Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Reimage öffnet sich als neues Fenster im Browser & Oh nein diese Seite kann nicht angezeigt werden (https://www.trojaner-board.de/182457-reimage-oeffnet-neues-fenster-browser-oh-diese-seite-angezeigt.html)

SimonDavid 21.10.2016 13:53
Reimage öffnet sich als neues Fenster im Browser & Oh nein diese Seite kann nicht angezeigt werden
 
Hallo zusammen,

habe seit einigen Wochen das Problem, dass sich beim surfen im Internet immer weitere Tabs öffnen mit der Seite hxxp://de.reimageplus.com/

Seit neuestem kommt bei längerem Verbleib auf einer Internetseite irgendwann ein "Oh nein" Fehler beim anzeigen dieser Webseite was auch sehr nervig ist.

Ich habe keine Ahnung was ich mir da eingefangen habe.

Für eure Hilfe wäre ich euch sehr dankbar!
Mit freundlichen Grüßen
Simon
Anbei die Ergebnisse aus meinem Avira Free Antivirus Programm

21.10.2016, 14:43:18 [System-Scanner] Malware gefunden
Die Datei 'C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\HQ-Proffesional\360-53170.crx.vir'
enthält folgendes Muster 'Adware/CrossRider.VM' [adware]
Ausgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '2fa8df20.qua' verschoben!

21.10.2016, 14:43:13 [System-Scanner] Malware gefunden
Die Datei 'C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\HQ-Proffesional\53170.crx.vir'
enthält folgendes Muster 'Adware/CrossRider.VM' [adware]
Ausgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '43f5f318.qua' verschoben!

21.10.2016, 14:43:07 [System-Scanner] Malware gefunden
Die Datei 'C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\HQ-Proffesional\53170.xpi.vir'
enthält folgendes Muster 'Adware/CrossRider.VM' [adware]
Ausgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '5a9dc898.qua' verschoben!

21.10.2016, 14:43:01 [System-Scanner] Malware gefunden
Die Datei 'C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\HQ-Proffesional\utils.exe.vir'
enthält folgendes Muster 'ADWARE/CrossRider.Gen' [adware]
Ausgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '778fe792.qua' verschoben!

21.10.2016, 14:42:36 [System-Scanner] Malware gefunden
Die Datei 'C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\MediaPlayerplus\360-54246.crx.vir'
enthält folgendes Muster 'Adware/CrossRider.VM' [adware]
Ausgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '0bdea779.qua' verschoben!

21.10.2016, 14:42:31 [System-Scanner] Malware gefunden
Die Datei 'C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\MediaPlayerplus\54246.crx.vir'
enthält folgendes Muster 'Adware/CrossRider.VM' [adware]
Ausgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '47608b2a.qua' verschoben!

21.10.2016, 14:42:24 [System-Scanner] Malware gefunden
Die Datei 'C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\MediaPlayerplus\54246.xpi.vir'
enthält folgendes Muster 'Adware/CrossRider.VM' [adware]
Ausgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '387bb944.qua' verschoben!

21.10.2016, 14:31:49 [System-Scanner] Malware gefunden
Die Datei 'C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\Re-Markable_P\161.xpi.vir'
enthält folgendes Muster 'HEUR/Suspar.Gen' [heuristic]
Ausgeführte Aktion(en):
Der Fund wurde als verdächtig eingestuft.
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '1bcfdc37.qua' verschoben!

21.10.2016, 14:31:42 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\Simon David\AppData\Roaming\Microsoft\Word\~WRD3060.tmp'
enthält folgendes Muster 'EXP/CVE-2006-4534' [exploit]
Ausgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '49f78731.qua' verschoben!

cosinus 21.10.2016 14:04
Wann hast du den adwCleaner ausgeführt?

Denn fast alle Funde beziehen sich die Q vom adwCleaner.

Bitte alle Logs vom adwCleaner posten.

SimonDavid 21.10.2016 14:18
Wann ich adwCleaner ausgeführt habe weis ich nicht mehr genau.
Dachte ich kann damit das Problem beheben.

Hab adwCleaner wieder deinstalliert deshlab kann ich die Logs nicht posten.

cosinus 21.10.2016 14:20
Das ist so Quatsch...schau bitte im Ordner C:\AdwCleaner nach. Da sollten die Logs sein.

SimonDavid 21.10.2016 15:56
ja du hast recht.
dort finde ich die Ordner:
FielQuarantine
RegistryQuarantine

Sowie die Text Dokumente
AdwCleaner[C1]
AdwCleaner[S1]

Wo kann ich dort die Logs finden?

Sorry hab leider keine Ahnung davon :(AdwCleaner Logfile:
Code:
# AdwCleaner v5.201 - Bericht erstellt am 31/07/2016 um 11:43:51
# Aktualisiert am 30/06/2016 von ToolsLib
# Datenbank : 2016-07-31.1 [Server]
# Betriebssystem : Windows 10 Home  (X64)
# Benutzername : Simon David - SIMONDAVID-PC
# Gestartet von : C:\Users\Simon David\Downloads\adwcleaner_5.201.exe
# Option : Löschen
# Unterstützung : https://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****

[-] Ordner gelöscht : C:\ProgramData\Babylon
[-] Ordner gelöscht : C:\ProgramData\BrowserDefender
[-] Ordner gelöscht : C:\Program Files (x86)\Bench
[-] Ordner gelöscht : C:\Program Files (x86)\MediaPlayerplus
[-] Ordner gelöscht : C:\Program Files (x86)\predm
[-] Ordner gelöscht : C:\Program Files (x86)\Uninstaller
[-] Ordner gelöscht : C:\Program Files (x86)\HQ-Proffesional
[-] Ordner gelöscht : C:\Program Files (x86)\Re-Markable_P
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Local\DealPlyLive
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Local\globalUpdate
[#] Ordner gelöscht : C:\Users\Simon David\AppData\Local\dealplylive
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\Babylon
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\DealPly
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\digitalsite
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\eCyber
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\iSafe
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\LookThisUp
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\mipony
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\OpenCandy
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\Optimizer Elite Max
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\PerformerSoft
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\RPEng
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\webssearches
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Local\com

***** [ Dateien ] *****

[-] Datei gelöscht : C:\END
[-] Datei gelöscht : C:\WINDOWS\SysWOW64\MyOSProtect.dll
[-] Datei gelöscht : C:\WINDOWS\SysWOW64\MyOSProtect.ini
[-] Datei gelöscht : C:\WINDOWS\SysWOW64\MyOSProtectOff.ini
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_amfclgbdpgndipgoegfpkkgobahigbcl_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_amfclgbdpgndipgoegfpkkgobahigbcl_0.localstorage-journal
[#] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ccncljhbalbbkkfgopogabimepmfkmff
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dmcecclamecbinmplcolhaljlclhbgah_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_majjphhgppkndjjkmhhnbgafooenebhd_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_majjphhgppkndjjkmhhnbgafooenebhd_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_majjphhgppkndjjkmhhnbgafooenebhd_0
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\majjphhgppkndjjkmhhnbgafooenebhd
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mphpbdjcljebbcnfopfngmfdackbbdgf_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\bprotector web data
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.pricepeep00.pricepeep.net_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.pricepeep00.pricepeep.net_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.re-markit00.re-markit.co_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.re-markit00.re-markit.co_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_freeradiocast.dl.myway.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_freeradiocast.dl.myway.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_freeradiocast.dl.tb.ask.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_freeradiocast.dl.tb.ask.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_land.pckeeper.software_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_land.pckeeper.software_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_nox-app-player.en.softonic.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_nox-app-player.en.softonic.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pconverter.dl.myway.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pconverter.dl.myway.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pconverter.dl.tb.ask.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pconverter.dl.tb.ask.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_primeshare.tv_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_primeshare.tv_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.emaildefendsearch.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.emaildefendsearch.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.socialmedianewtabsearch.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.socialmedianewtabsearch.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.coupontime00.coupontime.co_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.coupontime00.coupontime.co_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.movshare.net_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.movshare.net_0.localstorage-journal
[-] Datei gelöscht : C:\WINDOWS\SysNative\log\iSafeKrnlCall.log
[-] Datei gelöscht : C:\WINDOWS\SysNative\MyOSProtect64.dll
[-] Datei gelöscht : C:\WINDOWS\SysNative\drivers\iSafeKrnlBoot.sys

***** [ DLLs ] *****


***** [ WMI ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****

[-] Geplante Aufgabe gelöscht : ASP
[-] Geplante Aufgabe gelöscht : bench-sys
[-] Geplante Aufgabe gelöscht : MetaCrawler
[-] Geplante Aufgabe gelöscht : 6205d7fb-e736-4471-87e2-0b880e332552-4
[-] Geplante Aufgabe gelöscht : 6205d7fb-e736-4471-87e2-0b880e332552-7
[-] Geplante Aufgabe gelöscht : bench-sys
[-] Geplante Aufgabe gelöscht : c2045bfe-d753-4540-848f-589493f78a69-2
[-] Geplante Aufgabe gelöscht : c2045bfe-d753-4540-848f-589493f78a69-4
[-] Geplante Aufgabe gelöscht : Re-Markable Update
[-] Geplante Aufgabe gelöscht : Re-Markable_wd
[-] Geplante Aufgabe gelöscht : 6205d7fb-e736-4471-87e2-0b880e332552-4
[-] Geplante Aufgabe gelöscht : bench-sys
[-] Geplante Aufgabe gelöscht : c2045bfe-d753-4540-848f-589493f78a69-2
[-] Geplante Aufgabe gelöscht : c2045bfe-d753-4540-848f-589493f78a69-4
[-] Geplante Aufgabe gelöscht : {5E3CE618-F7BC-4455-84D2-8B62AE8B6A28}

***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
[-] Schlüssel gelöscht : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
[-] Schlüssel gelöscht : HKCU\Software\5c288debd6eea41
[-] Schlüssel gelöscht : HKLM\SOFTWARE\5c288debd6eea41
[-] Schlüssel gelöscht : HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Wert gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
[-] Wert gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
[-] Schlüssel gelöscht : HKCU\Software\FreeSoftToday
[-] Schlüssel gelöscht : HKCU\Software\InstalledBrowserExtensions
[-] Schlüssel gelöscht : HKCU\Software\LookThisUp
[-] Schlüssel gelöscht : HKCU\Software\OCS
[-] Schlüssel gelöscht : HKCU\Software\Optimizer Elite Max
[-] Schlüssel gelöscht : HKCU\Software\Reg\Clean
[-] Schlüssel gelöscht : HKCU\Software\StormWatch
[-] Schlüssel gelöscht : HKCU\Software\AppDataLow\Software\MediaPlayerplus
[-] Schlüssel gelöscht : HKCU\Software\AppDataLow\Software\Re-Markable
[-] Schlüssel gelöscht : HKCU\Software\AppDataLow\Software\simplytech
[-] Schlüssel gelöscht : HKCU\Software\AppDataLow\Software\suprasavings
[-] Schlüssel gelöscht : HKCU\Software\AppDataLow\Software\HQ-Proffesional
[-] Schlüssel gelöscht : HKLM\SOFTWARE\AdvertisingSupport
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Coupon Server
[-] Schlüssel gelöscht : HKLM\SOFTWARE\MediaPlayerplus
[-] Schlüssel gelöscht : HKLM\SOFTWARE\PCDRunner
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Reg\Clean
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Taronja
[-] Schlüssel gelöscht : HKLM\SOFTWARE\webssearchesSoftware
[-] Schlüssel gelöscht : HKLM\SOFTWARE\HQ-Proffesional
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DigitalSite
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{11D4FAA0-A577-4FA8-B24E-D24283D861D1}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DMUninstaller
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaPlayerplus
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HQ-Proffesional
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\suprasavings
[-] Schlüssel gelöscht : HKU\.DEFAULT\Software\AppDataLow\Software\AskToolbar
[-] Schlüssel gelöscht : HKU\.DEFAULT\Software\AppDataLow\Software\MediaPlayerplus
[-] Schlüssel gelöscht : HKU\.DEFAULT\Software\AppDataLow\Software\Re-Markable
[-] Schlüssel gelöscht : HKU\.DEFAULT\Software\AppDataLow\Software\HQ-Proffesional
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-189922631-1767686969-1414721043-1001\Software\SweetIM
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main [Search Bar]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search [Default_Search_URL]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search [Search Bar]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search [Search Page]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchURI []
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchUrl []
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [default_search_url]
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Bar]
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Page]
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl []
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchURI []
[-] Daten wiederhergestellt : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten wiederhergestellt : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Main [Search Bar]
[-] Daten wiederhergestellt : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Main [default_search_url]
[-] Daten wiederhergestellt : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
[-] Daten wiederhergestellt : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
[-] Daten wiederhergestellt : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Search [Search Bar]
[-] Daten wiederhergestellt : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Search [Search Page]
[-] Daten wiederhergestellt : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\SearchUrl []
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\akamaihd.net
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\autos.trovit.de
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\cdncache-a.akamaihd.net
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\dealply.com
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\max-start.com
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\surfcanyon.com
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\trovit.de
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.max-start.com
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
[-] Schlüssel gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Wpm

***** [ Internetbrowser ] *****

[-] [C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] gelöscht : fcfenmboojpjinhpgggodefccipikbpd

*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [20672 Bytes] - [31/07/2016 11:43:51]
C:\AdwCleaner\AdwCleaner[S1].txt - [26269 Bytes] - [31/07/2016 11:39:21]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [20820 Bytes] ##########
--- --- ---

cosinus 21.10.2016 15:57
Zitat:
Sowie die Text Dokumente
AdwCleaner[C1]
AdwCleaner[S1]
Diese bitte in CODE-Tags posten

SimonDavid 21.10.2016 15:59
Es betrifft auch nur GoogleChrome und nicht Firefox oder den Internetexplorer wie ich felstellen konnte.

AdwCleaner Logfile:
Code:
# AdwCleaner v5.201 - Bericht erstellt am 31/07/2016 um 11:39:21
# Aktualisiert am 30/06/2016 von ToolsLib
# Datenbank : 2016-07-31.1 [Server]
# Betriebssystem : Windows 10 Home  (X64)
# Benutzername : Simon David - SIMONDAVID-PC
# Gestartet von : C:\Users\Simon David\Downloads\adwcleaner_5.201.exe
# Option : Suchlauf
# Unterstützung : https://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****

Ordner gefunden : C:\ProgramData\Babylon
Ordner gefunden : C:\ProgramData\BrowserDefender
Ordner gefunden : C:\Program Files (x86)\Bench
Ordner gefunden : C:\Program Files (x86)\MediaPlayerplus
Ordner gefunden : C:\Program Files (x86)\predm
Ordner gefunden : C:\Program Files (x86)\Uninstaller
Ordner gefunden : C:\Program Files (x86)\HQ-Proffesional
Ordner gefunden : C:\Program Files (x86)\Re-Markable_P
Ordner gefunden : C:\Users\Simon David\AppData\Local\DealPlyLive
Ordner gefunden : C:\Users\Simon David\AppData\Local\globalUpdate
Ordner gefunden : C:\Users\Simon David\AppData\Local\dealplylive
Ordner gefunden : C:\Users\Simon David\AppData\Roaming\Babylon
Ordner gefunden : C:\Users\Simon David\AppData\Roaming\DealPly
Ordner gefunden : C:\Users\Simon David\AppData\Roaming\digitalsite
Ordner gefunden : C:\Users\Simon David\AppData\Roaming\eCyber
Ordner gefunden : C:\Users\Simon David\AppData\Roaming\iSafe
Ordner gefunden : C:\Users\Simon David\AppData\Roaming\LookThisUp
Ordner gefunden : C:\Users\Simon David\AppData\Roaming\mipony
Ordner gefunden : C:\Users\Simon David\AppData\Roaming\OpenCandy
Ordner gefunden : C:\Users\Simon David\AppData\Roaming\Optimizer Elite Max
Ordner gefunden : C:\Users\Simon David\AppData\Roaming\PerformerSoft
Ordner gefunden : C:\Users\Simon David\AppData\Roaming\RPEng
Ordner gefunden : C:\Users\Simon David\AppData\Roaming\webssearches
Ordner gefunden : C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
Ordner gefunden : C:\Users\Simon David\AppData\Local\com

***** [ Dateien ] *****

Datei gefunden : C:\END
Datei gefunden : C:\WINDOWS\SysWOW64\MyOSProtect.dll
Datei gefunden : C:\WINDOWS\SysWOW64\MyOSProtect.ini
Datei gefunden : C:\WINDOWS\SysWOW64\MyOSProtectOff.ini
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_amfclgbdpgndipgoegfpkkgobahigbcl_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_amfclgbdpgndipgoegfpkkgobahigbcl_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ccncljhbalbbkkfgopogabimepmfkmff
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dmcecclamecbinmplcolhaljlclhbgah_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_majjphhgppkndjjkmhhnbgafooenebhd_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_majjphhgppkndjjkmhhnbgafooenebhd_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_majjphhgppkndjjkmhhnbgafooenebhd_0
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\majjphhgppkndjjkmhhnbgafooenebhd
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mphpbdjcljebbcnfopfngmfdackbbdgf_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\bprotector web data
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.pricepeep00.pricepeep.net_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.pricepeep00.pricepeep.net_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.re-markit00.re-markit.co_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.re-markit00.re-markit.co_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_freeradiocast.dl.myway.com_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_freeradiocast.dl.myway.com_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_freeradiocast.dl.tb.ask.com_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_freeradiocast.dl.tb.ask.com_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_land.pckeeper.software_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_land.pckeeper.software_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_nox-app-player.en.softonic.com_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_nox-app-player.en.softonic.com_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pconverter.dl.myway.com_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pconverter.dl.myway.com_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pconverter.dl.tb.ask.com_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pconverter.dl.tb.ask.com_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_primeshare.tv_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_primeshare.tv_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.emaildefendsearch.com_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.emaildefendsearch.com_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.socialmedianewtabsearch.com_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.socialmedianewtabsearch.com_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.coupontime00.coupontime.co_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.coupontime00.coupontime.co_0.localstorage-journal
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.movshare.net_0.localstorage
Datei gefunden : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.movshare.net_0.localstorage-journal
Datei gefunden : C:\WINDOWS\SysNative\log\iSafeKrnlCall.log
Datei gefunden : C:\WINDOWS\SysNative\MyOSProtect64.dll
Datei gefunden : C:\WINDOWS\SysNative\drivers\iSafeKrnlBoot.sys

***** [ DLL ] *****


***** [ WMI ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****

Geplante Aufgabe gefunden : ASP
Geplante Aufgabe gefunden : bench-sys
Geplante Aufgabe gefunden : MetaCrawler
Geplante Aufgabe gefunden : 6205d7fb-e736-4471-87e2-0b880e332552-4
Geplante Aufgabe gefunden : 6205d7fb-e736-4471-87e2-0b880e332552-7
Geplante Aufgabe gefunden : bench-sys
Geplante Aufgabe gefunden : c2045bfe-d753-4540-848f-589493f78a69-2
Geplante Aufgabe gefunden : c2045bfe-d753-4540-848f-589493f78a69-4
Geplante Aufgabe gefunden : Re-Markable Update
Geplante Aufgabe gefunden : Re-Markable_wd
Geplante Aufgabe gefunden : 6205d7fb-e736-4471-87e2-0b880e332552-4
Geplante Aufgabe gefunden : bench-sys
Geplante Aufgabe gefunden : c2045bfe-d753-4540-848f-589493f78a69-2
Geplante Aufgabe gefunden : c2045bfe-d753-4540-848f-589493f78a69-4
Geplante Aufgabe gefunden : {5E3CE618-F7BC-4455-84D2-8B62AE8B6A28}

***** [ Registrierungsdatenbank ] *****

Schlüssel gefunden : HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}
Schlüssel gefunden : HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}
Schlüssel gefunden : HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}
Schlüssel gefunden : HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}
Schlüssel gefunden : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Schlüssel gefunden : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Schlüssel gefunden : HKCU\Software\5c288debd6eea41
Schlüssel gefunden : HKLM\SOFTWARE\5c288debd6eea41
Schlüssel gefunden : HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd
Schlüssel gefunden : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel gefunden : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel gefunden : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel gefunden : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel gefunden : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel gefunden : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel gefunden : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Schlüssel gefunden : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel gefunden : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Schlüssel gefunden : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Schlüssel gefunden : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
Schlüssel gefunden : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
Schlüssel gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Wert gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel gefunden : HKCU\Software\FreeSoftToday
Schlüssel gefunden : HKCU\Software\InstalledBrowserExtensions
Schlüssel gefunden : HKCU\Software\LookThisUp
Schlüssel gefunden : HKCU\Software\OCS
Schlüssel gefunden : HKCU\Software\Optimizer Elite Max
Schlüssel gefunden : HKCU\Software\Reg\Clean
Schlüssel gefunden : HKCU\Software\StormWatch
Schlüssel gefunden : HKCU\Software\AppDataLow\Software\MediaPlayerplus
Schlüssel gefunden : HKCU\Software\AppDataLow\Software\Re-Markable
Schlüssel gefunden : HKCU\Software\AppDataLow\Software\simplytech
Schlüssel gefunden : HKCU\Software\AppDataLow\Software\suprasavings
Schlüssel gefunden : HKCU\Software\AppDataLow\Software\SIMPLYTECH
Schlüssel gefunden : HKCU\Software\AppDataLow\Software\HQ-Proffesional
Schlüssel gefunden : HKCU\Software\AppDataLow\Software\HQ-Proffesional
Schlüssel gefunden : HKLM\SOFTWARE\AdvertisingSupport
Schlüssel gefunden : HKLM\SOFTWARE\Coupon Server
Schlüssel gefunden : HKLM\SOFTWARE\MediaPlayerplus
Schlüssel gefunden : HKLM\SOFTWARE\PCDRunner
Schlüssel gefunden : HKLM\SOFTWARE\Reg\Clean
Schlüssel gefunden : HKLM\SOFTWARE\Taronja
Schlüssel gefunden : HKLM\SOFTWARE\webssearchesSoftware
Schlüssel gefunden : HKLM\SOFTWARE\HQ-Proffesional
Schlüssel gefunden : HKLM\SOFTWARE\HQ-Proffesional
Schlüssel gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DigitalSite
Schlüssel gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{11D4FAA0-A577-4FA8-B24E-D24283D861D1}
Schlüssel gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DMUninstaller
Schlüssel gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaPlayerplus
Schlüssel gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HQ-Proffesional
Schlüssel gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HQ-Proffesional
Schlüssel gefunden : [x64] HKLM\SOFTWARE\suprasavings
Schlüssel gefunden : HKU\.DEFAULT\Software\AppDataLow\Software\AskToolbar
Schlüssel gefunden : HKU\.DEFAULT\Software\AppDataLow\Software\MediaPlayerplus
Schlüssel gefunden : HKU\.DEFAULT\Software\AppDataLow\Software\Re-Markable
Schlüssel gefunden : HKU\.DEFAULT\Software\AppDataLow\Software\HQ-Proffesional
Schlüssel gefunden : HKU\.DEFAULT\Software\AppDataLow\Software\HQ-Proffesional
Schlüssel gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\FreeSoftToday
Schlüssel gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\InstalledBrowserExtensions
Schlüssel gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\LookThisUp
Schlüssel gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\OCS
Schlüssel gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Optimizer Elite Max
Schlüssel gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Reg\Clean
Schlüssel gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\StormWatch
Schlüssel gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\AppDataLow\Software\MediaPlayerplus
Schlüssel gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\AppDataLow\Software\Re-Markable
Schlüssel gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\AppDataLow\Software\simplytech
Schlüssel gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\AppDataLow\Software\suprasavings
Schlüssel gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\AppDataLow\Software\SIMPLYTECH
Schlüssel gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\AppDataLow\Software\HQ-Proffesional
Schlüssel gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\AppDataLow\Software\HQ-Proffesional
Schlüssel gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\DigitalSite
Schlüssel gefunden : HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-189922631-1767686969-1414721043-1001\Software\SweetIM
Schlüssel gefunden : HKU\S-1-5-18\Software\AppDataLow\Software\AskToolbar
Schlüssel gefunden : HKU\S-1-5-18\Software\AppDataLow\Software\MediaPlayerplus
Schlüssel gefunden : HKU\S-1-5-18\Software\AppDataLow\Software\Re-Markable
Schlüssel gefunden : HKU\S-1-5-18\Software\AppDataLow\Software\HQ-Proffesional
Schlüssel gefunden : HKU\S-1-5-18\Software\AppDataLow\Software\HQ-Proffesional
Schlüssel gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Schlüssel gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Schlüssel gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4
Daten gefunden : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main [Search Bar] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search [Search Bar] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search [Search Page] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchURI [] - hxxp://search.certified-toolbar.com?si=82443&st=bs&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&q=%s
Daten gefunden : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [] - hxxp://search.certified-toolbar.com?si=82443&st=bs&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&q=%s
Daten gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [default_search_url] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant] - hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbHdKIqgRJyMidKuvnhDCvIAbTsWW_5EYIV5Zia1dspwPAPVkE7n28MD9qLuTSbtM04RBMNDzK_ApWwsRozyhPsy9DReIPIYHt80R3pjPcAyJlF1pA-zrIGmYSZAdqPgiboZatSMRuJ1x1Ew48fTAjuHlpAiKTdoifhfjMIX6gqhSfSAzA,,&q={searchTerms}
Daten gefunden : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKCU\Software\Microsoft\Internet Explorer\Search [Search Bar] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKCU\Software\Microsoft\Internet Explorer\Search [Search Page] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [] - hxxp://search.certified-toolbar.com?si=82443&st=bs&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&q=%s
Daten gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchURI [] - hxxp://search.certified-toolbar.com?si=82443&st=bs&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&q=%s
Daten gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Main [Search Bar] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Main [default_search_url] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Search [SearchAssistant] - hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbHdKIqgRJyMidKuvnhDCvIAbTsWW_5EYIV5Zia1dspwPAPVkE7n28MD9qLuTSbtM04RBMNDzK_ApWwsRozyhPsy9DReIPIYHt80R3pjPcAyJlF1pA-zrIGmYSZAdqPgiboZatSMRuJ1x1Ew48fTAjuHlpAiKTdoifhfjMIX6gqhSfSAzA,,&q={searchTerms}
Daten gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Search [Search Bar] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Search [Search Page] - hxxp://search.certified-toolbar.com?si=82443&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&st=chrome&q=
Daten gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\SearchUrl [] - hxxp://search.certified-toolbar.com?si=82443&st=bs&tid=24086&ver=6.4&ts=1402605246822&tguid=82443-24086-1402605246822-85E7372B08D0E30C85FAF365AE052513&q=%s
Schlüssel gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Schlüssel gefunden : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Schlüssel gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\akamaihd.net
Schlüssel gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\autos.trovit.de
Schlüssel gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\cdncache-a.akamaihd.net
Schlüssel gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\dealply.com
Schlüssel gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\max-start.com
Schlüssel gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Schlüssel gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\surfcanyon.com
Schlüssel gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\trovit.de
Schlüssel gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\Max Start Search
Schlüssel gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Schlüssel gefunden : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Wpm

***** [ Internetbrowser ] *****

[C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] gefunden : fcfenmboojpjinhpgggodefccipikbpd

*************************

C:\AdwCleaner\AdwCleaner[S1].txt - [26095 Bytes] - [31/07/2016 11:39:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [26169 Bytes] ##########
--- --- ---
AdwCleaner Logfile:
Code:
# AdwCleaner v5.201 - Bericht erstellt am 31/07/2016 um 11:43:51
# Aktualisiert am 30/06/2016 von ToolsLib
# Datenbank : 2016-07-31.1 [Server]
# Betriebssystem : Windows 10 Home  (X64)
# Benutzername : Simon David - SIMONDAVID-PC
# Gestartet von : C:\Users\Simon David\Downloads\adwcleaner_5.201.exe
# Option : Löschen
# Unterstützung : https://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****

[-] Ordner gelöscht : C:\ProgramData\Babylon
[-] Ordner gelöscht : C:\ProgramData\BrowserDefender
[-] Ordner gelöscht : C:\Program Files (x86)\Bench
[-] Ordner gelöscht : C:\Program Files (x86)\MediaPlayerplus
[-] Ordner gelöscht : C:\Program Files (x86)\predm
[-] Ordner gelöscht : C:\Program Files (x86)\Uninstaller
[-] Ordner gelöscht : C:\Program Files (x86)\HQ-Proffesional
[-] Ordner gelöscht : C:\Program Files (x86)\Re-Markable_P
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Local\DealPlyLive
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Local\globalUpdate
[#] Ordner gelöscht : C:\Users\Simon David\AppData\Local\dealplylive
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\Babylon
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\DealPly
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\digitalsite
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\eCyber
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\iSafe
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\LookThisUp
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\mipony
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\OpenCandy
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\Optimizer Elite Max
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\PerformerSoft
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\RPEng
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\webssearches
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
[-] Ordner gelöscht : C:\Users\Simon David\AppData\Local\com

***** [ Dateien ] *****

[-] Datei gelöscht : C:\END
[-] Datei gelöscht : C:\WINDOWS\SysWOW64\MyOSProtect.dll
[-] Datei gelöscht : C:\WINDOWS\SysWOW64\MyOSProtect.ini
[-] Datei gelöscht : C:\WINDOWS\SysWOW64\MyOSProtectOff.ini
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_amfclgbdpgndipgoegfpkkgobahigbcl_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_amfclgbdpgndipgoegfpkkgobahigbcl_0.localstorage-journal
[#] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ccncljhbalbbkkfgopogabimepmfkmff
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dmcecclamecbinmplcolhaljlclhbgah_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_majjphhgppkndjjkmhhnbgafooenebhd_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_majjphhgppkndjjkmhhnbgafooenebhd_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_majjphhgppkndjjkmhhnbgafooenebhd_0
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\majjphhgppkndjjkmhhnbgafooenebhd
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mphpbdjcljebbcnfopfngmfdackbbdgf_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\bprotector web data
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.pricepeep00.pricepeep.net_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.pricepeep00.pricepeep.net_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.re-markit00.re-markit.co_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.re-markit00.re-markit.co_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_freeradiocast.dl.myway.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_freeradiocast.dl.myway.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_freeradiocast.dl.tb.ask.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_freeradiocast.dl.tb.ask.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_land.pckeeper.software_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_land.pckeeper.software_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_nox-app-player.en.softonic.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_nox-app-player.en.softonic.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pconverter.dl.myway.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pconverter.dl.myway.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pconverter.dl.tb.ask.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pconverter.dl.tb.ask.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_primeshare.tv_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_primeshare.tv_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.emaildefendsearch.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.emaildefendsearch.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.socialmedianewtabsearch.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.socialmedianewtabsearch.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.coupontime00.coupontime.co_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.coupontime00.coupontime.co_0.localstorage-journal
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.movshare.net_0.localstorage
[-] Datei gelöscht : C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.movshare.net_0.localstorage-journal
[-] Datei gelöscht : C:\WINDOWS\SysNative\log\iSafeKrnlCall.log
[-] Datei gelöscht : C:\WINDOWS\SysNative\MyOSProtect64.dll
[-] Datei gelöscht : C:\WINDOWS\SysNative\drivers\iSafeKrnlBoot.sys

***** [ DLLs ] *****


***** [ WMI ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****

[-] Geplante Aufgabe gelöscht : ASP
[-] Geplante Aufgabe gelöscht : bench-sys
[-] Geplante Aufgabe gelöscht : MetaCrawler
[-] Geplante Aufgabe gelöscht : 6205d7fb-e736-4471-87e2-0b880e332552-4
[-] Geplante Aufgabe gelöscht : 6205d7fb-e736-4471-87e2-0b880e332552-7
[-] Geplante Aufgabe gelöscht : bench-sys
[-] Geplante Aufgabe gelöscht : c2045bfe-d753-4540-848f-589493f78a69-2
[-] Geplante Aufgabe gelöscht : c2045bfe-d753-4540-848f-589493f78a69-4
[-] Geplante Aufgabe gelöscht : Re-Markable Update
[-] Geplante Aufgabe gelöscht : Re-Markable_wd
[-] Geplante Aufgabe gelöscht : 6205d7fb-e736-4471-87e2-0b880e332552-4
[-] Geplante Aufgabe gelöscht : bench-sys
[-] Geplante Aufgabe gelöscht : c2045bfe-d753-4540-848f-589493f78a69-2
[-] Geplante Aufgabe gelöscht : c2045bfe-d753-4540-848f-589493f78a69-4
[-] Geplante Aufgabe gelöscht : {5E3CE618-F7BC-4455-84D2-8B62AE8B6A28}

***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
[-] Schlüssel gelöscht : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
[-] Schlüssel gelöscht : HKCU\Software\5c288debd6eea41
[-] Schlüssel gelöscht : HKLM\SOFTWARE\5c288debd6eea41
[-] Schlüssel gelöscht : HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Wert gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
[-] Wert gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
[-] Schlüssel gelöscht : HKCU\Software\FreeSoftToday
[-] Schlüssel gelöscht : HKCU\Software\InstalledBrowserExtensions
[-] Schlüssel gelöscht : HKCU\Software\LookThisUp
[-] Schlüssel gelöscht : HKCU\Software\OCS
[-] Schlüssel gelöscht : HKCU\Software\Optimizer Elite Max
[-] Schlüssel gelöscht : HKCU\Software\Reg\Clean
[-] Schlüssel gelöscht : HKCU\Software\StormWatch
[-] Schlüssel gelöscht : HKCU\Software\AppDataLow\Software\MediaPlayerplus
[-] Schlüssel gelöscht : HKCU\Software\AppDataLow\Software\Re-Markable
[-] Schlüssel gelöscht : HKCU\Software\AppDataLow\Software\simplytech
[-] Schlüssel gelöscht : HKCU\Software\AppDataLow\Software\suprasavings
[-] Schlüssel gelöscht : HKCU\Software\AppDataLow\Software\HQ-Proffesional
[-] Schlüssel gelöscht : HKLM\SOFTWARE\AdvertisingSupport
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Coupon Server
[-] Schlüssel gelöscht : HKLM\SOFTWARE\MediaPlayerplus
[-] Schlüssel gelöscht : HKLM\SOFTWARE\PCDRunner
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Reg\Clean
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Taronja
[-] Schlüssel gelöscht : HKLM\SOFTWARE\webssearchesSoftware
[-] Schlüssel gelöscht : HKLM\SOFTWARE\HQ-Proffesional
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DigitalSite
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{11D4FAA0-A577-4FA8-B24E-D24283D861D1}
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DMUninstaller
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaPlayerplus
[-] Schlüssel gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HQ-Proffesional
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\suprasavings
[-] Schlüssel gelöscht : HKU\.DEFAULT\Software\AppDataLow\Software\AskToolbar
[-] Schlüssel gelöscht : HKU\.DEFAULT\Software\AppDataLow\Software\MediaPlayerplus
[-] Schlüssel gelöscht : HKU\.DEFAULT\Software\AppDataLow\Software\Re-Markable
[-] Schlüssel gelöscht : HKU\.DEFAULT\Software\AppDataLow\Software\HQ-Proffesional
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-189922631-1767686969-1414721043-1001\Software\SweetIM
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main [Search Bar]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search [Default_Search_URL]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search [Search Bar]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\Search [Search Page]
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchURI []
[-] Daten wiederhergestellt : HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet Explorer\SearchUrl []
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [default_search_url]
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Bar]
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Page]
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl []
[-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchURI []
[-] Daten wiederhergestellt : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten wiederhergestellt : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Main [Search Bar]
[-] Daten wiederhergestellt : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Main [default_search_url]
[-] Daten wiederhergestellt : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
[-] Daten wiederhergestellt : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
[-] Daten wiederhergestellt : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Search [Search Bar]
[-] Daten wiederhergestellt : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Search [Search Page]
[-] Daten wiederhergestellt : HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\SearchUrl []
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\akamaihd.net
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\autos.trovit.de
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\cdncache-a.akamaihd.net
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\dealply.com
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\max-start.com
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\surfcanyon.com
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\trovit.de
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\Max Start Search
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
[-] Schlüssel gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Wpm

***** [ Internetbrowser ] *****

[-] [C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] gelöscht : fcfenmboojpjinhpgggodefccipikbpd

*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [20672 Bytes] - [31/07/2016 11:43:51]
C:\AdwCleaner\AdwCleaner[S1].txt - [26269 Bytes] - [31/07/2016 11:39:21]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [20820 Bytes] ##########
--- --- ---

cosinus 21.10.2016 16:00
Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)




Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

SimonDavid 21.10.2016 16:15
Die Logs sind zu Lange :(

SimonDavid 21.10.2016 16:22
Liste der Anhänge anzeigen (Anzahl: 1)
Anhang 79085

cosinus 21.10.2016 16:25
Bitte den Lesestoff richtig lesen...Logs sind dann entsprechend aufzuteilen

SimonDavid 21.10.2016 16:26
Anhang 79086

sorry sonst sind die Dateien zu größ bzw die Logs zu lange :(

cosinus 21.10.2016 16:53
Bitte mach das so wie im Lesestoff steht. Sonst wird die Auswertung unnötig erschwert!

SimonDavid 22.10.2016 08:14
Ok also hier jetzt der erste Teile der Logs von der Addition.txt Datei.

Code:
usätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 17-10-2016
durchgeführt von Simon David (21-10-2016 17:06:58)
Gestartet von C:\Users\Simon David\Desktop
Windows 10 Home Version 1607 (X64) (2016-10-16 20:41:18)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-189922631-1767686969-1414721043-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-189922631-1767686969-1414721043-503 - Limited - Disabled)
Gast (S-1-5-21-189922631-1767686969-1414721043-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-189922631-1767686969-1414721043-1003 - Limited - Enabled)
Simon David (S-1-5-21-189922631-1767686969-1414721043-1001 - Administrator - Enabled) => C:\Users\Simon David

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Emsisoft Anti-Malware (Disabled - Up to date) {701CB209-EBBC-AADC-11E6-DE73E7AF4C9D}
AS: Emsisoft Anti-Malware (Disabled - Up to date) {CB7D53ED-CD86-A552-2B56-E5019C280620}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

„Windows Live Essentials“ (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
„Windows Live Mail“ (x32 Version: 15.4.3502.0922 - „Microsoft Corporation“) Hidden
„Windows Live Messenger“ (x32 Version: 15.4.3538.0513 - „Microsoft Corporation“) Hidden
„Windows Live“ fotogalerija (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Adobe Flash Player 10 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 10.0.32.18 - Adobe Systems Incorporated)
Adobe Reader 9.2 - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-A92000000001}) (Version: 9.2.0 - Adobe Systems Incorporated)
Apple Application Support (32-Bit) (HKLM-x32\...\{FE5C2FAA-118D-4509-B51D-3F71CC9E1B3E}) (Version: 4.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{2937FD88-C9D6-4B82-B539-37CD0A572F42}) (Version: 4.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.22.54 - Avira Operations GmbH & Co. KG)
Avira Connect (HKLM-x32\...\{ee247a19-722f-4096-884b-47ec3b7ec396}) (Version: 1.2.73.15322 - Avira Operations GmbH & Co. KG)
Avira Connect (x32 Version: 1.2.73.15322 - Avira Operations GmbH & Co. KG) Hidden
Avira Phantom VPN (HKLM-x32\...\Avira Phantom VPN) (Version: 1.7.2.27131 - Avira Operations GmbH & Co. KG)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CyberLink Media Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.2227 - CyberLink Corp.)
CyberLink MediaShow (HKLM-x32\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 5.0.1130a - CyberLink Corp.)
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4813b - CyberLink Corp.)
CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.4207 - CyberLink Corp.)
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.3706.52 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.4417 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
Dropbox (HKU\S-1-5-21-189922631-1767686969-1414721043-1001\...\Dropbox) (Version: 12.4.22 - Dropbox, Inc.)
Easy Migration (HKLM-x32\...\{AD86049C-3D9C-43E1-BE73-643F57D83D50}) (Version: 1.0 - Samsung Electronics Co., Ltd.)
Easy Support Center 1.0 (HKLM-x32\...\{F687E657-F636-44DF-8125-9FEEA2C362F5}) (Version: 1.1.47 - Samsung)
E-POP (HKLM-x32\...\{F06DD8D9-9DC8-430C-835C-C9BF21E05CC1}) (Version: 1.0.1 - Samsung)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Glary Utilities 5.48 (HKLM-x32\...\Glary Utilities 5) (Version: 5.48.0.68 - Glarysoft Ltd)
Google Chrome (HKU\S-1-5-21-189922631-1767686969-1414721043-1001\...\Google Chrome) (Version: 53.0.2785.143 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Inkscape 0.91 (HKLM-x32\...\Inkscape) (Version: 0.91 - )
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35342 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.2.1410 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4242 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.1.209 - Intel Corporation)
Intel(R) WiDi (HKLM-x32\...\{93F34C5C-ACAA-48F3-9B26-70359A117F12}) (Version: 3.0.12.0 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (HKLM\...\{DF7756DD-656A-45C3-BA71-74673E8259A9}) (Version: 15.00.0000.0642 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
iTunes (HKLM\...\{A31C5565-90D9-4615-AE13-94D86C3836C7}) (Version: 12.3.3.17 - Apple Inc.)
Java(TM) 6 Update 43 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416043FF}) (Version: 6.0.430 - Oracle)
Java(TM) SE Development Kit 6 Update 43 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0160430}) (Version: 1.6.0.430 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
LOGO!Soft Comfort V7.0  (HKLM\...\LOGO!Soft Comfort V7.0 ) (Version: 7.0.0.0 - Siemens AG)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version:  - )
Microsoft Office 2007 Primary Interop Assemblies (HKLM-x32\...\{50120000-1105-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4763.1003 - Microsoft Corporation)
Microsoft Office Communicator 2007 R2 (HKLM-x32\...\{C69EC079-A7C8-445B-889F-EF66FC327457}) (Version: 3.5.6907.268 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft redistributable runtime DLLs VS2005 SP1(x86) (HKLM-x32\...\{CEC7A786-A9C8-4EF7-BB59-6518E3B3C878}) (Version: 8.0.50727.4053 - SAP)
Microsoft redistributable runtime DLLs VS2008 SP1(x86) (HKLM-x32\...\{A47A9101-6EB5-4314-BDA1-297880FBB908}) (Version: 9.0 - SAP AG)
Microsoft redistributable runtime DLLs VS2010 SP1 (x86) (HKLM-x32\...\{2385C070-EC26-4AB9-8718-E605C977C0ED}) (Version: 10.0.40219.1 - SAP)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{4fd02573-5f12-4ae4-8027-c63f8e1115af}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 49.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 49.0.2 (x86 de)) (Version: 49.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 49.0.2.6136 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Multimedia POP (HKLM-x32\...\{A86C7338-BE18-4770-AA25-138513D89B0D}) (Version: 1.1 - )
NVIDIA Grafiktreiber 353.84 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.84 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
OpenVPN 2.1.3 (HKLM-x32\...\OpenVPN) (Version: 2.1.3 - )
Oracle VM VirtualBox 5.0.10 (HKLM\...\{F6E922CF-068D-4AFC-8DBF-4636B84AF0A5}) (Version: 5.0.10 - Oracle Corporation)
PDF-XChange Editor (HKLM-x32\...\{432fd021-e5dc-49cc-95fb-779d69f492ca}) (Version: 5.5.308.1 - Tracker Software Products (Canada) Ltd.)
PDF-XChange Editor (Version: 5.5.308.1 - Tracker Software Products (Canada) Ltd.) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7543 - Realtek Semiconductor Corp.)
S Agent (Version: 1.1.58 - Samsung Electronics Co., Ltd.) Hidden
Samsung Settings (HKLM-x32\...\{3BB58176-B3A7-47FD-9F18-C3576431D193}) (Version: 2.2.0 - Samsung Electronics CO., LTD.)
Samsung Update (HKLM-x32\...\{0BC4AC38-E7C5-4394-A6BD-32CDCE2C8B9D}) (Version: 2.2.36 - Samsung Electronics Co., Ltd.)
SAP GUI for Windows 7.30 (HKLM-x32\...\SAPGUI710) (Version: 7.30 Compilation 2 - SAP)
SAPSetup Automatic Workstation Update Service (HKLM-x32\...\SAP_WUS) (Version:  - SAP AG)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.3.0.9150 - Microsoft Corporation)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Software Launcher (HKLM-x32\...\{B750B5C2-CC17-4967-905B-29F4EB986131}) (Version: 1.0.2 - Samsung)
Spelling Dictionaries Support For Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
Spotify (HKU\S-1-5-21-189922631-1767686969-1414721043-1001\...\Spotify) (Version: 1.0.33.106.g60b5d1f0 - Spotify AB)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.40.0 - Synaptics Incorporated)
Tecnomatix Plant Simulation 11 (HKLM-x32\...\{2CA145FD-7F2D-4267-8F9E-137A9801BC69}) (Version: 11.0.3 - Siemens PLM Software Inc.)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
User Guide (HKLM-x32\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.1 - )
VLC media player 2.0.4 (HKLM-x32\...\VLC media player) (Version: 2.0.4 - VideoLAN)
Windows Driver Package - BigNox Corporation (VBoxUSB) USB  (09/16/2015 4.3.12) (HKLM\...\76B144D15273552931249392EDB13C0BBD52C84E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Driver Package - BigNox Corporation VBoxUSBMon System  (09/16/2015 4.3.12) (HKLM\...\39F54A37125643D2E1E90FA7D81F36ACC9441510) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Driver Package - BigNox Corporation XQHDrv System  (09/16/2015 4.3.12) (HKLM\...\0147813640F7AF69F569581EE672B6BE1E71798E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Live 程式集 (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows XP Mode (HKLM\...\{1374CC63-B520-4f3f-98E8-E9020BF01CFF}) (Version: 1.3.7600.16422 - Microsoft Corporation)
Windows-Treiberpaket - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass  (08/23/2013 6.2.8400.4218) (HKLM\...\26BFE384C802803107F583AE1A739E4FEB56134B) (Version: 08/23/2013 6.2.8400.4218 - Samsung Electronics Co. Ltd.)
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version:  - )
Xerox PhotoCafe (HKLM-x32\...\Xerox PhotoCafe) (Version: 1.0.0.6162 - Xerox)
Zoom (HKU\S-1-5-21-189922631-1767686969-1414721043-1001\...\ZoomUMX) (Version: 3.5 - Zoom Video Communications, Inc.)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{38216570-5DB1-45F8-A344-B0C4E252B14B}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.26.7\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => Keine Datei

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {015307F3-E72D-4F93-909E-F0880627E39C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {04484EA7-E2FA-4C89-8474-EB0EB18A7387} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core1d12e6e9879441d => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {154B9669-310D-43DE-BC74-B5F3282FF228} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {1B911769-259D-4D0D-A77D-9E71AC42251D} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1C750EE0-5BFE-408A-A999-93F655154CB8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {22F2EBEB-0A87-4A01-990C-BBAA81DE241B} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {251F2D66-9355-45A1-A099-ED7C9043173C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {2572926B-EBE9-4804-8320-6423DC1CE9E4} - System32\Tasks\Avira System Speedup Tray => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe [2016-10-18] (Avira Operations GmbH & Co. KG)
Task: {2593ABA1-0C07-430F-A3B9-641EC003E553} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-11-01] (Microsoft Corporation)
Task: {2881AB42-528F-4BD7-81CD-28BA9F9D8B61} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {2957CC2A-68FA-4D29-BD66-C71287187311} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {2ACAD73D-22A1-4C63-A0A4-D2B2D4A4AC0A} - System32\Tasks\Xerox PhotoCafe Communicator => C:\ProgramData\Xerox PhotoCafe\MessageCheck.exe [2011-10-26] ()
Task: {32295609-3691-47ED-84C4-BABD3E9F8001} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {3268F80F-EDA1-4529-B7B3-2B697292AEEC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {37092E36-A8AB-49BA-808A-A119F209868F} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {480308F2-08C5-4538-98CB-5BB2C2E0076A} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-18] (Adobe Systems Incorporated)
Task: {4C24EBFE-2390-4110-9F11-C76FBECD2382} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {4D328541-C819-4278-BF50-8FFE5EF143C6} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {527E24E5-07A9-4069-920C-2119DD37E72E} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core => C:\Users\Simon David\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)
Task: {52C301DC-F26E-4A76-ADC4-74A8A7B1262F} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {53B1C0B2-F6AD-4100-BFC0-0F7ADCBD39ED} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {53C68994-2198-4975-B747-69D54C2D51FD} - System32\Tasks\LaunchSettings => C:\Program Files (x86)\Samsung\Settings\Settings.exe [2015-06-24] ()
Task: {56C44044-C792-485F-91FF-B7E5FC4CFC84} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
Task: {56CEDDC4-43F2-4D8E-863A-0F4D16E824F4} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {5A6B9439-0178-4339-9EFE-0F7604DFADDA} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5DB2D0AE-B8D8-4B84-BA54-7342D645048A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA1d12e6e98a33aea => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {6BD33652-27F8-4ABA-BFB7-961246B22B69} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {6CE69357-A236-493C-B638-D3CFBF0B8DA2} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6E98B588-90CC-48A6-8B58-599AAD1272A5} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [2016-04-01] (Glarysoft Ltd)
Task: {7058D631-AF91-46FD-8C52-58A3B3D18FFF} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7479C151-9FAD-4AC8-A651-06B0AC54DEC2} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {74FC3B4D-CB8C-40F5-9B3E-0B9AB859133A} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {7FF42982-43AF-4A9B-A1D7-89573FE52AE1} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-07] (Microsoft Corporation)
Task: {865F321A-4DB7-4C3E-B252-5B77ED92B1F5} - System32\Tasks\SamsungSupportCenter => C:\Program Files (x86)\Samsung\Easy Support Center\SSCKbdHk.exe
Task: {89A657EA-9465-43C8-AA20-74603066936B} - System32\Tasks\GoogleUpdateTaskMachineUA1d12eb384cf5c23 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {8BFEE2C6-348C-479B-8283-47541EFD8BFF} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {9A17F065-9771-4632-9EA3-D2E0D12B1821} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {9CCB683A-19C5-4F9F-95AB-094EF1DE7656} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2016-02-24] (Samsung Electronics Co., Ltd.)
Task: {A175A859-CBFE-47FA-914D-7F3EA5E9EA34} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A68BB2A1-A30D-4357-BE2E-33753A016E99} - System32\Tasks\SettingsHibernateMonitor => C:\Program Files (x86)\Samsung\Settings\SettingsHibernateMonitor.exe [2015-06-24] (Samsung Electronics CO., LTD.)
Task: {A73CB133-736C-4654-8929-5F07A2BA5041} - System32\Tasks\{23693454-5605-4AD3-89CF-1663F5C5BCE8} => pcalua.exe -a "C:\Users\Simon David\Downloads\KM_Extended_Dri...2.0.0414-DE.exe" -d "C:\Users\Simon David\Downloads"
Task: {B3720FE6-94C8-4683-9E60-19DB1750E854} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {B6945509-38F2-4C42-AAB2-3BDBB688FBEF} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {B9BC9E63-94F9-43DC-B483-4FD7F489123D} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-08-17] (CyberLink)
Task: {B9DCAB9B-5FC9-47FD-B868-D9739197891F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {BC36E4D2-7394-4384-92A0-260FCD041EFA} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {BE09311F-C561-4FA4-B0C2-1AC75BE485A9} - System32\Tasks\SettingsEventHandlerMonitor => C:\Program Files (x86)\Samsung\Settings\CmdServer\RSSettingEventHandler.exe [2015-06-24] (Samsung Electronics CO., LTD.)
Task: {BEFAC709-9C5F-4DBA-A6A1-9DC936F13205} - System32\Tasks\{72632B04-062F-4F28-A874-2060D568F10B} => pcalua.exe -a D:\SETUP.EXE -d D:\
Task: {C6C78EB8-44C3-4545-AF48-E82A5153AED8} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-07] (Microsoft Corporation)
Task: {C7156127-0BB7-41E5-8904-E20CF304D3B4} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {C8F0D06D-6116-4837-B841-B29D794BA19F} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-08-26] (Microsoft Corporation)
Task: {C95D9F4F-C80F-4165-B705-8577A80EA212} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {CC0FF2A1-4767-45CA-8955-5568496031B9} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {CC3D9102-7427-4590-9DB0-2110570B2C80} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {CD928DDE-3ACD-49FC-A035-D27641D221DB} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe [2016-04-01] (Glarysoft Ltd)
Task: {CE2913B8-F4FA-4AE6-8091-378E49AB974C} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {D9945D20-C99A-4338-98CB-54B2353A1504} - System32\Tasks\GoogleUpdateTaskMachineCore1d12eb38493d8e4 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {DAFA2957-F27A-4ABB-BFD6-D43A2AC09616} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {DE506BBB-A5C2-4632-B610-A48FA61EAD80} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {E32A351C-827C-44F2-B9E5-2D58B250C0D3} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA => C:\Users\Simon David\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)
Task: {E3FC424A-D50D-40A1-A2E7-222A05B44868} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {E9E275E1-0DC4-4E8D-8A3D-B6EDD2DA7EDD} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {E9F53A9D-435C-4F7C-BDE7-766D58892EEF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {EF7343DE-4375-49A3-8492-31255CA3BBF7} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F1512E10-BDE2-4450-9B44-B8B205D60D4E} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F8AB40FC-8C63-45C1-B7BA-BA60938A5202} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FED68B58-2AC6-4594-B955-C4B87170DDB1} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core.job => C:\Users\Simon David\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA.job => C:\Users\Simon David\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d12eb38493d8e4.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d12eb384cf5c23.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core.job => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core1d12e6e9879441d.job => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA.job => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA1d12e6e98a33aea.job => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\Xerox PhotoCafe Communicator.job => C:\ProgramData\Xerox PhotoCafe\MessageCheck.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
2. Teile der Logs von der Addition.txt Datei
Code:
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-10-16 22:24 - 2016-08-01 14:54 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-03-18 22:56 - 2016-03-18 22:56 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-03-18 22:56 - 2016-03-18 22:56 - 01329936 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-02-25 18:23 - 2015-10-07 20:28 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2012-03-12 14:36 - 2012-02-08 04:03 - 00128280 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
2012-03-12 15:47 - 2009-11-30 17:21 - 00244904 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-10-18 10:08 - 2016-10-18 10:08 - 01864384 _____ () C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\amd64\ClientTelemetry.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00130048 _____ () C:\WINDOWS\SYSTEM32\CHARTV.dll
2013-07-11 22:31 - 2008-06-20 00:41 - 00062464 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-10-19 21:31 - 2016-10-19 21:32 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-10-19 21:31 - 2016-10-19 21:32 - 00178176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-10-19 21:31 - 2016-10-19 21:32 - 35253760 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 09760256 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01401344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02424832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-06-24 16:05 - 2015-06-24 16:05 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll
2016-10-03 22:22 - 2016-09-25 05:47 - 01805416 _____ () C:\Users\Simon David\AppData\Local\Google\Chrome\Application\53.0.2785.143\libglesv2.dll
2016-10-03 22:22 - 2016-09-25 05:47 - 00093288 _____ () C:\Users\Simon David\AppData\Local\Google\Chrome\Application\53.0.2785.143\libegl.dll
2016-10-18 10:08 - 2016-10-18 10:08 - 01383616 _____ () C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\ClientTelemetry.dll
2016-10-18 10:08 - 2016-10-18 10:08 - 00118976 _____ () C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\FileSyncViews.dll
2016-02-19 16:38 - 2016-09-22 03:44 - 00035792 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2016-10-15 12:57 - 2016-09-22 03:44 - 00145864 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2016-10-15 12:57 - 2016-09-22 03:45 - 00019408 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\faulthandler.pyd
2016-10-15 12:57 - 2016-09-22 03:44 - 00116688 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2016-02-19 16:38 - 2016-09-22 03:44 - 00100296 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2016-02-19 16:38 - 2016-09-22 03:44 - 00018888 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\select.pyd
2016-02-19 16:38 - 2016-10-10 20:35 - 00019760 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2016-02-19 16:38 - 2016-09-22 03:44 - 00694224 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 00020816 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2016-02-19 16:38 - 2016-09-22 03:45 - 00123856 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 01682760 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 00020808 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2016-02-19 16:38 - 2016-09-22 03:46 - 00105928 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\win32api.pyd
2016-08-06 07:49 - 2016-10-10 20:35 - 00021312 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 00052024 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 00038696 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\fastpath.pyd
2016-10-15 12:57 - 2016-09-22 03:44 - 00392144 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2016-10-15 12:57 - 2016-09-22 03:46 - 00020936 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2016-02-19 16:38 - 2016-09-22 03:46 - 00024528 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\win32event.pyd
2016-02-19 16:38 - 2016-09-22 03:46 - 00116176 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\win32security.pyd
2016-02-19 16:38 - 2016-10-10 20:35 - 00381752 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2016-02-19 16:38 - 2016-09-22 03:46 - 00124880 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\win32file.pyd
2016-08-06 07:49 - 2016-10-10 20:35 - 00025424 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd
2016-02-19 16:38 - 2016-09-22 03:46 - 00024016 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2016-02-19 16:38 - 2016-09-22 03:46 - 00175560 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\win32gui.pyd
2016-02-19 16:38 - 2016-09-22 03:46 - 00030160 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2016-02-19 16:38 - 2016-09-22 03:46 - 00043472 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\win32process.pyd
2016-02-19 16:38 - 2016-09-22 03:46 - 00048592 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\win32service.pyd
2016-02-19 16:38 - 2016-09-22 03:46 - 00057808 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\win32evtlog.pyd
2016-02-19 16:38 - 2016-09-22 03:46 - 00024016 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\win32profile.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 00246592 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 00026456 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd
2016-08-06 07:49 - 2016-09-22 03:45 - 00241104 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\_jpegtran.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 00020280 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2016-02-19 16:38 - 2016-09-22 03:46 - 00028616 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\win32ts.pyd
2016-02-19 16:38 - 2016-10-10 20:35 - 00023376 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2016-02-19 16:38 - 2016-10-10 20:35 - 00020800 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-02-19 16:38 - 2016-10-10 20:35 - 00019776 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\winffi.winerror._winffi_winerror.pyd
2016-02-19 16:38 - 2016-10-10 20:35 - 00020800 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\winffi.wininet._winffi_wininet.pyd
2016-02-19 16:38 - 2016-09-22 03:46 - 00350152 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2016-02-19 16:38 - 2016-10-10 20:35 - 00022352 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 00024392 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2016-10-15 12:57 - 2016-09-22 03:42 - 00036296 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\librsync.dll
2016-10-15 12:57 - 2016-10-10 20:35 - 00031568 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\enterprise_data.compiled._enterprise_data.pyd
2016-10-15 12:57 - 2016-10-10 20:30 - 00293392 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\EnterpriseDataAdapter.dll
2016-10-15 12:57 - 2016-10-10 20:35 - 00084280 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2016-10-15 12:57 - 2016-10-10 20:35 - 01826096 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2016-02-19 16:38 - 2016-09-22 03:45 - 00083912 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\sip.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 00531248 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 03928880 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 01972528 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 00133424 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 00224056 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 00207672 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2016-08-06 07:49 - 2016-10-10 20:35 - 00020288 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\winffi.user32._winffi_user32.pyd
2016-10-15 12:57 - 2016-09-22 03:49 - 00017864 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\libEGL.dll
2016-10-15 12:57 - 2016-09-22 03:49 - 01631184 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2016-02-19 16:38 - 2016-09-22 03:46 - 00060880 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\win32print.pyd
2016-04-15 21:28 - 2016-10-10 20:35 - 00037192 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\windisplaytoast.compiled._DisplayToast.pyd
2016-08-06 07:49 - 2016-10-10 20:35 - 00024904 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 00546096 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 00357680 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 00042808 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd
2016-10-15 12:57 - 2016-10-10 20:35 - 00168760 _____ () C:\Users\Simon David\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd
2009-11-02 07:20 - 2009-11-02 07:20 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 07:23 - 2009-11-02 07:23 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2016-04-01 08:47 - 2016-04-01 08:47 - 00086992 _____ () C:\Program Files (x86)\Glary Utilities 5\zlib1.dll
2012-03-12 14:36 - 2012-02-08 03:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2014-10-08 22:53 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Simon David\AppData\Local\Microsoft\Windows\Themes\DE-wp3.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{41584185-7C8F-4032-88AD-F22F5C968CD8}] => (Allow) C:\Program Files (x86)\Microsoft Office Communicator\communicator.exe
FirewallRules: [{0759D465-233C-4A14-BBED-6F41168E5DCA}] => (Allow) C:\Program Files (x86)\Microsoft Office Communicator\communicator.exe
FirewallRules: [UDP Query User{71DF6A63-5F7E-4392-89DD-B2FB265865FD}C:\users\simon david\appdata\local\pokemon\app-0.1.6\pokemon go live map.exe] => (Allow) C:\users\simon david\appdata\local\pokemon\app-0.1.6\pokemon go live map.exe
FirewallRules: [TCP Query User{C867007B-74BC-4D98-BD13-4B7D856256BA}C:\users\simon david\appdata\local\pokemon\app-0.1.6\pokemon go live map.exe] => (Allow) C:\users\simon david\appdata\local\pokemon\app-0.1.6\pokemon go live map.exe
FirewallRules: [UDP Query User{917396F1-AEC5-4F3F-8D8D-C451D1F551F1}C:\users\simon david\appdata\local\pokemon\app-0.1.6\pokemon go live map.exe] => (Allow) C:\users\simon david\appdata\local\pokemon\app-0.1.6\pokemon go live map.exe
FirewallRules: [TCP Query User{A062DE86-B585-4160-98E1-27C0D2BA1EEE}C:\users\simon david\appdata\local\pokemon\app-0.1.6\pokemon go live map.exe] => (Allow) C:\users\simon david\appdata\local\pokemon\app-0.1.6\pokemon go live map.exe
FirewallRules: [{583AFBC9-328C-4726-B51F-E4F373F60F6D}] => (Allow) C:\Program Files\Bignox\BigNoxVM\RTNoxVMHandle.exe
FirewallRules: [{0959E8FA-3841-49B2-85D6-6C6FB51538D1}] => (Allow) C:\Users\Simon David\AppData\Roaming\Nox\bin\Nox.exe
FirewallRules: [UDP Query User{EA4C96C1-B5C7-4B4F-AE3A-5B1A509C3074}C:\users\simon david\downloads\pokemongomap-07win\pokemon go live map.exe] => (Allow) C:\users\simon david\downloads\pokemongomap-07win\pokemon go live map.exe
FirewallRules: [TCP Query User{FF9BC0EA-FCAF-4311-BACB-5E8942F7888D}C:\users\simon david\downloads\pokemongomap-07win\pokemon go live map.exe] => (Allow) C:\users\simon david\downloads\pokemongomap-07win\pokemon go live map.exe
FirewallRules: [{C737FA2F-6800-4477-B68E-C042DB4FB191}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{83FFFC1B-E92C-494B-A8DB-CB5A1F0FC28A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{DB5D39D1-DC38-4F9F-82D3-0B10C2E051AA}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{7E6836E1-8989-4DE6-93FE-B8950B83D389}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{1BE9B972-DAE0-48CD-A9B6-9CEB98759624}] => (Allow) LPort=2869
FirewallRules: [{B13CA439-8EF8-4D53-8443-28A12EC11B63}] => (Allow) LPort=1900
FirewallRules: [{63A253C7-D068-4B36-B4A1-132D085EC016}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{61D3400D-D686-436D-95EE-F9EA2FE47995}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{7EC42911-FCF2-471B-8D1F-310FE1787C83}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector\PDR8.EXE
FirewallRules: [{468E14D5-E97C-4CF1-B90B-9EB09BD7F4E0}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{DFCA779A-7277-4BBC-8CC7-E89F79E66F3E}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{162F3FBF-69F0-46D0-B1C0-C53AC5351300}] => (Allow) C:\Program Files (x86)\Intel Corporation\Intel WiDi\WiDiApp.exe
FirewallRules: [{A936D335-1B67-4292-A718-FE48C461F285}] => (Allow) C:\Users\Simon David\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{D0903221-044C-4898-9D98-1E0AF7DDA922}] => (Allow) C:\Users\Simon David\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{21C24155-626D-45CA-BB30-72F8BDAF8A2D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{060C938F-31BD-401A-9D2E-FF6AC864F7CE}] => (Allow) C:\Users\Simon David\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{F02CB34B-C188-47C7-A5A1-78D2D0618BE4}] => (Allow) C:\Users\Simon David\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{FB1B152E-E4DA-43EB-884E-F09C9149833B}] => (Allow) C:\Users\Simon David\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{FB95B892-BE94-4492-AFB5-CFC6B9EDB100}] => (Allow) C:\Users\Simon David\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{C8C62779-4AA6-4203-ABC8-B3F44D12D806}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{C65984E7-6523-40FB-A829-BEFEAD6D3FF3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{23904403-5997-4E29-981F-5037FEEACD41}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{8CBFCDBE-A3CF-4E47-8DA6-2BCC6F13511F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{0F2DB3EB-06AF-461F-A158-4F95EECF539B}C:\program files (x86)\connectify\connectify.exe] => (Allow) C:\program files (x86)\connectify\connectify.exe
FirewallRules: [UDP Query User{2A49F2A6-97F8-47F2-9C20-B182BABC7F15}C:\program files (x86)\connectify\connectify.exe] => (Allow) C:\program files (x86)\connectify\connectify.exe
FirewallRules: [TCP Query User{F68D3169-273B-45E2-8D62-CF48A29E346A}C:\users\simon david\desktop\myphoneexplorer portable\myphoneexplorer portable.exe] => (Allow) C:\users\simon david\desktop\myphoneexplorer portable\myphoneexplorer portable.exe
FirewallRules: [UDP Query User{80E0860D-D90C-4B7C-A0A6-E493EA5767D0}C:\users\simon david\desktop\myphoneexplorer portable\myphoneexplorer portable.exe] => (Allow) C:\users\simon david\desktop\myphoneexplorer portable\myphoneexplorer portable.exe
FirewallRules: [{D21905E0-277E-4E94-8C9A-8BC2588E2E76}] => (Block) C:\users\simon david\desktop\myphoneexplorer portable\myphoneexplorer portable.exe
FirewallRules: [{9DAA8CEA-E903-4540-8E2F-63C479D9F508}] => (Block) C:\users\simon david\desktop\myphoneexplorer portable\myphoneexplorer portable.exe
FirewallRules: [{31211C0A-59EC-4425-A579-CA8807A8FAF5}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe
FirewallRules: [{4F63E609-375F-4F50-8380-C42276253B8F}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe
FirewallRules: [{EFEA9389-B3AF-4CE3-9C93-D61A735699B3}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe
FirewallRules: [{75123A39-29B1-427F-AD78-13531B4C98B5}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe
FirewallRules: [{6BF5D988-AD32-42FB-BA74-51DDD41EAA1C}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe
FirewallRules: [{9D1BCF73-1A05-43B2-8EBA-BFC684EF4F1F}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe
FirewallRules: [TCP Query User{DB22A599-4EED-477F-8834-9F0E8EB99440}C:\users\simon david\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\simon david\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{A06B27D3-D2CF-4190-B1C1-34BF91C2FDB1}C:\users\simon david\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\simon david\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{587F5181-404C-4931-B7F1-D539634C99A4}C:\program files\java\jre6\bin\java.exe] => (Allow) C:\program files\java\jre6\bin\java.exe
FirewallRules: [UDP Query User{3E6FB316-8916-4843-9BCA-4E5333347D56}C:\program files\java\jre6\bin\java.exe] => (Allow) C:\program files\java\jre6\bin\java.exe
FirewallRules: [TCP Query User{5A94E2C9-1F8E-4015-BD2D-7CE5EB51D896}C:\program files\java\jdk1.6.0_43\bin\java.exe] => (Allow) C:\program files\java\jdk1.6.0_43\bin\java.exe
FirewallRules: [UDP Query User{259F1270-EBA7-4F47-8A2A-5B3BDC165172}C:\program files\java\jdk1.6.0_43\bin\java.exe] => (Allow) C:\program files\java\jdk1.6.0_43\bin\java.exe
FirewallRules: [{B370A6B3-D4BD-4CF6-8169-63E0687E4024}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{26D76EBF-904E-4974-ACCC-EF0825B3FF35}] => (Allow) C:\Users\Simon David\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [TCP Query User{545F6F21-46CF-496B-96B6-23C70826ED76}C:\program files (x86)\microsoft games\age of empires ii\empires2.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\empires2.exe
FirewallRules: [UDP Query User{8A688177-2B16-4686-9D96-D68AAFDF7B97}C:\program files (x86)\microsoft games\age of empires ii\empires2.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\empires2.exe
FirewallRules: [TCP Query User{1A26F45B-5023-4DE5-BE0C-474EF4698D58}C:\program files (x86)\microsoft games\age of empires ii\empires2.exe] => (Block) C:\program files (x86)\microsoft games\age of empires ii\empires2.exe
FirewallRules: [UDP Query User{3D037E30-0459-4916-ADFE-2D8335CB7669}C:\program files (x86)\microsoft games\age of empires ii\empires2.exe] => (Block) C:\program files (x86)\microsoft games\age of empires ii\empires2.exe
FirewallRules: [{92974A54-C7FD-4699-92CC-37C7E55E6E05}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6B083DDA-3936-4206-8B2A-E82FBDA12417}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0A6C794E-2819-4775-A7B6-FE51BE93BDD2}] => (Allow) C:\Users\Simon David\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{3E708D5C-B0C2-4781-8416-0751B3049104}] => (Allow) C:\Users\Simon David\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{7DEDDE40-4DDC-4AB9-906C-4682B85E394C}] => (Allow) C:\Users\Simon David\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{8869C97C-671C-4C44-BBA1-43008DB8F2D4}] => (Allow) C:\Users\Simon David\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{D5CFC514-13F8-4DAA-8CA0-A7BCDD16264E}] => (Allow) C:\Users\Simon David\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{E0F729D7-C9CE-42AD-89C4-D7F0A74E9E52}] => (Allow) C:\Users\Simon David\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{769A43FC-3287-49C7-83A9-649F5296787A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{C11E2C35-FAEA-4500-B966-216BF4558D8C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{35927454-F380-4D93-A4B6-F9FBE2CABC99}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{30CD6974-00C6-4DB7-9D76-C06C10C71C79}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{8E6C4110-7924-43FB-88BD-FEA578E28879}] => (Allow) C:\Program Files\iTunes\iTunes.exe

==================== Wiederherstellungspunkte =========================

18-10-2016 10:13:52 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (10/21/2016 03:56:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3125

Error: (10/21/2016 03:56:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3125

Error: (10/21/2016 03:56:01 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (10/21/2016 03:56:00 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2079

Error: (10/21/2016 03:56:00 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2079

Error: (10/21/2016 03:56:00 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (10/21/2016 03:55:59 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1063

Error: (10/21/2016 03:55:59 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1063

Error: (10/21/2016 03:55:59 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (10/21/2016 12:31:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3297


Systemfehler:
=============
Error: (10/21/2016 12:31:54 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.2.124
registriert werden. Der Computer mit IP-Adresse 192.168.2.1 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (10/21/2016 10:30:35 AM) (Source: DCOM) (EventID: 10016) (User: SimonDavid-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "SimonDavid-PC\Simon David" (SID: S-1-5-21-189922631-1767686969-1414721043-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{9E175B6D-F52A-11D8-B9A5-505054503030}
 und der APPID
{9E175B9C-F52A-11D8-B9A5-505054503030}
 im Anwendungscontainer "Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe" (SID: S-1-15-2-3624051433-2125758914-1423191267-1740899205-1073925389-3782572162-737981194) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (10/19/2016 09:25:17 PM) (Source: bowser) (EventID: 8016) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "EASYBOX" zum Namen "SIMONDAVID-PC" auf Transport "NetBT_Tcpip_{3BE798E2-6416-42A2-BAEB-49D88E37B506}". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.

Error: (10/19/2016 09:25:13 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (10/19/2016 09:25:12 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: NT-AUTORITÄT)
Description: 0x8000002a69\??\C:\Users\Simon David\AppData\Local\Microsoft\Windows\UsrClass.dat

Error: (10/19/2016 09:25:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SWUpdateService" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.

Error: (10/19/2016 09:25:09 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (10/19/2016 09:25:00 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎18.‎10.‎2016 um 22:20:56 unerwartet heruntergefahren.

Error: (10/18/2016 10:23:21 AM) (Source: DCOM) (EventID: 10016) (User: SimonDavid-PC)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "SimonDavid-PC\Simon David" (SID: S-1-5-21-189922631-1767686969-1414721043-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (10/18/2016 10:06:26 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.


CodeIntegrity:
===================================
  Date: 2016-10-20 22:12:04.957
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-10-20 22:12:04.907
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-10-20 22:12:04.841
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-10-20 22:12:04.727
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-10-20 22:12:04.706
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-10-20 22:12:04.685
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-10-20 22:12:03.078
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-10-20 22:12:02.791
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-10-20 22:02:33.905
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-10-20 22:02:33.863
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i7-3610QM CPU @ 2.30GHz
Prozentuale Nutzung des RAM: 67%
Installierter physikalischer RAM: 8089.38 MB
Verfügbarer physikalischer RAM: 2632.56 MB
Summe virtueller Speicher: 16281.38 MB
Verfügbarer virtueller Speicher: 9502.62 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:223.02 GB) (Free:75.66 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 223.6 GB) (Disk ID: 16EE8AA0)
Partition 1: (Active) - (Size=99 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=463 MB) - (Type=27)

==================== Ende von Addition.txt ============================

SimonDavid 22.10.2016 08:16
1. Teil FRST.txt Datei.
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 17-10-2016
durchgeführt von Simon David (Administrator) auf SIMONDAVID-PC (21-10-2016 17:05:27)
Gestartet von C:\Users\Simon David\Desktop
Geladene Profile: Simon David (Verfügbare Profile: Simon David & DefaultAppPool)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\SettingsLauncher.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\SettingsCmdServer.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\SettingsEventHandler.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Users\Simon David\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Simon David\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Simon David\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Simon David\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Simon David\AppData\Local\Google\Chrome\Application\chrome.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Dropbox, Inc.) C:\Users\Simon David\AppData\Local\Dropbox\Update\DropboxUpdate.exe
(Google Inc.) C:\Users\Simon David\AppData\Local\Google\Chrome\Application\chrome.exe
(Spotify Ltd) C:\Users\Simon David\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Dropbox, Inc.) C:\Users\Simon David\AppData\Roaming\Dropbox\bin\Dropbox.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office Communicator\communicator.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(SAP AG) C:\Program Files (x86)\SAP\SapSetup\Setup\Updater\NwSapAutoWorkstationUpdateService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Google Inc.) C:\Users\Simon David\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avcenter.exe
(Google Inc.) C:\Users\Simon David\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Simon David\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2867984 2012-01-05] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040296 2015-08-28] (Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176952 2016-03-19] (Apple Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1795888 2015-08-08] (NVIDIA Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [935288 2009-09-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-10-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [67384 2016-03-18] (Apple Inc.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2011-09-28] (cyberlink)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-11-02] (CyberLink)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [NeroFilterCheck] => C:\windows\SysWOW64\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2011-03-30] (CyberLink Corp.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-04] (Intel Corporation)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [210432 2016-07-05] (Geek Software GmbH)
HKLM-x32\...\Run: [Communicator] => C:\Program Files (x86)\Microsoft Office Communicator\communicator.exe [5164712 2013-04-10] (Microsoft Corporation)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [61648 2016-09-26] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [917584 2016-09-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [18544 2016-10-18] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-189922631-1767686969-1414721043-1001\...\Run: [Google Update] => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-01] (Google Inc.)
HKU\S-1-5-21-189922631-1767686969-1414721043-1001\...\Run: [Dropbox Update] => C:\Users\Simon David\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-18] (Dropbox, Inc.)
HKU\S-1-5-21-189922631-1767686969-1414721043-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [43984 2016-04-01] (Glarysoft Ltd)
HKU\S-1-5-21-189922631-1767686969-1414721043-1001\...\Run: [Spotify Web Helper] => C:\Users\Simon David\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1554032 2016-07-15] (Spotify Ltd)
HKU\S-1-5-21-189922631-1767686969-1414721043-1001\...\RunOnce: [FlashPlayerUpdate] => C:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\amd64\FileSyncShell64.dll [2016-10-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\amd64\FileSyncShell64.dll [2016-10-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\amd64\FileSyncShell64.dll [2016-10-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\FileSyncShell.dll [2016-10-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\FileSyncShell.dll [2016-10-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\FileSyncShell.dll [2016-10-18] (Microsoft Corporation)
Startup: C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-10-15]
ShortcutTarget: Dropbox.lnk -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Outlook 2013.lnk [2015-02-25]
ShortcutTarget: Outlook 2013.lnk -> C:\Program Files\Microsoft Office 15\root\office15\OUTLOOK.EXE (Microsoft Corporation)
GroupPolicy: Beschränkung - Chrome <======= ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
CHR HKU\S-1-5-21-189922631-1767686969-1414721043-1001\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{3be798e2-6416-42a2-baeb-49d88e37b506}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{72c27b5a-e0dc-4c8e-beb7-dbe2250fd2ea}: [DhcpNameServer] 139.7.30.126 139.7.30.125
Tcpip\..\Interfaces\{89c8e9c8-cdc0-451b-88f1-31528988f25d}: [NameServer] 131.188.24.131
Tcpip\..\Interfaces\{a599e370-1cca-4d19-b1a7-ce727e2a7ad3}: [DhcpNameServer] 192.168.0.1 127.0.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=about:blank
HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://www.msn.com/de-de/?pc=UP97&ocid=UP97DHP
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-189922631-1767686969-1414721043-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Kein Name -> {11111111-1111-1111-1111-110511311170} -> Keine Datei
BHO: Kein Name -> {11111111-1111-1111-1111-110511421146} -> Keine Datei
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-09-29] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll [2014-10-07] (Sun Microsystems, Inc.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-11-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2014-10-07] (Sun Microsystems, Inc.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27] (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-03-20] (Microsoft Corporation)
Handler-x32: saphtmlp - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - c:\program files (x86)\sap\frontend\sapgui\saphtmlp.dll [2013-07-19] (SAP, Walldorf)
Handler-x32: sapr3 - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - c:\program files (x86)\sap\frontend\sapgui\saphtmlp.dll [2013-07-19] (SAP, Walldorf)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: fpqwpvzx.default
FF ProfilePath: C:\Users\Simon David\AppData\Roaming\Mozilla\Firefox\Profiles\fpqwpvzx.default [2016-10-21]
FF Extension: (Kein Name) - C:\Users\Simon David\AppData\Roaming\Mozilla\Firefox\Profiles\fpqwpvzx.default\Extensions\abs@avira.com [2016-10-21]
FF Plugin: @java.com/DTPlugin,version=1.6.0_43 -> C:\windows\system32\npdeployJava1.dll [2014-10-07] (Sun Microsystems, Inc.)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll [2014-10-07] (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2014-06-04] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32.dll [Keine Datei]
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2016-03-08] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-03-20] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2014-06-04] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-10-15] (VideoLAN)
FF Plugin HKU\S-1-5-21-189922631-1767686969-1414721043-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-189922631-1767686969-1414721043-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-189922631-1767686969-1414721043-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2014-06-04] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-189922631-1767686969-1414721043-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\Simon David\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2016-05-09] (Zoom Video Communications, Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://google.de/"
CHR Profile: C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default [2016-10-21]
CHR Extension: (Phases) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aamnhgdlkkogdablgdlolchgnblfiapl [2016-08-26]
CHR Extension: (Adblock Plus) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-07]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-04]
CHR Extension: (Google When?) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\oinaegkkkfmbnfbjeokhbjmacfabalgl [2016-07-31]
CHR Extension: (Chrome Media Router) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-30]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]
StartMenuInternet: Google Chrome.WJTQ6AQNMVP4AAN7PAN4JJXY4Q - C:\Users\Simon David\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1086040 2016-09-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [475232 2016-09-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [475232 2016-09-27] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1489240 2016-09-27] (Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [350584 2016-09-26] (Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [254392 2016-10-06] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2780856 2015-10-07] (Microsoft Corporation)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2011-04-20] (CyberLink)
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [328616 2015-10-27] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-08] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-08] (Intel Corporation)
R2 NWSAPAutoWorkstationUpdateSvc; C:\Program Files (x86)\SAP\SAPsetup\Setup\Updater\NwSapAutoWorkstationUpdateService.exe [186488 2013-07-16] (SAP AG)
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [36352 2010-08-20] () [Datei ist nicht signiert]
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-11-30] () [Datei ist nicht signiert]
R2 Settings Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\SettingsLauncher.exe [1594176 2015-06-24] (Samsung Electronics CO., LTD.)
R2 SpeedupService; C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [26632 2016-10-18] (Avira Operations GmbH & Co. KG)
S2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3289448 2016-05-11] (Samsung Electronics Co., Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [149832 2016-09-27] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [153392 2016-09-27] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [35488 2016-09-27] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [78208 2016-09-27] (Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\WINDOWS\System32\Drivers\avusbflt.sys [23640 2016-09-27] (Avira Operations GmbH & Co. KG)
R0 E890C54D; C:\WINDOWS\System32\drivers\E890C54D.sys [478392 2016-07-31] (Kaspersky Lab ZAO)
R1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [20160 2016-04-05] (Glarysoft Ltd)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-10-07] (Malwarebytes)
S0 megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [64352 2016-10-16] (Avago Technologies)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3343872 2016-07-16] (Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvsmwu.inf_amd64_be58e4780959fe55\nvlddmkm.sys [13754936 2016-09-12] (NVIDIA Corporation)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\windows\system32\pwdspio.sys [12504 2013-09-30] ()
R3 RadioHIDMini; C:\WINDOWS\System32\drivers\RadioHIDMini.sys [32168 2015-07-16] (Windows (R) Win 7 DDK provider)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [895256 2015-06-23] (Realtek                                            )
R2 SGDrv; C:\WINDOWS\System32\drivers\SGdrv64.sys [7680 2011-04-11] (Phoenix Technologies Ltd.)
S1 VBoxNetAdp; C:\WINDOWS\System32\DRIVERS\VBoxNetAdp6.sys [117768 2015-11-10] (Oracle Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [194976 2015-11-10] (Oracle Corporation)
R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R1 XQHDrv; C:\WINDOWS\system32\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
R1 XQHDrv; C:\Windows\SysWOW64\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-10-21 17:05 - 2016-10-21 17:06 - 00031458 _____ C:\Users\Simon David\Desktop\FRST.txt
2016-10-21 17:05 - 2016-10-21 17:05 - 00000000 ____D C:\FRST
2016-10-21 17:03 - 2016-10-21 17:05 - 02407424 _____ (Farbar) C:\Users\Simon David\Desktop\FRST64.exe
2016-10-21 14:50 - 2016-10-21 14:50 - 00005910 _____ C:\Users\Simon David\Desktop\Ereignisse.txt
2016-10-21 14:46 - 2016-10-21 14:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-10-21 11:57 - 2016-10-21 11:57 - 00000000 ____D C:\Users\Simon David\AppData\Local\Avira
2016-10-21 10:57 - 2016-10-21 13:57 - 01368548 _____ C:\WINDOWS\SysWOW64\winapp2_disk.csv
2016-10-21 10:57 - 2016-10-21 10:57 - 00003430 _____ C:\WINDOWS\System32\Tasks\Avira System Speedup Tray
2016-10-21 10:57 - 2016-10-21 10:57 - 00000000 ____D C:\Users\Public\Speedup Sessions
2016-10-21 10:56 - 2016-10-21 10:56 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avusbflt_01011.Wdf
2016-10-21 10:56 - 2016-09-27 14:19 - 00023640 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avusbflt.sys
2016-10-21 10:55 - 2016-09-27 14:19 - 00153392 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2016-10-21 10:55 - 2016-09-27 14:19 - 00149832 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2016-10-21 10:55 - 2016-09-27 14:19 - 00078208 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2016-10-21 10:55 - 2016-09-27 14:19 - 00035488 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2016-10-21 10:52 - 2016-10-21 10:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-10-21 10:52 - 2016-10-21 10:52 - 00001281 _____ C:\Users\Public\Desktop\Avira Connect.lnk
2016-10-21 10:35 - 2016-10-21 10:38 - 04480896 _____ (Avira Operations GmbH & Co. KG) C:\Users\Simon David\Downloads\avira_de_fass0_5809cd38acd08__adw.exe
2016-10-18 10:14 - 2016-10-18 10:14 - 00604928 _____ (Reimage) C:\Users\Simon David\Downloads\ReimageRepair (1).exe
2016-10-18 10:13 - 2016-10-21 11:14 - 00000000 ____D C:\Program Files\Reimage
2016-10-18 10:13 - 2016-10-18 10:14 - 00000140 _____ C:\WINDOWS\Reimage.ini
2016-10-18 10:12 - 2016-10-18 10:13 - 00604928 _____ (Reimage) C:\Users\Simon David\Downloads\ReimageRepair.exe
2016-10-18 10:08 - 2016-10-18 10:08 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-10-18 10:06 - 2016-10-19 21:25 - 00000000 ____D C:\Users\Simon David\AppData\Local\ConnectedDevicesPlatform
2016-10-18 10:06 - 2016-10-18 10:06 - 00000020 ___SH C:\Users\Simon David\ntuser.ini
2016-10-16 23:23 - 2016-10-16 22:41 - 00000000 ___DC C:\WINDOWS\Panther
2016-10-16 23:21 - 2016-10-16 23:21 - 00000000 ____D C:\Windows.old
2016-10-16 23:20 - 2016-10-16 23:20 - 23680512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 22568960 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 22219328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 20965240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 19418624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 19416576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 17187840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 13867520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 13434368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 13081088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 12345856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 12174848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 09129984 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 08158672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 08126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 08075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 07812448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 07792640 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 07654912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 07625728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 07467520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 07219200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 06654616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 06574592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 06108672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 06043136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05722320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05683712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05622088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05384192 _____ (Microsoft) C:\WINDOWS\system32\dbgeng.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05376000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05111296 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04747776 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04673296 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 04557824 _____ (Microsoft) C:\WINDOWS\SysWOW64\dbgeng.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04136960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04129928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03892352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03776512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03753984 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03617792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 03520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 03496960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03435008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03405824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03369984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03305984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03299328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 03288064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03202048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03196416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03116544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03105792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02999296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 02947072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02914304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02913104 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02860032 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2016-10-16 23:20 - 2016-10-16 23:20 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2016-10-16 23:20 - 2016-10-16 23:20 - 02750384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02749440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02688512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02667520 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02481768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02476544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02446696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02423296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02390016 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 02370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02360832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02356736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02315264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02289664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02265088 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02256592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02256224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 02254336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02213248 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02190176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 02183792 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02166232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02107392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-10-16 23:20 - 2016-10-16 23:20 - 02083840 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02049480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-10-16 23:20 - 2016-10-16 23:20 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01993216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01990640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01980768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01980416 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01966288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01912320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01891328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01883784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01880576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01853232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01847048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01840640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01778176 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01738040 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01710080 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01705976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01690112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01639424 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01594368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01589248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01570680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01557296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01555456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 01553408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 01507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01503032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01493504 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01472536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01469120 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01453992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01377016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 01369088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01362504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpmde.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01361408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01360456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01358336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01353768 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-10-16 23:20 - 2016-10-16 23:20 - 01349120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01343928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01322848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01321472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01320448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01293312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 01292640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01291264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01266176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01264912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01243136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01218912 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01181536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 01176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01172472 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01157000 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01130496 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01123368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01117024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01112928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01107456 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01078784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01071728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01066328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01066104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01051104 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-10-16 23:20 - 2016-10-16 23:20 - 01046880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01037312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01029632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01013760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01006080 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01004032 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01000288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-10-16 23:20 - 2016-10-16 23:20 - 00998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00988512 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00982528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00980824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00975744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00966144 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00965472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00965120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00959104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00955528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2016-10-16 23:20 - 2016-10-16 23:20 - 00947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_sr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00939872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00918848 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00911872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll

SimonDavid 22.10.2016 08:17
2. Teil FRST.txt Datei
Code:
rporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00894088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00862064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00860512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00856872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00819200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00811416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00804864 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00790760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00782176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00773200 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00773168 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00764936 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00761344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00755656 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00755200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00725664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00719872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_sr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00719360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00702976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00681304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkCollectionAgent.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00665768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00657760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00650240 _____ (Microsoft) C:\WINDOWS\system32\DbgModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00649568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00648192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00646136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00640976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00628032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00619368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00601200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00595488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00587968 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00557408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00553312 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00531456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00529928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00523712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00518656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00512416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00509952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00498960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00496872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00461312 _____ (Microsoft) C:\WINDOWS\SysWOW64\DbgModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetworkCollectionAgent.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00455040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00450392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00446124 _____ C:\WINDOWS\system32\ApnDatabase.xml
2016-10-16 23:20 - 2016-10-16 23:20 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00435040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00434528 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00433832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00424640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00423776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00418304 _____ C:\WINDOWS\system32\Windows.Perception.Stub.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00413184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00409944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2016-10-16 23:20 - 2016-10-16 23:20 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00406016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00402352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00401760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00396168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00387872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00382272 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00379744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\NmaDirect.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00361104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00341936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00340320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00327680 _____ C:\WINDOWS\system32\wc_storage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00321792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00313560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00303968 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlancfg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2016-10-16 23:20 - 2016-10-16 23:20 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NmaDirect.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00280472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00272720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00265728 _____ C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00262960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2016-10-16 23:20 - 2016-10-16 23:20 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAC3ENC.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToReceiver.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00218008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00206096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00178528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvenotify.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00170960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00169056 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovslegacy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS
2016-10-16 23:20 - 2016-10-16 23:20 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00160096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XamlTileRender.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00151224 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovslegacy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00133472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00130912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00121368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00119648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\EhStorTcgDrv.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00108384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwrshplugin.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00090400 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2016-10-16 23:20 - 2016-10-16 23:20 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00083120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00081760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00079536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00074080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00073568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pwrshplugin.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappprxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Sens.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AddressParser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TempSignedLicenseExchangeTask.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00064352 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\MegaSas2i.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00062816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.UserDeviceAssociation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManagerApi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundMediaPolicy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00057400 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappprxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AddressParser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactActivation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00050880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundMediaPolicy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ffbroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactActivation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00044472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00036168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00023392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cmimcext.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll

SimonDavid 22.10.2016 08:18
3. Teil FRST.txt Datei
Code:
rporation) C:\WINDOWS\system32\c_GSM7.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccessRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccessRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
2016-10-16 23:20 - 2016-10-16 23:20 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2016-10-16 23:20 - 2016-10-16 23:20 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneutilRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneutilRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneServiceRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2016-10-16 23:16 - 2016-07-15 20:29 - 09893376 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons000a.dll
2016-10-16 23:16 - 2016-07-15 20:29 - 05739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2016-10-16 23:16 - 2016-07-15 20:29 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2016-10-16 23:16 - 2016-07-15 20:19 - 09681920 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData000a.dll
2016-10-16 23:16 - 2016-07-15 20:14 - 06354944 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2016-10-16 23:16 - 2016-07-15 19:45 - 09893376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons000a.dll
2016-10-16 23:16 - 2016-07-15 19:45 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2016-10-16 23:16 - 2016-07-15 19:39 - 09565696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData000a.dll
2016-10-16 23:16 - 2016-07-15 19:29 - 05489664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2016-10-16 23:15 - 2016-10-16 23:15 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-10-16 23:10 - 2016-10-16 23:10 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2016-10-16 23:10 - 2016-10-16 23:10 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2016-10-16 23:10 - 2016-10-16 23:10 - 00000000 ____D C:\WINDOWS\system32\msmq
2016-10-16 23:10 - 2016-10-16 23:10 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2016-10-16 23:10 - 2016-10-16 23:10 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-10-16 23:10 - 2016-10-16 23:10 - 00000000 ____D C:\Program Files\MSBuild
2016-10-16 23:10 - 2016-10-16 23:10 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-10-16 23:10 - 2016-10-16 23:10 - 00000000 ____D C:\inetpub
2016-10-16 23:10 - 2016-10-16 22:33 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-10-16 23:09 - 2016-10-16 23:09 - 00199008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2016-10-16 23:09 - 2016-05-25 15:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-10-16 23:09 - 2016-05-25 15:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-10-16 23:09 - 2016-05-25 15:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2016-10-16 23:09 - 2016-05-25 12:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2016-10-16 23:09 - 2016-05-25 12:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-10-16 23:09 - 2016-05-25 12:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 ____D C:\ProgramData\USOShared
2016-10-16 22:40 - 2016-10-16 22:40 - 00011433 _____ C:\WINDOWS\diagwrn.xml
2016-10-16 22:40 - 2016-10-16 22:40 - 00011433 _____ C:\WINDOWS\diagerr.xml
2016-10-16 22:39 - 2016-10-19 21:25 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-10-16 22:39 - 2016-10-16 22:39 - 00003876 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA1d12e6e98a33aea
2016-10-16 22:39 - 2016-10-16 22:39 - 00003688 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1d12eb384cf5c23
2016-10-16 22:39 - 2016-10-16 22:39 - 00003608 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core1d12e6e9879441d
2016-10-16 22:39 - 2016-10-16 22:39 - 00003464 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore1d12eb38493d8e4
2016-10-16 22:39 - 2016-10-16 22:39 - 00002978 _____ C:\WINDOWS\System32\Tasks\SettingsEventHandlerMonitor
2016-10-16 22:39 - 2016-10-16 22:39 - 00002966 _____ C:\WINDOWS\System32\Tasks\SettingsHibernateMonitor
2016-10-16 22:39 - 2016-10-16 22:39 - 00002834 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task
2016-10-16 22:39 - 2016-10-16 22:39 - 00002758 _____ C:\WINDOWS\System32\Tasks\LaunchSettings
2016-10-16 22:39 - 2016-10-16 22:39 - 00002518 _____ C:\WINDOWS\System32\Tasks\GlaryInitialize 5
2016-10-16 22:39 - 2016-10-16 22:39 - 00002346 _____ C:\WINDOWS\System32\Tasks\{23693454-5605-4AD3-89CF-1663F5C5BCE8}
2016-10-16 22:39 - 2016-10-16 22:39 - 00002322 _____ C:\WINDOWS\System32\Tasks\SAgent
2016-10-16 22:39 - 2016-10-16 22:39 - 00002224 _____ C:\WINDOWS\System32\Tasks\GU5SkipUAC
2016-10-16 22:39 - 2016-10-16 22:39 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2016-10-16 22:39 - 2016-10-16 22:39 - 00000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2016-10-16 22:39 - 2016-10-16 22:39 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple
2016-10-16 22:39 - 2015-11-09 19:33 - 00004340 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA
2016-10-16 22:39 - 2015-11-09 19:33 - 00004236 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA
2016-10-16 22:39 - 2015-11-09 19:33 - 00004216 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-10-16 22:39 - 2015-11-09 19:33 - 00003964 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-10-16 22:39 - 2015-11-09 19:33 - 00003944 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core
2016-10-16 22:39 - 2015-11-09 19:33 - 00003932 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-10-16 22:39 - 2015-11-09 19:33 - 00003840 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core
2016-10-16 22:39 - 2015-11-09 19:33 - 00003602 _____ C:\WINDOWS\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d
2016-10-16 22:39 - 2015-11-09 19:33 - 00003428 _____ C:\WINDOWS\System32\Tasks\SamsungSupportCenter
2016-10-16 22:39 - 2015-11-09 19:33 - 00003402 _____ C:\WINDOWS\System32\Tasks\Xerox PhotoCafe Communicator
2016-10-16 22:39 - 2015-11-09 19:33 - 00003300 _____ C:\WINDOWS\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon
2016-10-16 22:39 - 2015-11-09 19:33 - 00003206 _____ C:\WINDOWS\System32\Tasks\{72632B04-062F-4F28-A874-2060D568F10B}
2016-10-16 22:39 - 2012-03-12 15:53 - 00003148 _____ C:\WINDOWS\System32\Tasks\MirageAgent
2016-10-16 22:33 - 2016-10-16 22:33 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-10-16 22:33 - 2016-10-16 22:33 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
2016-10-16 22:33 - 2016-10-16 22:33 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-10-16 22:33 - 2016-10-16 22:33 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
2016-10-16 22:33 - 2016-10-16 22:33 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-10-16 22:28 - 2016-10-16 22:33 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2016-10-16 22:28 - 2016-10-16 22:28 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2016-10-16 22:27 - 2016-10-18 10:07 - 00000000 ____D C:\Users\Simon David
2016-10-16 22:27 - 2016-10-16 22:36 - 00000000 ____D C:\Users\DefaultAppPool
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Vorlagen
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Startmenü
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Netzwerkumgebung
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Lokale Einstellungen
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Eigene Dateien
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Druckumgebung
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Documents\Eigene Videos
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Documents\Eigene Musik
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Documents\Eigene Bilder
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\AppData\Local\Verlauf
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\AppData\Local\Anwendungsdaten
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Anwendungsdaten
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Videos
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2016-10-16 22:26 - 2016-07-16 13:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2016-10-16 22:25 - 2016-10-20 20:03 - 01793828 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-10-16 22:25 - 2016-10-16 22:25 - 01604660 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2016-10-16 22:24 - 2016-10-16 22:28 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-10-16 22:24 - 2016-10-16 22:28 - 00000000 ____D C:\Program Files\Intel
2016-10-16 22:24 - 2016-10-16 22:28 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-10-16 22:24 - 2016-10-16 22:24 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2016-10-16 22:24 - 2016-10-16 22:24 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2016-10-16 22:24 - 2016-10-16 22:24 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2016-10-16 22:24 - 2016-10-16 22:24 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2016-10-16 22:24 - 2016-10-16 22:24 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-10-16 22:24 - 2016-10-16 22:24 - 00000000 ____D C:\ProgramData\NVIDIA
2016-10-16 22:24 - 2016-10-16 22:24 - 00000000 ____D C:\Program Files\Synaptics
2016-10-16 22:24 - 2016-10-16 22:24 - 00000000 ____D C:\Program Files\Realtek
2016-10-16 22:24 - 2016-08-01 14:54 - 06386744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2016-10-16 22:24 - 2016-08-01 14:54 - 02466360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2016-10-16 22:24 - 2016-08-01 14:54 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2016-10-16 22:24 - 2016-08-01 14:54 - 01365048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2016-10-16 22:24 - 2016-08-01 14:54 - 00547896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2016-10-16 22:24 - 2016-08-01 14:54 - 00393784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2016-10-16 22:24 - 2016-08-01 14:54 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2016-10-16 22:24 - 2016-08-01 14:54 - 00071224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2016-10-16 22:24 - 2016-07-28 15:02 - 07242545 _____ C:\WINDOWS\system32\nvcoproc.bin
2016-10-16 22:24 - 2015-10-27 20:00 - 00072696 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2016-10-16 22:24 - 2015-10-27 20:00 - 00069120 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2016-10-16 22:23 - 2016-10-21 16:01 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-10-16 22:23 - 2016-10-19 21:24 - 00353496 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-10-16 22:23 - 2016-10-16 22:23 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2016-10-15 12:57 - 2016-10-16 22:33 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-10-11 08:22 - 2016-10-11 08:25 - 00000000 ____D C:\Users\Simon David\Desktop\Drucken
2016-10-07 20:06 - 2016-10-07 20:06 - 01000960 _____ C:\Users\Simon David\Downloads\Turnier_7_Mannschaften_1_Gruppe_Ligamodus_2_Felder.xls
2016-10-07 19:58 - 2016-10-07 19:58 - 00095232 _____ C:\Users\Simon David\Downloads\2x7.xls
2016-10-07 19:55 - 2016-10-07 19:55 - 00450048 _____ C:\Users\Simon David\Downloads\13992-Turnierplan-01g.xls
2016-10-07 19:48 - 2016-10-09 18:10 - 00208896 _____ C:\Users\Simon David\Desktop\DerAckiKommtSpäter.xls
2016-10-07 10:26 - 2016-10-07 10:26 - 00000000 ____D C:\ProgramData\Emsisoft
2016-10-07 10:13 - 2016-10-07 10:15 - 00000000 ____D C:\Users\Simon David\Downloads\adblock_plus_pop_up_addon-0.9.2-fx
2016-10-07 10:11 - 2015-06-01 12:17 - 00151374 _____ C:\Users\Simon David\Downloads\adblock_plus_pop_up_addon-0.9.2-fx.xpi
2016-10-07 09:43 - 2016-10-21 11:17 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2016-10-07 09:36 - 2016-10-07 09:36 - 01474568 _____ C:\Users\Simon David\Downloads\Emsisoft Anti Malware - CHIP-Installer.exe
2016-10-07 09:20 - 2016-10-07 09:20 - 00221805 _____ C:\Users\Simon David\Downloads\Anmeldezettel_IMP_WS16.pdf
2016-10-07 09:18 - 2016-10-07 09:18 - 00292350 _____ C:\Users\Simon David\Downloads\Ankuendigung_Seminar IMP_WS16.pdf
2016-10-01 10:16 - 2016-10-01 10:16 - 00162927 _____ C:\Users\Simon David\Downloads\Ressourceneffiziente Herstellung von Zahnraedern durch Kaltmassivumformung_BA_PA_ki.pdf
2016-10-01 10:13 - 2016-10-01 10:13 - 00020573 _____ C:\Users\Simon David\Downloads\Versuchstermine nach Gruppen (1).pdf
2016-10-01 10:05 - 2016-10-01 10:05 - 00020573 _____ C:\Users\Simon David\Downloads\Versuchstermine nach Gruppen.pdf
2016-10-01 10:03 - 2016-10-01 10:03 - 00047212 _____ C:\Users\Simon David\Downloads\Praktikumsrichtlinien.pdf
2016-09-29 22:37 - 2016-09-29 22:37 - 00264807 _____ C:\Users\Simon David\Desktop\Nadine Geburtstag.pdf
2016-09-26 18:31 - 2016-09-26 18:31 - 00627655 _____ C:\Users\Simon David\Downloads\2015_2016 WS Technische Produktgestaltung.pdf
2016-09-26 18:30 - 2016-09-26 18:30 - 00123470 _____ C:\Users\Simon David\Downloads\_ _TPG_ _Fragenkatalog_2.pdf
2016-09-26 18:28 - 2016-09-26 18:28 - 00282462 _____ C:\Users\Simon David\Downloads\_ _ TPG_ _Fragenkatalog.pdf
2016-09-26 18:27 - 2016-09-26 18:27 - 00710966 _____ C:\Users\Simon David\Downloads\_ _TPG_ _Zusammenfassung.pdf
2016-09-23 10:25 - 2016-09-23 10:26 - 01474568 _____ C:\Users\Simon David\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer (1).exe

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-10-21 13:10 - 2015-06-08 20:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-10-21 11:10 - 2014-10-16 00:21 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Avira
2016-10-21 10:57 - 2014-10-16 00:20 - 00000000 ____D C:\ProgramData\Avira
2016-10-21 10:57 - 2014-10-16 00:20 - 00000000 ____D C:\Program Files (x86)\Avira
2016-10-21 10:52 - 2014-06-12 15:56 - 00000000 ____D C:\ProgramData\Package Cache
2016-10-21 09:06 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-10-20 22:16 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\rescache
2016-10-20 20:03 - 2016-07-17 00:51 - 00630380 _____ C:\WINDOWS\system32\perfh007.dat
2016-10-20 20:03 - 2016-07-17 00:51 - 00136858 _____ C:\WINDOWS\system32\perfc007.dat
2016-10-20 20:03 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-10-19 22:47 - 2015-02-26 16:28 - 00000000 ____D C:\Users\Simon David\Documents\Outlook-Dateien
2016-10-19 21:25 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\appcompat
2016-10-19 21:25 - 2016-04-05 19:36 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 5
2016-10-19 21:25 - 2016-04-05 15:59 - 00000000 __SHD C:\Users\Simon David\IntelGraphicsProfiles
2016-10-19 21:25 - 2016-04-05 15:53 - 00142832 ____N (CyberLink Corp.) C:\WINDOWS\system32\Drivers\rikvm_38F51D56.sys
2016-10-19 21:25 - 2013-05-22 17:56 - 00000000 ____D C:\Users\Simon David\Tracing
2016-10-19 21:25 - 2013-04-10 17:58 - 00000000 ___RD C:\Users\Simon David\Dropbox
2016-10-18 20:53 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\INF
2016-10-18 10:23 - 2016-04-05 15:59 - 00000000 ____D C:\Users\Simon David\AppData\Local\Packages
2016-10-18 10:14 - 2016-07-16 13:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-10-18 10:08 - 2016-04-05 16:01 - 00002444 _____ C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-10-18 10:08 - 2015-02-25 23:55 - 00000000 ___RD C:\Users\Simon David\OneDrive
2016-10-18 10:08 - 2015-02-25 18:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-10-18 10:06 - 2016-04-05 15:59 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2016-10-18 10:06 - 2016-02-13 19:30 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-10-16 23:23 - 2016-07-16 13:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\dsc
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ___RD C:\Program Files\Windows Defender
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\setup
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\migwiz
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\et-EE
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\es-MX
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\en-GB
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Provisioning
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-10-16 23:21 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-10-16 23:21 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-10-16 23:16 - 2016-07-17 00:52 - 00000000 ____D C:\WINDOWS\OCR
2016-10-16 23:10 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2016-10-16 23:10 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2016-10-16 23:10 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\MUI
2016-10-16 23:10 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2016-10-16 23:10 - 2016-07-16 13:44 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2016-10-16 23:10 - 2016-07-16 13:44 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2016-10-16 23:10 - 2016-07-16 13:44 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2016-10-16 23:10 - 2016-07-16 13:44 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2016-10-16 23:10 - 2016-07-16 13:44 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2016-10-16 23:10 - 2016-07-16 13:44 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2016-10-16 23:10 - 2016-07-16 13:43 - 01414144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2016-10-16 23:10 - 2016-07-16 13:43 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2016-10-16 23:10 - 2016-07-16 13:43 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2016-10-16 23:10 - 2016-07-16 13:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2016-10-16 23:10 - 2016-07-16 13:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2016-10-16 23:10 - 2016-07-16 13:43 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2016-10-16 23:10 - 2016-07-16 13:43 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2016-10-16 23:10 - 2016-07-16 13:43 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2016-10-16 23:10 - 2016-07-16 13:43 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2016-10-16 22:41 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\USOPrivate
2016-10-16 22:41 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows NT
2016-10-16 22:41 - 2014-05-11 19:19 - 00000306 __RSH C:\ProgramData\ntuser.pol
2016-10-16 22:40 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-10-16 22:40 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Registration
2016-10-16 22:40 - 2016-07-16 08:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2016-10-16 22:40 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2016-10-16 22:38 - 2016-04-05 15:55 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-10-16 22:37 - 2016-07-16 13:47 - 00000000 __RSD C:\WINDOWS\Media
2016-10-16 22:37 - 2016-07-16 13:47 - 00000000 __RHD C:\Users\Public\Libraries
2016-10-16 22:33 - 2016-07-31 20:31 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Nox
2016-10-16 22:33 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-10-16 22:33 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2016-10-16 22:33 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-10-16 22:33 - 2016-07-16 08:04 - 00262144 _____ C:\WINDOWS\system32\config\BBI
2016-10-16 22:33 - 2016-05-30 19:01 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2016-10-16 22:33 - 2016-04-05 19:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
2016-10-16 22:33 - 2016-04-01 11:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Partition Wizard Free 9.1
2016-10-16 22:33 - 2016-03-27 15:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-10-16 22:33 - 2016-03-04 16:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Worksheet Crafter Testversion
2016-10-16 22:33 - 2016-02-13 19:12 - 00000000 ____D C:\WINDOWS\ShellNew
2016-10-16 22:33 - 2015-11-16 14:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2016-10-16 22:33 - 2015-10-30 08:28 - 00000000 ____D C:\Users\Default.migrated
2016-10-16 22:33 - 2015-08-11 15:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2016-10-16 22:33 - 2015-02-04 11:23 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-10-16 22:33 - 2014-11-30 14:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2016-10-16 22:33 - 2014-11-30 13:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2016-10-16 22:33 - 2014-10-07 15:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tecnomatix
2016-10-16 22:33 - 2014-06-12 15:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange
2016-10-16 22:33 - 2014-01-02 13:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2016-10-16 22:33 - 2013-10-21 15:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SAP Front End
2016-10-16 22:33 - 2013-07-21 21:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2016-10-16 22:33 - 2013-07-21 20:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP
2016-10-16 22:33 - 2013-07-11 22:31 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-10-16 22:33 - 2013-06-12 10:47 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenVPN
2016-10-16 22:33 - 2013-06-12 10:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2016-10-16 22:33 - 2013-05-06 17:34 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Siemens LOGO!Soft
2016-10-16 22:33 - 2013-04-15 11:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-10-16 22:33 - 2013-04-15 01:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-10-16 22:33 - 2013-04-10 18:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-10-16 22:33 - 2013-04-10 18:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VLC Setup Helper
2016-10-16 22:33 - 2012-03-12 15:53 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
2016-10-16 22:33 - 2012-03-12 15:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Media Suite
2016-10-16 22:33 - 2012-03-12 15:43 - 00000000 ____D C:\WINDOWS\tr
2016-10-16 22:33 - 2012-03-12 15:43 - 00000000 ____D C:\WINDOWS\th
2016-10-16 22:33 - 2012-03-12 15:43 - 00000000 ____D C:\WINDOWS\sv
2016-10-16 22:33 - 2012-03-12 15:43 - 00000000 ____D C:\WINDOWS\sl
2016-10-16 22:33 - 2012-03-12 15:43 - 00000000 ____D C:\WINDOWS\sk
2016-10-16 22:33 - 2012-03-12 15:43 - 00000000 ____D C:\WINDOWS\ru
2016-10-16 22:33 - 2012-03-12 15:43 - 00000000 ____D C:\WINDOWS\ro
2016-10-16 22:33 - 2012-03-12 15:43 - 00000000 ____D C:\WINDOWS\pl
2016-10-16 22:33 - 2012-03-12 15:37 - 00000000 ____D C:\WINDOWS\en
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\no
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\nl
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\lv
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\lt
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\ko
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\it
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\hu
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\hr
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\he
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\fr
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\fi
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\es
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\el
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\de
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\da
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\cs
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\bg
2016-10-16 22:33 - 2012-03-12 15:35 - 00000000 ____D C:\WINDOWS\ar
2016-10-16 22:33 - 2012-03-12 14:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2016-10-16 22:29 - 2016-07-23 15:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2016-10-16 22:29 - 2016-07-17 00:50 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\spool
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\IME
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\schemas
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\IME
2016-10-16 22:29 - 2015-02-04 11:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games
2016-10-16 22:29 - 2014-10-12 13:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-10-16 22:29 - 2012-03-13 06:08 - 00000000 ___RD C:\Users\Public\Recorded TV
2016-10-16 22:29 - 2012-03-12 15:19 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles
2016-10-16 22:29 - 2012-03-12 14:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xerox
2016-10-16 22:29 - 2012-03-12 14:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-10-16 22:28 - 2016-07-16 13:47 - 00000000 __SHD C:\Program Files\Windows Sidebar
2016-10-16 22:28 - 2016-07-16 13:47 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2016-10-16 22:28 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-10-16 22:28 - 2012-03-12 14:35 - 00000000 ____D C:\Program Files (x86)\Intel
2016-10-16 22:28 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Microsoft Games
2016-10-16 22:28 - 2009-07-14 05:20 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2016-10-16 22:25 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\PrintDialog
2016-10-16 22:25 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\MiracastView
2016-10-16 22:25 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-10-16 22:25 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-10-16 22:24 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Help
2016-10-16 22:01 - 2016-07-17 01:55 - 00000000 ___HD C:\$WINDOWS.~BT
2016-10-16 21:45 - 2015-12-04 18:47 - 00001146 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d12eb384cf5c23.job
2016-10-15 20:21 - 2015-12-04 10:34 - 00001172 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA1d12e6e98a33aea.job
2016-10-15 12:57 - 2013-04-10 17:57 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Dropbox
2016-10-15 12:53 - 2015-12-04 18:47 - 00001142 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d12eb38493d8e4.job
2016-10-15 11:36 - 2013-04-15 00:59 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-10-15 11:36 - 2013-04-15 00:59 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-10-15 10:42 - 2014-01-02 13:19 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-10-13 22:30 - 2013-04-10 18:26 - 00000000 ____D C:\Users\Simon David\AppData\Local\Spotify
2016-10-13 22:26 - 2014-01-02 13:19 - 143495576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-10-13 22:15 - 2013-04-10 18:25 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Spotify
2016-10-11 10:21 - 2015-12-04 10:34 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core1d12e6e9879441d.job
2016-10-07 09:10 - 2016-07-31 12:04 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-10-03 22:22 - 2013-04-10 18:16 - 00002518 _____ C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-10-03 22:09 - 2016-07-16 13:49 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-10-03 22:09 - 2016-07-16 13:49 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-09-25 10:04 - 2015-10-27 13:29 - 00000000 ____D C:\Users\Simon David\Desktop\Master
2016-09-22 22:59 - 2014-10-24 11:16 - 944893562 _____ C:\WINDOWS\MEMORY.DMP
2016-09-21 10:57 - 2015-03-18 17:34 - 00000000 ____D C:\Users\Simon David\Desktop\Privat

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-05-11 19:24 - 2014-05-11 19:24 - 0005265 _____ () C:\Users\Simon David\AppData\Roaming\callbanner.png
2015-04-13 20:05 - 2015-04-13 20:07 - 0007680 ___SH () C:\Users\Simon David\AppData\Roaming\Thumbs.db
2013-11-07 12:25 - 2014-10-24 10:39 - 0000098 _____ () C:\Users\Simon David\AppData\Roaming\WB.CFG
2013-12-31 18:36 - 2014-01-03 14:18 - 0000005 _____ () C:\Users\Simon David\AppData\Roaming\WBPU-Q5-TTL.DAT
2013-11-07 12:25 - 2014-01-29 07:29 - 0000005 _____ () C:\Users\Simon David\AppData\Roaming\WBPU-TTL.DAT
2013-06-12 21:30 - 2015-02-08 22:29 - 0008704 _____ () C:\Users\Simon David\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-11-16 22:34 - 2016-03-09 11:12 - 0000026 _____ () C:\Users\Simon David\AppData\Local\isoworkshop.ini
2013-11-30 13:52 - 2013-12-03 10:48 - 0000600 _____ () C:\Users\Simon David\AppData\Local\PUTTY.RND
2015-11-09 10:46 - 2015-11-09 10:46 - 0000218 _____ () C:\Users\Simon David\AppData\Local\recently-used.xbel
2016-10-16 22:24 - 2016-10-16 22:24 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2013-04-14 19:40 - 2013-04-14 19:40 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
2012-03-12 15:50 - 2012-03-12 15:50 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2012-03-12 15:47 - 2012-03-12 15:48 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2012-03-12 15:46 - 2012-03-12 15:47 - 0000106 _____ () C:\ProgramData\{80E158EA-7181-40FE-A701-301CE6BE64AB}.log
2012-03-12 15:48 - 2012-03-12 15:49 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
2012-03-12 15:49 - 2012-03-12 15:50 - 0000108 _____ () C:\ProgramData\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}.log

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-10-16 22:23

==================== Ende von FRST.txt ============================

cosinus 22.10.2016 11:28
Zitat:
AS: Emsisoft Anti-Malware (Disabled - Up to date) {CB7D53ED-CD86-A552-2B56-E5019C280620}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
Das geht so nicht, niemals verwendet man zwei AVs gleichzeitig bzw parallel. Einer muss runter. Das sollte Avira sein.

Bitte Avira deinstallieren. Das Teil empfehlen wir schon seit Jahren aus mehreren Gründen nicht mehr. Ein Grund ist ne rel. hohe Fehlalarmquote, der zweite Hauptgrund ist, dass die immer noch mit ASK zusammenarbeiten (Avira Suchfunktion geht über ASK). Auch andere Freewareanbieter wie AVG, Avast oder Panda sprangen auf diesen Zug auf; so was ist bei Sicherheitssoftware einfach inakzeptabel. Vgl. Antivirensoftware: Schutz Für Ihre Dateien, Aber Auf Kosten Ihrer Privatsphäre? | Emsisoft Blog

Gib Bescheid wenn Avira weg ist; wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen (falls du Emsi auch nicht behalten willst), Infos folgen dann im Abschlussposting. Bitte JETZT nix mehr ohne Absprache installieren!

SimonDavid 22.10.2016 12:13
ok alles klar danke! Avira ist deinstalliert.
Gerne würde ich danach umsteigen wenn Sie mir einen guten Virenscanner empfehlen können.

cosinus 22.10.2016 15:34
Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

SimonDavid 23.10.2016 17:37
Code:
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2016.10.23.05
  rootkit: v2016.09.26.02

Windows 10 x64 NTFS
Internet Explorer 11.321.14393.0
Simon David :: SIMONDAVID-PC [administrator]

23.10.2016 17:49:16
mbar-log-2016-10-23 (17-49-16).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 436882
Time elapsed: 45 minute(s), 13 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

cosinus 23.10.2016 17:50
adwCleaner und JRT bitte nochmal neu und richtig:

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


SimonDavid 24.10.2016 19:32
Code:
# AdwCleaner v6.030 - Logfile created 24/10/2016 at 20:16:02
# Updated on 19/10/2016 by Malwarebytes
# Database : 2016-10-23.2 [Server]
# Operating System : Windows 10 Home  (X64)
# Username : Simon David - SIMONDAVID-PC
# Running from : C:\Users\Simon David\Desktop\AdwCleaner_6.030.exe
# Mode: Clean
# Support : hxxps://www.malwarebytes.com/support



***** [ Services ] *****



***** [ Folders ] *****



***** [ Files ] *****

[-] File deleted: C:\WINDOWS\Reimage.ini


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Shortcuts ] *****



***** [ Scheduled Tasks ] *****



***** [ Registry ] *****

[-] Value deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [C:\Program Files (x86)\HQ-Proffesional\HQ-Proffesional-nova.exe]
[-] Key deleted: HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine
[-] Key deleted: HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine.1
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine.1
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
[-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
[-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484}
[-] Key deleted: HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Reimage
[-] Key deleted: HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.
[#] Key deleted on reboot: HKCU\Software\Reimage
[#] Key deleted on reboot: HKCU\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.
[#] Key deleted on reboot: [x64] HKCU\Software\Reimage
[#] Key deleted on reboot: [x64] HKCU\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.
[-] Key deleted: [x64] HKLM\SOFTWARE\Reimage
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\onclickads.net
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\onclickads.net
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL


***** [ Web browsers ] *****



*************************

:: "Tracing" keys deleted
:: Winsock settings cleared
:: Proxy settings cleared
:: IE policies deleted
:: Chrome policies deleted
:: Chrome preferences reset: C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [20920 Bytes] - [31/07/2016 11:43:51]
C:\AdwCleaner\AdwCleaner[C2].txt - [3251 Bytes] - [24/10/2016 20:16:02]
C:\AdwCleaner\AdwCleaner[S1].txt - [26269 Bytes] - [31/07/2016 11:39:21]
C:\AdwCleaner\AdwCleaner[S2].txt - [3293 Bytes] - [24/10/2016 20:14:45]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [3471 Bytes] ##########
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 10 Home x64
Ran by Simon David (Administrator) on 24.10.2016 at 20:27:52,77
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 19

Successfully deleted: C:\Users\Simon David\AppData\Local\{1E8B0766-6F4A-48D3-AEC9-7C4910844349} (Empty Folder)
Successfully deleted: C:\Users\Simon David\AppData\Local\{4589B3A9-FAA0-4500-BD7B-6C8B98F787C5} (Empty Folder)
Successfully deleted: C:\Users\Simon David\AppData\Local\{51140AF0-5D59-40CA-8BAA-A21FD65D20D6} (Empty Folder)
Successfully deleted: C:\Users\Simon David\AppData\Local\{51157D91-3C65-42E3-B2C4-3E5A2DD1DFDD} (Empty Folder)
Successfully deleted: C:\Users\Simon David\AppData\Local\{5B9DA889-2FB9-4855-8C16-D81843A87BF8} (Empty Folder)
Successfully deleted: C:\Users\Simon David\AppData\Local\{72CFCD0D-754E-4BB0-9A99-09B17EC30830} (Empty Folder)
Successfully deleted: C:\Users\Simon David\AppData\Local\{7FEB9591-983F-4C45-9596-F2B0D08F0DCF} (Empty Folder)
Successfully deleted: C:\Users\Simon David\AppData\Local\{9C62D763-618B-474B-B64D-AA63C34B9DD2} (Empty Folder)
Successfully deleted: C:\Users\Simon David\AppData\Local\{A45AD376-2577-481B-A941-AC27E7845679} (Empty Folder)
Successfully deleted: C:\Users\Simon David\AppData\Local\{AE973B38-AC55-4734-A045-FCF33A910DFA} (Empty Folder)
Successfully deleted: C:\Users\Simon David\AppData\Local\{AEAEC87D-9AA3-461A-995E-1C0B9271D5C9} (Empty Folder)
Successfully deleted: C:\Users\Simon David\AppData\Local\{BB5ABA7E-1284-47A7-826F-0E7B5AB5AAFB} (Empty Folder)
Successfully deleted: C:\Users\Simon David\AppData\Local\{BBB98071-2B33-48CF-844B-85FE8A9DE63B} (Empty Folder)
Successfully deleted: C:\Users\Simon David\AppData\Local\{CEAC0064-E83A-473E-860C-EB2A4B1A0B49} (Empty Folder)
Successfully deleted: C:\Users\Simon David\AppData\Local\{EFE21453-0235-46D0-9291-BFBB8E8A9ECD} (Empty Folder)
Successfully deleted: C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\majjphhgppkndjjkmhhnbgafooenebhd (Folder)
Successfully deleted: C:\Users\Simon David\AppData\Roaming\Mozilla\Firefox\Profiles\fpqwpvzx.default\extensions\trash (Folder)
Successfully deleted: C:\WINDOWS\system32\Tasks\Avira System Speedup Tray (Task)
Successfully deleted: C:\WINDOWS\prefetch\SPEEDUP.EXE-238B79E6.pf (File)



Registry: 1

Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\Search\\SearchAssistant (Registry Value)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 24.10.2016 at 20:30:58,92
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

cosinus 24.10.2016 20:31
Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

http://www.trojaner-board.de/picture...&pictureid=611

SimonDavid 25.10.2016 21:49
Addition.txt 1

Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 17-10-2016
durchgeführt von Simon David (25-10-2016 22:45:19)
Gestartet von C:\Users\Simon David\Desktop\Virus bereinigen
Windows 10 Home Version 1607 (X64) (2016-10-16 20:41:18)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-189922631-1767686969-1414721043-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-189922631-1767686969-1414721043-503 - Limited - Disabled)
Gast (S-1-5-21-189922631-1767686969-1414721043-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-189922631-1767686969-1414721043-1003 - Limited - Enabled)
Simon David (S-1-5-21-189922631-1767686969-1414721043-1001 - Administrator - Enabled) => C:\Users\Simon David

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

„Windows Live Essentials“ (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
„Windows Live Mail“ (x32 Version: 15.4.3502.0922 - „Microsoft Corporation“) Hidden
„Windows Live Messenger“ (x32 Version: 15.4.3538.0513 - „Microsoft Corporation“) Hidden
„Windows Live“ fotogalerija (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Adobe Flash Player 10 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 10.0.32.18 - Adobe Systems Incorporated)
Adobe Reader 9.2 - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-A92000000001}) (Version: 9.2.0 - Adobe Systems Incorporated)
Apple Application Support (32-Bit) (HKLM-x32\...\{FE5C2FAA-118D-4509-B51D-3F71CC9E1B3E}) (Version: 4.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{2937FD88-C9D6-4B82-B539-37CD0A572F42}) (Version: 4.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CyberLink Media Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.2227 - CyberLink Corp.)
CyberLink MediaShow (HKLM-x32\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 5.0.1130a - CyberLink Corp.)
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4813b - CyberLink Corp.)
CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.4207 - CyberLink Corp.)
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.3706.52 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.4417 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
Dropbox (HKU\S-1-5-21-189922631-1767686969-1414721043-1001\...\Dropbox) (Version: 12.4.22 - Dropbox, Inc.)
Easy Migration (HKLM-x32\...\{AD86049C-3D9C-43E1-BE73-643F57D83D50}) (Version: 1.0 - Samsung Electronics Co., Ltd.)
Easy Support Center 1.0 (HKLM-x32\...\{F687E657-F636-44DF-8125-9FEEA2C362F5}) (Version: 1.1.47 - Samsung)
E-POP (HKLM-x32\...\{F06DD8D9-9DC8-430C-835C-C9BF21E05CC1}) (Version: 1.0.1 - Samsung)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Glary Utilities 5.48 (HKLM-x32\...\Glary Utilities 5) (Version: 5.48.0.68 - Glarysoft Ltd)
Google Chrome (HKU\S-1-5-21-189922631-1767686969-1414721043-1001\...\Google Chrome) (Version: 53.0.2785.143 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Inkscape 0.91 (HKLM-x32\...\Inkscape) (Version: 0.91 - )
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35342 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.2.1410 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4242 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.1.209 - Intel Corporation)
Intel(R) WiDi (HKLM-x32\...\{93F34C5C-ACAA-48F3-9B26-70359A117F12}) (Version: 3.0.12.0 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (HKLM\...\{DF7756DD-656A-45C3-BA71-74673E8259A9}) (Version: 15.00.0000.0642 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
iTunes (HKLM\...\{A31C5565-90D9-4615-AE13-94D86C3836C7}) (Version: 12.3.3.17 - Apple Inc.)
Java(TM) 6 Update 43 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416043FF}) (Version: 6.0.430 - Oracle)
Java(TM) SE Development Kit 6 Update 43 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0160430}) (Version: 1.6.0.430 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
LOGO!Soft Comfort V7.0  (HKLM\...\LOGO!Soft Comfort V7.0 ) (Version: 7.0.0.0 - Siemens AG)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version:  - )
Microsoft Office 2007 Primary Interop Assemblies (HKLM-x32\...\{50120000-1105-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4763.1003 - Microsoft Corporation)
Microsoft Office Communicator 2007 R2 (HKLM-x32\...\{C69EC079-A7C8-445B-889F-EF66FC327457}) (Version: 3.5.6907.268 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft redistributable runtime DLLs VS2005 SP1(x86) (HKLM-x32\...\{CEC7A786-A9C8-4EF7-BB59-6518E3B3C878}) (Version: 8.0.50727.4053 - SAP)
Microsoft redistributable runtime DLLs VS2008 SP1(x86) (HKLM-x32\...\{A47A9101-6EB5-4314-BDA1-297880FBB908}) (Version: 9.0 - SAP AG)
Microsoft redistributable runtime DLLs VS2010 SP1 (x86) (HKLM-x32\...\{2385C070-EC26-4AB9-8718-E605C977C0ED}) (Version: 10.0.40219.1 - SAP)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{4fd02573-5f12-4ae4-8027-c63f8e1115af}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 49.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 49.0.2 (x86 de)) (Version: 49.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 49.0.2.6136 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Multimedia POP (HKLM-x32\...\{A86C7338-BE18-4770-AA25-138513D89B0D}) (Version: 1.1 - )
NVIDIA Grafiktreiber 353.84 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.84 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
OpenVPN 2.1.3 (HKLM-x32\...\OpenVPN) (Version: 2.1.3 - )
Oracle VM VirtualBox 5.0.10 (HKLM\...\{F6E922CF-068D-4AFC-8DBF-4636B84AF0A5}) (Version: 5.0.10 - Oracle Corporation)
PDF-XChange Editor (HKLM-x32\...\{432fd021-e5dc-49cc-95fb-779d69f492ca}) (Version: 5.5.308.1 - Tracker Software Products (Canada) Ltd.)
PDF-XChange Editor (Version: 5.5.308.1 - Tracker Software Products (Canada) Ltd.) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7543 - Realtek Semiconductor Corp.)
S Agent (Version: 1.1.58 - Samsung Electronics Co., Ltd.) Hidden
Samsung Settings (HKLM-x32\...\{3BB58176-B3A7-47FD-9F18-C3576431D193}) (Version: 2.2.0 - Samsung Electronics CO., LTD.)
Samsung Update (HKLM-x32\...\{0BC4AC38-E7C5-4394-A6BD-32CDCE2C8B9D}) (Version: 2.2.36 - Samsung Electronics Co., Ltd.)
SAP GUI for Windows 7.30 (HKLM-x32\...\SAPGUI710) (Version: 7.30 Compilation 2 - SAP)
SAPSetup Automatic Workstation Update Service (HKLM-x32\...\SAP_WUS) (Version:  - SAP AG)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Software Launcher (HKLM-x32\...\{B750B5C2-CC17-4967-905B-29F4EB986131}) (Version: 1.0.2 - Samsung)
Spelling Dictionaries Support For Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
Spotify (HKU\S-1-5-21-189922631-1767686969-1414721043-1001\...\Spotify) (Version: 1.0.33.106.g60b5d1f0 - Spotify AB)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.40.0 - Synaptics Incorporated)
Tecnomatix Plant Simulation 11 (HKLM-x32\...\{2CA145FD-7F2D-4267-8F9E-137A9801BC69}) (Version: 11.0.3 - Siemens PLM Software Inc.)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
User Guide (HKLM-x32\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.1 - )
VLC media player 2.0.4 (HKLM-x32\...\VLC media player) (Version: 2.0.4 - VideoLAN)
Windows Driver Package - BigNox Corporation (VBoxUSB) USB  (09/16/2015 4.3.12) (HKLM\...\76B144D15273552931249392EDB13C0BBD52C84E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Driver Package - BigNox Corporation VBoxUSBMon System  (09/16/2015 4.3.12) (HKLM\...\39F54A37125643D2E1E90FA7D81F36ACC9441510) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Driver Package - BigNox Corporation XQHDrv System  (09/16/2015 4.3.12) (HKLM\...\0147813640F7AF69F569581EE672B6BE1E71798E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Live 程式集 (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows XP Mode (HKLM\...\{1374CC63-B520-4f3f-98E8-E9020BF01CFF}) (Version: 1.3.7600.16422 - Microsoft Corporation)
Windows-Treiberpaket - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass  (08/23/2013 6.2.8400.4218) (HKLM\...\26BFE384C802803107F583AE1A739E4FEB56134B) (Version: 08/23/2013 6.2.8400.4218 - Samsung Electronics Co. Ltd.)
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version:  - )
Xerox PhotoCafe (HKLM-x32\...\Xerox PhotoCafe) (Version: 1.0.0.6162 - Xerox)
Zoom (HKU\S-1-5-21-189922631-1767686969-1414721043-1001\...\ZoomUMX) (Version: 3.5 - Zoom Video Communications, Inc.)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{38216570-5DB1-45F8-A344-B0C4E252B14B}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.26.7\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-189922631-1767686969-1414721043-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => Keine Datei

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {015307F3-E72D-4F93-909E-F0880627E39C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {04484EA7-E2FA-4C89-8474-EB0EB18A7387} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core1d12e6e9879441d => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {154B9669-310D-43DE-BC74-B5F3282FF228} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {1B911769-259D-4D0D-A77D-9E71AC42251D} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1C750EE0-5BFE-408A-A999-93F655154CB8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {22F2EBEB-0A87-4A01-990C-BBAA81DE241B} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {251F2D66-9355-45A1-A099-ED7C9043173C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {2593ABA1-0C07-430F-A3B9-641EC003E553} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-11-01] (Microsoft Corporation)
Task: {2881AB42-528F-4BD7-81CD-28BA9F9D8B61} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {2957CC2A-68FA-4D29-BD66-C71287187311} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {2ACAD73D-22A1-4C63-A0A4-D2B2D4A4AC0A} - System32\Tasks\Xerox PhotoCafe Communicator => C:\ProgramData\Xerox PhotoCafe\MessageCheck.exe [2011-10-26] ()
Task: {32295609-3691-47ED-84C4-BABD3E9F8001} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {3268F80F-EDA1-4529-B7B3-2B697292AEEC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {37092E36-A8AB-49BA-808A-A119F209868F} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {45E14ACF-68FE-47C0-AF97-477C6C2B78D6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {480308F2-08C5-4538-98CB-5BB2C2E0076A} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-18] (Adobe Systems Incorporated)
Task: {4C24EBFE-2390-4110-9F11-C76FBECD2382} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {4D328541-C819-4278-BF50-8FFE5EF143C6} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5207B546-8574-4FFE-B540-932962E6E258} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {527E24E5-07A9-4069-920C-2119DD37E72E} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core => C:\Users\Simon David\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)
Task: {52C301DC-F26E-4A76-ADC4-74A8A7B1262F} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {53B1C0B2-F6AD-4100-BFC0-0F7ADCBD39ED} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {53C68994-2198-4975-B747-69D54C2D51FD} - System32\Tasks\LaunchSettings => C:\Program Files (x86)\Samsung\Settings\Settings.exe [2015-06-24] ()
Task: {56C44044-C792-485F-91FF-B7E5FC4CFC84} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
Task: {56CEDDC4-43F2-4D8E-863A-0F4D16E824F4} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {5A6B9439-0178-4339-9EFE-0F7604DFADDA} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5DB2D0AE-B8D8-4B84-BA54-7342D645048A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA1d12e6e98a33aea => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {6BD33652-27F8-4ABA-BFB7-961246B22B69} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {6CE69357-A236-493C-B638-D3CFBF0B8DA2} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6E98B588-90CC-48A6-8B58-599AAD1272A5} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [2016-04-01] (Glarysoft Ltd)
Task: {7058D631-AF91-46FD-8C52-58A3B3D18FFF} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7479C151-9FAD-4AC8-A651-06B0AC54DEC2} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {74FC3B4D-CB8C-40F5-9B3E-0B9AB859133A} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {7FF42982-43AF-4A9B-A1D7-89573FE52AE1} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-07] (Microsoft Corporation)
Task: {865F321A-4DB7-4C3E-B252-5B77ED92B1F5} - System32\Tasks\SamsungSupportCenter => C:\Program Files (x86)\Samsung\Easy Support Center\SSCKbdHk.exe
Task: {89A657EA-9465-43C8-AA20-74603066936B} - System32\Tasks\GoogleUpdateTaskMachineUA1d12eb384cf5c23 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {8BFEE2C6-348C-479B-8283-47541EFD8BFF} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {9A17F065-9771-4632-9EA3-D2E0D12B1821} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {9CCB683A-19C5-4F9F-95AB-094EF1DE7656} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2016-02-24] (Samsung Electronics Co., Ltd.)
Task: {A175A859-CBFE-47FA-914D-7F3EA5E9EA34} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A68BB2A1-A30D-4357-BE2E-33753A016E99} - System32\Tasks\SettingsHibernateMonitor => C:\Program Files (x86)\Samsung\Settings\SettingsHibernateMonitor.exe [2015-06-24] (Samsung Electronics CO., LTD.)
Task: {A73CB133-736C-4654-8929-5F07A2BA5041} - System32\Tasks\{23693454-5605-4AD3-89CF-1663F5C5BCE8} => pcalua.exe -a "C:\Users\Simon David\Downloads\KM_Extended_Dri...2.0.0414-DE.exe" -d "C:\Users\Simon David\Downloads"
Task: {B3720FE6-94C8-4683-9E60-19DB1750E854} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {B6945509-38F2-4C42-AAB2-3BDBB688FBEF} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {B9BC9E63-94F9-43DC-B483-4FD7F489123D} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-08-17] (CyberLink)
Task: {B9DCAB9B-5FC9-47FD-B868-D9739197891F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {BC36E4D2-7394-4384-92A0-260FCD041EFA} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {BE09311F-C561-4FA4-B0C2-1AC75BE485A9} - System32\Tasks\SettingsEventHandlerMonitor => C:\Program Files (x86)\Samsung\Settings\CmdServer\RSSettingEventHandler.exe [2015-06-24] (Samsung Electronics CO., LTD.)
Task: {BEFAC709-9C5F-4DBA-A6A1-9DC936F13205} - System32\Tasks\{72632B04-062F-4F28-A874-2060D568F10B} => pcalua.exe -a D:\SETUP.EXE -d D:\
Task: {C2F724D3-F5B3-4136-A7F7-D464A7F3473B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {C44D796C-C7D7-4178-9BE2-60FBE5605EBD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {C6C78EB8-44C3-4545-AF48-E82A5153AED8} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-07] (Microsoft Corporation)
Task: {C7156127-0BB7-41E5-8904-E20CF304D3B4} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {C8F0D06D-6116-4837-B841-B29D794BA19F} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-08-26] (Microsoft Corporation)
Task: {C95D9F4F-C80F-4165-B705-8577A80EA212} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {CC0FF2A1-4767-45CA-8955-5568496031B9} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {CC3D9102-7427-4590-9DB0-2110570B2C80} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {CD928DDE-3ACD-49FC-A035-D27641D221DB} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe [2016-04-01] (Glarysoft Ltd)
Task: {CE2913B8-F4FA-4AE6-8091-378E49AB974C} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {D9945D20-C99A-4338-98CB-54B2353A1504} - System32\Tasks\GoogleUpdateTaskMachineCore1d12eb38493d8e4 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {DAFA2957-F27A-4ABB-BFD6-D43A2AC09616} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {DE506BBB-A5C2-4632-B610-A48FA61EAD80} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {E32A351C-827C-44F2-B9E5-2D58B250C0D3} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA => C:\Users\Simon David\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)
Task: {E3FC424A-D50D-40A1-A2E7-222A05B44868} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {E9E275E1-0DC4-4E8D-8A3D-B6EDD2DA7EDD} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {E9F53A9D-435C-4F7C-BDE7-766D58892EEF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {EF7343DE-4375-49A3-8492-31255CA3BBF7} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F1512E10-BDE2-4450-9B44-B8B205D60D4E} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F8AB40FC-8C63-45C1-B7BA-BA60938A5202} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FED68B58-2AC6-4594-B955-C4B87170DDB1} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Addition.txt 2

Code:
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core.job => C:\Users\Simon David\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA.job => C:\Users\Simon David\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d12eb38493d8e4.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d12eb384cf5c23.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core.job => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core1d12e6e9879441d.job => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA.job => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA1d12e6e98a33aea.job => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\Xerox PhotoCafe Communicator.job => C:\ProgramData\Xerox PhotoCafe\MessageCheck.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-02-25 18:23 - 2015-10-07 20:28 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2012-03-12 14:36 - 2012-02-08 04:03 - 00128280 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
2012-03-12 15:47 - 2009-11-30 17:21 - 00244904 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2016-03-18 22:56 - 2016-03-18 22:56 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-03-18 22:56 - 2016-03-18 22:56 - 01329936 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-10-18 10:08 - 2016-10-18 10:08 - 01864384 _____ () C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\amd64\ClientTelemetry.dll
2013-07-11 22:31 - 2008-06-20 00:41 - 00062464 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00130048 _____ () C:\WINDOWS\SYSTEM32\CHARTV.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 09760256 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01401344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02424832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-10-19 21:31 - 2016-10-19 21:32 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-10-19 21:31 - 2016-10-19 21:32 - 00178176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-10-19 21:31 - 2016-10-19 21:32 - 35253760 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2012-03-12 14:36 - 2012-02-08 03:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-06-24 16:05 - 2015-06-24 16:05 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2014-10-08 22:53 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Simon David\AppData\Local\Microsoft\Windows\Themes\DE-wp3.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{41584185-7C8F-4032-88AD-F22F5C968CD8}] => (Allow) C:\Program Files (x86)\Microsoft Office Communicator\communicator.exe
FirewallRules: [{0759D465-233C-4A14-BBED-6F41168E5DCA}] => (Allow) C:\Program Files (x86)\Microsoft Office Communicator\communicator.exe
FirewallRules: [UDP Query User{71DF6A63-5F7E-4392-89DD-B2FB265865FD}C:\users\simon david\appdata\local\pokemon\app-0.1.6\pokemon go live map.exe] => (Allow) C:\users\simon david\appdata\local\pokemon\app-0.1.6\pokemon go live map.exe
FirewallRules: [TCP Query User{C867007B-74BC-4D98-BD13-4B7D856256BA}C:\users\simon david\appdata\local\pokemon\app-0.1.6\pokemon go live map.exe] => (Allow) C:\users\simon david\appdata\local\pokemon\app-0.1.6\pokemon go live map.exe
FirewallRules: [UDP Query User{917396F1-AEC5-4F3F-8D8D-C451D1F551F1}C:\users\simon david\appdata\local\pokemon\app-0.1.6\pokemon go live map.exe] => (Allow) C:\users\simon david\appdata\local\pokemon\app-0.1.6\pokemon go live map.exe
FirewallRules: [TCP Query User{A062DE86-B585-4160-98E1-27C0D2BA1EEE}C:\users\simon david\appdata\local\pokemon\app-0.1.6\pokemon go live map.exe] => (Allow) C:\users\simon david\appdata\local\pokemon\app-0.1.6\pokemon go live map.exe
FirewallRules: [{583AFBC9-328C-4726-B51F-E4F373F60F6D}] => (Allow) C:\Program Files\Bignox\BigNoxVM\RTNoxVMHandle.exe
FirewallRules: [{0959E8FA-3841-49B2-85D6-6C6FB51538D1}] => (Allow) C:\Users\Simon David\AppData\Roaming\Nox\bin\Nox.exe
FirewallRules: [UDP Query User{EA4C96C1-B5C7-4B4F-AE3A-5B1A509C3074}C:\users\simon david\downloads\pokemongomap-07win\pokemon go live map.exe] => (Allow) C:\users\simon david\downloads\pokemongomap-07win\pokemon go live map.exe
FirewallRules: [TCP Query User{FF9BC0EA-FCAF-4311-BACB-5E8942F7888D}C:\users\simon david\downloads\pokemongomap-07win\pokemon go live map.exe] => (Allow) C:\users\simon david\downloads\pokemongomap-07win\pokemon go live map.exe
FirewallRules: [{C737FA2F-6800-4477-B68E-C042DB4FB191}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{83FFFC1B-E92C-494B-A8DB-CB5A1F0FC28A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{DB5D39D1-DC38-4F9F-82D3-0B10C2E051AA}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{7E6836E1-8989-4DE6-93FE-B8950B83D389}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{1BE9B972-DAE0-48CD-A9B6-9CEB98759624}] => (Allow) LPort=2869
FirewallRules: [{B13CA439-8EF8-4D53-8443-28A12EC11B63}] => (Allow) LPort=1900
FirewallRules: [{63A253C7-D068-4B36-B4A1-132D085EC016}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{61D3400D-D686-436D-95EE-F9EA2FE47995}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{7EC42911-FCF2-471B-8D1F-310FE1787C83}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector\PDR8.EXE
FirewallRules: [{468E14D5-E97C-4CF1-B90B-9EB09BD7F4E0}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{DFCA779A-7277-4BBC-8CC7-E89F79E66F3E}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{162F3FBF-69F0-46D0-B1C0-C53AC5351300}] => (Allow) C:\Program Files (x86)\Intel Corporation\Intel WiDi\WiDiApp.exe
FirewallRules: [{A936D335-1B67-4292-A718-FE48C461F285}] => (Allow) C:\Users\Simon David\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{D0903221-044C-4898-9D98-1E0AF7DDA922}] => (Allow) C:\Users\Simon David\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{21C24155-626D-45CA-BB30-72F8BDAF8A2D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{060C938F-31BD-401A-9D2E-FF6AC864F7CE}] => (Allow) C:\Users\Simon David\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{F02CB34B-C188-47C7-A5A1-78D2D0618BE4}] => (Allow) C:\Users\Simon David\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{FB1B152E-E4DA-43EB-884E-F09C9149833B}] => (Allow) C:\Users\Simon David\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{FB95B892-BE94-4492-AFB5-CFC6B9EDB100}] => (Allow) C:\Users\Simon David\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{C8C62779-4AA6-4203-ABC8-B3F44D12D806}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{C65984E7-6523-40FB-A829-BEFEAD6D3FF3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{23904403-5997-4E29-981F-5037FEEACD41}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{8CBFCDBE-A3CF-4E47-8DA6-2BCC6F13511F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{0F2DB3EB-06AF-461F-A158-4F95EECF539B}C:\program files (x86)\connectify\connectify.exe] => (Allow) C:\program files (x86)\connectify\connectify.exe
FirewallRules: [UDP Query User{2A49F2A6-97F8-47F2-9C20-B182BABC7F15}C:\program files (x86)\connectify\connectify.exe] => (Allow) C:\program files (x86)\connectify\connectify.exe
FirewallRules: [TCP Query User{F68D3169-273B-45E2-8D62-CF48A29E346A}C:\users\simon david\desktop\myphoneexplorer portable\myphoneexplorer portable.exe] => (Allow) C:\users\simon david\desktop\myphoneexplorer portable\myphoneexplorer portable.exe
FirewallRules: [UDP Query User{80E0860D-D90C-4B7C-A0A6-E493EA5767D0}C:\users\simon david\desktop\myphoneexplorer portable\myphoneexplorer portable.exe] => (Allow) C:\users\simon david\desktop\myphoneexplorer portable\myphoneexplorer portable.exe
FirewallRules: [{D21905E0-277E-4E94-8C9A-8BC2588E2E76}] => (Block) C:\users\simon david\desktop\myphoneexplorer portable\myphoneexplorer portable.exe
FirewallRules: [{9DAA8CEA-E903-4540-8E2F-63C479D9F508}] => (Block) C:\users\simon david\desktop\myphoneexplorer portable\myphoneexplorer portable.exe
FirewallRules: [{31211C0A-59EC-4425-A579-CA8807A8FAF5}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe
FirewallRules: [{4F63E609-375F-4F50-8380-C42276253B8F}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe
FirewallRules: [{EFEA9389-B3AF-4CE3-9C93-D61A735699B3}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe
FirewallRules: [{75123A39-29B1-427F-AD78-13531B4C98B5}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe
FirewallRules: [{6BF5D988-AD32-42FB-BA74-51DDD41EAA1C}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe
FirewallRules: [{9D1BCF73-1A05-43B2-8EBA-BFC684EF4F1F}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe
FirewallRules: [TCP Query User{DB22A599-4EED-477F-8834-9F0E8EB99440}C:\users\simon david\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\simon david\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{A06B27D3-D2CF-4190-B1C1-34BF91C2FDB1}C:\users\simon david\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\simon david\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{587F5181-404C-4931-B7F1-D539634C99A4}C:\program files\java\jre6\bin\java.exe] => (Allow) C:\program files\java\jre6\bin\java.exe
FirewallRules: [UDP Query User{3E6FB316-8916-4843-9BCA-4E5333347D56}C:\program files\java\jre6\bin\java.exe] => (Allow) C:\program files\java\jre6\bin\java.exe
FirewallRules: [TCP Query User{5A94E2C9-1F8E-4015-BD2D-7CE5EB51D896}C:\program files\java\jdk1.6.0_43\bin\java.exe] => (Allow) C:\program files\java\jdk1.6.0_43\bin\java.exe
FirewallRules: [UDP Query User{259F1270-EBA7-4F47-8A2A-5B3BDC165172}C:\program files\java\jdk1.6.0_43\bin\java.exe] => (Allow) C:\program files\java\jdk1.6.0_43\bin\java.exe
FirewallRules: [{B370A6B3-D4BD-4CF6-8169-63E0687E4024}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{26D76EBF-904E-4974-ACCC-EF0825B3FF35}] => (Allow) C:\Users\Simon David\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [TCP Query User{545F6F21-46CF-496B-96B6-23C70826ED76}C:\program files (x86)\microsoft games\age of empires ii\empires2.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\empires2.exe
FirewallRules: [UDP Query User{8A688177-2B16-4686-9D96-D68AAFDF7B97}C:\program files (x86)\microsoft games\age of empires ii\empires2.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\empires2.exe
FirewallRules: [TCP Query User{1A26F45B-5023-4DE5-BE0C-474EF4698D58}C:\program files (x86)\microsoft games\age of empires ii\empires2.exe] => (Block) C:\program files (x86)\microsoft games\age of empires ii\empires2.exe
FirewallRules: [UDP Query User{3D037E30-0459-4916-ADFE-2D8335CB7669}C:\program files (x86)\microsoft games\age of empires ii\empires2.exe] => (Block) C:\program files (x86)\microsoft games\age of empires ii\empires2.exe
FirewallRules: [{92974A54-C7FD-4699-92CC-37C7E55E6E05}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6B083DDA-3936-4206-8B2A-E82FBDA12417}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0A6C794E-2819-4775-A7B6-FE51BE93BDD2}] => (Allow) C:\Users\Simon David\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{3E708D5C-B0C2-4781-8416-0751B3049104}] => (Allow) C:\Users\Simon David\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{7DEDDE40-4DDC-4AB9-906C-4682B85E394C}] => (Allow) C:\Users\Simon David\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{8869C97C-671C-4C44-BBA1-43008DB8F2D4}] => (Allow) C:\Users\Simon David\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{D5CFC514-13F8-4DAA-8CA0-A7BCDD16264E}] => (Allow) C:\Users\Simon David\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{E0F729D7-C9CE-42AD-89C4-D7F0A74E9E52}] => (Allow) C:\Users\Simon David\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{769A43FC-3287-49C7-83A9-649F5296787A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{C11E2C35-FAEA-4500-B966-216BF4558D8C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{35927454-F380-4D93-A4B6-F9FBE2CABC99}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{30CD6974-00C6-4DB7-9D76-C06C10C71C79}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{8E6C4110-7924-43FB-88BD-FEA578E28879}] => (Allow) C:\Program Files\iTunes\iTunes.exe

==================== Wiederherstellungspunkte =========================

18-10-2016 10:13:52 Windows Update
24-10-2016 20:27:53 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (10/24/2016 08:27:58 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (10/24/2016 08:20:04 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0

Error: (10/24/2016 08:20:04 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0

Error: (10/24/2016 08:20:04 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0

Error: (10/24/2016 08:20:04 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=23, Autor-ID=8086, Lieferant-ID=0, Lieferant-Typ=0

Error: (10/24/2016 08:20:04 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=21, Autor-ID=8086, Lieferant-ID=0, Lieferant-Typ=0

Error: (10/24/2016 08:20:04 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=18, Autor-ID=8086, Lieferant-ID=0, Lieferant-Typ=0

Error: (10/24/2016 08:20:04 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0

Error: (10/24/2016 08:20:04 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0

Error: (10/24/2016 08:20:04 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0


Systemfehler:
=============
Error: (10/24/2016 08:23:52 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (10/24/2016 08:20:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SWUpdateService" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.

Error: (10/24/2016 08:20:04 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (10/24/2016 08:16:14 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
Es wird bereits eine Instanz des Dienstes ausgeführt.

Error: (10/24/2016 08:15:46 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Management and Security Application User Notification Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/24/2016 08:15:46 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "SAPSetup Automatic Workstation Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/24/2016 08:15:45 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/24/2016 08:15:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/24/2016 08:15:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/24/2016 08:15:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Skype Click to Call PNR Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2016-10-24 21:08:03.648
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\DriverStore\FileRepository\nvsmwu.inf_amd64_be58e4780959fe55\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-10-24 21:08:03.163
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-10-24 20:20:21.588
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-10-24 20:20:21.584
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-10-24 20:20:21.579
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-10-24 20:20:21.572
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-10-24 20:20:21.540
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-10-24 20:20:21.486
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-10-24 20:20:21.482
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-10-24 20:20:21.476
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i7-3610QM CPU @ 2.30GHz
Prozentuale Nutzung des RAM: 26%
Installierter physikalischer RAM: 8089.38 MB
Verfügbarer physikalischer RAM: 5924.39 MB
Summe virtueller Speicher: 16281.38 MB
Verfügbarer virtueller Speicher: 13997.86 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:223.02 GB) (Free:72.54 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 223.6 GB) (Disk ID: 16EE8AA0)
Partition 1: (Active) - (Size=99 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=463 MB) - (Type=27)

==================== Ende von Addition.txt ============================

SimonDavid 25.10.2016 21:50
FRST.txt 1

Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 17-10-2016
durchgeführt von Simon David (Administrator) auf SIMONDAVID-PC (25-10-2016 22:43:57)
Gestartet von C:\Users\Simon David\Desktop\Virus bereinigen
Geladene Profile: Simon David (Verfügbare Profile: Simon David & DefaultAppPool)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\SettingsLauncher.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(SAP AG) C:\Program Files (x86)\SAP\SapSetup\Setup\Updater\NwSapAutoWorkstationUpdateService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\SettingsCmdServer.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\SettingsEventHandler.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe


==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2867984 2012-01-05] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040296 2015-08-28] (Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176952 2016-03-19] (Apple Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1795888 2015-08-08] (NVIDIA Corporation)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-10-16] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [935288 2009-09-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-10-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [67384 2016-03-18] (Apple Inc.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2011-09-28] (cyberlink)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-11-02] (CyberLink)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [NeroFilterCheck] => C:\windows\SysWOW64\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2011-03-30] (CyberLink Corp.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-04] (Intel Corporation)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [210432 2016-07-05] (Geek Software GmbH)
HKLM-x32\...\Run: [Communicator] => C:\Program Files (x86)\Microsoft Office Communicator\communicator.exe [5164712 2013-04-10] (Microsoft Corporation)
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [18544 2016-10-18] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-189922631-1767686969-1414721043-1001\...\Run: [Google Update] => C:\Users\Simon David\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-01] (Google Inc.)
HKU\S-1-5-21-189922631-1767686969-1414721043-1001\...\Run: [Dropbox Update] => C:\Users\Simon David\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-18] (Dropbox, Inc.)
HKU\S-1-5-21-189922631-1767686969-1414721043-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [43984 2016-04-01] (Glarysoft Ltd)
HKU\S-1-5-21-189922631-1767686969-1414721043-1001\...\Run: [Spotify Web Helper] => C:\Users\Simon David\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1554032 2016-07-15] (Spotify Ltd)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt64.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\amd64\FileSyncShell64.dll [2016-10-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\amd64\FileSyncShell64.dll [2016-10-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\amd64\FileSyncShell64.dll [2016-10-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Simon David\AppData\Roaming\Dropbox\bin\DropboxExt.65536.dll [2016-10-10] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\FileSyncShell.dll [2016-10-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\FileSyncShell.dll [2016-10-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Simon David\AppData\Local\Microsoft\OneDrive\17.3.6517.0809_1\FileSyncShell.dll [2016-10-18] (Microsoft Corporation)
Startup: C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-10-15]
ShortcutTarget: Dropbox.lnk -> C:\Users\Simon David\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Outlook 2013.lnk [2015-02-25]
ShortcutTarget: Outlook 2013.lnk -> C:\Program Files\Microsoft Office 15\root\office15\OUTLOOK.EXE (Microsoft Corporation)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{3be798e2-6416-42a2-baeb-49d88e37b506}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{72c27b5a-e0dc-4c8e-beb7-dbe2250fd2ea}: [DhcpNameServer] 139.7.30.126 139.7.30.125
Tcpip\..\Interfaces\{89c8e9c8-cdc0-451b-88f1-31528988f25d}: [NameServer] 131.188.24.131
Tcpip\..\Interfaces\{a599e370-1cca-4d19-b1a7-ce727e2a7ad3}: [DhcpNameServer] 192.168.0.1 127.0.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=about:blank
HKU\S-1-5-21-189922631-1767686969-1414721043-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://www.msn.com/de-de/?pc=UP97&ocid=UP97DHP
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-189922631-1767686969-1414721043-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Kein Name -> {11111111-1111-1111-1111-110511311170} -> Keine Datei
BHO: Kein Name -> {11111111-1111-1111-1111-110511421146} -> Keine Datei
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-09-29] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll [2014-10-07] (Sun Microsystems, Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-11-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2014-10-07] (Sun Microsystems, Inc.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27] (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-03-20] (Microsoft Corporation)
Handler-x32: saphtmlp - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - c:\program files (x86)\sap\frontend\sapgui\saphtmlp.dll [2013-07-19] (SAP, Walldorf)
Handler-x32: sapr3 - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - c:\program files (x86)\sap\frontend\sapgui\saphtmlp.dll [2013-07-19] (SAP, Walldorf)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF DefaultProfile: fpqwpvzx.default
FF ProfilePath: C:\Users\Simon David\AppData\Roaming\Mozilla\Firefox\Profiles\fpqwpvzx.default [2016-10-25]
FF Extension: (Avira Browser Safety) - C:\Users\Simon David\AppData\Roaming\Mozilla\Firefox\Profiles\fpqwpvzx.default\Extensions\abs@avira.com.xpi [2016-10-24]
FF Plugin: @java.com/DTPlugin,version=1.6.0_43 -> C:\windows\system32\npdeployJava1.dll [2014-10-07] (Sun Microsystems, Inc.)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll [2014-10-07] (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2014-06-04] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32.dll [Keine Datei]
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2016-03-08] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-03-20] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2014-06-04] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-10-15] (VideoLAN)
FF Plugin HKU\S-1-5-21-189922631-1767686969-1414721043-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-189922631-1767686969-1414721043-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Simon David\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-189922631-1767686969-1414721043-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2014-06-04] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-189922631-1767686969-1414721043-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\Simon David\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2016-05-09] (Zoom Video Communications, Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default [2016-10-25]
CHR Extension: (Google Präsentationen) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-10-24]
CHR Extension: (Google Docs) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-10-24]
CHR Extension: (Google Drive) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-24]
CHR Extension: (YouTube) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-24]
CHR Extension: (Google Tabellen) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-10-24]
CHR Extension: (Avira Browserschutz) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-10-24]
CHR Extension: (Google Docs Offline) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-24]
CHR Extension: (Skype) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-10-24]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-10-24]
CHR Extension: (Google Mail) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-24]
CHR Extension: (Chrome Media Router) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-24]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]
StartMenuInternet: Google Chrome.WJTQ6AQNMVP4AAN7PAN4JJXY4Q - C:\Users\Simon David\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2780856 2015-10-07] (Microsoft Corporation)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2011-04-20] (CyberLink)
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [328616 2015-10-27] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-08] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-08] (Intel Corporation)
R2 NWSAPAutoWorkstationUpdateSvc; C:\Program Files (x86)\SAP\SAPsetup\Setup\Updater\NwSapAutoWorkstationUpdateService.exe [186488 2013-07-16] (SAP AG)
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [36352 2010-08-20] () [Datei ist nicht signiert]
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-11-30] () [Datei ist nicht signiert]
R2 Settings Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\SettingsLauncher.exe [1594176 2015-06-24] (Samsung Electronics CO., LTD.)
R2 SpeedupService; C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [26632 2016-10-18] (Avira Operations GmbH & Co. KG)
S2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3289448 2016-05-11] (Samsung Electronics Co., Ltd.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 E890C54D; C:\WINDOWS\System32\drivers\E890C54D.sys [478392 2016-07-31] (Kaspersky Lab ZAO)
R1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [20160 2016-04-05] (Glarysoft Ltd)
S0 megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [64352 2016-10-16] (Avago Technologies)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3343872 2016-07-16] (Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvsmwu.inf_amd64_be58e4780959fe55\nvlddmkm.sys [13754936 2016-09-12] (NVIDIA Corporation)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\windows\system32\pwdspio.sys [12504 2013-09-30] ()
R3 RadioHIDMini; C:\WINDOWS\System32\drivers\RadioHIDMini.sys [32168 2015-07-16] (Windows (R) Win 7 DDK provider)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [895256 2015-06-23] (Realtek                                            )
R2 SGDrv; C:\WINDOWS\System32\drivers\SGdrv64.sys [7680 2011-04-11] (Phoenix Technologies Ltd.)
S1 VBoxNetAdp; C:\WINDOWS\System32\DRIVERS\VBoxNetAdp6.sys [117768 2015-11-10] (Oracle Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [194976 2015-11-10] (Oracle Corporation)
R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R1 XQHDrv; C:\WINDOWS\system32\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
R1 XQHDrv; C:\Windows\SysWOW64\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-10-24 20:30 - 2016-10-24 20:30 - 00637459 _____ C:\Users\Simon David\Desktop\Yield Management bei Dienstleistungen.pdf
2016-10-23 22:32 - 2016-10-24 20:33 - 00000000 ____D C:\Users\Simon David\Desktop\Virus bereinigen
2016-10-23 17:49 - 2016-10-23 18:35 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-10-23 17:47 - 2016-10-25 22:43 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-10-22 21:40 - 2016-10-22 21:40 - 00112929 _____ C:\Users\Simon David\Downloads\abschluss_bestanden0c1d02ec-2a9f-4c5c-a1d9-8ba270a96ff8.pdf
2016-10-22 20:54 - 2016-10-22 20:54 - 00247474 _____ C:\Users\Simon David\Downloads\allgemeine_Infos_Strat.Innovationsmanagement_Mayr_WS1617.pdf
2016-10-22 10:49 - 2016-10-22 10:49 - 00057433 _____ C:\Users\Simon David\Downloads\Service_Marketing_ Gruppeneinteilung_Stand_ 18.10.2016.pdf
2016-10-22 10:44 - 2016-10-22 10:44 - 05041731 _____ C:\Users\Simon David\Desktop\WS1617_Skript_Produkt.pdf
2016-10-22 10:30 - 2016-10-22 10:30 - 05041731 _____ C:\Users\Simon David\Downloads\WS1617_Skript_Produkt.pdf
2016-10-21 17:05 - 2016-10-25 22:43 - 00000000 ____D C:\FRST
2016-10-21 14:46 - 2016-10-23 22:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-10-21 11:57 - 2016-10-21 11:57 - 00000000 ____D C:\Users\Simon David\AppData\Local\Avira
2016-10-21 10:57 - 2016-10-24 22:20 - 01368548 _____ C:\WINDOWS\SysWOW64\winapp2_disk.csv
2016-10-21 10:57 - 2016-10-24 20:24 - 00000000 ____D C:\Users\Public\Speedup Sessions
2016-10-21 10:56 - 2016-10-21 10:56 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avusbflt_01011.Wdf
2016-10-21 10:52 - 2016-10-22 13:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-10-21 10:35 - 2016-10-21 10:38 - 04480896 _____ (Avira Operations GmbH & Co. KG) C:\Users\Simon David\Downloads\avira_de_fass0_5809cd38acd08__adw.exe
2016-10-18 10:14 - 2016-10-18 10:14 - 00604928 _____ (Reimage) C:\Users\Simon David\Downloads\ReimageRepair (1).exe
2016-10-18 10:12 - 2016-10-18 10:13 - 00604928 _____ (Reimage) C:\Users\Simon David\Downloads\ReimageRepair.exe
2016-10-18 10:08 - 2016-10-18 10:08 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-10-18 10:06 - 2016-10-19 21:25 - 00000000 ____D C:\Users\Simon David\AppData\Local\ConnectedDevicesPlatform
2016-10-18 10:06 - 2016-10-18 10:06 - 00000020 ___SH C:\Users\Simon David\ntuser.ini
2016-10-16 23:23 - 2016-10-16 22:41 - 00000000 ___DC C:\WINDOWS\Panther
2016-10-16 23:21 - 2016-10-16 23:21 - 00000000 ____D C:\Windows.old
2016-10-16 23:20 - 2016-10-16 23:20 - 23680512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 22568960 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 22219328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 20965240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 19418624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 19416576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 17187840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 13867520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 13434368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 13081088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 12345856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 12174848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 09129984 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 08158672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 08126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 08075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 07812448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 07792640 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 07654912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 07625728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 07467520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 07219200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 06654616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 06574592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 06108672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 06043136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05722320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05683712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05622088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05384192 _____ (Microsoft) C:\WINDOWS\system32\dbgeng.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05376000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05111296 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04747776 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04673296 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04596224 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 04557824 _____ (Microsoft) C:\WINDOWS\SysWOW64\dbgeng.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04136960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 04129928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03892352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03776512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03753984 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03617792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 03520512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 03496960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03435008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03405824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03369984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03305984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03299328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 03288064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03202048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03196416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03116544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 03105792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02999296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 02947072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02914304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02913104 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02860032 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2016-10-16 23:20 - 2016-10-16 23:20 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2016-10-16 23:20 - 2016-10-16 23:20 - 02750384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02749440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02740224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02688512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02667520 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02481768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02476544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02446696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02423296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02390016 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 02370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02360832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02356736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02315264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02289664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02265088 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02256592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02256224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 02254336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02213248 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02190176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 02183792 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02166232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02107392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-10-16 23:20 - 2016-10-16 23:20 - 02083840 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02049480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-10-16 23:20 - 2016-10-16 23:20 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01993216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01990640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01980768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01980416 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01966288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01912320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01891328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01883784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01880576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01853232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01847048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01840640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01778176 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01738040 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01710080 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01705976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01690112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01639424 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01594368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01589248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01570680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01557296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01555456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 01553408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 01507840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01503032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01493504 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01472536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01469120 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01453992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01377016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 01369088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01362504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpmde.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01361408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01360456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01358336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01353768 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-10-16 23:20 - 2016-10-16 23:20 - 01349120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01343928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01322848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01321472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01320448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01293312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 01292640 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01291264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01266176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01264912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01243136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01218912 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01181536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 01176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01172472 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01157000 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01130496 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01123368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01117024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01112928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01107456 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01078784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01071728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01066328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01066104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01051104 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-10-16 23:20 - 2016-10-16 23:20 - 01046880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01037312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01029632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01022304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01013760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01006080 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01004032 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 01000288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-10-16 23:20 - 2016-10-16 23:20 - 00998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00988512 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00982528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00980824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00975744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00966144 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00965472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00965120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00959104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00955528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2016-10-16 23:20 - 2016-10-16 23:20 - 00947200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_sr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00945664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00939872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00918848 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00911872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll

SimonDavid 25.10.2016 21:51
FRST.txt 2

Code:
2016-10-16 23:20 - 2016-10-16 23:20 - 00894088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00875520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00862064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00860512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00857600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00856872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00819200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00811416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00804864 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00790760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00782176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00773200 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00773168 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00770560 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00764936 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00761344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00755656 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00755200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00725664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00719872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_sr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00719360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00702976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00681304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00671744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkCollectionAgent.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00665768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00657760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00650240 _____ (Microsoft) C:\WINDOWS\system32\DbgModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00649568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00648192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00646136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00640976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00628032 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00619368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00611328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00601200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00595488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00587968 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrGidsHandler.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00557408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00553312 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00531456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00529928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00523712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMRServer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00518656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00512416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00509952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00498960 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00496872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00461312 _____ (Microsoft) C:\WINDOWS\SysWOW64\DbgModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetworkCollectionAgent.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00455040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00450392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00446124 _____ C:\WINDOWS\system32\ApnDatabase.xml
2016-10-16 23:20 - 2016-10-16 23:20 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDec.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00435040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00434528 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00433832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00424640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00423776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00418304 _____ C:\WINDOWS\system32\Windows.Perception.Stub.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00413184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00409944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2016-10-16 23:20 - 2016-10-16 23:20 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00406016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00402352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00401760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00396168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00387872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00382272 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00379744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\NmaDirect.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00361104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00341936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00340320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00327680 _____ C:\WINDOWS\system32\wc_storage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00321792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00313560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00303968 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlancfg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2016-10-16 23:20 - 2016-10-16 23:20 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NmaDirect.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CryptoWinRT.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00280472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00272720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00265728 _____ C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00262960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DataExchange.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2016-10-16 23:20 - 2016-10-16 23:20 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlancfg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAC3ENC.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToReceiver.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00218008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00206096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00178528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvenotify.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00170960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00169056 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovslegacy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS
2016-10-16 23:20 - 2016-10-16 23:20 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00160096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XamlTileRender.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RelPost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00151224 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00146784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovslegacy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinRtTracing.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MediaFoundation.DefaultPerceptionProvider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00133472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00130912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00121368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00119648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\EhStorTcgDrv.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00116576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00108384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Printers.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwrshplugin.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00090400 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2016-10-16 23:20 - 2016-10-16 23:20 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00083120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00081760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00079536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00074080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00073568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll

SimonDavid 25.10.2016 21:52
FRST.txt 3

Code:
2016-10-16 23:20 - 2016-10-16 23:20 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pwrshplugin.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappprxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Sens.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AddressParser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TempSignedLicenseExchangeTask.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00064352 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\MegaSas2i.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00062816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.UserDeviceAssociation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManagerApi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundMediaPolicy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00057400 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappprxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AddressParser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactActivation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00050880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundMediaPolicy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ffbroker.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactActivation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00044472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00036168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\spaceman.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00023392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cmimcext.sys
2016-10-16 23:20 - 2016-10-16 23:20 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\c_GSM7.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL
2016-10-16 23:20 - 2016-10-16 23:20 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2016-10-16 23:20 - 2016-10-16 23:20 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccessRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccessRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
2016-10-16 23:20 - 2016-10-16 23:20 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2016-10-16 23:20 - 2016-10-16 23:20 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneutilRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneutilRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneServiceRes.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
2016-10-16 23:20 - 2016-10-16 23:20 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2016-10-16 23:16 - 2016-07-15 20:29 - 09893376 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons000a.dll
2016-10-16 23:16 - 2016-07-15 20:29 - 05739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2016-10-16 23:16 - 2016-07-15 20:29 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2016-10-16 23:16 - 2016-07-15 20:19 - 09681920 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData000a.dll
2016-10-16 23:16 - 2016-07-15 20:14 - 06354944 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2016-10-16 23:16 - 2016-07-15 19:45 - 09893376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons000a.dll
2016-10-16 23:16 - 2016-07-15 19:45 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2016-10-16 23:16 - 2016-07-15 19:39 - 09565696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData000a.dll
2016-10-16 23:16 - 2016-07-15 19:29 - 05489664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2016-10-16 23:15 - 2016-10-16 23:15 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-10-16 23:10 - 2016-10-16 23:10 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2016-10-16 23:10 - 2016-10-16 23:10 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2016-10-16 23:10 - 2016-10-16 23:10 - 00000000 ____D C:\WINDOWS\system32\msmq
2016-10-16 23:10 - 2016-10-16 23:10 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2016-10-16 23:10 - 2016-10-16 23:10 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-10-16 23:10 - 2016-10-16 23:10 - 00000000 ____D C:\Program Files\MSBuild
2016-10-16 23:10 - 2016-10-16 23:10 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-10-16 23:10 - 2016-10-16 23:10 - 00000000 ____D C:\inetpub
2016-10-16 23:10 - 2016-10-16 22:33 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-10-16 23:09 - 2016-10-16 23:09 - 00199008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2016-10-16 23:09 - 2016-05-25 15:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-10-16 23:09 - 2016-05-25 15:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-10-16 23:09 - 2016-05-25 15:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2016-10-16 23:09 - 2016-05-25 12:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2016-10-16 23:09 - 2016-05-25 12:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-10-16 23:09 - 2016-05-25 12:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-10-16 22:41 - 2016-10-16 22:41 - 00000000 ____D C:\ProgramData\USOShared
2016-10-16 22:40 - 2016-10-16 22:40 - 00011433 _____ C:\WINDOWS\diagwrn.xml
2016-10-16 22:40 - 2016-10-16 22:40 - 00011433 _____ C:\WINDOWS\diagerr.xml
2016-10-16 22:39 - 2016-10-24 20:20 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-10-16 22:39 - 2016-10-16 22:39 - 00003876 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA1d12e6e98a33aea
2016-10-16 22:39 - 2016-10-16 22:39 - 00003688 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1d12eb384cf5c23
2016-10-16 22:39 - 2016-10-16 22:39 - 00003608 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core1d12e6e9879441d
2016-10-16 22:39 - 2016-10-16 22:39 - 00003464 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore1d12eb38493d8e4
2016-10-16 22:39 - 2016-10-16 22:39 - 00002978 _____ C:\WINDOWS\System32\Tasks\SettingsEventHandlerMonitor
2016-10-16 22:39 - 2016-10-16 22:39 - 00002966 _____ C:\WINDOWS\System32\Tasks\SettingsHibernateMonitor
2016-10-16 22:39 - 2016-10-16 22:39 - 00002834 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task
2016-10-16 22:39 - 2016-10-16 22:39 - 00002758 _____ C:\WINDOWS\System32\Tasks\LaunchSettings
2016-10-16 22:39 - 2016-10-16 22:39 - 00002518 _____ C:\WINDOWS\System32\Tasks\GlaryInitialize 5
2016-10-16 22:39 - 2016-10-16 22:39 - 00002346 _____ C:\WINDOWS\System32\Tasks\{23693454-5605-4AD3-89CF-1663F5C5BCE8}
2016-10-16 22:39 - 2016-10-16 22:39 - 00002322 _____ C:\WINDOWS\System32\Tasks\SAgent
2016-10-16 22:39 - 2016-10-16 22:39 - 00002224 _____ C:\WINDOWS\System32\Tasks\GU5SkipUAC
2016-10-16 22:39 - 2016-10-16 22:39 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2016-10-16 22:39 - 2016-10-16 22:39 - 00000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2016-10-16 22:39 - 2016-10-16 22:39 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple
2016-10-16 22:39 - 2015-11-09 19:33 - 00004340 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA
2016-10-16 22:39 - 2015-11-09 19:33 - 00004236 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA
2016-10-16 22:39 - 2015-11-09 19:33 - 00004216 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-10-16 22:39 - 2015-11-09 19:33 - 00003964 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-10-16 22:39 - 2015-11-09 19:33 - 00003944 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core
2016-10-16 22:39 - 2015-11-09 19:33 - 00003932 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-10-16 22:39 - 2015-11-09 19:33 - 00003840 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core
2016-10-16 22:39 - 2015-11-09 19:33 - 00003602 _____ C:\WINDOWS\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d
2016-10-16 22:39 - 2015-11-09 19:33 - 00003428 _____ C:\WINDOWS\System32\Tasks\SamsungSupportCenter
2016-10-16 22:39 - 2015-11-09 19:33 - 00003402 _____ C:\WINDOWS\System32\Tasks\Xerox PhotoCafe Communicator
2016-10-16 22:39 - 2015-11-09 19:33 - 00003300 _____ C:\WINDOWS\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon
2016-10-16 22:39 - 2015-11-09 19:33 - 00003206 _____ C:\WINDOWS\System32\Tasks\{72632B04-062F-4F28-A874-2060D568F10B}
2016-10-16 22:39 - 2012-03-12 15:53 - 00003148 _____ C:\WINDOWS\System32\Tasks\MirageAgent
2016-10-16 22:33 - 2016-10-16 22:33 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-10-16 22:33 - 2016-10-16 22:33 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
2016-10-16 22:33 - 2016-10-16 22:33 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-10-16 22:33 - 2016-10-16 22:33 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
2016-10-16 22:33 - 2016-10-16 22:33 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-10-16 22:28 - 2016-10-16 22:33 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2016-10-16 22:28 - 2016-10-16 22:28 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2016-10-16 22:27 - 2016-10-24 20:19 - 00000000 ____D C:\Users\Simon David
2016-10-16 22:27 - 2016-10-16 22:36 - 00000000 ____D C:\Users\DefaultAppPool
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Vorlagen
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Startmenü
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Netzwerkumgebung
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Lokale Einstellungen
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Eigene Dateien
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Druckumgebung
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Documents\Eigene Videos
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Documents\Eigene Musik
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Documents\Eigene Bilder
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\AppData\Local\Verlauf
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\AppData\Local\Anwendungsdaten
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\Simon David\Anwendungsdaten
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Videos
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2016-10-16 22:27 - 2016-10-16 22:27 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2016-10-16 22:26 - 2016-07-16 13:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2016-10-16 22:25 - 2016-10-24 20:26 - 01980672 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-10-16 22:25 - 2016-10-16 22:25 - 01604660 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2016-10-16 22:24 - 2016-10-16 22:28 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-10-16 22:24 - 2016-10-16 22:28 - 00000000 ____D C:\Program Files\Intel
2016-10-16 22:24 - 2016-10-16 22:28 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-10-16 22:24 - 2016-10-16 22:24 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2016-10-16 22:24 - 2016-10-16 22:24 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2016-10-16 22:24 - 2016-10-16 22:24 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2016-10-16 22:24 - 2016-10-16 22:24 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2016-10-16 22:24 - 2016-10-16 22:24 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-10-16 22:24 - 2016-10-16 22:24 - 00000000 ____D C:\ProgramData\NVIDIA
2016-10-16 22:24 - 2016-10-16 22:24 - 00000000 ____D C:\Program Files\Synaptics
2016-10-16 22:24 - 2016-10-16 22:24 - 00000000 ____D C:\Program Files\Realtek
2016-10-16 22:24 - 2016-08-01 14:54 - 06386744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2016-10-16 22:24 - 2016-08-01 14:54 - 02466360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2016-10-16 22:24 - 2016-08-01 14:54 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2016-10-16 22:24 - 2016-08-01 14:54 - 01365048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2016-10-16 22:24 - 2016-08-01 14:54 - 00547896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2016-10-16 22:24 - 2016-08-01 14:54 - 00393784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2016-10-16 22:24 - 2016-08-01 14:54 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2016-10-16 22:24 - 2016-08-01 14:54 - 00071224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2016-10-16 22:24 - 2016-07-28 15:02 - 07242545 _____ C:\WINDOWS\system32\nvcoproc.bin
2016-10-16 22:24 - 2015-10-27 20:00 - 00072696 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2016-10-16 22:24 - 2015-10-27 20:00 - 00069120 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2016-10-16 22:23 - 2016-10-25 22:39 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-10-16 22:23 - 2016-10-23 22:30 - 00353528 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-10-16 22:23 - 2016-10-16 22:23 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2016-10-15 12:57 - 2016-10-16 22:33 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-10-07 20:06 - 2016-10-07 20:06 - 01000960 _____ C:\Users\Simon David\Downloads\Turnier_7_Mannschaften_1_Gruppe_Ligamodus_2_Felder.xls
2016-10-07 19:58 - 2016-10-07 19:58 - 00095232 _____ C:\Users\Simon David\Downloads\2x7.xls
2016-10-07 19:55 - 2016-10-07 19:55 - 00450048 _____ C:\Users\Simon David\Downloads\13992-Turnierplan-01g.xls
2016-10-07 19:48 - 2016-10-09 18:10 - 00208896 _____ C:\Users\Simon David\Desktop\DerAckiKommtSpäter.xls
2016-10-07 10:26 - 2016-10-07 10:26 - 00000000 ____D C:\ProgramData\Emsisoft
2016-10-07 10:13 - 2016-10-07 10:15 - 00000000 ____D C:\Users\Simon David\Downloads\adblock_plus_pop_up_addon-0.9.2-fx
2016-10-07 10:11 - 2015-06-01 12:17 - 00151374 _____ C:\Users\Simon David\Downloads\adblock_plus_pop_up_addon-0.9.2-fx.xpi
2016-10-07 09:43 - 2016-10-23 22:30 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2016-10-07 09:36 - 2016-10-07 09:36 - 01474568 _____ C:\Users\Simon David\Downloads\Emsisoft Anti Malware - CHIP-Installer.exe
2016-10-07 09:20 - 2016-10-07 09:20 - 00221805 _____ C:\Users\Simon David\Downloads\Anmeldezettel_IMP_WS16.pdf
2016-10-07 09:18 - 2016-10-07 09:18 - 00292350 _____ C:\Users\Simon David\Downloads\Ankuendigung_Seminar IMP_WS16.pdf
2016-10-01 10:16 - 2016-10-01 10:16 - 00162927 _____ C:\Users\Simon David\Downloads\Ressourceneffiziente Herstellung von Zahnraedern durch Kaltmassivumformung_BA_PA_ki.pdf
2016-10-01 10:13 - 2016-10-01 10:13 - 00020573 _____ C:\Users\Simon David\Downloads\Versuchstermine nach Gruppen (1).pdf
2016-10-01 10:05 - 2016-10-01 10:05 - 00020573 _____ C:\Users\Simon David\Downloads\Versuchstermine nach Gruppen.pdf
2016-10-01 10:03 - 2016-10-01 10:03 - 00047212 _____ C:\Users\Simon David\Downloads\Praktikumsrichtlinien.pdf
2016-09-29 22:37 - 2016-09-29 22:37 - 00264807 _____ C:\Users\Simon David\Desktop\Nadine Geburtstag.pdf
2016-09-26 18:31 - 2016-09-26 18:31 - 00627655 _____ C:\Users\Simon David\Downloads\2015_2016 WS Technische Produktgestaltung.pdf
2016-09-26 18:30 - 2016-09-26 18:30 - 00123470 _____ C:\Users\Simon David\Downloads\_ _TPG_ _Fragenkatalog_2.pdf
2016-09-26 18:28 - 2016-09-26 18:28 - 00282462 _____ C:\Users\Simon David\Downloads\_ _ TPG_ _Fragenkatalog.pdf
2016-09-26 18:27 - 2016-09-26 18:27 - 00710966 _____ C:\Users\Simon David\Downloads\_ _TPG_ _Zusammenfassung.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-10-25 21:25 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-10-25 21:25 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-10-24 20:26 - 2016-07-17 00:51 - 00732032 _____ C:\WINDOWS\system32\perfh007.dat
2016-10-24 20:26 - 2016-07-17 00:51 - 00165274 _____ C:\WINDOWS\system32\perfc007.dat
2016-10-24 20:24 - 2016-04-05 19:36 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 5
2016-10-24 20:24 - 2015-02-26 16:28 - 00000000 ____D C:\Users\Simon David\Documents\Outlook-Dateien
2016-10-24 20:24 - 2013-05-22 17:56 - 00000000 ____D C:\Users\Simon David\Tracing
2016-10-24 20:24 - 2013-04-10 17:58 - 00000000 ___RD C:\Users\Simon David\Dropbox
2016-10-24 20:23 - 2016-04-05 15:59 - 00000000 __SHD C:\Users\Simon David\IntelGraphicsProfiles
2016-10-24 20:20 - 2016-04-05 15:53 - 00142832 ____N (CyberLink Corp.) C:\WINDOWS\system32\Drivers\rikvm_38F51D56.sys
2016-10-24 20:20 - 2014-10-12 13:56 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-10-24 20:19 - 2016-07-16 08:04 - 00262144 _____ C:\WINDOWS\system32\config\BBI
2016-10-24 20:16 - 2016-07-31 11:38 - 00000000 ____D C:\AdwCleaner
2016-10-24 20:15 - 2014-05-11 19:19 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-10-24 17:41 - 2013-04-10 18:26 - 00000000 ____D C:\Users\Simon David\AppData\Local\Spotify
2016-10-24 17:41 - 2013-04-10 18:25 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Spotify
2016-10-24 07:01 - 2016-07-16 13:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-10-24 07:01 - 2016-04-04 21:53 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\GlarySoft
2016-10-23 22:30 - 2015-06-08 20:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-10-23 22:30 - 2014-10-16 00:20 - 00000000 ____D C:\Program Files (x86)\Avira
2016-10-23 18:36 - 2015-10-27 13:29 - 00000000 ____D C:\Users\Simon David\Desktop\Master
2016-10-23 18:36 - 2015-03-18 17:34 - 00000000 ____D C:\Users\Simon David\Desktop\Privat
2016-10-23 18:35 - 2014-11-30 13:33 - 00000000 ____D C:\Users\Simon David\Desktop\Bewerbungen
2016-10-23 17:49 - 2016-07-31 12:03 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-10-23 17:48 - 2016-07-31 12:04 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-10-22 13:12 - 2014-10-16 00:20 - 00000000 ____D C:\ProgramData\Avira
2016-10-22 13:12 - 2014-06-12 15:56 - 00000000 ____D C:\ProgramData\Package Cache
2016-10-22 13:08 - 2014-10-16 00:21 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Avira
2016-10-21 17:08 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\INF
2016-10-20 22:16 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\rescache
2016-10-19 21:25 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\appcompat
2016-10-18 10:23 - 2016-04-05 15:59 - 00000000 ____D C:\Users\Simon David\AppData\Local\Packages
2016-10-18 10:08 - 2016-04-05 16:01 - 00002444 _____ C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-10-18 10:08 - 2015-02-25 23:55 - 00000000 ___RD C:\Users\Simon David\OneDrive
2016-10-18 10:08 - 2015-02-25 18:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-10-18 10:06 - 2016-04-05 15:59 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2016-10-18 10:06 - 2016-02-13 19:30 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-10-16 23:23 - 2016-07-16 13:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\dsc
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ___RD C:\Program Files\Windows Defender
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\setup
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\migwiz
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\et-EE
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\es-MX
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\en-GB
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Provisioning
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-10-16 23:21 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-10-16 23:21 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-10-16 23:21 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-10-16 23:16 - 2016-07-17 00:52 - 00000000 ____D C:\WINDOWS\OCR
2016-10-16 23:10 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2016-10-16 23:10 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2016-10-16 23:10 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\MUI
2016-10-16 23:10 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2016-10-16 23:10 - 2016-07-16 13:44 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2016-10-16 23:10 - 2016-07-16 13:44 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2016-10-16 23:10 - 2016-07-16 13:44 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2016-10-16 23:10 - 2016-07-16 13:44 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2016-10-16 23:10 - 2016-07-16 13:44 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2016-10-16 23:10 - 2016-07-16 13:44 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2016-10-16 23:10 - 2016-07-16 13:44 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2016-10-16 23:10 - 2016-07-16 13:43 - 01414144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2016-10-16 23:10 - 2016-07-16 13:43 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2016-10-16 23:10 - 2016-07-16 13:43 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2016-10-16 23:10 - 2016-07-16 13:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2016-10-16 23:10 - 2016-07-16 13:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2016-10-16 23:10 - 2016-07-16 13:43 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2016-10-16 23:10 - 2016-07-16 13:43 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2016-10-16 23:10 - 2016-07-16 13:43 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2016-10-16 23:10 - 2016-07-16 13:43 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2016-10-16 23:10 - 2016-07-16 13:43 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2016-10-16 22:41 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\USOPrivate
2016-10-16 22:41 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows NT
2016-10-16 22:40 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-10-16 22:40 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Registration
2016-10-16 22:40 - 2016-07-16 08:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2016-10-16 22:40 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2016-10-16 22:38 - 2016-04-05 15:55 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-10-16 22:37 - 2016-07-16 13:47 - 00000000 __RSD C:\WINDOWS\Media
2016-10-16 22:37 - 2016-07-16 13:47 - 00000000 __RHD C:\Users\Public\Libraries
2016-10-16 22:33 - 2016-07-31 20:31 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Nox
2016-10-16 22:33 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-10-16 22:33 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2016-10-16 22:33 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-10-16 22:33 - 2016-05-30 19:01 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2016-10-16 22:33 - 2016-04-05 19:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
2016-10-16 22:33 - 2016-04-01 11:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Partition Wizard Free 9.1
2016-10-16 22:33 - 2016-03-27 15:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-10-16 22:33 - 2016-03-04 16:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Worksheet Crafter Testversion
2016-10-16 22:33 - 2016-02-13 19:12 - 00000000 ____D C:\WINDOWS\ShellNew
2016-10-16 22:33 - 2015-11-16 14:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2016-10-16 22:33 - 2015-10-30 08:28 - 00000000 ____D C:\Users\Default.migrated
2016-10-16 22:33 - 2015-08-11 15:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2016-10-16 22:33 - 2015-02-04 11:23 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-10-16 22:33 - 2014-11-30 14:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2016-10-16 22:33 - 2014-11-30 13:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2016-10-16 22:33 - 2014-10-07 15:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tecnomatix
2016-10-16 22:33 - 2014-06-12 15:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange
2016-10-16 22:33 - 2014-01-02 13:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2016-10-16 22:33 - 2013-10-21 15:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SAP Front End
2016-10-16 22:33 - 2013-07-21 21:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2016-10-16 22:33 - 2013-07-21 20:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP
2016-10-16 22:33 - 2013-07-11 22:31 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-10-16 22:33 - 2013-06-12 10:47 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenVPN
2016-10-16 22:33 - 2013-06-12 10:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2016-10-16 22:33 - 2013-05-06 17:34 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Siemens LOGO!Soft
2016-10-16 22:33 - 2013-04-15 11:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-10-16 22:33 - 2013-04-15 01:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-10-16 22:33 - 2013-04-10 18:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-10-16 22:33 - 2013-04-10 18:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VLC Setup Helper
2016-10-16 22:33 - 2012-03-12 15:53 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam
2016-10-16 22:33 - 2012-03-12 15:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Media Suite
2016-10-16 22:33 - 2012-03-12 15:43 - 00000000 ____D C:\WINDOWS\tr
2016-10-16 22:33 - 2012-03-12 15:43 - 00000000 ____D C:\WINDOWS\th
2016-10-16 22:33 - 2012-03-12 15:43 - 00000000 ____D C:\WINDOWS\sv
2016-10-16 22:33 - 2012-03-12 15:43 - 00000000 ____D C:\WINDOWS\sl
2016-10-16 22:33 - 2012-03-12 15:43 - 00000000 ____D C:\WINDOWS\sk
2016-10-16 22:33 - 2012-03-12 15:43 - 00000000 ____D C:\WINDOWS\ru
2016-10-16 22:33 - 2012-03-12 15:43 - 00000000 ____D C:\WINDOWS\ro
2016-10-16 22:33 - 2012-03-12 15:43 - 00000000 ____D C:\WINDOWS\pl
2016-10-16 22:33 - 2012-03-12 15:37 - 00000000 ____D C:\WINDOWS\en
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\no
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\nl
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\lv
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\lt
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\ko
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\it
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\hu
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\hr
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\he
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\fr
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\fi
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\es
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\el
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\de
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\da
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\cs
2016-10-16 22:33 - 2012-03-12 15:36 - 00000000 ____D C:\WINDOWS\bg
2016-10-16 22:33 - 2012-03-12 15:35 - 00000000 ____D C:\WINDOWS\ar
2016-10-16 22:33 - 2012-03-12 14:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2016-10-16 22:29 - 2016-07-23 15:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2016-10-16 22:29 - 2016-07-17 00:50 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\spool
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\IME
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\schemas
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-10-16 22:29 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\IME
2016-10-16 22:29 - 2015-02-04 11:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games
2016-10-16 22:29 - 2014-10-12 13:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-10-16 22:29 - 2012-03-13 06:08 - 00000000 ___RD C:\Users\Public\Recorded TV
2016-10-16 22:29 - 2012-03-12 15:19 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles
2016-10-16 22:29 - 2012-03-12 14:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xerox
2016-10-16 22:29 - 2012-03-12 14:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-10-16 22:28 - 2016-07-16 13:47 - 00000000 __SHD C:\Program Files\Windows Sidebar
2016-10-16 22:28 - 2016-07-16 13:47 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2016-10-16 22:28 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-10-16 22:28 - 2012-03-12 14:35 - 00000000 ____D C:\Program Files (x86)\Intel
2016-10-16 22:28 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Microsoft Games
2016-10-16 22:25 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\PrintDialog
2016-10-16 22:25 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\MiracastView
2016-10-16 22:25 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-10-16 22:25 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-10-16 22:24 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Help
2016-10-16 22:01 - 2016-07-17 01:55 - 00000000 ___HD C:\$WINDOWS.~BT
2016-10-16 21:45 - 2015-12-04 18:47 - 00001146 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d12eb384cf5c23.job
2016-10-15 20:21 - 2015-12-04 10:34 - 00001172 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001UA1d12e6e98a33aea.job
2016-10-15 12:57 - 2013-04-10 17:57 - 00000000 ____D C:\Users\Simon David\AppData\Roaming\Dropbox
2016-10-15 12:53 - 2015-12-04 18:47 - 00001142 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d12eb38493d8e4.job
2016-10-15 11:36 - 2013-04-15 00:59 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-10-15 11:36 - 2013-04-15 00:59 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-10-15 10:42 - 2014-01-02 13:19 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-10-13 22:26 - 2014-01-02 13:19 - 143495576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-10-11 10:21 - 2015-12-04 10:34 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-189922631-1767686969-1414721043-1001Core1d12e6e9879441d.job
2016-10-03 22:22 - 2013-04-10 18:16 - 00002518 _____ C:\Users\Simon David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-10-03 22:09 - 2016-07-16 13:49 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-10-03 22:09 - 2016-07-16 13:49 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-05-11 19:24 - 2014-05-11 19:24 - 0005265 _____ () C:\Users\Simon David\AppData\Roaming\callbanner.png
2015-04-13 20:05 - 2015-04-13 20:07 - 0007680 ___SH () C:\Users\Simon David\AppData\Roaming\Thumbs.db
2013-11-07 12:25 - 2014-10-24 10:39 - 0000098 _____ () C:\Users\Simon David\AppData\Roaming\WB.CFG
2013-12-31 18:36 - 2014-01-03 14:18 - 0000005 _____ () C:\Users\Simon David\AppData\Roaming\WBPU-Q5-TTL.DAT
2013-11-07 12:25 - 2014-01-29 07:29 - 0000005 _____ () C:\Users\Simon David\AppData\Roaming\WBPU-TTL.DAT
2013-06-12 21:30 - 2015-02-08 22:29 - 0008704 _____ () C:\Users\Simon David\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-11-16 22:34 - 2016-03-09 11:12 - 0000026 _____ () C:\Users\Simon David\AppData\Local\isoworkshop.ini
2013-11-30 13:52 - 2013-12-03 10:48 - 0000600 _____ () C:\Users\Simon David\AppData\Local\PUTTY.RND
2015-11-09 10:46 - 2015-11-09 10:46 - 0000218 _____ () C:\Users\Simon David\AppData\Local\recently-used.xbel
2016-10-16 22:24 - 2016-10-16 22:24 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2013-04-14 19:40 - 2013-04-14 19:40 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
2012-03-12 15:50 - 2012-03-12 15:50 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2012-03-12 15:47 - 2012-03-12 15:48 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2012-03-12 15:46 - 2012-03-12 15:47 - 0000106 _____ () C:\ProgramData\{80E158EA-7181-40FE-A701-301CE6BE64AB}.log
2012-03-12 15:48 - 2012-03-12 15:49 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
2012-03-12 15:49 - 2012-03-12 15:50 - 0000108 _____ () C:\ProgramData\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}.log

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-10-16 22:23

==================== Ende von FRST.txt ============================

cosinus 26.10.2016 08:56
FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
CHR Extension: (Avira Browserschutz) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-10-24]
FF Extension: (Avira Browser Safety) - C:\Users\Simon David\AppData\Roaming\Mozilla\Firefox\Profiles\fpqwpvzx.default\Extensions\abs@avira.com.xpi [2016-10-24]
BHO: Kein Name -> {11111111-1111-1111-1111-110511311170} -> Keine Datei
BHO: Kein Name -> {11111111-1111-1111-1111-110511421146} -> Keine Datei
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [18544 2016-10-18] (Avira Operations GmbH & Co. KG)
C:\Program Files (x86)\Avira\
Task: {154B9669-310D-43DE-BC74-B5F3282FF228} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {251F2D66-9355-45A1-A099-ED7C9043173C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {2881AB42-528F-4BD7-81CD-28BA9F9D8B61} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {2957CC2A-68FA-4D29-BD66-C71287187311} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {32295609-3691-47ED-84C4-BABD3E9F8001} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {52C301DC-F26E-4A76-ADC4-74A8A7B1262F} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {56C44044-C792-485F-91FF-B7E5FC4CFC84} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
Task: {8BFEE2C6-348C-479B-8283-47541EFD8BFF} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {B3720FE6-94C8-4683-9E60-19DB1750E854} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {B6945509-38F2-4C42-AAB2-3BDBB688FBEF} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {C7156127-0BB7-41E5-8904-E20CF304D3B4} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {C95D9F4F-C80F-4165-B705-8577A80EA212} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {DE506BBB-A5C2-4632-B610-A48FA61EAD80} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {E3FC424A-D50D-40A1-A2E7-222A05B44868} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


SimonDavid 26.10.2016 11:15
Code:
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 17-10-2016
durchgeführt von Simon David (26-10-2016 12:11:02) Run:1
Gestartet von C:\Users\Simon David\Desktop\Virus bereinigen
Geladene Profile: Simon David (Verfügbare Profile: Simon David & DefaultAppPool)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
CHR Extension: (Avira Browserschutz) - C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-10-24]
FF Extension: (Avira Browser Safety) - C:\Users\Simon David\AppData\Roaming\Mozilla\Firefox\Profiles\fpqwpvzx.default\Extensions\abs@avira.com.xpi [2016-10-24]
BHO: Kein Name -> {11111111-1111-1111-1111-110511311170} -> Keine Datei
BHO: Kein Name -> {11111111-1111-1111-1111-110511421146} -> Keine Datei
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [18544 2016-10-18] (Avira Operations GmbH & Co. KG)
C:\Program Files (x86)\Avira\
Task: {154B9669-310D-43DE-BC74-B5F3282FF228} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {251F2D66-9355-45A1-A099-ED7C9043173C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {2881AB42-528F-4BD7-81CD-28BA9F9D8B61} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {2957CC2A-68FA-4D29-BD66-C71287187311} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {32295609-3691-47ED-84C4-BABD3E9F8001} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {52C301DC-F26E-4A76-ADC4-74A8A7B1262F} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {56C44044-C792-485F-91FF-B7E5FC4CFC84} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
Task: {8BFEE2C6-348C-479B-8283-47541EFD8BFF} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {B3720FE6-94C8-4683-9E60-19DB1750E854} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {B6945509-38F2-4C42-AAB2-3BDBB688FBEF} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {C7156127-0BB7-41E5-8904-E20CF304D3B4} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {C95D9F4F-C80F-4165-B705-8577A80EA212} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {DE506BBB-A5C2-4632-B610-A48FA61EAD80} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {E3FC424A-D50D-40A1-A2E7-222A05B44868} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
emptytemp:
       
*****************

C:\Users\Simon David\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk => erfolgreich verschoben
C:\Users\Simon David\AppData\Roaming\Mozilla\Firefox\Profiles\fpqwpvzx.default\Extensions\abs@avira.com.xpi => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511311170}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{11111111-1111-1111-1111-110511311170} => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511421146}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{11111111-1111-1111-1111-110511421146} => Schlüssel nicht gefunden.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Avira System Speedup User Starter => Wert erfolgreich entfernt

"C:\Program Files (x86)\Avira" Ordner verschieben:

Konnte nicht verschoben werden "C:\Program Files (x86)\Avira" => ist geplant bei Neustart verschoben zu werden.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{154B9669-310D-43DE-BC74-B5F3282FF228}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{154B9669-310D-43DE-BC74-B5F3282FF228}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{251F2D66-9355-45A1-A099-ED7C9043173C}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{251F2D66-9355-45A1-A099-ED7C9043173C}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2881AB42-528F-4BD7-81CD-28BA9F9D8B61}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2881AB42-528F-4BD7-81CD-28BA9F9D8B61}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2957CC2A-68FA-4D29-BD66-C71287187311}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2957CC2A-68FA-4D29-BD66-C71287187311}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{32295609-3691-47ED-84C4-BABD3E9F8001}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{32295609-3691-47ED-84C4-BABD3E9F8001}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OfficeSoftwareProtectionPlatform\SvcRestartTask" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{52C301DC-F26E-4A76-ADC4-74A8A7B1262F}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{52C301DC-F26E-4A76-ADC4-74A8A7B1262F}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{56C44044-C792-485F-91FF-B7E5FC4CFC84}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{56C44044-C792-485F-91FF-B7E5FC4CFC84}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8BFEE2C6-348C-479B-8283-47541EFD8BFF}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8BFEE2C6-348C-479B-8283-47541EFD8BFF}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B3720FE6-94C8-4683-9E60-19DB1750E854}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B3720FE6-94C8-4683-9E60-19DB1750E854}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B6945509-38F2-4C42-AAB2-3BDBB688FBEF}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B6945509-38F2-4C42-AAB2-3BDBB688FBEF}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C7156127-0BB7-41E5-8904-E20CF304D3B4}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C7156127-0BB7-41E5-8904-E20CF304D3B4}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C95D9F4F-C80F-4165-B705-8577A80EA212}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C95D9F4F-C80F-4165-B705-8577A80EA212}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DE506BBB-A5C2-4632-B610-A48FA61EAD80}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE506BBB-A5C2-4632-B610-A48FA61EAD80}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E3FC424A-D50D-40A1-A2E7-222A05B44868}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E3FC424A-D50D-40A1-A2E7-222A05B44868}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => Schlüssel erfolgreich entfernt

=========== EmptyTemp: ==========

BITS transfer queue => 32768 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 41082274 B
Java, Flash, Steam htmlcache => 5263 B
Windows/system/drivers => 2250308 B
Edge => 952365 B
Chrome => 727040225 B
Firefox => 380774617 B
Opera => 4321632 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 146437430 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 27994 B
NetworkService => 14990 B
Simon David => 25652529 B
DefaultAppPool => 0 B

RecycleBin => 35914952 B
EmptyTemp: => 1.3 GB temporäre Dateien entfernt.

================================

Ergebnis der geplanten Datei-Verschiebungen (Start-Modus: Normal) (Datum&Uhrzeit: 26-10-2016 12:13:29)

C:\Program Files (x86)\Avira => ist erfolgreich verschoben

==== Ende von Fixlog 12:13:29 ====

cosinus 26.10.2016 11:17
Okay, dann Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte:


1. Schritt: MBAM

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




2. Schritt: ESET

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset




3. Schritt: SecurityCheck

Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

SimonDavid 26.10.2016 11:40
Malwarebytes Anti-Malware ist meine Testversion schon abgelaufen :/

cosinus 26.10.2016 12:10
Ja...und????
Das hat NIX mit meiner Anleitung zu tun!

SimonDavid 27.10.2016 13:40
Mbam
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 26.10.2016
Suchlaufzeit: 15:37
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.10.26.06
Rootkit-Datenbank: v2016.09.26.02
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: Simon David

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 427280
Abgelaufene Zeit: 17 Min., 32 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 2
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484}, In Quarantäne, [6d617528eeac9c9a3d442cca7b892dd3],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB}, In Quarantäne, [b71766371f7be3535c26f7ff0df7ac54],

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 2
PUP.Optional.Reimage, C:\Users\Simon David\Downloads\ReimageRepair (1).exe, In Quarantäne, [f9d53f5ef9a168ce4a1fa5513fc58c74],
PUP.Optional.Reimage, C:\Users\Simon David\Downloads\ReimageRepair.exe, In Quarantäne, [547acdd0732736005c0d03f3fb09c739],

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
ESET Log

Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=9578b7734658a04dbe0fcbeffb8862fe
# end=init
# utc_time=2016-10-27 08:32:43
# local_time=2016-10-27 10:32:43 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Init
Update Download
Update Finalize
Updated modules version: 31211
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=9578b7734658a04dbe0fcbeffb8862fe
# end=updated
# utc_time=2016-10-27 08:36:43
# local_time=2016-10-27 10:36:43 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=9578b7734658a04dbe0fcbeffb8862fe
# engine=31211
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-10-27 12:09:03
# local_time=2016-10-27 02:09:03 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 13451 8900759 0 0
# scanned=438136
# found=19
# cleaned=0
# scan_time=12739
sh=3DA9BD1F2E7E46CF6C059316AABB70C17EC319F1 ft=1 fh=dcb69d10e55c9416 vn="Variante von Win32/Toolbar.CrossRider.BP evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\HQ-Proffesional\Uninstall.exe.vir"
sh=E953DDCC94886F4A9917F12B362009C4584C89CC ft=1 fh=6e3befbd91517407 vn="Variante von Win32/Toolbar.CrossRider.BP evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\MediaPlayerplus\Uninstall.exe.vir"
sh=601DA06CFA3A95201EC07A6ECE8AE812B6A222F4 ft=1 fh=5f94a9b021314f4f vn="Variante von Win32/AdWare.AddLyrics.BA Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\Re-Markable_P\Re-MarkableORg161.dll.vir"
sh=B992ED7A1B4DF30F6AF8A911FBFDE92ED9F77519 ft=1 fh=5dac4dde3cd39976 vn="Variante von MSIL/DomaIQ.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\Uninstaller\Uninstall.exe.vir"
sh=829D808C091045F45C513A6E4AB17055A52A9320 ft=1 fh=282fb76e1825b814 vn="Variante von Win32/Toolbar.Babylon.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Users\Simon David\AppData\Roaming\OpenCandy\43B94552FB7D4B169B60A658C333EF03\DeltaTB.exe.vir"
sh=85BA05E45279215B6BFD53A3E5C3830692D64845 ft=1 fh=a53a27a527ff292c vn="Win64/Adware.Loadshop.C Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\WINDOWS\SysNative\MyOSProtect64.dll.vir"
sh=D911EB5507070609F9FC2392B495B9B20A3BB30F ft=1 fh=4c0bdf77751f2704 vn="Win32/Adware.Loadshop.C Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\WINDOWS\SysWOW64\MyOSProtect.dll.vir"
sh=90F2FBF9E0CE0B8672905E29BBE805E714D0C212 ft=1 fh=295fb63db29baab5 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Simon David\Downloads\Emsisoft Anti Malware - CHIP-Installer.exe"
sh=147CF58871892FDE5D20929D126DB04EA6381536 ft=1 fh=f01a7ddc08e8ee48 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Simon David\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer (1).exe"
sh=6F4704A27BEC39D4BCE3449B6333093432760118 ft=1 fh=4436068146e79b09 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Simon David\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe"
sh=7903078DF828D6325CF6E42D02F93B9902EF3E40 ft=1 fh=37e746aa8ec0757a vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Simon David\Downloads\PokemonGofuerWindows_3700 - CHIP-Installer.exe"
sh=869B9AB9688F4DE51F96DBF84C4AF949410DEB17 ft=1 fh=ba151cd7332f3667 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Simon David\Downloads\PokemonGoMap-07Win - CHIP-Installer.exe"
sh=8CB92BAAE749F21CDB074D8371020CAE4F1F1877 ft=1 fh=c5816585b10e34ab vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Simon David\Downloads\PokemonGoMap-Win_0.1.6 - CHIP-Installer.exe"
sh=AB85DE588370856EA362BF8A1A8A476418435C0D ft=1 fh=5c878138a4d8694f vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Simon David\Downloads\PokemonGoMap-Win_0.1.7 - CHIP-Installer.exe"
sh=FC3D044A59FF6CB58D8EF51CAAD6BF23276D4C59 ft=1 fh=0ae443ee834767c5 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll"
sh=928A536FBFF196495B90E4BD51B932485B84A099 ft=1 fh=748b6a41a833329e vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows.old\Users\Simon David\AppData\Local\Temp\DMR\dmr_72.exe"
sh=62A44AF20E24487C855F8541D75721EC3439B351 ft=0 fh=0000000000000000 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows.old\Users\Simon David\AppData\Local\Temp\FBScanner_845815543\1027106007405369.exe"
sh=2623FF9C0560D8B402392C3E267DF15D83466578 ft=0 fh=0000000000000000 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows.old\Users\Simon David\AppData\Local\Temp\FBScanner_845815543\918257591634610.exe"
sh=FC3D044A59FF6CB58D8EF51CAAD6BF23276D4C59 ft=1 fh=0ae443ee834767c5 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\Windows.old\WINDOWS\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll"
Security Check

Code:
Results of screen317's Security Check version 1.009 
  x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
Windows Defender 
 WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
 Adobe Flash Player 10 Flash Player out of Date!
 Adobe Reader 9 Adobe Reader out of Date!
 Mozilla Firefox (49.0.2)
 Google Chrome (53.0.2785.143)
 Google Chrome (54.0.2840.71)
 Google Chrome (SetupMetrics...)
````````Process Check: objlist.exe by Laurent```````` 
 Windows Defender MSMpEng.exe
 Windows Defender MSASCuiL.exe 
 Windows Defender MpCmdRun.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C:  %
````````````````````End of Log``````````````````````

cosinus 27.10.2016 13:42
Zitat:
C:\Users\Simon David\Downloads\Emsisoft Anti Malware - CHIP-Installer.exe
C:\Users\Simon David\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer (1).exe
C:\Users\Simon David\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe
C:\Users\Simon David\Downloads\PokemonGofuerWindows_3700 - CHIP-Installer.exe
C:\Users\Simon David\Downloads\PokemonGoMap-07Win - CHIP-Installer.exe
C:\Users\Simon David\Downloads\PokemonGoMap-Win_0.1.6 - CHIP-Installer.exe
C:\Users\Simon David\Downloads\PokemonGoMap-Win_0.1.7 - CHIP-Installer.exe
In Zukunft keine Downloads mehr von chip.de!!!

Von chip lädst du in Zukunft besser nix mehr. Die verarschen ihre Kunden aus reiner Profitgier. Siehe auch http://www.trojaner-board.de/168364-...mpfehlung.html und CHIP-Installer - was ist das? - Anleitungen


Zitat:
Adobe Flash Player 10 Flash Player out of Date!
Adobe Reader 9 Adobe Reader out of Date!
Dieses alte Zeug ist umgehend zu entfernen...

SimonDavid 27.10.2016 13:48
ist entfernt.
Ok. Und ich dachte immer Chip.de wäre gut und sicher zum download :/ Danke für die Info

Kann ich die aktuelle Version der Adobe Programme dann bei filepony.de runterladen oder soll ich aus irgendeinem Grund noch damit warten?

cosinus 27.10.2016 14:15
Mal ein paar grundsätzlich Infos zu Adobe (und unten auch zu Java)

Adobe Reader: Verwende stattdessen lieber PDF-X-Change Viewer; der interne PDF-Betrachter vom Firefox reicht meist auch aus.

Flash Player: Was Adobe mit seinem Flash Player veranstaltet, ist irgendwo zwischen Frechheit und Inkompetenz einzustufen; in dem Teil werden ständig neue dicke Sicherheitslücken gefunden - für YT reicht meistens HTML5 aus, das ist der Standardplayer wenn der Flash Player inaktiv oder nicht installiert ist; für spezielle Browsergames kann es aber sein, dass du den Flash Player brauchst. Nutze Flash so sparsam wie möglich und wenn dann immer aktuell halten!!

Java: Spielt kaum noch eine Rolle. Fast nirgendwo werden mehr Java-Applets eingesetzt. Wird noch für spezielles Zeugs in OpenOffice genutzt, IIRC brauchen auch manche Games Java. Aber wirklich sehr selten.

SimonDavid 27.10.2016 14:24
Danke

cosinus 27.10.2016 14:35
Ist jetzt noch was an Problemen offen?

SimonDavid 27.10.2016 14:40
Nein ich merke beim arbeiten mit Chrome nichts mehr.

Kannst du mir noch ein Antiviren Programm empfehlen?

cosinus 27.10.2016 14:59
Dann wären wir durch! :daumenhoc

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

Abschließend müssen wir noch ein paar Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.

http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

http://deeprybka.trojaner-board.de/b...ast/schild.png
Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen - sofern benötigt, wenn nicht benötigt natürlich sinnigerweise deinstallieren oder Alternativen verwenden (und diese aktuell halten).
  • Browser (Internet Explorer, Edge, Firefox, Chrome, ...)
  • Java (bitte wirklich nur installieren/installiert lassen wenn unbedingt nötig!)
  • Flash-Player (nach Möglichkeit deinstallieren und HTML5 verwenden siehe zB https://www.youtube.com/html5 )
  • PDF-Reader (nach Möglichkeit nicht den Adobe Reader verwenden)

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

   
 

Microsoft Security Essentials (MSE) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE entschieden hast, brauchst du nicht extra MSE zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür.

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und/oder mit dem ESET Online Scanner scannen.

Optional:

http://filepony.de/icon/noscript.png NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. NoScript kann gerade bei technisch nicht allzu versierten Nutzern beim Surfen zum Nervfaktor werden; ob das Tool geeignet ist, muss jeder selbst mal ausprobieren und dann für sich entscheiden. Alternativen zu NoScript (wenn um das das Verhindern von Usertracking und Werbung auf Webseiten) geht wären da Ghostery oder uBlock. Ghostery ist eine sehr bekannte Erweiterung, die aber auch in Kritik geraten ist, vgl. dazu bitte diesen Thread => Ghostery schleift Werbung durch

http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

SimonDavid 27.10.2016 16:10
Dankeschön! hat alles wunderbar geklappt!


Alle Zeitangaben in WEZ +1. Es ist jetzt 05:33 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131