Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Netzwerk und Hardware (https://www.trojaner-board.de/netzwerk-hardware/)
-   -   Windows 10 Pro 64 bit Rechner startet mit Problemmeldung (https://www.trojaner-board.de/188226-windows-10-pro-64-bit-rechner-startet-problemmeldung.html)

sonsm55 25.01.2018 15:50
Windows 10 Pro 64 bit Rechner startet mit Problemmeldung
 
Direkt nach dem Start kommt beim Rechner meines Dads die Meldung, das erhebliche Probleme aufgetreten sind. Noch bevor Windows hochgefahren ist. Weisse Schrift auf blauem Untergrund.
Ich schicke euch zuerst frst und add:

Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 21.01.2018
durchgeführt von Siggi (Administrator) auf SIGGI-PC (25-01-2018 15:36:53)
Gestartet von C:\Users\Siggi\Desktop
Geladene Profile: Siggi (Verfügbare Profile: Siggi & Administrator & DefaultAppPool)
Platform: Windows 10 Pro Version 1709 16299.125 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(G DATA Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(G DATA Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(Michal Trojnara) C:\Program Files (x86)\stunnel\bin\stunnel.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\MsMpEng.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
(G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(G DATA Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(G DATA Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltSur64.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Logitech(c)) C:\Program Files\Logitech\Z Cinema\Z Cinema.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-06-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [G Data ASM] => C:\Program Files (x86)\G DATA\InternetSecurity\DelayLoader\AutorunDelayLoader.exe [442856 2017-06-08] (G DATA Software AG)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [240400 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle Corporation)
HKLM\...\Winlogon: [Userinit] C:\Windows\System32\userinit.exe,,
IFEO\ccleaner64.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\desktopshortcut_6e16623549f34dfaa1021e86675abd11.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\programmenushortcu_6e16623549f34dfaa1021e86675abd11.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\skype.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\startupshortcut_6e16623549f34dfaa1021e86675abd11.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
SSODL: EldosMountNotificator-cbfs5 - {36E77381-D390-4622-B570-E6BB8BE669A9} - C:\WINDOWS\system32\cbfsMntNtf5.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator-cbfs5 - {36E77381-D390-4622-B570-E6BB8BE669A9} - C:\WINDOWS\SysWOW64\cbfsMntNtf5.dll (EldoS Corporation)
Startup: C:\Users\Siggi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Z Cinema.lnk [2017-10-10]
ShortcutTarget: Z Cinema.lnk -> C:\Users\Siggi\AppData\Roaming\Microsoft\Installer\{6E166235-49F3-4DFA-A102-1E86675ABD11}\StartupShortcut_6E16623549F34DFAA1021E86675ABD11.exe (Macrovision Corporation)
GroupPolicy: Beschränkung <==== ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 0.0.0.0
Tcpip\..\Interfaces\{08536f8b-cf5c-4c23-bc90-f5eafdf61c54}: [DhcpNameServer] 0.0.0.0
Tcpip\..\Interfaces\{354f3174-9170-4742-9093-966c7b43f1ab}: [DhcpNameServer] 0.0.0.0
Tcpip\..\Interfaces\{89614a64-d88e-4bcd-8807-9cc0a1e240b2}: [DhcpNameServer] 0.0.0.0
Tcpip\..\Interfaces\{b999e76b-41e2-4045-b3ad-64e03b6a95de}: [DhcpNameServer] 0.0.0.0
Tcpip\..\Interfaces\{D201511E-653C-4065-91AE-A347124A873B}: [DhcpNameServer] 0.0.0.0
Tcpip\..\Interfaces\{e51692d9-6dc9-4d89-a023-d55cd16e0531}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKU\S-1-5-21-2441953047-3725558795-4123501198-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2441953047-3725558795-4123501198-1001 -> {445BC4F7-F1D0-43F9-BF31-C8479D85BF02} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-2441953047-3725558795-4123501198-1001 -> {769E16E6-6B87-4EF3-9691-15AD1A84707D} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-2441953047-3725558795-4123501198-1001 -> {AE63A9B2-5258-45B6-9416-143F95A601F6} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-2441953047-3725558795-4123501198-1001 -> {DADBACC7-BC79-4803-9936-645B4E9A55AB} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-2441953047-3725558795-4123501198-1001 -> {FE795473-12B7-4B26-9A36-8DA743D61DD9} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&intl=de&fr=yset_ie_syc_oracle&type=orcl_default&partnerexternal-oracle=external-oracle
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll [2018-01-21] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-01-21] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: lvuepr2z.default-1493229345721
FF ProfilePath: C:\Users\Siggi\AppData\Roaming\Mozilla\Firefox\Profiles\lvuepr2z.default-1493229345721 [2018-01-25]
FF user.js: detected! => C:\Users\Siggi\AppData\Roaming\Mozilla\Firefox\Profiles\lvuepr2z.default-1493229345721\user.js [2017-10-07]
FF Homepage: Mozilla\Firefox\Profiles\lvuepr2z.default-1493229345721 -> hxxp://www.siggi-hasenthal.de/
FF NetworkProxy: Mozilla\Firefox\Profiles\lvuepr2z.default-1493229345721 -> type", 0
FF Extension: (Avira Browserschutz) - C:\Users\Siggi\AppData\Roaming\Mozilla\Firefox\Profiles\lvuepr2z.default-1493229345721\Extensions\abs@avira.com.xpi [2017-12-14]
FF Extension: (AdBlock) - C:\Users\Siggi\AppData\Roaming\Mozilla\Firefox\Profiles\lvuepr2z.default-1493229345721\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2017-11-15]
FF Extension: (Kein Name) - C:\Users\Siggi\AppData\Roaming\Mozilla\Firefox\Profiles\lvuepr2z.default-1493229345721\Extensions\{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi [2017-10-16]
FF Extension: (Adblock Plus) - C:\Users\Siggi\AppData\Roaming\Mozilla\Firefox\Profiles\lvuepr2z.default-1493229345721\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-12-13]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_28_0_0_137.dll [2018-01-12] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_137.dll [2018-01-12] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-01-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-01-21] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-23] (Google Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2017-11-01] (Adobe Systems Inc.)
FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)

Chrome:
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://www.siggi-hasenthal.de/"
CHR DefaultSearchURL: Default -> hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_chr_syc_oracle&type=default
CHR DefaultSearchKeyword: Default -> Yahoo
CHR DefaultSuggestURL: Default -> hxxps://de.search.yahoo.com/sugg/ie?output=fxjson&command={searchTerms}&nResults=10
CHR Profile: C:\Users\Siggi\AppData\Local\Google\Chrome\User Data\Default [2018-01-20]
CHR Extension: (Avira Safe Shopping) - C:\Users\Siggi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2018-01-15]
CHR Extension: (Avira Browserschutz) - C:\Users\Siggi\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2017-12-12]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Siggi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-11-01]
CHR Extension: (Chrome Media Router) - C:\Users\Siggi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-01]
CHR HKLM\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ibbfklbaljofpaanmpaeadejijfdddco] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1146128 2016-12-06] (AVG Technologies CZ, s.r.o.)
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [5083784 2017-08-21] (G DATA Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKWCtlx64.exe [3327600 2017-08-03] (G Data Software AG)
S3 GDBackupSvc; C:\Program Files (x86)\G DATA\InternetSecurity\AVKBackup\AVKBackupService.exe [3997160 2017-08-17] (G DATA Software AG)
R3 GDFwSvc; C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFwSvcx64.exe [3419552 2017-06-08] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [884328 2017-06-08] (G DATA Software AG)
S4 HGESVR; C:\Program Files\Telekom\Telekom Hosting Manager\HGE.Service.exe [18232 2013-03-18] (Deutsche Telekom AG)
S4 KSDE2.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 2.0\ksde.exe [354672 2017-01-24] (AO Kaspersky Lab)
S4 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
R2 nlsX86cc; C:\Windows\SysWOW64\nlssrv32.exe [66560 2011-09-22] (Nalpeiron Ltd.) [Datei ist nicht signiert]
S4 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [506960 2015-12-26] (Sony Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4329952 2018-01-03] (Microsoft Corporation)
R2 stunnel; C:\Program Files (x86)\stunnel\bin\stunnel.exe [200192 2016-07-17] (Michal Trojnara) [Datei ist nicht signiert]
S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10883824 2017-03-17] (TeamViewer GmbH)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [5618960 2017-11-15] (AVG Technologies CZ, s.r.o.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\NisSrv.exe [356168 2018-01-11] (Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\MsMpEng.exe [105792 2018-01-11] (Microsoft Corporation)
S4 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [656664 2014-08-19] (Wacom Technology, Corp.)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 anvsnddrv; C:\WINDOWS\system32\drivers\anvsnddrv.sys [33872 2012-05-17] (AnvSoft Inc.)
R1 cbfs5; C:\WINDOWS\system32\drivers\cbfs5.sys [416448 2014-01-23] (EldoS Corporation)
S3 flex1500; C:\WINDOWS\System32\drivers\flex1500.sys [265312 2012-11-29] (Jungo)
S3 flex1500; C:\Windows\SysWOW64\drivers\flex1500.sys [265312 2012-11-29] (Jungo)
R0 GDBehave; C:\WINDOWS\System32\drivers\GDBehave.sys [207928 2017-10-10] (G Data Software AG)
S0 GDElam; C:\WINDOWS\System32\DRIVERS\GDElam.sys [117904 2017-02-20] (G Data Software AG)
R3 GDKBB; C:\WINDOWS\system32\drivers\GDKBB64.sys [46104 2017-10-10] (G Data Software AG)
R3 GDKBFlt; C:\WINDOWS\system32\drivers\GDKBFlt64.sys [38984 2017-10-10] (G DATA Software AG)
R1 GDMnIcpt; C:\WINDOWS\system32\drivers\MiniIcpt.sys [314424 2017-10-10] (G Data Software AG)
R3 GDPkIcpt; C:\WINDOWS\system32\drivers\PktIcpt.sys [165944 2017-10-10] (G Data Software AG)
R1 gdwfpcd; C:\WINDOWS\System32\drivers\gdwfpcd64.sys [86584 2017-10-10] (G DATA Software AG)
S3 GRD; C:\WINDOWS\system32\drivers\GRD.sys [125640 2018-01-08] (G Data Software)
R1 HookCentre; C:\WINDOWS\system32\drivers\HookCentre.sys [178232 2017-10-10] (G Data Software AG)
R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project)
S3 libusb0; C:\WINDOWS\System32\DRIVERS\libusb0.sys [52832 2014-08-25] (hxxp://libusb-win32.sourceforge.net)
S3 libusbK; C:\WINDOWS\System32\DRIVERS\libusbK.sys [47200 2014-08-25] (hxxp://libusb-win32.sourceforge.net)
S3 phantomtap; C:\WINDOWS\System32\drivers\phantomtap.sys [45056 2017-10-25] (The OpenVPN Project)
R0 PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [56336 2013-07-19] (Corel Corporation)
R1 RrNetCapFilterDriver; C:\WINDOWS\system32\DRIVERS\RrNetCapFilterDriver.sys [34608 2017-01-25] (Audials AG)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-09-29] (Realtek )
R3 SKYNET; C:\WINDOWS\System32\drivers\SkyNET_AMD64.SYS [617048 2010-05-10] (TechniSat Digital, S.A.)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [32304 2016-06-01] (AVG Netherlands B.V.)
R1 vmkbd3; C:\WINDOWS\system32\DRIVERS\vmkbd.sys [52288 2016-11-11] (VMware, Inc.)
R0 vsock; C:\WINDOWS\system32\DRIVERS\vsock.sys [91712 2016-09-30] (VMware, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46072 2018-01-11] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [288848 2018-01-11] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [129616 2018-01-11] (Microsoft Corporation)
R3 ZCinema_TSHD_x64; C:\WINDOWS\system32\drivers\ZCinema_SRS_amd64.sys [21648 2007-08-22] (SRS Labs, Inc.)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2018-01-25 15:36 - 2018-01-25 15:38 - 000019567 _____ C:\Users\Siggi\Desktop\FRST.txt
2018-01-25 15:36 - 2018-01-25 15:36 - 000000000 ____D C:\FRST
2018-01-25 15:34 - 2018-01-25 15:34 - 002393088 _____ (Farbar) C:\Users\Siggi\Desktop\FRST64.exe
2018-01-25 12:59 - 2018-01-25 12:59 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-01-25 12:58 - 2018-01-25 13:12 - 000496748 _____ C:\WINDOWS\Minidump\012518-41015-01.dmp
2018-01-25 07:53 - 2018-01-25 08:06 - 000512484 _____ C:\WINDOWS\Minidump\012518-37687-01.dmp
2018-01-24 16:19 - 2018-01-24 16:28 - 000594764 _____ C:\WINDOWS\Minidump\012418-38765-01.dmp
2018-01-24 11:09 - 2018-01-24 11:25 - 000482916 _____ C:\WINDOWS\Minidump\012418-38484-01.dmp
2018-01-24 06:57 - 2018-01-24 07:12 - 000487188 _____ C:\WINDOWS\Minidump\012418-37828-01.dmp
2018-01-23 17:53 - 2018-01-23 18:00 - 000485812 _____ C:\WINDOWS\Minidump\012318-42296-01.dmp
2018-01-23 15:46 - 2018-01-23 15:57 - 000495068 _____ C:\WINDOWS\Minidump\012318-42203-01.dmp
2018-01-23 11:19 - 2018-01-23 11:26 - 000486108 _____ C:\WINDOWS\Minidump\012318-47140-01.dmp
2018-01-23 10:12 - 2018-01-23 10:22 - 000486364 _____ C:\WINDOWS\Minidump\012318-43921-01.dmp
2018-01-23 07:54 - 2018-01-23 08:06 - 000487972 _____ C:\WINDOWS\Minidump\012318-36468-01.dmp
2018-01-22 18:06 - 2018-01-22 18:15 - 000493484 _____ C:\WINDOWS\Minidump\012218-36593-01.dmp
2018-01-22 14:36 - 2018-01-22 14:43 - 000534084 _____ C:\WINDOWS\Minidump\012218-39671-01.dmp
2018-01-22 12:55 - 2018-01-22 13:00 - 000486524 _____ C:\WINDOWS\Minidump\012218-41781-01.dmp
2018-01-22 07:39 - 2018-01-22 07:51 - 000520332 _____ C:\WINDOWS\Minidump\012218-37734-01.dmp
2018-01-21 17:46 - 2018-01-21 17:46 - 000002305 _____ C:\Users\Siggi\Desktop\ACDSee 19.lnk
2018-01-21 17:33 - 2018-01-21 17:41 - 000490812 _____ C:\WINDOWS\Minidump\012118-40718-01.dmp
2018-01-21 14:58 - 2018-01-21 15:05 - 000513220 _____ C:\WINDOWS\Minidump\012118-34125-01.dmp
2018-01-21 10:03 - 2018-01-21 10:13 - 000489956 _____ C:\WINDOWS\Minidump\012118-37953-01.dmp
2018-01-21 07:39 - 2018-01-21 07:54 - 000485908 _____ C:\WINDOWS\Minidump\012118-35953-01.dmp
2018-01-20 17:37 - 2018-01-20 17:45 - 000514972 _____ C:\WINDOWS\Minidump\012018-33906-01.dmp
2018-01-20 15:31 - 2018-01-20 15:38 - 000488284 _____ C:\WINDOWS\Minidump\012018-38984-01.dmp
2018-01-20 14:33 - 2018-01-20 14:41 - 000490972 _____ C:\WINDOWS\Minidump\012018-38656-01.dmp
2018-01-20 13:49 - 2018-01-20 13:57 - 000493044 _____ C:\WINDOWS\Minidump\012018-39843-01.dmp
2018-01-20 11:18 - 2018-01-20 11:25 - 000487268 _____ C:\WINDOWS\Minidump\012018-38125-01.dmp
2018-01-20 09:38 - 2018-01-20 09:43 - 000506636 _____ C:\WINDOWS\Minidump\012018-34703-01.dmp
2018-01-20 08:33 - 2018-01-25 12:58 - 541387806 _____ C:\WINDOWS\MEMORY.DMP
2018-01-20 08:33 - 2018-01-20 08:48 - 000599308 _____ C:\WINDOWS\Minidump\012018-38484-01.dmp
2018-01-17 10:00 - 2018-01-17 10:00 - 015153530 _____ C:\Users\Siggi\Downloads\epaper_Freies_Wort_Sonneberg_20180113.pdf
2018-01-17 10:00 - 2018-01-17 10:00 - 006454003 _____ C:\Users\Siggi\Downloads\epaper_Freies_Wort_Sonneberg_20180117.pdf
2018-01-15 16:24 - 2018-01-15 17:21 - 000000000 ____D C:\Users\Siggi\AppData\Local\PlaceholderTileLogoFolder
2018-01-11 15:09 - 2018-01-11 15:09 - 000000000 ____D C:\bda_skystar-cablestar-hd-2_001
2018-01-11 14:32 - 2018-01-11 14:32 - 000000384 _____ C:\Users\Siggi\Documents\EPG.html
2018-01-11 14:31 - 2018-01-11 14:32 - 000000000 ____D C:\Users\Siggi\Documents\htmlEPG
2018-01-08 08:56 - 2018-01-08 08:56 - 000037544 _____ (G DATA Software) C:\WINDOWS\system32\Drivers\GdPhyMem.sys
2018-01-08 08:28 - 2018-01-08 08:28 - 000001522 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2018-01-08 08:28 - 2018-01-08 08:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2018-01-08 08:27 - 2018-01-08 08:27 - 000000000 ____D C:\ProgramData\Apple Computer
2018-01-06 17:54 - 2018-01-06 17:54 - 000046682 _____ C:\Users\Siggi\Downloads\wushowhide.diagcab
2018-01-05 17:31 - 2018-01-05 17:31 - 000804253 _____ C:\Users\Siggi\Desktop\eBook_Windows10_USB-Stick_erstellen.pdf
2018-01-04 11:57 - 2018-01-25 12:58 - 000000000 ____D C:\WINDOWS\Minidump
2018-01-03 22:33 - 2018-01-03 22:33 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2018-01-03 22:31 - 2018-01-03 22:31 - 000000000 ___HD C:\Users\Siggi\MicrosoftEdgeBackups
2018-01-03 22:28 - 2018-01-03 22:28 - 000000000 ___RD C:\Users\Siggi\3D Objects
2018-01-03 22:26 - 2018-01-03 22:26 - 000000020 ___SH C:\Users\Siggi\ntuser.ini
2018-01-03 22:22 - 2018-01-25 14:31 - 000004158 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{8FC4D5E6-56F0-4EB3-9861-226F5C06FBF3}
2018-01-03 22:22 - 2018-01-25 12:58 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-01-03 22:22 - 2018-01-24 19:11 - 000003668 _____ C:\WINDOWS\System32\Tasks\AVG EUpdate Task
2018-01-03 22:22 - 2018-01-17 10:03 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2018-01-03 22:22 - 2018-01-08 08:29 - 000004478 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2018-01-03 22:22 - 2018-01-06 15:36 - 000002590 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2018-01-03 22:22 - 2018-01-06 15:06 - 000002280 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2018-01-03 22:22 - 2018-01-06 14:49 - 000002154 _____ C:\WINDOWS\System32\Tasks\Zeitschaltung
2018-01-03 22:22 - 2018-01-06 14:48 - 000002920 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2441953047-3725558795-4123501198-1001
2018-01-03 22:22 - 2018-01-03 22:23 - 000003878 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-01-03 22:22 - 2018-01-03 22:23 - 000003154 _____ C:\WINDOWS\System32\Tasks\Java Platform SE Auto Updater
2018-01-03 22:22 - 2018-01-03 22:23 - 000002826 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-Siggi-PC-Siggi
2018-01-03 22:22 - 2018-01-03 22:23 - 000002306 _____ C:\WINDOWS\System32\Tasks\{3F9514FB-C8A3-49B9-8A8F-02E9AF1A6DBE}
2018-01-03 22:22 - 2018-01-03 22:23 - 000002288 _____ C:\WINDOWS\System32\Tasks\{E0A07D66-864F-44B4-8DEF-5754405773DE}
2018-01-03 22:22 - 2018-01-03 22:23 - 000002222 _____ C:\WINDOWS\System32\Tasks\{89F4780C-152F-4B56-871F-DA7F8D01A46F}
2018-01-03 22:22 - 2018-01-03 22:23 - 000002136 _____ C:\WINDOWS\System32\Tasks\{C3EE8CFC-80D2-4565-BF7E-C332DE34E4F2}
2018-01-03 22:22 - 2018-01-03 22:23 - 000002136 _____ C:\WINDOWS\System32\Tasks\{1A1FA7F6-1890-4D31-8874-9602DACB72B0}
2018-01-03 22:22 - 2018-01-03 22:23 - 000002090 _____ C:\WINDOWS\System32\Tasks\SidebarExecute
2018-01-03 22:22 - 2018-01-03 22:22 - 000003616 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2018-01-03 22:22 - 2018-01-03 22:22 - 000003392 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2018-01-03 22:22 - 2018-01-03 22:22 - 000002886 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2018-01-03 22:22 - 2018-01-03 22:22 - 000002218 _____ C:\WINDOWS\System32\Tasks\{0B247F87-A701-4440-9339-F1875EE95FCD}
2018-01-03 22:22 - 2018-01-03 22:22 - 000002038 _____ C:\WINDOWS\System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance
2018-01-03 22:22 - 2018-01-03 22:22 - 000000000 ____D C:\WINDOWS\System32\Tasks\WPD
2018-01-03 22:22 - 2018-01-03 22:22 - 000000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2018-01-03 22:22 - 2018-01-03 22:22 - 000000000 ____D C:\WINDOWS\System32\Tasks\Apple
2018-01-03 22:20 - 2018-01-03 22:22 - 000015243 _____ C:\WINDOWS\diagwrn.xml
2018-01-03 22:20 - 2018-01-03 22:22 - 000015243 _____ C:\WINDOWS\diagerr.xml
2018-01-03 21:48 - 2018-01-03 21:48 - 000001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2018-01-03 21:42 - 2018-01-15 17:21 - 000000000 ____D C:\Users\Siggi\AppData\Local\Packages
2018-01-03 21:40 - 2018-01-21 10:19 - 000000000 ____D C:\Users\DefaultAppPool
2018-01-03 21:40 - 2018-01-21 10:19 - 000000000 ____D C:\Users\Administrator
2018-01-03 21:40 - 2018-01-18 14:09 - 000000000 ____D C:\Users\Siggi
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Siggi\Vorlagen
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Siggi\Startmenü
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Siggi\Netzwerkumgebung
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Siggi\Lokale Einstellungen
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Siggi\Eigene Dateien
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Siggi\Druckumgebung
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Siggi\Documents\Eigene Videos
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Siggi\Documents\Eigene Musik
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Siggi\Documents\Eigene Bilder
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Siggi\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Siggi\AppData\Local\Verlauf
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Siggi\AppData\Local\Anwendungsdaten
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Siggi\Anwendungsdaten
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Videos
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Administrator\Vorlagen
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Administrator\Startmenü
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Administrator\Netzwerkumgebung
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Administrator\Lokale Einstellungen
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Administrator\Eigene Dateien
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Administrator\Druckumgebung
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Administrator\Documents\Eigene Videos
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Administrator\AppData\Local\Anwendungsdaten
2018-01-03 21:40 - 2018-01-03 21:40 - 000000000 _SHDL C:\Users\Administrator\Anwendungsdaten
2018-01-03 21:37 - 2018-01-03 21:37 - 000000000 ____D C:\ProgramData\USOShared
2018-01-03 21:32 - 2018-01-06 17:06 - 002546606 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-01-03 21:29 - 2018-01-03 21:29 - 000002136 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2018-01-03 21:29 - 2018-01-03 21:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2018-01-03 21:29 - 2017-09-29 14:41 - 002241024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2018-01-03 21:29 - 2016-11-14 10:45 - 000615992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2018-01-03 21:24 - 2018-01-25 13:52 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-01-03 21:24 - 2018-01-21 07:40 - 003401880 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-01-03 21:15 - 2018-01-17 10:56 - 000000000 ____D C:\Windows.old
2018-01-03 19:09 - 2018-01-03 19:09 - 000000000 ___DL C:\Users\Public\Recorded TV (1)
2018-01-03 19:08 - 2018-01-03 21:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Start
2018-01-03 19:06 - 2018-01-03 21:15 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2018-01-03 19:06 - 2018-01-03 19:06 - 000000000 ____D C:\Program Files\Common Files\SpeechEngines
2018-01-03 18:51 - 2018-01-03 19:04 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2018-01-03 18:24 - 2018-01-03 18:24 - 000000000 ____D C:\WINDOWS\containers
2018-01-03 18:18 - 2018-01-03 18:18 - 013655552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 012687360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 006791472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 006015200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 004814848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 004648528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 004487968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 004249600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 002717392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 002465848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 002269080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 001970520 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 001776272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 001558856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 001522176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 001507736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 001454568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 001377080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 001259344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 001148216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 001057824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 001054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 001015008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2018-01-03 18:18 - 2018-01-03 18:18 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2018-01-03 18:18 - 2018-01-03 18:18 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2018-01-03 18:17 - 2018-01-03 18:17 - 025245696 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 023652864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 021754368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 020286120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 018916352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 017084416 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 012829696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 011923456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 008097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 006478528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 006466048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 006037504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 004740608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 004385280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 003678208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 003484840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2018-01-03 18:17 - 2018-01-03 18:17 - 002869760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 002491112 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 002467840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 002393600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 002192112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 001663488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 001615720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 001509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 001474680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 001432816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 001280000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 001230848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000841728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000812032 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000769096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000754688 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000676352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000666112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000661664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2018-01-03 18:17 - 2018-01-03 18:17 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000481792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicRuntimes.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscript.exe
2018-01-03 18:17 - 2018-01-03 18:17 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe
2018-01-03 18:17 - 2018-01-03 18:17 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000123512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscript.ocx
2018-01-03 18:17 - 2018-01-03 18:17 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\acppage.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000047000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KeyboardFilterShim.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcVSp1res.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 021352136 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 017159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 013703168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 008590744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 007831248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 007545344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 007385088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 006092664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 005905752 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 005615968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 004772352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 004592640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 004504456 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 003903784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 003669504 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 003578368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 003478016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 003331520 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 003211776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 003186688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 003163648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 003121664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 003010720 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 002972672 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 002890240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 002864640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 002862080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 002709200 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 002666496 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 002596352 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 002573208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 002510336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 002412168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 002395032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 002339296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 002220952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 002208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 002117632 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 002105856 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 001980928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001954048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001925296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001806336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001739264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001670656 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001666048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001642520 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001636376 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001634288 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001585376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001570816 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 001528904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001498112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001495040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001490840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001490328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001488792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001487872 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001463856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001426152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001425408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001413760 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-01-03 18:16 - 2018-01-03 18:16 - 001353728 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001321472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001313792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001277848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 001261864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001246432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001208184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 001170000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001167360 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001124760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001090440 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-01-03 18:16 - 2018-01-03 18:16 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001012120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000979352 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000975872 _____ C:\WINDOWS\system32\FaceProcessor.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 000925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000924136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 000891800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 000887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000840440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9on12.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000819096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 000813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000791960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 000779440 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 000768512 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000749976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 000747416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000746904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 000721592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000705944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000703536 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000654048 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000630752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000615768 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 000612760 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000610712 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000603920 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 000601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000590944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9on12.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000534528 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 000525208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 000519152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000506256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000496640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000495000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 000479912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000474112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DictationManager.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000471960 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000464408 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000436120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000428952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000404888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000401304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 000398744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 000374032 _____ (Microsoft Corporation) C:\WINDOWS\system32\vac.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 000363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000362176 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatializerApo.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000354304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000354200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000353848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000351232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DictationManager.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000319352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000293888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatializerApo.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000269696 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushToInstall.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000246272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000246168 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000242176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000238080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000230296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000198888 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000184984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcui.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ContentDeliveryManager.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000166296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscript.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gamingtcui.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\hascsp.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUpdateAgent.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2018-01-03 18:16 - 2018-01-03 18:16 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000060824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urscx01000.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 000059800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bam.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadjcsp.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcSpecfc.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2018-01-03 18:16 - 2018-01-03 18:16 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcVSp1res.dll
2018-01-03 18:16 - 2018-01-03 18:16 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2018-01-03 18:15 - 2018-01-03 18:16 - 001628056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 007676296 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 002905600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-01-03 18:15 - 2018-01-03 18:15 - 002783744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 002633216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 002446744 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 001990160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 001778584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 001694224 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 001554216 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 001547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 001420696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 001323840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 001289216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 001200536 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-01-03 18:15 - 2018-01-03 18:15 - 001145104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 001054720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 001053592 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-01-03 18:15 - 2018-01-03 18:15 - 001003104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000902416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000831384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000823808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000813976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000744856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000739696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000713624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2018-01-03 18:15 - 2018-01-03 18:15 - 000710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000703568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000677272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-01-03 18:15 - 2018-01-03 18:15 - 000669592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000645528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000597160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000592280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000591872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000571288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2018-01-03 18:15 - 2018-01-03 18:15 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000559512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2018-01-03 18:15 - 2018-01-03 18:15 - 000555416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2018-01-03 18:15 - 2018-01-03 18:15 - 000462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000437144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2018-01-03 18:15 - 2018-01-03 18:15 - 000418712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000373656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2018-01-03 18:15 - 2018-01-03 18:15 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000362904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2018-01-03 18:15 - 2018-01-03 18:15 - 000353688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2018-01-03 18:15 - 2018-01-03 18:15 - 000285080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2018-01-03 18:15 - 2018-01-03 18:15 - 000264040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2018-01-03 18:15 - 2018-01-03 18:15 - 000211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2018-01-03 18:15 - 2018-01-03 18:15 - 000202240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2018-01-03 18:15 - 2018-01-03 18:15 - 000187288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2018-01-03 18:15 - 2018-01-03 18:15 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000149400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2018-01-03 18:15 - 2018-01-03 18:15 - 000147864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2018-01-03 18:15 - 2018-01-03 18:15 - 000137544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000129432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2018-01-03 18:15 - 2018-01-03 18:15 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000097792 _____ C:\WINDOWS\system32\runexehelper.exe
2018-01-03 18:15 - 2018-01-03 18:15 - 000097144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000082840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2018-01-03 18:15 - 2018-01-03 18:15 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2018-01-03 18:15 - 2018-01-03 18:15 - 000048112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2018-01-03 18:15 - 2018-01-03 18:15 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrleakdiag.exe
2018-01-03 18:15 - 2018-01-03 18:15 - 000045464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2018-01-03 18:15 - 2018-01-03 18:15 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdrleakdiag.exe
2018-01-03 18:15 - 2018-01-03 18:15 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2018-01-03 18:15 - 2018-01-03 18:15 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2018-01-03 18:15 - 2018-01-03 18:15 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2018-01-03 17:46 - 2018-01-03 17:46 - 000000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2018-01-03 17:46 - 2018-01-03 17:46 - 000000000 ____D C:\WINDOWS\system32\msmq
2018-01-03 17:46 - 2018-01-03 17:46 - 000000000 ____D C:\WINDOWS\system32\BestPractices
2018-01-03 17:46 - 2018-01-03 17:46 - 000000000 ____D C:\inetpub
2018-01-03 17:44 - 2018-01-03 17:44 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2018-01-03 17:43 - 2018-01-03 17:43 - 000000000 ____D C:\Program Files\Reference Assemblies
2018-01-03 17:43 - 2018-01-03 17:43 - 000000000 ____D C:\Program Files\MSBuild
2018-01-03 17:43 - 2018-01-03 17:43 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2018-01-03 17:43 - 2018-01-03 17:43 - 000000000 ____D C:\Program Files (x86)\MSBuild
2018-01-03 17:42 - 2018-01-03 17:42 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-01-03 17:42 - 2018-01-03 17:42 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2018-01-03 17:42 - 2018-01-03 17:42 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-01-03 17:42 - 2018-01-03 17:42 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2018-01-03 17:41 - 2018-01-03 17:41 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-01-03 17:41 - 2018-01-03 17:41 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2018-01-03 17:37 - 2018-01-03 17:37 - 006347776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2018-01-03 17:37 - 2018-01-03 17:37 - 005739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2018-01-03 17:37 - 2018-01-03 17:37 - 005484032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2018-01-03 17:37 - 2018-01-03 17:37 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2018-01-03 17:37 - 2018-01-03 17:37 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2018-01-03 16:48 - 2018-01-03 16:48 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2018-01-02 17:19 - 2018-01-21 07:39 - 000000000 ___DC C:\WINDOWS\Panther
2018-01-02 14:06 - 2018-01-02 14:06 - 008198432 _____ (Malwarebytes) C:\Users\Siggi\Downloads\adwcleaner_7.0.6.0.exe
2017-12-29 16:52 - 2017-12-29 16:52 - 000228614 _____ C:\Users\Siggi\Downloads\1391537_normal_P22d9SxPww.pdf
2017-12-28 20:03 - 2017-12-28 20:04 - 000150057 _____ C:\Users\Siggi\Downloads\2017_12_Rechnung_4725707925.pdf
2017-12-28 16:45 - 2018-01-03 21:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-12-28 16:45 - 2017-12-28 16:45 - 000000865 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-12-28 16:45 - 2017-12-28 16:45 - 000000000 ____D C:\Program Files\CCleaner
2017-12-28 15:17 - 2018-01-06 14:46 - 000000000 ____D C:\Users\Siggi\Desktop\Desktopsammlung
2017-12-27 16:42 - 2017-12-27 16:43 - 000000000 ____D C:\VRBankAuszüge

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2018-01-25 14:03 - 2017-09-29 09:45 - 000008192 _____ C:\WINDOWS\system32\config\ELAM
2018-01-25 13:10 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2018-01-25 13:01 - 2016-10-20 19:41 - 000000000 ____D C:\Users\Siggi\AppData\LocalLow\Mozilla
2018-01-25 12:58 - 2017-08-16 19:23 - 000000000 ____D C:\ProgramData\NVIDIA
2018-01-25 12:58 - 2017-02-14 10:36 - 000001024 _____ C:\.rnd
2018-01-24 21:02 - 2016-10-24 11:02 - 000000000 ____D C:\Fernsehaufnahmen
2018-01-24 17:24 - 2017-11-05 15:08 - 000000000 ____D C:\Users\Siggi\AppData\Roaming\vlc
2018-01-24 17:16 - 2017-05-19 18:00 - 000000000 ___HD C:\Users\Siggi\Desktop\[Originaldateien]
2018-01-24 16:19 - 2014-01-03 18:53 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-01-24 15:31 - 2017-03-09 19:42 - 000000000 ____D C:\Users\Siggi\Documents\WISO Konto Online
2018-01-24 13:17 - 2016-08-23 16:01 - 000000000 ____D C:\Foto
2018-01-24 13:13 - 2017-09-29 14:44 - 000000000 ____D C:\WINDOWS\INF
2018-01-24 11:19 - 2014-01-03 18:51 - 000548000 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2018-01-24 11:13 - 2017-11-08 09:42 - 000000843 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-01-24 11:13 - 2016-06-30 17:21 - 000000000 ____D C:\Program Files\Mozilla Firefox
2018-01-24 07:08 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-01-23 11:40 - 2016-10-14 08:54 - 000000000 ____D C:\Wswin
2018-01-21 17:44 - 2016-08-05 15:20 - 000000000 ____D C:\Program Files\Common Files\ACD Systems
2018-01-21 17:43 - 2016-08-05 15:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACD Systems
2018-01-21 16:43 - 2017-05-21 17:49 - 000097344 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2018-01-21 16:43 - 2014-04-10 17:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-01-21 16:42 - 2014-04-10 17:45 - 000000000 ____D C:\Program Files (x86)\Java
2018-01-20 19:10 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2018-01-20 08:46 - 2017-09-29 14:46 - 000000000 ___HD C:\Program Files\WindowsApps
2018-01-17 18:09 - 2016-09-25 10:16 - 000000000 ____D C:\Users\Siggi\AppData\Local\ConnectedDevicesPlatform
2018-01-17 12:58 - 2014-01-05 11:24 - 000000000 ____D C:\Users\Siggi\Documents\Online-BankingPlus
2018-01-16 17:05 - 2017-09-29 09:45 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-01-14 14:53 - 2015-02-03 13:06 - 000000000 ____D C:\Users\Siggi\.mediathek3
2018-01-12 17:16 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2018-01-12 17:16 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\Macromed
2018-01-10 14:51 - 2014-01-11 14:29 - 000001215 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2018-01-10 14:50 - 2017-08-08 20:14 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2018-01-10 09:04 - 2014-01-03 19:11 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-01-10 08:54 - 2017-10-11 11:17 - 129365736 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2018-01-10 08:53 - 2017-09-29 14:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-01-10 08:53 - 2014-01-03 19:11 - 129365736 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-01-08 08:56 - 2017-10-11 06:54 - 000125640 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GRD.sys
2018-01-08 08:14 - 2017-11-05 15:08 - 000000918 _____ C:\Users\Public\Desktop\VLC media player.lnk
2018-01-08 08:10 - 2016-07-06 16:58 - 000000000 ____D C:\Windows10Upgrade
2018-01-07 14:01 - 2017-11-19 15:03 - 000001307 _____ C:\Users\Siggi\Desktop\SDRSharp.exe - Verknüpfung.lnk
2018-01-07 10:16 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\rescache
2018-01-06 17:59 - 2014-01-07 16:24 - 000000000 ____D C:\Users\Siggi\AppData\Local\ElevatedDiagnostics
2018-01-06 17:06 - 2017-09-30 15:34 - 001131952 _____ C:\WINDOWS\system32\perfh007.dat
2018-01-06 17:06 - 2017-09-30 15:34 - 000268392 _____ C:\WINDOWS\system32\perfc007.dat
2018-01-06 16:57 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2018-01-06 16:57 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\system32\F12
2018-01-06 16:57 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\TextInput
2018-01-06 16:57 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2018-01-06 16:57 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-01-06 16:57 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\migwiz
2018-01-06 16:57 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-01-06 16:57 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Provisioning
2018-01-06 16:57 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2018-01-06 16:57 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Dism
2018-01-06 13:50 - 2017-10-04 16:24 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2018-01-06 13:50 - 2017-10-04 16:24 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
2018-01-06 13:49 - 2017-10-04 16:25 - 000000000 ____D C:\Program Files\Common Files\AV
2018-01-06 13:49 - 2017-08-25 10:26 - 000000000 ____D C:\Users\Sigg
2018-01-06 13:49 - 2015-10-30 07:28 - 000000000 ____D C:\Users\Default.migrated
2018-01-04 09:18 - 2016-07-07 06:50 - 000002429 _____ C:\Users\Siggi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-01-04 09:18 - 2016-07-07 06:50 - 000000000 ___RD C:\Users\Siggi\OneDrive
2018-01-04 08:37 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\appcompat
2018-01-04 08:36 - 2014-08-14 14:55 - 000000446 __RSH C:\ProgramData\ntuser.pol
2018-01-03 22:29 - 2016-07-06 22:08 - 000000000 ____D C:\Users\Siggi\AppData\Local\TileDataLayer
2018-01-03 22:28 - 2016-04-27 06:55 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-01-03 22:24 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\windows nt
2018-01-03 22:20 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Registration
2018-01-03 22:18 - 2016-07-06 22:02 - 000023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2018-01-03 22:17 - 2017-09-29 14:46 - 000000000 __RSD C:\WINDOWS\media
2018-01-03 22:00 - 2017-03-22 14:32 - 000000000 ____D C:\Users\Siggi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Rechner-Plus
2018-01-03 22:00 - 2015-09-02 18:31 - 000000000 ____D C:\Users\Siggi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2018-01-03 22:00 - 2015-05-18 17:04 - 000000000 ____D C:\Users\Siggi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SDR# Plugins
2018-01-03 22:00 - 2014-10-19 10:00 - 000000000 ____D C:\Users\Siggi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Phase 5 HTML-Editor
2018-01-03 22:00 - 2014-09-10 11:46 - 000000000 ____D C:\Users\Siggi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WXtoImg
2018-01-03 22:00 - 2014-03-22 16:37 - 000000000 ____D C:\Users\Siggi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2018-01-03 21:49 - 2017-09-29 14:46 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-01-03 21:45 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2018-01-03 21:43 - 2015-06-23 09:37 - 000000000 ____D C:\Users\Siggi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ln-systems
2018-01-03 21:43 - 2015-05-20 19:34 - 000000000 ____D C:\Users\Siggi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SDR-RADIO.com (V2)
2018-01-03 21:43 - 2014-01-03 23:17 - 000000000 ____D C:\Users\Siggi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Logitech
2018-01-03 21:41 - 2015-04-02 14:50 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MainConcept
2018-01-03 21:37 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\USOPrivate
2018-01-03 21:32 - 2017-08-16 19:23 - 002004764 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2018-01-03 21:27 - 2017-08-16 19:22 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2018-01-03 21:22 - 2017-09-29 14:46 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2018-01-03 21:16 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2018-01-03 21:16 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\spool
2018-01-03 21:16 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\NDF
2018-01-03 21:16 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\IME
2018-01-03 21:16 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2018-01-03 21:16 - 2014-04-10 17:59 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2018-01-03 21:16 - 2014-02-26 16:13 - 000000000 ____D C:\WINDOWS\SysWOW64\Silabs
2018-01-03 21:16 - 2014-01-05 12:53 - 000000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information
2018-01-03 21:16 - 2014-01-03 23:17 - 000000000 ____D C:\WINDOWS\system32\SPReview
2018-01-03 21:16 - 2014-01-03 23:16 - 000000000 ____D C:\WINDOWS\system32\EventProviders
2018-01-03 21:15 - 2017-11-05 15:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2018-01-03 21:15 - 2017-10-31 17:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CubicSDR
2018-01-03 21:15 - 2017-10-30 16:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DxO OpticsPro 11
2018-01-03 21:15 - 2017-10-10 12:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY
2018-01-03 21:15 - 2017-10-04 16:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection
2018-01-03 21:15 - 2017-09-29 14:46 - 000000000 __SHD C:\Program Files\Windows Sidebar
2018-01-03 21:15 - 2017-09-29 14:46 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar
2018-01-03 21:15 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\schemas
2018-01-03 21:15 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-01-03 21:15 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Help
2018-01-03 21:15 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-01-03 21:15 - 2017-08-25 10:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Andy
2018-01-03 21:15 - 2017-08-19 12:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JVComm32
2018-01-03 21:15 - 2017-07-22 13:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2018-01-03 21:15 - 2017-07-07 18:41 - 000000000 ____D C:\Program Files\UNP
2018-01-03 21:15 - 2017-03-25 17:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GeoSetter
2018-01-03 21:15 - 2017-03-18 22:03 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2018-01-03 21:15 - 2017-03-17 10:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2018-01-03 21:15 - 2017-03-16 12:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters
2018-01-03 21:15 - 2017-03-09 19:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO Konto Online 365
2018-01-03 21:15 - 2017-02-28 14:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MicroCapture Pro
2018-01-03 21:15 - 2017-02-21 16:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\stunnel AllUsers
2018-01-03 21:15 - 2017-02-15 12:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC-Wetterstation
2018-01-03 21:15 - 2016-11-05 11:07 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom
2018-01-03 21:15 - 2016-09-28 11:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dream Aquarium
2018-01-03 21:15 - 2016-08-23 12:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Image Viewer
2018-01-03 21:15 - 2016-07-25 17:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2018-01-03 21:15 - 2016-07-16 16:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProgDVB
2018-01-03 21:15 - 2016-07-07 07:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\8GadgetPack
2018-01-03 21:15 - 2016-06-29 16:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC-WELT-Fix-it-Pack
2018-01-03 21:15 - 2016-06-11 15:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dynamic-Photo HDR 4
2018-01-03 21:15 - 2016-05-06 16:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home
2018-01-03 21:15 - 2016-04-27 06:34 - 000000000 ____D C:\WINDOWS\ShellNew
2018-01-03 21:15 - 2016-02-08 20:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2018-01-03 21:15 - 2016-01-13 13:59 - 000000000 ____D C:\WINDOWS\de
2018-01-03 21:15 - 2015-11-12 19:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Teamspeak2 RC2
2018-01-03 21:15 - 2015-11-09 20:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlexRadio Systems
2018-01-03 21:15 - 2015-05-24 19:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pcr1k Mini
2018-01-03 21:15 - 2015-04-03 07:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVBViewer
2018-01-03 21:15 - 2015-04-02 17:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechniSat DVB
2018-01-03 21:15 - 2015-04-02 17:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVBViewer TE2
2018-01-03 21:15 - 2015-02-16 15:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cut Out pro(64 bits)
2018-01-03 21:15 - 2015-02-14 16:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon PhotoRecord
2018-01-03 21:15 - 2015-01-31 14:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Camer@
2018-01-03 21:15 - 2015-01-31 14:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZC-700W Webcam
2018-01-03 21:15 - 2014-11-26 21:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VisionGS PE
2018-01-03 21:15 - 2014-11-25 17:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2018-01-03 21:15 - 2014-11-23 19:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasyWeather
2018-01-03 21:15 - 2014-09-09 08:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KOCH CD-ROM
2018-01-03 21:15 - 2014-08-24 15:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2018-01-03 21:15 - 2014-08-24 15:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grafikverwandte Programme
2018-01-03 21:15 - 2014-07-21 18:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2018-01-03 21:15 - 2014-04-27 11:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\USB2.0 PC Camera
2018-01-03 21:15 - 2014-04-13 14:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView
2018-01-03 21:15 - 2014-04-02 13:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MX320 series
2018-01-03 21:15 - 2014-03-22 16:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2018-01-03 21:15 - 2014-03-22 14:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVD Shrink deutsch
2018-01-03 21:15 - 2014-02-26 16:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WeatherLink
2018-01-03 21:15 - 2014-02-02 10:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audials 10
2018-01-03 21:15 - 2014-02-01 11:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Corel Paint Shop Pro Photo X2
2018-01-03 21:15 - 2014-01-13 16:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Neat Image Standalone (32-bit)
2018-01-03 21:15 - 2014-01-09 16:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FUJIFILM
2018-01-03 21:15 - 2014-01-05 18:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2018-01-03 21:15 - 2014-01-05 17:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2018-01-03 21:15 - 2014-01-05 16:46 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2018-01-03 21:15 - 2014-01-05 11:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online-Banking+
2018-01-03 21:15 - 2014-01-04 15:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hauppauge WinTV
2018-01-03 21:14 - 2017-09-29 14:49 - 000000000 ____D C:\WINDOWS\Setup
2018-01-03 20:20 - 2017-09-29 14:46 - 000000000 __RHD C:\Users\Public\Libraries
2018-01-03 19:09 - 2016-07-06 22:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Telekom
2018-01-03 19:09 - 2015-06-15 13:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoMate
2018-01-03 19:09 - 2014-07-23 13:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Plugin Site
2018-01-03 19:08 - 2015-05-22 19:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Franzis
2018-01-03 19:07 - 2014-09-10 12:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amateur Radio
2018-01-03 19:07 - 2014-04-02 15:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2018-01-03 19:07 - 2014-01-05 14:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2018-01-03 19:07 - 2009-07-14 06:32 - 000000000 ____D C:\Program Files\Microsoft Games
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-01-03 18:25 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2018-01-03 18:25 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2018-01-03 18:24 - 2017-09-30 15:36 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\te-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\si-LK
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\or-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\km-KH
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\is-IS
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\id-ID
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\be-BY
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\as-IN
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\am-ET
2018-01-03 18:24 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2018-01-03 18:24 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2018-01-03 18:24 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2018-01-03 18:24 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-01-03 18:24 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Windows Defender
2018-01-03 18:24 - 2017-09-29 14:46 - 000000000 ____D C:\PerfLogs
2018-01-03 17:46 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2018-01-03 17:44 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2018-01-03 17:44 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\MUI
2018-01-03 17:36 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\OCR
2018-01-02 14:11 - 2017-11-22 12:19 - 000000000 ____D C:\AdwCleaner
2017-12-29 17:20 - 2014-02-09 12:36 - 000000000 ____D C:\Users\Siggi\.gimp-2.8
2017-12-29 17:05 - 2014-02-01 11:52 - 000000000 ____D C:\Users\Siggi\AppData\Local\Corel
2017-12-29 16:59 - 2014-02-01 11:49 - 000000000 ____D C:\Users\Siggi\Documents\My PSP Files
2017-12-28 18:28 - 2014-12-21 16:21 - 000000600 _____ C:\Users\Siggi\AppData\Local\PUTTY.RND
2017-12-28 16:47 - 2014-03-29 07:49 - 000000000 ____D C:\WINDOWS\pss

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-07-30 15:56 - 2017-07-30 16:00 - 000000626 _____ () C:\Users\Siggi\AppData\Roaming\All CPU MeterV3_Settings.ini
2016-01-09 12:05 - 2017-12-25 11:16 - 000000039 _____ () C:\Users\Siggi\AppData\Roaming\AVSDVDPlayer.m3u
2017-07-30 17:08 - 2017-07-30 17:08 - 000000839 _____ () C:\Users\Siggi\AppData\Roaming\Drives Meter_Settings.ini
2014-05-03 15:05 - 2014-05-03 15:05 - 000000000 _____ () C:\Users\Siggi\AppData\Roaming\gdfw.log
2014-05-03 15:04 - 2017-10-10 12:15 - 000003510 _____ () C:\Users\Siggi\AppData\Roaming\gdscan.log
2014-11-02 11:21 - 2017-02-20 14:10 - 000000600 _____ () C:\Users\Siggi\AppData\Roaming\winscp.rnd
2014-01-05 14:25 - 2016-04-26 13:33 - 000030208 _____ () C:\Users\Siggi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-12-21 16:21 - 2017-12-28 18:28 - 000000600 _____ () C:\Users\Siggi\AppData\Local\PUTTY.RND
2017-12-02 16:22 - 2017-12-02 16:22 - 000003165 _____ () C:\Users\Siggi\AppData\Local\recently-used.xbel
2016-07-25 14:43 - 2016-08-05 14:20 - 000007602 _____ () C:\Users\Siggi\AppData\Local\resmon.resmoncfg

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2018-01-24 13:04

==================== Ende von FRST.txt ============================

sonsm55 25.01.2018 15:51
und add:FRST Additions Logfile:
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 21.01.2018
durchgeführt von Siggi (25-01-2018 15:40:20)
Gestartet von C:\Users\Siggi\Desktop
Windows 10 Pro Version 1709 16299.125 (X64) (2018-01-03 21:26:28)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2441953047-3725558795-4123501198-500 - Administrator - Disabled) => C:\Users\Administrator
DefaultAccount (S-1-5-21-2441953047-3725558795-4123501198-503 - Limited - Disabled)
Gast (S-1-5-21-2441953047-3725558795-4123501198-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2441953047-3725558795-4123501198-1002 - Limited - Enabled)
Siggi (S-1-5-21-2441953047-3725558795-4123501198-1001 - Administrator - Enabled) => C:\Users\Siggi
WDAGUtilityAccount (S-1-5-21-2441953047-3725558795-4123501198-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: G DATA INTERNET SECURITY (Enabled - Up to date) {A9C56A9B-ECCD-57EA-78F6-92511DA1C885}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G*DATA Personal Firewall (Enabled) {91FEEBBE-A6A2-56B2-53A9-3B64E3728FFE}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

8GadgetPack (HKLM-x32\...\{F60DAD2D-8625-4467-AE01-EA0382187621}) (Version: 19.0.0 - Helmut Buhler)
ACDSee 19 (HKLM\...\{F36C6194-6306-43D8-8775-8267BC77FF65}) (Version: 19.3.0.506 - ACD Systems International Inc.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 22.0.0.153 - Adobe Systems Incorporated)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.5.23 - Adobe Systems Incorporated.)
Adobe Flash Player 27 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 27.0.0.130 - Adobe Systems Incorporated)
Adobe Flash Player 28 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 28.0.0.137 - Adobe Systems Incorporated)
Adobe Photoshop Elements 12 (HKLM-x32\...\Adobe Photoshop Elements 12) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5.3 64-bit (HKLM\...\{2DD71ACB-552D-402C-9529-7906ACB95C30}) (Version: 5.3.1 - Adobe Systems Incorporated)
Adobe Premiere Elements 12 (HKLM\...\{4016464A-0C3E-4070-8293-5D7F0D8EAE3A}) (Version: 12.0 - Adobe Systems Incorporated) Hidden
Adobe Premiere Elements 12 (HKLM\...\PremElem120) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.23) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.23 - Adobe Systems Incorporated)
Ahnenforschung DeLuxe (HKLM-x32\...\Ahnenforschung DeLuxe) (Version:  - )
Andy OS (HKLM\...\Andy OS) (Version: 46.16 - Andy OS, Inc)
Apple Software Update (HKLM-x32\...\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}) (Version: 2.1.1.116 - Apple Inc.)
Ashampoo Burning Studio FREE v.1.14.5 (HKLM-x32\...\{91B33C97-91F8-FFB3-581B-BC952C901685}_is1) (Version: 1.14.5 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 10 v.10.2.1 (HKLM-x32\...\{C92AB6F1-4B66-808A-D77C-25EF81C0176A}_is1) (Version: 10.2.1 - Ashampoo GmbH & Co. KG)
Audials (HKLM-x32\...\{942EDCE4-79EE-409E-9E7C-6EC236C037AC}) (Version: 10.3.34300.0 - Audials AG)
Audials (HKLM-x32\...\{97DDF4B1-4BA6-40B3-AFBE-6080F08D540A}) (Version: 17.0.30797.9700 - Audials AG)
AVG (HKLM\...\AvgZen) (Version: 1.116.3.1052 - AVG Technologies)
AVG PC TuneUp (HKLM-x32\...\{82B9AF2D-4254-428A-9D1E-7714BA91A4B0}) (Version: 16.76.2 - AVG Technologies) Hidden
AVG PC TuneUp (HKLM-x32\...\AVG PC TuneUp) (Version: 16.76.3.18604 - AVG Technologies)
AVG Zen (HKLM\...\{219E7C4A-0902-4CD4-82B8-EF908BF3198E}) (Version: 1.116.2 - AVG Technologies) Hidden
AVS Audio Converter 8.0 (HKLM-x32\...\AVS Audio Converter_is1) (Version: 8.0.1.540 - Online Media Technologies Ltd.)
AVS Audio Editor 7.2 (HKLM-x32\...\AVS Audio Editor_is1) (Version: 7.2.2.488 - Online Media Technologies Ltd.)
AVS Audio Recorder 4.0 (HKLM-x32\...\AVS Audio Recorder_is1) (Version: 4.0.2.22 - Online Media Technologies Ltd.)
AVS Disc Creator 5.2.7 (HKLM-x32\...\AVS Disc Creator_is1) (Version: 5.2.7.541 - Online Media Technologies Ltd.)
AVS DVD Authoring (HKLM-x32\...\AVS DVD Authoring_is1) (Version:  - Online Media Technologies Ltd.)
AVS DVD Player version 2.4 (HKLM-x32\...\AVS DVD Player_is1) (Version:  - Online Media Technologies Ltd.)
AVS Update Manager 1.0 (HKLM-x32\...\AVS Update Manager_is1) (Version:  - Online Media Technologies Ltd.)
AVS Video Converter 9.1 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 9.1.2.571 - Online Media Technologies Ltd.)
AVS Video Editor 6.5 (HKLM-x32\...\AVS Video Editor_is1) (Version: 6.5.1.246 - Online Media Technologies Ltd.)
AVS Video Recorder 2.4 (HKLM-x32\...\AVS Video Recorder_is1) (Version:  - Online Media Technologies Ltd.)
AVS4YOU Software Navigator 1.2 (HKLM-x32\...\AVS4YOU Software Navigator_is1) (Version:  - Online Media Technologies Ltd.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Camera Support Core Library (HKLM-x32\...\{A1D0D14A-B776-4907-BC00-5149F2298086}) (Version: 7.3.0.4 - Canon) Hidden
Camera Window DVC (HKLM-x32\...\{A2EB8F2E-6D9B-4F8B-96EB-F976D33F416F}) (Version: 5.4.4 - Canon) Hidden
Camera Window MC (HKLM-x32\...\{36C65B50-37BA-4467-AAD5-0523EFDF6F62}) (Version: 5.4.3 - Canon) Hidden
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
Canon Camera Support Core Library (HKLM-x32\...\InstallShield_{A1D0D14A-B776-4907-BC00-5149F2298086}) (Version: 7.3.0.4 - Canon)
Canon Camera WIA Driver (HKLM-x32\...\{33CF7CDF-9805-4500-9CC7-D19D52AD63C4}) (Version: 5.6 - Canon) Hidden
Canon Camera Window DC_DV 5 for ZoomBrowser EX (HKLM-x32\...\InstallShield_{A2EB8F2E-6D9B-4F8B-96EB-F976D33F416F}) (Version: 5.4.4 - Canon)
Canon Camera Window MC 5 for ZoomBrowser EX (HKLM-x32\...\InstallShield_{36C65B50-37BA-4467-AAD5-0523EFDF6F62}) (Version: 5.4.3 - Canon)
Canon EOS Kiss_N REBEL_XT 350D WIA Driver (HKLM-x32\...\InstallShield_{33CF7CDF-9805-4500-9CC7-D19D52AD63C4}) (Version: 5.6 - Canon)
CANON iMAGE GATEWAY Task (HKLM-x32\...\{33711828-7194-4446-8C05-0DC0E59A0C1B}) (Version: 1.0.0.23 - Canon) Hidden
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\InstallShield_{33711828-7194-4446-8C05-0DC0E59A0C1B}) (Version: 1.0.0.23 - Canon)
Canon Internet Library for ZoomBrowser EX (HKLM-x32\...\InstallShield_{D0E8C34D-19D2-49FD-A900-88DEB788FF86}) (Version: 1.4.0 - Canon Inc.)
Canon MP Navigator EX 2.1 (HKLM-x32\...\MP Navigator EX 2.1) (Version:  - )
Canon MX320 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX320_series) (Version:  - Canon Inc.)
Canon PhotoRecord (HKLM-x32\...\{BBBC2B89-E193-4348-A83C-C8DD8210A4AC}) (Version: 02.02.03002 - Cisra)
Canon RAW Image Task for ZoomBrowser EX (HKLM-x32\...\InstallShield_{BAA43DA2-B6C5-46EC-B163-0E8EEAF975A4}) (Version: 2.2 - Canon)
Canon Utilities Digital Photo Professional (HKLM-x32\...\Digital Photo Professional) (Version: 3.14.47.0 - Canon Inc.)
Canon Utilities Digital Photo Professional 2.0 (HKLM-x32\...\{17BF3045-AB1D-4048-8356-6C584B83565E}) (Version: 2.0 - Canon) Hidden
Canon Utilities Digital Photo Professional 2.0 (HKLM-x32\...\InstallShield_{17BF3045-AB1D-4048-8356-6C584B83565E}) (Version: 2.0 - Canon)
Canon Utilities EOS Capture 1.5 (HKLM-x32\...\InstallShield_{589D17BB-C997-48C0-BCD2-CC8DC3375FE8}) (Version: 1.5 - Canon)
Canon Utilities EOS Lens Registration Tool (HKLM-x32\...\EOS Lens Registration Tool) (Version: 1.3.0.1 - Canon Inc.)
Canon Utilities EOS Utility 2 (HKLM-x32\...\EOS Utility 2) (Version: 2.14.20.0 - Canon Inc.)
Canon Utilities EOS Web Service Registration Tool (HKLM-x32\...\EOS Web Service Registration Tool) (Version: 1.2.10.0 - Canon Inc.)
Canon Utilities PhotoStitch 3.1 (HKLM-x32\...\InstallShield_{874E44F3-B9A7-4AA1-B4BA-83E5684ED9C6}) (Version: 3.1.16 - Canon)
Canon ZoomBrowser EX (E) (HKLM-x32\...\{C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}) (Version: 5.05.0000 - Canon)
CBH-2012 (HKLM-x32\...\{E7E877BE-A17B-4E5A-B8E4-3B893C03BB1B}) (Version: 4.1.SP1 - LN-Systems)
CCleaner (HKLM\...\CCleaner) (Version: 5.38 - Piriform)
CLIQZ (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 1.0.44 - CLIQZ.com)
COLOR projects 4 elements (64-Bit) (HKLM\...\COLOR_PROJECTS_4_2_C935FDA1_is1) (Version: 4.41 - Franzis Verlag GmbH)
COLOR projects premium (64-Bit) (HKLM\...\COLOR_PROJECTS_1_2_C935FDA1_is1) (Version: 1.14 - Franzis Verlag GmbH)
ComproFM 2 (HKLM-x32\...\{9EA404D2-5A5E-4A44-94E3-B8B148F7BCBC}) (Version: 2.20.500 - )
Corel Paint Shop Pro Photo X2 (HKLM-x32\...\{64E72FB1-2343-4977-B4A8-262CD53D0BD3}) (Version: 12.50.0001 - Corel Corporation)
CubicSDR (HKLM-x32\...\CubicSDR 0.2.0) (Version: 0.2.0 - cubicsdr.com)
Cut Out 3.0 pro (64bits) (HKLM\...\Cut Out pro(64bits)_is1) (Version:  - Franzis.de)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DENOISE projects standard (64-Bit) (HKLM\...\DENOISE_PROJECTS_1_2_FBC348A0_is1) (Version: 1.21 - Franzis Verlag GmbH)
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
Dream Aquarium (HKLM-x32\...\DreamAqua) (Version:  - )
DVBViewer Pro (HKLM-x32\...\DVBViewer Pro_is1) (Version: 5.3.2 - CM&V)
DVBViewer TE2 (HKLM-x32\...\DVBViewer TE2_is1) (Version:  - CM&V)
DVD Shrink 3.2 deutsch (DeCSS-frei) (HKLM-x32\...\DVD Shrink DE_is1) (Version:  - DVD Shrink)
DxO OpticsPro 11 (HKLM\...\{8256C2B1-D9F2-45F9-B7DA-BB0799D70A80}) (Version: 11.4.2 - DxO)
DxO OpticsPro 11 Plug-in für Adobe Lightroom (HKLM-x32\...\{13E8E1D4-CA2E-4A5C-BBD4-EB4F7CA66014}) (Version: 1.0.36 - DxO Labs)
Dynamic-Photo HDR 4.7 (HKLM-x32\...\Dynamic-Photo HDR 4_is1) (Version:  - Mediachance)
EasyWeather (HKLM-x32\...\{CE1B03BC-3C99-4580-A2AC-A41DB9B83378}) (Version:  - 1.0)
Elements 10 Organizer (HKLM-x32\...\{22D3A614-482C-444A-932C-9DA1B8ECDFD2}) (Version: 10.0 - Ihr Firmenname) Hidden
Elements 12 Organizer (HKLM-x32\...\{9D80A7B7-DC01-485D-AE93-710D559B5C56}) (Version: 12.0 - Ihr Firmenname) Hidden
EOS Capture 1.5 (HKLM-x32\...\{589D17BB-C997-48C0-BCD2-CC8DC3375FE8}) (Version: 1.5 - Canon) Hidden
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
FastStone Image Viewer 5.7 (HKLM-x32\...\FastStone Image Viewer) (Version: 5.7 - FastStone Soft)
FlexRadio Systems PowerSDR v2.6.4 (HKLM-x32\...\{F700F67B-8F6F-48EF-98EE-CF5CF62ABEA2}_is1) (Version: 2.6.4 - FlexRadio Systems)
FMW 1 (HKLM\...\{DC2A8E3D-D5E1-4837-A2E0-C308100AC412}) (Version: 1.143.3 - AVG Technologies) Hidden
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
FUJIFILM MyFinePix Studio 1.1 (HKLM-x32\...\FinePix Genie_is1) (Version:  - )
G DATA Firewall Helper (HKLM\...\{97a7185d-397f-4652-a72c-d3a08820d734}.sdb) (Version:  - )
G DATA INTERNET SECURITY (HKLM-x32\...\G DATA INTERNET SECURITY) (Version: 25.4.0.2 - G DATA Software AG)
GeoSetter 3.4.16 (HKLM-x32\...\GeoSetter_is1) (Version:  - Friedemann Schmidt)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
Google Earth Pro (HKLM-x32\...\{ECF2E224-42F5-4E50-B58E-94CA70E85697}) (Version: 7.3.0.3832 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Ham Radio Deluxe (HKLM-x32\...\{4DF979D5-464C-4926-AF73-54C1C219F06A}) (Version: 5.24.0.36 - HRD Software, LLC)
Harrys Filters 4.0 (Plugin) (HKLM\...\Harrys Filters 4.0 (Plugin)_is1) (Version:  - The Plugin Site)
Hauppauge WinTV 7 (HKLM-x32\...\Hauppauge WinTV 7) (Version: v7.0.30237 (CD 2.6) - Hauppauge Computer Works)
HDR projects darkroom (64-Bit) (HKLM\...\HDR_PROJECTS_2_0_3BF7CE82_is1) (Version: 2.26 - Franzis Verlag GmbH)
HDR Projects platin (64-Bit) (HKLM\...\HDR Projects platin_is1) (Version: 1.23 - Franzis Verlag GmbH)
Internet Library (HKLM-x32\...\{D0E8C34D-19D2-49FD-A900-88DEB788FF86}) (Version: 1.4.0 - Canon Inc.) Hidden
Java 8 Update 131 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180131F0}) (Version: 8.0.1310.11 - Oracle Corporation)
Java 8 Update 151 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
Java 8 Update 161 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180161F0}) (Version: 8.0.1610.12 - Oracle Corporation)
JVComm32 (HKLM-x32\...\{5090D628-C12F-4EB0-830D-819EFD52D950}) (Version: 2.0.1 - JVSoft Products - Eberhard Backeshoff)
Kaspersky Secure Connection (HKLM-x32\...\{F33C0717-8E04-4EB5-90C8-47221287DB4F}) (Version: 18.0.0.405 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{F33C0717-8E04-4EB5-90C8-47221287DB4F}) (Version: 18.0.0.405 - Kaspersky Lab)
LAV Filters 0.69 (HKLM-x32\...\lavfilters_is1) (Version: 0.69 - Hendrik Leppkes)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
Luminance HDR 2.4.0 (HKLM-x32\...\{7020FC34-6E04-4858-924D-354B28CB2402}_is1) (Version:  - Luminance HDR Dev Team)
MainConcept DTV Decoder Pro (HKLM-x32\...\{793FCE60-DE5E-4977-A942-A7B69A45B17D}) (Version: 1.5.0.2 - MainConcept GmbH)
Malwarebytes Version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
MergeModule_x64 (HKLM\...\{12DCC5A7-0100-4433-B4FF-217A3C5DC83B}) (Version: 9.3.00 - Sony Corporation) Hidden
MergeModule_x86 (HKLM-x32\...\{DD7721BB-CF1C-4DC9-AD87-8D5FB75413B7}) (Version: 9.3.00 - Sony Corporation) Hidden
MHEG-5/HbbTV for DVBViewer Pro (HKLM-x32\...\DVBViewer Pro MHEG-HBBTV Engine_is1) (Version: 2.0.0.5 - CM&V)
MicroCapture Pro 2.2 (HKLM-x32\...\MicroCapture Pro) (Version: 2.2 - winmax)
Microsoft Camera Codec Pack (HKLM-x32\...\{968AE11C-EDF7-4D18-B416-848DA26EADFA}) (Version: 6.3.9723.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2441953047-3725558795-4123501198-1001\...\OneDriveSetup.exe) (Version: 17.3.7131.1115 - Microsoft Corporation)
Microsoft Rechner-Plus (HKLM-x32\...\{437C19B3-7E20-4E39-B868-CA6BAA820E1C}) (Version: 1.0.0 - Microsoft)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (HKLM-x32\...\{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}) (Version: 9.0.21022.218 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 59.0 (x64 en-US) (HKLM\...\Mozilla Firefox 59.0 (x64 en-US)) (Version: 59.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 56.0 - Mozilla)
Mozilla Thunderbird 56.0 (x86 en-US) (HKLM-x32\...\Mozilla Thunderbird 56.0 (x86 en-US)) (Version: 56.0 - Mozilla)
Mozilla Thunderbird 58.0 (x86 en-US) (HKU\S-1-5-21-2441953047-3725558795-4123501198-1001\...\Mozilla Thunderbird 58.0 (x86 en-US)) (Version: 58.0 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Neat Image v7.4.0 Demo Standalone (32-bit) (HKLM-x32\...\Neat Image Standalone (32-bit)_is1) (Version:  - Neat Image team, ABSoft)
NEAT projects professional (64-Bit) (HKLM\...\NEAT_PROJECTS_1_3_Df337A2C_is1) (Version: 1.12 - Franzis Verlag GmbH)
Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.11 - Google)
NVIDIA 3D Vision Treiber 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 342.01 - NVIDIA Corporation)
NVIDIA Grafiktreiber 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 342.01 - NVIDIA Corporation)
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
Online-Banking+ (HKLM-x32\...\{B1B03833-939A-43D3-ADA5-E4088E6AFD5D}) (Version: 15.2.1.18 - Buhl Data Service GmbH) Hidden
Online-Banking+ (HKLM-x32\...\Online-Banking+) (Version:  - Buhl Data Service GmbH)
PC Camer@N (HKLM-x32\...\{68AD7668-834F-49BC-94AB-28F94A5D93D5}) (Version: 0.1.3.8 - Teconet) Hidden
PC Camer@N (HKLM-x32\...\InstallShield_{68AD7668-834F-49BC-94AB-28F94A5D93D5}) (Version: 0.1.3.8 - Teconet)
Pcr1k Mini (HKLM-x32\...\ST6UNST #1) (Version:  - )
PC-WELT-Fix-it-Pack 2.0 (HKLM\...\{CD349D32-0976-4AB5-9616-82717033D2C8}_is1) (Version:  - IDG Magazine Media GmbH)
Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer)
PhotoPad Foto-Editor (HKLM-x32\...\PhotoPad) (Version: 2.41 - NCH Software)
PhotoStitch (HKLM-x32\...\{874E44F3-B9A7-4AA1-B4BA-83E5684ED9C6}) (Version: 3.1.16 - Canon) Hidden
PlayMemories Home (HKLM-x32\...\{94F4815B-755A-4FFA-AFDC-EE8FE776981E}) (Version: 5.1.00.12260 - Sony Corporation)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PMB_ModeEditor (HKLM-x32\...\{D5318740-B088-4B1A-B6A8-1F90A172CCD1}) (Version: 9.3.00 - Sony Corporation) Hidden
PMB_ServiceUploader (HKLM-x32\...\{E7FDF11C-12BB-4D6F-9B6D-F8E488C776DC}) (Version: 10.1.00 - Sony Corporation) Hidden
ProgDVB (HKLM\...\ProgDVB) (Version:  - )
PSE12 STI Installer (HKLM-x32\...\{11F9A376-342F-4297-82DA-1F6EA8ED4B6B}) (Version: 12.0 - Adobe Systems Incorporated) Hidden
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
RAF (HKLM-x32\...\{E6B43401-E818-4961-AFED-118DD8E87642}) (Version: 1.00.0001 - FUJIFILM Corporation)
RAW Image Task 2.2 (HKLM-x32\...\{BAA43DA2-B6C5-46EC-B163-0E8EEAF975A4}) (Version: 2.2 - Canon) Hidden
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)
Saal Design Software (HKLM-x32\...\{0C52FDB3-C8A1-E686-5A87-85F3EC2259D4}) (Version: 4.0 - Saal Digital Fotoservice GmbH) Hidden
Saal Design Software (HKLM-x32\...\SaalDesignSoftware) (Version: 4.0 - Saal Digital Fotoservice GmbH)
Serif PhotoPlus X5 (HKLM-x32\...\{617E7009-0C50-4178-B0E2-F9D66DC8A582}) (Version: 15.0.1.011 - Serif (Europe) Ltd)
Silicon Laboratories CP210x VCP Drivers for Windows 2000/XP/2003 Server/Vista (HKLM-x32\...\{E4EE41CD-85AD-41DC-A93D-CA73A3BE981B}) (Version: 4.40 - Silicon Laboratories, Inc.)
SILVER projects premium (64-Bit) (HKLM\...\SILVER_PROJECTS_1_2_28B15F1D_is1) (Version: 1.14 - Franzis Verlag GmbH)
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.151 - Skype Technologies S.A.)
stunnel installed for AllUsers (HKLM-x32\...\stunnel) (Version: 5.35 - Michal Trojnara)
TeamSpeak 2 RC2 (HKLM-x32\...\Teamspeak 2 RC2_is1) (Version: 2.0.32.60 - Dominating Bytes Design)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.75813 - TeamViewer)
TechniSat DVB-PC TV Star (HKLM-x32\...\{D032A7F0-8B5C-4603-8B46-235025D5F9C1}) (Version: 4.3.3 - TechniSat)
Technisat DVB-VC80 Redistributable Modules (HKLM-x32\...\{134007CC-7026-46C2-B46F-40D9FD2AF385}) (Version: 1.0.0 - Technisat)
Telekom Hosting Manager (HKLM\...\Telekom Hosting Manager) (Version: 1.1.6.0 - Telekom)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.50 - Ghisler Software GmbH)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
USB2.0 PC Camera (HKLM-x32\...\{417D86A0-89FE-4308-B172-45B74DCE6F8F}) (Version: 2.2.0.0 - aveotek)
Videoload (HKU\S-1-5-21-2441953047-3725558795-4123501198-1001\...\3923177984.wcps.t-online.de) (Version:  - wcps.t-online.de)
VideoMate DVB-T / DAB / ISDBT USB  Driver (HKLM-x32\...\{9B56D73E-CBC7-4499-ACED-9ECCA72AE52C}) (Version: 86.1.1012.2010 - )
VisionGS PE (HKLM-x32\...\VisionGS PE_is1) (Version:  - bluepath GmbH)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.8 - VideoLAN)
VMware Player (HKLM\...\{6D211A09-EB2A-4B83-ACCB-13B1BC12AF4E}) (Version: 12.5.2 - VMware, Inc.)
VMware VIX (HKLM-x32\...\{F99FC179-EA67-4BBC-8955-BDDA0CB94B88}) (Version: 1.15.6.00000 - VMware, Inc.)
Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.5-3 - Wacom Technology Corp.)
WeatherLink 6.0.3 (HKLM-x32\...\{E344C807-7DE0-4CC2-81BB-1F895CF8CBDF}) (Version: 6.0.3 - Davis Instruments Corp.)
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
Windows 10 Update Assistant (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22334 - Microsoft Corporation)
Windows Desktop Gadgets (HKLM\...\Windows Desktop Gadgets_is1) (Version: 2.0 - hxxp://gadgetsrevived.com)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows-Treiberpaket -  ZC-700W Webcam Driver (01/01/2007 6.0.0.1) (HKLM\...\10222FE57D88FE4CF0DE52CB1422B3E85424F890) (Version: 01/01/2007 6.0.0.1 -  )
Windows-Treiberpaket - Silicon Laboratories (silabenm) Ports  (10/18/2013 6.6.1.0) (HKLM\...\F92C2D6CB4EA0EE558BDF5F8BDD69083DFC62179) (Version: 10/18/2013 6.6.1.0 - Silicon Laboratories)
WinRAR 5.40 beta 2 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.2 - win.rar GmbH)
WinSCP 5.7.7 (HKLM-x32\...\winscp3_is1) (Version: 5.7.7 - Martin Prikryl)
WISO Konto Online Plus 365 (HKLM-x32\...\{FF192B78-55F6-4B80-860F-33E428FA16E3}) (Version: 22.0.0.0 - Buhl Data Service GmbH) Hidden
WISO Konto Online Plus 365 (HKLM-x32\...\WISO Konto Online Plus 365) (Version:  - Buhl Data Service GmbH)
WsWin V2.98.0 - 2015-08-31 (HKLM-x32\...\PC-Wetterstation_is1) (Version: 2.98.0 - Werner Krenn)
WXtoImg (HKLM-x32\...\WXtoImg) (Version:  - )
Z Cinema (HKLM\...\{6E166235-49F3-4DFA-A102-1E86675ABD11}) (Version: 1.0.0 - Logitech)
ZC-700W Webcam (HKLM-x32\...\{E398E7CC-30B8-4D63-B07B-741163A12565}) (Version: 100.000.070814 - ZC-700W)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2441953047-3725558795-4123501198-1001_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2441953047-3725558795-4123501198-1001_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9}\InprocServer32 -> C:\Users\Siggi\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Sidebar7.gadget\Release\Sidebar7.64.dll (Helmut Buhler)
ShellIconOverlayIdentifiers: [EldosIconOverlay-cbfs5] -> {1B916AD7-FB63-41F5-B564-5931F0D120E6} => C:\WINDOWS\system32\cbfsMntNtf5.dll [2014-01-23] (EldoS Corporation)
ShellIconOverlayIdentifiers: [HGE Overlay 0 (Upload)] -> {6AE3859C-AB0D-49EC-A7C2-3631D96C6EE5} => C:\WINDOWS\system32\HGE.ShellExtension.dll [2013-03-18] (Deutsche Telekom AG)
ShellIconOverlayIdentifiers: [HGE Overlay 1 (Transfer)] -> {E4E8FAD2-90BC-41fe-8851-F70EB11E6875} => C:\WINDOWS\system32\HGE.ShellExtension.dll [2013-03-18] (Deutsche Telekom AG)
ShellIconOverlayIdentifiers: [HGE Overlay 2 (Finished)] -> {B9C00A72-09B3-4f53-B8B9-7349D04D65F7} => C:\WINDOWS\system32\HGE.ShellExtension.dll [2013-03-18] (Deutsche Telekom AG)
ShellIconOverlayIdentifiers: [HGE Overlay 3 (Selected)] -> {8F153B5F-6763-4d81-9A78-26CC7750EF2A} => C:\WINDOWS\system32\HGE.ShellExtension.dll [2013-03-18] (Deutsche Telekom AG)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay-cbfs5] -> {1B916AD7-FB63-41F5-B564-5931F0D120E6} => C:\WINDOWS\system32\cbfsMntNtf5.dll [2014-01-23] (EldoS Corporation)
ContextMenuHandlers1: [AVG Shredder Shell Extension] -> {4858E7D9-8E12-45a3-B6A3-1CD128C9D403} => C:\Program Files (x86)\AVG\AVG PC TuneUp\SDShelEx-x64.dll [2017-11-15] (AVG Technologies CZ, s.r.o.)
ContextMenuHandlers1: [AVK9CM] -> {CAF4C320-32F5-11D3-A222-004095200FF2} => C:\Program Files (x86)\G DATA\InternetSecurity\AVK\ShellExt64.dll [2017-06-08] (G DATA Software AG)
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\ShellExt.dll [2017-09-29] (Microsoft Corporation)
ContextMenuHandlers1: [HgeContextMenu] -> {62C509D3-D882-4A21-8358-E75DEFF6CB25} => C:\WINDOWS\system32\HGE.ShellExtension.dll [2013-03-18] (Deutsche Telekom AG)
ContextMenuHandlers1: [PicaViewCtxMenuShlExt] -> {F3CBBA61-EE3F-4D6D-B1C6-B3474E579936} => C:\Program Files\Common Files\ACD Systems\PicaView\ACDSeePV.dll [2015-10-08] (ACD Systems International Inc.)
ContextMenuHandlers1: [ShellConverter] -> {30A4E07E-068A-4d91-8F05-691283A1336B} => C:\Program Files (x86)\Common Files\AVSMedia\ActiveX\AVSShellConverter64.dll [2015-04-06] (Online Media Technologies Ltd.)
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\ShellExt.dll [2017-09-29] (Microsoft Corporation)
ContextMenuHandlers2-x32: [VMDiskMenuHandler] -> {271DC252-6FE1-4D59-9053-E4CF50AB99DE} => C:\Program Files (x86)\VMware\VMware Player\vmdkShellExt.dll [2016-11-11] (VMware, Inc.)
ContextMenuHandlers2-x32: [VMDiskMenuHandler64] -> {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => C:\Program Files (x86)\VMware\VMware Player\x64\vmdkShellExt64.dll [2016-11-11] (VMware, Inc.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-01-20] (Malwarebytes)
ContextMenuHandlers3: [Reisswolf] -> {1F0F1EE7-36B9-11D2-8985-0080ADA96E9B} => C:\Program Files (x86)\G DATA\InternetSecurity\Shredder\Reisswlf64.dll [2017-06-08] (G DATA Software AG)
ContextMenuHandlers4: [AVG Disk Space Explorer Shell Extension] -> {4838CD50-7E5D-4811-9B17-C47A85539F28} => C:\Program Files (x86)\AVG\AVG PC TuneUp\DseShExt-x64.dll [2017-11-15] (AVG Technologies CZ, s.r.o.)
ContextMenuHandlers4: [AVG Shredder Shell Extension] -> {4858E7D9-8E12-45a3-B6A3-1CD128C9D403} => C:\Program Files (x86)\AVG\AVG PC TuneUp\SDShelEx-x64.dll [2017-11-15] (AVG Technologies CZ, s.r.o.)
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\ShellExt.dll [2017-09-29] (Microsoft Corporation)
ContextMenuHandlers4: [HgeContextMenu] -> {62C509D3-D882-4A21-8358-E75DEFF6CB25} => C:\WINDOWS\system32\HGE.ShellExtension.dll [2013-03-18] (Deutsche Telekom AG)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-11-14] (NVIDIA Corporation)
ContextMenuHandlers6: [AVK9CM] -> {CAF4C320-32F5-11D3-A222-004095200FF2} => C:\Program Files (x86)\G DATA\InternetSecurity\AVK\ShellExt64.dll [2017-06-08] (G DATA Software AG)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-01-20] (Malwarebytes)
ContextMenuHandlers6: [Reisswolf] -> {1F0F1EE7-36B9-11D2-8985-0080ADA96E9B} => C:\Program Files (x86)\G DATA\InternetSecurity\Shredder\Reisswlf64.dll [2017-06-08] (G DATA Software AG)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {07137DCC-EA44-4003-A6FD-1C47E356D455} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated)
Task: {07458051-D8AB-43BD-ACF2-D44E84A67815} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {09392749-0A12-4DCF-ABD4-5D6F5F2AADC6} - System32\Tasks\{0B247F87-A701-4440-9339-F1875EE95FCD} => C:\Windows\system32\pcalua.exe -a D:\CEP_2.0_Complete_Win_DE.exe -d D:\
Task: {0A0AD880-9540-47F7-91AD-76FF1026E894} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {0A0DDAB3-802E-4F77-8371-476DABB16F4A} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {0A2A53DA-24DA-460A-91AC-AF521E86EF60} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {11DAABBF-5D98-470B-ADB7-F51F117032FB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {15F6C957-E06F-4550-A456-686F4F28C4AC} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe [2017-11-15] (AVG Technologies CZ, s.r.o.)
Task: {1C6BF7D0-4B35-4FD7-993D-F665DF4E3960} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {400CA01C-1EEA-46AE-BE53-2E7A986C8F90} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {41174F5C-DB56-441D-83CA-CF51200087AD} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {411B0972-E529-4F89-A24B-103E41E1BBC5} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {465CD3B6-42A0-44FF-B7E8-2F823CD014B1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\MpCmdRun.exe [2018-01-11] (Microsoft Corporation)
Task: {4A1EE791-9499-4969-B4EF-60F39984A9D6} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {4AF8A682-BEC1-4A52-A250-61D78829CFF0} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4F0A61A4-655B-47E3-8AD6-74E41B74C724} - System32\Tasks\{E0A07D66-864F-44B4-8DEF-5754405773DE} => C:\Windows\system32\pcalua.exe -a C:\Users\Siggi\Downloads\MDVS51LE_SR1(1).exe -d C:\Users\Siggi\Downloads
Task: {535711B1-155A-44BE-AE61-C9EF7FD7B7E0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\MpCmdRun.exe [2018-01-11] (Microsoft Corporation)
Task: {58407670-E10E-43E6-BAFE-D8287E6AC0CA} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5ABD9620-FE0E-4F0F-A46B-0C2A9B642C8C} - System32\Tasks\Java Platform SE Auto Updater => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-12-19] (Oracle Corporation)
Task: {6892721B-BF1A-451A-AFDF-6EBF13A566C2} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-12-13] (Piriform Ltd)
Task: {6968DAEA-E639-4D3B-A1C7-1ED4C05E2971} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6A245795-611F-4EA0-B3FA-715A0FC9ED0D} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {71BDCFF0-8A63-4C94-BCB7-B7439D012E74} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {7927F907-FDEA-4513-A758-49F1F3730B1C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2008-07-30] (Apple Inc.)
Task: {7D35FDE0-0A71-4D47-B255-F4396AA2B062} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {812B89ED-7B35-4A10-8AFA-5A6C4F3D8532} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8C4B46AE-DDD7-4E04-8E1D-BBBCE394B84B} - System32\Tasks\Zeitschaltung => /C [Argument = exit]
Task: {8EF2BC47-6A7B-4D41-BF41-E4830B00800F} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {92ADAB95-CA69-4BFF-9CFB-779A442B291F} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-01-12] (Adobe Systems Incorporated)
Task: {931AA313-0CB9-47E4-AB4D-BA55394CBB99} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {9624B254-4386-4A7A-A8FE-EE2961A19647} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {99910F72-80D4-42BE-A0C3-58C67718029A} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {9D71E7E4-4BFC-4F4F-9205-FBD50E471BF5} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {A237C3FE-C1FE-4F33-8681-662ABB0B583E} - System32\Tasks\{1A1FA7F6-1890-4D31-8874-9602DACB72B0} => D:\CEP_2.0_Complete_Win_DE.exe
Task: {A29B961A-C7B5-42F8-B13F-AE49A4BD9DBA} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {AEA72503-E0CA-4153-B295-ACF3D1B7123D} - System32\Tasks\{3F9514FB-C8A3-49B9-8A8F-02E9AF1A6DBE} => C:\Windows\system32\pcalua.exe -a G:\unetbootin-windows-608\unetbootin-windows-608.exe -d G:\unetbootin-windows-608
Task: {B4B4AB71-2A43-4550-8807-3F79D36FBFFD} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B59A805C-7BC4-48CE-A905-81BD3A6E6A5C} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG
Task: {BC32F5C5-572A-4A21-8C37-B1837E79C55B} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {C4B9A9D6-1D56-4A0D-89DD-E327BA7DC51B} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2013-10-02] (Microsoft Corporation)
Task: {D1297AB4-965E-4CE1-8AF9-0E3EAE78C4BE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\MpCmdRun.exe [2018-01-11] (Microsoft Corporation)
Task: {DBC6E009-CDE7-4E3E-A9F9-7B6ADC3C59DA} - System32\Tasks\AVG EUpdate Task => avgsetupx.exe
Task: {DF0A1BEF-73AE-4422-836B-FE872E6126B7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\MpCmdRun.exe [2018-01-11] (Microsoft Corporation)
Task: {E44F740D-679D-42A1-AA32-FDE297A2A779} - System32\Tasks\AdobeAAMUpdater-1.0-Siggi-PC-Siggi => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-03] (Adobe Systems Incorporated)
Task: {E510889C-EC05-4A83-987A-BCFAF6994150} - System32\Tasks\{C3EE8CFC-80D2-4565-BF7E-C332DE34E4F2} => D:\CEP_2.0_Complete_Win_DE.exe
Task: {E6B2E88C-6B9F-42CD-B1DE-584AE4243094} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {EB5EDA2A-6003-46DE-8489-8E22A06BF3DD} - System32\Tasks\{89F4780C-152F-4B56-871F-DA7F8D01A46F} => C:\Windows\system32\pcalua.exe -a H:\SetupOnlineBankingPlus(1).exe -d H:\
Task: {F8A75EC6-71B0-4756-8834-97A95DDB4518} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_130_pepper.exe [2017-09-25] (Adobe Systems Incorporated)
Task: {FBEF287F-54B7-4D6A-97F7-F17A2FF2D88E} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2017-12-13] (Piriform Ltd)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


Shortcut: C:\Users\Siggi\Favorites\Downloadseite von NCH Software.lnk -> hxxp://www.nchsoftware.com/de/index.htm

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2017-09-29 14:41 - 2017-09-29 14:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-08-16 19:22 - 2016-11-14 12:15 - 000135224 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-08-03 04:49 - 2017-08-03 04:49 - 000562664 _____ () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2018-01-03 18:17 - 2018-01-03 18:17 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-01-18 08:38 - 2018-01-18 08:39 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2018-01-18 08:38 - 2018-01-18 08:39 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2013-11-30 19:54 - 2013-11-30 19:54 - 000067072 _____ () C:\Program Files (x86)\stunnel\bin\ZLIB1.dll
2016-05-03 18:26 - 2016-05-03 18:26 - 000024064 _____ () C:\Program Files (x86)\stunnel\engines\capi.dll
2016-12-02 18:27 - 2016-12-02 18:26 - 048920064 _____ () C:\Program Files (x86)\AVG\UiDll\2623\libcef.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Windows:nlsPreferences [0]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-10-30 08:24 - 2016-10-29 16:59 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2441953047-3725558795-4123501198-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\Services: AdobeActiveFileMonitor10.0 => 2
MSCONFIG\Services: AdobeActiveFileMonitor12.0 => 2
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: ehRecvr => 2
MSCONFIG\Services: ehSched => 2
MSCONFIG\Services: Fax => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: HauppaugeTVServer => 2
MSCONFIG\Services: MpsSvc => 2
MSCONFIG\Services: TeamViewer9 => 2
MSCONFIG\Services: WinDefend => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^ComproRemote.lnk => C:\Windows\pss\ComproRemote.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^ComproSchedulerDTV.lnk => C:\Windows\pss\ComproSchedulerDTV.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Server4PC.lnk => C:\Windows\pss\Server4PC.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Siggi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^EOS Utility.lnk => C:\Windows\pss\EOS Utility.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Siggi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^simplicheck.lnk => C:\Windows\pss\simplicheck.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Siggi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^WeatherLink 6.0.3.exe.lnk => C:\Windows\pss\WeatherLink 6.0.3.exe.lnk.Startup
MSCONFIG\startupreg: ACDSeeCommander19 => C:\Program Files (x86)\ACD Systems\ACDSee\19.0\ACDSeeCommander19.exe
MSCONFIG\startupreg: ACSW17DE => "G:\Program Files (x86)\ACDSee\17.0\acdIDInTouch2.exe"
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: CAHeadless => F:\Program Files (x86)\Adobe\Elements 12 Organizer\CAHeadless\ElementsAutoAnalyzer.exe
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: Corel File Shell Monitor => G:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
MSCONFIG\startupreg: Corel Photo Downloader => "C:\Program Files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup
MSCONFIG\startupreg: LWS => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: PMBVolumeWatcher => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe /SysAutoRun
MSCONFIG\startupreg: ProgLauncher => G:\Program Files\ProgDVB\ProgLauncher.exe
HKLM\...\StartupApproved\StartupFolder: => "HandyAndy.lnk"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run: => "ACPW07DE"
HKLM\...\StartupApproved\Run: => "AvgUi"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "SecurityHealth"
HKLM\...\StartupApproved\Run32: => "AdobeAAMUpdater-1.0"
HKU\S-1-5-21-2441953047-3725558795-4123501198-1001\...\StartupApproved\StartupFolder: => "Z Cinema.lnk"
HKU\S-1-5-21-2441953047-3725558795-4123501198-1001\...\StartupApproved\StartupFolder: => "Sidebar520.lnk"
HKU\S-1-5-21-2441953047-3725558795-4123501198-1001\...\StartupApproved\StartupFolder: => "OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk"
HKU\S-1-5-21-2441953047-3725558795-4123501198-1001\...\StartupApproved\StartupFolder: => "EOS Utility.lnk"
HKU\S-1-5-21-2441953047-3725558795-4123501198-1001\...\StartupApproved\StartupFolder: => "Sidebar265.lnk"
HKU\S-1-5-21-2441953047-3725558795-4123501198-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-2441953047-3725558795-4123501198-1001\...\StartupApproved\Run: => "ACDSeeCommander19"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{6E3AE108-4BFE-4BB0-8C1E-6A60F51F90C4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{9DB5A2AE-65BA-46EA-AAFE-2B36CA253250}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [{D936DF2B-A340-4E29-ABE4-D563920BCF9E}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [{5F46F12E-7B2C-4F88-8740-4A8B1F322EB7}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D095B45F-A4B3-476B-BD71-E770A181A304}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{6C1F8806-4413-4CFB-95CF-321B61886F9D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{AF7FA91A-3EEA-4E76-B455-EA00C9461FBE}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{1C1A2A28-E790-47EF-A06A-52454E83BE34}] => (Allow) C:\Program Files\Andy\SetupFiles\AndyDoctor.exe
FirewallRules: [{06CA905F-97C9-4C23-8437-034F1F94BDE6}] => (Allow) C:\Program Files\Andy\SetupFiles\AndyDoctor.exe
FirewallRules: [{618812C6-AF8B-467C-B9DB-B56E6CB3F195}] => (Allow) C:\Program Files\Andy\SetupFiles\VMwareCheck.exe
FirewallRules: [{6B65A281-5AB0-4E7F-B045-97DCBF8CC9C8}] => (Allow) C:\Program Files\Andy\SetupFiles\VMwareCheck.exe
FirewallRules: [{4A264FFE-0BD2-4B35-96FD-597E47752795}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe
FirewallRules: [{9F069A1B-EC19-47D0-BBF3-A37D46C7DB2E}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe
FirewallRules: [{42DE8113-714A-40D4-BE8A-42FC814A9076}] => (Allow) C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{6899F8F8-2276-4492-94C4-48CE8F0D4B05}] => (Allow) C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{858F7769-42D6-4D73-9CEC-683F8F0417D3}] => (Allow) C:\Program Files\Andy\AndyConsole.exe
FirewallRules: [{6A77E89C-4A75-4FF5-99D7-B758E3A1BB10}] => (Allow) C:\Program Files\Andy\AndyConsole.exe
FirewallRules: [{D4B56024-2682-4A87-A38C-794FD2D01283}] => (Allow) C:\Program Files\Andy\andy.exe
FirewallRules: [{3CCBDD72-700C-4B93-9FAF-2119F2C1400B}] => (Allow) C:\Program Files\Andy\andy.exe
FirewallRules: [{A25CBC86-965E-43CD-BFF1-857E2EDC6C11}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{C35471EF-00D1-4793-B648-0DF6CFFCEBFD}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{3A30E356-37D5-4FCD-B7E9-937897D579CB}] => (Allow) G:\Program Files (x86)\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{0D5D93A8-DC21-4642-8F2A-5131835A1419}] => (Allow) G:\Program Files (x86)\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{323568BB-4FC9-498D-A020-4EDD2D2E7BC0}] => (Allow) G:\Program Files (x86)\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{7F2C76AA-475E-4BE4-97E4-74EDEAA8E24B}] => (Allow) G:\Program Files (x86)\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{06E7D0CC-172C-48C8-94A7-472EC1C6AFEC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{34E2A8D4-9B0D-4C1A-B945-7E15AE933436}] => (Allow) G:\Program Files (x86)\Audials\Audials 10\Audials.exe
FirewallRules: [{EEE8F83A-2431-4D90-B303-2C86114D8FE5}] => (Allow) LPort=12972
FirewallRules: [{28C2F037-B922-487F-99C4-3182B8E32641}] => (Allow) LPort=14714
FirewallRules: [{00697237-A114-44B6-BBD0-FE6E2603E836}] => (Allow) LPort=31931
FirewallRules: [{C1C4D3F1-D8A3-442C-8DFE-0C85ABA4C129}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{988CE59E-9A1E-4E8B-BD06-5B8A6FB06DFF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{3243F948-64DE-4B1F-8FC5-DFD155D37CED}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{81F4CEE6-D3C5-402D-9315-7307B09AB7B0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0ED700D8-6ECE-4A06-9DA6-DD066C6BBA7D}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{320EA1FD-8BB0-48DC-A1E4-D74E6155A4E9}] => (Allow) LPort=2869
FirewallRules: [{731AE74B-DC32-47D9-B782-6E8E6EE210D8}] => (Allow) LPort=1900

==================== Wiederherstellungspunkte =========================

21-01-2018 17:41:56 ACDSee Pro 7 (64-bit) wurde entfernt.
21-01-2018 19:00:11 Windows-Sicherung

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/24/2018 09:20:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ShellExperienceHost.exe, Version: 10.0.16299.15, Zeitstempel: 0x59cda974
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.16299.64, Zeitstempel: 0x493793ea
Ausnahmecode: 0xc0000409
Fehleroffset: 0x0000000000090d5f
ID des fehlerhaften Prozesses: 0x1f04
Startzeit der fehlerhaften Anwendung: 0x01d39526e7527d72
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll
Berichtskennung: cf5e2caa-4f1c-4701-8183-319d6b38cb6e
Vollständiger Name des fehlerhaften Pakets: Microsoft.Windows.ShellExperienceHost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App

Error: (01/24/2018 09:20:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.16299.15, Zeitstempel: 0x7f22d77c
Name des fehlerhaften Moduls: dwmcore.dll, Version: 10.0.16299.125, Zeitstempel: 0x5eb910be
Ausnahmecode: 0xc00001ad
Fehleroffset: 0x000000000019503a
ID des fehlerhaften Prozesses: 0x348
Startzeit der fehlerhaften Anwendung: 0x01d39526beb1cea4
Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\dwmcore.dll
Berichtskennung: b4e354b4-240e-4743-a860-492131a52583
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (01/22/2018 05:13:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SoftwareUpdate.exe, Version: 2.1.1.116, Zeitstempel: 0x488a4f1f
Name des fehlerhaften Moduls: ScriptingObjectModel.dll, Version: 2.1.1.116, Zeitstempel: 0x488a4efe
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00002f91
ID des fehlerhaften Prozesses: 0x1154
Startzeit der fehlerhaften Anwendung: 0x01d3939be0b75c7c
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Apple Software Update\ScriptingObjectModel.dll
Berichtskennung: dd3cc219-aae1-4fcd-92c3-92825f4ad569
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (01/18/2018 08:30:06 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm ShellExperienceHost.exe, Version 10.0.16299.15 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1cd0

Startzeit: 01d3902dc1591e72

Beendigungszeit: 4294967295

Anwendungspfad: C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe

Berichts-ID: 26052494-e452-4315-8b2a-dc59fa76bd95

Vollständiger Name des fehlerhaften Pakets: Microsoft.Windows.ShellExperienceHost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy

Auf das fehlerhafte Paket bezogene Anwendungs-ID: App

Error: (01/18/2018 08:30:01 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: Siggi-PC)
Description: Das Paket „Microsoft.Windows.ShellExperienceHost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy+App“ wurde beendet, da das Anhalten zu lange dauerte.

Error: (01/18/2018 08:28:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_WpnUserService, Version: 10.0.16299.15, Zeitstempel: 0x9c786b9a
Name des fehlerhaften Moduls: NotificationController.dll, Version: 10.0.16299.15, Zeitstempel: 0x24cfcd08
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000017f90
ID des fehlerhaften Prozesses: 0xc50
Startzeit der fehlerhaften Anwendung: 0x01d3902db4e58965
Pfad der fehlerhaften Anwendung: c:\windows\system32\svchost.exe
Pfad des fehlerhaften Moduls: C:\Windows\System32\NotificationController.dll
Berichtskennung: e052ad57-a418-45c8-b2b9-0039b84a8f95
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (01/17/2018 06:08:28 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 10) (User: Siggi-PC)
Description: microsoft.windows.authhost.a_8wekyb3d8bbwe-2147024893

Error: (01/17/2018 06:08:28 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 10) (User: Siggi-PC)
Description: Microsoft.VCLibs.120.00_8wekyb3d8bbwe-2147024893

Error: (01/17/2018 06:08:28 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 10) (User: Siggi-PC)
Description: Microsoft.VCLibs.120.00.Universal_8wekyb3d8bbwe-2147024893

Error: (01/17/2018 06:08:28 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 10) (User: Siggi-PC)
Description: Microsoft.Services.Store.Engagement_8wekyb3d8bbwe-2147024893


Systemfehler:
=============
Error: (01/25/2018 01:12:20 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: Der Computer wurde nach einem schwerwiegenden Fehler neu gestartet. Der Fehlercode war: 0x000000c8 (0x0000000000020000, 0x0000000000000000, 0x0000000000000000, 0x0000000000000000). Ein volles Abbild wurde gespeichert in: C:\WINDOWS\MEMORY.DMP. Berichts-ID: ad079b4d-af1d-4ef8-9e39-e8b52d61a493.

Error: (01/25/2018 12:58:50 PM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als
Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser
Konfiguration nicht gestartet zu sein.

Error: (01/25/2018 12:58:39 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "CscService" wurde mit folgendem Fehler beendet:
Das System kann den angegebenen Pfad nicht finden.

Error: (01/25/2018 12:58:39 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎25.‎01.‎2018 um 09:53:19 unerwartet heruntergefahren.

Error: (01/25/2018 12:57:56 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT-AUTORITÄT)
Description: 3221225473Bei der Verarbeitung der Wiederherstellungsdaten ist ein schwerwiegender Fehler aufgetreten.

Error: (01/25/2018 10:13:59 AM) (Source: DCOM) (EventID: 10016) (User: Siggi-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "Siggi-PC\Siggi" (SID: S-1-5-21-2441953047-3725558795-4123501198-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{9E175B6D-F52A-11D8-B9A5-505054503030}
 und der APPID
{9E175B9C-F52A-11D8-B9A5-505054503030}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/25/2018 10:13:59 AM) (Source: DCOM) (EventID: 10016) (User: Siggi-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "Siggi-PC\Siggi" (SID: S-1-5-21-2441953047-3725558795-4123501198-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{9E175B6D-F52A-11D8-B9A5-505054503030}
 und der APPID
{9E175B9C-F52A-11D8-B9A5-505054503030}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/25/2018 10:13:59 AM) (Source: DCOM) (EventID: 10016) (User: Siggi-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "Siggi-PC\Siggi" (SID: S-1-5-21-2441953047-3725558795-4123501198-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{9E175B6D-F52A-11D8-B9A5-505054503030}
 und der APPID
{9E175B9C-F52A-11D8-B9A5-505054503030}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/25/2018 08:06:24 AM) (Source: BugCheck) (EventID: 1001) (User: )
Description: Der Computer wurde nach einem schwerwiegenden Fehler neu gestartet. Der Fehlercode war: 0x000000c8 (0x0000000000020000, 0x0000000000000000, 0x0000000000000000, 0x0000000000000000). Ein volles Abbild wurde gespeichert in: C:\WINDOWS\MEMORY.DMP. Berichts-ID: c052e924-42d2-405c-8983-b861586cc2a1.

Error: (01/25/2018 07:53:18 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "CscService" wurde mit folgendem Fehler beendet:
Das System kann den angegebenen Pfad nicht finden.


CodeIntegrity:
===================================
  Date: 2018-01-25 15:34:28.812
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

  Date: 2018-01-25 15:34:28.810
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

  Date: 2018-01-25 15:19:26.941
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

  Date: 2018-01-25 15:19:26.939
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

  Date: 2018-01-25 15:19:26.790
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

  Date: 2018-01-25 15:19:26.788
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

  Date: 2018-01-25 15:04:25.058
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

  Date: 2018-01-25 15:04:25.056
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

  Date: 2018-01-25 15:04:25.016
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

  Date: 2018-01-25 15:04:25.014
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.


==================== Speicherinformationen ===========================

Prozessor: AMD Athlon(tm) 64 X2 Dual Core Processor 5200+
Prozentuale Nutzung des RAM: 75%
Installierter physikalischer RAM: 4095.3 MB
Verfügbarer physikalischer RAM: 1012.58 MB
Summe virtueller Speicher: 8191.3 MB
Verfügbarer virtueller Speicher: 3342.41 MB

==================== Laufwerke ================================

Drive c: (OS) (Fixed) (Total:930.56 GB) (Free:795.95 GB) NTFS
Drive e: (123456789) (Fixed) (Total:465.76 GB) (Free:407.54 GB) NTFS
Drive g: (DATA) (Fixed) (Total:298.02 GB) (Free:32.54 GB) FAT32

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 0BE5E7CA)
Partition 1: (Active) - (Size=102 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=930.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=868 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 298.1 GB) (Disk ID: 2AA4DA24)
Partition 1: (Not Active) - (Size=298.1 GB) - (Type=0C)

========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 34D36C1B)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
--- --- ---

sonsm55 25.01.2018 16:07
Liste der Anhänge anzeigen (Anzahl: 2)
das ist die Meldung:

Anhang 81391

Anhang 81392

cosinus 25.01.2018 16:46
Das sieht stark nach Hardware- oder Treiberfehler aus, ich verschiebe daher mal ins Hardwareforum. Da können nämlich auch andere antworten. Im Malwarebereich dürfen nur Helfer aus dem Malwareteam antworten.

sonsm55 25.01.2018 17:39
Danke cosinus

sagt frst oder add was dazu?

CptMw 02.02.2018 22:42
Was sagt denn BlueScreenView? Treibername?

sonsm55 03.02.2018 15:23
Code:
020318-33406-01.dmp        03.02.2018 13:33:23        IRQL_UNEXPECTED_VALUE        0x000000c8        00000000`00020000        00000000`00000000        00000000`00000000        00000000`00000000        ntoskrnl.exe        ntoskrnl.exe+1640e0        NT Kernel & System        Microsoft® Windows® Operating System        Microsoft Corporation        10.0.16299.125 (WinBuild.160101.0800)        x64        ntoskrnl.exe+1640e0                                        C:\WINDOWS\Minidump\020318-33406-01.dmp        2        15        16299        508.100        03.02.2018 13:43:38
Code:
ntoskrnl.exe        ntoskrnl.exe+607d6e        fffff803`c8899000        fffff803`c916b000        0x008d2000        0x5a29b8d4        07.12.2017 22:55:32        Microsoft® Windows® Operating System        NT Kernel & System        10.0.16299.125 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\ntoskrnl.exe       
hal.dll                fffff803`c881a000        fffff803`c8899000        0x0007f000        0x1cc8178b                Microsoft® Windows® Operating System        Hardware Abstraction Layer DLL        10.0.16299.98 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\hal.dll       
kd.dll                fffff803`c9200000        fffff803`c920b000        0x0000b000        0xfa8983cb        14.03.2103 12:49:31        Microsoft® Windows® Operating System        Local Kernel Debugger        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\kd.dll       
mcupdate_AuthenticAMD.dll                fffff80c`3edb0000        fffff80c`3edd0000        0x00020000        0x4c25078c        25.06.2010 20:46:20        Microsoft® Windows® Operating System        AMD Microcode Update Library        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\mcupdate_AuthenticAMD.dll       
msrpc.sys                fffff80c`3e000000        fffff80c`3e061000        0x00061000        0x687ce037        20.07.2025 13:25:27        Microsoft® Windows® Operating System        Kernel Remote Procedure Call Provider        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\msrpc.sys       
ksecdd.sys                fffff80c`3e070000        fffff80c`3e099000        0x00029000        0x9a56383f        20.01.2052 06:35:59        Microsoft® Windows® Operating System        Kernel Security Support Provider Interface        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\ksecdd.sys       
werkernel.sys                fffff80c`3e0a0000        fffff80c`3e0b1000        0x00011000        0x623ce798        24.03.2022 22:50:16        Microsoft® Windows® Operating System        Windows Error Reporting Kernel Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\werkernel.sys       
CLFS.SYS                fffff80c`3e0c0000        fffff80c`3e122000        0x00062000        0xc1a5a298        13.12.2072 13:29:12        Microsoft® Windows® Operating System        Common Log File System Driver        10.0.16299.98 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\CLFS.SYS       
tm.sys                fffff80c`3e130000        fffff80c`3e154000        0x00024000        0x50fbcec0        20.01.2013 12:02:24        Microsoft® Windows® Operating System        Kernel Transaction Manager Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\tm.sys       
PSHED.dll                fffff80c`3e160000        fffff80c`3e177000        0x00017000        0xfe1a7c40        04.02.2105 00:56:48        Betriebssystem Microsoft® Windows®        Plattformspezifischer Hardwarefehlertreiber        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\PSHED.dll       
BOOTVID.dll                fffff80c`3e180000        fffff80c`3e18b000        0x0000b000        0x2fb571ea        14.05.1995 03:58:50        Microsoft® Windows® Operating System        VGA Boot Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\BOOTVID.dll       
FLTMGR.SYS                fffff80c`3e190000        fffff80c`3e1f8000        0x00068000        0xab613013        10.02.2061 16:00:35        Betriebssystem Microsoft® Windows®        Microsoft Dateisystem-Filter-Manager        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\FLTMGR.SYS       
clipsp.sys                fffff80c`3e200000        fffff80c`3e301000        0x00101000        0x59cda999        29.09.2017 03:02:01        Microsoft® Windows® Operating System        CLIP Service        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\clipsp.sys       
cmimcext.sys                fffff80c`3e310000        fffff80c`3e31e000        0x0000e000        0xd4eadf74        13.03.2083 12:20:20        Betriebssystem Microsoft® Windows®        Kernelkonfigurations-Manager: Hostexporttreiber der Erstkonfigurationserweiterung        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\cmimcext.sys       
ntosext.sys                fffff80c`3e320000        fffff80c`3e32c000        0x0000c000        0x1b6da4c4                Microsoft® Windows® Operating System        NTOS extension host driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\ntosext.sys       
CI.dll                fffff80c`3e330000        fffff80c`3e3e2000        0x000b2000        0x79adc1ec        09.09.2034 17:01:48        Microsoft® Windows® Operating System        Code Integrity Module        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\CI.dll       
cng.sys                fffff80c`3e3f0000        fffff80c`3e49a000        0x000aa000        0x76db7d7d        10.03.2033 20:33:17        Microsoft® Windows® Operating System        Kernel Cryptography, Next Generation        10.0.16299.125 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\cng.sys       
Wdf01000.sys                fffff80c`3e4a0000        fffff80c`3e583000        0x000e3000        0xb77a3803        18.07.2067 19:44:19        Betriebssystem Microsoft® Windows®        Kernelmodustreiber-Frameworklaufzeit        1.23.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\Wdf01000.sys       
WDFLDR.SYS                fffff80c`3e590000        fffff80c`3e5a3000        0x00013000        0xb5732650        20.06.2066 02:22:24        Microsoft® Windows® Operating System        Kernel Mode Driver Framework Loader        1.23.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\WDFLDR.SYS       
WppRecorder.sys                fffff80c`3e5b0000        fffff80c`3e5be000        0x0000e000        0xa67a2b71        04.07.2058 17:06:09        Microsoft® Windows® Operating System        WPP Trace Recorder        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\WppRecorder.sys       
SleepStudyHelper.sys                fffff80c`3e5c0000        fffff80c`3e5cf000        0x0000f000        0xa0e1b647        14.07.2055 04:00:23        Microsoft® Windows® Operating System        Sleep Study Helper        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\SleepStudyHelper.sys       
acpiex.sys                fffff80c`3e5d0000        fffff80c`3e5f3000        0x00023000        0x8f81b543        18.04.2046 06:33:55        Microsoft® Windows® Operating System        ACPIEx Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\acpiex.sys       
mssecflt.sys                fffff80c`3e600000        fffff80c`3e64b000        0x0004b000        0x7a9d6cae        10.03.2035 12:02:06        Betriebssystem Microsoft® Windows®        Dateisystem-Filtertreiber für Microsoft-SEC (Security Events Component)        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\mssecflt.sys       
ACPI.sys                fffff80c`3e650000        fffff80c`3e709000        0x000b9000        0xf288db9e        10.12.2098 14:09:50        Betriebssystem Microsoft® Windows®        ACPI-Treiber für NT        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\ACPI.sys       
WMILIB.SYS                fffff80c`3e710000        fffff80c`3e71c000        0x0000c000        0xfd702a37        27.09.2104 20:21:27        Microsoft® Windows® Operating System        WMILIB WMI support library Dll        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\WMILIB.SYS       
intelpep.sys                fffff80c`3e760000        fffff80c`3e785000        0x00025000        0xeb730b5b        05.03.2095 18:41:47        Microsoft® Windows® Operating System        Intel Power Engine Plugin        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\intelpep.sys       
WindowsTrustedRT.sys                fffff80c`3e790000        fffff80c`3e7a6000        0x00016000        0x61748520        23.10.2021 22:56:48        Microsoft® Windows® Operating System        Windows Trusted Runtime Interface Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\WindowsTrustedRT.sys       
WindowsTrustedRTProxy.sys                fffff80c`3e7b0000        fffff80c`3e7bb000        0x0000b000        0xc6109ce2        20.04.2075 10:18:26        Microsoft® Windows® Operating System        Windows Trusted Runtime Service Proxy Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\WindowsTrustedRTProxy.sys       
pcw.sys                fffff80c`3e7c0000        fffff80c`3e7d4000        0x00014000        0xb45241a0        12.11.2065 23:13:52        Microsoft® Windows® Operating System        Performance Counters for Windows Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\pcw.sys       
msisadrv.sys                fffff80c`3e7e0000        fffff80c`3e7eb000        0x0000b000        0x2b3273bc        19.12.1992 01:58:36        Microsoft® Windows® Operating System        ISA Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\msisadrv.sys       
pci.sys                fffff80c`3e7f0000        fffff80c`3e84d000        0x0005d000        0x86b90661        16.08.2041 14:32:17        Betriebssystem Microsoft® Windows®        NT-Plug & Play PCI-Enumerator        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\pci.sys       
vdrvroot.sys                fffff80c`3e850000        fffff80c`3e862000        0x00012000        0x53abaac2        26.06.2014 06:08:18        Microsoft® Windows® Operating System        Virtual Drive Root Enumerator        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\vdrvroot.sys       
pdc.sys                fffff80c`3e870000        fffff80c`3e895000        0x00025000        0x4003a619        13.01.2004 09:02:33        Microsoft® Windows® Operating System        Power Dependency Coordinator Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\pdc.sys       
CEA.sys                fffff80c`3e8a0000        fffff80c`3e8b9000        0x00019000        0xce9b9dfb        04.11.2079 07:30:19        Microsoft® Windows® Operating System        Event Aggregation Kernel Mode Library        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\CEA.sys       
partmgr.sys                fffff80c`3e8c0000        fffff80c`3e8ed000        0x0002d000        0xc5ade492        04.02.2075 13:09:54        Microsoft® Windows® Operating System        Partition driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\partmgr.sys       
spaceport.sys                fffff80c`3e8f0000        fffff80c`3e980000        0x00090000        0xdb7e5308        10.09.2086 10:38:16        Microsoft® Windows® Operating System        Storage Spaces Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\spaceport.sys       
volmgr.sys                fffff80c`3e980000        fffff80c`3e999000        0x00019000        0x18e2bfcf                Betriebssystem Microsoft® Windows®        Treiber für Volume-Manager        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\volmgr.sys       
volmgrx.sys                fffff80c`3e9a0000        fffff80c`3e9fe000        0x0005e000        0x00000000                Betriebssystem Microsoft® Windows®        Treiber für Erweiterung des Volume-Managers        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\volmgrx.sys       
pciide.sys                fffff80c`3ea00000        fffff80c`3ea0a000        0x0000a000        0xacaa8e1f        18.10.2061 11:57:35        Microsoft® Windows® Operating System        Generic PCI IDE Bus Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\pciide.sys       
PCIIDEX.SYS                fffff80c`3ea10000        fffff80c`3ea21000        0x00011000        0x96c701f1        28.02.2050 02:29:21        Microsoft® Windows® Operating System        PCI IDE Bus Driver Extension        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\PCIIDEX.SYS       
vmci.sys                fffff80c`3ea30000        fffff80c`3ea4a000        0x0001a000        0x57528c60        04.06.2016 09:08:00        VMware PCI VMCI Bus Device        VMware PCI VMCI Bus Device        9.8.6.0        VMware, Inc.        C:\WINDOWS\system32\drivers\vmci.sys       
vsock.sys                fffff80c`3ea50000        fffff80c`3ea67000        0x00017000        0x576a47aa        22.06.2016 09:09:14        VMware vSockets Service        VMware vSockets Service        9.8.8.0        VMware, Inc.        C:\WINDOWS\system32\drivers\vsock.sys       
mountmgr.sys                fffff80c`3ea70000        fffff80c`3ea8e000        0x0001e000        0xada090fe        23.04.2062 02:27:26        Betriebssystem Microsoft® Windows®        Bereitstellungspunkt-Manager        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\mountmgr.sys       
atapi.sys                fffff80c`3ea90000        fffff80c`3ea9c000        0x0000c000        0xd59b80e1        25.07.2083 11:48:01        Microsoft® Windows® Operating System        ATAPI IDE Miniport Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\atapi.sys       
ataport.SYS                fffff80c`3eaa0000        fffff80c`3ead5000        0x00035000        0xd9fabbdd        20.11.2085 10:46:05        Microsoft® Windows® Operating System        ATAPI Driver Extension        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\ataport.SYS       
fileinfo.sys                fffff80c`3eb00000        fffff80c`3eb1a000        0x0001a000        0x19c04773                Microsoft® Windows® Operating System        FileInfo Filter Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\fileinfo.sys       
Wof.sys                fffff80c`3eb20000        fffff80c`3eb5b000        0x0003b000        0xf9d43cdf        28.10.2102 00:46:39        Betriebssystem Microsoft® Windows®        Windows-Überlappungsfilter        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\Wof.sys       
PxHlpa64.sys                fffff80c`3ebb0000        fffff80c`3ebbc1a0        0x0000c1a0        0x4f96e245        24.04.2012 18:26:29        PxHlpa64        Px Engine Device Driver for 64-bit (x86-64) Windows        3.01.01.0        Corel Corporation        C:\WINDOWS\system32\drivers\PxHlpa64.sys       
NTFS.sys                fffff80c`3f170000        fffff80c`3f3c4000        0x00254000        0x6f37d8b5        16.02.2029 11:08:53        Betriebssystem Microsoft® Windows®        NT-Dateisystemtreiber        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\NTFS.sys       
Fs_Rec.sys                fffff80c`3f3d0000        fffff80c`3f3dd000        0x0000d000        0x00000000                Microsoft® Windows® Operating System        File System Recognizer Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\Fs_Rec.sys       
ndis.sys                fffff80c`3ee00000        fffff80c`3ef3f000        0x0013f000        0xefa190c8        25.05.2097 18:56:24        Betriebssystem Microsoft® Windows®        NDIS (Network Driver Interface Specification)        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\ndis.sys       
NETIO.SYS                fffff80c`3ef40000        fffff80c`3efc8000        0x00088000        0x302c3e5d        12.08.1995 06:38:37        Microsoft® Windows® Operating System        Network I/O Subsystem        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\NETIO.SYS       
ksecpkg.sys                fffff80c`3efd0000        fffff80c`3f000000        0x00030000        0xa2d0764a        23.07.2056 10:39:22        Microsoft® Windows® Operating System        Kernel Security Support Provider Interface Packages        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\ksecpkg.sys       
tcpip.sys                fffff80c`40220000        fffff80c`404d2000        0x002b2000        0xc818c3b3        18.05.2076 23:22:43        Betriebssystem Microsoft® Windows®        TCP/IP-Treiber        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\tcpip.sys       
fwpkclnt.sys                fffff80c`404e0000        fffff80c`40551000        0x00071000        0xcaec7f62        18.11.2077 22:32:18        Microsoft® Windows® Operating System        FWP/IPsec Kernel-Mode API        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\fwpkclnt.sys       
wfplwfs.sys                fffff80c`40560000        fffff80c`4058c000        0x0002c000        0xe5844f93        08.01.2092 18:59:47        Microsoft® Windows® Operating System        WFP NDIS 6.30 Lightweight Filter Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\wfplwfs.sys       
fvevol.sys                fffff80c`3f400000        fffff80c`3f4b8000        0x000b8000        0x2493bbe7        12.06.1989 14:34:31        Microsoft® Windows® Operating System        BitLocker Drive Encryption Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\fvevol.sys       
volume.sys                fffff80c`3f4c0000        fffff80c`3f4cb000        0x0000b000        0x1c3359ec                Microsoft® Windows® Operating System        Volume driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\volume.sys       
volsnap.sys                fffff80c`3f4d0000        fffff80c`3f536000        0x00066000        0xeff7c5b6        30.07.2097 04:17:10        Betriebssystem Microsoft® Windows®        Volumeschattenkopie-Treiber        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\volsnap.sys       
rdyboost.sys                fffff80c`3f540000        fffff80c`3f58c000        0x0004c000        0x32e813ee        24.01.1997 02:44:14        Microsoft® Windows® Operating System        ReadyBoost Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\rdyboost.sys       
mup.sys                fffff80c`3f590000        fffff80c`3f5b4000        0x00024000        0x454d52cc        05.11.2006 03:56:12        Betriebssystem Microsoft® Windows®        Treiber für mehrere UNC-Anbieter        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\mup.sys       
iorate.sys                fffff80c`3f5c0000        fffff80c`3f5d1000        0x00011000        0x6f697c3c        26.03.2029 02:47:40        Betriebssystem Microsoft® Windows®        Filter zur Steuerung der E/A-Rate        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\iorate.sys       
GDBehave.sys                fffff80c`3f5f0000        fffff80c`3f621000        0x00031000        0x5a1b477d        27.11.2017 00:00:13        G Data Security Software        Behavior Blocker        1.0.17330.1439        G Data Software AG        C:\WINDOWS\system32\drivers\GDBehave.sys       
disk.sys                fffff80c`3f630000        fffff80c`3f64c000        0x0001c000        0x490a737c        31.10.2008 03:54:52        Microsoft® Windows® Operating System        PnP Disk Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\disk.sys       
CLASSPNP.SYS                fffff80c`3f650000        fffff80c`3f6b8000        0x00068000        0xbf85bfae        28.10.2071 00:20:14        Microsoft® Windows® Operating System        SCSI Class System Dll        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\CLASSPNP.SYS       
crashdmp.sys                fffff80c`3f6e0000        fffff80c`3f6fb000        0x0001b000        0x8dc80a7c        18.05.2045 06:15:40        Microsoft® Windows® Operating System        Crash Dump Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\crashdmp.sys       
cdrom.sys                fffff80c`3f780000        fffff80c`3f7ae000        0x0002e000        0x1424f070                Microsoft® Windows® Operating System        SCSI CD-ROM Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\cdrom.sys       
filecrypt.sys                fffff80c`3f7b0000        fffff80c`3f7c4000        0x00014000        0x518a49bf        08.05.2013 13:49:03        Microsoft® Windows® Operating System        Windows sandboxing and encryption filter        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\filecrypt.sys       
tbs.sys                fffff80c`3f7d0000        fffff80c`3f7dd000        0x0000d000        0x237a7c1d        11.11.1988 06:35:25        Microsoft® Windows® Operating System        Export driver for kernel mode TPM API        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\tbs.sys       
HookCentre.sys                fffff80c`3f7e0000        fffff80c`3f80a000        0x0002a000        0x5a1b4864        27.11.2017 00:04:04                Security Hook        3.1.17331.4        G Data Software AG        C:\WINDOWS\system32\drivers\HookCentre.sys       
MiniIcpt.sys                fffff80c`3f810000        fffff80c`3f860000        0x00050000        0x5a1b47ac        27.11.2017 00:01:00        G Data AntiVirus        Filesystem MiniInterceptor (Mini Filter)        1.0.17331.1        G Data Software AG        C:\WINDOWS\system32\drivers\MiniIcpt.sys       
Null.SYS                fffff80c`3f860000        fffff80c`3f86a000        0x0000a000        0x00000000                Microsoft® Windows® Operating System        NULL Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\Null.SYS       
Beep.SYS                fffff80c`3f870000        fffff80c`3f87a000        0x0000a000        0x85f9535b        24.03.2041 04:45:31        Microsoft® Windows® Operating System        BEEP Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\Beep.SYS       
vmkbd.sys                fffff80c`3f880000        fffff80c`3f88c000        0x0000c000        0x57b54cbf        18.08.2016 06:50:55        VMware VMware Input Filter and Injection Driver (64-bit)        VMware VMware Input Filter and Injection Driver (64-bit)        1.6.2.0        VMware, Inc.        C:\WINDOWS\system32\drivers\vmkbd.sys       
BasicDisplay.sys                fffff80c`3f890000        fffff80c`3f8a5000        0x00015000        0xd192c744        02.06.2081 03:36:52        Microsoft® Windows® Operating System        Microsoft Basic Display Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\BasicDisplay.sys       
watchdog.sys                fffff80c`3f8b0000        fffff80c`3f8c4000        0x00014000        0xee73d2b8        08.10.2096 21:53:12        Microsoft® Windows® Operating System        Watchdog Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\watchdog.sys       
dxgkrnl.sys                fffff80c`3f8d0000        fffff80c`3fb49000        0x00279000        0xf184cb5b        27.05.2098 07:51:07        Microsoft® Windows® Operating System        DirectX Graphics Kernel        10.0.16299.98 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\dxgkrnl.sys       
vmbkmclr.sys                fffff80c`3fb50000        fffff80c`3fb6a000        0x0001a000        0x3fdefdb5        16.12.2003 13:42:29        Microsoft® Windows® Operating System        Hyper-V VMBus Root KMCL        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\vmbkmclr.sys       
BasicRender.sys                fffff80c`3fb70000        fffff80c`3fb80000        0x00010000        0x6e438d32        15.08.2028 03:53:38        Microsoft® Windows® Operating System        Microsoft Basic Render Driver        10.0.16299.19 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\BasicRender.sys       
Npfs.SYS                fffff80c`3fb80000        fffff80c`3fb9b000        0x0001b000        0x1a9900ef                Microsoft® Windows® Operating System        NPFS Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\Npfs.SYS       
Msfs.SYS                fffff80c`3fba0000        fffff80c`3fbb0000        0x00010000        0x00000000                Microsoft® Windows® Operating System        Mailslot driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\Msfs.SYS       
tdx.sys                fffff80c`3fbb0000        fffff80c`3fbd3000        0x00023000        0x0cbc8cf3                Microsoft® Windows® Operating System        TDI Translation Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\tdx.sys       
TDI.SYS                fffff80c`3fbe0000        fffff80c`3fbf0000        0x00010000        0x1bbdca2c                Microsoft® Windows® Operating System        TDI Wrapper        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\TDI.SYS       
netbt.sys                fffff80c`3fbf0000        fffff80c`3fc46000        0x00056000        0x39fa0bbd        28.10.2000 00:11:57        Microsoft® Windows® Operating System        MBT Transport driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\netbt.sys       
afd.sys                fffff80c`3fc50000        fffff80c`3fceb000        0x0009b000        0xae5da66c        13.09.2062 12:37:16        Betriebssystem Microsoft® Windows®        Treiber für zusätzliche WinSock-Funktionen        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\afd.sys       
RrNetCapFilterDriver.sys                fffff80c`3fcf0000        fffff80c`3fcf9000        0x00009000        0x5526870a        09.04.2015 15:04:58        RadioRip        Filter Driver        4,0,9600,0        Audials AG        C:\WINDOWS\system32\drivers\RrNetCapFilterDriver.sys       
vwififlt.sys                fffff80c`3fd00000        fffff80c`3fd1a000        0x0001a000        0xf55574e7        07.06.2100 03:26:47        Microsoft® Windows® Operating System        Virtual WiFi Filter Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\vwififlt.sys       
pacer.sys                fffff80c`3fd20000        fffff80c`3fd49000        0x00029000        0x50537457        14.09.2012 19:15:51        Betriebssystem Microsoft® Windows®        QoS-Paketplaner        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\pacer.sys       
netbios.sys                fffff80c`3fd50000        fffff80c`3fd62000        0x00012000        0x1af61494                Microsoft® Windows® Operating System        NetBIOS interface driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\netbios.sys       
rdbss.sys                fffff80c`3fd70000        fffff80c`3fde4000        0x00074000        0xb6a5c059        07.02.2067 15:53:13        Betriebssystem Microsoft® Windows®        Subsystemtreiber für Pufferung des umgeleiteten Laufwerks        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\rdbss.sys       
nsiproxy.sys                fffff80c`3fdf0000        fffff80c`3fe02000        0x00012000        0x955a981e        27.05.2049 16:32:46        Microsoft® Windows® Operating System        NSI Proxy        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\nsiproxy.sys       
npsvctrig.sys                fffff80c`3fe10000        fffff80c`3fe1d000        0x0000d000        0xbcbd5b64        05.05.2070 15:38:28        Microsoft® Windows® Operating System        Named pipe service triggers        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\npsvctrig.sys       
mssmbios.sys                fffff80c`3fe20000        fffff80c`3fe2f000        0x0000f000        0x34839a22        02.12.1997 06:18:26        Microsoft® Windows® Operating System        System Management BIOS Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\mssmbios.sys       
gpuenergydrv.sys                fffff80c`3fe30000        fffff80c`3fe3a000        0x0000a000        0x4e8d39d4        06.10.2011 06:17:08        Microsoft® Windows® Operating System        GPU Energy Kernel Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\gpuenergydrv.sys       
gdwfpcd64.sys                fffff80c`3fe40000        fffff80c`3fe55000        0x00015000        0x5835119a        23.11.2016 04:48:42        G DATA Security Software        G DATA WFP Callout Driver (6.3)        3.8.16327.288        G DATA Software AG        C:\WINDOWS\system32\drivers\gdwfpcd64.sys       
dfsc.sys                fffff80c`3fe60000        fffff80c`3fe8a000        0x0002a000        0x94c5d3e2        03.02.2049 20:20:02        Microsoft® Windows® Operating System        DFS Namespace Client Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\dfsc.sys       
cbfs5.sys                fffff80c`3feb0000        fffff80c`3ff1a000        0x0006a000        0x52e184bc        23.01.2014 22:08:12        Callback File System (TM)        Callback File System Driver        5, 0, 145, 37        EldoS Corporation        C:\WINDOWS\system32\drivers\cbfs5.sys       
bam.sys                fffff80c`3ff20000        fffff80c`3ff34000        0x00014000        0x784801b4        12.12.2033 08:22:28        Microsoft® Windows® Operating System        BAM Kernel Driver        10.0.16299.125 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\bam.sys       
ahcache.sys                fffff80c`3ff40000        fffff80c`3ff82000        0x00042000        0xd84c012d        28.12.2084 17:34:53        Microsoft® Windows® Operating System        Application Compatibility Cache        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\ahcache.sys       
kltap.sys                fffff80c`3ff90000        fffff80c`3ff9c000        0x0000c000        0x573a35dc        16.05.2016 22:04:28        TAP-Windows Virtual Network Driver (NDIS 6.0)        TAP-Windows Virtual Network Driver (NDIS 6.0)        9.21.1 9/21 built by: WinDDK        The OpenVPN Project        C:\WINDOWS\system32\drivers\kltap.sys       
vmnetadapter.sys                fffff80c`3ffa0000        fffff80c`3ffab000        0x0000b000        0x5790cecf        21.07.2016 14:31:59        VMware virtual network adapter driver (64-bit)        VMware virtual network adapter driver (64-bit)        4.2.7.0        VMware, Inc.        C:\WINDOWS\system32\drivers\vmnetadapter.sys       
VMNET.SYS                fffff80c`3ffb0000        fffff80c`3ffbc000        0x0000c000        0x5790cec9        21.07.2016 14:31:53        VMware virtual network driver (64-bit)        VMware virtual network driver (64-bit)        4.2.7.0        VMware, Inc.        C:\WINDOWS\system32\drivers\VMNET.SYS       
CompositeBus.sys                fffff80c`3ffc0000        fffff80c`3ffd1000        0x00011000        0x3d0fa01a        18.06.2002 22:03:22                                               
kdnic.sys                fffff80c`3ffe0000        fffff80c`3ffed000        0x0000d000        0xe91c9c29        06.12.2093 20:31:53        Microsoft Kernel Debugger Network Adapter (NDIS 6.20 Miniport)        Microsoft Kernel Debugger Network Miniport        6.01.00.0000 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\kdnic.sys       
umbus.sys                fffff80c`3fff0000        fffff80c`40005000        0x00015000        0x6e2974cf        26.07.2028 08:50:39        Microsoft® Windows® Operating System        User-Mode Bus Enumerator        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\umbus.sys       
amdk8.sys                fffff80c`40010000        fffff80c`40048000        0x00038000        0x416dd847        14.10.2004 02:37:11        Microsoft® Windows® Operating System        Processor Device Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\amdk8.sys       
nvlddmkm.sys                fffff80c`42280000        fffff80c`42f1d000        0x00c9d000        0x5829870b        14.11.2016 10:42:35        NVIDIA Windows Kernel Mode Driver, Version 342.01        NVIDIA Windows Kernel Mode Driver, Version 342.01        21.21.13.4201        NVIDIA Corporation        C:\WINDOWS\system32\drivers\nvlddmkm.sys       
rt640x64.sys                fffff80c`42f20000        fffff80c`42fb8000        0x00098000        0x57f50107        05.10.2016 14:32:55        Realtek 8136/8168/8169 PCI/PCIe Adapters        Realtek 8136/8168/8169 NDIS 6.40 64-bit Driver        9.001.0406.2015        Realtek        C:\WINDOWS\system32\drivers\rt640x64.sys       
usbohci.sys                fffff80c`42fc0000        fffff80c`42fcf000        0x0000f000        0x0e2988fb                Microsoft® Windows® Operating System        OHCI USB Miniport Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\usbohci.sys       
USBPORT.SYS                fffff80c`41600000        fffff80c`41674000        0x00074000        0xcee28d3d        28.12.2079 02:49:49        Betriebssystem Microsoft® Windows®        USB 1.1 & 2.0-Porttreiber        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\USBPORT.SYS       
usbehci.sys                fffff80c`41680000        fffff80c`4169b000        0x0001b000        0x69c38152        25.03.2026 07:31:46        Microsoft® Windows® Operating System        EHCI eUSB Miniport Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\usbehci.sys       
HDAudBus.sys                fffff80c`416a0000        fffff80c`416bd000        0x0001d000        0x186192d8                Microsoft® Windows® Operating System        High Definition Audio Bus Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\HDAudBus.sys       
portcls.sys                fffff80c`416c0000        fffff80c`41723000        0x00063000        0xa7aad0f5        20.02.2059 19:01:25        Microsoft® Windows® Operating System        Port Class (Class Driver for Port/Miniport Devices)        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\portcls.sys       
drmk.sys                fffff80c`41730000        fffff80c`41751000        0x00021000        0x53353e64        28.03.2014 10:18:28        Microsoft® Windows® Operating System        Microsoft Trusted Audio Drivers        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\drmk.sys       
ks.sys                fffff80c`41760000        fffff80c`417c8000        0x00068000        0x59ab3385        02.09.2017 23:41:09        Microsoft® Windows® Operating System        Kernel CSA Library        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\ks.sys       
serial.sys                fffff80c`417d0000        fffff80c`417ec000        0x0001c000        0x3e32c189        25.01.2003 17:55:37        Betriebssystem Microsoft® Windows®        Serieller Gerätetreiber        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\serial.sys       
serenum.sys                fffff80c`417f0000        fffff80c`417ff000        0x0000f000        0x45e28dd2        26.02.2007 08:35:46        Microsoft® Windows® Operating System        Serial Port Enumerator        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\serenum.sys       
fdc.sys                fffff80c`41800000        fffff80c`4180f000        0x0000f000        0x8eb9b41d        17.11.2045 13:35:41        Microsoft® Windows® Operating System        Floppy Disk Controller Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\fdc.sys       
SkyNET_AMD64.SYS                fffff80c`41810000        fffff80c`418aa000        0x0009a000        0x4bd8c424        29.04.2010 00:26:28        TechniSat DVB-PC TV Star PCI Adapter        NDIS 5.0 driver        4,6,0,9999        TechniSat Digital, S.A.        C:\WINDOWS\system32\drivers\SkyNET_AMD64.SYS       
wmiacpi.sys                fffff80c`418b0000        fffff80c`418bc000        0x0000c000        0xde409228        28.02.2088 03:27:52        Microsoft® Windows® Operating System        Windows Management Interface for ACPI        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\wmiacpi.sys       
NdisVirtualBus.sys                fffff80c`418c0000        fffff80c`418cd000        0x0000d000        0x74d36d6e        10.02.2032 09:06:06        Betriebssystem Microsoft® Windows®        Enumerator für virtuelle Microsoft-Netzwerkadapter        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\NdisVirtualBus.sys       
swenum.sys                fffff80c`418d0000        fffff80c`418dc000        0x0000c000        0x3c18d717        13.12.2001 17:28:07        Microsoft® Windows® Operating System        Plug and Play Software Device Enumerator        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\swenum.sys       
rdpbus.sys                fffff80c`418e0000        fffff80c`418ee000        0x0000e000        0xbf7d986c        21.10.2071 19:54:36        Microsoft® Windows® Operating System        Microsoft RDP Bus Device driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\rdpbus.sys       
tbhsd.sys                fffff80c`418f0000        fffff80c`41900000        0x00010000        0x50749ec6        09.10.2012 23:01:42        Audials Sound Capturing        Audials Sound Capturing        6,0,4000,0        RapidSolution Software AG        C:\WINDOWS\system32\drivers\tbhsd.sys       
ksthunk.sys                fffff80c`41900000        fffff80c`4190f000        0x0000f000        0x3e950951        10.04.2003 07:04:01        Microsoft® Windows® Operating System        Kernel Streaming WOW Thunk Service        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\ksthunk.sys       
usbhub.sys                fffff80c`41910000        fffff80c`41993000        0x00083000        0xaed85696        15.12.2062 14:05:26        Betriebssystem Microsoft® Windows®        Standardhubtreiber für USB        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\usbhub.sys       
USBD.SYS                fffff80c`419a0000        fffff80c`419ae000        0x0000e000        0x638fcb99        07.12.2022 00:09:13        Microsoft® Windows® Operating System        Universal Serial Bus Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\USBD.SYS       
flpydisk.sys                fffff80c`419b0000        fffff80c`419be000        0x0000e000        0x04dc2eb6                Microsoft® Windows® Operating System        Floppy Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\flpydisk.sys       
HdAudio.sys                fffff80c`419c0000        fffff80c`41a32000        0x00072000        0x8d17c45c        04.01.2045 13:17:32        Microsoft® Windows® Operating System        High Definition Audio Function Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\HdAudio.sys       
USBSTOR.SYS                fffff80c`41a40000        fffff80c`41a64000        0x00024000        0xa18bfae0        20.11.2055 07:38:24        Betriebssystem Microsoft® Windows®        USB-Massenspeichergerät-Klassentreiber        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\USBSTOR.SYS       
hidusb.sys                fffff80c`41a70000        fffff80c`41a82000        0x00012000        0x2e8a200f        29.09.1994 03:01:51        Microsoft® Windows® Operating System        USB Miniport Driver for Input Devices        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\hidusb.sys       
HIDCLASS.SYS                fffff80c`41a90000        fffff80c`41ac5000        0x00035000        0xa4b57241        26.07.2057 07:31:29        Betriebssystem Microsoft® Windows®        HID Class-Bibliothek        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\HIDCLASS.SYS       
HIDPARSE.SYS                fffff80c`41ad0000        fffff80c`41ae3000        0x00013000        0x3b5ca86c        23.07.2001 23:42:52        Microsoft® Windows® Operating System        Hid Parsing Library        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\HIDPARSE.SYS       
kbdhid.sys                fffff80c`41af0000        fffff80c`41b00000        0x00010000        0x30e4f78a        30.12.1995 09:25:46        Betriebssystem Microsoft® Windows®        HID-Tastaturfiltertreiber        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\kbdhid.sys       
GDKBB64.sys                fffff80c`41b00000        fffff80c`41b0c000        0x0000c000        0x565bcfc3        30.11.2015 05:25:39        G Data Security Software        G Data Security Software G DATA GDKBB        1.0.15334.325        G Data Software AG        C:\WINDOWS\system32\drivers\GDKBB64.sys       
GDKBFlt64.sys                fffff80c`41b10000        fffff80c`41b1a000        0x0000a000        0x57e9ed70        27.09.2016 04:54:24        G DATA Security Software        G DATA Security Software G DATA GDKBFlt        1.0.16270.354        G DATA Software AG        C:\WINDOWS\system32\drivers\GDKBFlt64.sys       
kbdclass.sys                fffff80c`41b20000        fffff80c`41b33000        0x00013000        0xe1050ca8        18.08.2089 12:55:20        Betriebssystem Microsoft® Windows®        Tastaturklassentreiber        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\kbdclass.sys       
usbccgp.sys                fffff80c`41b40000        fffff80c`41b6f000        0x0002f000        0xd5e154c6        16.09.2083 10:58:30        Microsoft® Windows® Operating System        USB Common Class Generic Parent Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\usbccgp.sys       
usbaudio.sys                fffff80c`41b70000        fffff80c`41b97000        0x00027000        0x21f26f60        18.01.1988 21:32:32        Microsoft® Windows® Operating System        USB Audio Class Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\usbaudio.sys       
ZCinema_SRS_amd64.sys                fffff80c`41ba0000        fffff80c`41ba3f80        0x00003f80        0x46c353cb        15.08.2007 20:28:11        Z Cinéma        Z Cinéma        1, 4, 2, 0        SRS Labs, Inc.        C:\WINDOWS\system32\drivers\ZCinema_SRS_amd64.sys       
mouhid.sys                fffff80c`41bb0000        fffff80c`41bbf000        0x0000f000        0x25b918d8        21.01.1990 03:05:12        Betriebssystem Microsoft® Windows®        HID-Mausfiltertreiber        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\mouhid.sys       
mouclass.sys                fffff80c`41bc0000        fffff80c`41bd2000        0x00012000        0x92a73cab        20.12.2047 06:46:19        Betriebssystem Microsoft® Windows®        Mausklassentreiber        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\mouclass.sys       
fastfat.SYS                fffff80c`41be0000        fffff80c`41c3f000        0x0005f000        0x67829b1c        11.01.2025 17:23:56        Microsoft® Windows® Operating System        Fast FAT File System Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\fastfat.SYS       
win32k.sys                ffffa2a4`9b890000        ffffa2a4`9b907000        0x00077000        0x00000000                Microsoft® Windows® Operating System        Full/Desktop Multi-User Win32 Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\win32k.sys       
win32kfull.sys                ffffa2a4`9ae00000        ffffa2a4`9b194000        0x00394000        0x00000000                Microsoft® Windows® Operating System        Full/Desktop Win32k Kernel Driver        10.0.16299.125 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\win32kfull.sys       
win32kbase.sys                ffffa2a4`9b1a0000        ffffa2a4`9b3b2000        0x00212000        0x00000000                Betriebssystem Microsoft® Windows®        Basis-Win32k-Kerneltreiber        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\win32kbase.sys       
dump_dumpata.sys                fffff80c`42210000        fffff80c`4221f000        0x0000f000        0x11cfd1b8                                                       
dump_atapi.sys                fffff80c`42230000        fffff80c`4223c000        0x0000c000        0xd59b80e1        25.07.2083 11:48:01                                               
dump_dumpfve.sys                fffff80c`42260000        fffff80c`4227d000        0x0001d000        0xc2b56cb9        07.07.2073 17:15:53                                               
dxgmms1.sys                fffff80c`41c40000        fffff80c`41ca9000        0x00069000        0x71590ce5        06.04.2030 00:16:53        Microsoft® Windows® Operating System        DirectX Graphics MMS        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\dxgmms1.sys       
monitor.sys                fffff80c`41cb0000        fffff80c`41cc1000        0x00011000        0xcbd8b938        17.05.2078 02:54:00        Microsoft® Windows® Operating System        Monitor Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\monitor.sys       
dxgmms2.sys                fffff80c`41cd0000        fffff80c`41d8c000        0x000bc000        0x19fd77b0                Microsoft® Windows® Operating System        DirectX Graphics MMS        10.0.16299.98 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\dxgmms2.sys       
TSDDD.dll                ffffa2a4`9b3d0000        ffffa2a4`9b3da000        0x0000a000        0x00000000                Microsoft® Windows® Operating System        Framebuffer Display Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\TSDDD.dll       
luafv.sys                fffff80c`41d90000        fffff80c`41db6000        0x00026000        0x025c967c                Betriebssystem Microsoft® Windows®        LUA-Filtertreiber zur Dateivirtualisierung        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\luafv.sys       
wcifs.sys                fffff80c`41dc0000        fffff80c`41de7000        0x00027000        0x061d81cb                Microsoft® Windows® Operating System        Windows Container Isolation FS Filter Driver        10.0.16299.64 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\wcifs.sys       
cldflt.sys                fffff80c`41df0000        fffff80c`41e56000        0x00066000        0xb5077a79        30.03.2066 10:16:41        Microsoft® Windows® Operating System        Cloud Files Mini Filter Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\cldflt.sys       
storqosflt.sys                fffff80c`41e60000        fffff80c`41e79000        0x00019000        0x426b6c81        24.04.2005 10:53:05        Betriebssystem Microsoft® Windows®        QoS-Filter für Speicher        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\storqosflt.sys       
WUDFRd.sys                fffff80c`41e80000        fffff80c`41ec6000        0x00046000        0x9195b73b        26.05.2047 19:28:11        Microsoft® Windows® Operating System        Windows Driver Foundation - User-mode Driver Framework Reflector        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\WUDFRd.sys       
WpdUpFltr.sys                fffff80c`41ed0000        fffff80c`41edd000        0x0000d000        0xb911feb2        23.05.2068 03:04:34        Microsoft® Windows® Operating System        Windows Portable Device Upper Class Filter Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\WpdUpFltr.sys       
mslldp.sys                fffff80c`41ee0000        fffff80c`41efa000        0x0001a000        0x0a882621                Betriebssystem Microsoft® Windows®        Treiber für das Microsoft-Verbindungsschichterkennungsprotokoll        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\mslldp.sys       
lltdio.sys                fffff80c`41f00000        fffff80c`41f16000        0x00016000        0x562d4851        25.10.2015 22:23:29        Microsoft® Windows® Operating System        Link-Layer Topology Mapper I/O Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\lltdio.sys       
rspndr.sys                fffff80c`41f20000        fffff80c`41f3a000        0x0001a000        0x808aaecd        04.05.2038 08:52:45        Microsoft® Windows® Operating System        Link-Layer Topology Responder Driver for NDIS 6        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\rspndr.sys       
vmnetuserif.sys                fffff80c`41f40000        fffff80c`41f4b000        0x0000b000        0x57e92ebc        26.09.2016 15:20:44        VMware network application interface driver (64-bit)        VMware network application interface driver (64-bit)        4.2.8.0        VMware, Inc.        C:\WINDOWS\system32\drivers\vmnetuserif.sys       
wanarp.sys                fffff80c`41f50000        fffff80c`41f6b000        0x0001b000        0xf9058884        24.05.2102 05:50:12        Microsoft® Windows® Operating System        MS Remote Access and Routing ARP Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\wanarp.sys       
nwifi.sys                fffff80c`41f70000        fffff80c`41ff7000        0x00087000        0x870c410f        18.10.2041 17:40:47        Betriebssystem Microsoft® Windows®        Systemeigener WiFi-Miniporttreiber        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\nwifi.sys       
ndisuio.sys                fffff80c`42000000        fffff80c`42016000        0x00016000        0x9abf995e        09.04.2052 04:58:22        Betriebssystem Microsoft® Windows®        E/A-Treiber für NDIS-Benutzermodus        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\ndisuio.sys       
HTTP.sys                fffff80c`42020000        fffff80c`42133000        0x00113000        0x8e07c76c        05.07.2045 14:34:36        Betriebssystem Microsoft® Windows®        HTTP-Protokollstapel        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\HTTP.sys       
bowser.sys                fffff80c`42140000        fffff80c`42161000        0x00021000        0xa73b9d41        28.11.2058 10:39:13        Microsoft® Windows® Operating System        NT Lan Manager Datagram Receiver Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\bowser.sys       
mpsdrv.sys                fffff80c`42170000        fffff80c`42189000        0x00019000        0xdfb7e613        08.12.2088 20:05:55        Microsoft® Windows® Operating System        Microsoft Protection Service Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\mpsdrv.sys       
mrxsmb.sys                fffff80c`40050000        fffff80c`400d0000        0x00080000        0xa623c442        30.04.2058 04:10:58        Betriebssystem Microsoft® Windows®        Windows NT SMB Minirdr        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\mrxsmb.sys       
mrxsmb20.sys                fffff80c`42190000        fffff80c`421cd000        0x0003d000        0x322c0f52        03.09.1996 11:58:26        Microsoft® Windows® Operating System        Longhorn SMB 2.0 Redirector        10.0.16299.98 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\mrxsmb20.sys       
vmx86.sys                fffff80c`421d0000        fffff80c`421ec000        0x0001c000        0x579f4fe5        01.08.2016 14:34:29        VMware kernel driver        VMware kernel driver        12.5.1.0        VMware, Inc.        C:\WINDOWS\system32\drivers\vmx86.sys       
hcmon.sys                fffff80c`42fd0000        fffff80c`42fe5000        0x00015000        0x57b54b19        18.08.2016 06:43:53        VMware USB monitor        VMware USB monitor        8.11.1.0        VMware, Inc.        C:\WINDOWS\system32\drivers\hcmon.sys       
srvnet.sys                fffff80c`400d0000        fffff80c`40117000        0x00047000        0x3a85c2f7        10.02.2001 23:38:47        Microsoft® Windows® Operating System        Server Network driver        10.0.16299.98 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\srvnet.sys       
mrxsmb10.sys                fffff80c`40120000        fffff80c`4016e000        0x0004e000        0x45cf2c63        11.02.2007 15:46:59        Microsoft® Windows® Operating System        Longhorn SMB Downlevel SubRdr        10.0.16299.19 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\mrxsmb10.sys       
mqac.sys                fffff80c`40170000        fffff80c`401a2000        0x00032000        0x314e4e7d        19.03.1996 07:04:45        Microsoft® Windows® Operating System        Message Queuing Device Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\mqac.sys       
mmcss.sys                fffff80c`401b0000        fffff80c`401c3000        0x00013000        0x66344614        03.05.2024 03:04:04        Microsoft® Windows® Operating System        MMCSS Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\mmcss.sys       
Ndu.sys                fffff80c`401d0000        fffff80c`401f5000        0x00025000        0x59cb3f21        27.09.2017 07:03:13        Microsoft® Windows® Operating System        Windows Network Data Usage Monitoring Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\Ndu.sys       
srv2.sys                fffff80c`3f000000        fffff80c`3f0b9000        0x000b9000        0x60829265        23.04.2021 10:24:53        Betriebssystem Microsoft® Windows®        Smb 2.0-Servertreiber        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\srv2.sys       
peauth.sys                fffff80c`3ebc0000        fffff80c`3ec81000        0x000c1000        0x544f2396        28.10.2014 06:03:18        Microsoft® Windows® Operating System        Protected Environment Authentication and Authorization Export Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\peauth.sys       
tcpipreg.sys                fffff80c`40200000        fffff80c`40213000        0x00013000        0x5b8d9a48        03.09.2018 21:32:08        Microsoft® Windows® Operating System        TCP/IP Registry Compatibility Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\tcpipreg.sys       
srv.sys                fffff80c`3f0c0000        fffff80c`3f150000        0x00090000        0xa3d1d2ba        03.02.2057 15:46:18        Microsoft® Windows® Operating System        Server driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\srv.sys       
rassstp.sys                fffff80c`40590000        fffff80c`405ab000        0x0001b000        0xd487583c        28.12.2082 00:29:00        Microsoft® Windows® Operating System        RAS SSTP Miniport Call Manager        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\rassstp.sys       
NDProxy.sys                fffff80c`405b0000        fffff80c`405c6000        0x00016000        0xb13fce45        26.03.2064 10:20:05        Microsoft® Windows® Operating System        NDIS Proxy        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\NDProxy.sys       
AgileVpn.sys                fffff80c`405d0000        fffff80c`405f7000        0x00027000        0xbdd34c6e        02.12.2070 11:24:46        Betriebssystem Microsoft® Windows®        RAS Agile Vpn Miniport Call Manager        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\AgileVpn.sys       
rasl2tp.sys                fffff80c`3f700000        fffff80c`3f720000        0x00020000        0xedecef5f        28.06.2096 14:19:27        Microsoft® Windows® Operating System        RAS L2TP mini-port/call-manager driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\rasl2tp.sys       
raspptp.sys                fffff80c`3f720000        fffff80c`3f73f000        0x0001f000        0x30102aa9        21.07.1995 23:31:05        Microsoft® Windows® Operating System        Peer-to-Peer Tunneling Protocol        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\raspptp.sys       
raspppoe.sys                fffff80c`3f740000        fffff80c`3f75b000        0x0001b000        0xa080d0be        01.05.2055 16:03:26        Microsoft® Windows® Operating System        RAS PPPoE mini-port/call-manager driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\raspppoe.sys       
ndistapi.sys                fffff80c`42ff0000        fffff80c`42fff000        0x0000f000        0x66b12a51        05.08.2024 20:38:57        Microsoft® Windows® Operating System        NDIS 3.0 connection wrapper driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\ndistapi.sys       
ndiswan.sys                fffff80c`3ec90000        fffff80c`3ecc7000        0x00037000        0xf58ec2fa        20.07.2100 14:39:06        Microsoft® Windows® Operating System        MS PPP Framing Driver (Strong Encryption)        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\ndiswan.sys       
condrv.sys                fffff80c`3f760000        fffff80c`3f772000        0x00012000        0xa6ea12b5        27.09.2058 14:14:29        Microsoft® Windows® Operating System        Console Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\condrv.sys       
WdFilter.sys                fffff80c`3ecd0000        fffff80c`3ed1b000        0x0004b000        0x0f621a95                Microsoft® Windows® Operating System        Microsoft antimalware file system filter driver        4.12.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\WdFilter.sys       
PktIcpt.sys                fffff80c`3ed20000        fffff80c`3ed48000        0x00028000        0x5a1b4a15        27.11.2017 00:11:17        G Data InternetSecurity        WFP PktInterceptor 2 (Pkt2 Filter)        4.1.17331.11        G Data Software AG        C:\WINDOWS\system32\drivers\PktIcpt.sys       
TuneUpUtilitiesDriver64.sys                fffff80c`421f0000        fffff80c`421f8000        0x00008000        0x5697adb7        14.01.2016 15:16:23                                               
rdpvideominiport.sys                fffff80c`3fe90000        fffff80c`3fe9d000        0x0000d000        0x834709a4        17.10.2039 14:27:00        Microsoft® Windows® Operating System        Microsoft RDP Video Miniport driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\drivers\rdpvideominiport.sys       
cdd.dll                ffffa2a4`9b440000        ffffa2a4`9b481000        0x00041000        0x00000000                Microsoft® Windows® Operating System        Canonical Display Driver        10.0.16299.15 (WinBuild.160101.0800)        Microsoft Corporation        C:\WINDOWS\system32\cdd.dll       
hiber_dumpata.sys                fffff80c`3fea0000        fffff80c`3feaf000        0x0000f000        0x11cfd1b8                                                       
hiber_atapi.sys                fffff80c`3f5e0000        fffff80c`3f5ec000        0x0000c000        0xd59b80e1        25.07.2083 11:48:01                                               
hiber_dumpfve.sys                fffff80c`3f150000        fffff80c`3f16d000        0x0001d000        0xc2b56cb9        07.07.2073 17:15:53
Kenne mich damit leider gar nicht aus. Könnt ihr mir das auswerten?

CptMw 03.02.2018 16:28
Da erkennt man leider nicht viel. Die failende Komponente ist der Kernel (ntoskrnl.exe). Das kann so ziemlich alles sein. Hast du noch ältere Dumps, bei denen bei "Caused By Driver" was anderes steht?

Bitte bring mal deine Hardware-Treiber auf den neuesten Stand.

cosinus 03.02.2018 16:29
Der Rechner ist ja auch nicht mehr ganz taufrisch. Vllt sollte man hier mal den Memory testen zB mit memtest86.
Und auch mal testweise jegliches Virenscanner Geraffel abknallen!

CptMw 03.02.2018 16:32
Speicher prüfen kann nie schaden. Das geht aber erst mal auch mit der Windows-Speicherdiagnose, dann muss man nicht gleich mit Bootmedien hantieren. Einfach im Startmenü danach suchen.

cosinus 03.02.2018 16:33
Ich trau dieser Windows-Kacke da nicht so :D

CptMw 03.02.2018 16:35
Zitat:
Zitat von cosinus (Beitrag 1683041)
Ich trau dieser Windows-Kacke da nicht so :D
Das hat bei dir aber nix mit Erfahrungswerten zu tun, du traust Microsoft aus Prinzip nicht :D

cosinus 03.02.2018 16:36
Das hast du richtig erkannt, weil Microsoft == dark evil shit :teufel2:

sonsm55 03.02.2018 16:37
nun muss ich sagen, das ich absoluter Laie bin.

Könntet ihr mir bitte Schritt für Schritt sagen, was ich womit tun kann?

cosinus 03.02.2018 16:38
Auf Start klicken --> Speicherdiagnose eintippen und Anweisungen folgen


Alle Zeitangaben in WEZ +1. Es ist jetzt 10:55 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131