Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Flix123 Feld auf verschiedenen Seiten (https://www.trojaner-board.de/184045-flix123-feld-verschiedenen-seiten.html)

ZaTii 20.01.2017 23:16
Flix123 Feld auf verschiedenen Seiten
 
Hallo,

seit heute morgen ist mir aufgefallen das ich auf manchen Seiten "Felder" habe wie diese hier obwohl ich einen Adblocker besitze:

http://grabilla.com/07114-d6df830f-5...d4daf8de4b.png
oder das
http://grabilla.com/07114-499b91ac-6...39eb9c8d61.png

Habe schon im Internet danach dann nach diesem Flix123 gesucht und herausgefunden das es sich scheinbar um Adware handelt. Die "Anleitung" die sagen das malwarebytes diese Adware beseitigen haben leider nicht geholfen. Hoffentlich hat jemand von den Experten hier eine Idee was ich machen kann um es zu entfernen.

Bin dankbar für jede hilfe!

Gruß

cosinus 20.01.2017 23:36
Hallo und :hallo:


+++ WICHTIGER HINWEIS +++


Während der Analyse und Bereinigung nimmst du KEINERLEI Änderungen auf eigene Faust vor, d.h. du installierst oder deinstallierst keine Software ohne Absprache.
Auch veränderst du keine Systemeinstellungen, solange wir deinen Fall bearbeiten. Änderungen, Installationen oder Deinstallationen machst du AUSSCHLIESSLICH nur auf Anweisung!
Es wird erforderlich sein, deinen Virenscanner zu deaktivieren und in bestimmten Fällen auch zu deinstallieren, damit vernünftig bereinigt werden kann. Dein System ist daher erst wenn wir hier fertig sind wieder für den alltäglichen Gebrauch wie surfen oder mailen von mir freigegeben.

Gelesen und verstanden?



Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!



Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

cosinus 20.01.2017 23:36
Hallo und :hallo:


+++ WICHTIGER HINWEIS +++


Während der Analyse und Bereinigung nimmst du KEINERLEI Änderungen auf eigene Faust vor, d.h. du installierst oder deinstallierst keine Software ohne Absprache.
Auch veränderst du keine Systemeinstellungen, solange wir deinen Fall bearbeiten. Änderungen, Installationen oder Deinstallationen machst du AUSSCHLIESSLICH nur auf Anweisung!
Es wird erforderlich sein, deinen Virenscanner zu deaktivieren und in bestimmten Fällen auch zu deinstallieren, damit vernünftig bereinigt werden kann. Dein System ist daher erst wenn wir hier fertig sind wieder für den alltäglichen Gebrauch wie surfen oder mailen von mir freigegeben.

Gelesen und verstanden?



Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!



Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

ZaTii 21.01.2017 10:24
Danke erstmal für die schnelle Antwort :)



Adware cleaner 6.042 hat nichts gefunden gestern.
Malwarebyte 3.0.5.1299 ebenfalls nichts.

Habe gestern noch versucht mit dem Avast Browser Cleanup etwas zu finden hatte aber ebenfalls keine Ergebnisse.


Hier ist der Teil 1 FRST Logs.


Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 18-01-2017
durchgeführt von eFKa (Administrator) auf DESKTOP-O86GP9R (21-01-2017 10:10:18)
Gestartet von C:\Users\eFKa\Desktop
Geladene Profile: eFKa (Verfügbare Profile: eFKa)
Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Intel(R) Corporation) C:\Program Files\Intel\NCS2\WMIProv\ncs2prov.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(EVGA Corp.) C:\Program Files (x86)\EVGA\Precision XOC\PrecisionX_x64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.4.86.0_x64__kzf8qxf38zg5c\SkypeHost.exe
() C:\Users\eFKa\AppData\Local\Grabilla\GrabillaTray.exe
(Comfort Software Group) C:\Program Files (x86)\FreeAlarmClock\FreeAlarmClock.exe
(Flux Software LLC) C:\Users\eFKa\AppData\Local\FluxSoftware\Flux\flux.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(BLOGMUSIK) C:\Program Files\WindowsApps\Deezer.62021768415AF_3.3.0.0_x64__q7m17pa7q8kj0\DeezerMusic.exe
(File-New-Project) C:\Program Files (x86)\Ear Trumpet\EarTrumpet.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.exe
(Microsoft Corporation) C:\Windows\System32\Windows.Media.BackgroundPlayback.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.exe
(ROCCAT GmbH Co., Ltd.) C:\Program Files (x86)\ROCCAT\Roccat Talk\Roccat Talk.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\AudioSwitch\AudioSwitch.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGUI.exe
() C:\Program Files (x86)\SpeedFan\speedfan.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16404224 2015-09-17] (Realtek Semiconductor)
HKLM\...\Run: [Eraser] => C:\Program Files\Eraser\Eraser.exe [1074600 2016-08-28] (The Eraser Project)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [16293496 2016-09-29] (Logitech Inc.)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [239672 2017-01-09] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [RoccatKoneXTD] => C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE [552960 2014-10-19] (ROCCAT GmbH)
HKLM-x32\...\Run: [RoccatIsku] => C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)
HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [112200 2016-10-21] (VMware, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM-x32\...\Run: [AVGUI.exe] => C:\Program Files (x86)\AVG\Antivirus\AVGUI.exe [9523496 2017-01-20] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2881824 2017-01-19] (Valve Corporation)
HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4557504 2016-10-06] (Disc Soft Ltd)
HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27250144 2016-12-20] (Skype Technologies S.A.)
HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\Run: [MyComGames] => C:\Users\eFKa\AppData\Local\MyComGames\MyComGames.exe [4998032 2016-12-08] (MY.COM B.V.)
HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\Run: [Grabilla] => C:\Users\eFKa\AppData\Local\Grabilla\grabillaTray.exe [1441488 2015-11-13] ()
HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\Run: [FreeAC] => C:\Program Files (x86)\FreeAlarmClock\FreeAlarmClock.exe [3015072 2016-01-19] (Comfort Software Group)
HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\Run: [f.lux] => C:\Users\eFKa\AppData\Local\FluxSoftware\Flux\flux.exe [1024240 2016-12-06] (Flux Software LLC)
HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [911032 2014-10-14] (Microsoft Corporation)
HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9288408 2016-12-06] (Piriform Ltd)
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ear Trumpet.lnk [2017-01-19]
ShortcutTarget: Ear Trumpet.lnk -> C:\Program Files (x86)\Ear Trumpet\EarTrumpet.exe (File-New-Project)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HideVolumeOSD.lnk [2017-01-20]
ShortcutTarget: HideVolumeOSD.lnk -> C:\Program Files (x86)\HideVolumeOSD\HideVolumeOSD.exe (Venturi)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Roccat Talk.lnk [2016-10-21]
ShortcutTarget: Roccat Talk.lnk -> C:\Program Files (x86)\ROCCAT\Roccat Talk\Roccat Talk.exe (ROCCAT GmbH Co., Ltd.)
Startup: C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AudioSwitch.lnk [2016-10-21]
ShortcutTarget: AudioSwitch.lnk -> C:\Program Files (x86)\AudioSwitch\AudioSwitch.exe ()
Startup: C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EVGA Precision XOC.lnk [2016-11-26]
ShortcutTarget: EVGA Precision XOC.lnk -> C:\Program Files (x86)\EVGA\Precision XOC\PrecisionX_x64.exe (EVGA Corp.)
Startup: C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk [2016-10-21]
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe (Rainmeter)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{dc2653a5-544f-47db-9595-b417925f3be1}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2014-05-22] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-01-18] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-18] (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2014-05-22] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-01-18] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-18] (Oracle Corporation)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {DDA57003-0068-4ed2-9D32-4D1EC707D94D} -> C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2010-03-19] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: gitdmq8s.default
FF ProfilePath: C:\Users\eFKa\AppData\Roaming\Mozilla\Firefox\Profiles\gitdmq8s.default [2017-01-20]
FF NewTab: Mozilla\Firefox\Profiles\gitdmq8s.default -> about:newtab
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\gitdmq8s.default -> Google
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\gitdmq8s.default -> hxxp://www.google.com/search?ie=UTF-8&oe=utf-8&q=
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\gitdmq8s.default -> Google
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\gitdmq8s.default -> Google
FF Homepage: Mozilla\Firefox\Profiles\gitdmq8s.default -> hxxp://www.google.com/firefox
FF Keyword.URL: Mozilla\Firefox\Profiles\gitdmq8s.default -> hxxp://www.google.com/search?ie=UTF-8&oe=utf-8&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll [2016-12-13] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-09-21] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-01-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-01-18] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-09-21] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32.dll [Keine Datei]
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2016-09-20] (Adobe Systems, Inc.)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-09-21] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-01-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-01-18] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-24] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-24] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-09-21] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-3493243389-3681450369-2610281837-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-09-21] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-3493243389-3681450369-2610281837-1001: @my.com/Games -> C:\Users\eFKa\AppData\Local\MyComGames\NPMyComDetector.dll [2016-10-22] (MY.COM B.V.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll [2016-09-21] (Tracker Software Products (Canada) Ltd.)

Chrome:
=======
CHR HomePage: Default -> hxxps://www.google.de/
CHR Profile: C:\Users\eFKa\AppData\Local\Google\Chrome\User Data\Default [2017-01-21]
CHR Extension: (Magic Actions for YouTube™) - C:\Users\eFKa\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2017-01-20]
CHR Extension: (SoundCloud Downloader) - C:\Users\eFKa\AppData\Local\Google\Chrome\User Data\Default\Extensions\baignpanbngjdimbgmannbolcbplmofl [2017-01-20]
CHR Extension: (YouTube) - C:\Users\eFKa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-21]
CHR Extension: (uBlock Origin) - C:\Users\eFKa\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2017-01-20]
CHR Extension: (AdBlock) - C:\Users\eFKa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-01-20]
CHR Extension: (+Sub) - C:\Users\eFKa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpobdmdfgjokempajoobgfdnhjbjlnpm [2017-01-20]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\eFKa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-18]
CHR Extension: (Click&Clean App) - C:\Users\eFKa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2017-01-20]
CHR Extension: (Chrome Media Router) - C:\Users\eFKa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-02]

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-08-05] (Apple Inc.)
R2 AVG Antivirus; C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe [260080 2017-01-20] (AVG Technologies CZ, s.r.o.)
R3 avgbIDSAgent; C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe [6183576 2017-01-20] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1255272 2017-01-09] (AVG Technologies CZ, s.r.o.)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2017-01-20] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1468608 2016-10-06] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [249104 2016-10-22] (EasyAntiCheat Ltd)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-19] (Microsoft Corporation) [Datei ist nicht signiert]
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22744 2015-02-05] (Microsoft Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-09-29] (Logitech Inc.)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-12-13] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-12-13] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-11-24] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-12-13] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2016-12-13] (NVIDIA Corporation)
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-12-15] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2180624 2016-12-15] (Electronic Arts)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-11-21] (Microsoft Corporation)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [Datei ist nicht signiert]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7500048 2016-09-20] (TeamViewer GmbH)
S3 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [12472904 2016-10-21] ()
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 avgbdisk; C:\WINDOWS\system32\drivers\avgbdiska.sys [165624 2017-01-20] (AVG Technologies CZ, s.r.o.)
R1 avgbidsdriver; C:\WINDOWS\system32\drivers\avgbidsdrivera.sys [311592 2017-01-20] (AVG Technologies CZ, s.r.o.)
R0 avgbidsh; C:\WINDOWS\system32\drivers\avgbidsha.sys [192096 2017-01-20] (AVG Technologies CZ, s.r.o.)
R0 avgblog; C:\WINDOWS\system32\drivers\avgbloga.sys [336920 2017-01-20] (AVG Technologies CZ, s.r.o.)
R0 avgbuniv; C:\WINDOWS\system32\drivers\avgbuniva.sys [50848 2017-01-20] (AVG Technologies CZ, s.r.o.)
S3 avgHwid; C:\WINDOWS\system32\drivers\avgHwid.sys [39288 2017-01-20] (AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\WINDOWS\system32\drivers\avgMonFlt.sys [127072 2017-01-20] (AVG Technologies CZ, s.r.o.)
R1 avgRdr; C:\WINDOWS\system32\drivers\avgRdr2.sys [101624 2017-01-20] (AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\WINDOWS\system32\drivers\avgRvrt.sys [75664 2017-01-20] (AVG Technologies CZ, s.r.o.)
R1 avgSnx; C:\WINDOWS\system32\drivers\avgSnx.sys [992488 2017-01-20] (AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\WINDOWS\system32\drivers\avgSP.sys [555152 2017-01-20] (AVG Technologies CZ, s.r.o.)
R2 avgStm; C:\WINDOWS\system32\drivers\avgStm.sys [163512 2017-01-20] (AVG Technologies CZ, s.r.o.)
R0 avgVmm; C:\WINDOWS\system32\drivers\avgVmm.sys [311472 2017-01-20] (AVG Technologies CZ, s.r.o.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-10-21] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-10-21] (Disc Soft Ltd)
R2 inpoutx64; C:\WINDOWS\System32\Drivers\inpoutx64.sys [15008 2016-11-27] (Highresolution Enterprises [www.highrez.co.uk])
R3 ladfGSS; C:\WINDOWS\system32\drivers\ladfGSS.sys [45208 2016-09-29] (Logitech Inc.)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2016-09-29] (Logitech Inc.)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R2 NPF; C:\WINDOWS\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_3696fe4b96482e60\nvlddmkm.sys [14182960 2016-11-25] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2016-12-13] (NVIDIA Corporation)
R3 SensorsSimulatorDriver; C:\WINDOWS\System32\drivers\WUDFRd.sys [216064 2016-07-16] (Microsoft Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [206416 2016-10-18] (Oracle Corporation)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [34520 2015-07-09] (VMware, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R3 WinRing0_1_2_0; C:\Program Files (x86)\EVGA\Precision XOC\WinRing0\WinRing0x64.sys [14536 2015-10-20] (OpenLibSys.org)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-21 10:10 - 2017-01-21 10:10 - 00026643 _____ C:\Users\eFKa\Desktop\FRST.txt
2017-01-21 10:10 - 2017-01-21 10:10 - 00000000 ____D C:\FRST
2017-01-21 10:10 - 2017-01-21 10:09 - 02419712 _____ (Farbar) C:\Users\eFKa\Desktop\FRST64.exe
2017-01-21 10:09 - 2017-01-21 10:09 - 02419712 _____ (Farbar) C:\Users\eFKa\Downloads\FRST64.exe
2017-01-20 23:01 - 2017-01-20 23:01 - 15853728 _____ (McAfee Inc) C:\Users\eFKa\Downloads\stinger64.exe
2017-01-20 22:53 - 2017-01-20 22:53 - 00002868 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-01-20 22:53 - 2017-01-20 22:53 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-01-20 22:53 - 2017-01-20 22:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-01-20 22:53 - 2017-01-20 22:53 - 00000000 ____D C:\Program Files\CCleaner
2017-01-20 22:50 - 2017-01-20 22:50 - 06465872 _____ (Piriform Ltd) C:\Users\eFKa\Downloads\ccsetup525_slim.exe
2017-01-20 22:44 - 2017-01-20 22:44 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-20 22:37 - 2017-01-20 22:37 - 02953520 _____ (AVAST Software) C:\Users\eFKa\Downloads\avast-browser-cleanup.exe
2017-01-20 22:34 - 2017-01-20 22:34 - 03988944 _____ C:\Users\eFKa\Downloads\adwcleaner_6.042.exe
2017-01-20 22:32 - 2017-01-20 22:33 - 54199488 _____ (Malwarebytes ) C:\Users\eFKa\Downloads\mb3-setup-consumer-3.0.5.1299.exe
2017-01-20 22:22 - 2017-01-20 22:22 - 00035558 _____ C:\Users\eFKa\Downloads\wordxchange.zip
2017-01-20 20:37 - 2017-01-20 20:38 - 00000368 _____ C:\Users\eFKa\Desktop\ssss.reg
2017-01-20 20:34 - 2017-01-20 20:34 - 00992488 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgsnx.sys
2017-01-20 20:34 - 2017-01-20 20:34 - 00555152 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgSP.sys
2017-01-20 20:34 - 2017-01-20 20:34 - 00397800 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\avgBoot.exe
2017-01-20 20:34 - 2017-01-20 20:34 - 00336920 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbloga.sys
2017-01-20 20:34 - 2017-01-20 20:34 - 00311592 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsdrivera.sys
2017-01-20 20:34 - 2017-01-20 20:34 - 00311472 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgVmm.sys
2017-01-20 20:34 - 2017-01-20 20:34 - 00192096 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsha.sys
2017-01-20 20:34 - 2017-01-20 20:34 - 00165624 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbdiska.sys
2017-01-20 20:34 - 2017-01-20 20:34 - 00163512 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgStm.sys
2017-01-20 20:34 - 2017-01-20 20:34 - 00127072 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgMonFlt.sys
2017-01-20 20:34 - 2017-01-20 20:34 - 00101624 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRdr2.sys
2017-01-20 20:34 - 2017-01-20 20:34 - 00075664 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRvrt.sys
2017-01-20 20:34 - 2017-01-20 20:34 - 00050848 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbuniva.sys
2017-01-20 20:34 - 2017-01-20 20:34 - 00039288 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgHwid.sys
2017-01-20 20:34 - 2017-01-20 20:34 - 00004008 _____ C:\WINDOWS\System32\Tasks\Antivirus Emergency Update
2017-01-20 20:33 - 2017-01-20 20:33 - 00000943 _____ C:\Users\Public\Desktop\AVG.lnk
2017-01-20 20:33 - 2017-01-20 20:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2017-01-20 20:32 - 2017-01-20 20:32 - 00003668 _____ C:\WINDOWS\System32\Tasks\AVG EUpdate Task
2017-01-20 20:28 - 2017-01-20 20:28 - 03449304 _____ (AVG Technologies CZ, s.r.o.) C:\Users\eFKa\Downloads\AVG_Protection_Free_1606.exe
2017-01-20 20:27 - 2017-01-20 20:27 - 00002384 _____ C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-01-20 20:27 - 2017-01-20 20:27 - 00000000 ___RD C:\Users\eFKa\OneDrive
2017-01-20 20:25 - 2017-01-20 20:31 - 00000000 ____D C:\Users\eFKa\AppData\Local\ConnectedDevicesPlatform
2017-01-20 20:25 - 2017-01-20 20:25 - 00007623 _____ C:\WINDOWS\diagwrn.xml
2017-01-20 20:25 - 2017-01-20 20:25 - 00007623 _____ C:\WINDOWS\diagerr.xml
2017-01-20 20:25 - 2017-01-20 20:25 - 00000020 ___SH C:\Users\eFKa\ntuser.ini
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default\Vorlagen
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default\Startmenü
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2017-01-20 20:25 - 2017-01-20 20:25 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2017-01-20 20:24 - 2017-01-20 20:24 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-01-20 20:24 - 2017-01-20 20:24 - 00003556 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-20 20:24 - 2017-01-20 20:24 - 00003556 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-01-20 20:24 - 2017-01-20 20:24 - 00003340 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1477055179
2017-01-20 20:24 - 2017-01-20 20:24 - 00003332 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-01-20 20:24 - 2017-01-20 20:24 - 00003142 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-20 20:24 - 2017-01-20 20:24 - 00003114 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-20 20:24 - 2017-01-20 20:24 - 00003098 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-01-20 20:24 - 2017-01-20 20:24 - 00003016 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-20 20:24 - 2017-01-20 20:24 - 00002996 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-20 20:24 - 2017-01-20 20:24 - 00002944 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-20 20:24 - 2017-01-20 20:24 - 00002902 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-01-20 20:24 - 2017-01-20 20:24 - 00002882 _____ C:\WINDOWS\System32\Tasks\TrackerAutoUpdate
2017-01-20 20:24 - 2017-01-20 20:24 - 00002716 _____ C:\WINDOWS\System32\Tasks\AVG-SSU_0117av_DELETE
2017-01-20 20:24 - 2017-01-20 20:24 - 00002556 _____ C:\WINDOWS\System32\Tasks\EVGAPrecisionX
2017-01-20 20:24 - 2017-01-20 20:24 - 00002366 _____ C:\WINDOWS\System32\Tasks\AVG-SSU_0117av
2017-01-20 20:24 - 2017-01-20 20:24 - 00002332 _____ C:\WINDOWS\System32\Tasks\MacsFanControl
2017-01-20 20:24 - 2017-01-20 20:24 - 00000000 ____D C:\WINDOWS\System32\Tasks\Speedfan
2017-01-20 20:24 - 2017-01-20 20:24 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2017-01-20 20:24 - 2017-01-20 20:24 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
2017-01-20 20:22 - 2017-01-20 20:22 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-01-20 20:22 - 2017-01-20 20:22 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2017-01-20 20:22 - 2017-01-20 20:22 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software
2017-01-20 20:10 - 2017-01-20 20:22 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-01-20 20:09 - 2017-01-20 22:38 - 00000000 ____D C:\Users\eFKa
2017-01-20 20:09 - 2017-01-20 20:13 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-01-20 20:09 - 2017-01-20 20:13 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-01-20 20:09 - 2017-01-20 20:13 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-01-20 20:09 - 2017-01-20 20:09 - 01552606 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2017-01-20 20:09 - 2017-01-20 20:09 - 00000000 _SHDL C:\Users\eFKa\Vorlagen
2017-01-20 20:09 - 2017-01-20 20:09 - 00000000 _SHDL C:\Users\eFKa\Startmenü
2017-01-20 20:09 - 2017-01-20 20:09 - 00000000 _SHDL C:\Users\eFKa\Netzwerkumgebung
2017-01-20 20:09 - 2017-01-20 20:09 - 00000000 _SHDL C:\Users\eFKa\Lokale Einstellungen
2017-01-20 20:09 - 2017-01-20 20:09 - 00000000 _SHDL C:\Users\eFKa\Eigene Dateien
2017-01-20 20:09 - 2017-01-20 20:09 - 00000000 _SHDL C:\Users\eFKa\Druckumgebung
2017-01-20 20:09 - 2017-01-20 20:09 - 00000000 _SHDL C:\Users\eFKa\Documents\Eigene Videos
2017-01-20 20:09 - 2017-01-20 20:09 - 00000000 _SHDL C:\Users\eFKa\Documents\Eigene Musik
2017-01-20 20:09 - 2017-01-20 20:09 - 00000000 _SHDL C:\Users\eFKa\Documents\Eigene Bilder
2017-01-20 20:09 - 2017-01-20 20:09 - 00000000 _SHDL C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-01-20 20:09 - 2017-01-20 20:09 - 00000000 _SHDL C:\Users\eFKa\AppData\Local\Verlauf
2017-01-20 20:09 - 2017-01-20 20:09 - 00000000 _SHDL C:\Users\eFKa\AppData\Local\Anwendungsdaten
2017-01-20 20:09 - 2017-01-20 20:09 - 00000000 _SHDL C:\Users\eFKa\Anwendungsdaten
2017-01-20 20:09 - 2017-01-20 20:09 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2017-01-20 20:09 - 2017-01-20 20:09 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-01-20 20:09 - 2017-01-20 20:09 - 00000000 ____D C:\WINDOWS\system32\DAX2
2017-01-20 20:09 - 2017-01-20 20:09 - 00000000 ____D C:\Program Files\Realtek
2017-01-20 20:09 - 2016-11-24 20:39 - 06384576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2017-01-20 20:09 - 2016-11-24 20:39 - 02477624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2017-01-20 20:09 - 2016-11-24 20:39 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2017-01-20 20:09 - 2016-11-24 20:39 - 00546752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2017-01-20 20:09 - 2016-11-24 20:39 - 00393784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2017-01-20 20:09 - 2016-11-24 20:39 - 00083512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2017-01-20 20:09 - 2016-11-24 20:39 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2017-01-20 20:09 - 2016-11-23 13:58 - 07538847 _____ C:\WINDOWS\system32\nvcoproc.bin
2017-01-20 20:08 - 2017-01-20 22:53 - 00000000 ___DC C:\WINDOWS\Panther
2017-01-20 20:07 - 2017-01-20 20:07 - 00000000 ____D C:\Windows.old
2017-01-20 20:06 - 2017-01-20 20:06 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 08168000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 06668040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 06583296 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d12warp.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 05850624 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsDesktopEngine.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 05114368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 04978176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d12warp.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 04596224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsDesktopEngine.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 03198464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02913144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02795520 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d12SDKLayers.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02677544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02220032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d12SDKLayers.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02189664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02169184 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 01669984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 01503544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01469792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01400160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-01-20 20:06 - 2017-01-20 20:06 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2017-01-20 20:06 - 2017-01-20 20:06 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2017-01-20 20:06 - 2017-01-20 20:06 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01054048 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-01-20 20:06 - 2017-01-20 20:06 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00992096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVManifest.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2017-01-20 20:06 - 2017-01-20 20:06 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00822624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00813408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00779776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00779616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00752992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00571744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00513376 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00406368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00384000 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DXCpl.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00377184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00362496 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DXCpl.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00190816 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVDllSurrogate.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00168424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSD3DWARP12Debug.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VSD3DWARP12Debug.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSD3DWARPDebug.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VSD3DWARPDebug.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys
2017-01-20 20:06 - 2017-01-20 20:06 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2017-01-20 20:06 - 2017-01-20 20:06 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
2017-01-20 20:02 - 2016-07-15 19:58 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DxToolsReportGenerator.dll
2017-01-20 20:02 - 2016-07-15 19:29 - 05739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2017-01-20 20:02 - 2016-07-15 19:29 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2017-01-20 20:02 - 2016-07-15 19:28 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsProxyStub.dll
2017-01-20 20:02 - 2016-07-15 19:25 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXGIDebug.dll
2017-01-20 20:02 - 2016-07-15 19:23 - 14388224 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXCaptureReplay.dll
2017-01-20 20:02 - 2016-07-15 19:22 - 00429056 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1debug3.dll
2017-01-20 20:02 - 2016-07-15 19:22 - 00355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\perf_gputiming.dll
2017-01-20 20:02 - 2016-07-15 19:19 - 01323520 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11_3SDKLayers.dll
2017-01-20 20:02 - 2016-07-15 19:16 - 04969472 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsRemoteEngine.exe
2017-01-20 20:02 - 2016-07-15 19:14 - 06354944 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2017-01-20 20:02 - 2016-07-15 19:13 - 02005504 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXToolsOfflineAnalysis.dll
2017-01-20 20:02 - 2016-07-15 19:13 - 01198592 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXCap.exe
2017-01-20 20:02 - 2016-07-15 19:13 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsCapture.dll
2017-01-20 20:02 - 2016-07-15 19:12 - 00297984 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsExperiment.dll
2017-01-20 20:02 - 2016-07-15 19:12 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXToolsMonitor.dll
2017-01-20 20:02 - 2016-07-15 19:11 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXToolsReporting.dll
2017-01-20 20:02 - 2016-07-15 18:58 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DxToolsReportGenerator.dll
2017-01-20 20:02 - 2016-07-15 18:45 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2017-01-20 20:02 - 2016-07-15 18:44 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsProxyStub.dll
2017-01-20 20:02 - 2016-07-15 18:41 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXGIDebug.dll
2017-01-20 20:02 - 2016-07-15 18:39 - 11670528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXCaptureReplay.dll
2017-01-20 20:02 - 2016-07-15 18:38 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1debug3.dll
2017-01-20 20:02 - 2016-07-15 18:37 - 01074176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11_3SDKLayers.dll
2017-01-20 20:02 - 2016-07-15 18:35 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perf_gputiming.dll
2017-01-20 20:02 - 2016-07-15 18:32 - 03701248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsRemoteEngine.exe
2017-01-20 20:02 - 2016-07-15 18:29 - 05489664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2017-01-20 20:02 - 2016-07-15 18:29 - 00953344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXCap.exe
2017-01-20 20:02 - 2016-07-15 18:29 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsExperiment.dll
2017-01-20 20:02 - 2016-07-15 18:29 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsCapture.dll
2017-01-20 20:02 - 2016-07-15 18:28 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXToolsOfflineAnalysis.dll
2017-01-20 20:02 - 2016-07-15 18:28 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXToolsMonitor.dll
2017-01-20 20:02 - 2016-07-15 18:28 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXToolsReporting.dll
2017-01-20 20:00 - 2017-01-20 20:00 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2017-01-20 19:59 - 2017-01-20 20:22 - 00000000 ____D C:\Program Files\MSBuild
2017-01-20 19:59 - 2017-01-20 20:22 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-01-20 19:59 - 2017-01-20 19:59 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2017-01-20 19:59 - 2017-01-20 19:59 - 00000000 ____D C:\Program Files\Windows Identity Foundation
2017-01-20 19:59 - 2017-01-20 19:59 - 00000000 ____D C:\Program Files\Reference Assemblies
2017-01-20 19:59 - 2017-01-20 19:59 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-01-20 19:59 - 2016-05-25 14:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-01-20 19:59 - 2016-05-25 14:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-01-20 19:59 - 2016-05-25 14:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-01-20 19:59 - 2016-05-25 11:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-01-20 19:59 - 2016-05-25 11:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-01-20 19:59 - 2016-05-25 11:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2017-01-20 19:47 - 2017-01-20 19:47 - 05013771 _____ C:\Users\eFKa\Downloads\Neuer Ordner (2).zip
2017-01-20 19:32 - 2017-01-20 19:32 - 00046682 _____ C:\Users\eFKa\Downloads\wushowhide.diagcab
2017-01-20 18:52 - 2017-01-20 18:52 - 02131032 _____ (Safer-Networking Ltd. ) C:\Users\eFKa\Desktop\SpybotAntiBeacon-1.6-setup.exe
2017-01-20 18:48 - 2017-01-20 20:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HideVolumeOSD
2017-01-20 18:48 - 2017-01-20 18:48 - 00000000 ____D C:\Program Files (x86)\HideVolumeOSD
2017-01-20 16:28 - 2017-01-20 16:28 - 00279922 _____ C:\Users\eFKa\Downloads\Aufgabe 4.pdf
2017-01-20 15:20 - 2017-01-20 15:20 - 00069473 _____ C:\Users\eFKa\Downloads\Pure Genius - 01x12 - I Got This.FLEET.English.HI.C.orig.Addic7ed.com.srt
2017-01-20 15:20 - 2017-01-20 15:20 - 00056270 _____ C:\Users\eFKa\Downloads\The Blacklist - 04x11 - The Harem.KILLERS.English.HI.C.orig.Addic7ed.com.srt
2017-01-19 20:30 - 2017-01-19 20:30 - 13406575 _____ ( ) C:\Users\eFKa\Downloads\Ear.Trumpet.Setup.exe
2017-01-19 20:30 - 2017-01-19 20:30 - 00001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Ear Trumpet.lnk
2017-01-19 20:30 - 2017-01-19 20:30 - 00000000 ____D C:\Program Files (x86)\Ear Trumpet
2017-01-19 19:52 - 2017-01-20 20:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IDA Pro
2017-01-19 19:52 - 2017-01-19 19:52 - 00000000 ____D C:\Program Files (x86)\IDA 6.8
2017-01-19 19:49 - 2017-01-19 19:50 - 183668536 _____ C:\Users\eFKa\Downloads\IdaPro68.7z
2017-01-19 19:38 - 2017-01-19 19:52 - 2076984369 _____ C:\Users\eFKa\Downloads\LastChaos300.rar
2017-01-19 19:28 - 2017-01-19 19:34 - 1966757823 _____ (Tenacious) C:\Users\eFKa\Downloads\Tenacious Final Client EP4.exe
2017-01-19 16:37 - 2017-01-19 16:37 - 00650396 _____ C:\Users\eFKa\Downloads\Re_ GDS Labor 4-2.zip
2017-01-19 15:51 - 2017-01-20 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qt5 Visual Studio Add-in
2017-01-19 15:51 - 2017-01-19 15:51 - 00000000 ____D C:\Program Files (x86)\Digia
2017-01-19 15:49 - 2017-01-19 15:50 - 157157416 _____ C:\Users\eFKa\Downloads\qt-vs-addin-1.2.3-opensource.exe
2017-01-19 15:48 - 2017-01-19 15:49 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\QtProject
2017-01-19 15:47 - 2017-01-20 20:22 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt 5.7.1
2017-01-19 15:47 - 2017-01-19 15:47 - 00000000 ____D C:\Qt
2017-01-19 15:46 - 2017-01-19 15:46 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Qt
2017-01-19 15:40 - 2017-01-19 15:44 - 966594992 _____ C:\Users\eFKa\Downloads\qt-opensource-windows-x86-msvc2013_64-5.7.1.exe
2017-01-19 15:29 - 2017-01-19 15:58 - 00000000 ____D C:\Users\eFKa\Downloads\Proxy
2017-01-19 15:29 - 2017-01-19 15:29 - 00159452 _____ C:\Users\eFKa\Downloads\Proxy.rar
2017-01-19 11:39 - 2017-01-19 11:39 - 09741418 _____ C:\Users\eFKa\Downloads\mafia-arrival-sample.avi
2017-01-18 12:02 - 2017-01-18 12:01 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-64.dll
2017-01-18 11:53 - 2017-01-18 11:53 - 00358400 _____ C:\Users\eFKa\Downloads\Progs (2).tar
2017-01-16 21:43 - 2017-01-20 22:48 - 00000000 ____D C:\Users\eFKa\AppData\LocalLow\Mozilla
2017-01-16 20:40 - 2017-01-16 20:40 - 00001730 _____ C:\Users\eFKa\Desktop\SeriousEditor.exe - Verknüpfung.lnk
2017-01-16 20:33 - 2017-01-16 20:33 - 00000876 _____ C:\Users\Public\Desktop\Last Chaos US.lnk
2017-01-16 19:53 - 2017-01-16 19:53 - 00519872 _____ (gamigo AG) C:\Users\eFKa\Downloads\LastChaosDownloader_US.exe
2017-01-16 19:45 - 2017-01-16 19:45 - 1311554568 _____ C:\Users\eFKa\Downloads\EP4 Client.7z
2017-01-16 16:19 - 2017-01-16 16:19 - 00000950 _____ C:\Users\eFKa\Downloads\10.1.2017.7z
2017-01-16 13:13 - 2017-01-16 13:13 - 00000000 ____D C:\Users\eFKa\AppData\Local\Venturi
2017-01-16 12:46 - 2017-01-16 12:46 - 00000731 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 10-Upgrade-Assistent.lnk
2017-01-16 12:46 - 2017-01-16 12:46 - 00000719 _____ C:\Users\eFKa\Desktop\Windows 10-Upgrade-Assistent.lnk
2017-01-16 12:46 - 2017-01-16 12:46 - 00000000 ___HD C:\$GetCurrent
2017-01-16 12:46 - 2017-01-16 12:46 - 00000000 ____D C:\Windows10Upgrade
2017-01-16 12:45 - 2017-01-16 12:45 - 05741448 _____ (Microsoft Corporation) C:\Users\eFKa\Downloads\Windows10Upgrade28084.exe
2017-01-16 11:43 - 2017-01-16 11:44 - 246223020 _____ C:\Users\eFKa\Downloads\FreeCAD_0.16-6703.898bd8b-OSX-x86_64.dmg
2017-01-16 11:39 - 2017-01-16 11:39 - 04619596 _____ C:\Users\eFKa\Downloads\KallfelzRicklefsHaeuser_aus_Backstein_168477_300dpi.zip
2017-01-16 11:38 - 2017-01-16 11:38 - 1689790158 _____ C:\Users\eFKa\Downloads\EP4-Win.7z
2017-01-15 23:47 - 2017-01-15 23:50 - 12651088 _____ C:\Users\eFKa\Downloads\mp-tierwesen-hc1080p-sample.mkv
2017-01-15 23:20 - 2017-01-15 23:20 - 00082298 _____ C:\Users\eFKa\Downloads\Ohne Titel 1.c4d
2017-01-15 22:50 - 2017-01-15 22:50 - 00001348 _____ C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CINEMA 4D.lnk
2017-01-15 11:14 - 2017-01-15 11:14 - 20493380 _____ C:\Users\eFKa\Downloads\KPpr0n.zip
2017-01-14 20:43 - 2017-01-14 20:43 - 00008192 _____ C:\Users\eFKa\Downloads\Spotify.dll
2017-01-14 17:24 - 2017-01-20 20:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IDA Pro Free
2017-01-14 17:24 - 2017-01-14 17:24 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Hex-Rays
2017-01-14 17:24 - 2017-01-14 17:24 - 00000000 ____D C:\Program Files (x86)\IDA Free
2017-01-14 17:23 - 2017-01-14 17:23 - 16374114 _____ (Hex-Rays SA ) C:\Users\eFKa\Downloads\idafree50.exe
2017-01-14 16:54 - 2017-01-14 16:54 - 00000000 ____D C:\Users\eFKa\Downloads\C4DR12SDKHTML20101118
2017-01-14 16:51 - 2017-01-14 16:51 - 04368261 _____ C:\Users\eFKa\Downloads\C4DR12SDKHTML20101118.zip
2017-01-13 17:44 - 2017-01-13 17:44 - 00000000 ____D C:\Users\eFKa\AppData\Local\TeamSpeak 3
2017-01-13 17:44 - 2017-01-13 17:44 - 00000000 ____D C:\Users\eFKa\.TeamSpeak 3
2017-01-12 16:00 - 2017-01-12 16:00 - 00004650 _____ C:\Users\eFKa\Downloads\teil 3.c
2017-01-11 18:56 - 2017-01-11 18:56 - 00661504 _____ (JF © 2009) C:\Users\eFKa\Documents\ciso_xp_v1.exe
2017-01-10 17:45 - 2017-01-10 17:51 - 00000000 ____D C:\Users\eFKa\Downloads\Rodeca
2017-01-09 19:56 - 2017-01-09 19:56 - 00341925 _____ (Venturi ) C:\Users\eFKa\Downloads\HideVolumeOSD-1.0.exe
2017-01-09 19:47 - 2017-01-09 19:47 - 00059726 _____ C:\Users\eFKa\Downloads\WinSpy17.zip
2017-01-09 19:28 - 2017-01-09 19:28 - 00282071 _____ C:\Users\eFKa\Downloads\BD0.2.82Windows (1).zip
2017-01-08 21:27 - 2017-01-08 21:27 - 00049778 _____ C:\Users\eFKa\Downloads\Projekt (1).pdf
2017-01-08 19:47 - 2017-01-08 19:47 - 20975821 _____ C:\Users\~KkxiH\bXCNE98.mdb
2017-01-08 19:47 - 2017-01-08 19:47 - 20975821 _____ C:\Users\~KkxiH\btllbf7.xls
2017-01-08 19:47 - 2017-01-08 19:47 - 20975821 _____ C:\Users\~KkxiH\bqLez.sql
2017-01-08 19:47 - 2017-01-08 19:47 - 20975821 _____ C:\Users\~KkxiH\bP2HSQ.xlsx
2017-01-08 19:47 - 2017-01-08 19:47 - 20975821 _____ C:\Users\~KkxiH\bDR.pem
2017-01-08 19:47 - 2017-01-08 19:47 - 20975821 _____ C:\Users\~KkxiH\b5ky8.txt
2017-01-08 19:47 - 2017-01-08 19:47 - 20975821 _____ C:\Users\# Ote\btfRz.xlsx
2017-01-08 19:47 - 2017-01-08 19:47 - 20975821 _____ C:\Users\# Ote\bmk1NU6l.sql
2017-01-08 19:47 - 2017-01-08 19:47 - 20975821 _____ C:\Users\# Ote\bl26ARFe.pem
2017-01-08 19:47 - 2017-01-08 19:47 - 20975821 _____ C:\Users\# Ote\bkaXqv.txt
2017-01-08 19:47 - 2017-01-08 19:47 - 20975821 _____ C:\Users\# Ote\bhC.mdb
2017-01-08 19:47 - 2017-01-08 19:47 - 20975821 _____ C:\Users\# Ote\b00L211nS.xls
2017-01-08 19:47 - 2017-01-08 19:47 - 00279187 _____ C:\Users\# Ote\a1VOE.txt
2017-01-08 19:47 - 2017-01-08 19:47 - 00278339 _____ C:\Users\# Ote\aIAMMHNJN.xls
2017-01-08 19:47 - 2017-01-08 19:47 - 00275796 _____ C:\Users\# Ote\aHQ2Gjmc.xlsx
2017-01-08 19:47 - 2017-01-08 19:47 - 00273309 _____ C:\Users\# Ote\alD.mdb
2017-01-08 19:47 - 2017-01-08 19:47 - 00269107 _____ C:\Users\# Ote\aNe.pem
2017-01-08 19:47 - 2017-01-08 19:47 - 00268966 _____ C:\Users\~KkxiH\aFqvKNg4I.xlsx
2017-01-08 19:47 - 2017-01-08 19:47 - 00268778 _____ C:\Users\# Ote\al5LAl.sql
2017-01-08 19:47 - 2017-01-08 19:47 - 00267243 _____ C:\Users\~KkxiH\ayMUm.sql
2017-01-08 19:47 - 2017-01-08 19:47 - 00265824 _____ C:\Users\~KkxiH\aXLm7Y.xls
2017-01-08 19:47 - 2017-01-08 19:47 - 00265793 _____ C:\Users\~KkxiH\agqxT.mdb
2017-01-08 19:47 - 2017-01-08 19:47 - 00263968 _____ C:\Users\~KkxiH\aVhyn5qEq.pem
2017-01-08 19:47 - 2017-01-08 19:47 - 00263756 _____ C:\Users\~KkxiH\agqAP.txt
2017-01-08 19:47 - 2017-01-08 19:47 - 00000000 __SHD C:\Users\eFKa\Documents\~f4L9jxL6
2017-01-08 19:47 - 2017-01-08 19:47 - 00000000 __SHD C:\Users\eFKa\Documents\# 1KaLmIg2
2017-01-08 19:47 - 2017-01-08 19:47 - 00000000 __SHD C:\Users\eFKa\Desktop\ This directory is here to help protect you! Simply leave it here
2017-01-08 19:47 - 2017-01-08 19:47 - 00000000 __SHD C:\Users\~KkxiH
2017-01-08 19:47 - 2017-01-08 19:47 - 00000000 __SHD C:\Users\# Ote
2017-01-08 19:47 - 2017-01-08 19:47 - 00000000 __SHD C:\~coOe3Kv7
2017-01-08 19:47 - 2017-01-08 19:47 - 00000000 __SHD C:\# dtK
2017-01-08 16:56 - 2017-01-08 16:56 - 00001460 _____ C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SeriousSkaStudio.lnk
2017-01-08 13:38 - 2017-01-08 13:38 - 00029016 _____ C:\WINDOWS\SysWOW64\Drivers\X6va063_2017.01.08.12.39.38
2017-01-07 11:07 - 2017-01-07 11:07 - 00000000 ____D C:\Users\eFKa\Downloads\Progs (1)
2017-01-07 11:06 - 2017-01-07 11:06 - 00163840 _____ C:\Users\eFKa\Downloads\Progs (1).tar
2017-01-06 23:06 - 2017-01-06 23:14 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\proxtop
2017-01-06 23:06 - 2017-01-06 23:06 - 04195133 _____ C:\Users\eFKa\Downloads\proxtop-0.4.2.zip
2017-01-06 23:05 - 2017-01-06 23:06 - 49289656 _____ C:\Users\eFKa\Downloads\proxtop-0.4.2-win-32bit.zip
2017-01-06 23:03 - 2017-01-06 23:03 - 04205318 _____ C:\Users\eFKa\Downloads\proxtop-master.zip
2017-01-06 21:53 - 2017-01-20 20:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack
2017-01-06 21:53 - 2017-01-06 21:53 - 04498888 _____ (HTTrack ) C:\Users\eFKa\Downloads\httrack_x64-3.48.22.exe
2017-01-06 21:53 - 2017-01-06 21:53 - 00000877 _____ C:\Users\eFKa\Desktop\HTTrack Website Copier.lnk
2017-01-06 21:53 - 2017-01-06 21:53 - 00000000 ____D C:\Program Files\WinHTTrack
2017-01-06 21:53 - 2017-01-06 21:53 - 00000000 ____D C:\My Web Sites
2017-01-01 05:03 - 2017-01-01 05:03 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\MAGIX Computer Products Intl. Co
2017-01-01 04:45 - 2017-01-01 04:47 - 15261163 _____ C:\Users\eFKa\Documents\Silvester2016.mp4
2017-01-01 04:37 - 2017-01-20 20:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime Alternative
2017-01-01 04:37 - 2017-01-01 04:37 - 19236168 _____ ( ) C:\Users\eFKa\Downloads\QuickTime_Alternative_322.exe
2017-01-01 04:37 - 2017-01-01 04:37 - 00000000 ____D C:\ProgramData\Apple Computer
2017-01-01 04:37 - 2017-01-01 04:37 - 00000000 ____D C:\Program Files (x86)\QuickTime Alternative
2017-01-01 04:37 - 2010-03-17 21:53 - 00180224 _____ (Apple Inc.) C:\WINDOWS\SysWOW64\QTCF.dll
2017-01-01 04:37 - 2010-03-17 21:53 - 00094208 _____ (Apple Inc.) C:\WINDOWS\SysWOW64\QuickTimeVR.qtx
2017-01-01 04:37 - 2010-03-17 21:53 - 00069632 _____ (Apple Inc.) C:\WINDOWS\SysWOW64\QuickTime.qts
2017-01-01 04:27 - 2017-01-01 04:47 - 00012816 _____ C:\Users\eFKa\Documents\Silvester2016.veg
2017-01-01 04:27 - 2017-01-01 04:27 - 00007296 _____ C:\Users\eFKa\Documents\Silvester2016.veg.bak
2017-01-01 04:25 - 2017-01-01 04:44 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\VEGAS
2017-01-01 04:25 - 2017-01-01 04:25 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\VEGAS Pro
2017-01-01 04:25 - 2017-01-01 04:25 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Publish Providers
2017-01-01 04:25 - 2017-01-01 04:25 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\MAGIX
2017-01-01 04:25 - 2017-01-01 04:25 - 00000000 ____D C:\Users\eFKa\AppData\Local\VEGAS Pro
2017-01-01 04:25 - 2017-01-01 04:25 - 00000000 ____D C:\Users\eFKa\AppData\Local\Sony
2017-01-01 04:25 - 2017-01-01 04:25 - 00000000 ____D C:\ProgramData\VEGAS Pro
2017-01-01 04:25 - 2017-01-01 04:25 - 00000000 ____D C:\ProgramData\MAGIX
2017-01-01 04:24 - 2017-01-20 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VEGAS
2017-01-01 04:24 - 2017-01-01 04:24 - 00000000 ____D C:\Users\eFKa\AppData\Local\VEGAS
2017-01-01 04:24 - 2017-01-01 04:24 - 00000000 ____D C:\ProgramData\VEGAS
2017-01-01 04:24 - 2017-01-01 04:24 - 00000000 ____D C:\Program Files\VEGAS
2017-01-01 04:24 - 2017-01-01 04:24 - 00000000 ____D C:\Program Files (x86)\VEGAS
2017-01-01 04:23 - 2017-01-01 04:25 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Sony
2017-01-01 04:22 - 2017-01-01 04:22 - 441656903 _____ C:\Users\eFKa\Downloads\Vegas Pro 14 by SelfmadeAndrej.rar
2016-12-30 11:34 - 2016-12-30 11:35 - 05613448 _____ C:\Users\eFKa\Downloads\ibackupbot_setup.exe
2016-12-29 10:12 - 2016-12-29 10:12 - 00012872 ____N C:\bootsqm.dat
2016-12-28 22:08 - 2017-01-21 10:07 - 00003771 _____ C:\ProgramData\NvTelemetryContainer.log
2016-12-28 22:08 - 2017-01-20 22:38 - 00005110 _____ C:\ProgramData\NvTelemetryContainer.log_backup1
2016-12-28 22:08 - 2016-12-13 00:36 - 00156096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2016-12-28 22:08 - 2016-12-13 00:36 - 00123840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2016-12-28 22:08 - 2016-12-13 00:36 - 00046016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2016-12-28 22:08 - 2016-12-12 15:36 - 00001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat
2016-12-27 20:47 - 2016-12-27 20:47 - 00263841 _____ C:\Users\# YfyrYpiQ\aluA.doc
2016-12-27 20:47 - 2016-12-27 20:47 - 00098304 _____ C:\Users\# YfyrYpiQ\aE10FRRZ.docx
2016-12-27 20:47 - 2016-12-27 20:47 - 00000000 __SHD C:\Users\# YfyrYpiQ
2016-12-27 20:47 - 2016-12-27 20:47 - 00000000 __SHD C:\~ztsdvlLi
2016-12-27 20:47 - 2016-12-27 20:47 - 00000000 __SHD C:\# sPE
2016-12-27 20:46 - 2016-12-27 20:46 - 00273226 _____ C:\Users\# Q7eCK\ayclm4zX2.doc
2016-12-27 20:46 - 2016-12-27 20:46 - 00263402 _____ C:\Users\# Q7eCK\awdUJ.docx
2016-12-27 20:46 - 2016-12-27 20:46 - 00000000 __SHD C:\Users\# Q7eCK
2016-12-27 20:46 - 2016-12-27 20:46 - 00000000 __SHD C:\~TGrZ
2016-12-27 20:46 - 2016-12-27 20:46 - 00000000 __SHD C:\# HQgg
2016-12-27 20:45 - 2016-12-27 20:45 - 00000000 __SHD C:\# WEHOsaYb
2016-12-27 20:27 - 2016-12-27 20:27 - 04526080 _____ C:\Users\eFKa\Downloads\CybereasonRansomFree.msi
2016-12-27 20:27 - 2016-12-27 20:27 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Cybereason
2016-12-27 20:27 - 2016-12-27 20:27 - 00000000 ____D C:\Users\eFKa\AppData\Local\Cybereason
2016-12-27 20:27 - 2016-12-27 20:27 - 00000000 ____D C:\ProgramData\Cybereason
2016-12-26 23:03 - 2017-01-20 20:22 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Geekbench 4
2016-12-26 23:03 - 2016-12-26 23:03 - 00000000 ____D C:\Program Files (x86)\Geekbench 4
2016-12-26 23:02 - 2016-12-26 23:03 - 92660048 _____ C:\Users\eFKa\Downloads\Geekbench-4.0.3-WindowsSetup.exe
2016-12-26 11:36 - 2017-01-20 20:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossfire Europe
2016-12-26 11:36 - 2016-12-26 11:36 - 00001441 _____ C:\Users\eFKa\Desktop\Crossfire Europe.lnk
2016-12-26 11:35 - 2016-12-26 11:35 - 00000000 ____D C:\Program Files (x86)\SG Interactive
2016-12-23 23:28 - 2016-12-23 23:47 - 1741507209 _____ C:\Users\eFKa\Downloads\OS X 10.12 Sierra.rar
2016-12-23 21:52 - 2016-12-23 23:47 - 00000000 ____D C:\Users\eFKa\Downloads\unlocker208
2016-12-23 21:52 - 2016-12-23 21:52 - 10076112 _____ C:\Users\eFKa\Downloads\Patch Tool.zip
2016-12-23 21:52 - 2016-12-23 21:52 - 03096576 _____ C:\Users\eFKa\Downloads\VM Tool.iso
2016-12-23 21:52 - 2016-12-23 21:52 - 00000045 _____ C:\Users\eFKa\Downloads\Code for VMware.txt
2016-12-23 12:30 - 2016-12-23 12:30 - 00000000 ____D C:\Users\eFKa\AppData\Local\David_Kean
2016-12-23 12:28 - 2016-12-23 12:28 - 00326564 _____ C:\Users\eFKa\Downloads\audio-switcher-master.zip
==================== Ein Monat: Geänderte Dateien und Ordner ========

ZaTii 21.01.2017 10:25
Teil 2 vom FRST log



Code:
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-21 10:10 - 2016-11-05 22:55 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\NetSpeedMonitor
2017-01-21 10:08 - 2016-10-21 14:20 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Skype
2017-01-21 10:07 - 2016-10-21 14:26 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2017-01-21 10:07 - 2016-10-21 14:08 - 00000000 ____D C:\Program Files (x86)\Steam
2017-01-21 10:07 - 2016-10-21 13:54 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-21 10:07 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-01-21 10:07 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-01-21 00:38 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-21 00:11 - 2016-11-20 19:57 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-01-20 23:27 - 2016-10-21 16:16 - 00007595 _____ C:\Users\eFKa\AppData\Local\Resmon.ResmonCfg
2017-01-20 23:22 - 2016-11-08 20:47 - 00000000 ____D C:\AdwCleaner
2017-01-20 23:09 - 2016-10-22 11:56 - 00000000 ____D C:\Users\eFKa\Documents\Grabilla Captures
2017-01-20 23:09 - 2016-10-22 11:56 - 00000000 ____D C:\Users\eFKa\AppData\Local\Grabilla
2017-01-20 22:58 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-01-20 22:53 - 2016-11-05 22:05 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\TS3Client
2017-01-20 22:53 - 2016-10-21 19:19 - 00000000 ____D C:\Users\eFKa\AppData\Local\CrashDumps
2017-01-20 22:53 - 2016-10-21 16:16 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\DAEMON Tools Lite
2017-01-20 22:53 - 2016-10-21 14:08 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\TeamViewer
2017-01-20 22:53 - 2016-10-21 14:08 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2017-01-20 22:50 - 2016-10-28 23:11 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-20 22:44 - 2016-11-21 05:07 - 01930232 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-20 22:44 - 2016-11-21 04:23 - 00674916 _____ C:\WINDOWS\system32\perfh007.dat
2017-01-20 22:44 - 2016-11-21 04:23 - 00157566 _____ C:\WINDOWS\system32\perfc007.dat
2017-01-20 22:41 - 2016-10-21 14:06 - 00002240 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-01-20 22:41 - 2016-10-21 14:06 - 00001208 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-01-20 22:39 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-01-20 22:38 - 2016-11-21 04:57 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-20 22:38 - 2016-11-03 12:19 - 00000000 ____D C:\ProgramData\VMware
2017-01-20 22:38 - 2016-07-16 07:04 - 00262144 _____ C:\WINDOWS\system32\config\BBI
2017-01-20 22:35 - 2016-11-27 22:57 - 00000000 ____D C:\Program Files (x86)\MasangSoft
2017-01-20 21:17 - 2016-10-21 14:13 - 00000000 ____D C:\ProgramData\Avg
2017-01-20 20:39 - 2016-10-21 13:47 - 00000000 ____D C:\Users\eFKa\AppData\Local\Packages
2017-01-20 20:35 - 2016-10-21 14:14 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\AVG
2017-01-20 20:33 - 2016-10-21 14:13 - 00000000 ____D C:\Users\eFKa\AppData\Local\AvgSetupLog
2017-01-20 20:33 - 2016-10-21 14:13 - 00000000 ____D C:\Program Files (x86)\AVG
2017-01-20 20:31 - 2016-11-20 19:57 - 00364112 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-01-20 20:31 - 2016-10-21 14:13 - 00000000 ____D C:\Users\eFKa\AppData\Local\Avg
2017-01-20 20:31 - 2016-10-21 14:13 - 00000000 ____D C:\ProgramData\MFAData
2017-01-20 20:25 - 2016-11-21 05:10 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-01-20 20:25 - 2016-10-21 16:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 11.0
2017-01-20 20:25 - 2016-10-21 16:18 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0
2017-01-20 20:25 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-01-20 20:25 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Registration
2017-01-20 20:25 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows NT
2017-01-20 20:25 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-01-20 20:24 - 2016-07-16 12:47 - 00000000 __RHD C:\Users\Public\Libraries
2017-01-20 20:22 - 2016-12-19 21:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 2.7
2017-01-20 20:22 - 2016-12-17 22:23 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BigWorld Technology Indie Edition (2.1)
2017-01-20 20:22 - 2016-12-17 17:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\3D Object Converter
2017-01-20 20:22 - 2016-12-12 16:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git
2017-01-20 20:22 - 2016-12-08 16:43 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CopyTrans Control Center
2017-01-20 20:22 - 2016-12-07 19:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deus Ex Mankind Divided
2017-01-20 20:22 - 2016-12-05 14:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anno 2205
2017-01-20 20:22 - 2016-11-28 21:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cinema 4D R12
2017-01-20 20:22 - 2016-11-28 14:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2017-01-20 20:22 - 2016-11-27 22:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\¶ó±×ÇÏÀÓ
2017-01-20 20:22 - 2016-11-26 15:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Alarm Clock
2017-01-20 20:22 - 2016-11-23 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HxD Hex Editor
2017-01-20 20:22 - 2016-11-23 17:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2017-01-20 20:22 - 2016-11-23 17:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2017-01-20 20:22 - 2016-11-23 17:46 - 00000000 ____D C:\WINDOWS\SHELLNEW
2017-01-20 20:22 - 2016-11-20 17:16 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Citra Development Team
2017-01-20 20:22 - 2016-11-17 14:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\H.264 Encoder
2017-01-20 20:22 - 2016-11-13 16:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Red Gate
2017-01-20 20:22 - 2016-11-10 15:43 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DigitalSimulatorV5.57
2017-01-20 20:22 - 2016-11-10 11:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Overwatch
2017-01-20 20:22 - 2016-11-08 21:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
2017-01-20 20:22 - 2016-11-07 23:22 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.5
2017-01-20 20:22 - 2016-11-06 22:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exif Viewer
2017-01-20 20:22 - 2016-11-06 18:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Proxifier
2017-01-20 20:22 - 2016-11-03 12:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware
2017-01-20 20:22 - 2016-11-02 22:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2017-01-20 20:22 - 2016-11-02 22:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2017-01-20 20:22 - 2016-10-31 19:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP
2017-01-20 20:22 - 2016-10-30 15:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HeavyLoad
2017-01-20 20:22 - 2016-10-29 12:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008
2017-01-20 20:22 - 2016-10-29 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Sync Framework
2017-01-20 20:22 - 2016-10-29 12:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010
2017-01-20 20:22 - 2016-10-28 18:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 1
2017-01-20 20:22 - 2016-10-27 19:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LHGenericName01
2017-01-20 20:22 - 2016-10-27 13:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2017-01-20 20:22 - 2016-10-24 19:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.6
2017-01-20 20:22 - 2016-10-22 12:52 - 00000000 ____D C:\WINDOWS\SysWOW64\PolicyDefinitions
2017-01-20 20:22 - 2016-10-22 12:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot Anti-Beacon
2017-01-20 20:22 - 2016-10-22 11:56 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My.com Games
2017-01-20 20:22 - 2016-10-22 11:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LockHunter
2017-01-20 20:22 - 2016-10-22 00:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SleepTimer Ultimate
2017-01-20 20:22 - 2016-10-21 20:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange PDF Viewer
2017-01-20 20:22 - 2016-10-21 19:48 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-01-20 20:22 - 2016-10-21 19:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-01-20 20:22 - 2016-10-21 16:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone SDK 8.1
2017-01-20 20:22 - 2016-10-21 16:20 - 00000000 ____D C:\WINDOWS\SysWOW64\1033
2017-01-20 20:22 - 2016-10-21 16:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2013
2017-01-20 20:22 - 2016-10-21 16:18 - 00000000 ____D C:\WINDOWS\system32\1033
2017-01-20 20:22 - 2016-10-21 16:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2017-01-20 20:22 - 2016-10-21 15:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AudioSwitch
2017-01-20 20:22 - 2016-10-21 14:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2017-01-20 20:22 - 2016-10-21 14:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2017-01-20 20:22 - 2016-10-21 14:30 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2017-01-20 20:22 - 2016-10-21 14:26 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2017-01-20 20:22 - 2016-10-21 14:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2017-01-20 20:22 - 2016-10-21 14:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-01-20 20:22 - 2016-10-21 14:08 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-01-20 20:22 - 2016-10-21 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-01-20 20:22 - 2016-10-21 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMerge
2017-01-20 20:22 - 2016-10-21 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinDirStat
2017-01-20 20:22 - 2016-10-21 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2017-01-20 20:22 - 2016-10-21 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2017-01-20 20:22 - 2016-10-21 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
2017-01-20 20:22 - 2016-10-21 14:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-01-20 20:22 - 2016-10-21 13:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-01-20 20:22 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-01-20 20:22 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-01-20 20:22 - 2015-10-30 07:28 - 00000000 ____D C:\Users\Default.migrated
2017-01-20 20:13 - 2016-12-17 00:18 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2017-01-20 20:13 - 2016-12-10 18:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam
2017-01-20 20:13 - 2016-11-26 13:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EVGA
2017-01-20 20:13 - 2016-11-12 18:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks
2017-01-20 20:13 - 2016-11-10 11:42 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2017-01-20 20:13 - 2016-11-10 11:42 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2017-01-20 20:13 - 2016-11-06 19:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\gamigo
2017-01-20 20:13 - 2016-11-03 13:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unigine
2017-01-20 20:13 - 2016-10-31 19:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PremiumSoft
2017-01-20 20:13 - 2016-10-29 12:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 3 SDK
2017-01-20 20:13 - 2016-10-27 21:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Square Enix
2017-01-20 20:13 - 2016-10-23 22:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razor 1911
2017-01-20 20:13 - 2016-10-22 11:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-01-20 20:13 - 2016-10-21 19:25 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe
2017-01-20 20:13 - 2016-10-21 16:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2012
2017-01-20 20:13 - 2016-10-21 16:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
2017-01-20 20:13 - 2016-10-21 16:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 5 SDK
2017-01-20 20:13 - 2016-10-21 16:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Expression
2017-01-20 20:13 - 2016-10-21 16:21 - 00000000 ____D C:\Program Files\IIS
2017-01-20 20:13 - 2016-10-21 15:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DoNotSpy10
2017-01-20 20:13 - 2016-10-21 14:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ROCCAT
2017-01-20 20:13 - 2016-10-21 14:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASCOMP Software
2017-01-20 20:13 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-01-20 20:13 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-01-20 20:13 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-01-20 20:13 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\System
2017-01-20 20:13 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\System
2017-01-20 20:13 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-01-20 20:10 - 2016-11-27 22:57 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Masangsoft
2017-01-20 20:10 - 2016-10-22 11:56 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Grabilla
2017-01-20 20:10 - 2016-10-21 14:52 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
2017-01-20 20:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Help
2017-01-20 20:09 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2017-01-20 20:08 - 2016-07-16 12:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-01-20 20:06 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-01-20 20:06 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-01-20 20:06 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-01-20 20:06 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-01-20 20:06 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-01-20 20:06 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning
2017-01-20 20:06 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-01-20 20:06 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr
2017-01-20 20:06 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-01-20 20:06 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-01-20 20:06 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\servicing
2017-01-20 20:05 - 2016-07-16 12:42 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2017-01-20 20:02 - 2016-11-21 04:48 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2017-01-20 20:02 - 2016-11-21 04:30 - 00000000 ____D C:\WINDOWS\OCR
2017-01-20 20:02 - 2016-11-21 04:23 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-01-20 20:02 - 2016-11-21 04:23 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2017-01-20 20:02 - 2016-11-21 04:23 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-01-20 20:02 - 2016-11-21 04:23 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-01-20 20:02 - 2016-11-21 04:23 - 00000000 ____D C:\WINDOWS\system32\winrm
2017-01-20 20:02 - 2016-11-21 04:23 - 00000000 ____D C:\WINDOWS\system32\WCN
2017-01-20 20:02 - 2016-11-21 04:23 - 00000000 ____D C:\WINDOWS\system32\slmgr
2017-01-20 20:02 - 2016-11-21 04:23 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-01-20 20:02 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-01-20 20:02 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-01-20 20:02 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-01-20 20:02 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\dsc
2017-01-20 20:02 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-01-20 20:02 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\MiracastView
2017-01-20 20:02 - 2016-07-16 12:47 - 00000000 ___RD C:\Program Files\Windows Defender
2017-01-20 20:02 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-01-20 20:02 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\migwiz
2017-01-20 20:02 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-01-20 20:02 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-01-20 20:02 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-01-20 19:59 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-01-20 19:59 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\MUI
2017-01-20 19:59 - 2016-07-16 12:43 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2017-01-20 19:59 - 2016-07-16 12:43 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2017-01-20 19:59 - 2016-07-16 12:43 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2017-01-20 19:59 - 2016-07-16 12:43 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2017-01-20 19:59 - 2016-07-16 12:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2017-01-20 19:59 - 2016-07-16 12:43 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2017-01-20 19:59 - 2016-07-16 12:43 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2017-01-20 19:59 - 2016-07-16 12:43 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2017-01-20 19:59 - 2016-07-16 12:43 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2017-01-20 19:59 - 2016-07-16 12:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2017-01-20 19:59 - 2016-07-16 12:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2017-01-20 19:59 - 2016-07-16 12:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2017-01-20 19:59 - 2016-07-16 12:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2017-01-20 19:59 - 2016-07-16 12:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2017-01-20 19:59 - 2016-07-16 12:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll
2017-01-20 19:59 - 2016-07-16 12:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll
2017-01-20 19:59 - 2016-07-16 12:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll
2017-01-20 19:59 - 2016-07-16 12:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll
2017-01-20 19:53 - 2016-11-21 06:37 - 00000000 ___HD C:\$WINDOWS.~BT
2017-01-20 19:51 - 2016-10-21 19:25 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2017-01-20 19:38 - 2016-10-21 19:19 - 00000000 ____D C:\Users\eFKa\AppData\Local\ElevatedDiagnostics
2017-01-20 18:52 - 2016-10-22 12:52 - 00000000 ____D C:\Program Files (x86)\Spybot Anti-Beacon
2017-01-20 15:14 - 2016-10-21 14:06 - 00000000 ____D C:\Program Files (x86)\Opera
2017-01-19 20:19 - 2016-10-22 11:55 - 00000000 ____D C:\Users\eFKa\AppData\Local\MyComGames
2017-01-19 18:35 - 2016-11-16 10:03 - 00000000 ____D C:\Users\eFKa\.gimp-2.8
2017-01-19 11:39 - 2016-10-22 12:00 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\vlc
2017-01-18 23:44 - 2016-11-03 12:20 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\VMware
2017-01-18 23:44 - 2016-11-03 12:20 - 00000000 ____D C:\Users\eFKa\AppData\Local\VMware
2017-01-18 12:27 - 2016-10-21 16:25 - 00000000 ____D C:\Users\eFKa\Documents\Visual Studio 2013
2017-01-18 12:02 - 2016-10-21 14:12 - 00000000 ____D C:\Program Files (x86)\Java
2017-01-18 12:02 - 2016-10-21 14:07 - 00000000 ____D C:\ProgramData\Oracle
2017-01-18 12:01 - 2016-10-21 19:21 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2017-01-18 12:01 - 2016-10-21 19:21 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-01-18 12:01 - 2016-10-21 14:12 - 00000000 ____D C:\Program Files\Java
2017-01-17 17:29 - 2016-10-21 14:36 - 00000000 ____D C:\Users\eFKa\Documents\LastChaos
2017-01-17 14:57 - 2016-10-21 20:35 - 00000000 ____D C:\Users\eFKa\.VirtualBox
2017-01-17 13:46 - 2016-10-21 14:09 - 00000000 ____D C:\ProgramData\Skype
2017-01-17 10:03 - 2016-10-21 14:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-01-16 21:43 - 2016-10-21 14:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-01-16 21:32 - 2016-11-06 11:42 - 00000000 ____D C:\Users\eFKa\Documents\MATLAB
2017-01-15 23:01 - 2016-10-29 12:36 - 00000000 ____D C:\Users\eFKa\Documents\Visual Studio 2010
2017-01-15 20:01 - 2016-11-02 22:03 - 00000000 ____D C:\Users\eFKa\AppData\Local\Battle.net
2017-01-15 20:01 - 2016-11-02 22:03 - 00000000 ____D C:\Program Files (x86)\Battle.net
2017-01-15 12:14 - 2016-10-21 14:29 - 00000000 ____D C:\Users\eFKa\AppData\Local\JDownloader 2.0
2017-01-15 10:00 - 2016-11-08 20:49 - 00001418 _____ C:\Users\eFKa\Desktop\cports.cfg
2017-01-14 16:47 - 2016-10-21 20:04 - 00000000 ____D C:\Users\eFKa\Documents\TrackMania
2017-01-13 17:44 - 2016-11-05 22:05 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2017-01-11 23:28 - 2016-10-21 14:52 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\discord
2017-01-11 23:15 - 2016-10-21 14:51 - 00000000 ____D C:\Users\eFKa\AppData\Local\Discord
2017-01-11 13:51 - 2016-10-22 12:58 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-01-11 13:49 - 2016-10-22 12:58 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-01-09 19:29 - 2016-10-21 14:54 - 00000000 ____D C:\Users\eFKa\AppData\Roaming\BetterDiscord
2016-12-28 22:08 - 2016-12-02 22:38 - 00001489 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2016-12-28 22:08 - 2016-10-21 13:59 - 00000000 ____D C:\Users\eFKa\AppData\Local\NVIDIA Corporation
2016-12-28 22:08 - 2016-10-21 13:59 - 00000000 ____D C:\Users\eFKa\AppData\Local\NVIDIA
2016-12-26 17:15 - 2016-12-09 17:49 - 00029016 _____ C:\WINDOWS\SysWOW64\Drivers\X6va063_2016.12.27.19.44.04
2016-12-24 00:03 - 2016-11-03 12:36 - 00000000 ____D C:\Users\eFKa\Documents\Virtual Machines
2016-12-23 00:13 - 2016-07-16 12:49 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-12-23 00:13 - 2016-07-16 12:49 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-11-03 13:59 - 2016-12-13 21:54 - 1307648 _____ () C:\Users\eFKa\AppData\Local\file__0.localstorage
2016-12-17 00:18 - 2016-12-17 00:18 - 0001961 _____ () C:\Users\eFKa\AppData\Local\freewrl_launcher3.xml
2016-12-17 13:03 - 2016-12-17 13:03 - 0008527 _____ () C:\Users\eFKa\AppData\Local\recently-used.xbel
2016-10-21 16:16 - 2017-01-20 23:27 - 0007595 _____ () C:\Users\eFKa\AppData\Local\Resmon.ResmonCfg
2017-01-20 20:09 - 2017-01-20 20:09 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-12-28 22:08 - 2017-01-21 10:07 - 0003771 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-28 22:08 - 2017-01-20 22:38 - 0005110 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1

Einige Dateien in TEMP:
====================
C:\Users\eFKa\AppData\Local\Temp\sfamcc00001.dll
C:\Users\eFKa\AppData\Local\Temp\sfareca00001.dll


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-01-20 20:08

==================== Ende von FRST.txt ============================
Addition Log

Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 18-01-2017
durchgeführt von eFKa (21-01-2017 10:10:39)
Gestartet von C:\Users\eFKa\Desktop
Windows 10 Pro Version 1607 (X64) (2017-01-20 19:25:47)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3493243389-3681450369-2610281837-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3493243389-3681450369-2610281837-503 - Limited - Disabled)
eFKa (S-1-5-21-3493243389-3681450369-2610281837-1001 - Administrator - Enabled) => C:\Users\eFKa
Gast (S-1-5-21-3493243389-3681450369-2610281837-501 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: AVG Antivirus (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Antivirus (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

.NET Reflector Desktop (HKLM-x32\...\{34795E6B-338D-4A6D-8BCE-906AD056AF4F}) (Version: 9.0.1.374 - Red Gate Software Ltd)
.NET Reflector Visual Studio Extension 9.0 (HKLM-x32\...\{BDF47606-A702-4FDF-8003-F5B807F54DA3}) (Version: 9.0.1.374 - Red Gate Software Ltd)
3D Object Converter for Windows 6.50 (HKLM-x32\...\3D Object Converter for Windows 6.50) (Version:  - )
Adobe Flash Player 10 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 10.0.32.18 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM-x32\...\{A2116AF9-FA9D-41EA-9874-1E40B227D4DE}) (Version: 12.2.5.195 - Adobe Systems, Inc)
AlienFX for KoneXTD (HKLM-x32\...\InstallShield_{48725548-E470-4816-99DD-6667EABAB982}) (Version: 1.02 - Roccat GmbH)
AlienFX for KoneXTD (Version: 1.02 - Roccat GmbH) Hidden
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.5.0 - Sereby Corporation)
Anno 2205 (HKLM-x32\...\Anno 2205_is1) (Version:  - )
Ansel (Version: 376.09 - NVIDIA Corporation) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{29DB9165-5FC1-48F0-9188-26123F526848}) (Version: 5.0.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{5905C8CF-1C88-4478-A48E-4E458AD1BC7E}) (Version: 5.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{D4D86CB2-2370-4691-8272-3869EDED6C64}) (Version: 10.0.0.18 - Apple Inc.)
Application Insights Tools for Visual Studio 2013 (x32 Version: 2.5 - Microsoft Corporation) Hidden
AudioSwitch (HKLM-x32\...\AudioSwitch_is1) (Version: 2.1.5.0 - )
AVG (HKLM\...\AvgZen) (Version: 1.126.2.56387 - AVG Technologies)
AVG Protection (HKLM-x32\...\AVG Antivirus) (Version: 17.1.3006 - AVG Technologies)
AVG Zen (Version: 1.126.7 - AVG Technologies) Hidden
AzureTools.Notifications (x32 Version: 2.1.10731.1602 - Microsoft Corporation) Hidden
Bandicam (HKLM-x32\...\Bandicam) (Version: 3.0.2.1014 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - Bandisoft.com)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield™ 1 (HKLM-x32\...\{335B50BC-6130-4BAF-9A6A-F1561270587B}) (Version: 1.0.47.30570 - Electronic Arts)
Behaviors SDK (Windows Phone) for Visual Studio 2013 (x32 Version: 12.0.50716.0 - Microsoft Corporation) Hidden
Behaviors SDK (Windows) for Visual Studio 2013 (x32 Version: 12.0.50429.0 - Microsoft Corporation) Hidden
BigWorld Technology Indie Edition (2.1) (HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\{2BCB506A-4FFC-436B-8529-9A496D3DDDCE}) (Version:  - BigWorld)
Blend for Visual Studio 2013 (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 ENU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Build Tools - amd64 (Version: 12.0.40629 - Microsoft Corporation) Hidden
Build Tools - x86 (x32 Version: 12.0.40629 - Microsoft Corporation) Hidden
Build Tools Language Resources - amd64 (Version: 12.0.40629 - Microsoft Corporation) Hidden
Build Tools Language Resources - x86 (x32 Version: 12.0.40629 - Microsoft Corporation) Hidden
Call of Duty: Infinite Warfare (HKLM\...\Steam App 292730) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare Remastered - Multiplayer (HKLM\...\Steam App 393100) (Version:  - Raven Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.25 - Piriform)
Cheat Engine 6.6 (HKLM-x32\...\Cheat Engine 6.6_is1) (Version:  - Cheat Engine)
Cinema 4D version R12 (HKLM-x32\...\{7D9D8134-9FA3-4FFF-ADA1-BF609F29997A}_is1) (Version: R12 - Salat Production)
CopyTrans Control Center deinstallieren (HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\CopyTrans Suite) (Version: 4.013 - WindSolutions)
Crossfire Europe (HKLM-x32\...\Crossfire Europe_is1) (Version: V1482 - gamerage.com)
Crystal Reports for Visual Studio (x32 Version: 12.51.0.240 - SAP) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.4.0.0196 - Disc Soft Ltd)
Deus Ex Mankind Divided (HKLM-x32\...\{FF14FF71-544F-44C2-BC9E-3CB73674E1D2}_is1) (Version:  - Square Enix)
DigitalSimulatorV5.57 (remove only) (HKLM-x32\...\DigitalSimulatorV5.57) (Version:  - )
DirectX 9.0c Extra Files (x86, x64) (HKLM\...\{8729E65B-8C12-4A42-B1FE-E4DA7ED52855}_is1) (Version: 1.10.06.0 - Sereby Corporation)
Discord (HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)
Dishonored - Game of the Year Edition (HKLM-x32\...\Dishonored - Game of the Year Edition_is1) (Version:  - )
Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden
Dotfuscator Software Services - Community Edition (HKLM-x32\...\{41B31ABE-5A6E-498A-8F28-3BA3B8779A41}) (Version: 5.0.2300.0 - PreEmptive Solutions)
Ear Trumpet (HKLM-x32\...\BA8684A3-9834-4D78-A666-04E88FF0EC82_is1) (Version: 1.3.2.0 - )
Entity Framework 6.1.3 Tools  for Visual Studio 2013 (HKLM-x32\...\{D5170452-84D1-4725-AD9C-F9ECFD0A9E9F}) (Version: 12.0.40302.0 - Microsoft Corporation)
Eraser 6.2.0.2979 (HKLM\...\{C5900DE9-D199-4C27-B692-354C9A6A6C8B}) (Version: 6.2.2979 - The Eraser Project)
EVGA Precision XOC (HKLM-x32\...\{D705C0CA-D900-45AB-85A7-AD651F7055A6}) (Version: 6.0.9 - EVGA Corporation)
Exif-Viewer 2.51  (HKLM-x32\...\Exif-Viewer) (Version: 2.51 - Ralf Bibinger)
f.lux (HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\Flux) (Version:  - )
FMW 1 (Version: 1.152.5 - AVG Technologies) Hidden
Free Alarm Clock (HKLM-x32\...\{8ED5A2F1-338F-4608-8AF7-BCD1ADC1E1F7}_is1) (Version: 4.0.1.0 - Comfort Software Group)
Geekbench 4 (HKLM-x32\...\Geekbench 4) (Version:  - Primate Labs Inc.)
GIMP 2.8.18 (HKLM\...\GIMP-2_is1) (Version: 2.8.18 - The GIMP Team)
Git version 2.11.0 (HKLM\...\Git_is1) (Version: 2.11.0 - The Git Development Community)
Google Chrome (HKLM-x32\...\{16C1182D-6E13-3989-A4BC-360B106D5C4E}) (Version: 54.0.2840.71 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Grabilla (HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\Grabilla) (Version: 1.25.0.0 - Grabilla.com)
H.264 Encoder (HKLM-x32\...\{B99459D2-B91A-417E-9DFA-F53D569F4445}_is1) (Version:  - www.H264Encoder.com)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heaven Benchmark version 4.0 (HKLM-x32\...\Unigine Heaven Benchmark (Basic Edition)_is1) (Version: 4.0 - Unigine Corp.)
HeavyLoad V3.4 (64 bit) (HKLM\...\HeavyLoad_is1) (Version: 3.4 - JAM Software)
Hextech Repair Tool (HKLM-x32\...\{7F9A97E6-E666-11E5-B582-B88687E82322}) (Version: 1.0.16 - Riot Games, Inc.)
HideVolumeOSD 1.0 (HKLM-x32\...\HideVolumeOSD_is1) (Version: 1.0 - Venturi)
HxD Hex Editor Version 1.7.7.0 (HKLM-x32\...\HxD Hex Editor_is1) (Version: 1.7.7.0 - Maël Hörz)
IDA Pro Free v5.0 (HKLM-x32\...\IDA Pro Free_is1) (Version:  - Hex-Rays SA)
IDA Pro v6.8 and Hex-Rays Decompiler (ARM,x64,x86) (HKLM-x32\...\IDA Pro_6.8_is1) (Version:  - Hex-Rays SA)
IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version:  - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version:  - )
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1173 - Intel Corporation)
Intel(R) Network Connections 20.2.4001.0 (HKLM\...\PROSetDX) (Version: 20.2.4001.0 - Intel)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.1.1.12 - Intel(R) Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.42 - Irfan Skiljan)
Java 8 Update 121 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
Java SE Development Kit 8 Update 111 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180111}) (Version: 8.0.1110.14 - Oracle Corporation)
Java SE Development Kit 8 Update 111 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0180111}) (Version: 8.0.1110.14 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Just Cause 2 (HKLM-x32\...\Just Cause 2_is1) (Version:  - )
Kit SDK de vérification de Visual Studio*2012 - fra (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
Lagahim (HKLM-x32\...\{684AB273-5103-451B-BFA3-077E71DC8BC3}) (Version: 1.14.0428 - Barunson EnA)
Last Chaos DE Version 1.0 (HKLM-x32\...\Last Chaos DE_is1) (Version: 1.0 - gamigo AG) <==== ACHTUNG
Last Chaos US version 1.0 (HKLM-x32\...\Last Chaos US_is1) (Version: 1.0 - gamigo AG) <==== ACHTUNG
League of Legends (HKLM-x32\...\League of Legends 4.2.1) (Version: 4.2.1 - Riot Games)
League of Legends (x32 Version: 4.2.1 - Riot Games) Hidden
LHGenericName01 Version 1.0 (HKLM-x32\...\{AF911827-2113-49FA-BA3E-5720ECD34A88}_is1) (Version: 1.0 - GenericName)
LocalESPC Dev12 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
LocalESPCui for en-us Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden
LockHunter 3.1, 32/64 bit (HKLM\...\LockHunter_is1) (Version:  - Crystal Rich Ltd)
Logitech Gaming Software 8.88 (HKLM\...\Logitech Gaming Software) (Version: 8.88.30 - Logitech Inc.)
Logitech Unifying-Software 2.50 (HKLM\...\Logitech Unifying) (Version: 2.50.25 - Logitech)
MATLAB Production Server R2015a (HKLM\...\MATLAB Production Server R2015a) (Version: 2.1 - MathWorks)
Memory Profiler (x32 Version: 12.0.40629 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft ASP.NET MVC 2 - Visual Studio 2010 Tools (HKLM-x32\...\{40416836-56CC-4C0E-A6AF-5C34BADCE483}) (Version: 2.0.50217.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 2 (HKLM-x32\...\{1803A630-3C38-4D2B-9B9A-0CB37243539C}) (Version: 2.0.50217.0 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft Silverlight 3 SDK (HKLM-x32\...\{2012098D-EEE9-4769-8DD3-B038050854D4}) (Version: 3.0.40818.0 - Microsoft Corporation)
Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{C688457E-03FD-4941-923B-A27F4D42A7DD}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Native Client (HKLM\...\{BBDE8A3D-64A2-43A6-95F3-C27B87DF7AC1}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Data-Tier Application Framework (HKLM-x32\...\{0DDCEC37-369C-484B-B16D-B4413FD42FB9}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Data-Tier Application Project (HKLM-x32\...\{E5AE9031-79A5-4627-9641-BEFA82819B08}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{4E968D9C-21A7-4915-B698-F7AEB913541D}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Transact-SQL Language Service (HKLM-x32\...\{78C3657E-742C-40B1-9F53-E5A921D40F17}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2008 Setup Support Files  (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Transact-SQL ScriptDom  (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 T-SQL Language Service  (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (12.0.41012.0) (HKLM-x32\...\{AC8E0CF4-42A1-4151-B684-97CF6FD726CF}) (Version: 12.0.41012.0 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Database Publishing Wizard 1.4 (HKLM-x32\...\{ACE28263-76A4-4BF5-B6F4-8BD719595969}) (Version: 10.1.2512.8 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{0826F9E4-787E-481D-83E0-BC6A57B056D5}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft Sync Framework Runtime v1.0 SP1 (x64) (HKLM\...\{8438EC02-B8A9-462D-AC72-1B521349C001}) (Version: 1.0.3010.0 - Microsoft Corporation)
Microsoft Sync Framework SDK v1.0 SP1 (HKLM-x32\...\{0E3DFC64-CC49-4BE2-8C9C-58EF129675DB}) (Version: 1.0.3010.0 - Microsoft Corporation)
Microsoft Sync Framework Services v1.0 SP1 (x64) (HKLM\...\{034106B5-54B7-467F-B477-5B7DBB492624}) (Version: 1.0.3010.0 - Microsoft Corporation)
Microsoft Sync Services for ADO.NET v2.0 SP1 (x64) (HKLM\...\{1D1CEEF8-3741-45BD-8E77-963E1DEBDDD3}) (Version: 2.0.3010.0 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{8C06D6DB-A391-4686-B050-99CC522A7843}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{4AEB505C-95E1-4964-9B64-8D27F3186D30}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft Team Foundation Server 2010 Object Model - ENU (HKLM\...\Microsoft Team Foundation Server 2010 Object Model - ENU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Designtime - 10.0.30319 (HKLM\...\{F5079164-1DB9-3BDA-853B-F78AF67CE071}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Runtime - 10.0.30319 (HKLM-x32\...\{6A86554B-8928-30E4-A53C-D7337689134D}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{82f2609e-68ba-408d-963f-530ad8809435}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{577ff5ba-39aa-4d8c-a3a9-f95012763438}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24406 (HKLM-x32\...\{7c8a1675-0fe9-41fd-a2ed-aa4871816197}) (Version: 14.0.24406.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24406 (HKLM-x32\...\{b5e24db9-876e-4af2-ac7f-00d0e8bc162c}) (Version: 14.0.24406.0 - Microsoft Corporation)
Microsoft Visual F# 2.0 Runtime (HKLM-x32\...\{729A3000-BC8A-3B74-BA5D-5068FE12D70C}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{14DD7530-CCD2-3798-B37D-3839ED6A441C}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 IntelliTrace Collection (x64) (HKLM\...\{88BAE373-00F4-3E33-828F-96E89E5E0CB9}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010 Ultimate - ENU (HKLM-x32\...\Microsoft Visual Studio 2010 Ultimate - ENU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio Macro Tools (HKLM-x32\...\Microsoft Visual Studio Macro Tools) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Professional 2013 with Update 5 (HKLM-x32\...\{ddf731da-94ef-4dd0-98f9-6eb3656bebf7}) (Version: 12.0.40629 - Microsoft Corporation)
Microsoft Web Deploy 3.5 (HKLM\...\{69A998C5-00A9-42CA-AB4E-C31CFFCD9251}) (Version: 3.1237.1763 - Microsoft Corporation)
Mozilla Firefox 50.1.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.1.0 (x86 de)) (Version: 50.1.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.1.0.6186 - Mozilla)
Mozilla Thunderbird 45.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.4.0 (x86 de)) (Version: 45.4.0 - Mozilla)
My.com Game Center (HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\MyComGames) (Version: 3.189 - My.com B.V.)
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.1 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 376.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.09 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.2.0.96 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.2.0.96 - NVIDIA Corporation)
NVIDIA Grafiktreiber 376.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.09 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.2.0.96 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 2.0.0.0 - NVIDIA Corporation) Hidden
Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation) Hidden
Oracle VM VirtualBox 5.1.8 (HKLM\...\{65402252-5DA1-4360-A144-E09BB16AC7A9}) (Version: 5.1.8 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.3.3.1921 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.318.1 - Tracker Software Products Ltd)
PowerShellIntegration.Notifications (x32 Version: 2.6.0.0 - Microsoft Corporation) Hidden
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden
PremiumSoft Navicat Premium 10.1 (HKLM-x32\...\PremiumSoft Navicat Premium_is1) (Version: 10.1.7 - PremiumSoft CyberTech Ltd.)
Prerequisites for SSDT  (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation)
Prerequisites for SSDT  (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
Proxifier version 3.29 (HKLM-x32\...\Proxifier_is1) (Version: 3.29 - Initex)
Python 2.7.12 (HKLM-x32\...\{9DA28CE5-0AA5-429E-86D8-686ED898C665}) (Version: 2.7.12150 - Python Software Foundation)
Python 3.5.2 (32-bit) (HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\{cf72a2ab-2f1d-49fd-a0d7-1065e6357e1e}) (Version: 3.5.2150.0 - Python Software Foundation)
Python 3.5.2 Core Interpreter (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Development Libraries (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Documentation (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Executables (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 pip Bootstrap (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Standard Library (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Tcl/Tk Support (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Test Suite (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python 3.5.2 Utility Scripts (32-bit) (x32 Version: 3.5.2150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{963ECCDD-F09F-4C24-9367-8B5D748AA7C8}) (Version: 3.5.2121.0 - Python Software Foundation)
Python Tools Redirection Template (x32 Version: 1.3 - Microsoft Corporation) Hidden
Qt 5.7.1 (HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\{ffd48aae-d1c8-43e9-83c1-fb18fb314821}) (Version: 5.7.1 - The Qt Company Ltd)
Qt5 Visual Studio Add-in 1.2.3 (HKLM-x32\...\Qt5 Visual Studio Add-in 1.2.3 - C:_Program Files (x86)_Digia_Qt5VSAddin) (Version: 1.2.3 - Digia Plc)
QuickTime Alternative 3.2.2 (HKLM-x32\...\QuicktimeAlt_is1) (Version: 3.2.2 - )
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 4.0 beta r2627 - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7614 - Realtek Semiconductor Corp.)
Revelation Online (HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\Revelation Online) (Version: 1.16 - My.com B.V.)
ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version:  - Roccat GmbH)
ROCCAT Kone XTD Mouse Driver (HKLM-x32\...\{7133137D-DF48-4522-AD88-13C82B7D0A63}) (Version:  - Roccat GmbH)
Roccat Talk (HKLM-x32\...\{605D671E-1D1E-4840-84D9-BFACE17F160D}) (Version: 1.00.0013 - Roccat GmbH)
SDK de comprobación de Visual Studio 2012 - esn (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
Secure Eraser (HKLM-x32\...\Secure Eraser_is1) (Version: 5.0.0.1 - ASCOMP Software GmbH)
Service Pack 1 for SQL Server 2008 (KB968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden
SharePoint Client Components (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
SharePoint Client Components (Version: 16.0.2617.1200 - Microsoft Corporation) Hidden
SHIELD Streaming (Version: 7.1.0350 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.2.0.96 - NVIDIA Corporation) Hidden
Skype™ 7.31 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.31.104 - Skype Technologies S.A.)
SleepTimer Ultimate 1.3 (HKLM-x32\...\{0EE56463-49B2-45E1-B74F-3E0139DBC986}_is1) (Version:  - Christian Handorf)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Spybot Anti-Beacon (HKLM-x32\...\{419A7FCF-93E1-474D-BFE9-987CF3F90C88}_is1) (Version: 1.6 - Safer-Networking Ltd.)
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.66695 - TeamViewer)
Telerik Fiddler (HKLM-x32\...\Fiddler2) (Version: 4.6.3.44034 - Telerik)
TmUnitedForever Update 2010-03-15 (HKLM-x32\...\TmUnitedForever_is1) (Version:  - Nadeo)
TrackMania Nations Forever (HKLM\...\Steam App 11020) (Version:  - Nadeo)
TypeScript Power Tool (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2013 (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
VEGAS Pro 14.0 (64-bit) (HKLM\...\{4D5A9B21-79F9-11E6-AAC4-BB95F5A309BD}) (Version: 14.0.161 - VEGAS)
Visual C++ MFC MBCS Library for Visual Studio 2013 (HKLM-x32\...\{91501789-1ec3-422d-9043-b1065a88d603}) (Version: 12.0.21005.1 - Microsoft Corporation)
Visual Studio 2010 Prerequisites - English (HKLM\...\{662014D2-0450-37ED-ABAE-157C88127BEB}) (Version: 10.0.30319 - Microsoft Corporation)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{112C23F2-C036-4D40-BED4-0CB47BF5555C}) (Version: 4.0.8080.0 - Microsoft Corporation)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio 2013 Update 5 (KB2829760) (HKLM-x32\...\{17551f85-1d1c-4142-a83f-bbd18a3522c2}) (Version: 12.0.40629 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VMware Workstation (HKLM\...\{389F7934-61F4-40DF-B983-331614BB4686}) (Version: 12.5.1 - VMware, Inc.)
VS Update core components (x32 Version: 12.0.40629 - Microsoft Corporation) Hidden
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
WCF Data Services 5.6.0 Runtime (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2013 (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation)
Web Deployment Tool (HKLM\...\{0F37D969-1260-419E-B308-EF7D29ABDE20}) (Version: 1.1.0618 - Microsoft Corporation)
WinDirStat 1.1.2 (HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\WinDirStat) (Version:  - )
Windows 10-Upgrade-Assistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17364 - Microsoft Corporation)
Windows Phone 8.1 Emulators - ENU (HKLM-x32\...\{166a69f6-6512-47ea-a342-17d954fc059a}) (Version: 12.0.31010.0 - Microsoft Corporation)
WinHTTrack Website Copier 3.48-22 (x64) (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.48.22 - HTTrack)
WinMerge 2.14.0 (HKLM-x32\...\WinMerge_is1) (Version: 2.14.0 - Thingamahoochie Software)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Wireshark 2.2.1 (64-bit) (HKLM-x32\...\Wireshark) (Version: 2.2.1 - The Wireshark developer community, hxxps://www.wireshark.org)
Workflow Manager Client 1.0 (Version: 2.0.40131.0 - Microsoft Corporation) Hidden
Workflow Manager Tools 1.0 for Visual Studio (Version: 2.0.40326.0 - Microsoft Corporation) Hidden
WoT Model Editor (HKLM-x32\...\{05855914-EC5C-4C10-8FD8-A68E25A0CED0}) (Version: 1.0.0 - Coffee_)
XAMPP (HKLM-x32\...\xampp) (Version: 5.5.38-1 - Bitnami)
Пакет Visual Studio 2012 Verification SDK - rus (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {02B2EB0C-AA43-4E16-86AE-6747BC573140} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {0F0192B7-E437-4F41-9195-F0360826FED8} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-12-13] (NVIDIA Corporation)
Task: {264A523D-6637-4BCD-8D83-0CF5D0565521} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-12-13] (NVIDIA Corporation)
Task: {27813080-69A4-4065-8F2B-C5DAC2F620E8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-21] (Google Inc.)
Task: {294505B1-F96B-4AFE-BBF3-38766DCDB3D6} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-12-13] (NVIDIA Corporation)
Task: {2A578F9E-9D99-4324-A365-F5A52E3A7C93} - System32\Tasks\AVG EUpdate Task => avgsetupx.exe
Task: {2FF56187-CF87-4960-8DD5-E0A49EE07A2C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-21] (Google Inc.)
Task: {3177C6EC-38BC-4243-89D6-95B778A02923} - System32\Tasks\Speedfan\Speedfan => C:\Program Files (x86)\SpeedFan\speedfan.exe [2016-06-29] ()
Task: {3628CFBE-B6FD-4C61-94FB-D45F078A00DD} - System32\Tasks\AVG-SSU_0117av_DELETE => C:\ProgramData\Avg_Update_0117av\AVG-Secure-Search-Update_0117av.exe
Task: {4F52009F-75A6-42EB-86A4-E53302869514} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-12-13] (NVIDIA Corporation)
Task: {512AF402-8BF8-4EDF-A6B4-4835DE818EF9} - System32\Tasks\EVGAPrecisionX => C:\Program Files (x86)\EVGA\Precision XOC\PrecisionX_x64.exe [2016-11-11] (EVGA Corp.)
Task: {54489F11-D311-4E48-96CC-5EC3CAB2E9DA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-12-06] (Piriform Ltd)
Task: {63C22451-FB23-4812-8107-C646B706F339} - System32\Tasks\MacsFanControl => C:\Program Files (x86)\Macs Fan Control\MacsFanControl.exe
Task: {710832E5-03DF-4054-BF38-0F8E41955BBB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-12-13] (Adobe Systems Incorporated)
Task: {828669DD-589B-4771-BBB4-A93FBD6B2F62} - System32\Tasks\Speedfan\Precision X => C:\Program Files (x86)\EVGA\Precision XOC\PrecisionX_x64.exe [2016-11-11] (EVGA Corp.)
Task: {83CF4304-5226-427B-BE91-E9D338F8683F} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [2016-09-21] (Tracker Software Products (Canada) Ltd.)
Task: {9B349347-F569-4CAE-B206-5866723ACC90} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-12-13] (NVIDIA Corporation)
Task: {AA3BDFF9-9BCB-44FF-8F97-A7A40F6D25C7} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-12-13] (NVIDIA Corporation)
Task: {C06C47AA-01EF-4FDF-8410-BEB52155FE71} - System32\Tasks\Speedfan\Shudown => C:\Windows\System32\shutdown.exe [2016-07-16] (Microsoft Corporation)
Task: {D0873CAB-523C-4462-8B17-08670ECA75B4} - System32\Tasks\Opera scheduled Autoupdate 1477055179 => C:\Program Files (x86)\Opera\launcher.exe [2017-01-16] (Opera Software)
Task: {D119A5CB-0B7F-4ACB-B61E-9E98C27CF576} - System32\Tasks\Safer-Networking\Spybot Anti-Beacon\Aktualisiere Anti-Beacon-Immunisierung => C:\Program Files (x86)\Spybot Anti-Beacon\SDAntiBeacon.exe [2016-11-11] (Safer-Networking Ltd.)
Task: {D424A762-3BFD-4894-8B72-BC6CFEA39569} - System32\Tasks\AVG-SSU_0117av => C:\ProgramData\Avg_Update_0117av\AVG-Secure-Search-Update_0117av.exe
Task: {E4C5D9A0-CDC4-49FE-8292-F95F7C12BC22} - System32\Tasks\Antivirus Emergency Update => C:\Program Files (x86)\AVG\Antivirus\AvEmUpdate.exe [2017-01-20] (AVG Technologies CZ, s.r.o.)
Task: {EB1B3419-82B5-48CF-AAD2-1CF9DA31C783} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2016-12-13] (NVIDIA Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\eFKa\Desktop\multi - Verknüpfung.lnk -> D:\Spiele\Attitude LastChaos\multi.bat ()
Shortcut: C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DigitalSimulatorV5.57\Spende.lnk -> hxxp://www.digitalsimulator.de/spende.php

ShortcutWithArgument: C:\Users\eFKa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt 5.7.1\5.7\MSVC 2013 (64-bit)\Qt 5.7 64-bit for Desktop (MSVC 2013).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /A /Q /K C:\Qt\Qt5.7.1\5.7\msvc2013_64\bin\qtenv2.bat

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-09-01 18:12 - 2016-09-01 18:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-09-01 18:12 - 2016-09-01 18:12 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-10-21 14:50 - 2016-12-13 00:36 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-21 14:50 - 2016-12-13 00:35 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2017-01-20 20:09 - 2016-11-24 20:39 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2017-01-20 20:27 - 2017-01-20 20:27 - 00959168 _____ () C:\Users\eFKa\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\amd64\ClientTelemetry.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2016-10-21 14:14 - 2016-02-03 11:33 - 00566440 _____ () C:\Program Files (x86)\ASCOMP Software\Secure Eraser\SecEraser64.dll
2016-10-16 02:19 - 2016-10-16 02:19 - 00230064 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2016-11-21 04:29 - 2016-11-21 04:29 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-01-20 20:06 - 2017-01-20 20:06 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-12-09 20:27 - 2016-12-08 09:03 - 02412888 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll
2016-12-09 20:27 - 2016-12-08 09:03 - 00099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll
2015-03-07 01:07 - 2015-03-07 01:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2016-09-29 22:13 - 2016-09-29 22:13 - 01096824 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-07 01:07 - 2015-03-07 01:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2016-09-29 22:13 - 2016-09-29 22:13 - 00241784 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2016-11-21 04:52 - 2016-11-21 04:52 - 00071168 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.4.86.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-11-21 04:52 - 2016-11-21 04:52 - 00157184 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.4.86.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-11-21 04:52 - 2016-11-21 04:52 - 29443072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.4.86.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2015-11-13 00:25 - 2015-11-13 00:25 - 01441488 _____ () C:\Users\eFKa\AppData\Local\Grabilla\GrabillaTray.exe
2016-12-06 15:09 - 2016-12-06 15:09 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2016-10-21 15:26 - 2016-10-20 10:42 - 00139776 _____ () C:\Program Files (x86)\AudioSwitch\AudioSwitch.exe
2016-06-29 19:01 - 2016-06-29 19:01 - 08166536 _____ () C:\Program Files (x86)\SpeedFan\speedfan.exe
2016-10-27 13:01 - 2016-12-15 20:17 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll
2016-10-21 14:50 - 2016-12-13 00:35 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-10-21 14:50 - 2016-12-13 00:35 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-21 14:50 - 2016-12-13 00:35 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-01-20 20:32 - 2017-01-20 20:32 - 48920064 _____ () C:\Program Files (x86)\AVG\UiDll\2623\libcef.dll
2016-10-21 14:21 - 2016-12-23 19:28 - 00657184 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2016-10-21 14:21 - 2016-09-01 02:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2016-10-21 14:21 - 2017-01-19 02:30 - 02327840 _____ () C:\Program Files (x86)\Steam\video.dll
2016-10-21 14:21 - 2016-09-01 02:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2016-10-21 14:21 - 2016-09-01 02:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2016-10-21 14:21 - 2016-01-27 08:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2016-10-21 14:21 - 2016-01-27 08:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2016-10-21 14:21 - 2016-01-27 08:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2016-10-21 14:21 - 2016-01-27 08:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2016-10-21 14:21 - 2016-01-27 08:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2016-10-21 14:21 - 2017-01-19 02:30 - 00838432 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-10-21 14:21 - 2016-07-04 23:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-12-13 14:04 - 2017-01-05 04:12 - 68813088 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2016-10-21 14:50 - 2016-12-13 00:33 - 64245184 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2016-10-21 14:50 - 2016-12-12 15:36 - 00525760 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-10-21 14:50 - 2016-12-12 15:36 - 00254008 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-10-21 14:50 - 2016-12-12 15:36 - 02808888 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-10-21 14:50 - 2016-12-12 15:36 - 00384568 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-10-21 14:50 - 2016-12-12 15:36 - 00447424 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-10-21 14:50 - 2016-12-12 15:36 - 00336832 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-10-21 14:50 - 2016-12-12 15:36 - 01003456 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2016-12-28 22:08 - 2016-12-12 15:36 - 00956472 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSDKAPINode.node
2015-11-13 00:25 - 2015-11-13 00:25 - 00318672 _____ () C:\Users\eFKa\AppData\Local\Grabilla\Extension.dll
2015-11-13 00:25 - 2015-11-13 00:25 - 00013520 _____ () C:\Users\eFKa\AppData\Local\Grabilla\CppHooKDll.dll
2015-11-13 00:25 - 2015-11-13 00:25 - 00166608 _____ () C:\Users\eFKa\AppData\Local\Grabilla\Win7Extension.dll
2016-10-21 14:56 - 2012-06-17 10:20 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\hiddriver.dll
2016-10-21 14:56 - 2010-11-04 10:48 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Isku Keyboard\hiddriver.dll
2017-01-20 20:34 - 2017-01-20 20:34 - 00171208 _____ () C:\Program Files (x86)\AVG\Antivirus\JsonRpcServer.dll
2017-01-20 20:34 - 2017-01-20 20:34 - 48936448 _____ () C:\Program Files (x86)\AVG\Antivirus\libcef.dll
2017-01-20 20:40 - 2017-01-21 10:08 - 00158720 _____ () C:\Users\eFKa\AppData\Local\Temp\sfareca00001.dll
2017-01-20 20:26 - 2017-01-21 10:08 - 00192512 _____ () C:\Users\eFKa\AppData\Local\Temp\sfamcc00001.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\Software\Classes\exefile:  <===== ACHTUNG
HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\Software\Classes\.exe: exefile =>  <===== ACHTUNG

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-10-30 08:24 - 2017-01-20 23:23 - 00005871 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 bandicam.com
127.0.0.1 ssl.bandisoft.com
127.0.0.1 *.msads.net
127.0.0.1 *.msecn.net
127.0.0.1 *.rad.msn.com
127.0.0.1 a.ads2.msads.
127.0.0.1 ac3.msn.com
127.0.0.1 ad.doubleclick.net
127.0.0.1 adnexus.net
127.0.0.1 adnxs.com
127.0.0.1 ads1.msads.net
127.0.0.1 ads1.msn.com
127.0.0.1 ads2.msads.net
127.0.0.1 aka-cdn-ns.adtech.de
127.0.0.1 an.secure.tacoda.net
127.0.0.1 aorta.clickagy.com
127.0.0.1 asvcs.aol.com
127.0.0.1 az512334.vo.msecnd.net
127.0.0.1 b.ads2.msads.net
127.0.0.1 bs.serving-sys.com
127.0.0.1 cdn.at.atwola.com
127.0.0.1 cdn.atdmt.com
127.0.0.1 cds26.ams9.msecn.net
127.0.0.1 db3aqu.atdmt.com
127.0.0.1 devads.skypeassets.net
127.0.0.1 dpm.demdex.net
127.0.0.1 dtm.advertising.com
127.0.0.1 ec.atdmt.com

Da befinden sich 111 zusätzliche Einträge.


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\eFKa\Documents\tricolore-2.png
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\Services: Origin Client Service => 3
MSCONFIG\Services: Origin Web Helper Service => 2
MSCONFIG\Services: SkypeUpdate => 2
HKLM\...\StartupApproved\Run: => "Eraser"
HKLM\...\StartupApproved\Run: => "BCSSync"
HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\StartupApproved\StartupFolder: => "Rainmeter.lnk"
HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\StartupApproved\Run: => "MyComGames"
HKU\S-1-5-21-3493243389-3681450369-2610281837-1001\...\StartupApproved\Run: => "OfficeSyncProcess"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [{7A2DAF11-CA5D-4B66-BA22-F6B79D2EB65B}] => C:\Program Files (x86)\Opera\42.0.2393.137\opera.exe
FirewallRules: [{A750F679-CA1F-473C-A3D1-EC2608CC07D8}] => C:\Program Files (x86)\IDA 6.8\idaq64.exe
FirewallRules: [{9EB8A0D5-EF63-44BF-AA99-A1B3F956E3EE}] => C:\Program Files (x86)\IDA 6.8\idaq64.exe
FirewallRules: [{2A7FB45E-C67A-4BC7-974F-C213E7C2A4CA}] => C:\Program Files (x86)\IDA 6.8\idaq.exe
FirewallRules: [{67B8E6FF-2652-45AD-88FD-EF7B6A9EF09A}] => C:\Program Files (x86)\IDA 6.8\idaq.exe
FirewallRules: [{01009BF6-01D7-44B9-B07A-C5995C5AF419}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{DEA2ECAD-6C78-418B-A670-9BAD4372A0B4}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{B32A5047-7349-4D87-9292-E9BAF3F62E52}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{02E0ABAB-692F-439B-8D4C-212A1DA3D5D9}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{D2F5E95E-7FDD-4A76-870A-D0BAF948E004}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [UDP Query User{987BCD7D-F0D7-4A90-A313-37F2CCE8D0B6}C:\bwindie2.1\bigworld\tools\modeleditor\modeleditor_cracked.exe] => C:\bwindie2.1\bigworld\tools\modeleditor\modeleditor_cracked.exe
FirewallRules: [TCP Query User{82E3BB17-D215-4E46-BC0A-2409F31010A3}C:\bwindie2.1\bigworld\tools\modeleditor\modeleditor_cracked.exe] => C:\bwindie2.1\bigworld\tools\modeleditor\modeleditor_cracked.exe
FirewallRules: [UDP Query User{4748EDFA-AA52-4B66-B124-A254FD0F6DAB}C:\bwindie2.1\bigworld\tools\worldeditor\worldeditor.exe] => C:\bwindie2.1\bigworld\tools\worldeditor\worldeditor.exe
FirewallRules: [TCP Query User{9710C98A-8EB4-4BF8-A632-19EA46F011FC}C:\bwindie2.1\bigworld\tools\worldeditor\worldeditor.exe] => C:\bwindie2.1\bigworld\tools\worldeditor\worldeditor.exe
FirewallRules: [{AB7D13F3-9B6D-4A80-96CC-9C6EC9BEF9D0}] => D:\Spiele\Origin\Battlefield 1\bf1.exe
FirewallRules: [{6994C442-14EA-42F5-9C03-F44B9DBB6256}] => D:\Spiele\Origin\Battlefield 1\bf1.exe
FirewallRules: [{E36C0D06-0A6C-498E-B3B6-3C4472E7881B}] => D:\Spiele\Origin\Battlefield 1\bf1Trial.exe
FirewallRules: [{16DC43D2-1108-48AA-BC60-B3190431CA7F}] => D:\Spiele\Origin\Battlefield 1\bf1Trial.exe
FirewallRules: [{28704472-AD7B-4DAC-AD32-725CCDB8F561}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{921B39B5-3D7F-45F6-95DF-CE67ACC2B787}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{1F537287-6069-4087-AD45-B50F47C7DFE3}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [UDP Query User{A9AACC38-4AB9-49D9-A399-F3C8812090E4}C:\program files\java\jre1.8.0_111\bin\javaw.exe] => C:\program files\java\jre1.8.0_111\bin\javaw.exe
FirewallRules: [TCP Query User{55CE326D-9C8E-404E-8670-0BE66C371D19}C:\program files\java\jre1.8.0_111\bin\javaw.exe] => C:\program files\java\jre1.8.0_111\bin\javaw.exe
FirewallRules: [UDP Query User{183FDC79-5A61-4082-8F0D-BE87F4785582}C:\program files\java\jre1.8.0_111\bin\java.exe] => C:\program files\java\jre1.8.0_111\bin\java.exe
FirewallRules: [TCP Query User{A1940A10-6BC3-40A7-967B-91BD9DC866C5}C:\program files\java\jre1.8.0_111\bin\java.exe] => C:\program files\java\jre1.8.0_111\bin\java.exe
FirewallRules: [UDP Query User{DC0FAB32-E29A-4372-A2DC-6B9547D8BA51}C:\program files\matlab\matlab production server\r2015a\bin\win64\matlab.exe] => C:\program files\matlab\matlab production server\r2015a\bin\win64\matlab.exe
FirewallRules: [TCP Query User{77B5C194-10AD-4942-BB9E-F74958D86F08}C:\program files\matlab\matlab production server\r2015a\bin\win64\matlab.exe] => C:\program files\matlab\matlab production server\r2015a\bin\win64\matlab.exe
FirewallRules: [UDP Query User{01E2166C-6BD0-46F9-87CE-B8E75895D306}C:\program files\videolan\vlc\vlc.exe] => C:\program files\videolan\vlc\vlc.exe
FirewallRules: [TCP Query User{3A6D94F3-9622-4126-8DE3-834319322E67}C:\program files\videolan\vlc\vlc.exe] => C:\program files\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{4A8223C9-4EFE-4E28-84A2-41F676C5A693}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{779F69D9-5A1B-47B6-97B9-CD40630C4655}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{930768A0-7D87-430D-81A6-5D92D3800C80}C:\mycom\revelation online\game\tianyu.exe] => C:\mycom\revelation online\game\tianyu.exe
FirewallRules: [TCP Query User{4A20D828-BB04-4E3A-9633-ABF05407D4CB}C:\mycom\revelation online\game\tianyu.exe] => C:\mycom\revelation online\game\tianyu.exe
FirewallRules: [UDP Query User{8B53303B-990F-4956-9F4E-2DFC74C51783}C:\users\efka\appdata\local\mycomgames\mycomgames.exe] => C:\users\efka\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [TCP Query User{FFC9DA34-D582-4278-A0B0-520D760620A3}C:\users\efka\appdata\local\mycomgames\mycomgames.exe] => C:\users\efka\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [{3BD4921A-97C7-4186-A797-5B7C0E7018C7}] => D:\Spiele\Steam\steamapps\common\Call of Duty Modern Warfare Remastered\h1_mp64_ship.exe
FirewallRules: [{BA926BE9-DF39-43A0-9DB4-26D40D5C948E}] => D:\Spiele\Steam\steamapps\common\Call of Duty Modern Warfare Remastered\h1_mp64_ship.exe
FirewallRules: [{6C93365A-FCE8-401D-BBAD-93C907F09ACD}] => D:\Spiele\Steam\steamapps\common\Call of Duty - Infinite Warfare\iw7_ship.exe
FirewallRules: [{6E02AACC-F1AC-4647-876D-92FD132B7C44}] => D:\Spiele\Steam\steamapps\common\Call of Duty - Infinite Warfare\iw7_ship.exe
FirewallRules: [UDP Query User{560BF83E-A7D6-4BBD-9666-9FD78852929B}C:\program files (x86)\bethesda softworks\dishonored - game of the year edition\binaries\win32\dishonored.exe] => C:\program files (x86)\bethesda softworks\dishonored - game of the year edition\binaries\win32\dishonored.exe
FirewallRules: [TCP Query User{C9973C51-346C-4E73-AB56-1EF10FDE3EC2}C:\program files (x86)\bethesda softworks\dishonored - game of the year edition\binaries\win32\dishonored.exe] => C:\program files (x86)\bethesda softworks\dishonored - game of the year edition\binaries\win32\dishonored.exe
FirewallRules: [UDP Query User{4E718556-0749-4C21-B631-BD7C7F1ED1B5}C:\xampp\mysql\bin\mysqld.exe] => C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [TCP Query User{90145FDF-EB4B-4FCA-81A0-21247D94F16B}C:\xampp\mysql\bin\mysqld.exe] => C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{09B8A655-1295-4C5C-A937-2747F5A3E92A}D:\spiele\battlenet\overwatch\overwatch.exe] => D:\spiele\battlenet\overwatch\overwatch.exe
FirewallRules: [TCP Query User{D8424D09-1DF3-4234-8ECE-91715D62D1A7}D:\spiele\battlenet\overwatch\overwatch.exe] => D:\spiele\battlenet\overwatch\overwatch.exe
FirewallRules: [{861B2B97-C6D3-47D5-A114-D9041680E60A}] => D:\Spiele\Riot Games\RADS\solutions\lol_game_client_sln\releases\0.0.1.152\deploy\League of Legends.exe
FirewallRules: [{DB4EB39E-D660-4062-A2FE-3124916CB154}] => D:\Spiele\Riot Games\RADS\solutions\lol_game_client_sln\releases\0.0.1.152\deploy\League of Legends.exe
FirewallRules: [{F13A07B3-F192-4243-9584-99F183656F95}] => D:\Spiele\Riot Games\RADS\solutions\lol_game_client_sln\releases\0.0.1.152\deploy\League of Legends.exe
FirewallRules: [{F9E054EE-E583-489C-A364-5174819D8E50}] => D:\Spiele\Riot Games\RADS\solutions\lol_game_client_sln\releases\0.0.1.152\deploy\League of Legends.exe
FirewallRules: [{5A78564C-4B6A-442D-A9BA-168D80B20B0C}] => D:\Spiele\Riot Games\lol.launcher.exe
FirewallRules: [{8354F8CA-9D3B-446D-AEBD-62B202C5D905}] => D:\Spiele\Riot Games\lol.launcher.exe
FirewallRules: [{66887F18-6E52-4374-9F51-D90D62AD5356}] => D:\Spiele\Riot Games\lol.launcher.exe
FirewallRules: [{FB0C1833-A365-44D5-92EB-1CC9517ECD53}] => D:\Spiele\Riot Games\lol.launcher.exe
FirewallRules: [{464279A5-EA93-4FB5-931F-D834C7B70593}] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
FirewallRules: [{E64DD0CE-4288-4037-B7CD-7409EB88D13C}] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
FirewallRules: [{786433DF-954C-4C7A-BA41-D640C4B455B4}] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
FirewallRules: [{3DB521EB-63D2-41F2-981E-BA09E0811047}] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
FirewallRules: [{3F61C660-23FF-4B48-8B05-6BA4EBE88257}] => C:\Program Files (x86)\Fiddler2\Fiddler.exe
FirewallRules: [{10D21EF5-4DE0-4D2A-AC0C-F359737A28CD}] => D:\Spiele\Steam\steamapps\common\Warface\live\nw.exe
FirewallRules: [{62629C5D-0952-4D7E-96CD-AA2878032D73}] => D:\Spiele\Steam\steamapps\common\Warface\live\nw.exe
FirewallRules: [{5FBD59C3-8CEA-45CA-BF5E-5B3CB7F46525}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{68D3F9B8-3F16-4D11-96C5-1ECDAA7D97D4}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4190A0CA-06AD-4B6F-A2EE-C4854D7DAC87}] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
FirewallRules: [{7A489580-DA3E-4C2D-A96C-84FCC761DCD7}] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
FirewallRules: [{5D3BE63C-3D72-438B-9B26-727BF3C63EBC}] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
FirewallRules: [{2E877F2A-08BD-4C83-B8EA-C83BBF211AB8}] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
FirewallRules: [{8B73D3AD-2122-4F3E-AFA3-928C40085B40}] => D:\Spiele\Steam\steamapps\common\TrackMania Nations Forever\TmForeverLauncher.exe
FirewallRules: [{BA2A2451-A675-4DF9-ABEE-0C0A6AF88E80}] => D:\Spiele\Steam\steamapps\common\TrackMania Nations Forever\TmForeverLauncher.exe
FirewallRules: [{626320C6-977C-4041-AE95-CD621DF63017}] => D:\Spiele\Steam\steamapps\common\TrackMania Nations Forever\TmForever.exe
FirewallRules: [{1B435B9B-7C2A-4E25-A7D6-32EF87678AAD}] => D:\Spiele\Steam\steamapps\common\TrackMania Nations Forever\TmForever.exe
FirewallRules: [{407DEBEF-2F7A-4694-8FE5-D5C206BC4CFA}] => LPort=12292
FirewallRules: [{F0DAC700-EC01-4602-A817-4004BC852A1F}] => C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [UDP Query User{C5642A38-E704-4ECD-8B76-E3DC7168FF92}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{FF1034BB-9E80-490B-A1E0-6016D6A81D6B}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{A8024FE3-FB1F-4E1D-BB1A-AAB0DF15338A}] => C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{0A504E19-18AD-4839-8589-6675E76F0186}] => C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{EFEC8184-11E2-43C0-B86C-41EE5316C444}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{B2CA3DD2-00F0-4115-B385-D4DE4F15491C}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{B47E4DEF-446C-484A-94AE-87AC1BD84C95}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{0F4837C8-361E-4E93-8891-35ACCD70BB45}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{9DD4AFCB-1F35-499E-B2F0-EADEC907FAD2}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6ED69B22-2BAB-4D31-945A-5336D6F139EF}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{017F3AA3-F090-4645-96B1-CFBBFDBF02E2}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DD1C1FA3-0BFD-49E0-86D4-8E49CDA7CAEE}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Wiederherstellungspunkte =========================

ACHTUNG: Systemwiederherstellung ist deaktiviert

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: VMware Virtual Ethernet Adapter for VMnet1 #2
Description: VMware Virtual Ethernet Adapter for VMnet1
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: VMware, Inc.
Service: VMnetAdapter
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: VMware Virtual Ethernet Adapter for VMnet8 #2
Description: VMware Virtual Ethernet Adapter for VMnet8
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: VMware, Inc.
Service: VMnetAdapter
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/21/2017 10:07:32 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0xC004F074
Befehlszeilenargumente:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=73111121-5638-40f6-bc11-f1d7b0d64300;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (01/21/2017 10:07:26 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0xC004F074
Befehlszeilenargumente:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=73111121-5638-40f6-bc11-f1d7b0d64300;NotificationInterval=1440;Trigger=UserLogon;SessionId=2

Error: (01/20/2017 10:50:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbamtray.exe, Version: 3.0.0.865, Zeitstempel: 0x584ee77c
Name des fehlerhaften Moduls: mbamtray.exe, Version: 3.0.0.865, Zeitstempel: 0x584ee77c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00053ec5
ID des fehlerhaften Prozesses: 0x2ebc
Startzeit der fehlerhaften Anwendung: 0x01d2736735cd4c9b
Pfad der fehlerhaften Anwendung: C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
Pfad des fehlerhaften Moduls: C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
Berichtskennung: dcaccd16-9f19-412b-9142-c4a1a20084a8
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (01/20/2017 10:39:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PrecisionXServer.exe, Version: 6.0.9.0, Zeitstempel: 0x58252f90
Name des fehlerhaften Moduls: MSVCR120.dll, Version: 12.0.40660.0, Zeitstempel: 0x577e0f1e
Ausnahmecode: 0xc0000409
Fehleroffset: 0x000a7646
ID des fehlerhaften Prozesses: 0x2eb0
Startzeit der fehlerhaften Anwendung: 0x01d27365ab328f82
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\EVGA\Precision XOC\PrecisionXServer.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\MSVCR120.dll
Berichtskennung: 6d892b94-8884-45e8-b19c-0275d5f3b374
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (01/20/2017 10:39:28 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0xC004F074
Befehlszeilenargumente:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=73111121-5638-40f6-bc11-f1d7b0d64300;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (01/20/2017 10:39:10 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0xC004F074
Befehlszeilenargumente:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=73111121-5638-40f6-bc11-f1d7b0d64300;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (01/20/2017 10:39:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PrecisionX_x64.exe, Version: 6.0.9.0, Zeitstempel: 0x58252fe8
Name des fehlerhaften Moduls: PrecisionX_x64.exe, Version: 6.0.9.0, Zeitstempel: 0x58252fe8
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000004e979
ID des fehlerhaften Prozesses: 0x1c38
Startzeit der fehlerhaften Anwendung: 0x01d2736590d35922
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\EVGA\Precision XOC\PrecisionX_x64.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\EVGA\Precision XOC\PrecisionX_x64.exe
Berichtskennung: da3a62ad-e03a-4487-8d41-53f13378977f
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (01/20/2017 10:37:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DeezerMusic.exe, Version: 1.0.0.0, Zeitstempel: 0x585182a7
Name des fehlerhaften Moduls: CoreUIComponents.dll, Version: 0.0.0.0, Zeitstempel: 0x584a72ab
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000072fda
ID des fehlerhaften Prozesses: 0x914
Startzeit der fehlerhaften Anwendung: 0x01d2736411a12363
Pfad der fehlerhaften Anwendung: C:\Program Files\WindowsApps\Deezer.62021768415AF_3.3.0.0_x64__q7m17pa7q8kj0\DeezerMusic.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\CoreUIComponents.dll
Berichtskennung: da41836c-20a7-4994-98f1-abfe6eb7b398
Vollständiger Name des fehlerhaften Pakets: Deezer.62021768415AF_3.3.0.0_x64__q7m17pa7q8kj0
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App

Error: (01/20/2017 10:37:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ctfmon.exe, Version: 10.0.14393.0, Zeitstempel: 0x57899148
Name des fehlerhaften Moduls: InputService.dll, Version: 10.0.14393.576, Zeitstempel: 0x584a76ec
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00057f66
ID des fehlerhaften Prozesses: 0x2bd0
Startzeit der fehlerhaften Anwendung: 0x01d27363198bf260
Pfad der fehlerhaften Anwendung: C:\WINDOWS\SysWOW64\ctfmon.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\InputService.dll
Berichtskennung: 8476cb91-b512-4f0d-8e16-53e54dd40f6c
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (01/20/2017 09:23:06 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.


Systemfehler:
=============
Error: (01/21/2017 01:22:33 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/20/2017 10:38:06 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/20/2017 10:37:49 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Office Software Protection Platform" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/20/2017 10:37:48 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Disc Soft Lite Bus Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/20/2017 10:37:48 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Steam Client Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/20/2017 10:37:48 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/20/2017 10:37:47 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Logitech Gaming Registry Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/20/2017 10:37:47 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "VMware USB Arbitration Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/20/2017 10:37:47 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "VMware Authorization Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/20/2017 10:37:47 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "VMware DHCP Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2017-01-20 20:33:18.377
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-20 20:33:18.376
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-20 20:33:18.373
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-20 20:32:43.209
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-20 20:32:43.207
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-20 20:32:43.204
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-20 20:30:45.966
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-20 20:30:45.965
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-20 20:30:45.963
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-01-20 20:30:38.653
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i7-6700K CPU @ 4.00GHz
Prozentuale Nutzung des RAM: 21%
Installierter physikalischer RAM: 16325.77 MB
Verfügbarer physikalischer RAM: 12892.49 MB
Summe virtueller Speicher: 18757.77 MB
Verfügbarer virtueller Speicher: 14953.98 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:465.27 GB) (Free:112.92 GB) NTFS
Drive d: (Daten) (Fixed) (Total:931.51 GB) (Free:175.53 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: DF8FE53B)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: DF8FE501)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.3 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

cosinus 21.01.2017 16:02
Bitte AVG deinstallieren. Das Teil können wir einfach nicht mehr guten Gewissens empfehlen. => http://www.trojaner-board.de/171261-...zer-daten.html und Antivirensoftware: Schutz für Ihre Dateien, aber auf Kosten Ihrer Privatsphäre? | Emsisoft Blog

Auch andere Freewareanbieter wie Avira, Avast oder Panda springen auf diesen oder ähnlichen Zügen rauf, basteln Junkware in die Setups, arbeiten mit ASK zusammen etc; so was ist bei Sicherheitssoftware einfach inakzeptabel.

Gib Bescheid wenn AVG weg ist; wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen, Infos folgen dann im Abschlussposting. Bitte JETZT nix mehr ohne Absprache installieren!

cosinus 21.01.2017 16:03
Bitte AVG deinstallieren. Das Teil können wir einfach nicht mehr guten Gewissens empfehlen. => http://www.trojaner-board.de/171261-...zer-daten.html und Antivirensoftware: Schutz für Ihre Dateien, aber auf Kosten Ihrer Privatsphäre? | Emsisoft Blog

Auch andere Freewareanbieter wie Avira, Avast oder Panda springen auf diesen oder ähnlichen Zügen rauf, basteln Junkware in die Setups, arbeiten mit ASK zusammen etc; so was ist bei Sicherheitssoftware einfach inakzeptabel.

Gib Bescheid wenn AVG weg ist; wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen, Infos folgen dann im Abschlussposting. Bitte JETZT nix mehr ohne Absprache installieren!

ZaTii 21.01.2017 17:03
AVG ist nun Weg. Was für eine Alternative könnt ihr mir den Empfehlen?

Hat man in den Logs gesehen woher die Adware kommen könnte ?

cosinus 21.01.2017 20:27
Die Analyse kommt doch jetzt. Und es wurde darauf hingewiesen, dass zum Schluss Empfehlungen für AVs kommen.


Zitat:
Last Chaos US version 1.0

cosinus 21.01.2017 20:27
Die Analyse kommt doch jetzt. Und es wurde darauf hingewiesen, dass zum Schluss Empfehlungen für AVs kommen.


Zitat:
Last Chaos US version 1.0


Alle Zeitangaben in WEZ +1. Es ist jetzt 04:57 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131