Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Windows 7 - Browser befallen (https://www.trojaner-board.de/188213-windows-7-browser-befallen.html)

Leyhja 23.01.2018 15:08
Windows 7 - Browser befallen
 
Hallo zusammen,

seit einiger Zeit werde ich von lästiger Werbung und die Umleitung auf unerwünschte Websites gequält. Letzteres passiert immer dann, wenn ich auf einer Website einen Link klicke (oder zum Teil auch nur irgendwo auf die Website selbst). Erst nach einigen Versuchen lässt sich so irgenwann der eigentlich erwünschte Link öffnen.

Anbei der Log von Malwarebytes.

Grüße :)

Code:
# AdwCleaner 7.0.7.0 - Logfile created on Tue Jan 23 13:57:00 2018
# Updated on 2018/18/01 by Malwarebytes
# Database: 01-16-2018.1
# Running on Windows 7 Professional (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

Adware.NetUtils, C:\Windows\SysNative\NetUtils2016.dll
Adware.NetUtils, C:\Windows\SysNative\drivers\NetUtils2016.sys


***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.HDWallPaper, [Key] - HKLM\SOFTWARE\HDWallpaper


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [2921 B] - [2018/1/8 13:12:12]
C:/AdwCleaner/AdwCleaner[C1].txt - [1355 B] - [2018/1/8 13:16:54]
C:/AdwCleaner/AdwCleaner[C2].txt - [1483 B] - [2018/1/8 13:26:52]
C:/AdwCleaner/AdwCleaner[C3].txt - [1681 B] - [2018/1/8 20:5:50]
C:/AdwCleaner/AdwCleaner[C4].txt - [1821 B] - [2018/1/10 21:57:19]
C:/AdwCleaner/AdwCleaner[C5].txt - [1956 B] - [2018/1/16 12:16:8]
C:/AdwCleaner/AdwCleaner[C6].txt - [2090 B] - [2018/1/23 13:10:24]
C:/AdwCleaner/AdwCleaner[S0].txt - [2850 B] - [2018/1/8 13:11:19]
C:/AdwCleaner/AdwCleaner[S1].txt - [1206 B] - [2018/1/8 13:16:25]
C:/AdwCleaner/AdwCleaner[S2].txt - [1315 B] - [2018/1/8 13:25:23]
C:/AdwCleaner/AdwCleaner[S3].txt - [1449 B] - [2018/1/8 19:4:4]
C:/AdwCleaner/AdwCleaner[S4].txt - [1514 B] - [2018/1/8 20:5:30]
C:/AdwCleaner/AdwCleaner[S5].txt - [1671 B] - [2018/1/10 21:56:51]
C:/AdwCleaner/AdwCleaner[S6].txt - [1807 B] - [2018/1/16 12:9:28]
C:/AdwCleaner/AdwCleaner[S7].txt - [1941 B] - [2018/1/23 13:7:13]
C:/AdwCleaner/AdwCleaner[S8].txt - [2076 B] - [2018/1/23 13:37:21]


########## EOF - C:\AdwCleaner\AdwCleaner[S9].txt ##########

cosinus 23.01.2018 15:10
Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)




Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Leyhja 23.01.2018 15:16
Hallo Cosinus,

FRST:


FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 21.01.2018
Ran by Leyh (administrator) on LEYH-PC (23-01-2018 15:12:35)
Running from C:\Users\Leyh\Desktop
Loaded Profiles: Leyh (Available Profiles: Leyh)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Mega Limited) C:\Users\Leyh\AppData\Local\MEGAsync\MEGAsync.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Opera Software) C:\Program Files\Opera\50.0.2762.67\opera.exe
(Opera Software) C:\Program Files\Opera\50.0.2762.67\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\50.0.2762.67\opera.exe
(Opera Software) C:\Program Files\Opera\50.0.2762.67\opera.exe
(Opera Software) C:\Program Files\Opera\50.0.2762.67\opera.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [246120 2018-01-05] (AVAST Software)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18384352 2017-07-10] (Realtek Semiconductor)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2885199775-3860845558-3182105547-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9856176 2017-09-20] (Piriform Ltd)
HKU\S-1-5-21-2885199775-3860845558-3182105547-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3111712 2017-12-15] (Valve Corporation)
Startup: C:\Users\Leyh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2018-01-11]
ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\Leyh\AppData\Local\Facebook\Games\FacebookGameroom.exe (Facebook)
Startup: C:\Users\Leyh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2017-09-20]
ShortcutTarget: MEGAsync.lnk -> C:\Users\Leyh\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{FA451255-95C9-4B43-9293-E076C2356AB2}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.apusx.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.apusx.com
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-11-22] (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-11-22] (AVAST Software)

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

Chrome:
=======
CHR HomePage: Default -> hxxps://encrypted.google.com
CHR StartupUrls: Default -> "hxxps://encrypted.google.com"
CHR Profile: C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default [2018-01-23]
CHR Extension: (Präsentationen) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]
CHR Extension: (Docs) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
CHR Extension: (Google Drive) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-31]
CHR Extension: (YouTube) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-31]
CHR Extension: (Adblock Plus) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-12-09]
CHR Extension: (Tabellen) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]
CHR Extension: (Google Docs Offline) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-31]
CHR Extension: (AdBlock) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-12-06]
CHR Extension: (Avast Online Security) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-10-13]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-21]
CHR Extension: (Google Mail) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-31]
CHR Extension: (Chrome Media Router) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-14]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lobonlhedgiilkfmbbbfhkaoefacipgj] - hxxps://clients2.google.com/service/update2/crx

Opera:
=======
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7538536 2018-01-05] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [301168 2018-01-05] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6971400 2017-12-10] ()
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [382504 2017-08-31] (EasyAntiCheat Ltd)
S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-09-20] (Hi-Rez Studios) [File not signed]
R2 LDrvSvc; C:\Program Files (x86)\OSTotoSoft\DriverTalent\LDrvSvc.dll [186544 2017-10-17] ()
R2 LHelperSvc; C:\Program Files (x86)\OSTotoSoft\ConquerorLive\LHelperSvc.dll [161968 2017-10-23] ()
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [7962384 2017-04-09] (INCA Internet Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518264 2017-11-13] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518264 2017-11-13] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2123104 2017-11-26] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3002728 2017-11-26] (Electronic Arts)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2017-12-18] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [185096 2018-01-05] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [321512 2018-01-05] (AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [199448 2018-01-05] (AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [343768 2018-01-05] (AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [57696 2018-01-05] (AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [149344 2018-01-05] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46976 2018-01-05] (AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [146648 2018-01-10] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110336 2018-01-05] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [84384 2018-01-05] (AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1025176 2018-01-05] (AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [457896 2018-01-10] (AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [204456 2018-01-05] (AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [358672 2018-01-05] (AVAST Software)
R1 NetUtils2016; C:\Windows\system32\drivers\NetUtils2016.sys [914920 2018-01-23] () <==== ATTENTION
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50808 2017-10-11] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57976 2017-10-11] (NVIDIA Corporation)
S3 cpuz136; \??\C:\Users\Leyh\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X] <==== ATTENTION
S3 NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-01-23 15:12 - 2018-01-23 15:12 - 000012114 _____ C:\Users\Leyh\Desktop\FRST.txt
2018-01-23 15:12 - 2018-01-23 15:12 - 000000000 ____D C:\FRST
2018-01-23 15:11 - 2018-01-23 15:11 - 002393088 _____ (Farbar) C:\Users\Leyh\Desktop\FRST64.exe
2018-01-23 14:12 - 2018-01-23 14:12 - 000000000 ____D C:\ProgramData\SWCUTemp
2018-01-23 14:05 - 2018-01-23 14:05 - 008206624 _____ (Malwarebytes) C:\Users\Leyh\Desktop\adwcleaner_7.0.7.0.exe
2018-01-23 13:49 - 2018-01-23 13:49 - 000304857 _____ C:\Users\Leyh\Downloads\HijackThis_205.zip
2018-01-23 13:45 - 2018-01-23 13:45 - 009503936 _____ (Symantec Corporation) C:\Users\Leyh\Desktop\NPE (1).exe
2018-01-18 16:08 - 2018-01-18 16:08 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\ParadoxInteractive
2018-01-18 01:18 - 2018-01-18 01:18 - 000000000 ____D C:\Users\Leyh\Documents\BnS
2018-01-18 00:17 - 2018-01-18 00:17 - 000002234 _____ C:\Users\Public\Desktop\Blade & Soul.lnk
2018-01-18 00:17 - 2018-01-18 00:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSOFT
2018-01-18 00:14 - 2018-01-18 00:14 - 000000000 ____D C:\Program Files (x86)\AGEIA Technologies
2018-01-18 00:11 - 2018-01-18 00:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCWest
2018-01-18 00:11 - 2018-01-18 00:11 - 000000000 ____D C:\Program Files (x86)\NCWest
2018-01-18 00:10 - 2018-01-18 00:11 - 227200840 _____ (NC Interactive, LLC) C:\Users\Leyh\Downloads\BnS_Lite_Installer.exe
2018-01-11 17:07 - 2018-01-13 19:08 - 000000000 ____D C:\Program Files (x86)\AeriaGames
2018-01-10 23:28 - 2018-01-10 23:28 - 000012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2018-01-10 23:02 - 2018-01-23 14:42 - 000003018 _____ C:\Windows\System32\Tasks\MSIAfterburner
2018-01-10 13:41 - 2018-01-10 13:41 - 000001918 _____ C:\Users\Leyh\Desktop\Minion.lnk
2018-01-10 13:32 - 2018-01-15 16:43 - 000000000 ____D C:\Users\Leyh\.junique
2018-01-10 13:32 - 2018-01-10 13:34 - 000000000 ____D C:\Users\Leyh\.minion
2018-01-10 13:32 - 2018-01-10 13:32 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\gg.minion.Minion
2018-01-10 13:32 - 2018-01-10 13:32 - 000000000 ____D C:\Users\Leyh\.oracle_jre_usage
2018-01-10 13:31 - 2018-01-10 13:31 - 000000608 _____ C:\Users\Leyh\Documents\Minion.lnk
2018-01-10 13:31 - 2018-01-10 13:31 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Good Game Mods LLC
2018-01-10 13:31 - 2018-01-10 13:31 - 000000000 ____D C:\Users\Leyh\AppData\Local\Minion
2018-01-09 11:39 - 2018-01-09 11:39 - 005293056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2018-01-09 11:39 - 2018-01-01 03:21 - 005581544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-01-09 11:39 - 2018-01-01 03:21 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2018-01-09 11:39 - 2018-01-01 03:19 - 001665384 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-01-09 11:39 - 2018-01-01 03:18 - 014183936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2018-01-09 11:39 - 2018-01-01 03:18 - 002066432 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2018-01-09 11:39 - 2018-01-01 03:18 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-01-09 11:39 - 2018-01-01 03:18 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-01-09 11:39 - 2018-01-01 02:54 - 004013800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-01-09 11:39 - 2018-01-01 02:54 - 003959016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-01-09 11:39 - 2017-12-29 19:39 - 020274688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-01-09 11:39 - 2017-12-29 19:09 - 002294272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-01-09 11:39 - 2017-12-29 19:03 - 000662528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-01-09 11:39 - 2017-12-29 18:45 - 004508160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-01-09 11:39 - 2017-12-29 18:38 - 013680128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-01-09 11:39 - 2017-12-29 18:19 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-01-09 11:39 - 2017-12-29 18:15 - 001313792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-01-09 11:39 - 2017-12-29 10:15 - 025737728 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-01-09 11:39 - 2017-12-29 09:52 - 002900480 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-01-09 11:39 - 2017-12-29 09:51 - 005796352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-01-09 11:39 - 2017-12-29 09:32 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2018-01-09 11:39 - 2017-12-29 09:04 - 015284224 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-01-09 11:39 - 2017-12-29 08:50 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-01-09 11:39 - 2017-12-29 08:39 - 001545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-01-09 11:39 - 2017-12-29 08:27 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-01-09 11:38 - 2018-01-01 03:21 - 000948968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2018-01-09 11:38 - 2018-01-01 03:21 - 000708328 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-01-09 11:38 - 2018-01-01 03:21 - 000288488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2018-01-09 11:38 - 2018-01-01 03:21 - 000262376 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-01-09 11:38 - 2018-01-01 03:21 - 000213736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2018-01-09 11:38 - 2018-01-01 03:21 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-01-09 11:38 - 2018-01-01 03:21 - 000114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2018-01-09 11:38 - 2018-01-01 03:21 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-01-09 11:38 - 2018-01-01 03:18 - 002004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 001942016 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 001867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 001741312 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 001361408 _____ (Microsoft Corporation) C:\Windows\system32\PeerDistSvc.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 001110528 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000977408 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000961024 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000863232 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2018-01-09 11:38 - 2018-01-01 03:18 - 000842752 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000828928 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000705024 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2018-01-09 11:38 - 2018-01-01 03:18 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000473600 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000444928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000439296 _____ (Microsoft Corporation) C:\Windows\system32\p2psvc.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000366592 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2018-01-09 11:38 - 2018-01-01 03:18 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000264704 _____ (Microsoft Corporation) C:\Windows\system32\P2P.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000223232 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000181760 _____ (Microsoft Corporation) C:\Windows\system32\PeerDist.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000131584 _____ (Microsoft Corporation) C:\Windows\system32\PeerDistWSDDiscoProv.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000120320 _____ (Microsoft Corporation) C:\Windows\system32\WcnApi.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\icfupgd.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000101376 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000095744 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\ndptsp.tsp
2018-01-09 11:38 - 2018-01-01 03:18 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000053760 _____ (Microsoft Corporation) C:\Windows\system32\vmicres.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000051200 _____ (Microsoft Corporation) C:\Windows\system32\PeerDistHttpTrans.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\kmddsp.tsp
2018-01-09 11:38 - 2018-01-01 03:18 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\rasmxs.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000039424 _____ (Microsoft Corporation) C:\Windows\system32\traffic.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\rasser.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\WcnEapPeerProxy.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\WcnEapAuthProxy.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\wfapigp.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\wshqos.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wshnetbs.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2018-01-09 11:38 - 2018-01-01 03:13 - 000631680 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-01-09 11:38 - 2018-01-01 03:04 - 000559616 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2018-01-09 11:38 - 2018-01-01 03:02 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 012880384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 001390080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000463360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000304640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskcomp.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000217600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\P2P.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2018-01-09 11:38 - 2018-01-01 03:00 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PeerDist.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWCN.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ndptsp.tsp
2018-01-09 11:38 - 2018-01-01 03:00 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\traffic.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 001806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:55 - 000131584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys
2018-01-09 11:38 - 2018-01-01 02:55 - 000088576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2018-01-09 11:38 - 2018-01-01 02:55 - 000058368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2018-01-09 11:38 - 2018-01-01 02:55 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbios.sys
2018-01-09 11:38 - 2018-01-01 02:55 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndistapi.sys
2018-01-09 11:38 - 2018-01-01 02:54 - 000077312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2018-01-09 11:38 - 2018-01-01 02:50 - 000455680 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2018-01-09 11:38 - 2018-01-01 02:49 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-01-09 11:38 - 2018-01-01 02:49 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-01-09 11:38 - 2018-01-01 02:49 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-01-09 11:38 - 2018-01-01 02:49 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-01-09 11:38 - 2018-01-01 02:47 - 000244224 _____ (Microsoft Corporation) C:\Windows\system32\vmicsvc.exe
2018-01-09 11:38 - 2018-01-01 02:46 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-01-09 11:38 - 2018-01-01 02:46 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\IcCoinstall.dll
2018-01-09 11:38 - 2018-01-01 02:46 - 000051712 _____ (Microsoft Corporation) C:\Windows\system32\vmictimeprovider.dll
2018-01-09 11:38 - 2018-01-01 02:45 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-01-09 11:38 - 2018-01-01 02:43 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnApi.dll
2018-01-09 11:38 - 2018-01-01 02:43 - 000038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp
2018-01-09 11:38 - 2018-01-01 02:43 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll
2018-01-09 11:38 - 2018-01-01 02:43 - 000022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll
2018-01-09 11:38 - 2018-01-01 02:43 - 000020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnEapPeerProxy.dll
2018-01-09 11:38 - 2018-01-01 02:43 - 000019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnEapAuthProxy.dll
2018-01-09 11:38 - 2018-01-01 02:43 - 000018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfapigp.dll
2018-01-09 11:38 - 2018-01-01 02:43 - 000013824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshqos.dll
2018-01-09 11:38 - 2018-01-01 02:42 - 000460288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2018-01-09 11:38 - 2018-01-01 02:42 - 000406016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2018-01-09 11:38 - 2018-01-01 02:42 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2018-01-09 11:38 - 2018-01-01 02:42 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-01-09 11:38 - 2018-01-01 02:41 - 000754176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2018-01-09 11:38 - 2018-01-01 02:41 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-01-09 11:38 - 2018-01-01 02:41 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-01-09 11:38 - 2018-01-01 02:41 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-01-09 11:38 - 2018-01-01 02:41 - 000106496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2018-01-09 11:38 - 2018-01-01 02:41 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-01-09 11:38 - 2018-01-01 02:41 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2018-01-09 11:38 - 2018-01-01 02:39 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-01-09 11:38 - 2018-01-01 02:36 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-01-09 11:38 - 2018-01-01 02:36 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-01-09 11:38 - 2018-01-01 02:36 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-01-09 11:38 - 2018-01-01 02:36 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-01-09 11:38 - 2018-01-01 02:35 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-01-09 11:38 - 2018-01-01 02:35 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:35 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:35 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:35 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-01-09 11:38 - 2017-12-30 08:29 - 000395968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-01-09 11:38 - 2017-12-30 07:42 - 000347328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-01-09 11:38 - 2017-12-29 19:24 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2018-01-09 11:38 - 2017-12-29 19:13 - 000499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-01-09 11:38 - 2017-12-29 19:13 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2018-01-09 11:38 - 2017-12-29 19:12 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2018-01-09 11:38 - 2017-12-29 19:12 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2018-01-09 11:38 - 2017-12-29 19:11 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2018-01-09 11:38 - 2017-12-29 19:06 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2018-01-09 11:38 - 2017-12-29 19:06 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2018-01-09 11:38 - 2017-12-29 19:04 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2018-01-09 11:38 - 2017-12-29 19:03 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-01-09 11:38 - 2017-12-29 19:03 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2018-01-09 11:38 - 2017-12-29 18:55 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2018-01-09 11:38 - 2017-12-29 18:51 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2018-01-09 11:38 - 2017-12-29 18:50 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2018-01-09 11:38 - 2017-12-29 18:50 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2018-01-09 11:38 - 2017-12-29 18:47 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2018-01-09 11:38 - 2017-12-29 18:47 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2018-01-09 11:38 - 2017-12-29 18:46 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2018-01-09 11:38 - 2017-12-29 18:44 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2018-01-09 11:38 - 2017-12-29 18:39 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-01-09 11:38 - 2017-12-29 18:38 - 000694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-01-09 11:38 - 2017-12-29 18:37 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-01-09 11:38 - 2017-12-29 18:36 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2018-01-09 11:38 - 2017-12-29 18:13 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-01-09 11:38 - 2017-12-29 10:04 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2018-01-09 11:38 - 2017-12-29 10:04 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2018-01-09 11:38 - 2017-12-29 09:51 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2018-01-09 11:38 - 2017-12-29 09:50 - 000577024 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-01-09 11:38 - 2017-12-29 09:50 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-01-09 11:38 - 2017-12-29 09:50 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2018-01-09 11:38 - 2017-12-29 09:50 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-01-09 11:38 - 2017-12-29 09:44 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2018-01-09 11:38 - 2017-12-29 09:43 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2018-01-09 11:38 - 2017-12-29 09:40 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-01-09 11:38 - 2017-12-29 09:39 - 000817152 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-01-09 11:38 - 2017-12-29 09:39 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-01-09 11:38 - 2017-12-29 09:39 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2018-01-09 11:38 - 2017-12-29 09:39 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-01-09 11:38 - 2017-12-29 09:28 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-01-09 11:38 - 2017-12-29 09:22 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2018-01-09 11:38 - 2017-12-29 09:22 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-01-09 11:38 - 2017-12-29 09:21 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-01-09 11:38 - 2017-12-29 09:18 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-01-09 11:38 - 2017-12-29 09:18 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2018-01-09 11:38 - 2017-12-29 09:16 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-01-09 11:38 - 2017-12-29 09:14 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2018-01-09 11:38 - 2017-12-29 09:05 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-01-09 11:38 - 2017-12-29 09:03 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-01-09 11:38 - 2017-12-29 09:03 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-01-09 11:38 - 2017-12-29 09:01 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-01-09 11:38 - 2017-12-29 09:01 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2018-01-09 11:38 - 2017-12-21 07:27 - 000634312 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2018-01-09 11:38 - 2017-12-13 17:31 - 000383720 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2018-01-09 11:38 - 2017-12-13 17:27 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-01-09 11:38 - 2017-12-13 17:27 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2018-01-09 11:38 - 2017-12-13 17:27 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2018-01-09 11:38 - 2017-12-13 17:27 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2018-01-09 11:38 - 2017-12-13 17:15 - 000309480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2018-01-09 11:38 - 2017-12-13 17:11 - 000071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2018-01-09 11:38 - 2017-12-13 17:11 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2018-01-09 11:38 - 2017-12-13 17:11 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2018-01-09 11:38 - 2017-12-13 16:50 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2018-01-09 11:38 - 2017-12-05 18:36 - 000625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2018-01-09 11:38 - 2017-12-05 18:36 - 000250880 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
2018-01-09 11:38 - 2017-12-05 18:36 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll
2018-01-09 11:38 - 2017-12-05 18:08 - 000481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2018-01-09 11:38 - 2017-12-05 18:08 - 000215040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll
2018-01-09 11:38 - 2017-12-05 16:59 - 003222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-01-09 11:38 - 2017-12-05 16:49 - 000032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcsPlugInService.dll
2018-01-08 20:28 - 2018-01-08 20:28 - 000002250 _____ C:\Users\Leyh\Desktop\Rkill.txt
2018-01-08 18:31 - 2018-01-08 18:31 - 000001909 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2018-01-08 18:31 - 2018-01-08 18:31 - 000000000 ____D C:\Program Files\HitmanPro
2018-01-08 18:30 - 2018-01-10 23:28 - 000000000 ____D C:\ProgramData\HitmanPro
2018-01-08 18:28 - 2018-01-08 18:28 - 001540104 _____ (CHIP Digital GmbH) C:\Users\Leyh\Downloads\Hitman Pro - CHIP-Installer.exe
2018-01-08 14:10 - 2018-01-23 14:57 - 000000000 ____D C:\AdwCleaner
2018-01-06 14:18 - 2018-01-23 13:40 - 000003832 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1515244685
2018-01-06 14:18 - 2018-01-06 14:18 - 000001097 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera Browser.lnk
2018-01-06 14:18 - 2018-01-06 14:18 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\Opera Software
2018-01-06 14:18 - 2018-01-06 14:18 - 000000000 ____D C:\Users\Leyh\AppData\Local\Opera Software
2018-01-06 14:17 - 2018-01-23 13:41 - 000000000 ____D C:\Program Files\Opera
2018-01-05 23:23 - 2018-01-05 23:23 - 000000000 ___DL C:\Users\Leyh\AppData\LocalLow\PlayReady
2018-01-05 23:22 - 2018-01-05 23:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2018-01-05 23:21 - 2018-01-05 23:21 - 000000000 ____D C:\Program Files\Microsoft Silverlight
2018-01-05 23:21 - 2018-01-05 23:21 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2018-01-05 20:37 - 2018-01-05 20:38 - 000000000 ____D C:\NPE
2018-01-05 12:25 - 2018-01-05 12:25 - 000365680 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2018-01-05 12:25 - 2018-01-05 12:24 - 000149344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2018-01-05 12:12 - 2018-01-23 14:11 - 000624664 _____ C:\Windows\system32\NetUtils2016.dll
2018-01-05 12:12 - 2018-01-23 14:10 - 000914920 _____ C:\Windows\system32\Drivers\NetUtils2016.sys
2018-01-05 12:12 - 2018-01-05 12:12 - 000000000 ____D C:\Windows\system32\sstmp
2018-01-03 14:48 - 2018-01-03 14:48 - 000000000 ____D C:\Users\Leyh\AppData\LocalLow\Prideful Sloth
2018-01-02 01:05 - 2018-01-06 23:59 - 000000000 ____D C:\Users\Leyh\Documents\Klei
2018-01-02 01:05 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2018-01-02 01:05 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2018-01-02 01:05 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2018-01-02 01:05 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2018-01-02 01:05 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2018-01-02 01:05 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2018-01-02 01:05 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2018-01-02 01:05 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2018-01-02 01:05 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2018-01-02 01:05 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2018-01-02 01:05 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2018-01-02 01:05 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2018-01-02 01:05 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2018-01-02 01:05 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2018-01-02 01:05 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2018-01-02 01:04 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2018-01-02 01:04 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2018-01-02 01:04 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2018-01-02 01:04 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2018-01-02 01:04 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2018-01-02 01:04 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2018-01-02 01:04 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2018-01-02 01:04 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2018-01-02 01:04 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2018-01-02 01:04 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2018-01-02 01:04 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2018-01-02 01:04 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2018-01-02 01:04 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2018-01-02 01:04 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2018-01-02 01:04 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2018-01-02 01:04 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2018-01-02 01:04 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2018-01-02 01:04 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2018-01-02 01:04 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2018-01-02 01:04 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2018-01-02 01:04 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2018-01-02 01:04 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2018-01-02 01:04 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2018-01-02 01:04 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2018-01-02 01:04 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2018-01-02 01:04 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2018-01-02 01:04 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2018-01-02 01:04 - 2008-10-15 06:22 - 005631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2018-01-02 01:04 - 2008-10-15 06:22 - 004379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2018-01-02 01:04 - 2008-10-15 06:22 - 002605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2018-01-02 01:04 - 2008-10-15 06:22 - 002036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2018-01-02 01:04 - 2008-10-15 06:22 - 000519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2018-01-02 01:04 - 2008-10-15 06:22 - 000452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2018-01-02 01:04 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2018-01-02 01:04 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2018-01-02 01:04 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2018-01-02 01:04 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2018-01-02 01:04 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2018-01-02 01:04 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2018-01-02 01:04 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2018-01-02 01:04 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2018-01-02 01:04 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2018-01-02 01:04 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2018-01-02 01:04 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2018-01-02 01:04 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2018-01-02 01:04 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2018-01-02 01:04 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2018-01-02 01:04 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2018-01-02 01:04 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2018-01-02 01:04 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2018-01-02 01:04 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2018-01-02 01:04 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2018-01-02 01:04 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2018-01-02 01:04 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2018-01-02 01:04 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2018-01-02 01:04 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2018-01-02 01:04 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2018-01-02 01:04 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2018-01-02 01:04 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2018-01-02 01:04 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2018-01-02 01:04 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2018-01-02 01:04 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2018-01-02 01:04 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2018-01-02 01:04 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2018-01-02 01:04 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2018-01-02 01:04 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2018-01-02 01:04 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2018-01-02 01:04 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2018-01-02 01:04 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2018-01-02 01:04 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2018-01-02 01:04 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2018-01-02 01:04 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2018-01-02 01:04 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2018-01-02 01:04 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2018-01-02 01:04 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2018-01-02 01:04 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2018-01-02 01:04 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2018-01-02 01:04 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2018-01-02 01:04 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2018-01-02 01:04 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2018-01-02 01:04 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2018-01-02 01:04 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2018-01-02 01:04 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2018-01-02 01:04 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2018-01-02 01:04 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2018-01-02 01:04 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2018-01-02 01:04 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2018-01-02 01:04 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2018-01-02 01:04 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2018-01-02 01:04 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2018-01-02 01:04 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2018-01-02 01:04 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2018-01-02 01:04 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2018-01-02 01:04 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2018-01-02 01:04 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2018-01-02 01:04 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2018-01-02 01:04 - 2007-04-04 18:54 - 000107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2018-01-02 01:04 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2018-01-02 01:04 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2018-01-02 01:04 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2018-01-02 01:04 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2018-01-02 01:04 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2018-01-02 01:04 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2018-01-02 01:04 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2018-01-02 01:04 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2018-01-02 01:04 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2018-01-02 01:04 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2018-01-02 01:04 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2018-01-02 01:04 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2018-01-02 01:04 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2018-01-02 01:04 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2018-01-02 01:04 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2018-01-02 01:04 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2018-01-02 01:04 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2018-01-02 01:04 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2018-01-02 01:04 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2018-01-02 01:04 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2018-01-02 01:04 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2018-01-02 01:04 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2018-01-02 01:04 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2018-01-02 01:04 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2018-01-02 01:04 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2018-01-02 01:04 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2018-01-02 01:04 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2018-01-02 01:04 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2018-01-02 01:04 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2018-01-02 01:04 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2018-01-02 01:04 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2018-01-02 01:04 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2018-01-02 01:04 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2018-01-02 01:04 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2018-01-02 01:04 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2018-01-02 01:04 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2018-01-02 01:04 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2018-01-02 01:04 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2018-01-02 01:04 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2018-01-02 01:04 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2018-01-02 01:04 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2018-01-02 01:04 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2018-01-02 01:04 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2018-01-02 01:04 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2018-01-02 01:04 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2018-01-02 01:04 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2018-01-01 22:47 - 2018-01-01 22:47 - 000000000 ____D C:\Users\Leyh\AppData\LocalLow\Hinterland
2018-01-01 22:47 - 2018-01-01 22:47 - 000000000 ____D C:\Users\Leyh\AppData\Local\Hinterland
2018-01-01 15:11 - 2018-01-01 15:11 - 000002196 _____ C:\Users\Leyh\AppData\Roaming\Microsoft\Windows\Start Menu\RummyClub.lnk
2018-01-01 14:35 - 2018-01-11 12:29 - 000001164 _____ C:\Users\Leyh\Desktop\Facebook Gameroom.lnk
2018-01-01 14:35 - 2018-01-11 12:29 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook
2018-01-01 14:35 - 2018-01-11 12:29 - 000000000 ____D C:\Users\Leyh\AppData\Local\Facebook

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-01-23 15:12 - 2017-07-31 22:32 - 000000000 ____D C:\Users\Leyh\AppData\Local\CrashDumps
2018-01-23 14:42 - 2017-11-12 22:52 - 000000000 ____D C:\Program Files (x86)\MSI Afterburner
2018-01-23 14:20 - 2009-07-14 05:45 - 000021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-01-23 14:20 - 2009-07-14 05:45 - 000021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-01-23 14:13 - 2017-07-31 20:07 - 000000000 ____D C:\Program Files (x86)\Steam
2018-01-23 14:11 - 2017-10-26 15:31 - 000000000 ____D C:\ProgramData\NVIDIA
2018-01-23 14:11 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-01-23 13:50 - 2017-07-31 19:55 - 000000000 ____D C:\Users\Leyh\AppData\Local\VirtualStore
2018-01-23 13:48 - 2017-12-07 17:06 - 000000000 ____D C:\Users\Leyh\AppData\Local\NPE
2018-01-23 13:01 - 2017-08-04 22:03 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2018-01-22 20:32 - 2017-12-22 14:41 - 000004324 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-01-22 20:32 - 2017-10-08 13:53 - 000002786 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2018-01-22 20:32 - 2017-10-06 12:29 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
2018-01-22 20:32 - 2017-07-31 20:15 - 000003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-22 20:32 - 2017-07-31 20:15 - 000003798 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-22 20:32 - 2017-07-31 20:14 - 000004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-22 20:32 - 2017-07-31 20:14 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-22 20:32 - 2017-07-31 20:14 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-22 20:32 - 2017-07-31 20:14 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-22 20:32 - 2017-07-31 20:14 - 000003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-22 20:32 - 2017-07-31 20:14 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-21 21:57 - 2017-07-31 20:57 - 000000000 ____D C:\Users\Leyh\AppData\Local\Warframe
2018-01-21 21:34 - 2017-09-23 15:35 - 000000000 ____D C:\Users\Leyh\AppData\Local\Battle.net
2018-01-21 20:45 - 2017-11-24 20:51 - 000000000 ____D C:\Program Files (x86)\World of Warcraft
2018-01-21 16:27 - 2017-09-23 15:35 - 000000000 ____D C:\Program Files (x86)\Blizzard App
2018-01-21 14:34 - 2009-07-14 06:08 - 000032584 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2018-01-20 00:00 - 2017-08-01 09:50 - 000773912 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-01-20 00:00 - 2009-07-14 06:13 - 000773912 _____ C:\Windows\system32\PerfStringBackup.INI
2018-01-20 00:00 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2018-01-19 11:46 - 2017-09-20 12:12 - 000000000 ____D C:\Users\Leyh\AppData\Local\MEGAsync
2018-01-18 21:59 - 2017-08-03 10:15 - 000000000 ____D C:\Program Files (x86)\Black Desert Online
2018-01-18 21:52 - 2017-08-03 10:15 - 000000000 ____D C:\Users\Leyh\AppData\Local\BlackDesertOnline
2018-01-18 01:15 - 2017-08-02 17:37 - 000000000 ____D C:\Users\Leyh\Documents\ArcheAge
2018-01-18 00:17 - 2017-08-26 09:31 - 000000000 ____D C:\Program Files (x86)\NCSOFT
2018-01-18 00:17 - 2017-07-31 20:25 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2018-01-16 13:24 - 2017-07-31 20:33 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\TS3Client
2018-01-16 12:26 - 2017-08-02 10:00 - 000004172 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2018-01-14 16:47 - 2017-09-23 23:01 - 000000000 ____D C:\Users\Leyh\AppData\Local\Jagex
2018-01-14 16:47 - 2017-09-23 23:01 - 000000000 ____D C:\ProgramData\Jagex
2018-01-14 16:45 - 2017-07-31 21:56 - 000000286 _____ C:\Users\Leyh\Desktop\New Text Document.txt
2018-01-11 17:38 - 2017-07-31 20:14 - 000000000 ____D C:\ProgramData\Package Cache
2018-01-11 14:01 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\rescache
2018-01-11 12:05 - 2017-08-01 09:44 - 000000000 ____D C:\Windows\system32\MRT
2018-01-11 12:03 - 2017-10-11 23:38 - 129365736 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-01-11 12:03 - 2017-08-01 09:43 - 129365736 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-01-10 23:28 - 2017-12-01 11:03 - 000000000 ____D C:\ProgramData\{A7FB8CB9-0BE2-4c79-BB9C-01F657A649CA}
2018-01-10 23:07 - 2017-08-02 10:00 - 000457896 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2018-01-10 23:07 - 2017-08-02 10:00 - 000146648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2018-01-10 13:32 - 2017-07-31 19:54 - 000000000 ____D C:\Users\Leyh
2018-01-10 11:58 - 2009-07-14 05:45 - 000269128 _____ C:\Windows\system32\FNTCACHE.DAT
2018-01-09 16:04 - 2017-08-02 14:10 - 000002158 _____ C:\Users\Leyh\Desktop\Discord.lnk
2018-01-09 16:04 - 2017-08-02 14:09 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\discord
2018-01-09 16:04 - 2017-08-02 14:09 - 000000000 ____D C:\Users\Leyh\AppData\Local\Discord
2018-01-09 11:39 - 2017-12-22 14:41 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-01-09 11:39 - 2017-12-22 14:41 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-01-09 11:39 - 2017-12-22 14:41 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-01-09 11:39 - 2017-12-22 14:41 - 000000000 ____D C:\Windows\system32\Macromed
2018-01-08 22:03 - 2017-08-21 17:35 - 000000000 ____D C:\ProgramData\WinZip
2018-01-08 22:02 - 2017-12-03 13:15 - 000000000 ____D C:\Program Files (x86)\SpeedFan
2018-01-08 21:55 - 2017-11-26 11:25 - 000000000 ____D C:\ProgramData\Origin
2018-01-08 21:54 - 2017-12-14 19:50 - 000000000 ____D C:\Program Files (x86)\Popcorn Time
2018-01-08 21:54 - 2017-11-26 11:29 - 000000000 ____D C:\Program Files (x86)\Origin
2018-01-08 21:54 - 2017-11-26 11:25 - 000000000 ____D C:\Users\Leyh\AppData\Local\Origin
2018-01-08 21:54 - 2017-11-12 22:53 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server
2018-01-08 21:54 - 2017-09-19 21:52 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazing Eternals
2018-01-08 21:53 - 2017-11-12 22:52 - 000000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2018-01-08 21:53 - 2017-08-26 09:14 - 000000000 ____D C:\Program Files (x86)\NC Launcher
2018-01-08 21:53 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\registration
2018-01-08 20:01 - 2017-10-27 07:23 - 000000000 ____D C:\Windows\system32\appmgmt
2018-01-08 14:23 - 2017-12-03 15:47 - 000000000 ____D C:\Windows\pss
2018-01-06 14:26 - 2017-07-31 19:58 - 000000000 ____D C:\Program Files (x86)\Google
2018-01-05 20:48 - 2017-07-31 19:58 - 000000000 ____D C:\Users\Leyh\AppData\Local\Deployment
2018-01-05 13:10 - 2017-10-25 15:29 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-01-05 12:25 - 2017-11-22 12:59 - 000185096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2018-01-05 12:25 - 2017-08-02 10:00 - 000358672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2018-01-05 12:25 - 2017-08-02 10:00 - 000204456 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2018-01-05 12:25 - 2017-08-02 10:00 - 000110336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2018-01-05 12:25 - 2017-08-02 10:00 - 000084384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2018-01-05 12:25 - 2017-08-02 10:00 - 000046976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2018-01-05 12:24 - 2017-08-02 10:00 - 001025176 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2018-01-05 12:24 - 2017-08-02 10:00 - 000343768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbloga.sys
2018-01-05 12:24 - 2017-08-02 10:00 - 000321512 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2018-01-05 12:24 - 2017-08-02 10:00 - 000199448 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsha.sys
2018-01-05 12:24 - 2017-08-02 10:00 - 000057696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniva.sys
2018-01-05 12:12 - 2017-09-26 10:10 - 000000000 ____D C:\ProgramData\PlugCache
2017-12-28 12:27 - 2017-10-25 15:30 - 000000971 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
2017-12-28 12:27 - 2017-10-25 15:30 - 000000959 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk
2017-12-24 15:10 - 2017-09-24 20:53 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\StardewValley
2017-12-24 14:18 - 2017-08-02 18:18 - 000000909 _____ C:\Users\Leyh\Desktop\nativelog.txt
2017-12-24 14:18 - 2017-08-01 20:45 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\.minecraft
2017-12-24 14:18 - 2017-08-01 20:44 - 000000000 ____D C:\Program Files (x86)\Minecraft

Some files in TEMP:
====================
2018-01-18 21:59 - 2018-01-18 21:59 - 000000180 _____ () C:\Users\Leyh\AppData\Local\Temp\6699d3ee8dd9cf775caae782c8f44f03.dll
2018-01-18 21:59 - 2018-01-18 21:59 - 000000036 _____ () C:\Users\Leyh\AppData\Local\Temp\b24519be62b276ef5eb6448fdcb03b05.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-01-18 02:23

==================== End of FRST.txt ============================
--- --- ---

--- --- ---

Leyhja 23.01.2018 15:16
Und die Addition nach dem Scan:

Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21.01.2018
Ran by Leyh (23-01-2018 15:13:23)
Running from C:\Users\Leyh\Desktop
Windows 7 Professional Service Pack 1 (X64) (2017-07-31 18:54:52)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2885199775-3860845558-3182105547-500 - Administrator - Disabled)
Guest (S-1-5-21-2885199775-3860845558-3182105547-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2885199775-3860845558-3182105547-1002 - Limited - Enabled)
Leyh (S-1-5-21-2885199775-3860845558-3182105547-1001 - Administrator - Enabled) => C:\Users\Leyh

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Adobe Flash Player 28 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 28.0.0.137 - Adobe Systems Incorporated)
Amazing Eternals (HKLM-x32\...\{BA712A27-6EAD-49CF-B011-7CC1AA0F1A2E}) (Version: 1.0.0 - Digital Extremes)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 388.00 - NVIDIA Corporation) Hidden
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.9.2322 - AVAST Software)
Black Desert Online (HKLM-x32\...\{C1F96C92-7B8C-485F-A9CD-37A0708A2A60}) (Version: 1.0.0.7 - Kakao Games Europe B.V.)
Blade & Soul (HKLM-x32\...\{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.260 - NC Interactive, LLC) Hidden
Blade & Soul (HKLM-x32\...\InstallShield_{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.260 - NC Interactive, LLC)
Blizzard App (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 5.35 - Piriform)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Discord (HKU\S-1-5-21-2885199775-3860845558-3182105547-1001\...\Discord) (Version: 0.0.300 - Discord Inc.)
Driver Talent (HKLM-x32\...\{29FE44D7-BC89-4188-8B0E-F6BA073C15A5}_is1) (Version: 6.5.53.158 - OSToto Co., Ltd.)
Epic Games Launcher (HKLM-x32\...\{67E2C47C-F3B7-41E8-B615-1CE5B4E329AB}) (Version: 1.1.129.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Facebook Gameroom 1.12.6582.35661 (HKLM-x32\...\{64FAFFD8-8056-48D3-95DB-6EE6F3D286C4}) (Version: 1.12.6582.35661 - Facebook)
Guild Wars 2 (HKLM\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)
Gyazo 3.3.2 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version:  - Nota Inc.)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.1.6.3 - Hi-Rez Studios)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.20.286 - SurfRight B.V.)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\{B2777235-FDF0-4371-9D1E-0CD24DFE3579}) (Version: 4.2.1 - Riot Games) Hidden
League of Legends (HKLM-x32\...\League of Legends 4.2.1) (Version: 4.2.1 - Riot Games)
MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{56F27690-F6EA-3356-980A-02BA379506EE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Minion (HKU\S-1-5-21-2885199775-3860845558-3182105547-1001\...\{Minion}}_is1) (Version: 3.0 - Good Game Mods LLC)
MSI Afterburner 4.4.0 (HKLM-x32\...\Afterburner) (Version: 4.4.0 - MSI Co., LTD)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
NC Launcher (HKLM-x32\...\NCLauncherS_plaync) (Version:  - NCSOFT)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version:  - NCSOFT)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.63.14 - Black Tree Gaming)
NVIDIA Graphics Driver 388.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.31 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.35.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.35.1 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{E10DB5DA-E576-40EA-A7FC-1CB2A7B283A6}) (Version: 9.09.1112 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Opera Stable 50.0.2762.67 (HKLM-x32\...\Opera 50.0.2762.67) (Version: 50.0.2762.67 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.5.6.6235 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
Popcorn Time (HKLM-x32\...\Popcorn Time_is1) (Version: 5.7.2.0 - Popcorn Time) <==== ATTENTION
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8210 - Realtek Semiconductor Corp.)
RivaTuner Statistics Server 7.0.0 (HKLM-x32\...\RTSS) (Version: 7.0.0 - Unwinder)
RuneScape Launcher 2.2.4 (HKLM\...\RuneScape Launcher_is1) (Version: 2.2.4 - Jagex Ltd)
Speccy (HKLM\...\Speccy) (Version: 1.31 - Piriform)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.5 - TeamSpeak Systems GmbH)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.90922 - TeamViewer)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 2.6.3.0 - Zenimax Online Studios)
Twitch (HKU\S-1-5-21-2885199775-3860845558-3182105547-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 7.0.0.0 - Twitch Interactive, Inc.)
Uplay (HKLM-x32\...\Uplay) (Version: 29.0 - Ubisoft)
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-01-05] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-01-05] (AVAST Software)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-01-05] (AVAST Software)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-11-14] (NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-01-05] (AVAST Software)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0EAEAFBF-9DC8-4440-AC7B-2CE698338218} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe
Task: {11B929B2-3398-4C6E-A234-511A3E4F4ACE} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe
Task: {2F08A57E-7627-417A-A4B5-C63DE0873654} - System32\Tasks\Opera scheduled Autoupdate 1515244685 => C:\Program Files\Opera\launcher.exe [2018-01-22] (Opera Software)
Task: {2F419DD7-0937-4579-A2D4-64D9F698CBA8} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2017-05-16] ()
Task: {38D43B28-D9F4-4908-B208-8C64D1B38CA5} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2017-05-16] ()
Task: {3AE66E1B-2069-483F-9022-1EC667FE2AD6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-01-09] (Adobe Systems Incorporated)
Task: {3FED2CD4-9F55-42FC-91DA-34F9A53F1675} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe
Task: {5F4988E5-C796-402F-9F4C-355E5C8103ED} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-09-20] (Piriform Ltd)
Task: {67B7F1E6-26EB-4451-AA6A-0C3E4E30DBCB} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
Task: {6EC265AC-5D2C-4CCD-8DAE-B9D5B64EF9CD} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-10-11] (NVIDIA Corporation)
Task: {71C0CC53-1B88-41BD-987E-13AB11A0A318} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2018-01-06] (AVAST Software)
Task: {752AFC8D-706A-43F7-8788-BF832E94B5CB} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-01-05] (AVAST Software)
Task: {96575A0D-6131-41B7-AC29-FA99FCCE94DB} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
Task: {B83F8A7F-10C3-4EFC-A32F-8C14EA70F256} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-11-13] (NVIDIA Corporation)
Task: {DF4A667F-FC50-4A52-8DCA-8A4B38E35D08} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe
Task: {E847C5EA-F0F6-460E-969B-593767D574E3} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-2885199775-3860845558-3182105547-1001 => C:\Users\Leyh\AppData\Local\MEGAsync\MEGAupdater.exe [2018-01-19] (Mega Limited)
Task: {FAC298B3-D821-4AFD-88A1-654644CB3C65} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2017-10-31] ()

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2018-01-05 12:12 - 2018-01-23 14:11 - 000624664 _____ () C:\Windows\System32\NetUtils2016.dll
2017-06-07 21:09 - 2017-11-18 15:00 - 000598528 _____ () C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll
2017-09-07 17:12 - 2017-09-07 17:12 - 000069632 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2018-01-05 12:24 - 2018-01-05 12:24 - 000067920 _____ () c:\Program Files\AVAST Software\Avast\x64\module_lifetime.dll
2018-01-05 12:24 - 2018-01-05 12:24 - 000067984 _____ () C:\Program Files\AVAST Software\Avast\x64\dll_loader.dll
2018-01-05 12:24 - 2018-01-05 12:24 - 000236840 _____ () c:\Program Files\AVAST Software\Avast\x64\vaarclient.dll
2018-01-05 12:24 - 2018-01-05 12:24 - 000902824 _____ () C:\Program Files\AVAST Software\Avast\x64\ffl2.dll
2018-01-05 12:24 - 2018-01-05 12:24 - 000349568 _____ () c:\Program Files\AVAST Software\Avast\x64\StreamBack.dll
2018-01-23 13:40 - 2018-01-22 07:02 - 096448600 _____ () C:\Program Files\Opera\50.0.2762.67\opera_browser.dll
2018-01-23 13:40 - 2018-01-22 07:02 - 004207704 _____ () C:\Program Files\Opera\50.0.2762.67\libglesv2.dll
2018-01-23 13:40 - 2018-01-22 07:02 - 000100440 _____ () C:\Program Files\Opera\50.0.2762.67\libegl.dll
2018-01-05 12:24 - 2018-01-05 12:24 - 000058016 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll
2018-01-05 12:24 - 2018-01-05 12:24 - 000057504 _____ () C:\Program Files\AVAST Software\Avast\dll_loader.dll
2018-01-05 12:24 - 2018-01-05 12:24 - 000206152 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2018-01-05 12:24 - 2018-01-05 12:24 - 000289272 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2018-01-05 12:24 - 2018-01-05 12:24 - 000196248 _____ () C:\Program Files\AVAST Software\Avast\network_notifications.dll
2018-01-22 19:01 - 2018-01-22 19:01 - 005779600 _____ () C:\Program Files\AVAST Software\Avast\defs\18012204\algo.dll
2018-01-05 12:24 - 2018-01-05 12:24 - 000745408 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2018-01-05 12:24 - 2018-01-05 12:24 - 000148936 _____ () C:\Program Files\AVAST Software\Avast\hns_tools.dll
2018-01-23 14:12 - 2018-01-23 14:12 - 005779600 _____ () C:\Program Files\AVAST Software\Avast\defs\18012302\algo.dll
2018-01-05 12:24 - 2018-01-05 12:24 - 000293944 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2017-07-31 20:08 - 2017-11-29 06:09 - 000781088 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2017-07-31 20:08 - 2016-09-01 02:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2017-07-31 20:08 - 2016-09-01 02:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2017-07-31 20:08 - 2016-09-01 02:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2017-07-31 20:08 - 2017-12-15 20:59 - 002558752 _____ () C:\Program Files (x86)\Steam\video.dll
2017-12-15 08:14 - 2017-11-04 02:54 - 005137696 _____ () C:\Program Files (x86)\Steam\libavcodec-57.dll
2017-12-15 08:14 - 2017-11-04 02:54 - 000847136 _____ () C:\Program Files (x86)\Steam\libavutil-55.dll
2017-12-15 08:14 - 2017-11-04 02:54 - 000695584 _____ () C:\Program Files (x86)\Steam\libavformat-57.dll
2017-12-15 08:14 - 2017-11-04 02:54 - 000351520 _____ () C:\Program Files (x86)\Steam\libavresample-3.dll
2017-12-15 08:14 - 2017-11-04 02:54 - 000783648 _____ () C:\Program Files (x86)\Steam\libswscale-4.dll
2017-07-31 20:08 - 2017-12-15 20:59 - 000904992 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2017-07-31 20:08 - 2016-07-04 23:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-04-13 09:38 - 2017-11-18 14:59 - 000798208 _____ () C:\Users\Leyh\AppData\Local\MEGAsync\libsodium.dll
2017-07-31 20:18 - 2017-10-17 02:21 - 000186544 _____ () c:\program files (x86)\ostotosoft\drivertalent\ldrvsvc.dll
2017-07-31 20:18 - 2017-10-17 02:21 - 000263344 _____ () c:\program files (x86)\ostotosoft\drivertalent\updater\checkupdate.dll
2017-07-31 20:18 - 2017-10-17 02:21 - 000169648 _____ () c:\program files (x86)\ostotosoft\drivertalent\substat.dll
2017-07-31 20:18 - 2017-10-17 02:21 - 000169648 _____ () c:\program files (x86)\ostotosoft\drivertalent\DtlPlug.dll
2017-07-31 20:18 - 2017-10-17 02:21 - 000111280 _____ () c:\program files (x86)\ostotosoft\drivertalent\dstudp.dll
2017-07-31 20:18 - 2017-10-17 02:21 - 000123568 _____ () c:\program files (x86)\ostotosoft\drivertalent\udp.dll
2017-10-23 11:46 - 2017-10-23 11:46 - 000161968 _____ () c:\program files (x86)\ostotosoft\conquerorlive\lhelpersvc.dll
2017-10-23 11:46 - 2017-10-23 11:46 - 000263344 _____ () c:\program files (x86)\ostotosoft\conquerorlive\updater\checkupdate.dll
2017-10-23 11:46 - 2017-10-23 11:45 - 000169648 _____ () c:\program files (x86)\ostotosoft\conquerorlive\substat.dll
2017-08-02 09:59 - 2017-08-02 09:59 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2018-01-05 12:24 - 2018-01-05 12:24 - 000282560 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-07-31 20:08 - 2017-09-07 03:04 - 000678400 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
2017-07-31 20:08 - 2017-10-31 05:44 - 071471904 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2017-07-31 20:08 - 2015-09-25 00:52 - 000119208 _____ () C:\Program Files (x86)\Steam\winh264.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP_TDI => ""="Driver Group"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Schedule => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Schedule => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-10-02 22:02 - 2017-10-02 22:03 - 000002112 _____ C:\Windows\system32\Drivers\etc\hosts

23.32.122.80 akamai-webcdn.blackdesertonline.com
23.32.122.80 akamai-webcdn.blackdesertonline.com.edgekey.net
23.32.122.80 e339.d.akamaiedge.net
95.101.89.250 akamai-gamecdn.blackdesertonline.com
95.101.89.250 akamai-gamecdn.blackdesertonline.com.edgesuite.net
95.101.89.250 a1065.d.akamai.net
2.16.64.137 a1065.d.akamai.net
209.58.137.205 na.lt.theblackdesertonline.com
209.58.137.204 na.lt.theblackdesertonline.com
209.58.137.203 na.lt.theblackdesertonline.com
209.58.137.202 na.lt.theblackdesertonline.com
209.58.137.201 na.lt.theblackdesertonline.com
209.58.137.232 na.lt.theblackdesertonline.com
209.58.137.231 na.lt.theblackdesertonline.com
209.58.137.230 na.lt.theblackdesertonline.com
209.58.137.229 na.lt.theblackdesertonline.com
209.58.137.239 na.lt.theblackdesertonline.com
5.79.111.107 eu.lt.theblackdesertonline.com
5.79.111.100 eu.lt.theblackdesertonline.com
5.79.111.101 eu.lt.theblackdesertonline.com
5.79.111.68 eu.lt.theblackdesertonline.com
5.79.111.69 eu.lt.theblackdesertonline.com
5.79.111.102 eu.lt.theblackdesertonline.com
5.79.111.70 eu.lt.theblackdesertonline.com
5.79.111.104 eu.lt.theblackdesertonline.com
5.79.111.105 eu.lt.theblackdesertonline.com
5.79.111.106 eu.lt.theblackdesertonline.com
5.79.111.35 www.blackdesertonline.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2885199775-3860845558-3182105547-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Leyh\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{16C0A4C7-D903-4F34-BEBC-AFA82C5A0776}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{C20F89CF-6FE2-4A05-9ED5-C902D46F8E2E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6EFCDA99-05D8-434B-ADB8-DCFD40EDE5E5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{3C4B31D6-567A-424B-BC1D-30D68ACA1658}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [TCP Query User{CC334AA2-FC6F-4A7C-8800-56230B179AE1}C:\program files (x86)\ostotosoft\drivertalent\drivertalent.exe] => (Allow) C:\program files (x86)\ostotosoft\drivertalent\drivertalent.exe
FirewallRules: [UDP Query User{9496E031-2B82-4F7A-8E4E-106C20946821}C:\program files (x86)\ostotosoft\drivertalent\drivertalent.exe] => (Allow) C:\program files (x86)\ostotosoft\drivertalent\drivertalent.exe
FirewallRules: [{B4E1A8EF-F264-4BC4-8582-4B01E67D97AF}] => (Allow) C:\Program Files (x86)\OSTotoSoft\DriverTalent\DriverTalent.exe
FirewallRules: [{17D2B471-7E74-4CDD-9D8C-962C6EF06DA0}] => (Allow) C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLService.exe
FirewallRules: [{D39CD283-9CDB-4324-BE92-ADD4DAE6C70C}] => (Allow) C:\Program Files (x86)\OSTotoSoft\DriverTalent\download\MiniThunderPlatform.exe
FirewallRules: [{E2261EB0-FC67-47FD-A567-34E273DB336E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ArcheAge\GlyphClient.exe
FirewallRules: [{7ECC3814-F4E5-49E9-947A-50675E50FCE6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ArcheAge\GlyphClient.exe
FirewallRules: [TCP Query User{462336D5-D5C8-4052-8532-9DC0B6F11031}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{137DA6F8-76C2-4790-BBBA-2CFEB710B6A6}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{1972E749-075C-4051-90ED-771A679B9B02}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe
FirewallRules: [UDP Query User{5FC5937F-403B-4BF6-B369-DEE124A5EA32}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe
FirewallRules: [{8D0848FB-F9B8-4109-A746-49A28EBFF646}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [{C6B39826-CBAA-4D28-9EFD-E08F6F9A089D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [TCP Query User{292D9A44-6812-4654-91E4-8148924E565C}C:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe
FirewallRules: [UDP Query User{EC25286F-F794-4C0F-949C-7A901A6D715E}C:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe
FirewallRules: [{BCB1A8CD-A466-4FC1-AD4C-E1FB312813DA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\7 Days To Die\7dLauncher.exe
FirewallRules: [{4C067A56-D178-410E-A411-F34FBD46092A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\7 Days To Die\7dLauncher.exe
FirewallRules: [{555BC824-1D71-46D6-B888-807E81CE884F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY XIV Online\boot\ffxivboot.exe
FirewallRules: [{87A562DF-90A0-4B27-99C8-815C037A7B05}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY XIV Online\boot\ffxivboot.exe
FirewallRules: [{224FD2A9-A9EA-447C-B9EC-04100F241C63}] => (Allow) C:\Users\Leyh\AppData\Local\AmazingEternals\Downloaded\Public\AmazingEternals.x64.exe
FirewallRules: [{A8BAA476-8048-4A5F-B914-2562A490EB75}] => (Allow) C:\Users\Leyh\AppData\Local\AmazingEternals\Downloaded\Public\AmazingEternals.x64.exe
FirewallRules: [{FEBC34DA-1CE2-4820-97C2-594C35727AA2}] => (Allow) C:\Users\Leyh\AppData\Local\AmazingEternals\Downloaded\Public\Tools\RemoteCrashSender.exe
FirewallRules: [{091C2AB8-20CB-4F94-994B-85398C18CA6A}] => (Allow) C:\Users\Leyh\AppData\Local\AmazingEternals\Downloaded\Public\AmazingEternals.x64.exe
FirewallRules: [{2D6C8903-54D0-44DC-B9F2-EBCB58F4DC27}] => (Allow) C:\Users\Leyh\AppData\Local\AmazingEternals\Downloaded\Public\AmazingEternals.x64.exe
FirewallRules: [{59A67B1D-761D-469F-B250-EE1EDDFE4D32}] => (Allow) C:\Users\Leyh\AppData\Local\AmazingEternals\Downloaded\Public\Tools\RemoteCrashSender.exe
FirewallRules: [TCP Query User{35232180-BE62-4CC6-92FA-19F9B71E9F89}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [UDP Query User{126E40A9-4232-490D-8D6F-A05D139EFD17}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [TCP Query User{B1287717-71C1-4D1A-83D1-C5D6DAF8A310}C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe
FirewallRules: [UDP Query User{4D38EDD3-044D-41E1-B6B4-3BE6F78D0DBC}C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe
FirewallRules: [{0CCF715E-005B-44B2-890D-3243251925D0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe
FirewallRules: [{8E6ABDFD-6D7C-43EB-AF5F-B2C0A580EBA6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe
FirewallRules: [{BF35FDDF-BA95-4F61-BB97-9F003BF44080}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{F01B3294-A06B-4D05-9CA0-5DB7D8A81762}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{495E6E11-FA48-445C-8E6F-45C828D4FF54}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trove\GlyphClient.exe
FirewallRules: [{D16B1228-6FF6-4C40-AE25-89E167949D10}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trove\GlyphClient.exe
FirewallRules: [{203824F4-3554-4C08-9190-F52F98501DA3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned_BE.exe
FirewallRules: [{C12F0828-96F5-4915-ADEB-DEBB81B78BD3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned_BE.exe
FirewallRules: [{32F4237F-98CC-49FE-B58A-149D1A4CBEAF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned.exe
FirewallRules: [{938D9B28-203C-476F-B143-73341D213EBE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned.exe
FirewallRules: [{2D2D58A2-C506-46B3-AF4F-884B48345036}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{997DDB41-0D5D-494C-A837-DD0F05D7B2F6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{110A6700-A664-4143-8B08-4C67431F8C51}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [TCP Query User{4F00168D-DC76-418B-A990-FCE0C42631D7}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe
FirewallRules: [UDP Query User{9CC6D40B-259A-4C78-B167-7C4C99CFE42F}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe
FirewallRules: [TCP Query User{BAEFA0B3-0A1C-4EB8-9685-A9E28B24B17D}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe
FirewallRules: [UDP Query User{1A12B430-C111-4CAE-BFEE-20A75D9510AF}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe
FirewallRules: [{82F1F3D8-E25C-410B-88B0-2F4AD43DB578}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{EA43469E-9A2F-4EBD-8D0A-58FCF04003B9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{539D2EC3-82CE-411B-B5A2-D11BC385B162}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\strife\bin\strife.exe
FirewallRules: [{7D75D59F-61F9-4138-83A7-56C5CB616633}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\strife\bin\strife.exe
FirewallRules: [TCP Query User{A1DCE222-88BA-4C91-9842-72271336F528}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [UDP Query User{7AA962D1-7E72-4778-9AC6-CC58DA6D8194}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [{F233B853-65B0-476C-B168-0F0456F1CA4B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Creativerse\Creativerse.exe
FirewallRules: [{504B63EA-ED57-4F9A-B15E-F0691794FA45}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Creativerse\Creativerse.exe
FirewallRules: [{3735E914-5537-4E24-AB09-E000375FDAEC}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
FirewallRules: [{F5A52520-AFF7-4426-83AA-19417CC28630}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
FirewallRules: [{FE927F73-F5FF-4FE0-B2F6-8E03EB2771D3}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe
FirewallRules: [{3B6E0E1B-4B6D-481D-AAF0-6DF20BA5F420}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe
FirewallRules: [{AF61CE4C-A95C-42AC-A48D-8A5736D5A26B}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exe
FirewallRules: [{C423C3DD-F18F-4668-9DD8-3921A3DAE40C}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exe
FirewallRules: [{820B245E-748C-4C59-B9EE-CDE556C01FF0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound.exe
FirewallRules: [{CB799250-441D-4A30-971E-6792B35B46D2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound.exe
FirewallRules: [{99D1BDB8-2916-49FC-AB43-0F9B54B6282F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{169C1AA8-99FF-4159-B065-207EFF1EEAA0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{EC5C8938-6FF2-4700-B82D-C77373BF54C2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{FFB7FF54-3829-461F-B00B-982B528B1EFE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{89142581-53D3-4461-8758-4030F0863C1F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\starbound.exe
FirewallRules: [{16F27726-D473-4798-B821-F4DB06673DAB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\starbound.exe
FirewallRules: [TCP Query User{C079B4BC-26D6-42A8-B6FB-2D091EAB6C1D}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe
FirewallRules: [UDP Query User{80625F5E-8463-4ED5-A37A-59CFFFDE93CF}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe
FirewallRules: [{FD663033-6806-4F97-A46F-16EEFC121576}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{F815A7C6-57C2-4401-BBB7-1E53F1F9D840}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{20512BF2-7ED8-4A52-80C7-A041294D28EA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{565E8620-6A8E-4152-8C32-5A05A4913B5B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{F2EAB63B-17BC-4121-9633-C3F38C03F678}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{DB91C58A-3C9B-4FCF-9AC9-246CF84049C5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{A6F9C320-AEFA-4679-B4A2-458F67673EB9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{3DA8EB69-C6B6-4078-BB28-ED55CDD95C9B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{E3DA470C-E515-4030-8CAF-BCF05A7A0FAC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{FB910703-488E-4897-AA27-5F5529DDE39F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{F78826E3-7EAB-45E9-9E0D-794882962FAA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{E58A726C-BB2E-493A-A07F-E3DBF4039A12}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{0ACE18D1-FB73-44E1-B195-74FAE15F376A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{1AF16243-8497-4AC8-BF81-25CE1F4A14C4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{8A21FD8F-0FD5-4E9D-8DCF-69085A8AF1BA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{29E88425-E9D6-4D99-8BAC-C36C59423516}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{78C85169-03F5-4A71-9A53-654366EFAD0A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{E22F909F-BA17-49D6-A822-ECBDBF638886}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{495CAD28-9B95-4430-B41D-64DB82CA2005}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{7263C1DD-6D8F-4B30-BC85-0BBF645C3FDC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{B4AC3891-BBF9-4A16-B048-2B96FCE0F77D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Yonder The Cloud Catcher Chronicles\YonderCCC.exe
FirewallRules: [{9EC2C10B-277D-4E10-92F6-08A0F34C1482}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Yonder The Cloud Catcher Chronicles\YonderCCC.exe
FirewallRules: [{226397D0-96F6-49C1-B7B6-3345AFF9147B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TwinSaga\Launcher.exe
FirewallRules: [{89208877-F235-4D7C-8AEE-185655E94A8B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TwinSaga\Launcher.exe
FirewallRules: [{0C5D479C-C0CE-479F-9810-473B58D7D96B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TwinSaga\game.bin
FirewallRules: [{3F623D0F-5A05-41A1-8D10-FD38C3318583}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TwinSaga\game.bin
FirewallRules: [{751B0135-D7F4-48E2-97C3-99D116C77C1E}] => (Allow) C:\Program Files\Opera\50.0.2762.58\opera.exe
FirewallRules: [{F16DB388-9599-47D0-A878-9765491759B6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [{026E8AA1-0615-4B24-A081-B20E03AA041B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [{06D98F04-346C-4A8C-BD42-26398ED5BBFA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Magicka 2\engine\Magicka2.exe
FirewallRules: [{C5048AF0-194F-48D6-8011-5B0878E6443D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Magicka 2\engine\Magicka2.exe
FirewallRules: [{FCA10416-D6C2-4D62-B3A2-586119FD7473}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{6FA4ABEB-0B9E-4E58-89AA-83895FF159B8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{CDEBA88F-84BC-420B-824F-3DDC86E70DAB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound.exe
FirewallRules: [{03E14F96-629D-453A-A019-8C01212D590C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound.exe
FirewallRules: [{D07D0DCD-E152-469B-9803-B9A752A5EE64}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{C551BF48-CEB6-4368-BFB6-A7FB28002572}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{096B2858-0C0E-4AB3-B560-B9D86390A1F1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{60C64814-CE04-4B4C-A785-8CFD8D679071}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{66B97B60-5A44-4E8C-BC02-B375B4865D71}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\starbound.exe
FirewallRules: [{8DDD8245-8B77-4E72-9578-9FE395496E4D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\starbound.exe
FirewallRules: [TCP Query User{640B2091-0450-4E23-92FA-4DD9D7F0A311}C:\program files (x86)\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe
FirewallRules: [UDP Query User{5CC88A90-55F1-4201-B197-58D0ECA9DDF4}C:\program files (x86)\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe
FirewallRules: [TCP Query User{08A26B22-CA24-4116-AC0F-26E7678E6BC9}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\x86\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\x86\gameclient.exe
FirewallRules: [UDP Query User{4B6D4921-01D5-4B0C-9E70-2B28B34CA7F3}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\x86\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\x86\gameclient.exe
FirewallRules: [{11EC0D94-2045-4DDD-9D76-685FECD624FD}] => (Allow) C:\Program Files\Opera\50.0.2762.67\opera.exe

==================== Restore Points =========================

18-01-2018 18:54:27 Scheduled Checkpoint
19-01-2018 23:58:50 Windows Update

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/23/2018 03:12:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: FRST64.exe, version: 21.1.2018.0, time stamp: 0x5a6485fc
Faulting module name: FRST64.exe, version: 21.1.2018.0, time stamp: 0x5a6485fc
Exception code: 0xc0000005
Fault offset: 0x0000000000026946
Faulting process id: 0xbe8
Faulting application start time: 0x01d394542704f750
Faulting application path: C:\Users\Leyh\Desktop\FRST64.exe
Faulting module path: C:\Users\Leyh\Desktop\FRST64.exe
Report Id: 657e5f99-0047-11e8-982f-6c626d5df0c2

Error: (01/23/2018 02:12:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/23/2018 01:02:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/22/2018 07:00:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/21/2018 02:35:12 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/20/2018 09:42:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: svchost.exe_SysMain, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: sysmain.dll, version: 6.1.7601.24000, time stamp: 0x5a499a8d
Exception code: 0xc0000005
Fault offset: 0x000000000000b464
Faulting process id: 0x8ec
Faulting application start time: 0x01d391e9ac0b6b4d
Faulting application path: C:\Windows\system32\svchost.exe
Faulting module path: c:\windows\system32\sysmain.dll
Report Id: 685922e6-fe22-11e7-b16a-6c626d5df0c2

Error: (01/20/2018 01:25:08 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/19/2018 11:46:37 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: FacebookGameroom.exe, version: 1.12.6582.35661, time stamp: 0x5a543b9a
Faulting module name: libcef.dll, version: 3.2987.1601.0, time stamp: 0x5984c1cd
Exception code: 0xc0000005
Fault offset: 0x01afeb06
Faulting process id: 0xc08
Faulting application start time: 0x01d391126df97710
Faulting application path: C:\Users\Leyh\AppData\Local\Facebook\Games\FacebookGameroom.exe
Faulting module path: C:\Users\Leyh\AppData\Local\Facebook\Games\libcef.dll
Report Id: 05c8ca11-fd06-11e7-9162-6c626d5df0c2

Error: (01/19/2018 11:46:25 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: FacebookGameroom.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 5DA2EB06
Stack:

Error: (01/19/2018 11:45:15 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.


System errors:
=============
Error: (01/23/2018 02:56:59 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.

Error: (01/23/2018 02:56:59 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.

Error: (01/23/2018 02:37:20 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.

Error: (01/23/2018 02:37:20 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.

Error: (01/23/2018 02:12:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Origin Web Helper Service service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

Error: (01/23/2018 02:12:26 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Origin Web Helper Service service to connect.

Error: (01/23/2018 02:11:54 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Hi-Rez Studios Authenticate and Update Service service to connect.

Error: (01/23/2018 02:10:23 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.

Error: (01/23/2018 02:10:23 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.

Error: (01/23/2018 02:10:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Steam Client Service service terminated unexpectedly.  It has done this 1 time(s).


CodeIntegrity:
===================================
  Date: 2017-08-01 17:12:54.758
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\win32k.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-08-01 17:12:54.726
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\win32k.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i3 CPU 550 @ 3.20GHz
Percentage of memory in use: 29%
Total physical RAM: 8183.11 MB
Available physical RAM: 5797.44 MB
Total Virtual: 16364.39 MB
Available Virtual: 13853.46 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:342.36 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 20FC34C5)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

cosinus 23.01.2018 15:19
Bitte Avast deinstallieren

Avast können wir einfach nicht mehr guten Gewissens empfehlen. => Antivirensoftware: Schutz Für Ihre Dateien, Aber Auf Kosten Ihrer Privatsphäre? | Emsisoft Blog
Auch andere Freewareanbieter wie Avira, AVG oder Panda springen auf diesen oder ähnlichen Zügen rauf, basteln Junkware in die Setups, arbeiten mit ASK zusammen etc; so was ist bei Sicherheitssoftware einfach inakzeptabel.


Gib Bescheid wenn Avast weg ist; wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen, Infos folgen dann im Abschlussposting. Bitte JETZT nix mehr ohne Absprache installieren!

Leyhja 23.01.2018 15:22
Alles klar, Avast ist runter :)

cosinus 23.01.2018 16:11
Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Leyhja 23.01.2018 16:52
Huhu,

Logfile nach dem Scan & Cleanup:

Code:
Malwarebytes Anti-Rootkit BETA 1.10.3.1001
www.malwarebytes.org

Database version:
  main:    v2018.01.23.08
  rootkit: v2017.10.14.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18893
Leyh :: LEYH-PC [administrator]

23.01.2018 16:36:16
mbar-log-2018-01-23 (16-36-16).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 197731
Time elapsed: 15 minute(s), 38 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

cosinus 23.01.2018 23:10
Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!



adwCleaner v7.x

Downloade Dir bitte http://deeprybka.trojaner-board.de/adwcleaner/adwc.pngAdwCleaner auf Deinen Desktop (Bebilderte Anleitung).
  • Schließe alle offenen Programme und Browser.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Werkzeuge > Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • Tracing Schlüssel
    • Prefetch Dateien
    • Proxy
    • Winsock
    • IE Richtlinien
    • Chrome Richtlinien
  • Bestätige die Auswahl mit Ok.
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist. Am Ende des Suchlaufs öffnet sich automatisch eine Logdatei. Schließe diese.
  • Klicke nun auf Löschen (auch dann wenn AdwCleaner sagt, dass nichts gefunden wurde) und bestätige auftretende Hinweise mit Ok.
  • Klicke am Ende der Bereinigung auf Jetzt neu starten. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Leyhja 23.01.2018 23:29
Guten Abend :)

Hier die Logdatei nach dem Reboot:

Code:
# AdwCleaner 7.0.7.0 - Logfile created on Tue Jan 23 22:25:00 2018
# Updated on 2018/18/01 by Malwarebytes
# Running on Windows 7 Professional (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

No malicious folders deleted.

***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

Deleted: [Key] - HKLM\SOFTWARE\HDWallpaper


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Prefetch files deleted
::Proxy settings cleared
::IE policies deleted
::Chrome policies deleted
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [2921 B] - [2018/1/8 13:12:12]
C:/AdwCleaner/AdwCleaner[C1].txt - [1355 B] - [2018/1/8 13:16:54]
C:/AdwCleaner/AdwCleaner[C2].txt - [1483 B] - [2018/1/8 13:26:52]
C:/AdwCleaner/AdwCleaner[C3].txt - [1681 B] - [2018/1/8 20:5:50]
C:/AdwCleaner/AdwCleaner[C4].txt - [1821 B] - [2018/1/10 21:57:19]
C:/AdwCleaner/AdwCleaner[C5].txt - [1956 B] - [2018/1/16 12:16:8]
C:/AdwCleaner/AdwCleaner[C6].txt - [2090 B] - [2018/1/23 13:10:24]
C:/AdwCleaner/AdwCleaner[S0].txt - [2850 B] - [2018/1/8 13:11:19]
C:/AdwCleaner/AdwCleaner[S10].txt - [2117 B] - [2018/1/23 22:24:20]
C:/AdwCleaner/AdwCleaner[S1].txt - [1206 B] - [2018/1/8 13:16:25]
C:/AdwCleaner/AdwCleaner[S2].txt - [1315 B] - [2018/1/8 13:25:23]
C:/AdwCleaner/AdwCleaner[S3].txt - [1449 B] - [2018/1/8 19:4:4]
C:/AdwCleaner/AdwCleaner[S4].txt - [1514 B] - [2018/1/8 20:5:30]
C:/AdwCleaner/AdwCleaner[S5].txt - [1671 B] - [2018/1/10 21:56:51]
C:/AdwCleaner/AdwCleaner[S6].txt - [1807 B] - [2018/1/16 12:9:28]
C:/AdwCleaner/AdwCleaner[S7].txt - [1941 B] - [2018/1/23 13:7:13]
C:/AdwCleaner/AdwCleaner[S8].txt - [2076 B] - [2018/1/23 13:37:21]
C:/AdwCleaner/AdwCleaner[S9].txt - [2144 B] - [2018/1/23 13:57:0]


########## EOF - C:\AdwCleaner\AdwCleaner[C7].txt ##########

cosinus 23.01.2018 23:33
Ich brauche neue FRST-Logs . Haken setzen bei addition.txt dann auf Untersuchen klicken.

http://www.trojaner-board.de/picture...&pictureid=611

Leyhja 23.01.2018 23:35
FRST


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 21.01.2018
Ran by Leyh (administrator) on LEYH-PC (23-01-2018 23:34:19)
Running from C:\Users\Leyh\Desktop
Loaded Profiles: Leyh (Available Profiles: Leyh)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Mega Limited) C:\Users\Leyh\AppData\Local\MEGAsync\MEGAsync.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(Opera Software) C:\Program Files\Opera\50.0.2762.67\opera.exe
(Opera Software) C:\Program Files\Opera\50.0.2762.67\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\50.0.2762.67\opera.exe
(Opera Software) C:\Program Files\Opera\50.0.2762.67\opera.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Opera Software) C:\Program Files\Opera\50.0.2762.67\opera.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18384352 2017-07-10] (Realtek Semiconductor)
HKU\S-1-5-21-2885199775-3860845558-3182105547-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9856176 2017-09-20] (Piriform Ltd)
HKU\S-1-5-21-2885199775-3860845558-3182105547-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3111712 2017-12-15] (Valve Corporation)
Startup: C:\Users\Leyh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2017-09-20]
ShortcutTarget: MEGAsync.lnk -> C:\Users\Leyh\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{FA451255-95C9-4B43-9293-E076C2356AB2}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.apusx.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.apusx.com

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

Chrome:
=======
CHR HomePage: Default -> hxxps://encrypted.google.com
CHR StartupUrls: Default -> "hxxps://encrypted.google.com"
CHR Profile: C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default [2018-01-23]
CHR Extension: (Präsentationen) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]
CHR Extension: (Docs) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
CHR Extension: (Google Drive) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-31]
CHR Extension: (YouTube) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-31]
CHR Extension: (Adblock Plus) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-12-09]
CHR Extension: (Tabellen) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]
CHR Extension: (Google Docs Offline) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-31]
CHR Extension: (AdBlock) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-12-06]
CHR Extension: (Avast Online Security) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-10-13]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-21]
CHR Extension: (Google Mail) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-31]
CHR Extension: (Chrome Media Router) - C:\Users\Leyh\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-14]
CHR HKLM-x32\...\Chrome\Extension: [lobonlhedgiilkfmbbbfhkaoefacipgj] - hxxps://clients2.google.com/service/update2/crx

Opera:
=======
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6971400 2017-12-10] ()
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [382504 2017-08-31] (EasyAntiCheat Ltd)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-09-20] (Hi-Rez Studios) [File not signed]
R2 LDrvSvc; C:\Program Files (x86)\OSTotoSoft\DriverTalent\LDrvSvc.dll [186544 2017-10-17] ()
R2 LHelperSvc; C:\Program Files (x86)\OSTotoSoft\ConquerorLive\LHelperSvc.dll [161968 2017-10-23] ()
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [7962384 2017-04-09] (INCA Internet Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518264 2017-11-13] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518264 2017-11-13] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2123104 2017-11-26] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3002728 2017-11-26] (Electronic Arts)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2017-12-18] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50808 2017-10-11] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57976 2017-10-11] (NVIDIA Corporation)
S3 cpuz136; \??\C:\Users\Leyh\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X] <==== ATTENTION
S3 NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-01-23 23:34 - 2018-01-23 23:34 - 000009510 _____ C:\Users\Leyh\Desktop\FRST.txt
2018-01-23 23:33 - 2018-01-23 23:33 - 000000000 ____D C:\Users\Leyh\Desktop\frst
2018-01-23 23:21 - 2018-01-23 23:22 - 008206624 _____ (Malwarebytes) C:\Users\Leyh\Desktop\adwcleaner_7.0.7.0.exe
2018-01-23 16:36 - 2018-01-23 16:36 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\3323E6D3.sys
2018-01-23 16:34 - 2018-01-23 23:28 - 000003018 _____ C:\Windows\System32\Tasks\MSIAfterburner
2018-01-23 16:14 - 2018-01-23 16:14 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\152443EF.sys
2018-01-23 16:14 - 2018-01-23 16:14 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-01-23 16:13 - 2018-01-23 23:26 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2018-01-23 16:13 - 2018-01-23 16:52 - 000000000 ____D C:\Users\Leyh\Desktop\mbar
2018-01-23 16:13 - 2018-01-23 16:35 - 000192952 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2018-01-23 16:13 - 2018-01-23 16:13 - 014178840 _____ (Malwarebytes Corp.) C:\Users\Leyh\Desktop\mbar-1.10.3.1001.exe
2018-01-23 15:12 - 2018-01-23 23:34 - 000000000 ____D C:\FRST
2018-01-23 15:11 - 2018-01-23 15:11 - 002393088 _____ (Farbar) C:\Users\Leyh\Desktop\FRST64.exe
2018-01-23 13:49 - 2018-01-23 13:49 - 000304857 _____ C:\Users\Leyh\Downloads\HijackThis_205.zip
2018-01-18 16:08 - 2018-01-18 16:08 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\ParadoxInteractive
2018-01-18 01:18 - 2018-01-18 01:18 - 000000000 ____D C:\Users\Leyh\Documents\BnS
2018-01-18 00:17 - 2018-01-18 00:17 - 000002234 _____ C:\Users\Public\Desktop\Blade & Soul.lnk
2018-01-18 00:17 - 2018-01-18 00:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSOFT
2018-01-18 00:14 - 2018-01-18 00:14 - 000000000 ____D C:\Program Files (x86)\AGEIA Technologies
2018-01-18 00:11 - 2018-01-18 00:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCWest
2018-01-18 00:11 - 2018-01-18 00:11 - 000000000 ____D C:\Program Files (x86)\NCWest
2018-01-18 00:10 - 2018-01-18 00:11 - 227200840 _____ (NC Interactive, LLC) C:\Users\Leyh\Downloads\BnS_Lite_Installer.exe
2018-01-11 17:07 - 2018-01-13 19:08 - 000000000 ____D C:\Program Files (x86)\AeriaGames
2018-01-10 23:28 - 2018-01-10 23:28 - 000012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2018-01-10 13:41 - 2018-01-10 13:41 - 000001918 _____ C:\Users\Leyh\Desktop\Minion.lnk
2018-01-10 13:32 - 2018-01-15 16:43 - 000000000 ____D C:\Users\Leyh\.junique
2018-01-10 13:32 - 2018-01-10 13:34 - 000000000 ____D C:\Users\Leyh\.minion
2018-01-10 13:32 - 2018-01-10 13:32 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\gg.minion.Minion
2018-01-10 13:32 - 2018-01-10 13:32 - 000000000 ____D C:\Users\Leyh\.oracle_jre_usage
2018-01-10 13:31 - 2018-01-10 13:31 - 000000608 _____ C:\Users\Leyh\Documents\Minion.lnk
2018-01-10 13:31 - 2018-01-10 13:31 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Good Game Mods LLC
2018-01-10 13:31 - 2018-01-10 13:31 - 000000000 ____D C:\Users\Leyh\AppData\Local\Minion
2018-01-09 11:39 - 2018-01-09 11:39 - 005293056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2018-01-09 11:39 - 2018-01-01 03:21 - 005581544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-01-09 11:39 - 2018-01-01 03:21 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2018-01-09 11:39 - 2018-01-01 03:19 - 001665384 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-01-09 11:39 - 2018-01-01 03:18 - 014183936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2018-01-09 11:39 - 2018-01-01 03:18 - 002066432 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2018-01-09 11:39 - 2018-01-01 03:18 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-01-09 11:39 - 2018-01-01 03:18 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-01-09 11:39 - 2018-01-01 02:54 - 004013800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-01-09 11:39 - 2018-01-01 02:54 - 003959016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-01-09 11:39 - 2017-12-29 19:39 - 020274688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-01-09 11:39 - 2017-12-29 19:09 - 002294272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-01-09 11:39 - 2017-12-29 19:03 - 000662528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-01-09 11:39 - 2017-12-29 18:45 - 004508160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-01-09 11:39 - 2017-12-29 18:38 - 013680128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-01-09 11:39 - 2017-12-29 18:19 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-01-09 11:39 - 2017-12-29 18:15 - 001313792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-01-09 11:39 - 2017-12-29 10:15 - 025737728 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-01-09 11:39 - 2017-12-29 09:52 - 002900480 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-01-09 11:39 - 2017-12-29 09:51 - 005796352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-01-09 11:39 - 2017-12-29 09:32 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2018-01-09 11:39 - 2017-12-29 09:04 - 015284224 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-01-09 11:39 - 2017-12-29 08:50 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-01-09 11:39 - 2017-12-29 08:39 - 001545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-01-09 11:39 - 2017-12-29 08:27 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-01-09 11:38 - 2018-01-01 03:21 - 000948968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2018-01-09 11:38 - 2018-01-01 03:21 - 000708328 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-01-09 11:38 - 2018-01-01 03:21 - 000288488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2018-01-09 11:38 - 2018-01-01 03:21 - 000262376 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-01-09 11:38 - 2018-01-01 03:21 - 000213736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2018-01-09 11:38 - 2018-01-01 03:21 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-01-09 11:38 - 2018-01-01 03:21 - 000114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2018-01-09 11:38 - 2018-01-01 03:21 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-01-09 11:38 - 2018-01-01 03:18 - 002004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 001942016 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 001867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 001741312 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 001361408 _____ (Microsoft Corporation) C:\Windows\system32\PeerDistSvc.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 001110528 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000977408 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000961024 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000863232 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2018-01-09 11:38 - 2018-01-01 03:18 - 000842752 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000828928 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000705024 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2018-01-09 11:38 - 2018-01-01 03:18 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000473600 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000444928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000439296 _____ (Microsoft Corporation) C:\Windows\system32\p2psvc.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000366592 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2018-01-09 11:38 - 2018-01-01 03:18 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000264704 _____ (Microsoft Corporation) C:\Windows\system32\P2P.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000223232 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000181760 _____ (Microsoft Corporation) C:\Windows\system32\PeerDist.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000131584 _____ (Microsoft Corporation) C:\Windows\system32\PeerDistWSDDiscoProv.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000120320 _____ (Microsoft Corporation) C:\Windows\system32\WcnApi.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\icfupgd.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000101376 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000095744 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\ndptsp.tsp
2018-01-09 11:38 - 2018-01-01 03:18 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000053760 _____ (Microsoft Corporation) C:\Windows\system32\vmicres.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000051200 _____ (Microsoft Corporation) C:\Windows\system32\PeerDistHttpTrans.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\kmddsp.tsp
2018-01-09 11:38 - 2018-01-01 03:18 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\rasmxs.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000039424 _____ (Microsoft Corporation) C:\Windows\system32\traffic.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\rasser.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\WcnEapPeerProxy.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\WcnEapAuthProxy.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\wfapigp.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\wshqos.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wshnetbs.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 03:18 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2018-01-09 11:38 - 2018-01-01 03:13 - 000631680 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-01-09 11:38 - 2018-01-01 03:04 - 000559616 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2018-01-09 11:38 - 2018-01-01 03:02 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 012880384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 001390080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000463360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000304640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskcomp.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000217600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\P2P.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2018-01-09 11:38 - 2018-01-01 03:00 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PeerDist.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWCN.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ndptsp.tsp
2018-01-09 11:38 - 2018-01-01 03:00 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\traffic.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-01-09 11:38 - 2018-01-01 03:00 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 001806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:59 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:55 - 000131584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys
2018-01-09 11:38 - 2018-01-01 02:55 - 000088576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2018-01-09 11:38 - 2018-01-01 02:55 - 000058368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2018-01-09 11:38 - 2018-01-01 02:55 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbios.sys
2018-01-09 11:38 - 2018-01-01 02:55 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndistapi.sys
2018-01-09 11:38 - 2018-01-01 02:54 - 000077312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2018-01-09 11:38 - 2018-01-01 02:50 - 000455680 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2018-01-09 11:38 - 2018-01-01 02:49 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-01-09 11:38 - 2018-01-01 02:49 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-01-09 11:38 - 2018-01-01 02:49 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-01-09 11:38 - 2018-01-01 02:49 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-01-09 11:38 - 2018-01-01 02:47 - 000244224 _____ (Microsoft Corporation) C:\Windows\system32\vmicsvc.exe
2018-01-09 11:38 - 2018-01-01 02:46 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-01-09 11:38 - 2018-01-01 02:46 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\IcCoinstall.dll
2018-01-09 11:38 - 2018-01-01 02:46 - 000051712 _____ (Microsoft Corporation) C:\Windows\system32\vmictimeprovider.dll
2018-01-09 11:38 - 2018-01-01 02:45 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-01-09 11:38 - 2018-01-01 02:43 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnApi.dll
2018-01-09 11:38 - 2018-01-01 02:43 - 000038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp
2018-01-09 11:38 - 2018-01-01 02:43 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll
2018-01-09 11:38 - 2018-01-01 02:43 - 000022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll
2018-01-09 11:38 - 2018-01-01 02:43 - 000020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnEapPeerProxy.dll
2018-01-09 11:38 - 2018-01-01 02:43 - 000019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnEapAuthProxy.dll
2018-01-09 11:38 - 2018-01-01 02:43 - 000018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfapigp.dll
2018-01-09 11:38 - 2018-01-01 02:43 - 000013824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshqos.dll
2018-01-09 11:38 - 2018-01-01 02:42 - 000460288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2018-01-09 11:38 - 2018-01-01 02:42 - 000406016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2018-01-09 11:38 - 2018-01-01 02:42 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2018-01-09 11:38 - 2018-01-01 02:42 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-01-09 11:38 - 2018-01-01 02:41 - 000754176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2018-01-09 11:38 - 2018-01-01 02:41 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-01-09 11:38 - 2018-01-01 02:41 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-01-09 11:38 - 2018-01-01 02:41 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-01-09 11:38 - 2018-01-01 02:41 - 000106496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2018-01-09 11:38 - 2018-01-01 02:41 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-01-09 11:38 - 2018-01-01 02:41 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2018-01-09 11:38 - 2018-01-01 02:39 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-01-09 11:38 - 2018-01-01 02:36 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-01-09 11:38 - 2018-01-01 02:36 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-01-09 11:38 - 2018-01-01 02:36 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-01-09 11:38 - 2018-01-01 02:36 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-01-09 11:38 - 2018-01-01 02:35 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-01-09 11:38 - 2018-01-01 02:35 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:35 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:35 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-01-09 11:38 - 2018-01-01 02:35 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-01-09 11:38 - 2017-12-30 08:29 - 000395968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-01-09 11:38 - 2017-12-30 07:42 - 000347328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-01-09 11:38 - 2017-12-29 19:24 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2018-01-09 11:38 - 2017-12-29 19:13 - 000499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-01-09 11:38 - 2017-12-29 19:13 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2018-01-09 11:38 - 2017-12-29 19:12 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2018-01-09 11:38 - 2017-12-29 19:12 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2018-01-09 11:38 - 2017-12-29 19:11 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2018-01-09 11:38 - 2017-12-29 19:06 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2018-01-09 11:38 - 2017-12-29 19:06 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2018-01-09 11:38 - 2017-12-29 19:04 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2018-01-09 11:38 - 2017-12-29 19:03 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-01-09 11:38 - 2017-12-29 19:03 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2018-01-09 11:38 - 2017-12-29 18:55 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2018-01-09 11:38 - 2017-12-29 18:51 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2018-01-09 11:38 - 2017-12-29 18:50 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2018-01-09 11:38 - 2017-12-29 18:50 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2018-01-09 11:38 - 2017-12-29 18:47 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2018-01-09 11:38 - 2017-12-29 18:47 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2018-01-09 11:38 - 2017-12-29 18:46 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2018-01-09 11:38 - 2017-12-29 18:44 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2018-01-09 11:38 - 2017-12-29 18:39 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-01-09 11:38 - 2017-12-29 18:38 - 000694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-01-09 11:38 - 2017-12-29 18:37 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-01-09 11:38 - 2017-12-29 18:36 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2018-01-09 11:38 - 2017-12-29 18:13 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-01-09 11:38 - 2017-12-29 10:04 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2018-01-09 11:38 - 2017-12-29 10:04 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2018-01-09 11:38 - 2017-12-29 09:51 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2018-01-09 11:38 - 2017-12-29 09:50 - 000577024 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-01-09 11:38 - 2017-12-29 09:50 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-01-09 11:38 - 2017-12-29 09:50 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2018-01-09 11:38 - 2017-12-29 09:50 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-01-09 11:38 - 2017-12-29 09:44 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2018-01-09 11:38 - 2017-12-29 09:43 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2018-01-09 11:38 - 2017-12-29 09:40 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-01-09 11:38 - 2017-12-29 09:39 - 000817152 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-01-09 11:38 - 2017-12-29 09:39 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-01-09 11:38 - 2017-12-29 09:39 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2018-01-09 11:38 - 2017-12-29 09:39 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-01-09 11:38 - 2017-12-29 09:28 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-01-09 11:38 - 2017-12-29 09:22 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2018-01-09 11:38 - 2017-12-29 09:22 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-01-09 11:38 - 2017-12-29 09:21 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-01-09 11:38 - 2017-12-29 09:18 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-01-09 11:38 - 2017-12-29 09:18 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2018-01-09 11:38 - 2017-12-29 09:16 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-01-09 11:38 - 2017-12-29 09:14 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2018-01-09 11:38 - 2017-12-29 09:05 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-01-09 11:38 - 2017-12-29 09:03 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-01-09 11:38 - 2017-12-29 09:03 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-01-09 11:38 - 2017-12-29 09:01 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-01-09 11:38 - 2017-12-29 09:01 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2018-01-09 11:38 - 2017-12-21 07:27 - 000634312 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2018-01-09 11:38 - 2017-12-13 17:31 - 000383720 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2018-01-09 11:38 - 2017-12-13 17:27 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-01-09 11:38 - 2017-12-13 17:27 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2018-01-09 11:38 - 2017-12-13 17:27 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2018-01-09 11:38 - 2017-12-13 17:27 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2018-01-09 11:38 - 2017-12-13 17:15 - 000309480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2018-01-09 11:38 - 2017-12-13 17:11 - 000071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2018-01-09 11:38 - 2017-12-13 17:11 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2018-01-09 11:38 - 2017-12-13 17:11 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2018-01-09 11:38 - 2017-12-13 16:50 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2018-01-09 11:38 - 2017-12-05 18:36 - 000625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2018-01-09 11:38 - 2017-12-05 18:36 - 000250880 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
2018-01-09 11:38 - 2017-12-05 18:36 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll
2018-01-09 11:38 - 2017-12-05 18:08 - 000481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2018-01-09 11:38 - 2017-12-05 18:08 - 000215040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll
2018-01-09 11:38 - 2017-12-05 16:59 - 003222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-01-09 11:38 - 2017-12-05 16:49 - 000032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcsPlugInService.dll
2018-01-08 20:28 - 2018-01-08 20:28 - 000002250 _____ C:\Users\Leyh\Desktop\Rkill.txt
2018-01-08 18:31 - 2018-01-08 18:31 - 000000000 ____D C:\Program Files\HitmanPro
2018-01-08 18:30 - 2018-01-10 23:28 - 000000000 ____D C:\ProgramData\HitmanPro
2018-01-08 18:28 - 2018-01-08 18:28 - 001540104 _____ (CHIP Digital GmbH) C:\Users\Leyh\Downloads\Hitman Pro - CHIP-Installer.exe
2018-01-08 14:10 - 2018-01-23 23:34 - 000000000 ____D C:\AdwCleaner
2018-01-06 14:18 - 2018-01-23 13:40 - 000003832 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1515244685
2018-01-06 14:18 - 2018-01-06 14:18 - 000001097 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera Browser.lnk
2018-01-06 14:18 - 2018-01-06 14:18 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\Opera Software
2018-01-06 14:18 - 2018-01-06 14:18 - 000000000 ____D C:\Users\Leyh\AppData\Local\Opera Software
2018-01-06 14:17 - 2018-01-23 13:41 - 000000000 ____D C:\Program Files\Opera
2018-01-05 23:23 - 2018-01-05 23:23 - 000000000 ___DL C:\Users\Leyh\AppData\LocalLow\PlayReady
2018-01-05 23:22 - 2018-01-05 23:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2018-01-05 23:21 - 2018-01-05 23:21 - 000000000 ____D C:\Program Files\Microsoft Silverlight
2018-01-05 23:21 - 2018-01-05 23:21 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2018-01-05 20:37 - 2018-01-05 20:38 - 000000000 ____D C:\NPE
2018-01-05 12:12 - 2018-01-05 12:12 - 000000000 ____D C:\Windows\system32\sstmp
2018-01-03 14:48 - 2018-01-03 14:48 - 000000000 ____D C:\Users\Leyh\AppData\LocalLow\Prideful Sloth
2018-01-02 01:05 - 2018-01-06 23:59 - 000000000 ____D C:\Users\Leyh\Documents\Klei
2018-01-02 01:05 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2018-01-02 01:05 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2018-01-02 01:05 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2018-01-02 01:05 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2018-01-02 01:05 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2018-01-02 01:05 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2018-01-02 01:05 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2018-01-02 01:05 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2018-01-02 01:05 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2018-01-02 01:05 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2018-01-02 01:05 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2018-01-02 01:05 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2018-01-02 01:05 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2018-01-02 01:05 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2018-01-02 01:05 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2018-01-02 01:04 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2018-01-02 01:04 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2018-01-02 01:04 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2018-01-02 01:04 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2018-01-02 01:04 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2018-01-02 01:04 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2018-01-02 01:04 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2018-01-02 01:04 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2018-01-02 01:04 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2018-01-02 01:04 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2018-01-02 01:04 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2018-01-02 01:04 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2018-01-02 01:04 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2018-01-02 01:04 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2018-01-02 01:04 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2018-01-02 01:04 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2018-01-02 01:04 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2018-01-02 01:04 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2018-01-02 01:04 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2018-01-02 01:04 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2018-01-02 01:04 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2018-01-02 01:04 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2018-01-02 01:04 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2018-01-02 01:04 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2018-01-02 01:04 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2018-01-02 01:04 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2018-01-02 01:04 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2018-01-02 01:04 - 2008-10-15 06:22 - 005631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2018-01-02 01:04 - 2008-10-15 06:22 - 004379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2018-01-02 01:04 - 2008-10-15 06:22 - 002605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2018-01-02 01:04 - 2008-10-15 06:22 - 002036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2018-01-02 01:04 - 2008-10-15 06:22 - 000519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2018-01-02 01:04 - 2008-10-15 06:22 - 000452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2018-01-02 01:04 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2018-01-02 01:04 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2018-01-02 01:04 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2018-01-02 01:04 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2018-01-02 01:04 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2018-01-02 01:04 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2018-01-02 01:04 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2018-01-02 01:04 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2018-01-02 01:04 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2018-01-02 01:04 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2018-01-02 01:04 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2018-01-02 01:04 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2018-01-02 01:04 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2018-01-02 01:04 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2018-01-02 01:04 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2018-01-02 01:04 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2018-01-02 01:04 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2018-01-02 01:04 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2018-01-02 01:04 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2018-01-02 01:04 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2018-01-02 01:04 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2018-01-02 01:04 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2018-01-02 01:04 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2018-01-02 01:04 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2018-01-02 01:04 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2018-01-02 01:04 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2018-01-02 01:04 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2018-01-02 01:04 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2018-01-02 01:04 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2018-01-02 01:04 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2018-01-02 01:04 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2018-01-02 01:04 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2018-01-02 01:04 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2018-01-02 01:04 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2018-01-02 01:04 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2018-01-02 01:04 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2018-01-02 01:04 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2018-01-02 01:04 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2018-01-02 01:04 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2018-01-02 01:04 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2018-01-02 01:04 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2018-01-02 01:04 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2018-01-02 01:04 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2018-01-02 01:04 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2018-01-02 01:04 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2018-01-02 01:04 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2018-01-02 01:04 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2018-01-02 01:04 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2018-01-02 01:04 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2018-01-02 01:04 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2018-01-02 01:04 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2018-01-02 01:04 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2018-01-02 01:04 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2018-01-02 01:04 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2018-01-02 01:04 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2018-01-02 01:04 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2018-01-02 01:04 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2018-01-02 01:04 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2018-01-02 01:04 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2018-01-02 01:04 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2018-01-02 01:04 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2018-01-02 01:04 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2018-01-02 01:04 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2018-01-02 01:04 - 2007-04-04 18:54 - 000107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2018-01-02 01:04 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2018-01-02 01:04 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2018-01-02 01:04 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2018-01-02 01:04 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2018-01-02 01:04 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2018-01-02 01:04 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2018-01-02 01:04 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2018-01-02 01:04 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2018-01-02 01:04 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2018-01-02 01:04 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2018-01-02 01:04 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2018-01-02 01:04 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2018-01-02 01:04 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2018-01-02 01:04 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2018-01-02 01:04 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2018-01-02 01:04 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2018-01-02 01:04 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2018-01-02 01:04 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2018-01-02 01:04 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2018-01-02 01:04 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2018-01-02 01:04 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2018-01-02 01:04 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2018-01-02 01:04 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2018-01-02 01:04 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2018-01-02 01:04 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2018-01-02 01:04 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2018-01-02 01:04 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2018-01-02 01:04 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2018-01-02 01:04 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2018-01-02 01:04 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2018-01-02 01:04 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2018-01-02 01:04 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2018-01-02 01:04 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2018-01-02 01:04 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2018-01-02 01:04 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2018-01-02 01:04 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2018-01-02 01:04 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2018-01-02 01:04 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2018-01-02 01:04 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2018-01-02 01:04 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2018-01-02 01:04 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2018-01-02 01:04 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2018-01-02 01:04 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2018-01-02 01:04 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2018-01-02 01:04 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2018-01-02 01:04 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2018-01-01 22:47 - 2018-01-01 22:47 - 000000000 ____D C:\Users\Leyh\AppData\LocalLow\Hinterland
2018-01-01 22:47 - 2018-01-01 22:47 - 000000000 ____D C:\Users\Leyh\AppData\Local\Hinterland
2018-01-01 15:11 - 2018-01-01 15:11 - 000002196 _____ C:\Users\Leyh\AppData\Roaming\Microsoft\Windows\Start Menu\RummyClub.lnk
2018-01-01 14:35 - 2018-01-11 12:29 - 000001164 _____ C:\Users\Leyh\Desktop\Facebook Gameroom.lnk
2018-01-01 14:35 - 2018-01-11 12:29 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook
2018-01-01 14:35 - 2018-01-11 12:29 - 000000000 ____D C:\Users\Leyh\AppData\Local\Facebook

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-01-23 23:28 - 2017-11-12 22:52 - 000000000 ____D C:\Program Files (x86)\MSI Afterburner
2018-01-23 23:28 - 2017-07-31 20:07 - 000000000 ____D C:\Program Files (x86)\Steam
2018-01-23 23:27 - 2017-10-26 15:31 - 000000000 ____D C:\ProgramData\NVIDIA
2018-01-23 23:27 - 2017-08-04 22:03 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2018-01-23 23:27 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-01-23 23:20 - 2017-09-23 15:35 - 000000000 ____D C:\Users\Leyh\AppData\Local\Battle.net
2018-01-23 22:07 - 2017-11-24 20:51 - 000000000 ____D C:\Program Files (x86)\World of Warcraft
2018-01-23 17:36 - 2017-09-23 15:35 - 000000000 ____D C:\Program Files (x86)\Blizzard App
2018-01-23 17:02 - 2017-12-03 15:47 - 000000000 ____D C:\Windows\pss
2018-01-23 17:02 - 2009-07-14 05:45 - 000021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-01-23 17:02 - 2009-07-14 05:45 - 000021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-01-23 15:36 - 2017-08-02 09:58 - 000000000 ____D C:\ProgramData\AVAST Software
2018-01-23 15:12 - 2017-07-31 22:32 - 000000000 ____D C:\Users\Leyh\AppData\Local\CrashDumps
2018-01-23 13:50 - 2017-07-31 19:55 - 000000000 ____D C:\Users\Leyh\AppData\Local\VirtualStore
2018-01-23 13:48 - 2017-12-07 17:06 - 000000000 ____D C:\Users\Leyh\AppData\Local\NPE
2018-01-22 20:32 - 2017-12-22 14:41 - 000004324 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-01-22 20:32 - 2017-10-08 13:53 - 000002786 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2018-01-22 20:32 - 2017-07-31 20:15 - 000003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-22 20:32 - 2017-07-31 20:15 - 000003798 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-22 20:32 - 2017-07-31 20:14 - 000004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-22 20:32 - 2017-07-31 20:14 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-22 20:32 - 2017-07-31 20:14 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-22 20:32 - 2017-07-31 20:14 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-22 20:32 - 2017-07-31 20:14 - 000003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-22 20:32 - 2017-07-31 20:14 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-21 21:57 - 2017-07-31 20:57 - 000000000 ____D C:\Users\Leyh\AppData\Local\Warframe
2018-01-21 14:34 - 2009-07-14 06:08 - 000032584 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2018-01-20 00:00 - 2017-08-01 09:50 - 000773912 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-01-20 00:00 - 2009-07-14 06:13 - 000773912 _____ C:\Windows\system32\PerfStringBackup.INI
2018-01-20 00:00 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2018-01-19 11:46 - 2017-09-20 12:12 - 000000000 ____D C:\Users\Leyh\AppData\Local\MEGAsync
2018-01-18 21:59 - 2017-08-03 10:15 - 000000000 ____D C:\Program Files (x86)\Black Desert Online
2018-01-18 21:52 - 2017-08-03 10:15 - 000000000 ____D C:\Users\Leyh\AppData\Local\BlackDesertOnline
2018-01-18 01:15 - 2017-08-02 17:37 - 000000000 ____D C:\Users\Leyh\Documents\ArcheAge
2018-01-18 00:17 - 2017-08-26 09:31 - 000000000 ____D C:\Program Files (x86)\NCSOFT
2018-01-18 00:17 - 2017-07-31 20:25 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2018-01-16 13:24 - 2017-07-31 20:33 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\TS3Client
2018-01-14 16:47 - 2017-09-23 23:01 - 000000000 ____D C:\Users\Leyh\AppData\Local\Jagex
2018-01-14 16:47 - 2017-09-23 23:01 - 000000000 ____D C:\ProgramData\Jagex
2018-01-14 16:45 - 2017-07-31 21:56 - 000000286 _____ C:\Users\Leyh\Desktop\New Text Document.txt
2018-01-11 17:38 - 2017-07-31 20:14 - 000000000 ____D C:\ProgramData\Package Cache
2018-01-11 14:01 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\rescache
2018-01-11 12:05 - 2017-08-01 09:44 - 000000000 ____D C:\Windows\system32\MRT
2018-01-11 12:03 - 2017-10-11 23:38 - 129365736 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-01-11 12:03 - 2017-08-01 09:43 - 129365736 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-01-10 13:32 - 2017-07-31 19:54 - 000000000 ____D C:\Users\Leyh
2018-01-10 11:58 - 2009-07-14 05:45 - 000269128 _____ C:\Windows\system32\FNTCACHE.DAT
2018-01-09 16:04 - 2017-08-02 14:10 - 000002158 _____ C:\Users\Leyh\Desktop\Discord.lnk
2018-01-09 16:04 - 2017-08-02 14:09 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\discord
2018-01-09 16:04 - 2017-08-02 14:09 - 000000000 ____D C:\Users\Leyh\AppData\Local\Discord
2018-01-09 11:39 - 2017-12-22 14:41 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-01-09 11:39 - 2017-12-22 14:41 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-01-09 11:39 - 2017-12-22 14:41 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-01-09 11:39 - 2017-12-22 14:41 - 000000000 ____D C:\Windows\system32\Macromed
2018-01-08 22:03 - 2017-08-21 17:35 - 000000000 ____D C:\ProgramData\WinZip
2018-01-08 22:02 - 2017-12-03 13:15 - 000000000 ____D C:\Program Files (x86)\SpeedFan
2018-01-08 21:55 - 2017-11-26 11:25 - 000000000 ____D C:\ProgramData\Origin
2018-01-08 21:54 - 2017-12-14 19:50 - 000000000 ____D C:\Program Files (x86)\Popcorn Time
2018-01-08 21:54 - 2017-11-26 11:29 - 000000000 ____D C:\Program Files (x86)\Origin
2018-01-08 21:54 - 2017-11-26 11:25 - 000000000 ____D C:\Users\Leyh\AppData\Local\Origin
2018-01-08 21:54 - 2017-11-12 22:53 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server
2018-01-08 21:54 - 2017-09-19 21:52 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazing Eternals
2018-01-08 21:53 - 2017-11-12 22:52 - 000000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2018-01-08 21:53 - 2017-08-26 09:14 - 000000000 ____D C:\Program Files (x86)\NC Launcher
2018-01-08 21:53 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\registration
2018-01-08 20:01 - 2017-10-27 07:23 - 000000000 ____D C:\Windows\system32\appmgmt
2018-01-06 14:26 - 2017-07-31 19:58 - 000000000 ____D C:\Program Files (x86)\Google
2018-01-05 20:48 - 2017-07-31 19:58 - 000000000 ____D C:\Users\Leyh\AppData\Local\Deployment
2018-01-05 13:10 - 2017-10-25 15:29 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-01-05 12:12 - 2017-09-26 10:10 - 000000000 ____D C:\ProgramData\PlugCache
2017-12-28 12:27 - 2017-10-25 15:30 - 000000971 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
2017-12-28 12:27 - 2017-10-25 15:30 - 000000959 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk
2017-12-24 15:10 - 2017-09-24 20:53 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\StardewValley
2017-12-24 14:18 - 2017-08-02 18:18 - 000000909 _____ C:\Users\Leyh\Desktop\nativelog.txt
2017-12-24 14:18 - 2017-08-01 20:45 - 000000000 ____D C:\Users\Leyh\AppData\Roaming\.minecraft
2017-12-24 14:18 - 2017-08-01 20:44 - 000000000 ____D C:\Program Files (x86)\Minecraft

Some files in TEMP:
====================
2018-01-18 21:59 - 2018-01-18 21:59 - 000000180 _____ () C:\Users\Leyh\AppData\Local\Temp\6699d3ee8dd9cf775caae782c8f44f03.dll
2018-01-18 21:59 - 2018-01-18 21:59 - 000000036 _____ () C:\Users\Leyh\AppData\Local\Temp\b24519be62b276ef5eb6448fdcb03b05.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-01-18 02:23

==================== End of FRST.txt ============================
--- --- ---

Leyhja 23.01.2018 23:36
Addition

Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21.01.2018
Ran by Leyh (23-01-2018 23:35:10)
Running from C:\Users\Leyh\Desktop
Windows 7 Professional Service Pack 1 (X64) (2017-07-31 18:54:52)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2885199775-3860845558-3182105547-500 - Administrator - Disabled)
Guest (S-1-5-21-2885199775-3860845558-3182105547-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2885199775-3860845558-3182105547-1002 - Limited - Enabled)
Leyh (S-1-5-21-2885199775-3860845558-3182105547-1001 - Administrator - Enabled) => C:\Users\Leyh

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Adobe Flash Player 28 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 28.0.0.137 - Adobe Systems Incorporated)
Amazing Eternals (HKLM-x32\...\{BA712A27-6EAD-49CF-B011-7CC1AA0F1A2E}) (Version: 1.0.0 - Digital Extremes)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 388.00 - NVIDIA Corporation) Hidden
Black Desert Online (HKLM-x32\...\{C1F96C92-7B8C-485F-A9CD-37A0708A2A60}) (Version: 1.0.0.7 - Kakao Games Europe B.V.)
Blade & Soul (HKLM-x32\...\{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.260 - NC Interactive, LLC) Hidden
Blade & Soul (HKLM-x32\...\InstallShield_{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.260 - NC Interactive, LLC)
Blizzard App (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 5.35 - Piriform)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Discord (HKU\S-1-5-21-2885199775-3860845558-3182105547-1001\...\Discord) (Version: 0.0.300 - Discord Inc.)
Driver Talent (HKLM-x32\...\{29FE44D7-BC89-4188-8B0E-F6BA073C15A5}_is1) (Version: 6.5.53.158 - OSToto Co., Ltd.)
Epic Games Launcher (HKLM-x32\...\{67E2C47C-F3B7-41E8-B615-1CE5B4E329AB}) (Version: 1.1.129.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Facebook Gameroom 1.12.6582.35661 (HKLM-x32\...\{64FAFFD8-8056-48D3-95DB-6EE6F3D286C4}) (Version: 1.12.6582.35661 - Facebook)
Guild Wars 2 (HKLM\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)
Gyazo 3.3.2 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version:  - Nota Inc.)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.1.6.3 - Hi-Rez Studios)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.20.286 - SurfRight B.V.)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\{B2777235-FDF0-4371-9D1E-0CD24DFE3579}) (Version: 4.2.1 - Riot Games) Hidden
League of Legends (HKLM-x32\...\League of Legends 4.2.1) (Version: 4.2.1 - Riot Games)
MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{56F27690-F6EA-3356-980A-02BA379506EE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Minion (HKU\S-1-5-21-2885199775-3860845558-3182105547-1001\...\{Minion}}_is1) (Version: 3.0 - Good Game Mods LLC)
MSI Afterburner 4.4.0 (HKLM-x32\...\Afterburner) (Version: 4.4.0 - MSI Co., LTD)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
NC Launcher (HKLM-x32\...\NCLauncherS_plaync) (Version:  - NCSOFT)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version:  - NCSOFT)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.63.14 - Black Tree Gaming)
NVIDIA Graphics Driver 388.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.31 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.35.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.35.1 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{E10DB5DA-E576-40EA-A7FC-1CB2A7B283A6}) (Version: 9.09.1112 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Opera Stable 50.0.2762.67 (HKLM-x32\...\Opera 50.0.2762.67) (Version: 50.0.2762.67 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.5.6.6235 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
Popcorn Time (HKLM-x32\...\Popcorn Time_is1) (Version: 5.7.2.0 - Popcorn Time) <==== ATTENTION
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8210 - Realtek Semiconductor Corp.)
RivaTuner Statistics Server 7.0.0 (HKLM-x32\...\RTSS) (Version: 7.0.0 - Unwinder)
RuneScape Launcher 2.2.4 (HKLM\...\RuneScape Launcher_is1) (Version: 2.2.4 - Jagex Ltd)
Speccy (HKLM\...\Speccy) (Version: 1.31 - Piriform)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.5 - TeamSpeak Systems GmbH)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.90922 - TeamViewer)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 2.6.3.0 - Zenimax Online Studios)
Twitch (HKU\S-1-5-21-2885199775-3860845558-3182105547-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 7.0.0.0 - Twitch Interactive, Inc.)
Uplay (HKLM-x32\...\Uplay) (Version: 29.0 - Ubisoft)
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll [2017-11-18] ()
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-11-14] (NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0EAEAFBF-9DC8-4440-AC7B-2CE698338218} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe
Task: {10D15A11-B76E-4307-B588-C4870D9958B1} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2017-10-31] ()
Task: {11B929B2-3398-4C6E-A234-511A3E4F4ACE} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe
Task: {2F08A57E-7627-417A-A4B5-C63DE0873654} - System32\Tasks\Opera scheduled Autoupdate 1515244685 => C:\Program Files\Opera\launcher.exe [2018-01-22] (Opera Software)
Task: {2F419DD7-0937-4579-A2D4-64D9F698CBA8} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2017-05-16] ()
Task: {38D43B28-D9F4-4908-B208-8C64D1B38CA5} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2017-05-16] ()
Task: {3AE66E1B-2069-483F-9022-1EC667FE2AD6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-01-09] (Adobe Systems Incorporated)
Task: {3FED2CD4-9F55-42FC-91DA-34F9A53F1675} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe
Task: {5F4988E5-C796-402F-9F4C-355E5C8103ED} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-09-20] (Piriform Ltd)
Task: {67B7F1E6-26EB-4451-AA6A-0C3E4E30DBCB} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
Task: {6EC265AC-5D2C-4CCD-8DAE-B9D5B64EF9CD} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-10-11] (NVIDIA Corporation)
Task: {96575A0D-6131-41B7-AC29-FA99FCCE94DB} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
Task: {B83F8A7F-10C3-4EFC-A32F-8C14EA70F256} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-11-13] (NVIDIA Corporation)
Task: {DF4A667F-FC50-4A52-8DCA-8A4B38E35D08} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe
Task: {E847C5EA-F0F6-460E-969B-593767D574E3} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-2885199775-3860845558-3182105547-1001 => C:\Users\Leyh\AppData\Local\MEGAsync\MEGAupdater.exe [2018-01-19] (Mega Limited)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2017-06-07 21:09 - 2017-11-18 15:00 - 000598528 _____ () C:\Users\Leyh\AppData\Local\MEGAsync\ShellExtX64.dll
2017-09-07 17:12 - 2017-09-07 17:12 - 000069632 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2018-01-23 13:40 - 2018-01-22 07:02 - 096448600 _____ () C:\Program Files\Opera\50.0.2762.67\opera_browser.dll
2018-01-23 13:40 - 2018-01-22 07:02 - 004207704 _____ () C:\Program Files\Opera\50.0.2762.67\libglesv2.dll
2018-01-23 13:40 - 2018-01-22 07:02 - 000100440 _____ () C:\Program Files\Opera\50.0.2762.67\libegl.dll
2017-07-31 20:18 - 2017-10-17 02:21 - 000186544 _____ () c:\program files (x86)\ostotosoft\drivertalent\ldrvsvc.dll
2017-07-31 20:18 - 2017-10-17 02:21 - 000263344 _____ () c:\program files (x86)\ostotosoft\drivertalent\updater\checkupdate.dll
2017-07-31 20:18 - 2017-10-17 02:21 - 000169648 _____ () c:\program files (x86)\ostotosoft\drivertalent\substat.dll
2017-07-31 20:18 - 2017-10-17 02:21 - 000169648 _____ () c:\program files (x86)\ostotosoft\drivertalent\DtlPlug.dll
2017-07-31 20:18 - 2017-10-17 02:21 - 000111280 _____ () c:\program files (x86)\ostotosoft\drivertalent\dstudp.dll
2017-07-31 20:18 - 2017-10-17 02:21 - 000123568 _____ () c:\program files (x86)\ostotosoft\drivertalent\udp.dll
2017-10-23 11:46 - 2017-10-23 11:46 - 000161968 _____ () c:\program files (x86)\ostotosoft\conquerorlive\lhelpersvc.dll
2017-10-23 11:46 - 2017-10-23 11:46 - 000263344 _____ () c:\program files (x86)\ostotosoft\conquerorlive\updater\checkupdate.dll
2017-10-23 11:46 - 2017-10-23 11:45 - 000169648 _____ () c:\program files (x86)\ostotosoft\conquerorlive\substat.dll
2017-07-31 20:08 - 2017-11-29 06:09 - 000781088 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2017-07-31 20:08 - 2016-09-01 02:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2017-07-31 20:08 - 2016-09-01 02:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2017-07-31 20:08 - 2016-09-01 02:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2017-07-31 20:08 - 2017-12-15 20:59 - 002558752 _____ () C:\Program Files (x86)\Steam\video.dll
2017-12-15 08:14 - 2017-11-04 02:54 - 005137696 _____ () C:\Program Files (x86)\Steam\libavcodec-57.dll
2017-12-15 08:14 - 2017-11-04 02:54 - 000847136 _____ () C:\Program Files (x86)\Steam\libavutil-55.dll
2017-12-15 08:14 - 2017-11-04 02:54 - 000695584 _____ () C:\Program Files (x86)\Steam\libavformat-57.dll
2017-12-15 08:14 - 2017-11-04 02:54 - 000351520 _____ () C:\Program Files (x86)\Steam\libavresample-3.dll
2017-12-15 08:14 - 2017-11-04 02:54 - 000783648 _____ () C:\Program Files (x86)\Steam\libswscale-4.dll
2017-07-31 20:08 - 2017-12-15 20:59 - 000904992 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2017-07-31 20:08 - 2016-07-04 23:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-04-13 09:38 - 2017-11-18 14:59 - 000798208 _____ () C:\Users\Leyh\AppData\Local\MEGAsync\libsodium.dll
2017-07-31 20:08 - 2017-09-07 03:04 - 000678400 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
2017-07-31 20:08 - 2017-10-31 05:44 - 071471904 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2017-07-31 20:08 - 2015-09-25 00:52 - 000119208 _____ () C:\Program Files (x86)\Steam\winh264.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP_TDI => ""="Driver Group"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Schedule => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Schedule => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-10-02 22:02 - 2017-10-02 22:03 - 000002112 _____ C:\Windows\system32\Drivers\etc\hosts

23.32.122.80 akamai-webcdn.blackdesertonline.com
23.32.122.80 akamai-webcdn.blackdesertonline.com.edgekey.net
23.32.122.80 e339.d.akamaiedge.net
95.101.89.250 akamai-gamecdn.blackdesertonline.com
95.101.89.250 akamai-gamecdn.blackdesertonline.com.edgesuite.net
95.101.89.250 a1065.d.akamai.net
2.16.64.137 a1065.d.akamai.net
209.58.137.205 na.lt.theblackdesertonline.com
209.58.137.204 na.lt.theblackdesertonline.com
209.58.137.203 na.lt.theblackdesertonline.com
209.58.137.202 na.lt.theblackdesertonline.com
209.58.137.201 na.lt.theblackdesertonline.com
209.58.137.232 na.lt.theblackdesertonline.com
209.58.137.231 na.lt.theblackdesertonline.com
209.58.137.230 na.lt.theblackdesertonline.com
209.58.137.229 na.lt.theblackdesertonline.com
209.58.137.239 na.lt.theblackdesertonline.com
5.79.111.107 eu.lt.theblackdesertonline.com
5.79.111.100 eu.lt.theblackdesertonline.com
5.79.111.101 eu.lt.theblackdesertonline.com
5.79.111.68 eu.lt.theblackdesertonline.com
5.79.111.69 eu.lt.theblackdesertonline.com
5.79.111.102 eu.lt.theblackdesertonline.com
5.79.111.70 eu.lt.theblackdesertonline.com
5.79.111.104 eu.lt.theblackdesertonline.com
5.79.111.105 eu.lt.theblackdesertonline.com
5.79.111.106 eu.lt.theblackdesertonline.com
5.79.111.35 www.blackdesertonline.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2885199775-3860845558-3182105547-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Leyh\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{16C0A4C7-D903-4F34-BEBC-AFA82C5A0776}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{C20F89CF-6FE2-4A05-9ED5-C902D46F8E2E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6EFCDA99-05D8-434B-ADB8-DCFD40EDE5E5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{3C4B31D6-567A-424B-BC1D-30D68ACA1658}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [TCP Query User{CC334AA2-FC6F-4A7C-8800-56230B179AE1}C:\program files (x86)\ostotosoft\drivertalent\drivertalent.exe] => (Allow) C:\program files (x86)\ostotosoft\drivertalent\drivertalent.exe
FirewallRules: [UDP Query User{9496E031-2B82-4F7A-8E4E-106C20946821}C:\program files (x86)\ostotosoft\drivertalent\drivertalent.exe] => (Allow) C:\program files (x86)\ostotosoft\drivertalent\drivertalent.exe
FirewallRules: [{B4E1A8EF-F264-4BC4-8582-4B01E67D97AF}] => (Allow) C:\Program Files (x86)\OSTotoSoft\DriverTalent\DriverTalent.exe
FirewallRules: [{17D2B471-7E74-4CDD-9D8C-962C6EF06DA0}] => (Allow) C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLService.exe
FirewallRules: [{D39CD283-9CDB-4324-BE92-ADD4DAE6C70C}] => (Allow) C:\Program Files (x86)\OSTotoSoft\DriverTalent\download\MiniThunderPlatform.exe
FirewallRules: [{E2261EB0-FC67-47FD-A567-34E273DB336E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ArcheAge\GlyphClient.exe
FirewallRules: [{7ECC3814-F4E5-49E9-947A-50675E50FCE6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ArcheAge\GlyphClient.exe
FirewallRules: [TCP Query User{462336D5-D5C8-4052-8532-9DC0B6F11031}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{137DA6F8-76C2-4790-BBBA-2CFEB710B6A6}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{1972E749-075C-4051-90ED-771A679B9B02}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe
FirewallRules: [UDP Query User{5FC5937F-403B-4BF6-B369-DEE124A5EA32}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe
FirewallRules: [{8D0848FB-F9B8-4109-A746-49A28EBFF646}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [{C6B39826-CBAA-4D28-9EFD-E08F6F9A089D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [TCP Query User{292D9A44-6812-4654-91E4-8148924E565C}C:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe
FirewallRules: [UDP Query User{EC25286F-F794-4C0F-949C-7A901A6D715E}C:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe
FirewallRules: [{BCB1A8CD-A466-4FC1-AD4C-E1FB312813DA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\7 Days To Die\7dLauncher.exe
FirewallRules: [{4C067A56-D178-410E-A411-F34FBD46092A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\7 Days To Die\7dLauncher.exe
FirewallRules: [{555BC824-1D71-46D6-B888-807E81CE884F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY XIV Online\boot\ffxivboot.exe
FirewallRules: [{87A562DF-90A0-4B27-99C8-815C037A7B05}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY XIV Online\boot\ffxivboot.exe
FirewallRules: [{224FD2A9-A9EA-447C-B9EC-04100F241C63}] => (Allow) C:\Users\Leyh\AppData\Local\AmazingEternals\Downloaded\Public\AmazingEternals.x64.exe
FirewallRules: [{A8BAA476-8048-4A5F-B914-2562A490EB75}] => (Allow) C:\Users\Leyh\AppData\Local\AmazingEternals\Downloaded\Public\AmazingEternals.x64.exe
FirewallRules: [{FEBC34DA-1CE2-4820-97C2-594C35727AA2}] => (Allow) C:\Users\Leyh\AppData\Local\AmazingEternals\Downloaded\Public\Tools\RemoteCrashSender.exe
FirewallRules: [{091C2AB8-20CB-4F94-994B-85398C18CA6A}] => (Allow) C:\Users\Leyh\AppData\Local\AmazingEternals\Downloaded\Public\AmazingEternals.x64.exe
FirewallRules: [{2D6C8903-54D0-44DC-B9F2-EBCB58F4DC27}] => (Allow) C:\Users\Leyh\AppData\Local\AmazingEternals\Downloaded\Public\AmazingEternals.x64.exe
FirewallRules: [{59A67B1D-761D-469F-B250-EE1EDDFE4D32}] => (Allow) C:\Users\Leyh\AppData\Local\AmazingEternals\Downloaded\Public\Tools\RemoteCrashSender.exe
FirewallRules: [TCP Query User{35232180-BE62-4CC6-92FA-19F9B71E9F89}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [UDP Query User{126E40A9-4232-490D-8D6F-A05D139EFD17}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [TCP Query User{B1287717-71C1-4D1A-83D1-C5D6DAF8A310}C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe
FirewallRules: [UDP Query User{4D38EDD3-044D-41E1-B6B4-3BE6F78D0DBC}C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe
FirewallRules: [{0CCF715E-005B-44B2-890D-3243251925D0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe
FirewallRules: [{8E6ABDFD-6D7C-43EB-AF5F-B2C0A580EBA6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe
FirewallRules: [{BF35FDDF-BA95-4F61-BB97-9F003BF44080}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{F01B3294-A06B-4D05-9CA0-5DB7D8A81762}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{495E6E11-FA48-445C-8E6F-45C828D4FF54}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trove\GlyphClient.exe
FirewallRules: [{D16B1228-6FF6-4C40-AE25-89E167949D10}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trove\GlyphClient.exe
FirewallRules: [{203824F4-3554-4C08-9190-F52F98501DA3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned_BE.exe
FirewallRules: [{C12F0828-96F5-4915-ADEB-DEBB81B78BD3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned_BE.exe
FirewallRules: [{32F4237F-98CC-49FE-B58A-149D1A4CBEAF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned.exe
FirewallRules: [{938D9B28-203C-476F-B143-73341D213EBE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned.exe
FirewallRules: [{2D2D58A2-C506-46B3-AF4F-884B48345036}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{997DDB41-0D5D-494C-A837-DD0F05D7B2F6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{110A6700-A664-4143-8B08-4C67431F8C51}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [TCP Query User{4F00168D-DC76-418B-A990-FCE0C42631D7}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe
FirewallRules: [UDP Query User{9CC6D40B-259A-4C78-B167-7C4C99CFE42F}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe
FirewallRules: [TCP Query User{BAEFA0B3-0A1C-4EB8-9685-A9E28B24B17D}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe
FirewallRules: [UDP Query User{1A12B430-C111-4CAE-BFEE-20A75D9510AF}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe
FirewallRules: [{82F1F3D8-E25C-410B-88B0-2F4AD43DB578}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{EA43469E-9A2F-4EBD-8D0A-58FCF04003B9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{539D2EC3-82CE-411B-B5A2-D11BC385B162}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\strife\bin\strife.exe
FirewallRules: [{7D75D59F-61F9-4138-83A7-56C5CB616633}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\strife\bin\strife.exe
FirewallRules: [TCP Query User{A1DCE222-88BA-4C91-9842-72271336F528}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [UDP Query User{7AA962D1-7E72-4778-9AC6-CC58DA6D8194}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [{F233B853-65B0-476C-B168-0F0456F1CA4B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Creativerse\Creativerse.exe
FirewallRules: [{504B63EA-ED57-4F9A-B15E-F0691794FA45}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Creativerse\Creativerse.exe
FirewallRules: [{3735E914-5537-4E24-AB09-E000375FDAEC}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
FirewallRules: [{F5A52520-AFF7-4426-83AA-19417CC28630}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
FirewallRules: [{FE927F73-F5FF-4FE0-B2F6-8E03EB2771D3}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe
FirewallRules: [{3B6E0E1B-4B6D-481D-AAF0-6DF20BA5F420}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe
FirewallRules: [{AF61CE4C-A95C-42AC-A48D-8A5736D5A26B}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exe
FirewallRules: [{C423C3DD-F18F-4668-9DD8-3921A3DAE40C}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exe
FirewallRules: [{820B245E-748C-4C59-B9EE-CDE556C01FF0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound.exe
FirewallRules: [{CB799250-441D-4A30-971E-6792B35B46D2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound.exe
FirewallRules: [{99D1BDB8-2916-49FC-AB43-0F9B54B6282F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{169C1AA8-99FF-4159-B065-207EFF1EEAA0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{EC5C8938-6FF2-4700-B82D-C77373BF54C2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{FFB7FF54-3829-461F-B00B-982B528B1EFE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{89142581-53D3-4461-8758-4030F0863C1F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\starbound.exe
FirewallRules: [{16F27726-D473-4798-B821-F4DB06673DAB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\starbound.exe
FirewallRules: [TCP Query User{C079B4BC-26D6-42A8-B6FB-2D091EAB6C1D}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe
FirewallRules: [UDP Query User{80625F5E-8463-4ED5-A37A-59CFFFDE93CF}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe
FirewallRules: [{FD663033-6806-4F97-A46F-16EEFC121576}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{F815A7C6-57C2-4401-BBB7-1E53F1F9D840}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{20512BF2-7ED8-4A52-80C7-A041294D28EA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{565E8620-6A8E-4152-8C32-5A05A4913B5B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{F2EAB63B-17BC-4121-9633-C3F38C03F678}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{DB91C58A-3C9B-4FCF-9AC9-246CF84049C5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{A6F9C320-AEFA-4679-B4A2-458F67673EB9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{3DA8EB69-C6B6-4078-BB28-ED55CDD95C9B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{E3DA470C-E515-4030-8CAF-BCF05A7A0FAC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{FB910703-488E-4897-AA27-5F5529DDE39F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{F78826E3-7EAB-45E9-9E0D-794882962FAA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{E58A726C-BB2E-493A-A07F-E3DBF4039A12}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{0ACE18D1-FB73-44E1-B195-74FAE15F376A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{1AF16243-8497-4AC8-BF81-25CE1F4A14C4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{8A21FD8F-0FD5-4E9D-8DCF-69085A8AF1BA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{29E88425-E9D6-4D99-8BAC-C36C59423516}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{78C85169-03F5-4A71-9A53-654366EFAD0A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{E22F909F-BA17-49D6-A822-ECBDBF638886}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{495CAD28-9B95-4430-B41D-64DB82CA2005}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{7263C1DD-6D8F-4B30-BC85-0BBF645C3FDC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{B4AC3891-BBF9-4A16-B048-2B96FCE0F77D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Yonder The Cloud Catcher Chronicles\YonderCCC.exe
FirewallRules: [{9EC2C10B-277D-4E10-92F6-08A0F34C1482}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Yonder The Cloud Catcher Chronicles\YonderCCC.exe
FirewallRules: [{226397D0-96F6-49C1-B7B6-3345AFF9147B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TwinSaga\Launcher.exe
FirewallRules: [{89208877-F235-4D7C-8AEE-185655E94A8B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TwinSaga\Launcher.exe
FirewallRules: [{0C5D479C-C0CE-479F-9810-473B58D7D96B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TwinSaga\game.bin
FirewallRules: [{3F623D0F-5A05-41A1-8D10-FD38C3318583}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TwinSaga\game.bin
FirewallRules: [{751B0135-D7F4-48E2-97C3-99D116C77C1E}] => (Allow) C:\Program Files\Opera\50.0.2762.58\opera.exe
FirewallRules: [{F16DB388-9599-47D0-A878-9765491759B6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [{026E8AA1-0615-4B24-A081-B20E03AA041B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [{06D98F04-346C-4A8C-BD42-26398ED5BBFA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Magicka 2\engine\Magicka2.exe
FirewallRules: [{C5048AF0-194F-48D6-8011-5B0878E6443D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Magicka 2\engine\Magicka2.exe
FirewallRules: [{FCA10416-D6C2-4D62-B3A2-586119FD7473}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{6FA4ABEB-0B9E-4E58-89AA-83895FF159B8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{CDEBA88F-84BC-420B-824F-3DDC86E70DAB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound.exe
FirewallRules: [{03E14F96-629D-453A-A019-8C01212D590C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound.exe
FirewallRules: [{D07D0DCD-E152-469B-9803-B9A752A5EE64}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{C551BF48-CEB6-4368-BFB6-A7FB28002572}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{096B2858-0C0E-4AB3-B560-B9D86390A1F1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{60C64814-CE04-4B4C-A785-8CFD8D679071}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{66B97B60-5A44-4E8C-BC02-B375B4865D71}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\starbound.exe
FirewallRules: [{8DDD8245-8B77-4E72-9578-9FE395496E4D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\starbound.exe
FirewallRules: [TCP Query User{640B2091-0450-4E23-92FA-4DD9D7F0A311}C:\program files (x86)\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe
FirewallRules: [UDP Query User{5CC88A90-55F1-4201-B197-58D0ECA9DDF4}C:\program files (x86)\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\don't starve together\bin\dontstarve_dedicated_server_nullrenderer.exe
FirewallRules: [TCP Query User{08A26B22-CA24-4116-AC0F-26E7678E6BC9}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\x86\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\x86\gameclient.exe
FirewallRules: [UDP Query User{4B6D4921-01D5-4B0C-9E70-2B28B34CA7F3}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\x86\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\x86\gameclient.exe
FirewallRules: [{11EC0D94-2045-4DDD-9D76-685FECD624FD}] => (Allow) C:\Program Files\Opera\50.0.2762.67\opera.exe

==================== Restore Points =========================

18-01-2018 18:54:27 Scheduled Checkpoint
19-01-2018 23:58:50 Windows Update
23-01-2018 16:29:33 Malwarebytes Anti-Rootkit Restore Point
23-01-2018 16:58:49 Windows Update

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/23/2018 11:28:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/23/2018 04:32:30 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/23/2018 03:38:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/23/2018 03:12:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: FRST64.exe, version: 21.1.2018.0, time stamp: 0x5a6485fc
Faulting module name: FRST64.exe, version: 21.1.2018.0, time stamp: 0x5a6485fc
Exception code: 0xc0000005
Fault offset: 0x0000000000026946
Faulting process id: 0xbe8
Faulting application start time: 0x01d394542704f750
Faulting application path: C:\Users\Leyh\Desktop\FRST64.exe
Faulting module path: C:\Users\Leyh\Desktop\FRST64.exe
Report Id: 657e5f99-0047-11e8-982f-6c626d5df0c2

Error: (01/23/2018 02:12:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/23/2018 01:02:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/22/2018 07:00:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/21/2018 02:35:12 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (01/20/2018 09:42:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: svchost.exe_SysMain, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: sysmain.dll, version: 6.1.7601.24000, time stamp: 0x5a499a8d
Exception code: 0xc0000005
Fault offset: 0x000000000000b464
Faulting process id: 0x8ec
Faulting application start time: 0x01d391e9ac0b6b4d
Faulting application path: C:\Windows\system32\svchost.exe
Faulting module path: c:\windows\system32\sysmain.dll
Report Id: 685922e6-fe22-11e7-b16a-6c626d5df0c2

Error: (01/20/2018 01:25:08 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.


System errors:
=============
Error: (01/23/2018 11:27:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Origin Web Helper Service service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

Error: (01/23/2018 11:27:40 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Origin Web Helper Service service to connect.

Error: (01/23/2018 11:25:00 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.

Error: (01/23/2018 11:25:00 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 70.

Error: (01/23/2018 11:24:46 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The NVIDIA Display Container LS service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 1000 milliseconds: Restart the service.

Error: (01/23/2018 11:24:46 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Hi-Rez Studios Authenticate and Update Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (01/23/2018 11:24:46 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The NVIDIA LocalSystem Container service terminated unexpectedly.  It has done this 1 time(s).

Error: (01/23/2018 11:24:46 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The NVIDIA Telemetry Container service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 1000 milliseconds: Restart the service.

Error: (01/23/2018 11:24:46 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Media Player Network Sharing Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (01/23/2018 11:24:46 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Steam Client Service service terminated unexpectedly.  It has done this 1 time(s).


CodeIntegrity:
===================================
  Date: 2017-08-01 17:12:54.758
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\win32k.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-08-01 17:12:54.726
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\win32k.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i3 CPU 550 @ 3.20GHz
Percentage of memory in use: 31%
Total physical RAM: 8183.11 MB
Available physical RAM: 5567.78 MB
Total Virtual: 16364.39 MB
Available Virtual: 13850.52 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:342.12 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 20FC34C5)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

cosinus 24.01.2018 10:16
Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte:


1. Schritt: Malwarebytes Version 3

Downloade Dir bitte Malwarebytes Anti-Malware 3
  • Installiere das Programm in den vorgegebenen Pfad.
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scan, wähle den Bedrohungs-Scan aus und klicke auf Scan starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Ausgewählte Elemente in die Quarantäne verschieben.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM nach dem Neustart, klicke auf Berichte.
  • Wähle den neuesten Scan-Bericht aus, klicke auf Bericht anzeigen und dann auf Export.
  • Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.



2. Schritt: ESET

Downloade Dir bitte ESET Online Scanner (Bebilderte Anleitung)
  • Starte die Installationsdatei.
  • Akzeptiere die Nutzungsbedingungen.
  • Wähle Erkennung evtl. unerwünschter Anwendungen aktivieren aus und klicke auf Scannen.
  • Zuerst werden die notwendigen Signaturen heruntergeladen, anschließend startet ESET automatisch den Suchlauf.
  • Am Ende des Suchlaufs werden gegebenenfalls die gefundenen Elemente aufgelistet.
  • Schließe den ESET Online Scanner rechts oben [ X ] und klicke anschließend auf Schließen.
  • Drücke bitte die Tastenkombination WIN+R zum Ausführen und kopiere folgenden Text in die Zeile und drücke im Anschluss auf OK:
    Code:
    notepad "%tmp%\log.txt"
  • Kopiere den gesamten Text mittels STRG+A und STRG+C hier in deine Antwort in CODE-Tags



3. Schritt: SecurityCheck

Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

Leyhja 24.01.2018 15:10
Malwarebytes:

Code:
Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 24.01.18
Scan-Zeit: 12:14
Protokolldatei: bfeb6274-00f7-11e8-8313-6c626d5df0c2.json
Administrator: Ja

-Softwaredaten-
Version: 3.3.1.2183
Komponentenversion: 1.0.262
Version des Aktualisierungspakets: 1.0.3773
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Leyh-PC\Leyh

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 235514
Erkannte Bedrohungen: 241
In die Quarantäne verschobene Bedrohungen: 232
Abgelaufene Zeit: 3 Min., 56 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 7
PUP.Optional.DriveTheLife, C:\PROGRAM FILES (X86)\OSTOTOSOFT\DRIVERTALENT\LDRVSVC.DLL, In Quarantäne, [1056], [475816],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\updater\CheckUpdate.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dstudp.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DtlPlug.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\libcurl.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\substat.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\udp.dll, In Quarantäne, [1056], [475790],1.0.3773

Registrierungsschlüssel: 5
PUP.Optional.DriveTheLife, HKLM\SOFTWARE\WOW6432NODE\OSTOTOSOFT\DRIVERTALENT, In Quarantäne, [1056], [475857],1.0.3773
PUP.Optional.DriveTheLife, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\LDRVSVC, In Quarantäne, [1056], [475816],1.0.3773
PUP.Optional.GreatDealz, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\lobonlhedgiilkfmbbbfhkaoefacipgj, In Quarantäne, [1833], [466866],1.0.3773
PUP.Optional.DriveTheLife, HKU\S-1-5-21-2885199775-3860845558-3182105547-1001\SOFTWARE\OSTOTOSOFT\DRIVERTALENT, In Quarantäne, [1056], [475860],1.0.3773
PUP.Optional.DriveTheLife, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{29FE44D7-BC89-4188-8B0E-F6BA073C15A5}_is1, In Quarantäne, [1056], [475790],1.0.3773

Registrierungswert: 5
PUP.Optional.Apusx.ShrtCln, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, In Quarantäne, [1336], [474777],1.0.3773
PUP.Optional.DriveTheLife, HKLM\SOFTWARE\WOW6432NODE\OSTOTOSOFT\DRIVERTALENT|APPPATH, In Quarantäne, [1056], [475857],1.0.3773
PUP.Optional.DriveTheLife, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\LDRVSVC|FAILURECOMMAND, In Quarantäne, [1056], [475816],1.0.3773
PUP.Optional.DriveTheLife, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION|DRIVERTALENT.EXE, In Quarantäne, [1056], [478671],1.0.3773
PUP.Optional.DriveTheLife, HKU\S-1-5-21-2885199775-3860845558-3182105547-1001\SOFTWARE\OSTOTOSOFT\DRIVERTALENT|APPPATH, In Quarantäne, [1056], [475860],1.0.3773

Registrierungsdaten: 1
PUP.Optional.Apusx.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Ersetzt, [1336], [474775],1.0.3773

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 31
PUP.Optional.DriveTheLife, C:\PROGRAMDATA\DRIVERTALENT, In Quarantäne, [1056], [475796],1.0.3773
PUP.Optional.DriveTheLife, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\DRIVER TALENT, In Quarantäne, [1056], [475797],1.0.3773
PUP.Optional.DriveTheLife, C:\Users\Leyh\AppData\Roaming\DriverTalent\IconDir, In Quarantäne, [1056], [475805],1.0.3773
PUP.Optional.DriveTheLife, C:\Users\Leyh\AppData\Roaming\DriverTalent\Config, In Quarantäne, [1056], [475805],1.0.3773
PUP.Optional.DriveTheLife, C:\USERS\LEYH\APPDATA\ROAMING\DRIVERTALENT, In Quarantäne, [1056], [475805],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\wdmaudio\win8.1_x64, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\wdmaudio\win8.1_x86, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLPlugs\InstallDllPlugV1, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\wdmaudio\win7_x86, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\wdmaudio\win8_x64, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\wdmaudio\win8_x86, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLPlugs\InstallCLPlugV1, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLPlugs\FilesUpdateV1, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLPlugs\WinterUpdate, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLPlugs\MppPlugV1, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare\HWInfo, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv0, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv1, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv2, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv3, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\cache\softico, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare\lan, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\Autosetup, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\Dtlconfig, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLPlugs, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\updater, Entfernung fehlgeschlagen, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\cache, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\drv64, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan, In Quarantäne, [1056], [475790],1.0.3773

Datei: 192
PUP.Optional.DriveTheLife, C:\PROGRAMDATA\DRIVERTALENT\BACKUPLIST.DAT, In Quarantäne, [1056], [475796],1.0.3773
PUP.Optional.DriveTheLife, C:\ProgramData\DriverTalent\dtldrvcache101030018.db, In Quarantäne, [1056], [475796],1.0.3773
PUP.Optional.DriveTheLife, C:\ProgramData\DriverTalent\dtlplugs.ini, In Quarantäne, [1056], [475796],1.0.3773
PUP.Optional.DriveTheLife, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\DRIVER TALENT\DRIVER TALENT.LNK, In Quarantäne, [1056], [475797],1.0.3773
PUP.Optional.DriveTheLife, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Talent\Uninstall Driver Talent.lnk, In Quarantäne, [1056], [475797],1.0.3773
PUP.Optional.DriveTheLife, C:\PROGRAM FILES (X86)\OSTOTOSOFT\DRIVERTALENT\LDRVSVC.DLL, Entfernung fehlgeschlagen, [1056], [475816],1.0.3773
PUP.Optional.DriveTheLife, C:\USERS\PUBLIC\DESKTOP\DRIVER TALENT.LNK, In Quarantäne, [1056], [475806],1.0.3773
PUP.Optional.GreatDealz, C:\USERS\LEYH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Entfernung fehlgeschlagen, [1833], [466866],1.0.3773
PUP.Optional.DriveTheLife, C:\USERS\LEYH\APPDATA\ROAMING\DRIVERTALENT\CONFIG\USERCONFIG.DAT, In Quarantäne, [1056], [475805],1.0.3773
PUP.Optional.DriveTheLife, C:\Users\Leyh\AppData\Roaming\DriverTalent\IconDir\201712521533.ico, In Quarantäne, [1056], [475805],1.0.3773
PUP.Optional.DriveTheLife, C:\PROGRAM FILES (X86)\OSTOTOSOFT\DRIVERTALENT\LAN\LANGUAGE_USERFEEDBACK.INI, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\Autosetup\filter.proc, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\cache\softico\125-1.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\cache\softico\125-10.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\cache\softico\125-2.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\cache\softico\125-5.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\toolbox_png_ConquerorLive_2.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\externalapp.xml, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\externalappTemp.xml, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\gamelist.json, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\toolbox_png_AOMEIBackupperStandard_1.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\toolbox_png_AOMEIBackupperStandard_2.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\toolbox_png_ConquerorLive_1.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\toolbox_png_DllFilesHelper_1.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\toolbox_png_DllFilesHelper_2.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\toolbox_png_HardwareDetection_1.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\toolbox_png_HardwareDetection_2.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\toolbox_png_MiniToolPowerDataRecovery_1.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\toolbox_png_MiniToolPowerDataRecovery_2.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\toolbox_png_PCRepair_1.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\toolbox_png_PCRepair_2.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\toolbox_png_PCSpeeder_1.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\toolbox_png_PCSpeeder_2.png, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\config\userconfig.dat, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\download\atl71.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\download\dl_peer_id.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\download\download_engine.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\download\id.dat, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\download\MiniThunderPlatform.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\download\minizip.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\download\msvcp71.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\download\XLBugHandler.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\download\XLBugReport.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\download\zlib1.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\drv64\dev32.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\drv64\dev64.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\drv64\difxapi.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\drv64\drv32_usb.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\drv64\drv64.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\drv64\drv64_usb.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\drv64\DrvSigner.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\drv64\DrvSigner64.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\drv64\SignFile.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\drv64\wndautodata.xml, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\drv64\wndconfigdata.xml, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\Dtlconfig\DtlSetup.xml, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\Dtlconfig\unsetup.xml, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\Dtlconfig\wndconfigdata.xml, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv0\drv0.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv0\drv1.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv0\drv2.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv0\drv3.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv0\drv4.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv0\drv5.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv0\drv6.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv1\drv0.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv1\drv1.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv1\drv2.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv1\drv3.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv2\drv0.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv2\drv1.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv2\drv2.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv2\drv3.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv3\drv0.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv3\drv1.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv3\drv2.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv3\drv3.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv3\drv4.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv3\drv5.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\dtldrv3\drv6.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\wdmaudio\win7_x86\wdmaudio.inf, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\wdmaudio\win8.1_x64\wdmaudio.inf, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\wdmaudio\win8.1_x86\wdmaudio.inf, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\wdmaudio\win8_x64\wdmaudio.inf, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dtldrv\wdmaudio\win8_x86\wdmaudio.inf, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLPlugs\FilesUpdateV1\FilesUpdateV1.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLPlugs\InstallCLPlugV1\InstallCLPlugV1.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLPlugs\InstallDllPlugV1\InstallDllPlugV1.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLPlugs\MppPlugV1\MppInst.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLPlugs\MppPlugV1\MppPlugV1.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLPlugs\WinterUpdate\WinterUpdate.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare\HWInfo\cpuidsdk.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare\HWInfo\cpuidsdk64.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare\HWInfo\DeviceManuf.db3, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare\HWInfo\HardwareInfo.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare\lan\language_HardWare.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare\lan\language_HardWare_arabic.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare\lan\language_HardWare_armenian.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare\lan\language_HardWare_french.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare\lan\language_HardWare_german.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare\lan\language_HardWare_japanese.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare\lan\language_HardWare_portuguese.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare\lan\language_HardWare_russian.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare\lan\language_HardWare_spanish.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare\VR_INFO.xml, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\language_UserFeedBack_japanese.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\arabic.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\armenian.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\bulgarian.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\english.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\french.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\german.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\greek.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\japanese.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\language_UserFeedBack_arabic.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\language_UserFeedBack_armenian.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\language_UserFeedBack_bulgarian.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\language_UserFeedBack_french.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\language_UserFeedBack_german.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\language_UserFeedBack_greek.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\language_UserFeedBack_polish.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\language_UserFeedBack_portuguese.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\language_UserFeedBack_russian.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\language_UserFeedBack_spanish.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\language_UserFeedBack_turkish.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\polish.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\portuguese.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\readme.txt, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\russian.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\spanish.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\systemlan.xml, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\turkish.ini, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\lan\UserConfig.dat, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\updater\CheckUpdate.dll, Entfernung fehlgeschlagen, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\updater\update.xml, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\updater\update.xml.cfg, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\updater\Upg.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\drvbak.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\7z.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\bios.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\CrashCatch.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\CrashReport.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\detoured.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DevCfg.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DIFxAPI.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DriverTalent.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DrvAllRepair.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\drvcheck.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\drvget.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\drvsrc.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\dstudp.dll, Entfernung fehlgeschlagen, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTInstUI.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLAutoSetup.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLDrvUninst.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DtlPlug.dll, Entfernung fehlgeschlagen, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLService.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLSubmit.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLUI.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLUpdate.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\feedback.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\gzipdll.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\HardWare.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\helper_res.7zz, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\InfDrvSetup.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\key.dat, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\LDrvProCtrl.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\libcurl.dll, Entfernung fehlgeschlagen, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\MonReboot.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\netprtdrv.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\netprtenum.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\p2spd.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\pcid.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\pcidetect.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\pcidrv.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\pcioffdrv.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\PCRepair.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\PCRepairCore.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\PCRepairLogic.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\pnpdrv.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\sqlcache.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\sqlite3.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\substat.dll, Entfernung fehlgeschlagen, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\TrayTool.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\udp.dll, Entfernung fehlgeschlagen, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\Uninst.dar0, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\Uninst.dar1, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\uninst.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\uninstall.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\Uninstall.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\usbenum.dll, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\UserFeedback.exe, In Quarantäne, [1056], [475790],1.0.3773
PUP.Optional.DriveTheLife, C:\Program Files (x86)\OSTotoSoft\DriverTalent\xldl.dll, In Quarantäne, [1056], [475790],1.0.3773

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)
ESET:

Code:
12:27:42 # product=EOS
# version=8
# flags=0
# esetonlinescanner_deu.exe=2.0.19.0
# EOSSerial=
# end=init
# utc_time=2018-01-24 11:27:42
# local_time=2018-01-24 12:27:42 (+0100, W. Europe Standard Time)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
12:27:46 # product=EOS
# version=8
# flags=0
# esetonlinescanner_deu.exe=2.0.19.0
# EOSSerial=d8e2860dad85e1418a2170dc399a92e1
# end=init
# utc_time=2018-01-24 11:27:46
# local_time=2018-01-24 12:27:46 (+0100, W. Europe Standard Time)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
12:27:57 Updating
12:27:57 Update Init
12:28:02 Update Download
12:31:05 esets_scanner_reload returned 0
12:31:05 g_uiModuleBuild: 36166
12:31:05 Update Finalize
12:31:05 Call m_esets_charon_send
12:31:05 Call m_esets_charon_destroy
12:31:05 Updated modules version: 36166
12:31:17 Call m_esets_charon_setup_create
12:31:17 Call m_esets_charon_create
12:31:17 m_esets_charon_create OK
12:31:17 Call m_esets_charon_start_send_thread
12:31:17 Call m_esets_charon_setup_set
12:31:17 m_esets_charon_setup_set OK
12:31:17 Scanner engine: 36166
14:41:17 # product=EOS
# version=8
# flags=0
# esetonlinescanner_deu.exe=2.0.19.0
# EOSSerial=d8e2860dad85e1418a2170dc399a92e1
# engine=36166
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# sfx_checked=true
# utc_time=2018-01-24 13:41:17
# local_time=2018-01-24 14:41:17 (+0100, W. Europe Standard Time)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 81722 268431127 0 0
# scanned=2
# found=4
# cleaned=0
# scan_time=7811
sh=DD22068F19BE58213FE08F7842C79C88801623F9 ft=0 fh=0000000000000000 vn="Variante von Android/TrojanDropper.Agent.LF Trojaner" ac=I fn="C:\Users\Leyh\Documents\MEGA\USB neu\USB\Download\Download"
sh=B626C31B277C4C160784A04FFDC4DC78728B9E0D ft=1 fh=0000000000000000 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Leyh\Downloads\HijackThis - CHIP-Installer.exe"
sh=257EB1E0D9C3FB9F7EB85F77BCD1DE87DDAC59CB ft=1 fh=0000000000000000 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Leyh\Downloads\Hitman Pro - CHIP-Installer.exe"
sh=518DD0A8254BB5E438B2049F86C9410289C4D619 ft=1 fh=0000000000000000 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Leyh\Downloads\MSI Afterburner - CHIP-Installer.exe"
15:04:35 Call m_esets_charon_send
15:04:35 Call m_esets_charon_destroy
15:04:36 RecursiveRemoveDirectoryAndAllFiles: C:\Users\Leyh\AppData\Local\ESET\ESETOnlineScanner\Quarantine\
Security Check:

Code:
Results of screen317's Security Check version 1.009 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Enabled! 
Malwarebytes 
 Antivirus up to date! 
`````````Anti-malware/Other Utilities Check:`````````
````````Process Check: objlist.exe by Laurent```````` 
 Malwarebytes Anti-Malware mbamservice.exe 
 Malwarebytes Anti-Malware mbamtray.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 1%
````````````````````End of Log``````````````````````


Alle Zeitangaben in WEZ +1. Es ist jetzt 21:07 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131