlayIdentifiers-x32: [  DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems Inc.)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2017-10-19] (Apple Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-10-27] (NVIDIA Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {110502E8-2543-42B0-923D-74FB3FED217B} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation)
Task: {153AD673-D6F9-4973-98E4-6639F12E3C08} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation)
Task: {18DA819C-5DAF-42EB-B50D-888682AEF40F} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation)
Task: {1D676132-7803-4259-AE20-2F992FC2DCF0} - System32\Tasks\Opera scheduled Autoupdate 1507289380 => C:\Program Files\Opera\launcher.exe [2017-10-24] (Opera Software)
Task: {26E9C8B4-BC5F-4F01-A4CC-11C2582D4B30} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation)
Task: {27B3CD9D-C821-49E9-B387-2C7F40FC52B9} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11] (NVIDIA Corporation)
Task: {39914444-6F88-4885-9123-D88F57CDEB8B} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-10-11] (NVIDIA Corporation)
Task: {4182BDAA-7FEA-43C0-BCA2-C55A52510B1C} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-10-06] (Dropbox, Inc.)
Task: {4305AC41-F9A5-4940-9D60-0BE7EC19A494} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-10-06] (Dropbox, Inc.)
Task: {5B08C40B-9946-4D8E-8282-CEC6135D81C0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-07-24] (Apple Inc.)
Task: {8BF7BF62-A8AD-4369-ADE3-48AA225DB09E} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-10-11] (NVIDIA Corporation)
Task: {8EA9D990-3F15-4E23-904E-B2FA6DFB7D1C} - System32\Tasks\AdobeAAMUpdater-1.0-****-TOWER-**** => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
Task: {B3788123-029B-4B5A-B1F0-E401E8649846} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-10-11] (NVIDIA Corporation)
Task: {C71B610A-EE47-4CDF-8213-CD96790B09BF} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe [2017-02-22] (Samsung Electronics Co. Ltd.)
Task: {DB66CA13-2B13-442F-8B62-A9503996C160} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2017-09-01 01:49 - 2017-09-01 01:49 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-10-18 23:51 - 2017-10-18 23:51 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2017-10-06 12:38 - 2017-10-04 12:15 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2017-10-06 12:38 - 2017-10-04 12:15 - 002358728 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-10-06 15:16 - 2017-10-11 02:05 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-03-18 21:58 - 2017-03-18 21:58 - 000138000 _____ () C:\Windows\SYSTEM32\inputhost.dll
2017-09-26 01:52 - 2017-09-26 01:52 - 000491600 _____ () C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
2017-03-18 21:59 - 2017-03-20 05:36 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-18 21:58 - 2017-03-18 21:58 - 003826176 _____ () C:\Windows\System32\Windows.UI.Input.Inking.Analysis.dll
2017-10-06 12:44 - 2017-10-06 12:44 - 000381440 _____ () C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_1.8.0.0_x64__8wekyb3d8bbwe\Microsoft.Notes.Upgrade.dll
2017-11-12 12:04 - 2017-11-12 12:05 - 000087552 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-11-12 12:04 - 2017-11-12 12:05 - 000206336 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-11-12 12:04 - 2017-11-12 12:05 - 025461760 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-11-07 15:00 - 2017-11-07 15:00 - 002552832 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\skypert.dll
2017-09-26 01:52 - 2017-09-26 01:52 - 034879568 _____ () C:\Program Files (x86)\Adobe\Adobe Sync\Coresync\Coresync.exe
2017-10-27 09:51 - 2017-10-27 09:50 - 091487832 _____ () C:\Program Files\Opera\48.0.2685.52\opera_browser.dll
2017-10-27 09:51 - 2017-10-27 09:50 - 004197464 _____ () C:\Program Files\Opera\48.0.2685.52\libglesv2.dll
2017-10-27 09:51 - 2017-10-27 09:50 - 000101464 _____ () C:\Program Files\Opera\48.0.2685.52\libegl.dll
2017-10-06 15:16 - 2017-10-11 02:05 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-10-18 23:51 - 2017-10-18 23:51 - 000189752 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2017-09-01 01:49 - 2017-09-01 01:49 - 000080184 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2017-10-18 23:52 - 2017-10-18 23:52 - 001042232 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2017-09-20 01:42 - 2017-09-20 01:42 - 067115616 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libcef.dll
2015-03-17 00:34 - 2015-03-17 00:34 - 000010240 _____ () C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\locale\de_de\acrotray.deu
2017-11-15 21:32 - 2017-11-13 11:26 - 000725312 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll
2017-11-15 21:32 - 2017-11-13 11:26 - 002075456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_crashpad.dll
2017-11-15 21:33 - 2017-11-13 11:26 - 000100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000020800 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2017-11-15 21:33 - 2017-11-13 11:26 - 000035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000021848 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2017-11-15 21:33 - 2017-11-13 11:26 - 000130512 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 001856848 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2017-11-15 21:32 - 2017-11-13 11:26 - 000105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000040248 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000062784 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000392656 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2017-11-15 21:32 - 2017-11-13 11:26 - 000020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000392512 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000026056 _____ () C:\Program Files (x86)\Dropbox\Client\win32job.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000021824 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2017-11-15 21:33 - 2017-11-13 11:29 - 000023368 _____ () C:\Program Files (x86)\Dropbox\Client\winshell.compiled._winshell.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000066392 _____ () C:\Program Files (x86)\Dropbox\Client\winenumhandles.compiled._WinEnumHandles.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000025432 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000022856 _____ () C:\Program Files (x86)\Dropbox\Client\crashpad.compiled._Crashpad.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 001796920 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000084424 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 001956152 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 003859264 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000155464 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000521024 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000050496 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineCore.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000042304 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000131384 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000218944 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000204096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000054608 _____ () C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000100688 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000022360 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000021848 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000022360 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000027488 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-11-15 21:33 - 2017-11-13 11:26 - 000349128 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000101184 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.pyd
2017-11-15 21:33 - 2017-11-13 11:29 - 000023896 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000025424 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2017-11-15 21:32 - 2017-11-13 11:28 - 000032600 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
2017-11-15 21:32 - 2017-11-13 11:28 - 000181056 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2017-11-15 21:32 - 2017-11-13 11:29 - 000030536 _____ () C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000024368 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.DLL
2017-11-15 21:32 - 2017-11-13 11:28 - 001638200 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2017-11-15 21:32 - 2017-11-13 11:29 - 000026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000545080 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000359224 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000038208 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngine.pyd
2017-09-06 17:11 - 2017-09-06 17:11 - 000118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\fs-ext\build\Release\fs-ext.node
2017-09-06 17:11 - 2017-09-06 17:11 - 000214528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2017-09-06 17:11 - 2017-09-06 17:11 - 000117248 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ref\build\Release\binding.node
2017-09-06 17:11 - 2017-09-06 17:11 - 000125952 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ffi\build\Release\ffi_bindings.node
2017-09-20 02:04 - 2017-09-20 02:04 - 000099424 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll
2017-09-06 17:11 - 2017-09-06 17:11 - 000086528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\idle-gc\build\Release\idle-gc.node
2017-09-12 19:11 - 2017-09-12 19:11 - 000118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\fs-ext\build\Release\fs-ext.node
2017-09-12 19:10 - 2017-09-12 19:10 - 000117760 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ref\build\Release\binding.node
2017-09-12 19:11 - 2017-09-12 19:11 - 000125440 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ffi\build\Release\ffi_bindings.node
2017-09-12 19:11 - 2017-09-12 19:11 - 000214528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2017-09-20 01:59 - 2017-09-20 01:59 - 000099424 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll
2017-09-12 19:11 - 2017-09-12 19:11 - 000098816 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\bufferutil\build\Release\bufferutil.node
2017-09-12 19:11 - 2017-09-12 19:11 - 000086528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\idle-gc\build\Release\idle-gc.node
2017-10-06 12:29 - 2017-09-09 20:25 - 000688416 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2017-10-06 12:29 - 2017-10-31 04:22 - 002546976 _____ () C:\Program Files (x86)\Steam\video.dll
2017-10-06 12:29 - 2016-09-01 02:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2017-10-06 12:29 - 2016-01-27 08:49 - 002549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2017-10-06 12:29 - 2016-01-27 08:49 - 000491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2017-10-06 12:29 - 2016-01-27 08:49 - 000332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2017-10-06 12:29 - 2016-01-27 08:49 - 000442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2017-10-06 12:29 - 2016-01-27 08:49 - 000485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2017-10-06 12:29 - 2016-09-01 02:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2017-10-06 12:29 - 2016-09-01 02:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2017-10-06 12:29 - 2017-10-31 04:22 - 000901408 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2017-10-06 12:29 - 2016-07-04 23:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2017-10-06 12:30 - 2017-08-16 23:28 - 073130272 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2017-10-06 12:30 - 2017-09-07 03:04 - 000678400 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
2017-10-06 12:29 - 2015-09-25 00:52 - 000119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
2017-10-06 12:34 - 2017-10-06 12:34 - 000190240 _____ () C:\Program Files (x86)\Steam\steamapps\common\Driver Booster 4\madBasic_.bpl
2017-10-06 12:34 - 2017-10-06 12:34 - 000355616 _____ () C:\Program Files (x86)\Steam\steamapps\common\Driver Booster 4\madExcept_.bpl
2017-10-06 12:34 - 2017-10-06 12:34 - 000057632 _____ () C:\Program Files (x86)\Steam\steamapps\common\Driver Booster 4\madDisAsm_.bpl
2017-10-06 12:34 - 2017-10-06 12:34 - 000524064 _____ () C:\Program Files (x86)\Steam\steamapps\common\Driver Booster 4\sqlite3.dll
2017-10-06 12:34 - 2017-10-06 12:34 - 000899872 _____ () C:\Program Files (x86)\Steam\steamapps\common\Driver Booster 4\webres.dll
2017-10-06 15:17 - 2017-10-11 02:05 - 070805952 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2017-03-18 22:03 - 2017-03-18 22:01 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
DNS Servers: 213.211.192.34 - 213.187.64.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\...\StartupApproved\Run: => "Steam"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{A6CE385D-3A22-4128-A32A-51B7D814BBA7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{0C560597-C41E-4327-B27D-3AF7DA50A4E8}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{01CC0500-31FA-43EA-A86B-97DC9AD3C961}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{F550628D-468F-44E8-8F57-39FCAF010FA9}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{FDDEEFDE-70BE-4A6C-A50D-27C3808432D5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Driver Booster 4\DriverBooster.exe
FirewallRules: [{B86E69BB-1399-41EA-B473-59D64A964DF0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Driver Booster 4\DriverBooster.exe
FirewallRules: [{EAC1B77A-5154-43F1-AC94-D607EA5728C3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{6011D4C6-610D-4CE5-95AF-5CA68234ED2F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{365470CE-CF46-4BBD-B97D-336A4C27D2D1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{2DF2B84C-54ED-4F7D-9514-3688CCC4FE5B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{09780168-8914-4330-975B-006A47B89FFB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{A86147B0-0BC0-497F-B679-752A7C5E26B2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 4\bin\FarCry4.exe
FirewallRules: [TCP Query User{EFD286A1-ED22-41EB-B79C-FA77B218AEDE}C:\users\****\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\****\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{0E5FED4C-596C-4021-982A-A61F825BB752}C:\users\****\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\****\appdata\roaming\spotify\spotify.exe
FirewallRules: [{EDB6FE24-0DD2-47F1-9762-D76837AF71AA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{60D4EB6A-6715-4B36-A947-F29BA539043D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [TCP Query User{A2BF5244-A969-4F87-8BCE-0E2B0DADF546}C:\users\****\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\****\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{04AFFB63-D9FC-48BB-8984-705C7150DE4D}C:\users\****\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\****\appdata\roaming\spotify\spotify.exe
FirewallRules: [{3AF5D0A6-DC1E-40D5-B88E-BDD67D3BF5DF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Thief\Binaries\Win64\Shipping-ThiefGame.exe
FirewallRules: [{3CB61292-2EB7-428C-9A39-EC9BF3879F5F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Thief\Binaries\Win64\Shipping-ThiefGame.exe
FirewallRules: [{5E02DFE0-DCD2-47AD-A0E7-DB36838C1656}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Deus Ex Human Revolution Director's Cut\DXHRDC.exe
FirewallRules: [{0E2395AF-3B62-4DB6-9369-DF4E05299D1F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Deus Ex Human Revolution Director's Cut\DXHRDC.exe
FirewallRules: [TCP Query User{9E7D87B3-3375-418A-8C32-2691406D8726}C:\program files\windowsapps\arduinollc.arduinoide_1.8.10.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Allow) C:\program files\windowsapps\arduinollc.arduinoide_1.8.10.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe
FirewallRules: [UDP Query User{5D931468-ED3C-45FB-B62E-0D1BB39C4454}C:\program files\windowsapps\arduinollc.arduinoide_1.8.10.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Allow) C:\program files\windowsapps\arduinollc.arduinoide_1.8.10.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe
FirewallRules: [{B8F09A2D-A105-4C5D-80DD-83F331C64BD5}] => (Block) C:\program files\windowsapps\arduinollc.arduinoide_1.8.10.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe
FirewallRules: [{F9AC496F-A384-4ABD-B14A-6FC8E91E29F1}] => (Block) C:\program files\windowsapps\arduinollc.arduinoide_1.8.10.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe
FirewallRules: [{92634A9B-D86F-4222-ADB4-999C998E0CDD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{36C992F5-69AA-4D73-BB58-A822131A0FEF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [TCP Query User{555E1387-4A8C-4E6E-B20D-5C940CBAF2B6}C:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe
FirewallRules: [UDP Query User{A6977937-45B3-40AD-B326-34846E085D82}C:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe
FirewallRules: [{48E914A4-1086-483E-A5E7-72222C09410C}] => (Block) C:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe
FirewallRules: [{63F4FE6C-1EA3-4611-BAC9-B091CDB631A1}] => (Block) C:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe
FirewallRules: [TCP Query User{7DB0ABF2-D8B7-482B-93B6-3D47851253F6}C:\program files\adobe\adobe muse cc 2017\muse.exe] => (Allow) C:\program files\adobe\adobe muse cc 2017\muse.exe
FirewallRules: [UDP Query User{70218547-4564-4008-853D-4DDCDC355361}C:\program files\adobe\adobe muse cc 2017\muse.exe] => (Allow) C:\program files\adobe\adobe muse cc 2017\muse.exe
FirewallRules: [{EA9476A3-C391-4114-BCAF-3888E86D29A1}] => (Allow) C:\Program Files\KeyShot6\bin\keyshot6.exe
FirewallRules: [{3690A608-7A2C-494C-8ACC-AA30A2772A67}] => (Allow) C:\Program Files\KeyShot6\bin\keyshot_daemon.exe
FirewallRules: [TCP Query User{BBCD9D67-4E64-4644-B3F2-952CC17238C5}C:\program files\adobe\adobe muse cc 2018\muse.exe] => (Allow) C:\program files\adobe\adobe muse cc 2018\muse.exe
FirewallRules: [UDP Query User{1D9FA944-6603-45B6-A556-A5E8BB41A357}C:\program files\adobe\adobe muse cc 2018\muse.exe] => (Allow) C:\program files\adobe\adobe muse cc 2018\muse.exe
FirewallRules: [TCP Query User{3C06C5CC-0520-40B2-9306-9A836BF53F21}C:\program files\adobe\adobe dreamweaver cc 2018\node\node.exe] => (Allow) C:\program files\adobe\adobe dreamweaver cc 2018\node\node.exe
FirewallRules: [UDP Query User{A6F818C6-3C13-44CA-B849-C13E555A4C59}C:\program files\adobe\adobe dreamweaver cc 2018\node\node.exe] => (Allow) C:\program files\adobe\adobe dreamweaver cc 2018\node\node.exe
FirewallRules: [{AA5DAFD0-CBF7-4F2E-A708-9F0600550742}] => (Allow) C:\Program Files\Opera\48.0.2685.50\opera.exe
FirewallRules: [{B2E76613-1930-4B09-BAA9-066682C61E03}] => (Allow) C:\Program Files\Opera\48.0.2685.52\opera.exe
FirewallRules: [{19E3846F-B5E7-41D8-A4A0-3114A0A1EDA8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{5194D4D7-00B3-4C0C-8063-E351175DB672}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{67A213FF-7E9C-4B6E-AE65-D384EB88280D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{11DDCF8B-1B52-49CC-A0D0-5D3DEAD979FA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{6E45FC92-E9EF-47B4-AEEB-1041438C008C}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{3B69653A-23A4-46A5-BF0F-85D426D4FEEF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [{9A37009A-B520-48B6-A623-42C020223C17}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [{0D87E2F1-A593-49FC-BE1E-231176B15119}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{5138DB47-E30F-4D93-8CC5-0E407805A29A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dishonored_DeathOfTheOutsider\Dishonored_DO.exe
FirewallRules: [{85CD8520-7A64-4428-A6A5-E22C6F2B72FA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dishonored_DeathOfTheOutsider\Dishonored_DO.exe
FirewallRules: [{37FFB200-3B86-40E0-AF98-9A25FA8EE2BB}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{8AD59250-8CA1-4CE6-BB32-43A4DBD9116C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{8BAC36E0-33E2-4A38-BFF0-F7A9D07590B4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{913CB956-568D-4EF5-B72B-FF3D9CE111D8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{E245ADA4-F64C-4795-B113-D25C05835B7C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{CF5764E9-5B66-4DA1-A756-562B065EA04A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{B2C97E42-E36B-4DED-B13C-EF6E76AFCCF0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{954E9302-38DF-41B8-B1E5-CE2ACB6362E9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{E1A9ED35-2EE7-431E-809B-89AF4DE5DEFC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{8501A2C1-6558-4B50-A808-5E79B50A2FE6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe
FirewallRules: [{8C3A88D3-2DA5-4CFD-9F11-ED00617EBA40}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe

==================== Wiederherstellungspunkte =========================

07-11-2017 16:33:55 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
07-11-2017 16:34:21 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
15-11-2017 22:07:16 Windows Update
15-11-2017 22:07:55 Windows Update
17-11-2017 11:50:35 Driver Booster : NVIDIA GeForce GTX 1060 6GB

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/17/2017 12:26:48 PM) (Source: MsiInstaller) (EventID: 11406) (User: LUCIENS-TOWER)
Description: Product: ESET Security -- Fehler 1406. Wert ProductACode konnte nicht an den Schlüssel \Software\ESET\ESET Security\CurrentVersion\Info geschrieben werden.  Systemfehler . Überprüfen Sie, ob Sie über ausreichende Zugriffsrechte für den Schlüssel verfügen oder wenden Sie sich an den Support.

Error: (11/16/2017 10:52:43 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 12728265

Error: (11/16/2017 10:52:43 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 12728265

Error: (11/16/2017 10:52:43 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/16/2017 07:20:36 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1515

Error: (11/16/2017 07:20:36 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1515

Error: (11/16/2017 07:20:36 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/16/2017 06:50:09 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1478313

Error: (11/16/2017 06:50:09 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1478313

Error: (11/16/2017 06:50:09 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


Systemfehler:
=============
Error: (11/17/2017 11:24:55 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet:
Die Anforderung wird nicht unterstützt.

Error: (11/16/2017 10:53:20 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (11/16/2017 07:20:37 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (11/16/2017 06:25:34 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (11/16/2017 05:24:08 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (11/16/2017 04:25:56 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (11/16/2017 03:43:10 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (11/16/2017 03:01:19 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (11/15/2017 09:25:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet:
Die Anforderung wird nicht unterstützt.

Error: (11/15/2017 09:25:17 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT-AUTORITÄT)
Description: 32212256841176720


CodeIntegrity:
===================================
  Date: 2017-11-17 12:54:01.360
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-11-17 12:54:01.357
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-11-17 12:54:00.579
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-11-17 12:54:00.576
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-11-17 12:53:59.726
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-11-17 12:53:59.723
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-11-17 12:53:42.227
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-11-17 12:53:42.223
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-11-17 12:51:07.728
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-11-17 12:51:07.725
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen ===========================

Prozessor: AMD FX(tm)-8300 Eight-Core Processor
Prozentuale Nutzung des RAM: 36%
Installierter physikalischer RAM: 16281.69 MB
Verfügbarer physikalischer RAM: 10288.19 MB
Summe virtueller Speicher: 18713.69 MB
Verfügbarer virtueller Speicher: 11814.77 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:930.85 GB) (Free:554.72 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 6383F380)

Partition: GPT.

==================== Ende von Addition.txt ============================
FRST Shortcut

Code:
Untersuchungsergebnis der Verknüpfungen des Benutzers (x64) Version: 16-11-2017
durchgeführt von **** (17-11-2017 12:55:29)
Gestartet von C:\Users\****\Desktop
Start-Modus: Normal

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyShot 6 64\Documentation\KeyShot Manual.lnk -> hxxp://keyshot.com/manual/keyshot6/KeyShot_6_Manual.pd


Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu Places\01 - File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu Places\03 - Documents.lnk -> C:\Users\****\Documents ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu Places\04 - Downloads.lnk -> C:\Users\****\Downloads ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu Places\05 - Music.lnk -> C:\Users\****\Music ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu Places\06 - Pictures.lnk -> C:\Users\****\Pictures ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu Places\07 - Videos.lnk -> C:\Users\****\Videos ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu Places\08 - Homegroup.lnk -> Microsoft.Windows.Homegroup
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu Places\09 - Network.lnk -> Microsoft.Windows.Network
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu Places\10 - UserProfile.lnk -> C:\Users\**** ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk -> C:\Windows\Installer\{AC76BA86-1033-FFFF-7760-0C0F074E4100}\_SC_Acrobat.ico (Flexera Software LLC)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrodist.exe (Adobe Systems Incorporated.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects CC 2018.lnk -> C:\Program Files\Adobe\Adobe After Effects CC 2018\Support Files\AfterFX.exe (Adobe Systems Incorporated)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Audition CC 2018.lnk -> C:\Program Files\Adobe\Adobe Audition CC 2018\Adobe Audition CC.exe (Adobe)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CC 2018.lnk -> C:\Program Files\Adobe\Adobe Bridge CC 2018\Bridge.exe (Adobe Systems Incorporated)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Character Animator CC (Beta).lnk -> C:\Program Files\Adobe\Adobe Character Animator CC (Beta)\Support Files\Character Animator.exe (Adobe Systems Incorporated)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Systems Incorporated)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Dimension CC.lnk -> C:\Program Files\Adobe\Adobe Dimension CC\Dimension CC.exe (Adobe Systems Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Dreamweaver CC 2018.lnk -> C:\Program Files\Adobe\Adobe Dreamweaver CC 2018\Dreamweaver.exe (Adobe Systems, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Fuse CC (Beta).lnk -> C:\Program Files (x86)\Adobe\Adobe Fuse CC (Beta)\Code\Build\Output\Fuse\bin\Release\Fuse.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CC 2018.lnk -> C:\Program Files\Adobe\Adobe Illustrator CC 2018\Support Files\Contents\Windows\Illustrator.exe (Adobe Systems Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InDesign CC 2018.lnk -> C:\Program Files\Adobe\Adobe InDesign CC 2018\InDesign.exe (Adobe Systems Incorporated)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom CC.lnk -> C:\Program Files\Adobe\Adobe Lightroom CC\lightroomcc.exe (Adobe Systems)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom Classic CC.lnk -> C:\Program Files\Adobe\Adobe Lightroom Classic CC\Lightroom.exe (Adobe Systems)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CC 2018.lnk -> C:\Program Files\Adobe\Adobe Media Encoder CC 2018\Adobe Media Encoder.exe (Adobe)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Muse CC 2018.lnk -> C:\Program Files\Adobe\Adobe Muse CC 2018\Muse.exe (Adobe Systems, Incorporated)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2018.lnk -> C:\Program Files\Adobe\Adobe Photoshop CC 2018\Photoshop.exe (Adobe Systems, Incorporated)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro CC 2018.lnk -> C:\Program Files\Adobe\Adobe Premiere Pro CC 2018\Adobe Premiere Pro.exe (Adobe)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk -> C:\Windows\Installer\{C1BBFD2A-BCDD-45B3-8C0B-66BD434970A8}\AppleSoftwareUpdateIco.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiracastView.lnk -> C:\Windows\MiracastView\MiracastView.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk -> C:\Program Files\Opera\launcher.exe (Opera Software)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrintDialog.lnk -> C:\Windows\PrintDialog\PrintDialog.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Benutzerhandbuch für die Konsolenversion von RAR.lnk -> C:\Program Files\WinRAR\Rar.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Hilfe zu WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Was ist neu in dieser Version.lnk -> C:\Program Files\WinRAR\WhatsNew.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPER (C) - by eRightSoft\SUPER (C) entfernen.lnk -> C:\Program Files (x86)\eRightSoft\SUPER\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPER (C) - by eRightSoft\SUPER (C).lnk -> C:\Program Files (x86)\eRightSoft\SUPER\SUPER.exe (eRightSoft)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk -> C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician\Samsung Magician entfernen.lnk -> C:\Program Files (x86)\Samsung\Samsung Magician\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician\Samsung Magician.lnk -> C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe (Samsung Electronics Co. Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung\Data Migration\Data Migration.lnk -> C:\Program Files (x86)\Samsung\Samsung Data Migration\Data Migration.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.3\OpenOffice Base.lnk -> C:\Program Files (x86)\OpenOffice 4\program\sbase.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.3\OpenOffice Calc.lnk -> C:\Program Files (x86)\OpenOffice 4\program\scalc.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.3\OpenOffice Draw.lnk -> C:\Program Files (x86)\OpenOffice 4\program\sdraw.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.3\OpenOffice Impress.lnk -> C:\Program Files (x86)\OpenOffice 4\program\simpress.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.3\OpenOffice Math.lnk -> C:\Program Files (x86)\OpenOffice 4\program\smath.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.3\OpenOffice Writer.lnk -> C:\Program Files (x86)\OpenOffice 4\program\swriter.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.3\OpenOffice.lnk -> C:\Program Files (x86)\OpenOffice 4\program\soffice.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\GeForce Experience.lnk -> C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe (NVIDIA Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAXON\CINEMA 4D Student.lnk -> C:\Program Files\MAXON\CINEMA 4D R18 Student\CINEMA 4D Student.exe (MAXON Computer GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes\Malwarebytes.lnk -> C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe (Malwarebytes)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyShot 6 64\KeyShot 6 64.lnk -> C:\Program Files\KeyShot6\bin\keyshot6.exe (Luxion)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyShot 6 64\KeyShot 6 Resources.lnk -> C:\Users\Public\Documents\KeyShot 6 ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyShot 6 64\KeyShot.com.lnk -> C:\Program Files\KeyShot6\KeyShot 6.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyShot 6 64\Uninstall.lnk -> C:\Program Files\KeyShot6\uninst.exe (Luxion)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes\iTunes.lnk -> C:\Program Files\iTunes\iTunes.exe (Apple Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes\Über iTunes.lnk -> C:\Program Files\iTunes\iTunes.Resources\de.lproj\About iTunes.rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud\iCloud-Fotos.lnk -> C:\Program Files (x86)\Common Files\Apple\Internet Services\ShellStreamsShortcut.exe (Apple Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud\iCloud.lnk -> C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe (Apple Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 6\CyberGhost 6 deinstallieren.lnk -> C:\Program Files\CyberGhost 6\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 6\CyberGhost 6.lnk -> C:\Program Files\CyberGhost 6\CyberGhost.exe (CyberGhost S.A.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID\ROG CPU-Z\Edit ROG CPU-Z Config File.lnk -> C:\Program Files\CPUID\ROG CPU-Z\cpuz.ini ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID\ROG CPU-Z\ROG CPU-Z.lnk -> C:\Program Files\CPUID\ROG CPU-Z\cpuz.exe (CPUID)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID\ROG CPU-Z\Uninstall ROG CPU-Z.lnk -> C:\Program Files\CPUID\ROG CPU-Z\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (32-bit).lnk -> C:\Windows\SysWOW64\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (64-bit).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Quick Assist.lnk -> C:\Windows\System32\quickassist.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Steps Recorder.lnk -> C:\Windows\System32\psr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation)
Shortcut: C:\Users\****\Links\Desktop.lnk -> C:\Users\****\Desktop ()
Shortcut: C:\Users\****\Links\Downloads.lnk -> C:\Users\****\Downloads ()
Shortcut: C:\Users\****\Links\OneDrive.lnk -> C:\Users\****\OneDrive ()
Shortcut: C:\Users\****\Documents\UNI\Nicht zugeordnet\Rhino 5\Rhino 5\crack\Rhino 5 64 BIT - Acceso directo.lnk -> C:\Users\****\Documents\Dokumente\UNI\Nicht zugeordnet\Rhino 5\Rhino 5 (Keine Datei)
Shortcut: C:\Users\****\Documents\Adobe\After Effects CC 2018\User Presets\(Adobe).lnk -> C:\Program Files\Adobe\Adobe After Effects CC 2018\Support Files\Presets ()
Shortcut: C:\Users\****\Desktop\Adobe Dimension CC.lnk -> C:\Program Files\Adobe\Adobe Dimension CC\Dimension CC.exe (Adobe Systems Inc.)
Shortcut: C:\Users\****\Desktop\Adobe Fuse CC (Beta).lnk -> C:\Program Files (x86)\Adobe\Adobe Fuse CC (Beta)\Code\Build\Output\Fuse\bin\Release\Fuse.exe ()
Shortcut: C:\Users\****\Desktop\Adobe Lightroom Classic CC.lnk -> C:\Program Files\Adobe\Adobe Lightroom Classic CC\Lightroom.exe (Adobe Systems)
Shortcut: C:\Users\****\Desktop\Autodesk Fusion 360.lnk -> C:\Users\****\AppData\Local\Autodesk\webdeploy\production\6a0c9611291d45bb9226980209917c3d\FusionLauncher.exe (Autodesk, Inc.)
Shortcut: C:\Users\****\Desktop\Lightroom CC.lnk -> C:\Program Files\Adobe\Adobe Lightroom CC\lightroomcc.exe (Adobe Systems)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk -> C:\Users\****\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Benutzerhandbuch für die Konsolenversion von RAR.lnk -> C:\Program Files\WinRAR\Rar.txt ()
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Hilfe zu WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.chm ()
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Was ist neu in dieser Version.lnk -> C:\Program Files\WinRAR\WhatsNew.txt ()
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft\Uplay\Uninstall.lnk -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uninstall.exe (Ubisoft)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft\Uplay\Uplay.lnk -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uplay.exe (Ubisoft)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk -> C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk\Autodesk Fusion 360.lnk -> C:\Users\****\AppData\Local\Autodesk\webdeploy\production\6a0c9611291d45bb9226980209917c3d\FusionLauncher.exe (Autodesk, Inc.)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Windows\SendTo\Bluetooth-Dateiübertragung.LNK -> C:\Windows\System32\fsquirt.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\CyberGhost 6.lnk -> C:\Program Files\CyberGhost 6\CyberGhost.exe (CyberGhost S.A.)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Opera-Browser.lnk -> C:\Program Files\Opera\launcher.exe (Opera Software)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera-Browser.lnk -> C:\Program Files\Opera\launcher.exe (Opera Software)
Shortcut: C:\Users\****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation)
Shortcut: C:\Users\Public\Desktop\CPUID ROG CPU-Z.lnk -> C:\Program Files\CPUID\ROG CPU-Z\cpuz.exe (CPUID)
Shortcut: C:\Users\Public\Desktop\iTunes.lnk -> C:\Program Files\iTunes\iTunes.exe (Apple Inc.)
Shortcut: C:\Users\Public\Desktop\KeyShot 6 64.lnk -> C:\Program Files\KeyShot6\bin\keyshot6.exe (Luxion)
Shortcut: C:\Users\Public\Desktop\KeyShot 6 Resources.lnk -> C:\Users\Public\Documents\KeyShot 6 ()
Shortcut: C:\Users\Public\Desktop\SUPER (C).lnk -> C:\Program Files (x86)\eRightSoft\SUPER\SUPER.exe (eRightSoft)


ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /7
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes\Uninstall Malwarebytes.lnk -> C:\Program Files\Malwarebytes\Anti-Malware\unins000.exe () ->  /LOG
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud\E-Mails.lnk -> C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudWeb.exe (Apple Inc.) -> mail
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud\Erinnerungen.lnk -> C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudWeb.exe (Apple Inc.) -> reminders
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud\iPhone suchen.lnk -> C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudWeb.exe (Apple Inc.) -> find
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud\Kalender.lnk -> C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudWeb.exe (Apple Inc.) -> calendar
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud\Keynote.lnk -> C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudWeb.exe (Apple Inc.) -> keynote
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud\Kontakte.lnk -> C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudWeb.exe (Apple Inc.) -> contacts
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud\Notizen.lnk -> C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudWeb.exe (Apple Inc.) -> notes
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud\Numbers.lnk -> C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudWeb.exe (Apple Inc.) -> numbers
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud\Pages.lnk -> C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudWeb.exe (Apple Inc.) -> pages
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox\Dropbox.lnk -> C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc.) -> /home
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPagePCSystemInfo
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}
ShortcutWithArgument: C:\Users\****\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus
ShortcutWithArgument: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPagePCSystemInfo
ShortcutWithArgument: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep
ShortcutWithArgument: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes
ShortcutWithArgument: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1}
ShortcutWithArgument: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\****\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}


InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam Support Center.url -> URL: hxxp://support.steampowered.com/
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox\Dropbox Website.URL ->
InternetURL: C:\Users\****\Favorites\Bing.url -> URL: hxxp://go.microsoft.com/fwlink/p/?LinkId=255142
InternetURL: C:\Users\****\Dropbox\Unity_ordner\Logos\cfl.dropboxstatic.com.url -> URL: hxxps://cfl.dropboxstatic.com/static/images/icons/icon_spacer-vflN3BYt2.gif
InternetURL: C:\Users\****\Dropbox\Unity_ordner\Bilder\Mitglieder\photos-4.dropbox.com (1).url -> URL: hxxps://photos-4.dropbox.com/t/2/AACAjsOdE2JANLZUQzxGUOILxs-oh3Ur0ZXCb6X-R6P5gA/12/333520327/jpeg/32x32/1/_/1/2/zeichnung%20(1%20von%201).jpg/EM3aprsEGKMDIAIoAg/2TdJjillYzi2U0-qaMwlc2Q8aT_FS2BsvegGcoHQh2Q%2COTo4NmIJ2k4dihTicrTe9rrBbhS8jSOCMSdUvCvmLdU?size_mode=5
InternetURL: C:\Users\****\Dropbox\Unity_ordner\Bilder\Mitglieder\photos-4.dropbox.com.url -> URL: hxxps://photos-4.dropbox.com/t/2/AACAjsOdE2JANLZUQzxGUOILxs-oh3Ur0ZXCb6X-R6P5gA/12/333520327/jpeg/32x32/1/_/1/2/zeichnung%20(1%20von%201).jpg/EM3aprsEGKMDIAIoAg/2TdJjillYzi2U0-qaMwlc2Q8aT_FS2BsvegGcoHQh2Q%2COTo4NmIJ2k4dihTicrTe9rrBbhS8jSOCMSdUvCvmLdU?size_mode=5
InternetURL: C:\Users\****\Dropbox\sommerküche\PLAKAT_ABGABE\Dirka Wieske\photos-5.dropbox.com.url -> URL: hxxps://photos-5.dropbox.com/t/2/AAAiX5xGAA1PUu7pVbWRqTJP1NYuBb8KHKlGJBgAceBMRQ/12/112472722/jpeg/32x32/1/_/1/2/Beilagen%20Sommerk%C3%85che.jpg/EMKp37UEGOoJIAIoAg/FZR_WnNh5UvT_6MRIdD2oknhTTUhp6Q3OBLbpWQMmnQ?dl=0&size=1600x1200&size_mode=3
InternetURL: C:\Users\****\Dropbox\interact!\2_Recherchebox\Links\Spiegel Artikel.url -> URL: hxxp://spon.de/aeBlH
InternetURL: C:\Users\****\Documents\UNI\4. Semester\Viko\Portfolio\Unity Design\Logos\cfl.dropboxstatic.com.url -> URL: hxxps://cfl.dropboxstatic.com/static/images/icons/icon_spacer-vflN3BYt2.gif
InternetURL: C:\Users\****\Documents\UNI\4. Semester\Viko\Portfolio\Unity Design\Bilder\Mitglieder\photos-4.dropbox.com (1).url -> URL: hxxps://photos-4.dropbox.com/t/2/AACAjsOdE2JANLZUQzxGUOILxs-oh3Ur0ZXCb6X-R6P5gA/12/333520327/jpeg/32x32/1/_/1/2/zeichnung%20(1%20von%201).jpg/EM3aprsEGKMDIAIoAg/2TdJjillYzi2U0-qaMwlc2Q8aT_FS2BsvegGcoHQh2Q%2COTo4NmIJ2k4dihTicrTe9rrBbhS8jSOCMSdUvCvmLdU?size_mode=5
InternetURL: C:\Users\****\Documents\UNI\4. Semester\Viko\Portfolio\Unity Design\Bilder\Mitglieder\photos-4.dropbox.com.url -> URL: hxxps://photos-4.dropbox.com/t/2/AACAjsOdE2JANLZUQzxGUOILxs-oh3Ur0ZXCb6X-R6P5gA/12/333520327/jpeg/32x32/1/_/1/2/zeichnung%20(1%20von%201).jpg/EM3aprsEGKMDIAIoAg/2TdJjillYzi2U0-qaMwlc2Q8aT_FS2BsvegGcoHQh2Q%2COTo4NmIJ2k4dihTicrTe9rrBbhS8jSOCMSdUvCvmLdU?size_mode=5
InternetURL: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Watch_Dogs.url -> URL: uplay://launch/274/0
InternetURL: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Deus Ex Human Revolution - Director's Cut.url -> URL: steam://rungameid/238010
InternetURL: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Dishonored 2.url -> URL: steam://rungameid/403640
InternetURL: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Dishonored Death of the Outsider.url -> URL: steam://rungameid/614570
InternetURL: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Driver Booster 4 for Steam.url -> URL: steam://rungameid/545110
InternetURL: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Far Cry 3.url -> URL: steam://rungameid/220240
InternetURL: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Far Cry 4.url -> URL: steam://rungameid/298110
InternetURL: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Thief.url -> URL: steam://rungameid/239160

==================== Ende vom Shortcut.txt =============================
MBAM

Code:
Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 16.11.17
Scan-Zeit: 00:52
Protokolldatei: 1b5ef978-ca60-11e7-ae07-38d5477e602d.json
Administrator: Ja

-Softwaredaten-
Version: 3.2.2.2029
Komponentenversion: 1.0.212
Version des Aktualisierungspakets: 1.0.3266
Lizenz: Premium

-Systemdaten-
Betriebssystem: Windows 10 (Build 15063.674)
CPU: x64
Dateisystem: NTFS
Benutzer: ****-TOWER\****

-Scan-Übersicht-
Scan-Typ: Benutzerdefinierter Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 660854
Erkannte Bedrohungen: 0
(keine bösartigen Elemente erkannt)
In die Quarantäne verschobene Bedrohungen: 0
(keine bösartigen Elemente erkannt)
Abgelaufene Zeit: 10 Std., 40 Min., 53 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 0
(keine bösartigen Elemente erkannt)

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)

KitsuneNoir 17.11.2017 14:01
FRST

cosinus 17.11.2017 16:32
Bauchgefühle sind eigentlich KEIN Hinweis auf irgendeinen Befall. Irgendwelche Virenfunde bisher gehabt?


Code:
Adobe Illustrator CC 2018 (HKLM-x32\...\ILST_22_0_1) (Version: 22.0.1 - Adobe Systems Incorporated)
Adobe InDesign CC 2018 (HKLM-x32\...\IDSN_13_0_1) (Version: 13.0.1 - Adobe Systems Incorporated)
Adobe Lightroom CC (HKLM-x32\...\LRCC_1_0_1) (Version: 1.0.1 - Adobe Systems Incorporated)
Adobe Lightroom Classic CC (HKLM-x32\...\LTRM_7_0_1) (Version: 7.0.1 - Adobe Systems Incorporated)
Adobe Media Encoder CC 2018 (HKLM-x32\...\AME_12_0_0) (Version: 12.0.0 - Adobe Systems Incorporated)
Nur mal als Beispiel - gewerblich genutztes System?

KitsuneNoir 17.11.2017 16:57
Hey,

achso ne ich bin Student und hab im Studium viel mit 3D Modelling und VFX zu tun :D

Irgendeine Ahnung woran das liegen könnte, dass ich auf einigen Seiten als Bot erkannt werde? Es war halt bis vor ca 2 Wochen nicht so. Und auch die hohe Datenträgerauslastung kann ich mir nicht erklären. Meist stehen da im Taskmanager (Diensthost Superfetch, Diag Track, dashost.exe, oder runtime Broker) ganz oben wenn die Auslastung mal wieder bei über 90% liegt.

VG

KitsuneNoir 17.11.2017 17:00
Liste der Anhänge anzeigen (Anzahl: 1)
Ja in meiner Mbam Quarantäne sind folgende Einträge. (Ich wusste nicht wie man die als logs hochlädt, daher ein Bild)

cosinus 17.11.2017 21:36
Screenshots sind nunmal überhaupt nicht hilfreich. Wenn bitte ALLE Logs posten. Diese sind im Verlauf bzw bei den Berichten.

KitsuneNoir 18.11.2017 16:45
Sorry, hier die Berichte

Code:
Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Datum des Schutzereignisses: 30.10.17
Uhrzeit des Schutzereignisses: 00:28
Protokolldatei: dd3b1b16-bd00-11e7-9c52-38d5477e602d.json
Administrator: Ja

-Softwaredaten-
Version: 3.2.2.2029
Komponentenversion: 1.0.212
Version des Aktualisierungspakets: 1.0.3124
Lizenz: Premium

-Systemdaten-
Betriebssystem: Windows 10 (Build 15063.674)
CPU: x64
Dateisystem: NTFS
Benutzer: System

-Einzelheiten zu blockierter Schadsoftware-
Datei: 1
Generic.Malware/Suspicious, C:\Program Files\9d6c73987465e6d59852361469647ab9\35f6917cee818fdd31a2d5e07fc0f0f4.exe, In Quarantäne, [0], [392686],1.0.3124


(end)
Code:
Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Datum des Schutzereignisses: 30.10.17
Uhrzeit des Schutzereignisses: 00:28
Protokolldatei: ef463d22-bd00-11e7-b463-38d5477e602d.json
Administrator: Ja

-Softwaredaten-
Version: 3.2.2.2029
Komponentenversion: 1.0.212
Version des Aktualisierungspakets: 1.0.3124
Lizenz: Premium

-Systemdaten-
Betriebssystem: Windows 10 (Build 15063.674)
CPU: x64
Dateisystem: NTFS
Benutzer: System

-Einzelheiten zu blockierter Schadsoftware-
Datei: 1
Adware.FileTour, C:\Users\LUCIEN~1\AppData\Local\Temp\lTrVNMN5-upd.exe, In Quarantäne, [166], [440055],1.0.3124


(end)
Code:
Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Datum des Schutzereignisses: 30.10.17
Uhrzeit des Schutzereignisses: 00:28
Protokolldatei: f0feadfc-bd00-11e7-8404-38d5477e602d.json
Administrator: Ja

-Softwaredaten-
Version: 3.2.2.2029
Komponentenversion: 1.0.212
Version des Aktualisierungspakets: 1.0.3124
Lizenz: Premium

-Systemdaten-
Betriebssystem: Windows 10 (Build 15063.674)
CPU: x64
Dateisystem: NTFS
Benutzer: System

-Einzelheiten zu blockierter Schadsoftware-
Datei: 1
PUP.Optional.SpeedingUpMyPC, C:\Users\LUCIEN~1\AppData\Local\Temp\lTrVNMN5-prog.exe, In Quarantäne, [920], [389100],1.0.3124


(end)
Code:
Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Datum des Schutzereignisses: 30.10.17
Uhrzeit des Schutzereignisses: 00:30
Protokolldatei: 201e718a-bd01-11e7-8e5b-38d5477e602d.json
Administrator: Ja

-Softwaredaten-
Version: 3.2.2.2029
Komponentenversion: 1.0.212
Version des Aktualisierungspakets: 1.0.3124
Lizenz: Premium

-Systemdaten-
Betriebssystem: Windows 10 (Build 15063.674)
CPU: x64
Dateisystem: NTFS
Benutzer: System

-Einzelheiten zu blockierter Schadsoftware-
Datei: 1
PUP.Optional.AppTrailers, C:\Users\LUCIEN~1\AppData\Local\Temp\42162796\ic-0.93f2e5434a68c.exe, In Quarantäne, [867], [338239],1.0.3124


(end)
Code:
Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 13.11.17
Scan-Zeit: 02:23
Protokolldatei: 3e29f88c-c811-11e7-96e7-38d5477e602d.json
Administrator: Ja

-Softwaredaten-
Version: 3.2.2.2029
Komponentenversion: 1.0.212
Version des Aktualisierungspakets: 1.0.3238
Lizenz: Premium

-Systemdaten-
Betriebssystem: Windows 10 (Build 15063.674)
CPU: x64
Dateisystem: NTFS
Benutzer: System

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 367704
Erkannte Bedrohungen: 30
In die Quarantäne verschobene Bedrohungen: 30
Abgelaufene Zeit: 8 Min., 19 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 6
PUP.Optional.Wajam, HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\SOFTWARE\WajIEnhance, In Quarantäne, [83], [244670],1.0.3238
PUP.Optional.Wajam, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NLASVC\PARAMETERS\INTERNET\MANUALPROXIES, In Quarantäne, [83], [-1],0.0.0
Adware.SearchAwesome, HKLM\SOFTWARE\SrcAAAesom Browser Enhancer, In Quarantäne, [4680], [424837],1.0.3238
Adware.SearchAwesome, HKLM\SOFTWARE\WOW6432NODE\SrcAAAesom Browser Enhancer, In Quarantäne, [4680], [424837],1.0.3238
Adware.SearchAwesome, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\9d6c73987465e6d59852361469647ab9, In Quarantäne, [4680], [424836],1.0.3238
Adware.Wajam.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\5d8289ed93e8b470ac062a522f5869e3, In Quarantäne, [1739], [336669],1.0.3238

Registrierungswert: 6
PUP.Optional.Wajam, HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, In Quarantäne, [83], [-1],0.0.0
PUP.Optional.Wajam, HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, In Quarantäne, [83], [-1],0.0.0
PUP.Optional.Wajam, HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYOVERRIDE, In Quarantäne, [83], [-1],0.0.0
PUP.Optional.Wajam, HKU\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, In Quarantäne, [83], [-1],0.0.0
Adware.SearchAwesome, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\9d6c73987465e6d59852361469647ab9|DISPLAYNAME, In Quarantäne, [4680], [424836],1.0.3238
Adware.SearchAwesome.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\9d6c73987465e6d59852361469647ab9|PUBLISHER, In Quarantäne, [8907], [437519],1.0.3238

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 1
Adware.Social2Search.EncJob, C:\PROGRAM FILES\9d6c73987465e6d59852361469647ab9, In Quarantäne, [8542], [415982],1.0.3238

Datei: 17
Adware.Social2Search.EncJob, C:\PROGRAM FILES\9d6c73987465e6d59852361469647ab9\WBE_uninstall.dat, In Quarantäne, [8542], [415982],1.0.3238
Adware.Social2Search.EncJob, C:\Program Files\9d6c73987465e6d59852361469647ab9\24857e823485a184946f54a3074f7f7a.ico, In Quarantäne, [8542], [415982],1.0.3238
Adware.Social2Search.EncJob, C:\Program Files\9d6c73987465e6d59852361469647ab9\38c9c948f5c68ae9627cdcb6a0bdb517.exe, In Quarantäne, [8542], [415982],1.0.3238
Adware.Social2Search.EncJob, C:\Program Files\9d6c73987465e6d59852361469647ab9\41d19c179c42815ee9debe17508a0ddb, In Quarantäne, [8542], [415982],1.0.3238
Adware.Social2Search.EncJob, C:\Program Files\9d6c73987465e6d59852361469647ab9\50981e71049640b489ebb383f3fd89de.exe, In Quarantäne, [8542], [415982],1.0.3238
Adware.Social2Search.EncJob, C:\Program Files\9d6c73987465e6d59852361469647ab9\ad61a68886b8a7f21c6b4d5e82601cc3, In Quarantäne, [8542], [415982],1.0.3238
Adware.Social2Search.EncJob, C:\Program Files\9d6c73987465e6d59852361469647ab9\be0f79a9e21ae32c663b33c7828da3cf, In Quarantäne, [8542], [415982],1.0.3238
Adware.Social2Search.EncJob, C:\Program Files\9d6c73987465e6d59852361469647ab9\mozcrt19.dll, In Quarantäne, [8542], [415982],1.0.3238
Adware.Social2Search.EncJob, C:\Program Files\9d6c73987465e6d59852361469647ab9\nspr4.dll, In Quarantäne, [8542], [415982],1.0.3238
Adware.Social2Search.EncJob, C:\Program Files\9d6c73987465e6d59852361469647ab9\nss3.dll, In Quarantäne, [8542], [415982],1.0.3238
Adware.Social2Search.EncJob, C:\Program Files\9d6c73987465e6d59852361469647ab9\plc4.dll, In Quarantäne, [8542], [415982],1.0.3238
Adware.Social2Search.EncJob, C:\Program Files\9d6c73987465e6d59852361469647ab9\plds4.dll, In Quarantäne, [8542], [415982],1.0.3238
Adware.Social2Search.EncJob, C:\Program Files\9d6c73987465e6d59852361469647ab9\service.dat, In Quarantäne, [8542], [415982],1.0.3238
Adware.Social2Search.EncJob, C:\Program Files\9d6c73987465e6d59852361469647ab9\service_64.dat, In Quarantäne, [8542], [415982],1.0.3238
Adware.Social2Search.EncJob, C:\Program Files\9d6c73987465e6d59852361469647ab9\softokn3.dll, In Quarantäne, [8542], [415982],1.0.3238
Adware.Wajam.Generic, C:\WINDOWS\SYSTEM32\DRIVERS\5D8289ED93E8B470AC062A522F5869E3.SYS, In Quarantäne, [1739], [336669],1.0.3238
Adware.Wajam, C:\WINDOWS\50981E71049640B489EBB383F3FD89DE.EXE, In Quarantäne, [491], [451771],1.0.3238

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)

cosinus 18.11.2017 17:51
Hauptsächlich adware :D


Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

KitsuneNoir 18.11.2017 23:03
Ok dann ist alles wieder sauber :)
Danke, ich werd mich mal mit einer Spende revanchieren

Code:
Malwarebytes Anti-Rootkit BETA 1.10.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.11.18.04
  rootkit: v2017.10.14.01

Windows 10 x64 NTFS
Internet Explorer 11.726.15063.0
**** :: ****-TOWER [administrator]

18.11.2017 21:42:16
mbar-log-2017-11-18 (21-42-16).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 283157
Time elapsed: 15 minute(s), 5 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

cosinus 19.11.2017 12:57
na ganz fertig sind wir noch nicht :D


Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!



adwCleaner v7.x

Downloade Dir bitte http://deeprybka.trojaner-board.de/adwcleaner/adwc.pngAdwCleaner auf Deinen Desktop (Bebilderte Anleitung).
  • Schließe alle offenen Programme und Browser.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Werkzeuge > Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • Tracing Schlüssel
    • Prefetch Dateien
    • Proxy
    • Winsock
    • IE Richtlinien
    • Chrome Richtlinien
  • Bestätige die Auswahl mit Ok.
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist. Am Ende des Suchlaufs öffnet sich automatisch eine Logdatei. Schließe diese.
  • Klicke nun auf Löschen (auch dann wenn AdwCleaner sagt, dass nichts gefunden wurde) und bestätige auftretende Hinweise mit Ok.
  • Klicke am Ende der Bereinigung auf Jetzt neu starten. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

KitsuneNoir 19.11.2017 15:08
Okay :D
dann hier

Code:
# AdwCleaner 7.0.4.0 - Logfile created on Sun Nov 19 14:03:37 2017
# Updated on 2017/27/10 by Malwarebytes
# Running on Windows 10 Home (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

Deleted: C:\Users\****\AppData\Local\PCBooster


***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

No malicious registry entries deleted.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Prefetch files deleted
::Proxy settings cleared
::IE policies deleted
::Chrome policies deleted
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [989 B] - [2017/11/19 14:2:34]


########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

cosinus 19.11.2017 15:09
Ich brauche neue FRST-Logs . Haken setzen bei addition.txt dann auf Untersuchen klicken.

http://www.trojaner-board.de/picture...&pictureid=611

KitsuneNoir 20.11.2017 14:23
FRST

Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 19-11-2017
durchgeführt von **** (Administrator) auf ****-TOWER (20-11-2017 14:09:12)
Gestartet von C:\Users\****\Desktop
Geladene Profile: **** (Verfügbare Profile: ****)
Platform: Windows 10 Home Version 1703 15063.726 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Opera)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(CyberGhost S.A.) C:\Program Files\CyberGhost 6\CyberGhost.Service.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(CyberGhost S.A.) C:\Program Files\CyberGhost 6\CyberGhost.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
() C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11710.1001.27.0_x64__8wekyb3d8bbwe\WinStore.App.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17092.13511.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(The OpenVPN Project) C:\Program Files\CyberGhost 6\Data\OpenVPN\openvpn.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9230304 2017-11-17] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [297784 2017-10-20] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2407008 2017-09-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [1871344 2017-11-04] (Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3567928 2017-11-13] (Dropbox, Inc.)
HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3102496 2017-10-31] (Valve Corporation)
HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 6\CyberGhost.exe [1248848 2017-08-31] (CyberGhost S.A.)
HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [886768 2017-11-04] (Adobe Systems Incorporated)
HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2017-10-19] (Apple Inc.)
HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe [2382432 2017-09-20] (Adobe Systems Incorporated)
HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2407008 2017-09-20] (Adobe Systems Incorporated)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 185.156.172.178 185.93.180.131 83.143.245.42
Tcpip\..\Interfaces\{51bc1283-ec8e-46dd-8282-c0d32177a736}: [DhcpNameServer] 185.156.172.178 185.93.180.131 83.143.245.42
Tcpip\..\Interfaces\{adc6388f-771f-4569-b583-517f6dcbf4d0}: [NameServer] 185.156.172.178,185.93.180.131
Tcpip\..\Interfaces\{adc6388f-771f-4569-b583-517f6dcbf4d0}: [DhcpNameServer] 213.211.192.34 213.187.64.1

Internet Explorer:
==================
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-08-24] (Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-08-24] (Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-08-24] (Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-08-24] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-08-24] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-08-24] (Adobe Systems Incorporated)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2017-11-04]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-09-20] (Adobe Systems)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-09-20] (Adobe Systems)

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

Opera:
=======
OPR Extension: (Audio Downloader Prime) - C:\Users\****\AppData\Roaming\Opera Software\Opera Stable\Extensions\ilkcaefpbkjlblfgdgghmnaeffpflfah [2017-10-16]
OPR Extension: (Amazon Assistant for Opera) - C:\Users\****\AppData\Roaming\Opera Software\Opera Stable\Extensions\mmmbddcnnndpbdflpccgcknaaabgldak [2017-10-14]
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [817760 2017-09-20] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2257016 2017-08-23] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-10-11] (Apple Inc.)
R2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [232528 2017-08-31] (CyberGhost S.A.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-10-06] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-10-06] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [51016 2017-11-13] (Dropbox, Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-10-27] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [460736 2017-10-11] (NVIDIA Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-20] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 e1rexpress; C:\Windows\system32\DRIVERS\e1r65x64.sys [540112 2017-10-06] (Intel Corporation)
S3 ESETCleanersDriver; C:\Windows\system32\Drivers\ESETCleanersDriver.sys [170280 2017-11-17] (ESET)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-10-04] ()
R3 GeneStor; C:\Windows\system32\DRIVERS\GeneStor.sys [130648 2017-10-06] (GenesysLogic)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-10-06] (REALiX(tm))
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [192952 2017-11-07] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\DRIVERS\farflt.sys [110016 2017-11-19] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [45504 2017-11-19] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [252232 2017-11-07] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [94144 2017-11-20] (Malwarebytes)
R1 MpKsl70f093f4; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A7FCD97E-E42C-470C-8A81-2B3F23F2AD79}\MpKsl70f093f4.sys [58120 2017-11-20] (Microsoft Corporation)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_f936d37e592b25aa\nvlddmkm.sys [16936048 2017-11-17] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-10-11] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50624 2017-10-11] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57792 2017-10-11] (NVIDIA Corporation)
S3 SDFRd; C:\Windows\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-11-20 14:09 - 2017-11-20 14:09 - 000015609 _____ C:\Users\****\Desktop\FRST.txt
2017-11-20 14:08 - 2017-11-20 14:08 - 000000000 ____D C:\Users\****\Desktop\FRST-OlderVersion
2017-11-19 15:00 - 2017-11-19 15:03 - 000000000 ____D C:\AdwCleaner
2017-11-19 14:59 - 2017-11-19 14:59 - 008261584 _____ (Malwarebytes) C:\Users\****\Downloads\adwcleaner_7.0.4.0.exe
2017-11-18 22:57 - 2017-11-18 22:57 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\17226152.sys
2017-11-18 21:42 - 2017-11-18 21:42 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\1496F716.sys
2017-11-18 17:53 - 2017-11-18 22:58 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-11-18 17:53 - 2017-11-18 17:53 - 014178840 _____ (Malwarebytes Corp.) C:\Users\****\Downloads\mbar-1.10.3.1001.exe
2017-11-17 14:41 - 2017-11-17 14:41 - 000000000 ____D C:\Windows\SysWOW64\XPSViewer
2017-11-17 14:41 - 2017-11-17 14:41 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-11-17 14:41 - 2017-11-17 14:41 - 000000000 ____D C:\Program Files\MSBuild
2017-11-17 14:41 - 2017-11-17 14:41 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-11-17 14:41 - 2017-11-17 14:41 - 000000000 ____D C:\Program Files (x86)\MSBuild
2017-11-17 14:40 - 2017-02-10 11:26 - 001166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2017-11-17 14:40 - 2017-02-10 11:26 - 000124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2017-11-17 14:40 - 2017-02-10 11:26 - 000035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2017-11-17 14:40 - 2017-02-10 11:21 - 000778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll
2017-11-17 14:40 - 2017-02-10 11:21 - 000103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-11-17 14:40 - 2017-02-10 11:21 - 000035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2017-11-17 14:38 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2017-11-17 14:38 - 2010-06-02 04:55 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2017-11-17 14:38 - 2010-06-02 04:55 - 000077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2017-11-17 14:38 - 2010-05-26 11:41 - 002526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2017-11-17 14:38 - 2010-05-26 11:41 - 002401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2017-11-17 14:38 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2017-11-17 14:38 - 2010-05-26 11:41 - 000511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2017-11-17 14:38 - 2010-05-26 11:41 - 000276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2017-11-17 14:38 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2017-11-17 14:38 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2017-11-17 14:38 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2017-11-17 14:38 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2017-11-17 14:38 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2017-11-17 14:38 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2017-11-17 14:38 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2017-11-17 14:38 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2017-11-17 14:38 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2017-11-17 14:38 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2017-11-17 14:38 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2017-11-17 14:38 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2017-11-17 14:38 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2017-11-17 14:38 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2017-11-17 14:38 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2017-11-17 14:38 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2017-11-17 14:38 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2017-11-17 14:38 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2017-11-17 14:38 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2017-11-17 14:38 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2017-11-17 14:38 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2017-11-17 14:38 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2017-11-17 14:38 - 2008-10-15 06:22 - 005631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2017-11-17 14:38 - 2008-10-15 06:22 - 002605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2017-11-17 14:38 - 2008-10-15 06:22 - 000519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2017-11-17 14:38 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2017-11-17 14:38 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2017-11-17 14:38 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2017-11-17 14:38 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2017-11-17 14:38 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2017-11-17 14:38 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2017-11-17 14:38 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2017-11-17 14:38 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2017-11-17 14:38 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2017-11-17 14:38 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2017-11-17 14:38 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2017-11-17 14:38 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2017-11-17 14:38 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2017-11-17 14:38 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2017-11-17 14:38 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2017-11-17 14:38 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2017-11-17 14:38 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2017-11-17 14:38 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2017-11-17 14:38 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2017-11-17 14:38 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2017-11-17 14:38 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2017-11-17 14:38 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2017-11-17 14:38 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2017-11-17 14:38 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2017-11-17 14:38 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2017-11-17 14:38 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2017-11-17 14:38 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2017-11-17 14:38 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2017-11-17 14:38 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2017-11-17 14:38 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2017-11-17 14:38 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2017-11-17 14:38 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2017-11-17 14:38 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2017-11-17 14:38 - 2007-04-04 18:54 - 000107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2017-11-17 14:38 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2017-11-17 14:38 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2017-11-17 14:38 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2017-11-17 14:38 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2017-11-17 14:38 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2017-11-17 14:38 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2017-11-17 14:38 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2017-11-17 14:38 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2017-11-17 14:38 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2017-11-17 14:38 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2017-11-17 14:38 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2017-11-17 14:38 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2017-11-17 14:38 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2017-11-17 14:38 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2017-11-17 14:38 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2017-11-17 14:38 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2017-11-17 14:38 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2017-11-17 14:38 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2017-11-17 14:38 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2017-11-17 14:38 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2017-11-17 14:38 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2017-11-17 14:38 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2017-11-17 14:38 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2017-11-17 14:38 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2017-11-17 14:00 - 2017-11-17 14:00 - 001381582 _____ (Igor Pavlov) C:\Users\****\Downloads\7z1604-x64.exe
2017-11-17 14:00 - 2017-11-17 14:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2017-11-17 14:00 - 2017-11-17 14:00 - 000000000 ____D C:\Program Files\7-Zip
2017-11-17 13:59 - 2017-11-17 13:59 - 001533960 _____ (CHIP Digital GmbH) C:\Users\****\Downloads\7 Zip 64 Bit - CHIP-Installer.exe
2017-11-17 13:31 - 2017-11-17 13:31 - 000000000 ____D C:\Windows\pss
2017-11-17 12:52 - 2017-11-20 14:09 - 000000000 ____D C:\FRST
2017-11-17 12:51 - 2017-11-20 14:08 - 002391552 _____ (Farbar) C:\Users\****\Desktop\FRST64.exe
2017-11-17 12:14 - 2017-11-17 12:14 - 000001060 _____ C:\Users\****\Desktop\Lightroom CC.lnk
2017-11-17 12:14 - 2017-11-17 12:14 - 000001060 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom CC.lnk
2017-11-17 12:10 - 2017-11-17 12:10 - 000001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InDesign CC 2018.lnk
2017-11-17 12:06 - 2017-11-17 12:06 - 040237688 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 036239480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 035156928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 029270976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 023262280 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 019037416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 013864048 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 013254520 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 011779328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 010882720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 004201592 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 003614328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 001989056 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438813.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 001673848 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438813.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 001331200 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 001321448 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 001135464 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 001099712 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 001044848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 001038680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 001031104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 000981112 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 000932288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 000885680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 000794392 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 000739448 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 000634224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 000618928 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 000615544 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 000598464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 000505976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-11-17 12:06 - 2017-11-17 12:06 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2017-11-17 12:06 - 2017-11-17 12:06 - 000000669 _____ C:\Windows\system32\nv-vk64.json
2017-11-17 12:04 - 2017-11-17 12:04 - 000001085 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2018.lnk
2017-11-17 11:52 - 2017-11-17 11:52 - 000045496 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 072520712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2017-11-17 11:51 - 2017-11-17 11:51 - 015213680 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE3.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 012935679 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2017-11-17 11:51 - 2017-11-17 11:51 - 007172912 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 007096184 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 006264632 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64AF3.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 005346992 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 003677152 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2017-11-17 11:51 - 2017-11-17 11:51 - 003509232 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 003507688 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 003410832 _____ (DTS, Inc.) C:\Windows\system32\slcnt64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 003299816 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE2.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 003205120 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 003122656 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 003093328 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 002993720 _____ (Audyssey Labs) C:\Windows\system32\AudysseyEfx.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 002444680 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 002210272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 002190984 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 001965808 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 001959600 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64AF3.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 001780616 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 001616680 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 001591056 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 001554600 _____ (Dolby Laboratories) C:\Windows\system32\DAX3APOProp.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 001529136 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64Proxy.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 001508928 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 001435136 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 001382232 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 001347136 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 001337640 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaeapo64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 001326424 _____ (Dolby Laboratories) C:\Windows\system32\DAX3APOv251.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 001170872 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOvlldp.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 001133064 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 001016928 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDHF64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000984912 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000965024 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000877424 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SEHDHF32.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000873456 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000868176 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000866640 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000852128 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tosasfapo64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000743960 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000737960 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SECOMN32.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000727432 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000708304 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000691680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000680544 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000609392 _____ (Conexant Systems, Inc.) C:\Windows\system32\CAF64APO2.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000604792 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaemaxapo64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000532376 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000526280 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000504304 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000467152 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000447712 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000447176 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\toseaeapo64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000445392 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000441264 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000416504 _____ (Harman) C:\Windows\system32\HMUI.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000406448 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2APIPCLL.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000387312 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000381408 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000378376 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000366120 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\HMAPO.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000362048 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64AF3.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000360344 _____ (Harman) C:\Windows\system32\HMClariFi.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000343704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000341144 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000341144 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000327448 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000321712 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000321712 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000310416 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64F3.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000272712 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000258856 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000253896 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000253856 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000252872 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000231912 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000221960 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000214824 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000209528 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000203840 _____ (Harman) C:\Windows\system32\HMHVS.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000192976 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000190928 _____ (Harman) C:\Windows\system32\HMEQ_Voice.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000190928 _____ (Harman) C:\Windows\system32\HMEQ.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000179592 _____ (Harman) C:\Windows\system32\HMLimiter.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000166200 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000158696 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000154352 _____ (Harman) C:\Windows\system32\HarmanAudioInterface.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000151784 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000134192 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000122312 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000118584 _____ C:\Windows\system32\AcpiServiceVnA64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000115120 _____ (Conexant System, Inc.) C:\Windows\system32\Caf64api.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000110976 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000105304 _____ C:\Windows\system32\audioLibVc.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000090912 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000088344 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000088320 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000084608 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000083624 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000075536 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2017-11-17 11:49 - 2017-11-17 11:49 - 004143728 _____ (Sphinx Software ) C:\Users\****\Desktop\Windows10FirewallControlFree-Setup.exe
2017-11-16 01:09 - 2017-11-17 12:30 - 000170280 _____ (ESET) C:\Windows\system32\Drivers\ESETCleanersDriver.sys
2017-11-16 01:08 - 2017-11-16 01:08 - 000000000 ____D C:\Program Files\ESET
2017-11-16 00:49 - 2017-11-16 00:49 - 004256376 _____ (ESET) C:\Users\****\Desktop\836451_eset_internet_security_live_installer.exe
2017-11-16 00:41 - 2017-11-17 14:35 - 000007605 _____ C:\Users\****\AppData\Local\Resmon.ResmonCfg
2017-11-15 22:05 - 2017-11-02 06:21 - 001578904 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-11-15 22:05 - 2017-11-02 06:21 - 000678808 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-11-15 22:05 - 2017-11-02 06:21 - 000612248 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-11-15 22:05 - 2017-11-02 06:21 - 000379288 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-11-15 22:05 - 2017-11-02 06:21 - 000190360 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-11-15 22:05 - 2017-11-02 06:21 - 000136088 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-11-15 22:05 - 2017-11-02 06:20 - 002032536 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2017-11-15 22:05 - 2017-11-02 06:20 - 001144728 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2017-11-15 22:05 - 2017-11-02 06:20 - 001015704 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2017-11-15 22:05 - 2017-11-02 06:20 - 000965016 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.efi
2017-11-15 22:05 - 2017-11-02 06:20 - 000821656 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.exe
2017-11-15 22:05 - 2017-11-02 06:20 - 000613784 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-11-15 22:05 - 2017-11-02 06:20 - 000543640 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2017-11-15 22:05 - 2017-11-02 06:20 - 000484248 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll
2017-11-15 22:05 - 2017-11-02 06:20 - 000469568 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-11-15 22:05 - 2017-11-02 06:20 - 000259992 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-11-15 22:05 - 2017-11-02 06:20 - 000034712 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2017-11-15 22:05 - 2017-11-02 06:16 - 008319384 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-11-15 22:05 - 2017-11-02 06:16 - 002398696 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-11-15 22:05 - 2017-11-02 06:16 - 002327448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-11-15 22:05 - 2017-11-02 06:15 - 001239448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2017-11-15 22:05 - 2017-11-02 06:15 - 000503704 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2017-11-15 22:05 - 2017-11-02 06:14 - 000667040 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2017-11-15 22:05 - 2017-11-02 06:14 - 000067992 _____ (Microsoft Corporation) C:\Windows\system32\win32appinventorycsp.dll
2017-11-15 22:05 - 2017-11-02 06:13 - 005477088 _____ (Microsoft Corporation) C:\Windows\system32\OneCoreUAPCommonProxyStub.dll
2017-11-15 22:05 - 2017-11-02 06:13 - 002443672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-11-15 22:05 - 2017-11-02 06:13 - 001345600 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2017-11-15 22:05 - 2017-11-02 06:13 - 000546712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2017-11-15 22:05 - 2017-11-02 06:13 - 000212888 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2017-11-15 22:05 - 2017-11-02 06:13 - 000095640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2017-11-15 22:05 - 2017-11-02 06:12 - 000727336 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2017-11-15 22:05 - 2017-11-02 06:12 - 000714648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2017-11-15 22:05 - 2017-11-02 06:12 - 000654976 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2017-11-15 22:05 - 2017-11-02 06:12 - 000643192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2017-11-15 22:05 - 2017-11-02 06:12 - 000430848 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2017-11-15 22:05 - 2017-11-02 06:12 - 000412752 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2017-11-15 22:05 - 2017-11-02 06:12 - 000319384 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2017-11-15 22:05 - 2017-11-02 06:12 - 000144248 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2017-11-15 22:05 - 2017-11-02 06:12 - 000038808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2017-11-15 22:05 - 2017-11-02 06:12 - 000026472 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-11-15 22:05 - 2017-11-02 06:11 - 021353200 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-11-15 22:05 - 2017-11-02 06:10 - 006557520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2017-11-15 22:05 - 2017-11-02 06:05 - 000871408 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2017-11-15 22:05 - 2017-11-02 06:05 - 000187800 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2017-11-15 22:05 - 2017-11-02 06:04 - 001292360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2017-11-15 22:05 - 2017-11-02 06:03 - 000223640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aepic.dll
2017-11-15 22:05 - 2017-11-02 05:49 - 001838848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-11-15 22:05 - 2017-11-02 05:45 - 000703056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2017-11-15 22:05 - 2017-11-02 05:45 - 000613136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2017-11-15 22:05 - 2017-11-02 05:45 - 000362144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2017-11-15 22:05 - 2017-11-02 05:45 - 000354360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2017-11-15 22:05 - 2017-11-02 05:45 - 000283544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2017-11-15 22:05 - 2017-11-02 05:45 - 000172952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2017-11-15 22:05 - 2017-11-02 05:45 - 000133896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2017-11-15 22:05 - 2017-11-02 05:44 - 023680000 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2017-11-15 22:05 - 2017-11-02 05:44 - 005808640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2017-11-15 22:05 - 2017-11-02 05:44 - 000519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2017-11-15 22:05 - 2017-11-02 05:43 - 020372896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-11-15 22:05 - 2017-11-02 05:37 - 003668992 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2017-11-15 22:05 - 2017-11-02 05:37 - 001278976 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2017-11-15 22:05 - 2017-11-02 05:37 - 000465920 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2017-11-15 22:05 - 2017-11-02 05:37 - 000184320 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2017-11-15 22:05 - 2017-11-02 05:37 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2017-11-15 22:05 - 2017-11-02 05:36 - 000099328 _____ (Microsoft Corporation) C:\Windows\system32\utcutil.dll
2017-11-15 22:05 - 2017-11-02 05:36 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2017-11-15 22:05 - 2017-11-02 05:35 - 000228352 _____ (Microsoft Corporation) C:\Windows\system32\VPNv2CSP.dll
2017-11-15 22:05 - 2017-11-02 05:35 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-11-15 22:05 - 2017-11-02 05:35 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-11-15 22:05 - 2017-11-02 05:35 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Dumpstorport.sys
2017-11-15 22:05 - 2017-11-02 05:35 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-11-15 22:05 - 2017-11-02 05:34 - 012803072 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-11-15 22:05 - 2017-11-02 05:34 - 000438784 _____ (Microsoft Corporation) C:\Windows\system32\SharedPCCSP.dll
2017-11-15 22:05 - 2017-11-02 05:34 - 000306176 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2017-11-15 22:05 - 2017-11-02 05:34 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2017-11-15 22:05 - 2017-11-02 05:34 - 000138240 _____ (Microsoft Corporation) C:\Windows\system32\DataUsageLiveTileTask.exe
2017-11-15 22:05 - 2017-11-02 05:34 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
2017-11-15 22:05 - 2017-11-02 05:34 - 000110592 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2017-11-15 22:05 - 2017-11-02 05:34 - 000095232 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-11-15 22:05 - 2017-11-02 05:34 - 000033792 _____ (Microsoft Corporation) C:\Windows\system32\wuautoappupdate.dll
2017-11-15 22:05 - 2017-11-02 05:33 - 000529408 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2017-11-15 22:05 - 2017-11-02 05:33 - 000324608 _____ (Microsoft Corporation) C:\Windows\system32\DataUsageHandlers.dll
2017-11-15 22:05 - 2017-11-02 05:33 - 000090112 _____ (Microsoft Corporation) C:\Windows\system32\OnDemandConnRouteHelper.dll
2017-11-15 22:05 - 2017-11-02 05:33 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-11-15 22:05 - 2017-11-02 05:33 - 000061440 _____ (Microsoft Corporation) C:\Windows\system32\CertPKICmdlet.dll
2017-11-15 22:05 - 2017-11-02 05:32 - 008213504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2017-11-15 22:05 - 2017-11-02 05:32 - 000255488 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2017-11-15 22:05 - 2017-11-02 05:32 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Storage.dll
2017-11-15 22:05 - 2017-11-02 05:31 - 020512256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2017-11-15 22:05 - 2017-11-02 05:31 - 000434176 _____ (Microsoft Corporation) C:\Windows\system32\msIso.dll
2017-11-15 22:05 - 2017-11-02 05:31 - 000411648 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2017-11-15 22:05 - 2017-11-02 05:31 - 000153088 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll
2017-11-15 22:05 - 2017-11-02 05:30 - 013381120 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-11-15 22:05 - 2017-11-02 05:30 - 007339008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-11-15 22:05 - 2017-11-02 05:30 - 002953216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2017-11-15 22:05 - 2017-11-02 05:30 - 000719872 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll
2017-11-15 22:05 - 2017-11-02 05:30 - 000635392 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2017-11-15 22:05 - 2017-11-02 05:30 - 000601088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Launcher.dll
2017-11-15 22:05 - 2017-11-02 05:30 - 000407040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2017-11-15 22:05 - 2017-11-02 05:30 - 000388096 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-11-15 22:05 - 2017-11-02 05:30 - 000229888 _____ (Microsoft Corporation) C:\Windows\system32\SIHClient.exe
2017-11-15 22:05 - 2017-11-02 05:30 - 000225792 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-11-15 22:05 - 2017-11-02 05:30 - 000165888 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2017-11-15 22:05 - 2017-11-02 05:30 - 000155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2017-11-15 22:05 - 2017-11-02 05:29 - 019338240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-11-15 22:05 - 2017-11-02 05:29 - 000805888 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2017-11-15 22:05 - 2017-11-02 05:29 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2017-11-15 22:05 - 2017-11-02 05:29 - 000752640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-11-15 22:05 - 2017-11-02 05:29 - 000588800 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-11-15 22:05 - 2017-11-02 05:29 - 000415232 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2017-11-15 22:05 - 2017-11-02 05:28 - 023684096 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-11-15 22:05 - 2017-11-02 05:28 - 001468416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2017-11-15 22:05 - 2017-11-02 05:28 - 000939008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AccountsControl.dll
2017-11-15 22:05 - 2017-11-02 05:28 - 000799744 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2017-11-15 22:05 - 2017-11-02 05:28 - 000772096 _____ (Microsoft Corporation) C:\Windows\system32\PCPKsp.dll
2017-11-15 22:05 - 2017-11-02 05:28 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2017-11-15 22:05 - 2017-11-02 05:27 - 002078720 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-11-15 22:05 - 2017-11-02 05:27 - 000565248 _____ (Microsoft Corporation) C:\Windows\system32\dsreg.dll
2017-11-15 22:05 - 2017-11-02 05:27 - 000537600 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2017-11-15 22:05 - 2017-11-02 05:27 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2017-11-15 22:05 - 2017-11-02 05:27 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2017-11-15 22:05 - 2017-11-02 05:27 - 000079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2017-11-15 22:05 - 2017-11-02 05:27 - 000049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertPKICmdlet.dll
2017-11-15 22:05 - 2017-11-02 05:26 - 008197120 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2017-11-15 22:05 - 2017-11-02 05:26 - 005963776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-11-15 22:05 - 2017-11-02 05:26 - 004445696 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2017-11-15 22:05 - 2017-11-02 05:26 - 003060224 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2017-11-15 22:05 - 2017-11-02 05:26 - 002809344 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2017-11-15 22:05 - 2017-11-02 05:26 - 002671616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-11-15 22:05 - 2017-11-02 05:26 - 001937408 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2017-11-15 22:05 - 2017-11-02 05:26 - 000986624 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-11-15 22:05 - 2017-11-02 05:26 - 000755712 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-11-15 22:05 - 2017-11-02 05:26 - 000371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
2017-11-15 22:05 - 2017-11-02 05:26 - 000068608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OnDemandConnRouteHelper.dll
2017-11-15 22:05 - 2017-11-02 05:25 - 012227072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2017-11-15 22:05 - 2017-11-02 05:25 - 011888128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-11-15 22:05 - 2017-11-02 05:25 - 004727808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-11-15 22:05 - 2017-11-02 05:25 - 003377664 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-11-15 22:05 - 2017-11-02 05:25 - 003307008 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-11-15 22:05 - 2017-11-02 05:25 - 002052608 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2017-11-15 22:05 - 2017-11-02 05:25 - 001886208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2017-11-15 22:05 - 2017-11-02 05:25 - 001713664 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll
2017-11-15 22:05 - 2017-11-02 05:25 - 000972288 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2017-11-15 22:05 - 2017-11-02 05:25 - 000877568 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2017-11-15 22:05 - 2017-11-02 05:25 - 000684544 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2017-11-15 22:05 - 2017-11-02 05:25 - 000370688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2017-11-15 22:05 - 2017-11-02 05:25 - 000364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll
2017-11-15 22:05 - 2017-11-02 05:25 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-11-15 22:05 - 2017-11-02 05:24 - 007598080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2017-11-15 22:05 - 2017-11-02 05:24 - 004707840 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-11-15 22:05 - 2017-11-02 05:24 - 000506368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-11-15 22:05 - 2017-11-02 05:24 - 000463872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll
2017-11-15 22:05 - 2017-11-02 05:24 - 000444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Launcher.dll
2017-11-15 22:05 - 2017-11-02 05:24 - 000358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2017-11-15 22:05 - 2017-11-02 05:23 - 002516480 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2017-11-15 22:05 - 2017-11-02 05:23 - 002449408 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-11-15 22:05 - 2017-11-02 05:23 - 000680960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AccountsControl.dll
2017-11-15 22:05 - 2017-11-02 05:23 - 000664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-11-15 22:05 - 2017-11-02 05:23 - 000590336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PCPKsp.dll
2017-11-15 22:05 - 2017-11-02 05:23 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsreg.dll
2017-11-15 22:05 - 2017-11-02 05:23 - 000407040 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2017-11-15 22:05 - 2017-11-02 05:22 - 006254080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2017-11-15 22:05 - 2017-11-02 05:22 - 002859520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-11-15 22:05 - 2017-11-02 05:22 - 002009600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-11-15 22:05 - 2017-11-02 05:22 - 001884160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2017-11-15 22:05 - 2017-11-02 05:22 - 001494528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActiveSyncProvider.dll
2017-11-15 22:05 - 2017-11-02 05:21 - 004417024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-11-15 22:05 - 2017-11-02 05:21 - 003653120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-11-15 22:05 - 2017-11-02 05:21 - 000787456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-11-15 22:05 - 2017-11-02 05:21 - 000658432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-11-15 22:05 - 2017-11-02 05:19 - 000124928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2017-11-15 22:05 - 2017-10-25 08:40 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2017-11-15 22:05 - 2017-10-15 16:09 - 002259760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreUIComponents.dll
2017-11-15 22:05 - 2017-10-15 16:03 - 006765728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-11-15 22:05 - 2017-10-15 16:01 - 000583160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2017-11-15 22:05 - 2017-10-15 15:59 - 000923040 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2017-11-15 22:05 - 2017-10-15 15:57 - 000712600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2017-11-15 22:05 - 2017-10-15 15:57 - 000409496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-11-15 22:05 - 2017-10-15 15:56 - 000872464 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2017-11-15 22:05 - 2017-10-15 15:55 - 007910960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-11-15 22:05 - 2017-10-15 15:53 - 002969880 _____ (Microsoft Corporation) C:\Windows\system32\CoreUIComponents.dll
2017-11-15 22:05 - 2017-10-15 15:53 - 000387928 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2017-11-15 22:05 - 2017-10-15 15:51 - 000584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
2017-11-15 22:05 - 2017-10-15 15:49 - 000094616 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-11-15 22:05 - 2017-10-15 15:49 - 000025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
2017-11-15 22:05 - 2017-10-15 15:45 - 001292288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVPXENC.dll
2017-11-15 22:05 - 2017-10-15 15:45 - 001248768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2017-11-15 22:05 - 2017-10-15 15:44 - 000636416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
2017-11-15 22:05 - 2017-10-15 15:44 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cldapi.dll
2017-11-15 22:05 - 2017-10-15 15:42 - 005225984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2017-11-15 22:05 - 2017-10-15 15:42 - 003667456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-11-15 22:05 - 2017-10-15 15:41 - 004559360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2017-11-15 22:05 - 2017-10-15 15:41 - 001019904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2017-11-15 22:05 - 2017-10-15 15:38 - 000089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2017-11-15 22:05 - 2017-10-15 15:15 - 000584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2017-11-15 22:05 - 2017-10-15 15:14 - 000037376 _____ (Microsoft Corporation) C:\Windows\system32\SEMgrPS.dll
2017-11-15 22:05 - 2017-10-15 15:13 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2017-11-15 22:05 - 2017-10-15 15:10 - 001303040 _____ (Microsoft Corporation) C:\Windows\system32\MSVPXENC.dll
2017-11-15 22:05 - 2017-10-15 15:09 - 001878016 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2017-11-15 22:05 - 2017-10-15 15:09 - 000527360 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2017-11-15 22:05 - 2017-10-15 15:08 - 001260544 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2017-11-15 22:05 - 2017-10-15 15:08 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\cldapi.dll
2017-11-15 22:05 - 2017-10-15 15:07 - 000925696 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2017-11-15 22:05 - 2017-10-15 15:05 - 004396032 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-11-15 22:05 - 2017-10-15 15:05 - 001293824 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2017-11-15 22:05 - 2017-10-15 15:04 - 005557760 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2017-11-15 22:05 - 2017-10-15 15:02 - 000079360 _____ (Microsoft Corporation) C:\Windows\system32\LocationFrameworkInternalPS.dll
2017-11-15 22:05 - 2017-10-15 15:00 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll
2017-11-15 21:33 - 2017-11-15 21:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-11-13 17:31 - 2017-11-13 17:31 - 050515504 _____ C:\Users\****\Desktop\win-mg5700-1_0-mcd.exe
2017-11-13 11:26 - 2017-11-13 11:26 - 000051016 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2017-11-13 11:26 - 2017-11-13 11:26 - 000045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2017-11-13 11:26 - 2017-11-13 11:26 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2017-11-13 11:26 - 2017-11-13 11:26 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2017-11-07 17:03 - 2017-11-07 17:03 - 000000000 ____D C:\Users\****\ansel
2017-11-07 16:06 - 2017-11-20 13:24 - 000094144 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-11-07 16:06 - 2017-11-19 15:04 - 000110016 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-11-07 16:06 - 2017-11-19 15:04 - 000045504 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-11-07 16:06 - 2017-11-07 16:06 - 000252232 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2017-11-07 16:06 - 2017-11-07 16:06 - 000192952 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2017-11-07 15:31 - 2017-11-07 15:31 - 000044685 _____ C:\Users\****\Downloads\Reportb86e02e4-58e1-43c8-a027-af3e4c3a4381.pdf
2017-11-07 15:07 - 2017-11-07 15:15 - 454726676 _____ C:\Users\****\Downloads\hochaufgeloeste_texturen_grunge_aktion.zip
2017-11-04 15:36 - 2017-11-04 15:36 - 000001816 _____ C:\Users\Public\Desktop\iTunes.lnk
2017-11-04 15:36 - 2017-11-04 15:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-11-04 15:36 - 2017-11-04 15:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2017-11-04 15:36 - 2017-11-04 15:36 - 000000000 ____D C:\Program Files\iPod
2017-11-04 15:35 - 2017-11-04 15:36 - 000000000 ____D C:\Program Files\iTunes
2017-11-04 15:33 - 2017-11-04 15:33 - 000000000 ____D C:\Program Files\Bonjour
2017-11-04 15:33 - 2017-11-04 15:33 - 000000000 ____D C:\Program Files (x86)\Bonjour
2017-11-02 21:58 - 2017-11-02 21:58 - 000002520 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CC 2018.lnk
2017-11-01 19:12 - 2017-11-01 19:12 - 000000000 ____D C:\Windows\system32\MpEngineStore
2017-10-30 17:56 - 2017-10-30 17:56 - 000003551 _____ C:\Users\****\Downloads\SerialPressureRead.zip
2017-10-30 13:37 - 2017-10-30 13:37 - 000044685 _____ C:\Users\****\Downloads\Report8b6daa83-0009-47a1-adc9-a13ed8613c30.pdf
2017-10-30 00:32 - 2009-09-27 09:39 - 000415744 ___SH (The Public) C:\Windows\SysWOW64\avisynth.dll
2017-10-30 00:32 - 2005-07-14 12:31 - 000032256 ___SH C:\Windows\SysWOW64\AVSredirect.dll
2017-10-30 00:32 - 2004-02-22 10:11 - 000764416 ___SH (Abysmal Software) C:\Windows\SysWOW64\devil.dll
2017-10-30 00:32 - 2004-01-25 00:00 - 000070656 ___SH (www.helixcommunity.org) C:\Windows\SysWOW64\yv12vfw.dll
2017-10-30 00:32 - 2004-01-25 00:00 - 000070656 ___SH (www.helixcommunity.org) C:\Windows\SysWOW64\i420vfw.dll
2017-10-30 00:29 - 2017-10-30 00:29 - 000000000 ____D C:\Users\****\Documents\eRightSoft
2017-10-30 00:28 - 2017-10-30 00:28 - 000001185 _____ C:\Users\Public\Desktop\SUPER (C).lnk
2017-10-30 00:28 - 2017-10-30 00:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPER (C) - by eRightSoft
2017-10-30 00:28 - 2017-10-30 00:28 - 000000000 ____D C:\Program Files (x86)\eRightSoft
2017-10-30 00:28 - 2016-05-05 13:23 - 001085624 __RSH (1f0.de - Hendrik Leppkes) C:\Windows\SysWOW64\HLvideo.dll
2017-10-30 00:28 - 2016-05-05 13:23 - 000561336 __RSH (1f0.de - Hendrik Leppkes) C:\Windows\SysWOW64\HLsplit.dll
2017-10-30 00:28 - 2016-05-05 13:23 - 000556216 __RSH (FFmpeg Project) C:\Windows\SysWOW64\avutil-lav-55.dll
2017-10-30 00:28 - 2016-05-05 13:23 - 000537784 __RSH (FFmpeg Project) C:\Windows\SysWOW64\swscale-lav-4.dll
2017-10-30 00:28 - 2016-05-05 13:23 - 000405176 __RSH (Intel Corp.) C:\Windows\SysWOW64\IntelQuickSyncDecoder.dll
2017-10-30 00:28 - 2016-05-05 13:23 - 000276152 __RSH C:\Windows\SysWOW64\libbluray.dll
2017-10-30 00:28 - 2016-05-05 13:23 - 000263864 __RSH (1f0.de - Hendrik Leppkes) C:\Windows\SysWOW64\HLaudio.dll
2017-10-30 00:28 - 2016-05-05 13:23 - 000000493 __RSH C:\Windows\SysWOW64\LAVFilters.Dependencies.manifest
2017-10-30 00:28 - 2016-05-05 13:22 - 010766520 __RSH (FFmpeg Project) C:\Windows\SysWOW64\avcodec-lav-57.dll
2017-10-30 00:28 - 2016-05-05 13:22 - 001699000 __RSH (FFmpeg Project) C:\Windows\SysWOW64\avformat-lav-57.dll
2017-10-30 00:28 - 2016-05-05 13:22 - 000188088 __RSH (FFmpeg Project) C:\Windows\SysWOW64\avfilter-lav-6.dll
2017-10-30 00:28 - 2016-05-05 13:22 - 000160440 __RSH (FFmpeg Project) C:\Windows\SysWOW64\avresample-lav-3.dll
2017-10-30 00:28 - 2014-03-07 13:03 - 000293888 __RSH C:\Windows\SysWOW64\avcodec-lav-1321.dll
2017-10-30 00:28 - 2012-10-05 19:54 - 000188416 __RSH C:\Windows\SysWOW64\winDCE32.dll
2017-10-30 00:28 - 2012-07-11 23:00 - 000075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Olepau32.ax
2017-10-30 00:28 - 2011-06-14 20:05 - 000121344 __RSH C:\Windows\SysWOW64\TAKDSDecoder.ax
2017-10-30 00:28 - 2011-02-11 10:26 - 000112128 __RSH C:\Windows\SysWOW64\OptimFROG.dll
2017-10-30 00:28 - 2010-01-07 00:00 - 000107520 __RSH C:\Windows\SysWOW64\TAKDSDecoder.dll
2017-10-30 00:28 - 2009-08-10 23:00 - 000352768 __RSH C:\Windows\SysWOW64\ac3DX.ax
2017-10-30 00:28 - 2005-02-22 17:55 - 000081920 __RSH C:\Windows\SysWOW64\aac_parser.ax
2017-10-30 00:28 - 2004-10-10 09:50 - 000278528 _____ (Real Networks, Inc) C:\Windows\SysWOW64\pncrt.dll
2017-10-30 00:28 - 2004-07-02 17:33 - 000327749 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\drvc.dll
2017-10-30 00:28 - 2004-04-27 16:03 - 000017408 __RSH (RadLight) C:\Windows\SysWOW64\RLOFRDec.ax
2017-10-30 00:21 - 2017-10-30 00:22 - 070972438 _____ (eRightSoft ) C:\Users\****\Downloads\SUPERsetup.exe
2017-10-27 13:28 - 2017-10-27 13:28 - 000001106 _____ C:\Users\****\Desktop\Adobe Lightroom Classic CC.lnk
2017-10-27 13:28 - 2017-10-27 13:28 - 000001106 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom Classic CC.lnk
2017-10-27 10:47 - 2017-10-27 10:47 - 000000489 _____ C:\Users\****\Downloads\UTC--2017-10-27T09-47-10.951Z--b7444225c3a0678661f3c2a8088cf6ef55fbdd74
2017-10-27 00:13 - 2017-10-27 00:13 - 000039808 _____ C:\Windows\uninstaller.dat
2017-10-24 19:51 - 2017-10-24 19:51 - 000000000 ____D C:\Users\****\AppData\Roaming\Macromedia
2017-10-24 13:31 - 2017-10-24 13:35 - 000000012 _____ C:\Users\****\Desktop\index.html
2017-10-24 08:49 - 2017-10-24 08:49 - 000000323 _____ C:\Users\****\Downloads\CyberGhost - Login data.txt

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2026-05-29 09:26 - 2017-10-06 16:10 - 002235880 _____ (MAXON Computer GmbH) C:\Users\****\Downloads\MAXON-Start.exe
2017-11-20 14:02 - 2017-10-06 09:37 - 000000000 ____D C:\Windows\system32\SleepStudy
2017-11-20 13:25 - 2017-10-06 13:13 - 000000000 ____D C:\Users\****\AppData\Local\Adobe
2017-11-20 13:25 - 2017-10-06 12:29 - 000000000 ____D C:\ProgramData\NVIDIA
2017-11-20 13:25 - 2017-03-18 22:03 - 000000000 ___HD C:\Program Files\WindowsApps
2017-11-20 13:25 - 2017-03-18 22:03 - 000000000 ____D C:\Windows\AppReadiness
2017-11-19 15:11 - 2017-10-06 09:45 - 002369568 _____ C:\Windows\system32\PerfStringBackup.INI
2017-11-19 15:11 - 2017-03-20 05:35 - 001081138 _____ C:\Windows\system32\perfh007.dat
2017-11-19 15:11 - 2017-03-20 05:35 - 000242448 _____ C:\Windows\system32\perfc007.dat
2017-11-19 15:06 - 2017-10-06 13:26 - 000000000 ___RD C:\Users\****\Creative Cloud Files
2017-11-19 15:04 - 2017-10-06 09:37 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-11-19 15:03 - 2017-10-06 09:43 - 000000000 ____D C:\Users\****
2017-11-19 15:03 - 2017-03-18 12:40 - 000786432 _____ C:\Windows\system32\config\BBI
2017-11-18 21:42 - 2017-10-06 12:38 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-11-18 18:05 - 2017-03-18 22:03 - 000000000 ____D C:\Windows\rescache
2017-11-18 16:33 - 2017-10-06 13:34 - 000000000 ____D C:\Users\****\AppData\Local\CyberGhost
2017-11-17 18:00 - 2017-10-06 12:28 - 000000000 ____D C:\Program Files (x86)\Steam
2017-11-17 17:57 - 2017-10-06 17:01 - 000000000 ____D C:\Users\****\AppData\Local\Ubisoft Game Launcher
2017-11-17 15:56 - 2017-03-18 22:01 - 000000000 ____D C:\Windows\INF
2017-11-17 15:15 - 2017-10-06 14:10 - 000004562 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-11-17 15:14 - 2017-10-06 14:09 - 000002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2017-11-17 15:14 - 2017-10-06 14:09 - 000002114 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk
2017-11-17 14:44 - 2017-10-06 17:06 - 000000000 ____D C:\Users\****\Documents\My Games
2017-11-17 14:42 - 2017-03-18 21:51 - 000000000 ____D C:\Windows\CbsTemp
2017-11-17 14:41 - 2017-03-18 22:03 - 000000000 ____D C:\Windows\SysWOW64\MUI
2017-11-17 14:41 - 2017-03-18 22:03 - 000000000 ____D C:\Windows\system32\MUI
2017-11-17 14:35 - 2017-10-06 12:34 - 000000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-11-17 12:14 - 2017-10-06 13:20 - 000000000 ____D C:\Program Files\Adobe
2017-11-17 12:10 - 2017-10-06 13:20 - 000000000 ____D C:\Program Files\Common Files\Adobe
2017-11-17 12:07 - 2017-10-06 12:29 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-11-17 12:07 - 2017-10-06 12:29 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-11-17 12:06 - 2017-10-06 12:55 - 003817584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-11-17 12:06 - 2017-05-19 16:47 - 004485048 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-11-17 12:06 - 2017-05-19 13:22 - 000048442 _____ C:\Windows\system32\nvinfo.pb
2017-11-17 12:04 - 2017-10-06 13:25 - 000000000 ____D C:\Users\****\Documents\Adobe
2017-11-17 12:03 - 2017-10-06 09:44 - 000000000 ____D C:\Users\****\AppData\Roaming\Adobe
2017-11-17 11:52 - 2017-10-06 12:54 - 000000000 ____D C:\Windows\SysWOW64\RTCOM
2017-11-17 11:52 - 2017-10-06 12:54 - 000000000 ____D C:\Windows\system32\DAX3
2017-11-17 11:52 - 2017-10-06 12:54 - 000000000 ____D C:\Windows\system32\DAX2
2017-11-17 11:52 - 2017-05-19 17:03 - 001615472 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2017-11-17 11:52 - 2017-05-19 17:03 - 000225208 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-11-17 11:51 - 2017-10-06 12:53 - 005839840 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2017-11-17 11:51 - 2017-10-06 12:53 - 000023688 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2017-11-17 11:39 - 2017-10-06 12:35 - 000000000 ____D C:\ProgramData\ProductData
2017-11-17 11:31 - 2017-10-06 09:44 - 000000000 ____D C:\Users\****\AppData\Local\VirtualStore
2017-11-17 11:30 - 2017-10-06 09:44 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-11-17 11:25 - 2017-10-06 09:37 - 000510944 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-16 12:23 - 2017-03-18 22:03 - 000000000 ____D C:\Windows\system32\appraiser
2017-11-16 12:23 - 2017-03-18 22:03 - 000000000 ____D C:\Windows\ShellExperiences
2017-11-16 12:23 - 2017-03-18 22:03 - 000000000 ____D C:\Windows\Provisioning
2017-11-16 12:23 - 2017-03-18 22:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-11-16 12:23 - 2017-03-18 22:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-11-16 10:55 - 2017-10-13 21:52 - 000000033 _____ C:\Users\****\AppData\Roaming\AdobeWLCMCache.dat
2017-11-16 00:42 - 2017-10-08 17:55 - 000000000 ____D C:\Users\****\AppData\Local\CrashDumps
2017-11-15 21:54 - 2017-10-15 14:58 - 000002695 _____ C:\Users\****\Desktop\Autodesk Fusion 360.lnk
2017-11-15 21:33 - 2017-10-06 16:14 - 000000000 ____D C:\Program Files (x86)\Dropbox
2017-11-07 17:15 - 2017-10-06 15:17 - 000004308 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-11-07 17:15 - 2017-10-06 15:17 - 000004000 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-11-07 17:15 - 2017-10-06 15:17 - 000003940 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-11-07 17:15 - 2017-10-06 12:29 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2017-11-07 17:14 - 2017-10-06 15:16 - 000003894 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-11-07 17:14 - 2017-10-06 15:16 - 000003866 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-11-07 17:14 - 2017-10-06 15:16 - 000003858 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-11-07 17:14 - 2017-10-06 15:16 - 000003696 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-11-07 17:14 - 2017-10-06 15:16 - 000003654 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-11-07 15:01 - 2017-10-06 12:23 - 000003388 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1978501624-1710891274-1159157696-1001
2017-11-07 15:01 - 2017-10-06 09:46 - 000002408 _____ C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-11-07 15:01 - 2017-10-06 09:46 - 000000000 ___RD C:\Users\****\OneDrive
2017-11-05 02:40 - 2017-03-18 22:06 - 000835568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-11-05 02:40 - 2017-03-18 22:06 - 000177648 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-11-05 00:09 - 2017-10-10 12:51 - 000009806 _____ C:\Users\****\Documents\MuseLog.txt
2017-10-30 17:58 - 2017-10-09 14:28 - 000000000 ____D C:\Users\****\Documents\ArduinoData
2017-10-30 15:34 - 2017-10-10 01:50 - 000000000 ____D C:\Users\****\Documents\UNI
2017-10-27 17:36 - 2017-10-06 12:29 - 000001951 _____ C:\Windows\NvContainerRecovery.bat
2017-10-27 17:12 - 2017-10-06 12:30 - 005960824 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-10-27 17:12 - 2017-10-06 12:30 - 002587768 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2017-10-27 17:12 - 2017-10-06 12:30 - 001766520 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-10-27 17:12 - 2017-10-06 12:30 - 000607168 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2017-10-27 17:12 - 2017-10-06 12:30 - 000449656 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-10-27 17:12 - 2017-10-06 12:30 - 000123000 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-10-27 17:12 - 2017-10-06 12:30 - 000081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-10-27 09:51 - 2017-10-06 12:29 - 000003976 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1507289380
2017-10-27 09:51 - 2017-10-06 12:29 - 000001078 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2017-10-27 09:51 - 2017-10-06 12:29 - 000000000 ____D C:\Program Files\Opera
2017-10-25 11:33 - 2017-10-06 12:30 - 007802921 _____ C:\Windows\system32\nvcoproc.bin

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-10-06 13:35 - 2017-10-06 13:35 - 000003306 _____ () C:\Program Files\Common Files\csdkConfiguratorLog.txt
2017-10-13 21:52 - 2017-11-16 10:55 - 000000033 _____ () C:\Users\****\AppData\Roaming\AdobeWLCMCache.dat
2017-11-16 00:41 - 2017-11-17 14:35 - 000007605 _____ () C:\Users\****\AppData\Local\Resmon.ResmonCfg

Einige Dateien in TEMP:
====================
2017-10-13 18:18 - 2017-10-13 18:18 - 000659968 _____ () C:\Users\****\AppData\Local\Temp\key.exe
2017-10-09 14:26 - 2017-10-09 14:26 - 000804976 _____ (Spotify Ltd) C:\Users\****\AppData\Local\Temp\SpotifyMigrator.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-11-12 12:16

==================== Ende von FRST.txt ============================

KitsuneNoir 20.11.2017 14:24
Addition

Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 19-11-2017
durchgeführt von **** (20-11-2017 14:10:17)
Gestartet von C:\Users\****\Desktop
Windows 10 Home Version 1703 15063.726 (X64) (2017-10-06 08:41:22)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1978501624-1710891274-1159157696-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1978501624-1710891274-1159157696-503 - Limited - Disabled)
Gast (S-1-5-21-1978501624-1710891274-1159157696-501 - Limited - Disabled)
**** (S-1-5-21-1978501624-1710891274-1159157696-1001 - Administrator - Enabled) => C:\Users\****

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 18.009.20044 - Adobe Systems Incorporated)
Adobe After Effects CC 2018 (HKLM-x32\...\AEFT_15_0_0) (Version: 15.0.0 - Adobe Systems Incorporated)
Adobe Audition CC 2018 (HKLM-x32\...\AUDT_11_0_0) (Version: 11.0.0 - Adobe Systems Incorporated)
Adobe Bridge CC 2018 (HKLM-x32\...\KBRG_8_0) (Version: 8.0 - Adobe Systems Incorporated)
Adobe Character Animator CC (Beta) (HKLM-x32\...\ANMLBETA_1_0_6) (Version: 1.0.6 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.3.0.256 - Adobe Systems Incorporated)
Adobe Dimension CC (HKLM-x32\...\ESHR_1_0) (Version: 1.0 - Adobe Systems Incorporated)
Adobe Dreamweaver CC 2018 (HKLM-x32\...\DRWV_18_0) (Version: 18.0 - Adobe Systems Incorporated)
Adobe Fuse CC (Beta) (HKLM-x32\...\{B57067F9-E97B-46EE-94F5-179373B81A6C}) (Version: 1.0 - Adobe Systems Incorporated)
Adobe Illustrator CC 2018 (HKLM-x32\...\ILST_22_0_1) (Version: 22.0.1 - Adobe Systems Incorporated)
Adobe InDesign CC 2018 (HKLM-x32\...\IDSN_13_0_1) (Version: 13.0.1 - Adobe Systems Incorporated)
Adobe Lightroom CC (HKLM-x32\...\LRCC_1_0_1) (Version: 1.0.1 - Adobe Systems Incorporated)
Adobe Lightroom Classic CC (HKLM-x32\...\LTRM_7_0_1) (Version: 7.0.1 - Adobe Systems Incorporated)
Adobe Media Encoder CC 2018 (HKLM-x32\...\AME_12_0_0) (Version: 12.0.0 - Adobe Systems Incorporated)
Adobe Muse CC 2018 (HKLM-x32\...\MUSE_2018_0) (Version: 2018.0.0.685 - Adobe Systems Incorporated)
Adobe Photoshop CC 2018 (HKLM-x32\...\PHSP_19_0_1) (Version: 19.0.1 - Adobe Systems Incorporated)
Adobe Premiere Pro CC 2018 (HKLM-x32\...\PPRO_12_0_0) (Version: 12.0.0 - Adobe Systems Incorporated)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 384.94 - NVIDIA Corporation) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{D811A40A-9791-497C-B9DC-2D89C8E95EA1}) (Version: 6.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{8B47B514-F5D2-4E0D-B951-6E250618A7CD}) (Version: 6.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{31A0B634-BCF4-4D3F-8336-87FEACFEE142}) (Version: 11.0.1.2 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{C1BBFD2A-BCDD-45B3-8C0B-66BD434970A8}) (Version: 2.4.8.1 - Apple Inc.)
Autodesk Fusion 360 (HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\...\73e72ada57b7480280f7a6f4a289729f) (Version: 2.0.3706 - Autodesk, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CINEMA 4D Student 18.057 (HKLM\...\MAXONAF7D8B6B) (Version: 18.057 - MAXON Computer GmbH)
CPUID ROG CPU-Z 1.81 (HKLM\...\CPUID ROG CPU-Z_is1) (Version: 1.81 - CPUID, Inc.)
CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version:  - CyberGhost S.A.)
Dropbox (HKLM-x32\...\Dropbox) (Version: 39.4.49 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.65.1 - Dropbox, Inc.) Hidden
iCloud (HKLM\...\{FF99A618-BCA5-4658-B9FF-CCF57C177610}) (Version: 7.1.0.34 - Apple Inc.)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
iTunes (HKLM\...\{24607015-8D34-4AF3-9092-AC83847AE073}) (Version: 12.7.1.14 - Apple Inc.)
KeyShot 6 64 bit (HKLM-x32\...\KeyShot 6_64) (Version: 6.1 64 bit - Luxion ApS)
Malwarebytes Version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Microsoft OneDrive (HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\...\OneDriveSetup.exe) (Version: 17.3.7076.1026 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
NVIDIA GeForce Experience 3.10.0.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.10.0.95 - NVIDIA Corporation)
OpenOffice 4.1.3 (HKLM-x32\...\{8D5FCC56-BB9F-4122-923C-71753F50F6F5}) (Version: 4.13.9783 - Apache Software Foundation)
Opera Stable 48.0.2685.52 (HKLM-x32\...\Opera 48.0.2685.52) (Version: 48.0.2685.52 - Opera Software)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8198 - Realtek Semiconductor Corp.)
Samsung Data Migration (HKLM-x32\...\{D4DE3DB4-7734-47E5-8D92-B80146311406}) (Version: 2.7 - Samsung)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 5.0.0.790 - Samsung Electronics)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SUPER (C) v2017.Build.71+3D+Recorder Version released on (2017/ (HKLM-x32\...\{FF02DB05-F906-405E-B62B-1780A236C052}_is1) (Version: released on (2017/04/07), - eRightSoft)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
Uplay (HKLM-x32\...\Uplay) (Version: 4.8 - Ubisoft)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
WinRAR 5.50 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1978501624-1710891274-1159157696-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-B62F646E4967}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1978501624-1710891274-1159157696-1001_Classes\CLSID\{C4F0910E-E0B4-4E68-8086-452730C7A26A}\InprocServer32 -> C:\Users\Lucien Haase\AppData\Local\Autodesk\webdeploy\production\49d03f9fc343664d5942b9c34209b4f6b73c6c2d\NPreview10.dll ()
CustomCLSID: HKU\S-1-5-21-1978501624-1710891274-1159157696-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
ShellIconOverlayIdentifiers: [  DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
ShellIconOverlayIdentifiers-x32: [  DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [  DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems Inc.)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2017-10-19] (Apple Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-10-27] (NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {110502E8-2543-42B0-923D-74FB3FED217B} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation)
Task: {153AD673-D6F9-4973-98E4-6639F12E3C08} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation)
Task: {18DA819C-5DAF-42EB-B50D-888682AEF40F} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation)
Task: {1D676132-7803-4259-AE20-2F992FC2DCF0} - System32\Tasks\Opera scheduled Autoupdate 1507289380 => C:\Program Files\Opera\launcher.exe [2017-10-24] (Opera Software)
Task: {1F70DF01-F37D-460B-9AE3-9BA78828AA6C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated)
Task: {26E9C8B4-BC5F-4F01-A4CC-11C2582D4B30} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation)
Task: {27B3CD9D-C821-49E9-B387-2C7F40FC52B9} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11] (NVIDIA Corporation)
Task: {39914444-6F88-4885-9123-D88F57CDEB8B} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-10-11] (NVIDIA Corporation)
Task: {4182BDAA-7FEA-43C0-BCA2-C55A52510B1C} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-10-06] (Dropbox, Inc.)
Task: {4305AC41-F9A5-4940-9D60-0BE7EC19A494} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-10-06] (Dropbox, Inc.)
Task: {5B08C40B-9946-4D8E-8282-CEC6135D81C0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-07-24] (Apple Inc.)
Task: {8BF7BF62-A8AD-4369-ADE3-48AA225DB09E} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-10-11] (NVIDIA Corporation)
Task: {8EA9D990-3F15-4E23-904E-B2FA6DFB7D1C} - System32\Tasks\AdobeAAMUpdater-1.0-LUCIENS-TOWER-Lucien Haase => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
Task: {B3788123-029B-4B5A-B1F0-E401E8649846} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-10-11] (NVIDIA Corporation)
Task: {C71B610A-EE47-4CDF-8213-CD96790B09BF} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe [2017-02-22] (Samsung Electronics Co. Ltd.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2017-09-01 01:49 - 2017-09-01 01:49 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-10-18 23:51 - 2017-10-18 23:51 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2017-10-06 15:16 - 2017-10-11 02:05 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-10-06 12:38 - 2017-10-04 12:15 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2017-10-06 12:38 - 2017-10-04 12:15 - 002358728 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-03-18 21:58 - 2017-03-18 21:58 - 000138000 _____ () C:\Windows\SYSTEM32\inputhost.dll
2017-09-26 01:52 - 2017-09-26 01:52 - 000491600 _____ () C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
2017-03-18 21:59 - 2017-03-20 05:36 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-11-12 12:04 - 2017-11-12 12:05 - 000087552 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-11-12 12:04 - 2017-11-12 12:05 - 000206336 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-11-12 12:04 - 2017-11-12 12:05 - 025461760 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-11-07 15:00 - 2017-11-07 15:00 - 002552832 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\skypert.dll
2017-11-17 11:51 - 2017-11-17 11:51 - 000105304 _____ () C:\Windows\SYSTEM32\audioLibVc.dll
2017-09-26 01:52 - 2017-09-26 01:52 - 034879568 _____ () C:\Program Files (x86)\Adobe\Adobe Sync\Coresync\Coresync.exe
2017-10-06 12:47 - 2017-10-06 12:47 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11710.1001.27.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-11-11 13:05 - 2017-11-11 13:05 - 000022016 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2017-11-11 13:05 - 2017-11-11 13:05 - 055109120 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-10-06 12:46 - 2017-10-06 12:47 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll
2017-11-11 13:05 - 2017-11-11 13:06 - 000164864 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\VideoPlugin.dll
2017-10-06 12:46 - 2017-10-06 12:47 - 000675328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\IPPNativePlugin.dll
2017-11-11 13:05 - 2017-11-11 13:05 - 003740160 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll
2017-11-11 13:05 - 2017-11-11 13:06 - 002051584 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\TrackingDLLUWP.dll
2017-11-11 13:05 - 2017-11-11 13:06 - 020759040 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll
2017-11-11 13:05 - 2017-11-11 13:05 - 003607040 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2017-11-11 13:05 - 2017-11-11 13:05 - 003150848 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll
2017-10-06 12:44 - 2017-10-06 12:44 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-11-11 13:05 - 2017-11-11 13:05 - 000046080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\Microsoft.Photos.Edit.Services.dll
2017-11-11 13:05 - 2017-11-11 13:05 - 002493440 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\Microsoft.People.AutoSuggest.dll
2017-11-11 13:05 - 2017-11-11 13:05 - 000919040 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\Microsoft.People.PeoplePicker.dll
2017-11-11 13:05 - 2017-11-11 13:05 - 001363968 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2017-11-11 13:05 - 2017-11-11 13:05 - 000084480 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39091.16340.0_x64__8wekyb3d8bbwe\MediaEngineVideoDataProvider.UWP.dll
2017-10-19 00:15 - 2017-10-19 00:15 - 025741312 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17092.13511.0_x64__8wekyb3d8bbwe\Video.UI.exe
2017-10-19 00:15 - 2017-10-19 00:15 - 009257984 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17092.13511.0_x64__8wekyb3d8bbwe\EntCommon.dll
2017-10-06 12:46 - 2017-10-06 12:46 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17092.13511.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-10-19 00:15 - 2017-10-19 00:15 - 011255296 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17092.13511.0_x64__8wekyb3d8bbwe\EntPlat.dll
2017-10-06 15:16 - 2017-10-11 02:05 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-10-18 23:52 - 2017-10-18 23:52 - 001042232 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2017-09-01 01:49 - 2017-09-01 01:49 - 000080184 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2017-10-18 23:51 - 2017-10-18 23:51 - 000189752 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2017-09-20 01:42 - 2017-09-20 01:42 - 067115616 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libcef.dll
2015-03-17 00:34 - 2015-03-17 00:34 - 000010240 _____ () C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\locale\de_de\acrotray.deu
2017-11-15 21:32 - 2017-11-13 11:26 - 000725312 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll
2017-11-15 21:32 - 2017-11-13 11:26 - 002075456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_crashpad.dll
2017-11-15 21:33 - 2017-11-13 11:26 - 000100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000020800 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2017-11-15 21:33 - 2017-11-13 11:26 - 000035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000021848 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2017-11-15 21:33 - 2017-11-13 11:26 - 000130512 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 001856848 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2017-11-15 21:32 - 2017-11-13 11:26 - 000105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000040248 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000062784 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000392656 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2017-11-15 21:32 - 2017-11-13 11:26 - 000020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000392512 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000026056 _____ () C:\Program Files (x86)\Dropbox\Client\win32job.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000021824 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2017-11-15 21:33 - 2017-11-13 11:29 - 000023368 _____ () C:\Program Files (x86)\Dropbox\Client\winshell.compiled._winshell.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000066392 _____ () C:\Program Files (x86)\Dropbox\Client\winenumhandles.compiled._WinEnumHandles.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000025432 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000022856 _____ () C:\Program Files (x86)\Dropbox\Client\crashpad.compiled._Crashpad.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 001796920 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000084424 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 001956152 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 003859264 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000155464 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000521024 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000050496 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineCore.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000042304 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000131384 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000218944 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000204096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000054608 _____ () C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000100688 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000022360 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000021848 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd
2017-11-15 21:32 - 2017-11-13 11:29 - 000022360 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000027488 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-11-15 21:33 - 2017-11-13 11:26 - 000349128 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000101184 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.pyd
2017-11-15 21:33 - 2017-11-13 11:29 - 000023896 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000025424 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2017-11-15 21:32 - 2017-11-13 11:28 - 000032600 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
2017-11-15 21:32 - 2017-11-13 11:26 - 000293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
2017-11-15 21:32 - 2017-11-13 11:28 - 000181056 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2017-11-15 21:32 - 2017-11-13 11:29 - 000030536 _____ () C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000024368 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.DLL
2017-11-15 21:32 - 2017-11-13 11:28 - 001638200 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2017-11-15 21:32 - 2017-11-13 11:29 - 000026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000545080 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000359224 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2017-11-15 21:32 - 2017-11-13 11:28 - 000038208 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngine.pyd
2017-09-06 17:11 - 2017-09-06 17:11 - 000118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\fs-ext\build\Release\fs-ext.node
2017-09-06 17:11 - 2017-09-06 17:11 - 000214528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2017-09-06 17:11 - 2017-09-06 17:11 - 000117248 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ref\build\Release\binding.node
2017-09-06 17:11 - 2017-09-06 17:11 - 000125952 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ffi\build\Release\ffi_bindings.node
2017-09-20 02:04 - 2017-09-20 02:04 - 000099424 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll
2017-09-06 17:11 - 2017-09-06 17:11 - 000086528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\idle-gc\build\Release\idle-gc.node
2017-09-12 19:11 - 2017-09-12 19:11 - 000118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\fs-ext\build\Release\fs-ext.node
2017-09-12 19:10 - 2017-09-12 19:10 - 000117760 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ref\build\Release\binding.node
2017-09-12 19:11 - 2017-09-12 19:11 - 000125440 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ffi\build\Release\ffi_bindings.node
2017-09-12 19:11 - 2017-09-12 19:11 - 000214528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2017-09-20 01:59 - 2017-09-20 01:59 - 000099424 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll
2017-09-12 19:11 - 2017-09-12 19:11 - 000098816 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\bufferutil\build\Release\bufferutil.node
2017-09-12 19:11 - 2017-09-12 19:11 - 000086528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\idle-gc\build\Release\idle-gc.node
2017-10-06 15:17 - 2017-10-11 02:05 - 070805952 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2017-10-06 13:33 - 2017-08-31 14:53 - 000174448 _____ () C:\Program Files\CyberGhost 6\Data\OpenVPN\liblzo2-2.dll
2017-10-06 13:33 - 2017-08-31 14:53 - 000115168 _____ () C:\Program Files\CyberGhost 6\Data\OpenVPN\libpkcs11-helper-1.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2017-03-18 22:03 - 2017-03-18 22:01 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
DNS Servers: 185.156.172.178 - 185.93.180.131
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKU\S-1-5-21-1978501624-1710891274-1159157696-1001\...\StartupApproved\Run: => "Steam"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{A6CE385D-3A22-4128-A32A-51B7D814BBA7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{0C560597-C41E-4327-B27D-3AF7DA50A4E8}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{01CC0500-31FA-43EA-A86B-97DC9AD3C961}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{F550628D-468F-44E8-8F57-39FCAF010FA9}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{FDDEEFDE-70BE-4A6C-A50D-27C3808432D5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Driver Booster 4\DriverBooster.exe
FirewallRules: [{B86E69BB-1399-41EA-B473-59D64A964DF0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Driver Booster 4\DriverBooster.exe
FirewallRules: [{EAC1B77A-5154-43F1-AC94-D607EA5728C3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{6011D4C6-610D-4CE5-95AF-5CA68234ED2F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{365470CE-CF46-4BBD-B97D-336A4C27D2D1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{2DF2B84C-54ED-4F7D-9514-3688CCC4FE5B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{09780168-8914-4330-975B-006A47B89FFB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{A86147B0-0BC0-497F-B679-752A7C5E26B2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 4\bin\FarCry4.exe
FirewallRules: [TCP Query User{EFD286A1-ED22-41EB-B79C-FA77B218AEDE}C:\users\****\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\****\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{0E5FED4C-596C-4021-982A-A61F825BB752}C:\users\****\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\****\appdata\roaming\spotify\spotify.exe
FirewallRules: [{EDB6FE24-0DD2-47F1-9762-D76837AF71AA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{60D4EB6A-6715-4B36-A947-F29BA539043D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [TCP Query User{A2BF5244-A969-4F87-8BCE-0E2B0DADF546}C:\users\****\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\****\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{04AFFB63-D9FC-48BB-8984-705C7150DE4D}C:\users\****\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\**** haase\appdata\roaming\spotify\spotify.exe
FirewallRules: [{3AF5D0A6-DC1E-40D5-B88E-BDD67D3BF5DF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Thief\Binaries\Win64\Shipping-ThiefGame.exe
FirewallRules: [{3CB61292-2EB7-428C-9A39-EC9BF3879F5F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Thief\Binaries\Win64\Shipping-ThiefGame.exe
FirewallRules: [{5E02DFE0-DCD2-47AD-A0E7-DB36838C1656}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Deus Ex Human Revolution Director's Cut\DXHRDC.exe
FirewallRules: [{0E2395AF-3B62-4DB6-9369-DF4E05299D1F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Deus Ex Human Revolution Director's Cut\DXHRDC.exe
FirewallRules: [TCP Query User{9E7D87B3-3375-418A-8C32-2691406D8726}C:\program files\windowsapps\arduinollc.arduinoide_1.8.10.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Allow) C:\program files\windowsapps\arduinollc.arduinoide_1.8.10.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe
FirewallRules: [UDP Query User{5D931468-ED3C-45FB-B62E-0D1BB39C4454}C:\program files\windowsapps\arduinollc.arduinoide_1.8.10.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Allow) C:\program files\windowsapps\arduinollc.arduinoide_1.8.10.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe
FirewallRules: [{B8F09A2D-A105-4C5D-80DD-83F331C64BD5}] => (Block) C:\program files\windowsapps\arduinollc.arduinoide_1.8.10.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe
FirewallRules: [{F9AC496F-A384-4ABD-B14A-6FC8E91E29F1}] => (Block) C:\program files\windowsapps\arduinollc.arduinoide_1.8.10.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe
FirewallRules: [{92634A9B-D86F-4222-ADB4-999C998E0CDD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{36C992F5-69AA-4D73-BB58-A822131A0FEF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [TCP Query User{555E1387-4A8C-4E6E-B20D-5C940CBAF2B6}C:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe
FirewallRules: [UDP Query User{A6977937-45B3-40AD-B326-34846E085D82}C:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe
FirewallRules: [{48E914A4-1086-483E-A5E7-72222C09410C}] => (Block) C:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe
FirewallRules: [{63F4FE6C-1EA3-4611-BAC9-B091CDB631A1}] => (Block) C:\program files (x86)\steam\steamapps\common\far cry 3\bin\farcry3_d3d11.exe
FirewallRules: [TCP Query User{7DB0ABF2-D8B7-482B-93B6-3D47851253F6}C:\program files\adobe\adobe muse cc 2017\muse.exe] => (Allow) C:\program files\adobe\adobe muse cc 2017\muse.exe
FirewallRules: [UDP Query User{70218547-4564-4008-853D-4DDCDC355361}C:\program files\adobe\adobe muse cc 2017\muse.exe] => (Allow) C:\program files\adobe\adobe muse cc 2017\muse.exe
FirewallRules: [{EA9476A3-C391-4114-BCAF-3888E86D29A1}] => (Allow) C:\Program Files\KeyShot6\bin\keyshot6.exe
FirewallRules: [{3690A608-7A2C-494C-8ACC-AA30A2772A67}] => (Allow) C:\Program Files\KeyShot6\bin\keyshot_daemon.exe
FirewallRules: [TCP Query User{BBCD9D67-4E64-4644-B3F2-952CC17238C5}C:\program files\adobe\adobe muse cc 2018\muse.exe] => (Allow) C:\program files\adobe\adobe muse cc 2018\muse.exe
FirewallRules: [UDP Query User{1D9FA944-6603-45B6-A556-A5E8BB41A357}C:\program files\adobe\adobe muse cc 2018\muse.exe] => (Allow) C:\program files\adobe\adobe muse cc 2018\muse.exe
FirewallRules: [TCP Query User{3C06C5CC-0520-40B2-9306-9A836BF53F21}C:\program files\adobe\adobe dreamweaver cc 2018\node\node.exe] => (Allow) C:\program files\adobe\adobe dreamweaver cc 2018\node\node.exe
FirewallRules: [UDP Query User{A6F818C6-3C13-44CA-B849-C13E555A4C59}C:\program files\adobe\adobe dreamweaver cc 2018\node\node.exe] => (Allow) C:\program files\adobe\adobe dreamweaver cc 2018\node\node.exe
FirewallRules: [{AA5DAFD0-CBF7-4F2E-A708-9F0600550742}] => (Allow) C:\Program Files\Opera\48.0.2685.50\opera.exe
FirewallRules: [{B2E76613-1930-4B09-BAA9-066682C61E03}] => (Allow) C:\Program Files\Opera\48.0.2685.52\opera.exe
FirewallRules: [{19E3846F-B5E7-41D8-A4A0-3114A0A1EDA8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{5194D4D7-00B3-4C0C-8063-E351175DB672}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{67A213FF-7E9C-4B6E-AE65-D384EB88280D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{11DDCF8B-1B52-49CC-A0D0-5D3DEAD979FA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{6E45FC92-E9EF-47B4-AEEB-1041438C008C}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{0D87E2F1-A593-49FC-BE1E-231176B15119}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{37FFB200-3B86-40E0-AF98-9A25FA8EE2BB}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{8AD59250-8CA1-4CE6-BB32-43A4DBD9116C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{8BAC36E0-33E2-4A38-BFF0-F7A9D07590B4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{913CB956-568D-4EF5-B72B-FF3D9CE111D8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{E245ADA4-F64C-4795-B113-D25C05835B7C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{CF5764E9-5B66-4DA1-A756-562B065EA04A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{B2C97E42-E36B-4DED-B13C-EF6E76AFCCF0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{954E9302-38DF-41B8-B1E5-CE2ACB6362E9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{E1A9ED35-2EE7-431E-809B-89AF4DE5DEFC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{8501A2C1-6558-4B50-A808-5E79B50A2FE6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe
FirewallRules: [{8C3A88D3-2DA5-4CFD-9F11-ED00617EBA40}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.67.582.0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe
FirewallRules: [{7A7DD6C6-17F8-4A4C-91C0-358DC429BC40}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{2E9614AE-E4ED-4244-94B5-B1C4B34B7532}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Watch_Dogs\bin\watch_dogs.exe

==================== Wiederherstellungspunkte =========================

20-11-2017 13:34:51 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/17/2017 05:49:44 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1531

Error: (11/17/2017 05:49:44 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1531

Error: (11/17/2017 05:49:44 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/17/2017 12:26:48 PM) (Source: MsiInstaller) (EventID: 11406) (User: ****-TOWER)
Description: Product: ESET Security -- Fehler 1406. Wert ProductACode konnte nicht an den Schlüssel \Software\ESET\ESET Security\CurrentVersion\Info geschrieben werden.  Systemfehler . Überprüfen Sie, ob Sie über ausreichende Zugriffsrechte für den Schlüssel verfügen oder wenden Sie sich an den Support.

Error: (11/16/2017 10:52:43 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 12728265

Error: (11/16/2017 10:52:43 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 12728265

Error: (11/16/2017 10:52:43 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/16/2017 07:20:36 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1515

Error: (11/16/2017 07:20:36 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1515

Error: (11/16/2017 07:20:36 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


Systemfehler:
=============
Error: (11/20/2017 02:02:14 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (11/19/2017 04:33:15 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (11/19/2017 04:13:17 PM) (Source: volsnap) (EventID: 36) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.

Error: (11/19/2017 03:04:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet:
Die Anforderung wird nicht unterstützt.

Error: (11/19/2017 03:03:24 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "CyberGhost 6 Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/19/2017 03:03:24 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "NVIDIA Telemetry Container" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/19/2017 03:03:24 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "AdobeUpdateService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/19/2017 03:03:24 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "NVIDIA LocalSystem Container" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 6000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/19/2017 03:03:24 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "DbxSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/19/2017 03:03:24 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Adobe Genuine Software Integrity Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2017-11-20 14:08:54.574
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-11-20 14:08:54.571
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-11-20 13:32:19.081
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-11-20 13:32:19.078
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-11-19 15:16:37.405
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-11-19 15:16:37.401
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-11-19 00:57:11.407
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-11-19 00:57:11.385
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-11-19 00:57:11.244
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2017-11-19 00:57:11.221
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll because the set of per-page image hashes could not be found on the system.


==================== Speicherinformationen ===========================

Prozessor: AMD FX(tm)-8300 Eight-Core Processor
Prozentuale Nutzung des RAM: 19%
Installierter physikalischer RAM: 16281.69 MB
Verfügbarer physikalischer RAM: 13099.26 MB
Summe virtueller Speicher: 18713.69 MB
Verfügbarer virtueller Speicher: 14550.03 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:930.85 GB) (Free:645.53 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 6383F380)

Partition: GPT.

==================== Ende von Addition.txt ============================

cosinus 20.11.2017 21:18
Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte:


1. Schritt: Malwarebytes Version 3

Downloade Dir bitte Malwarebytes Anti-Malware 3
  • Installiere das Programm in den vorgegebenen Pfad.
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scan, wähle den Bedrohungs-Scan aus und klicke auf Scan starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Ausgewählte Elemente in die Quarantäne verschieben.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM nach dem Neustart, klicke auf Berichte.
  • Wähle den neuesten Scan-Bericht aus, klicke auf Bericht anzeigen und dann auf Export.
  • Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.



2. Schritt: ESET

Downloade Dir bitte ESET Online Scanner (Bebilderte Anleitung)
  • Starte die Installationsdatei.
  • Akzeptiere die Nutzungsbedingungen.
  • Wähle Erkennung evtl. unerwünschter Anwendungen aktivieren aus und klicke auf Scannen.
  • Zuerst werden die notwendigen Signaturen heruntergeladen, anschließend startet ESET automatisch den Suchlauf.
  • Am Ende des Suchlaufs werden gegebenenfalls die gefundenen Elemente aufgelistet.
  • Schließe den ESET Online Scanner rechts oben [ X ] und klicke anschließend auf Schließen.
  • Drücke bitte die Tastenkombination WIN+R zum Ausführen und kopiere folgenden Text in die Zeile und drücke im Anschluss auf OK:
    Code:
    notepad "%tmp%\log.txt"
  • Kopiere den gesamten Text mittels STRG+A und STRG+C hier in deine Antwort in CODE-Tags



3. Schritt: SecurityCheck

Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.


Alle Zeitangaben in WEZ +1. Es ist jetzt 23:36 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131