Hi,
hab heute von einigen Kontakten den gleichen Link geschickt bekommen.
hxxp://goo.gl/r0rn99#jqozy=(skypebenutzername)

wollte diesen Kopieren und eine Statusmeldung machen dass den niemand anklicken soll.
Leider war ich so dumm und hab den mit linksklick erwischt

Dabei öffnete sich eine Seite über Diäten.

Ich vermute aber Stark dass es wieder so ein Virus ist wie vor einem Jahr.

Bis jetzt hat noch niemand was von mir bekommen.

Wie soll ich nun fortfahren?

Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das...

• Bitte arbeite alle Schritte der Reihe nach ab.
• Lies die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem.
• Führe bitte nur Scans durch, zu denen Du von mir aufgefordert wurdest.
• Bitte kein Crossposting (posten in mehreren Foren).
• Installiere oder deinstalliere während der Bereinigung keine Software, außer Du wurdest dazu aufgefordert.
• Speichere alle unsere Tools auf dem Desktop ab. Link: So ladet Ihr unsere Tools richtig
• Poste die Logfiles direkt in Deinen Thread in Code-Tags.
• Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 24 Stunden nichts von mir liest, dann schreibe mir bitte eine PM.

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden.
Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert.
Adware & Co. können wir sehr gut entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Du mein clean bekommst.

Los geht's:

Schritt 1


Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff
Posten in CODE-Tags: So gehts...
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert uns massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

FRST.txt

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:21-02-2016 01
durchgeführt von cletze (Administrator) auf MEINPC (23-02-2016 16:19:21)
Gestartet von C:\Users\cletze\Downloads
Geladene Profile: cletze (Verfügbare Profile: cletze)
Platform: Windows 10 Pro Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Steganos Software GmbH) C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
() C:\Windows\System32\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(EVGA Corp.) C:\Program Files (x86)\EVGA\PrecisionX 16\PrecisionX_x64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\32\WacomDesktopCenter.exe
(CMedia) C:\Program Files\UNi Xonar Audio\Customapp\AsusAudioCenter.exe
() C:\Windows\SysWOW64\HsMgr.exe
() C:\Windows\System\HsMgr64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Steganos Software GmbH) C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe
(Brooks Younce Software) C:\Program Files (x86)\Smart Port Forwarding\SPF.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
() C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\InGameEngine\32bit\RazerIngameEngine.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Razer, Inc.) C:\Users\cletze\AppData\Local\Razer\InGameEngine\cache\RzStats.Manager\RzCefRenderProcess.exe
(Joyent, Inc) C:\Users\cletze\AppData\Roaming\Steganos\OkayFreedom\Proxy\node.exe
(EVGA Corp.) C:\Program Files (x86)\EVGA\PrecisionX 16\PrecisionXServer.exe
(EVGA Corp.) C:\Program Files (x86)\EVGA\PrecisionX 16\PrecisionXServer_x64.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(TeamSpeak Systems GmbH) D:\Program Files (x86)\ts3client_win64.exe
() D:\Program Files\FlyFF_EN\Flyff.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2787264 2016-01-12] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Cmaudio8788] => C:\WINDOWS\syswow64\RunDll32.exe C:\WINDOWS\Syswow64\cmicnfgp.dll,CMICtrlWnd
HKLM\...\Run: [Cmaudio8788GX] => C:\WINDOWS\syswow64\HsMgr.exe [200704 2008-07-11] ()
HKLM\...\Run: [Cmaudio8788GX64] => C:\WINDOWS\system\HsMgr64.exe [282112 2008-07-11] ()
HKLM\...\Run: [FWS_FlawlessWidescreen] => C:\Program Files (x86)\Flawless Widescreen\FlawlessWidescreen.exe [2607104 2014-05-30] (Flawless Widescreen)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [592704 2015-09-29] (Razer Inc.)
HKU\S-1-5-21-1314259541-1698729379-4188840987-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50605696 2016-02-02] (Skype Technologies S.A.)
HKU\S-1-5-21-1314259541-1698729379-4188840987-1001\...\Run: [OKAYFREEDOM_Agent] => C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe [6609832 2015-11-12] (Steganos Software GmbH)
HKU\S-1-5-21-1314259541-1698729379-4188840987-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3639280 2016-01-12] (Electronic Arts)
HKU\S-1-5-21-1314259541-1698729379-4188840987-1001\...\Run: [Smart Port Forwarding] => C:\Program Files (x86)\Smart Port Forwarding\SPF.exe [258048 2008-01-10] (Brooks Younce Software)
HKU\S-1-5-21-1314259541-1698729379-4188840987-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [31744 2015-10-30] (Microsoft Corporation)
Startup: C:\Users\cletze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2016-02-21] ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

AutoConfigURL: [S-1-5-21-1314259541-1698729379-4188840987-1001] => hxxp://127.0.0.1:8445/okayfreedom.pac
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{2d3a7d30-2bbf-446d-ae77-eeb7dc7547b3}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{2d3a7d30-2bbf-446d-ae77-eeb7dc7547b3}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{46ef8481-48f3-406f-a8c9-960d97534150}: [DhcpNameServer] 8.8.8.8
Tcpip\..\Interfaces\{91109df1-684c-4861-9cd0-8382431c84be}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{91109df1-684c-4861-9cd0-8382431c84be}: [DhcpNameServer] 10.0.0.138
ManualProxies: 0hxxp://127.0.0.1:8445/okayfreedom.pac

Internet Explorer:
==================

FireFox:
========
FF ProfilePath: C:\Users\cletze\AppData\Roaming\Mozilla\Firefox\Profiles\l76tv4l7.default
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Extension: OkayFreedom - C:\Users\cletze\AppData\Roaming\Mozilla\Firefox\Profiles\l76tv4l7.default\extensions\{DB981CCA-088E-4731-A4A2-2FE218703C0E}.xpi [2015-09-11]

Chrome: 
=======
CHR Profile: C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-10-20]
CHR Extension: (BetterTTV) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2015-11-18]
CHR Extension: (Google Docs) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-10-20]
CHR Extension: (Google Drive) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-20]
CHR Extension: (Google-Suche) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Google Tabellen) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-10-20]
CHR Extension: (Google Docs Offline) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-18]
CHR Extension: (AdBlock) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-02-16]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-20]
CHR Extension: (Google Mail) - C:\Users\cletze\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-20]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2020056 2016-02-09] (Adobe Systems, Incorporated)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1352736 2016-02-20] ()
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342240 2015-08-17] (Futuremark)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163200 2016-01-12] (NVIDIA Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [3587680 2015-10-08] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-01-12] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6308288 2016-01-12] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4812736 2016-01-12] (NVIDIA Corporation)
R2 OkayFreedom VPN Starter Service; C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe [346552 2015-11-12] (Steganos Software GmbH)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-01-12] (Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [76152 2015-11-27] ()
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2015-11-26] ()
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187048 2015-06-23] ()
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [656664 2014-08-19] (Wacom Technology, Corp.)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [730304 2016-01-11] (Wacom Technology, Corp.)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 cmudaxp; C:\Windows\system32\drivers\cmudaxp.sys [2735616 2015-06-02] (C-Media Inc)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (EZB Systems, Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [193336 2015-10-20] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-01-12] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
R3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [50392 2015-08-13] (Razer Inc)
R2 rzpmgrk; C:\WINDOWS\system32\drivers\rzpmgrk.sys [37184 2015-06-12] (Razer, Inc.)
R2 rzpnk; C:\WINDOWS\system32\drivers\rzpnk.sys [129472 2015-06-27] (Razer, Inc.)
S3 taphss6; C:\Windows\System32\drivers\taphss6.sys [42088 2015-10-12] (Anchorfree Inc.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R3 WinRing0_1_2_0; C:\Program Files (x86)\EVGA\PrecisionX 16\WinRing0\WinRing0x64.sys [14536 2015-10-20] (OpenLibSys.org)
S3 xhunter1; C:\WINDOWS\xhunter1.sys [36904 2016-02-19] (Wellbia.com Co., Ltd.)
S3 B5971947; \??\C:\ProgramData\0006780F_tvn [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-02-23 16:19 - 2016-02-23 16:19 - 00016077 _____ C:\Users\cletze\Downloads\FRST.txt
2016-02-23 16:19 - 2016-02-23 16:19 - 00000000 ____D C:\FRST
2016-02-23 16:18 - 2016-02-23 16:19 - 02371072 _____ (Farbar) C:\Users\cletze\Downloads\FRST64.exe
2016-02-23 15:12 - 2016-02-23 15:12 - 00373398 _____ C:\Users\cletze\Downloads\verlustanzeige zeugnis 3.pdf
2016-02-22 22:28 - 2016-02-22 22:28 - 00003098 _____ C:\Users\cletze\Documents\Eset logs.txt
2016-02-22 20:30 - 2016-02-22 20:30 - 02870984 _____ (ESET) C:\Users\cletze\Downloads\esetsmartinstaller_deu.exe
2016-02-22 20:30 - 2016-02-22 20:30 - 00000000 ____D C:\Program Files (x86)\ESET
2016-02-21 11:00 - 2016-02-22 00:14 - 00000000 ____D C:\Users\cletze\AppData\Local\Deployment
2016-02-21 11:00 - 2016-02-21 11:03 - 00000000 ____D C:\Users\cletze\AppData\Roaming\Curse Advertising
2016-02-21 11:00 - 2016-02-21 11:00 - 00402696 _____ () C:\Users\cletze\Downloads\setup.exe
2016-02-21 11:00 - 2016-02-21 11:00 - 00000318 _____ C:\Users\cletze\Desktop\Curse Client.appref-ms
2016-02-21 11:00 - 2016-02-21 11:00 - 00000000 ____D C:\Users\cletze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse
2016-02-21 10:59 - 2016-02-21 10:59 - 00018773 _____ C:\Users\cletze\Downloads\DraenorTreasures-r20160221004152.zip
2016-02-21 01:03 - 2016-02-21 01:03 - 00000892 _____ C:\Users\Public\Desktop\World of Warcraft.lnk
2016-02-21 01:03 - 2016-02-21 01:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2016-02-18 22:27 - 2016-02-18 22:27 - 27341949 _____ C:\Users\cletze\Downloads\Hive_1_1_Win.zip
2016-02-18 18:26 - 2016-02-19 09:25 - 00036904 _____ (Wellbia.com Co., Ltd.) C:\WINDOWS\xhunter1.sys
2016-02-18 16:35 - 2016-02-18 16:35 - 00390284 _____ C:\WINDOWS\Minidump\021816-16421-01.dmp
2016-02-18 16:35 - 2016-02-18 16:35 - 00000000 ____D C:\WINDOWS\Minidump
2016-02-18 15:29 - 2016-02-18 18:57 - 00000000 ____D C:\Users\cletze\Documents\Black Desert
2016-02-18 14:56 - 2016-02-18 15:03 - 00000000 ____D C:\Users\cletze\AppData\Local\BlackDesertOnlineCBT2
2016-02-18 14:56 - 2016-02-18 14:56 - 00000723 _____ C:\Users\Public\Desktop\Black Desert Online.lnk
2016-02-18 14:56 - 2016-02-18 14:56 - 00000723 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Black Desert Online.lnk
2016-02-18 14:56 - 2016-02-18 14:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Black Desert Online
2016-02-18 14:54 - 2016-02-18 14:55 - 50503912 _____ (Daum Games EU) C:\Users\cletze\Downloads\BlackDesertOnlineSetup_20160216_1001.exe
2016-02-17 13:45 - 2016-01-27 07:01 - 07476064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-02-17 13:45 - 2016-01-27 06:56 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-02-17 13:45 - 2016-01-27 06:55 - 05242496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-02-17 13:45 - 2016-01-27 06:45 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-02-17 13:45 - 2016-01-27 06:45 - 06605544 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-02-17 13:45 - 2016-01-27 06:10 - 22394368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-02-17 13:45 - 2016-01-27 06:05 - 19339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-02-17 13:45 - 2016-01-27 06:05 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-02-17 13:45 - 2016-01-27 06:04 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-02-17 13:45 - 2016-01-27 05:58 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-02-17 13:45 - 2016-01-27 05:55 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-02-17 13:45 - 2016-01-27 05:54 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-02-17 13:45 - 2016-01-27 05:49 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-02-17 13:45 - 2016-01-27 05:48 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-02-17 13:45 - 2016-01-27 05:41 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-02-17 13:45 - 2016-01-27 05:38 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-02-17 13:45 - 2016-01-27 05:37 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-02-17 13:45 - 2016-01-16 07:23 - 08728920 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-02-17 13:45 - 2016-01-16 07:21 - 01750440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2016-02-17 13:45 - 2016-01-16 07:20 - 06971752 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-02-17 13:45 - 2016-01-16 06:45 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-02-17 13:45 - 2016-01-16 06:38 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-02-17 13:45 - 2016-01-16 06:35 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-02-17 13:45 - 2016-01-16 06:31 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-02-17 13:45 - 2016-01-16 06:30 - 01053696 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-02-17 13:45 - 2016-01-16 06:29 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2016-02-17 13:45 - 2016-01-16 06:28 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-02-17 13:45 - 2016-01-16 06:28 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-02-17 13:45 - 2016-01-16 06:24 - 02057216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2016-02-17 13:45 - 2016-01-16 06:21 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-02-17 13:45 - 2016-01-16 06:20 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-02-17 13:45 - 2016-01-16 06:20 - 02597888 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-02-17 13:45 - 2016-01-16 06:20 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-02-17 13:45 - 2016-01-16 06:18 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-02-17 13:45 - 2016-01-16 06:17 - 05503488 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-02-17 13:45 - 2016-01-16 06:16 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-02-17 13:45 - 2016-01-16 06:15 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-02-17 13:45 - 2016-01-16 06:14 - 01946624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-02-17 13:45 - 2016-01-16 06:14 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-02-17 13:45 - 2016-01-05 03:45 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-02-17 13:45 - 2016-01-05 03:42 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2016-02-17 13:45 - 2016-01-05 03:37 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-02-17 13:45 - 2016-01-05 03:37 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-02-17 13:45 - 2016-01-05 03:36 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-02-17 13:45 - 2016-01-05 03:33 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-02-17 13:45 - 2016-01-05 03:33 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-02-17 13:45 - 2016-01-05 02:43 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-02-17 13:45 - 2016-01-05 02:39 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-02-17 13:45 - 2016-01-05 02:30 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-02-17 13:45 - 2015-12-07 05:57 - 00973664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-02-17 13:45 - 2015-12-07 05:55 - 01281376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-02-17 13:45 - 2015-12-07 05:48 - 01155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-02-17 13:45 - 2015-12-07 05:48 - 00823264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-02-17 13:45 - 2015-12-07 05:48 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-02-17 13:45 - 2015-12-07 05:47 - 00898184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-02-17 13:45 - 2015-12-07 05:46 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-02-17 13:45 - 2015-12-07 05:10 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2016-02-17 13:45 - 2015-12-07 04:45 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-02-17 13:45 - 2015-12-07 04:41 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-02-17 13:45 - 2015-12-07 04:40 - 01995776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-02-17 13:45 - 2015-12-07 04:40 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-02-17 13:45 - 2015-12-01 08:12 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-02-17 13:45 - 2015-11-24 09:49 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2016-02-17 13:45 - 2015-11-24 08:57 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2016-02-17 13:45 - 2015-11-24 08:29 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-02-17 13:45 - 2015-11-22 11:47 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-02-17 13:45 - 2015-11-22 11:41 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-02-17 13:45 - 2015-11-22 11:24 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-02-17 13:45 - 2015-11-22 11:14 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-02-17 13:45 - 2015-11-22 10:54 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2016-02-17 13:45 - 2015-11-22 10:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2016-02-17 13:45 - 2015-11-22 10:41 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-02-17 13:45 - 2015-11-22 10:39 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-02-17 13:45 - 2015-11-22 10:38 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2016-02-17 13:45 - 2015-11-22 10:38 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-02-17 13:45 - 2015-11-22 10:34 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2016-02-17 13:45 - 2015-11-22 10:27 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-02-17 13:45 - 2015-11-22 10:26 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2016-02-17 13:45 - 2015-11-22 10:20 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2016-02-17 13:45 - 2015-11-22 10:17 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2016-02-17 13:45 - 2015-11-13 07:43 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2016-02-17 13:45 - 2015-11-13 06:39 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-02-17 13:45 - 2015-11-13 06:19 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-02-17 13:44 - 2016-01-29 07:57 - 04502352 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-02-17 13:44 - 2016-01-29 07:33 - 04064320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-02-17 13:44 - 2016-01-27 07:15 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-02-17 13:44 - 2016-01-27 07:15 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-02-17 13:44 - 2016-01-27 07:01 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-02-17 13:44 - 2016-01-27 07:01 - 01819720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-02-17 13:44 - 2016-01-27 06:59 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-02-17 13:44 - 2016-01-27 06:57 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-02-17 13:44 - 2016-01-27 06:57 - 01824264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-02-17 13:44 - 2016-01-27 06:57 - 00820704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-02-17 13:44 - 2016-01-27 06:55 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2016-02-17 13:44 - 2016-01-27 06:54 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-02-17 13:44 - 2016-01-27 06:46 - 02606824 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-02-17 13:44 - 2016-01-27 06:46 - 01270072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-02-17 13:44 - 2016-01-27 06:44 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-02-17 13:44 - 2016-01-27 06:44 - 00085320 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2016-02-17 13:44 - 2016-01-27 06:43 - 00359776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-02-17 13:44 - 2016-01-27 06:37 - 01998176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-02-17 13:44 - 2016-01-27 06:37 - 00576352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-02-17 13:44 - 2016-01-27 06:21 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
2016-02-17 13:44 - 2016-01-27 06:15 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll
2016-02-17 13:44 - 2016-01-27 06:13 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-02-17 13:44 - 2016-01-27 06:12 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-02-17 13:44 - 2016-01-27 06:11 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
2016-02-17 13:44 - 2016-01-27 06:10 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2016-02-17 13:44 - 2016-01-27 06:08 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-17 13:44 - 2016-01-27 06:08 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll
2016-02-17 13:44 - 2016-01-27 06:07 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll
2016-02-17 13:44 - 2016-01-27 06:05 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-02-17 13:44 - 2016-01-27 06:05 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-02-17 13:44 - 2016-01-27 06:04 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2016-02-17 13:44 - 2016-01-27 06:03 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-02-17 13:44 - 2016-01-27 06:02 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2016-02-17 13:44 - 2016-01-27 06:01 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-02-17 13:44 - 2016-01-27 05:59 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll
2016-02-17 13:44 - 2016-01-27 05:57 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-02-17 13:44 - 2016-01-27 05:55 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-02-17 13:44 - 2016-01-27 05:52 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-02-17 13:44 - 2016-01-27 05:50 - 02230784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-02-17 13:44 - 2016-01-27 05:50 - 01504768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-02-17 13:44 - 2016-01-27 05:50 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-02-17 13:44 - 2016-01-27 05:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll
2016-02-17 13:44 - 2016-01-27 05:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-02-17 13:44 - 2016-01-27 05:39 - 02275328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-02-17 13:44 - 2016-01-27 05:38 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-02-17 13:44 - 2016-01-27 05:36 - 02757120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-02-17 13:44 - 2016-01-27 05:32 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-02-17 13:44 - 2016-01-27 05:31 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2016-02-17 13:44 - 2016-01-16 07:37 - 00202472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2016-02-17 13:44 - 2016-01-16 07:36 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-02-17 13:44 - 2016-01-16 07:36 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-02-17 13:44 - 2016-01-16 07:34 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-02-17 13:44 - 2016-01-16 07:24 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-02-17 13:44 - 2016-01-16 07:23 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-02-17 13:44 - 2016-01-16 07:23 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-02-17 13:44 - 2016-01-16 07:23 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-02-17 13:44 - 2016-01-16 07:23 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-02-17 13:44 - 2016-01-16 07:23 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-02-17 13:44 - 2016-01-16 07:20 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-02-17 13:44 - 2016-01-16 07:20 - 00431240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2016-02-17 13:44 - 2016-01-16 07:20 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2016-02-17 13:44 - 2016-01-16 07:19 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-02-17 13:44 - 2016-01-16 07:19 - 00405568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-02-17 13:44 - 2016-01-16 07:12 - 01415200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-02-17 13:44 - 2016-01-16 07:09 - 01089880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2016-02-17 13:44 - 2016-01-16 07:08 - 01174008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-02-17 13:44 - 2016-01-16 07:08 - 00440152 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2016-02-17 13:44 - 2016-01-16 06:46 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2016-02-17 13:44 - 2016-01-16 06:44 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-02-17 13:44 - 2016-01-16 06:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll
2016-02-17 13:44 - 2016-01-16 06:44 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2016-02-17 13:44 - 2016-01-16 06:43 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttpcom.dll
2016-02-17 13:44 - 2016-01-16 06:42 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-02-17 13:44 - 2016-01-16 06:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscoreext.dll
2016-02-17 13:44 - 2016-01-16 06:41 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2016-02-17 13:44 - 2016-01-16 06:40 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll
2016-02-17 13:44 - 2016-01-16 06:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2016-02-17 13:44 - 2016-01-16 06:40 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasautou.exe
2016-02-17 13:44 - 2016-01-16 06:39 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\FilterDS.dll
2016-02-17 13:44 - 2016-01-16 06:38 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-02-17 13:44 - 2016-01-16 06:38 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimCfg.dll
2016-02-17 13:44 - 2016-01-16 06:38 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll
2016-02-17 13:44 - 2016-01-16 06:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-02-17 13:44 - 2016-01-16 06:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-02-17 13:44 - 2016-01-16 06:37 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-02-17 13:44 - 2016-01-16 06:37 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2016-02-17 13:44 - 2016-01-16 06:36 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-02-17 13:44 - 2016-01-16 06:36 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll
2016-02-17 13:44 - 2016-01-16 06:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-02-17 13:44 - 2016-01-16 06:36 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimAuth.dll
2016-02-17 13:44 - 2016-01-16 06:36 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll
2016-02-17 13:44 - 2016-01-16 06:35 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-02-17 13:44 - 2016-01-16 06:35 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasadhlp.dll
2016-02-17 13:44 - 2016-01-16 06:34 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2016-02-17 13:44 - 2016-01-16 06:34 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2016-02-17 13:44 - 2016-01-16 06:34 - 00477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2016-02-17 13:44 - 2016-01-16 06:34 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-02-17 13:44 - 2016-01-16 06:34 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttpcom.dll
2016-02-17 13:44 - 2016-01-16 06:33 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2016-02-17 13:44 - 2016-01-16 06:33 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2016-02-17 13:44 - 2016-01-16 06:33 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-02-17 13:44 - 2016-01-16 06:32 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2016-02-17 13:44 - 2016-01-16 06:32 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe
2016-02-17 13:44 - 2016-01-16 06:31 - 00851456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-02-17 13:44 - 2016-01-16 06:31 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-02-17 13:44 - 2016-01-16 06:31 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-02-17 13:44 - 2016-01-16 06:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasautou.exe
2016-02-17 13:44 - 2016-01-16 06:30 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-02-17 13:44 - 2016-01-16 06:30 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-02-17 13:44 - 2016-01-16 06:30 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimCfg.dll
2016-02-17 13:44 - 2016-01-16 06:30 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll
2016-02-17 13:44 - 2016-01-16 06:29 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-02-17 13:44 - 2016-01-16 06:28 - 00884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2016-02-17 13:44 - 2016-01-16 06:28 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimAuth.dll
2016-02-17 13:44 - 2016-01-16 06:27 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-02-17 13:44 - 2016-01-16 06:26 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2016-02-17 13:44 - 2016-01-16 06:26 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-02-17 13:44 - 2016-01-16 06:26 - 00260608 _____ C:\WINDOWS\system32\MTFServer.dll
2016-02-17 13:44 - 2016-01-16 06:26 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-02-17 13:44 - 2016-01-16 06:25 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2016-02-17 13:44 - 2016-01-16 06:25 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-02-17 13:44 - 2016-01-16 06:25 - 00235008 _____ C:\WINDOWS\system32\MTF.dll
2016-02-17 13:44 - 2016-01-16 06:24 - 00613888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2016-02-17 13:44 - 2016-01-16 06:24 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-02-17 13:44 - 2016-01-16 06:24 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2016-02-17 13:44 - 2016-01-16 06:23 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-02-17 13:44 - 2016-01-16 06:23 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-02-17 13:44 - 2016-01-16 06:20 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2016-02-17 13:44 - 2016-01-16 06:19 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2016-02-17 13:44 - 2016-01-16 06:19 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2016-02-17 13:44 - 2016-01-16 06:19 - 00162816 _____ C:\WINDOWS\SysWOW64\MTF.dll
2016-02-17 13:44 - 2016-01-16 06:19 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-02-17 13:44 - 2016-01-16 06:16 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2016-02-17 13:44 - 2016-01-16 06:11 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2016-02-17 13:44 - 2016-01-05 03:51 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-02-17 13:44 - 2016-01-05 03:51 - 01141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-02-17 13:44 - 2016-01-05 03:50 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2016-02-17 13:44 - 2016-01-05 03:48 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2016-02-17 13:44 - 2016-01-05 03:37 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-02-17 13:44 - 2016-01-05 03:37 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-02-17 13:44 - 2016-01-05 03:37 - 00234504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll
2016-02-17 13:44 - 2016-01-05 03:33 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-02-17 13:44 - 2016-01-05 03:33 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll
2016-02-17 13:44 - 2016-01-05 03:33 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-02-17 13:44 - 2016-01-05 03:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-02-17 13:44 - 2016-01-05 03:27 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-02-17 13:44 - 2016-01-05 03:24 - 00796352 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-02-17 13:44 - 2016-01-05 03:23 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-02-17 13:44 - 2016-01-05 03:23 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-02-17 13:44 - 2016-01-05 03:23 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2016-02-17 13:44 - 2016-01-05 03:23 - 00119320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL
2016-02-17 13:44 - 2016-01-05 03:21 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-02-17 13:44 - 2016-01-05 03:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2016-02-17 13:44 - 2016-01-05 03:16 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL
2016-02-17 13:44 - 2016-01-05 02:57 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll
2016-02-17 13:44 - 2016-01-05 02:57 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll
2016-02-17 13:44 - 2016-01-05 02:56 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2016-02-17 13:44 - 2016-01-05 02:54 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-02-17 13:44 - 2016-01-05 02:53 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2016-02-17 13:44 - 2016-01-05 02:52 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-02-17 13:44 - 2016-01-05 02:51 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-02-17 13:44 - 2016-01-05 02:51 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-02-17 13:44 - 2016-01-05 02:50 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-02-17 13:44 - 2016-01-05 02:50 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-02-17 13:44 - 2016-01-05 02:49 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2016-02-17 13:44 - 2016-01-05 02:49 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2016-02-17 13:44 - 2016-01-05 02:49 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-02-17 13:44 - 2016-01-05 02:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll
2016-02-17 13:44 - 2016-01-05 02:48 - 01009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL
2016-02-17 13:44 - 2016-01-05 02:48 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2016-02-17 13:44 - 2016-01-05 02:48 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll
2016-02-17 13:44 - 2016-01-05 02:47 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-02-17 13:44 - 2016-01-05 02:47 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-02-17 13:44 - 2016-01-05 02:47 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2016-02-17 13:44 - 2016-01-05 02:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-02-17 13:44 - 2016-01-05 02:45 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-02-17 13:44 - 2016-01-05 02:44 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2016-02-17 13:44 - 2016-01-05 02:43 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-02-17 13:44 - 2016-01-05 02:43 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-02-17 13:44 - 2016-01-05 02:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-02-17 13:44 - 2016-01-05 02:41 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2016-02-17 13:44 - 2016-01-05 02:41 - 00558592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-02-17 13:44 - 2016-01-05 02:40 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL
2016-02-17 13:44 - 2016-01-05 02:40 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll
2016-02-17 13:44 - 2016-01-05 02:39 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-02-17 13:44 - 2016-01-05 02:39 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-02-17 13:44 - 2016-01-05 02:39 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2016-02-17 13:44 - 2016-01-05 02:38 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-02-17 13:44 - 2016-01-05 02:36 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2016-02-17 13:44 - 2016-01-05 02:36 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-02-17 13:44 - 2015-12-07 05:49 - 00412512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2016-02-17 13:44 - 2015-12-07 05:48 - 01092456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-02-17 13:44 - 2015-12-07 05:48 - 01065080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-02-17 13:44 - 2015-12-07 05:48 - 01020096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-02-17 13:44 - 2015-12-07 05:48 - 00983464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2016-02-17 13:44 - 2015-12-07 05:48 - 00884256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-02-17 13:44 - 2015-12-07 05:48 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-02-17 13:44 - 2015-12-07 05:48 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2016-02-17 13:44 - 2015-12-07 05:48 - 00526856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2016-02-17 13:44 - 2015-12-07 05:48 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-02-17 13:44 - 2015-12-07 05:48 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-02-17 13:44 - 2015-12-07 05:48 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2016-02-17 13:44 - 2015-12-07 05:48 - 00450904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-02-17 13:44 - 2015-12-07 05:48 - 00337840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2016-02-17 13:44 - 2015-12-07 05:48 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2016-02-17 13:44 - 2015-12-07 05:48 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-02-17 13:44 - 2015-12-07 05:48 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-02-17 13:44 - 2015-12-07 05:47 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-02-17 13:44 - 2015-12-07 05:47 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-02-17 13:44 - 2015-12-07 05:45 - 00264544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-02-17 13:44 - 2015-12-07 05:15 - 01035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll
2016-02-17 13:44 - 2015-12-07 05:09 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2016-02-17 13:44 - 2015-12-07 05:09 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2016-02-17 13:44 - 2015-12-07 05:07 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2016-02-17 13:44 - 2015-12-07 05:06 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2016-02-17 13:44 - 2015-12-07 05:06 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2016-02-17 13:44 - 2015-12-07 05:06 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-02-17 13:44 - 2015-12-07 05:05 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-02-17 13:44 - 2015-12-07 05:04 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-02-17 13:44 - 2015-12-07 05:04 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2016-02-17 13:44 - 2015-12-07 05:02 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-02-17 13:44 - 2015-12-07 05:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-02-17 13:44 - 2015-12-07 05:01 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-02-17 13:44 - 2015-12-07 05:00 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2016-02-17 13:44 - 2015-12-07 05:00 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2016-02-17 13:44 - 2015-12-07 05:00 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-02-17 13:44 - 2015-12-07 04:59 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-02-17 13:44 - 2015-12-07 04:59 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-02-17 13:44 - 2015-12-07 04:59 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-02-17 13:44 - 2015-12-07 04:59 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2016-02-17 13:44 - 2015-12-07 04:58 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-02-17 13:44 - 2015-12-07 04:57 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-02-17 13:44 - 2015-12-07 04:57 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2016-02-17 13:44 - 2015-12-07 04:56 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-02-17 13:44 - 2015-12-07 04:56 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-02-17 13:44 - 2015-12-07 04:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-02-17 13:44 - 2015-12-07 04:53 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2016-02-17 13:44 - 2015-12-07 04:51 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-02-17 13:44 - 2015-12-07 04:50 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-02-17 13:44 - 2015-12-07 04:49 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-02-17 13:44 - 2015-12-07 04:45 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-02-17 13:44 - 2015-12-07 04:45 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-02-17 13:44 - 2015-12-07 04:43 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2016-02-17 13:44 - 2015-12-07 04:39 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-02-17 13:44 - 2015-12-07 04:38 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2016-02-17 13:44 - 2015-12-07 04:33 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-02-17 13:44 - 2015-12-07 04:32 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2016-02-17 13:44 - 2015-11-24 11:26 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-02-17 13:44 - 2015-11-24 11:01 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2016-02-17 13:44 - 2015-11-24 10:53 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-02-17 13:44 - 2015-11-24 10:45 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2016-02-17 13:44 - 2015-11-24 10:37 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2016-02-17 13:44 - 2015-11-24 10:26 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-02-17 13:44 - 2015-11-24 10:19 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2016-02-17 13:44 - 2015-11-24 10:12 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2016-02-17 13:44 - 2015-11-24 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-02-17 13:44 - 2015-11-24 09:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2016-02-17 13:44 - 2015-11-24 09:52 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-02-17 13:44 - 2015-11-24 09:14 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2016-02-17 13:44 - 2015-11-24 08:59 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-02-17 13:44 - 2015-11-24 08:04 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-02-17 13:44 - 2015-11-22 11:41 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-02-17 13:44 - 2015-11-22 11:34 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2016-02-17 13:44 - 2015-11-22 11:33 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2016-02-17 13:44 - 2015-11-22 11:33 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2016-02-17 13:44 - 2015-11-22 11:33 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2016-02-17 13:44 - 2015-11-22 11:30 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-02-17 13:44 - 2015-11-22 11:25 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2016-02-17 13:44 - 2015-11-22 10:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2016-02-17 13:44 - 2015-11-22 10:54 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2016-02-17 13:44 - 2015-11-22 10:54 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2016-02-17 13:44 - 2015-11-22 10:51 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2016-02-17 13:44 - 2015-11-22 10:51 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-02-17 13:44 - 2015-11-22 10:51 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2016-02-17 13:44 - 2015-11-22 10:50 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2016-02-17 13:44 - 2015-11-22 10:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2016-02-17 13:44 - 2015-11-22 10:49 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2016-02-17 13:44 - 2015-11-22 10:45 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2016-02-17 13:44 - 2015-11-22 10:45 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2016-02-17 13:44 - 2015-11-22 10:43 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2016-02-17 13:44 - 2015-11-22 10:43 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-02-17 13:44 - 2015-11-22 10:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2016-02-17 13:44 - 2015-11-22 10:42 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2016-02-17 13:44 - 2015-11-22 10:42 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2016-02-17 13:44 - 2015-11-22 10:41 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2016-02-17 13:44 - 2015-11-22 10:40 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-02-17 13:44 - 2015-11-22 10:40 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2016-02-17 13:44 - 2015-11-22 10:39 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-02-17 13:44 - 2015-11-22 10:39 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-02-17 13:44 - 2015-11-22 10:39 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-02-17 13:44 - 2015-11-22 10:39 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-02-17 13:44 - 2015-11-22 10:39 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2016-02-17 13:44 - 2015-11-22 10:39 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-02-17 13:44 - 2015-11-22 10:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2016-02-17 13:44 - 2015-11-22 10:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2016-02-17 13:44 - 2015-11-22 10:37 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2016-02-17 13:44 - 2015-11-22 10:37 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-02-17 13:44 - 2015-11-22 10:36 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2016-02-17 13:44 - 2015-11-22 10:32 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2016-02-17 13:44 - 2015-11-22 10:31 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2016-02-17 13:44 - 2015-11-22 10:31 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-02-17 13:44 - 2015-11-22 10:29 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-02-17 13:44 - 2015-11-22 10:28 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2016-02-17 13:44 - 2015-11-22 10:28 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2016-02-17 13:44 - 2015-11-22 10:28 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2016-02-17 13:44 - 2015-11-22 10:28 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2016-02-17 13:44 - 2015-11-22 10:28 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-02-17 13:44 - 2015-11-22 10:28 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2016-02-17 13:44 - 2015-11-22 10:27 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-02-17 13:44 - 2015-11-22 10:27 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-02-17 13:44 - 2015-11-22 10:27 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-02-17 13:44 - 2015-11-22 10:26 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2016-02-17 13:44 - 2015-11-22 10:26 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2016-02-17 13:44 - 2015-11-22 10:26 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-02-17 13:44 - 2015-11-22 10:18 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2016-02-17 13:44 - 2015-11-22 10:18 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2016-02-17 13:44 - 2015-11-22 10:11 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2016-02-17 13:44 - 2015-11-21 06:44 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2016-02-17 13:44 - 2015-11-21 06:29 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-02-17 13:44 - 2015-11-21 06:07 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2016-02-17 13:44 - 2015-11-13 07:55 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2016-02-17 13:44 - 2015-11-13 07:51 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2016-02-17 13:44 - 2015-11-13 07:51 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2016-02-17 13:44 - 2015-11-13 07:51 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2016-02-17 13:44 - 2015-11-13 07:43 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2016-02-17 13:44 - 2015-11-13 07:43 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2016-02-17 13:44 - 2015-11-13 07:42 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2016-02-17 13:44 - 2015-11-13 07:42 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2016-02-17 13:44 - 2015-11-13 07:33 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2016-02-17 13:44 - 2015-11-13 07:33 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2016-02-17 13:44 - 2015-11-13 07:33 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-02-17 13:44 - 2015-11-13 07:32 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2016-02-17 13:44 - 2015-11-13 07:21 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2016-02-17 13:44 - 2015-11-13 07:21 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2016-02-17 13:44 - 2015-11-13 07:21 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2016-02-17 13:44 - 2015-11-13 07:21 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2016-02-17 13:44 - 2015-11-13 07:09 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2016-02-17 13:44 - 2015-11-13 06:59 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-02-17 13:44 - 2015-11-13 06:58 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2016-02-17 13:44 - 2015-11-13 06:57 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-02-17 13:44 - 2015-11-13 06:55 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-02-17 13:44 - 2015-11-13 06:53 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-02-17 13:44 - 2015-11-13 06:49 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-02-17 13:44 - 2015-11-13 06:33 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-02-17 13:44 - 2015-11-13 06:30 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-02-17 13:44 - 2015-11-13 06:30 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-02-17 13:44 - 2015-11-13 06:27 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-02-17 13:44 - 2015-11-13 06:23 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-02-17 13:44 - 2015-11-05 13:05 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2016-02-17 13:44 - 2015-11-05 11:40 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-02-17 13:44 - 2015-11-05 11:25 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2016-02-17 13:44 - 2015-11-05 11:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2016-02-17 13:44 - 2015-11-05 11:00 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-02-17 13:44 - 2015-11-05 10:41 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-02-17 13:44 - 2015-11-05 10:10 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-02-17 13:44 - 2015-11-05 10:02 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2016-02-17 13:44 - 2015-11-05 09:55 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2016-02-17 13:44 - 2015-11-05 09:15 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-02-17 13:43 - 2015-12-07 05:15 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2016-02-17 13:43 - 2015-12-07 05:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2016-02-17 13:43 - 2015-12-07 05:07 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2016-02-17 13:43 - 2015-12-07 05:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe
2016-02-17 13:43 - 2015-12-07 05:01 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe
2016-02-17 13:43 - 2015-11-24 10:54 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2016-02-17 13:43 - 2015-11-22 11:00 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-02-17 13:43 - 2015-11-22 11:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2016-02-17 13:43 - 2015-11-22 10:57 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2016-02-17 13:43 - 2015-11-22 10:57 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2016-02-17 13:43 - 2015-11-22 10:57 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2016-02-17 13:43 - 2015-11-22 10:57 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2016-02-17 13:43 - 2015-11-22 10:56 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-02-17 13:43 - 2015-11-22 10:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-02-17 13:43 - 2015-11-22 10:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2016-02-17 13:43 - 2015-11-22 10:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2016-02-17 13:43 - 2015-11-22 10:55 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2016-02-17 13:43 - 2015-11-22 10:54 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2016-02-17 13:43 - 2015-11-22 10:54 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2016-02-17 13:43 - 2015-11-22 10:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-02-17 13:43 - 2015-11-22 10:54 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2016-02-17 13:43 - 2015-11-22 10:54 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2016-02-17 13:43 - 2015-11-22 10:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2016-02-17 13:43 - 2015-11-22 10:52 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2016-02-17 13:43 - 2015-11-22 10:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-02-17 13:43 - 2015-11-22 10:51 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2016-02-17 13:43 - 2015-11-22 10:48 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2016-02-17 13:43 - 2015-11-22 10:45 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2016-02-17 13:43 - 2015-11-22 10:45 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2016-02-17 13:43 - 2015-11-22 10:45 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2016-02-17 13:43 - 2015-11-22 10:45 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2016-02-17 13:43 - 2015-11-22 10:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2016-02-17 13:43 - 2015-11-22 10:44 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-02-17 13:43 - 2015-11-22 10:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-02-17 13:43 - 2015-11-22 10:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2016-02-17 13:43 - 2015-11-22 10:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2016-02-17 13:43 - 2015-11-22 10:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2016-02-17 13:43 - 2015-11-22 10:34 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2016-02-17 13:43 - 2015-11-22 10:34 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2016-02-17 13:43 - 2015-11-22 10:33 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2016-02-17 13:43 - 2015-11-22 10:24 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2016-02-17 13:43 - 2015-11-22 10:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2016-02-17 13:43 - 2015-11-13 07:07 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-02-17 13:43 - 2015-11-13 07:06 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2016-02-17 13:43 - 2015-11-13 07:05 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2016-02-17 13:43 - 2015-11-13 07:05 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2016-02-17 13:43 - 2015-11-13 07:05 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2016-02-17 13:43 - 2015-11-13 07:05 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2016-02-17 13:43 - 2015-11-13 07:04 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-02-17 13:43 - 2015-11-13 07:04 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-02-17 13:43 - 2015-11-13 07:04 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2016-02-17 13:43 - 2015-11-13 07:03 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2016-02-17 13:43 - 2015-11-13 07:00 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2016-02-17 13:43 - 2015-11-13 06:56 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2016-02-17 13:43 - 2015-11-13 06:40 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-02-17 13:43 - 2015-11-13 06:40 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2016-02-17 13:43 - 2015-11-13 06:34 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2016-02-17 13:43 - 2015-11-05 11:08 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2016-02-17 13:43 - 2015-11-05 11:04 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-02-17 13:43 - 2015-11-05 10:44 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-02-17 13:43 - 2015-11-05 10:03 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2016-02-17 13:43 - 2015-11-05 09:59 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-02-17 13:43 - 2015-11-05 09:42 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-02-16 18:42 - 2016-02-16 18:42 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-02-14 16:32 - 2016-02-14 16:32 - 02716160 _____ C:\Users\cletze\Downloads\fXgqhsKxwu.exe
2016-02-14 16:32 - 2016-02-14 16:32 - 02716160 _____ C:\Users\cletze\Desktop\fXgqhsKxwu.exe
2016-02-14 01:10 - 2016-02-14 01:10 - 00000000 ____D C:\Users\cletze\AppData\Local\ActiveSync
2016-02-14 01:08 - 2016-02-14 01:08 - 00000020 ___SH C:\Users\cletze\ntuser.ini
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-02-14 01:07 - 2016-02-14 01:07 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-02-14 01:06 - 2016-02-20 12:50 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-02-14 01:06 - 2016-02-14 01:06 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-02-14 01:05 - 2016-02-14 01:05 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-02-14 01:04 - 2016-02-22 23:17 - 00000000 ____D C:\Users\cletze
2016-02-14 01:04 - 2016-02-14 01:04 - 00000000 _SHDL C:\Users\cletze\Vorlagen
2016-02-14 01:04 - 2016-02-14 01:04 - 00000000 _SHDL C:\Users\cletze\Startmenü
2016-02-14 01:04 - 2016-02-14 01:04 - 00000000 _SHDL C:\Users\cletze\Netzwerkumgebung
2016-02-14 01:04 - 2016-02-14 01:04 - 00000000 _SHDL C:\Users\cletze\Lokale Einstellungen
2016-02-14 01:04 - 2016-02-14 01:04 - 00000000 _SHDL C:\Users\cletze\Eigene Dateien
2016-02-14 01:04 - 2016-02-14 01:04 - 00000000 _SHDL C:\Users\cletze\Druckumgebung
2016-02-14 01:04 - 2016-02-14 01:04 - 00000000 _SHDL C:\Users\cletze\Documents\Eigene Videos
2016-02-14 01:04 - 2016-02-14 01:04 - 00000000 _SHDL C:\Users\cletze\Documents\Eigene Musik
2016-02-14 01:04 - 2016-02-14 01:04 - 00000000 _SHDL C:\Users\cletze\Documents\Eigene Bilder
2016-02-14 01:04 - 2016-02-14 01:04 - 00000000 _SHDL C:\Users\cletze\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-14 01:04 - 2016-02-14 01:04 - 00000000 _SHDL C:\Users\cletze\AppData\Local\Verlauf
2016-02-14 01:04 - 2016-02-14 01:04 - 00000000 _SHDL C:\Users\cletze\AppData\Local\Anwendungsdaten
2016-02-14 01:04 - 2016-02-14 01:04 - 00000000 _SHDL C:\Users\cletze\Anwendungsdaten
2016-02-14 01:04 - 2016-02-14 01:04 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2016-02-14 01:04 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2016-02-14 01:03 - 2016-02-20 12:50 - 00000000 ____D C:\ProgramData\NVIDIA
2016-02-14 01:03 - 2016-02-14 01:04 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-02-14 01:03 - 2016-02-14 01:04 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-02-14 01:03 - 2016-02-14 01:04 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-02-14 01:03 - 2016-02-14 01:03 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-02-14 01:03 - 2016-02-14 01:03 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_bcmwlhigh664_01009.Wdf
2016-02-14 01:03 - 2016-02-14 01:03 - 00000000 ____D C:\Program Files\Common Files\logishrd
2016-02-14 01:03 - 2015-12-16 15:54 - 06359672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2016-02-14 01:03 - 2015-12-16 15:54 - 02985264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2016-02-14 01:03 - 2015-12-16 15:54 - 02554488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2016-02-14 01:03 - 2015-12-16 15:54 - 01256240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2016-02-14 01:03 - 2015-12-16 15:54 - 00523384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2016-02-14 01:03 - 2015-12-16 15:54 - 00385328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2016-02-14 01:03 - 2015-12-16 15:54 - 00075056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2016-02-14 01:03 - 2015-12-16 15:54 - 00062768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2016-02-14 01:03 - 2015-12-16 15:49 - 06090019 _____ C:\WINDOWS\system32\nvcoproc.bin
2016-02-14 01:02 - 2016-02-18 13:34 - 00189368 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-02-14 01:00 - 2016-02-14 01:00 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-02-14 01:00 - 2016-02-14 01:00 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2016-02-14 01:00 - 2016-02-14 01:00 - 00000000 ____D C:\Windows.old
2016-02-14 01:00 - 2016-02-14 01:00 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-02-14 01:00 - 2016-02-14 01:00 - 00000000 ____D C:\Program Files\MSBuild
2016-02-14 01:00 - 2016-02-14 01:00 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-02-14 01:00 - 2016-02-14 01:00 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-02-14 00:59 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2016-02-14 00:59 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-02-14 00:59 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2016-02-14 00:59 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-02-14 00:59 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2016-02-14 00:59 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-02-14 00:20 - 2016-02-14 00:54 - 00000000 ___HD C:\$WINDOWS.~BT
2016-02-13 23:59 - 2016-02-13 23:59 - 18446672 _____ (Microsoft Corporation) C:\Users\cletze\Downloads\MediaCreationTool (1).exe
2016-02-13 23:59 - 2016-02-13 23:59 - 18446672 _____ (Microsoft Corporation) C:\Users\cletze\Desktop\MediaCreationTool (1).exe
2016-02-13 23:59 - 2016-02-13 23:59 - 00000000 ___HD C:\$Windows.~WS
2016-02-13 23:53 - 2016-02-13 23:53 - 02077392 _____ (Microsoft Corporation) C:\Users\cletze\Downloads\IE11-Windows6.1.exe
2016-02-13 21:22 - 2016-02-14 01:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-02-13 21:22 - 2016-02-13 21:22 - 00001183 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-02-13 21:21 - 2016-02-13 21:22 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-02-13 21:21 - 2016-02-13 21:21 - 22908888 _____ (Malwarebytes ) C:\Users\cletze\Downloads\mbam-setup-2.2.0.1024.exe
2016-02-13 21:21 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-02-13 21:21 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-02-13 21:21 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-02-13 20:37 - 2016-02-13 20:36 - 00067310 _____ C:\Users\cletze\Desktop\bluescreenview.zip
2016-02-13 20:36 - 2016-02-13 20:36 - 00067310 _____ C:\Users\cletze\Downloads\bluescreenview.zip
2016-02-13 19:47 - 2016-02-13 19:47 - 08022368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.bak
2016-02-13 19:47 - 2016-02-13 19:47 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload2.efi
2016-02-13 19:47 - 2016-02-13 19:47 - 01123400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.bak
2016-02-13 19:45 - 2016-02-13 19:48 - 45959784 _____ (Microsoft Corporation) C:\Users\cletze\Downloads\Nicht bestätigt 684061.crdownload
2016-02-13 19:15 - 2016-02-14 01:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO
2016-02-13 19:15 - 2016-02-13 19:15 - 04395480 _____ (EZB Systems, Inc. ) C:\Users\cletze\Downloads\uiso965DE_pe.exe
2016-02-13 19:15 - 2016-02-13 19:15 - 00000000 ____D C:\Users\cletze\Documents\My ISO Files
2016-02-13 19:15 - 2016-02-13 19:15 - 00000000 ____D C:\Program Files (x86)\UltraISO
2016-02-13 19:11 - 2016-02-13 19:12 - 00000000 ____D C:\Users\cletze\Desktop\Neuer Ordner (4)
2016-02-13 17:04 - 2016-02-13 17:25 - 3276931072 _____ C:\Users\cletze\Downloads\Windows64Pro.iso
2016-02-13 17:01 - 2016-02-14 01:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinCDEmu
2016-02-13 17:01 - 2016-02-13 17:01 - 00000000 ____D C:\Program Files (x86)\WinCDEmu
2016-02-13 17:00 - 2016-02-13 17:00 - 01697808 _____ (Sysprogs OU) C:\Users\cletze\Downloads\WinCDEmu-4.1.exe
2016-02-13 16:57 - 2016-02-13 16:57 - 47400128 _____ (Microsoft Corporation) C:\Users\cletze\Downloads\NetFx64.exe
2016-02-13 16:56 - 2016-02-13 16:56 - 02941840 _____ (Microsoft Corporation) C:\Users\cletze\Downloads\Windows7-USB-DVD-Download-Tool-Installer-de-DE.exe
2016-02-13 16:50 - 2016-02-13 16:50 - 00000000 ____D C:\Users\cletze\Desktop\mukke von stick
2016-02-13 16:08 - 2016-02-13 16:09 - 242743296 _____ (Microsoft Corporation) C:\Users\cletze\Downloads\dotnetfx35.exe
2016-02-13 16:06 - 2016-02-14 01:08 - 00000000 ____D C:\Users\cletze\Desktop\Neuer Ordner (3)
2016-02-13 15:07 - 2016-02-14 01:05 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett
2016-02-13 15:06 - 2016-02-13 15:07 - 82101304 _____ C:\Users\cletze\Downloads\WacomTablet_6.3.15-3.exe
2016-02-13 14:31 - 2016-02-13 14:32 - 18446672 _____ (Microsoft Corporation) C:\Users\cletze\Downloads\MediaCreationTool.exe
2016-02-13 14:29 - 2016-02-13 14:29 - 02959376 _____ (Microsoft Corporation) C:\Users\cletze\Downloads\dotnetfx35setup (2).exe
2016-02-13 14:28 - 2016-02-13 14:28 - 02959376 _____ (Microsoft Corporation) C:\Users\cletze\Downloads\dotnetfx35setup (1).exe
2016-02-13 14:22 - 2016-02-13 14:22 - 02869264 _____ (Microsoft Corporation) C:\Users\cletze\Downloads\dotNetFx35setup.exe
2016-02-03 13:26 - 2016-02-03 13:27 - 82101240 _____ C:\Users\cletze\Downloads\WacomTablet_6.3.15-2 (1).exe
2016-02-02 16:16 - 2016-02-02 16:15 - 344316781 _____ C:\Users\cletze\Desktop\@Exile-0.9.41.rar
2016-02-02 16:13 - 2016-02-02 16:15 - 344316781 _____ C:\Users\cletze\Downloads\@Exile-0.9.41.rar
2016-01-31 21:11 - 2016-01-31 21:11 - 00000000 ____D C:\Users\cletze\Documents\League of Legends
2016-01-28 21:44 - 2016-02-12 23:59 - 00000166 _____ C:\Users\cletze\Documents\ClownfishForTeamspeak.ini
2016-01-28 21:43 - 2016-01-28 21:43 - 00237268 _____ C:\Users\cletze\Downloads\ClownfishVoiceChanger-v1.50.ts3_plugin
2016-01-28 21:43 - 2016-01-28 21:43 - 00237268 _____ C:\Users\cletze\Downloads\ClownfishVoiceChanger-v1.50 (1).ts3_plugin
2016-01-28 17:59 - 2016-02-07 00:42 - 00000000 ____D C:\Users\cletze\Documents\Rise of the Tomb Raider
2016-01-28 17:59 - 2016-01-28 17:59 - 00000000 ____D C:\Users\cletze\AppData\Roaming\Crystal Dynamics
2016-01-28 15:00 - 2015-12-18 07:11 - 00047760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2016-01-28 15:00 - 2015-12-18 07:10 - 00099472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2016-01-28 15:00 - 2015-12-18 07:10 - 00090768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2016-01-28 14:10 - 2016-01-28 14:10 - 00005519 _____ C:\Users\cletze\Downloads\UnbenanntesDokument.odt
2016-01-28 14:10 - 2016-01-28 14:10 - 00005519 _____ C:\Users\cletze\Desktop\UnbenanntesDokument.odt
2016-01-27 09:52 - 2016-01-27 09:52 - 00574926 _____ C:\Users\cletze\Downloads\Download.htm
2016-01-24 12:15 - 2016-01-24 12:15 - 00052178 _____ C:\Users\cletze\Downloads\028-2768878-8812360 (5).pdf
2016-01-24 12:15 - 2016-01-24 12:15 - 00052178 _____ C:\Users\cletze\Downloads\028-2768878-8812360 (4).pdf
2016-01-24 12:15 - 2016-01-24 12:15 - 00052177 _____ C:\Users\cletze\Downloads\028-2768878-8812360 (3).pdf
2016-01-24 12:15 - 2016-01-24 12:15 - 00052177 _____ C:\Users\cletze\Downloads\028-2768878-8812360 (2).pdf
2016-01-24 12:15 - 2016-01-24 12:15 - 00052177 _____ C:\Users\cletze\Downloads\028-2768878-8812360 (1).pdf
2016-01-24 12:14 - 2016-01-24 12:14 - 00052177 _____ C:\Users\cletze\Downloads\028-2768878-8812360.pdf
2016-01-24 10:12 - 2016-01-24 10:12 - 00000000 __SHD C:\found.001
2016-01-24 09:57 - 2016-01-24 09:57 - 00001267 _____ C:\Users\cletze\Desktop\CrystalDiskInfo.lnk

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-02-23 16:16 - 2015-10-20 20:52 - 00000000 ____D C:\Users\cletze\AppData\Roaming\TS3Client
2016-02-23 16:07 - 2015-10-27 15:06 - 00000000 ____D C:\Users\cletze\AppData\Roaming\Skype
2016-02-23 16:06 - 2015-10-20 19:27 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-23 15:06 - 2015-10-20 19:27 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-23 14:37 - 2015-10-23 08:44 - 00004174 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{3C7399BA-DCC3-479C-AF48-997FD3A21A1E}
2016-02-22 23:17 - 2015-10-20 20:09 - 00000000 ____D C:\Program Files (x86)\Steam
2016-02-22 23:12 - 2015-10-20 21:05 - 00000000 ____D C:\Users\cletze\AppData\Local\Battle.net
2016-02-22 20:52 - 2015-10-20 20:03 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-02-21 01:07 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-02-21 00:57 - 2015-10-20 21:06 - 00000000 ____D C:\ProgramData\Battle.net
2016-02-21 00:57 - 2015-10-20 21:05 - 00000000 ____D C:\Users\cletze\AppData\Roaming\Battle.net
2016-02-20 12:56 - 2015-10-30 19:35 - 00775524 _____ C:\WINDOWS\system32\perfh007.dat
2016-02-20 12:56 - 2015-10-30 19:35 - 00155338 _____ C:\WINDOWS\system32\perfc007.dat
2016-02-20 12:56 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-02-20 12:56 - 2015-10-20 18:53 - 01799166 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-20 01:28 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-02-20 00:07 - 2015-10-20 19:27 - 00002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-19 13:24 - 2015-11-02 12:08 - 00000000 ____D C:\Users\cletze\Documents\My Games
2016-02-19 13:24 - 2015-10-20 21:05 - 00000000 ____D C:\ProgramData\Package Cache
2016-02-18 15:03 - 2015-11-20 23:19 - 00000000 ____D C:\Users\cletze\AppData\Local\NVIDIA
2016-02-18 14:56 - 2015-10-20 19:21 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-02-18 14:51 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2016-02-18 13:34 - 2015-09-10 06:44 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-02-17 22:08 - 2015-10-30 19:47 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-17 22:08 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-02-17 22:08 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-02-17 22:08 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-02-17 22:08 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-02-17 22:08 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-02-17 22:08 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-02-17 22:08 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-02-17 22:08 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-02-17 22:08 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-02-17 22:08 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-02-17 22:08 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-02-17 16:20 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-02-17 14:23 - 2015-10-24 14:11 - 00000000 ____D C:\Users\cletze\Ubisoft Game Launcher
2016-02-16 15:02 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-02-14 11:08 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat
2016-02-14 01:17 - 2015-10-20 18:56 - 00000000 ____D C:\Users\cletze\AppData\Local\Packages
2016-02-14 01:15 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2016-02-14 01:09 - 2015-10-20 19:00 - 00002398 _____ C:\Users\cletze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-02-14 01:09 - 2015-10-20 19:00 - 00000000 ___RD C:\Users\cletze\OneDrive
2016-02-14 01:08 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2016-02-14 01:08 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2016-02-14 01:07 - 2015-11-18 16:05 - 00009528 _____ C:\WINDOWS\diagwrn.xml
2016-02-14 01:07 - 2015-11-18 16:05 - 00009528 _____ C:\WINDOWS\diagerr.xml
2016-02-14 01:07 - 2015-11-18 14:50 - 00000884 __RSH C:\ProgramData\ntuser.pol
2016-02-14 01:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-02-14 01:07 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT
2016-02-14 01:07 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-02-14 01:06 - 2015-11-26 10:38 - 00002596 _____ C:\WINDOWS\System32\Tasks\SamsungMagician
2016-02-14 01:06 - 2015-11-13 11:30 - 00002598 _____ C:\WINDOWS\System32\Tasks\EVGAPrecisionX
2016-02-14 01:06 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries
2016-02-14 01:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2016-02-14 01:06 - 2015-10-20 19:27 - 00003644 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-14 01:06 - 2015-10-20 19:27 - 00003420 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-14 01:05 - 2016-01-20 07:40 - 00000000 ____D C:\Users\cletze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Crucial Storage Executive
2016-02-14 01:05 - 2016-01-17 23:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Multiplatform
2016-02-14 01:05 - 2016-01-17 19:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2016-02-14 01:05 - 2016-01-17 15:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Warsow 2.0
2016-02-14 01:05 - 2016-01-12 22:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Port Forwarding
2016-02-14 01:05 - 2016-01-12 22:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2016-02-14 01:05 - 2016-01-02 15:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OkayFreedom
2016-02-14 01:05 - 2015-12-24 14:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\STAR WARS Battlefront
2016-02-14 01:05 - 2015-12-08 13:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2016-02-14 01:05 - 2015-12-04 10:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\No23 Recorder
2016-02-14 01:05 - 2015-11-26 10:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician
2016-02-14 01:05 - 2015-11-25 20:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2016-02-14 01:05 - 2015-11-13 10:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flawless Widescreen
2016-02-14 01:05 - 2015-11-11 15:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameVox
2016-02-14 01:05 - 2015-10-23 11:05 - 00000000 ____D C:\Users\cletze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-14 01:05 - 2015-10-23 11:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-14 01:05 - 2015-10-21 16:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2016-02-14 01:05 - 2015-10-21 08:30 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom
2016-02-14 01:05 - 2015-10-20 21:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4
2016-02-14 01:05 - 2015-10-20 20:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2016-02-14 01:05 - 2015-10-20 19:58 - 00000000 ____D C:\Users\cletze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TwitchAlerts
2016-02-14 01:05 - 2015-10-20 19:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UNi Xonar Audio
2016-02-14 01:05 - 2015-10-20 19:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-02-14 01:05 - 2015-07-10 10:47 - 00000000 ____D C:\Users\Default.migrated
2016-02-14 01:04 - 2016-01-21 19:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSOFT
2016-02-14 01:04 - 2016-01-21 19:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCWest
2016-02-14 01:04 - 2015-12-27 19:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2016-02-14 01:04 - 2015-12-14 10:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-02-14 01:04 - 2015-11-13 11:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EVGA
2016-02-14 01:04 - 2015-11-10 11:55 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2016-02-14 01:04 - 2015-11-06 14:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2016-02-14 01:04 - 2015-10-31 18:42 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DU Meter
2016-02-14 01:04 - 2015-10-30 19:47 - 00000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2016-02-14 01:04 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2016-02-14 01:04 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-02-14 01:04 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\System
2016-02-14 01:04 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2016-02-14 01:04 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate
2016-02-14 01:04 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-02-14 01:04 - 2015-10-24 14:11 - 00000000 ____D C:\Users\cletze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2016-02-14 01:04 - 2015-07-30 23:42 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2016-02-14 01:03 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Help
2016-02-14 01:03 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-02-14 01:02 - 2015-10-30 19:58 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2016-02-14 01:02 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-02-14 01:00 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2016-02-14 01:00 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI
2016-02-14 00:19 - 2015-09-10 13:09 - 00000000 ____D C:\ESD
2016-02-13 22:49 - 2016-01-09 16:08 - 00000000 ____D C:\Users\cletze\AppData\Local\CrashDumps
2016-02-13 21:22 - 2015-11-25 20:38 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-02-13 19:47 - 2015-10-20 22:34 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-02-13 19:42 - 2015-10-20 22:34 - 146614896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-02-13 15:07 - 2015-10-21 08:30 - 00000000 ____D C:\Program Files\Tablet
2016-02-09 12:54 - 2015-10-27 15:06 - 00000000 ____D C:\ProgramData\Skype
2016-02-05 10:32 - 2015-10-23 12:07 - 00000000 ____D C:\Users\cletze\Desktop\Musik
2016-02-03 20:01 - 2015-10-30 08:26 - 00828920 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-02-03 20:01 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-02 16:23 - 2015-11-04 23:30 - 00000000 ____D C:\Users\cletze\AppData\Local\Arma 3
2016-01-30 18:22 - 2015-11-04 23:30 - 00000000 ____D C:\Users\cletze\AppData\Local\Arma 3 Launcher
2016-01-28 15:00 - 2015-11-20 23:19 - 00001462 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2016-01-28 14:34 - 2015-12-16 16:52 - 00000000 ____D C:\Users\cletze\Desktop\Kataner screens
2016-01-27 19:47 - 2016-01-22 18:47 - 00000000 ____D C:\Users\cletze\AppData\Roaming\obs-studio
2016-01-27 14:20 - 2016-01-16 21:53 - 00226168 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2016-01-27 14:20 - 2015-12-24 14:52 - 00000784 _____ C:\Users\Public\Desktop\STAR WARS Battlefront.lnk
2016-01-27 14:19 - 2015-10-20 21:33 - 00226168 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2016-01-27 14:18 - 2015-10-20 21:04 - 00000000 ____D C:\ProgramData\Origin
2016-01-24 12:25 - 2015-10-20 19:11 - 00000000 ____D C:\WINDOWS\pss
2016-01-24 12:16 - 2016-01-02 15:59 - 00000000 ____D C:\Users\cletze\AppData\Roaming\Steganos VPN
2016-01-24 09:57 - 2015-11-25 20:28 - 00000000 ____D C:\Program Files (x86)\CrystalDiskInfo

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-11-10 16:33 - 2015-11-10 16:33 - 0007630 _____ () C:\Users\cletze\AppData\Local\Resmon.ResmonCfg

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\cletze\WowMatrix.exe


Einige Dateien in TEMP:
====================
C:\Users\cletze\AppData\Local\Temp\6699d3ee8dd9cf775caae782c8f44f03.dll
C:\Users\cletze\AppData\Local\Temp\772c9197c9fc03522c0913fde97a000a.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


nointegritychecks: ==> "IntegrityChecks" ist deaktiviert. <===== ACHTUNG


LastRegBack: 2016-02-14 01:02

==================== Ende von FRST.txt ============================
         

Addition.txt

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:21-02-2016 01
durchgeführt von cletze (2016-02-23 16:19:59)
Gestartet von C:\Users\cletze\Downloads
Windows 10 Pro Version 1511 (X64) (2016-02-14 00:07:49)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1314259541-1698729379-4188840987-500 - Administrator - Disabled)
cletze (S-1-5-21-1314259541-1698729379-4188840987-1001 - Administrator - Enabled) => C:\Users\cletze
DefaultAccount (S-1-5-21-1314259541-1698729379-4188840987-503 - Limited - Disabled)
Gast (S-1-5-21-1314259541-1698729379-4188840987-501 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

ARK: Survival Evolved (HKLM-x32\...\Steam App 346110) (Version:  - Studio Wildcard)
Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.7.2.45672 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
Black Desert Online (HKLM-x32\...\{C1F96C92-7B8C-485F-A9CD-37A0708A2A60}) (Version: 1.0.0.1 - Daum Games EU)
Blade & Soul (HKLM-x32\...\InstallShield_{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.237 - NC Interactive, LLC)
Blade & Soul (x32 Version: 1.0.63.237 - NC Interactive, LLC) Hidden
Call of Duty: Black Ops III (HKLM-x32\...\Steam App 311210) (Version:  - Treyarch)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Crucial Storage Executive (HKU\S-1-5-21-1314259541-1698729379-4188840987-1001\...\Crucial Storage Executive 3.24.082015.05) (Version: 3.24.082015.05 - Crucial)
CrystalDiskInfo 6.7.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.7.2 - Crystal Dew World)
Curse Client (HKU\S-1-5-21-1314259541-1698729379-4188840987-1001\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
Epic Games Launcher (HKLM-x32\...\{9002F83C-DA49-411E-9CF0-111CB3979F9C}) (Version: 1.1.50.0 - Epic Games, Inc.)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
EVGA PrecisionX 16 (HKLM-x32\...\{425A0AAA-B049-4356-A81E-E089BC5AE934}) (Version: 5.3.10 - EVGA Corporation)
Fallout 4 (HKLM-x32\...\Steam App 377160) (Version:  - Bethesda Game Studios)
Flawless Widescreen version 1.0.15 (HKLM-x32\...\{7348D82E-8C68-48FF-BA2D-8C97B5B4B3D8}_is1) (Version: 1.0.15 - Flawless Widescreen)
Flyff (HKLM-x32\...\{7E210E1C-52A1-40E3-817B-D504E9F64DFA}_is1) (Version: Flyff - WEBZEN Inc)
FlyFF (HKLM-x32\...\{B47D87A4-05B5-4AC3-B0D3-6543E1876D0E}_is1) (Version:  - Webzen)
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Futuremark SystemInfo (HKLM-x32\...\{185D7B00-8600-4716-A619-D8CBE689974B}) (Version: 4.40.560.0 - Futuremark)
GameVox 0.19.1.60 (x32 Version: 0.19.1.60 - GameVox LLC) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.116 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Launcher Prerequisites (x64) (x32 Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{3c3aafc8-d898-43ec-998f-965ffdae065a}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Mozilla Firefox 43.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.2 (x86 de)) (Version: 43.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.2 - Mozilla)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version:  - NCSOFT)
NETGEAR WNA3100 wireless USB 2.0 driver (HKLM-x32\...\{CF7B20C3-C08E-422B-B6A1-225A9A0F13AC}) (Version: 1.01.206 - NETGEAR)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.60.16 - Black Tree Gaming)
No23 Recorder (HKLM-x32\...\No23 Recorder) (Version: 2.1.0.3 - No23)
No23 Recorder (x32 Version: 2.1.0.3 - No23) Hidden
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 361.43 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.9.1.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.9.1.22 - NVIDIA Corporation)
NVIDIA Grafiktreiber 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.43 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OBS Multiplatform (HKLM-x32\...\OBS Multiplatform) (Version: 0.12.3 - OBS Project)
OkayFreedom (HKLM-x32\...\{3F3FB10C-7175-4D38-9335-3488B89C12AF}) (Version: 1.6.3 - Steganos Software GmbH)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 9.11.2.10120 - Electronic Arts, Inc.)
osu! (HKLM-x32\...\{a3d6096e-8f34-4626-b226-2c0c603a2baf}) (Version: latest - ppy Pty Ltd)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.27748 - Razer Inc.)
Rise of the Tomb Raider (HKLM-x32\...\Steam App 391220) (Version:  - Crystal Dynamics)
Rocket League (HKLM-x32\...\Steam App 252950) (Version:  - Psyonix)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.9 - Rockstar Games)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.9 - Samsung Electronics)
SHIELD Streaming (Version: 4.1.0260 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.9.1.22 - NVIDIA Corporation) Hidden
Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.111 - Skype Technologies S.A.)
Smart Port Forwarding (HKLM-x32\...\Smart Port Forwarding) (Version: 1.0.0.1 - Brooks Younce Software)
STAR WARS™ Battlefront™ (HKLM-x32\...\{E402D891-4E45-4ce9-B41F-DD35864EF170}) (Version: 1.0.4.37822 - Electronic Arts)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Witcher 3: Wild Hunt (HKLM-x32\...\Steam App 292030) (Version:  - CD PROJEKT RED)
Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Uplay Install 635) (Version:  - Ubisoft)
Tom Clancy's The Division Beta (HKLM-x32\...\Uplay Install 2036) (Version:  - Ubisoft)
TwitchAlerts (HKU\S-1-5-21-1314259541-1698729379-4188840987-1001\...\fb3f6ca9b67f53a3) (Version: 1.0.0.8 - TwitchAlerts)
UE4 Prerequisites (x64) (HKLM-x32\...\{b46d36bc-2438-471e-abe8-1fbbd51754ee}) (Version: 1.0.10.0 - Epic Games, Inc.)
UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden
UltraISO Premium V9.65 (HKLM-x32\...\UltraISO_is1) (Version:  - )
UNi Xonar Audio Driver (HKLM\...\C-Media Oxygen HD Audio Driver) (Version:  - )
Uplay (HKLM-x32\...\Uplay) (Version: 12.0 - Ubisoft)
Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.5-3 - Wacom Technology Corp.)
Wacom Tablett (HKLM\...\Wacom Tablet Driver) (Version: 6.3.15-3 - Wacom Technology Corp.)
Warsow 2.01 (HKLM-x32\...\{24508D50-EC8F-4FE6-B69D-E5035D8745EA}_is1) (Version: 2.01 - Warsow Development Team)
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WinCDEmu (HKLM-x32\...\WinCDEmu) (Version: 4.1 - Sysprogs)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1314259541-1698729379-4188840987-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\cletze\AppData\Local\Microsoft\OneDrive\17.3.6301.0127_1\FileCoAuth.exe (Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0ED0F4ED-3DF3-4196-867C-3A4052C8CF3D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-20] (Google Inc.)
Task: {1E85CC86-AF0F-43FA-B1CC-45D7EBE5A5E5} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2015-11-06] (Samsung Electronics.)
Task: {3176CC9B-0837-4AC6-B920-AE2CF029A601} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-20] (Google Inc.)
Task: {4DE53280-2625-4E2C-8F69-89ECE4E0F1E7} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-02-13] (Microsoft Corporation)
Task: {6D10CB9A-F216-40E6-B7DD-560F68E68E60} - System32\Tasks\EVGAPrecisionX => C:\Program Files (x86)\EVGA\PrecisionX 16\PrecisionX_x64.exe [2015-11-09] (EVGA Corp.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-01-08 21:10 - 2016-01-12 05:43 - 00291264 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2015-06-23 21:11 - 2015-06-23 21:11 - 00187048 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2015-10-20 23:45 - 2015-11-27 01:57 - 00076152 _____ () C:\WINDOWS\system32\PnkBstrA.exe
2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-02-14 01:03 - 2015-12-16 15:54 - 00126256 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-02-17 13:45 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-02-17 13:45 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-05-27 14:51 - 2015-05-27 14:51 - 00156160 _____ () C:\Program Files (x86)\EVGA\PrecisionX 16\FW1FontWrapper_x64.dll
2016-02-17 13:43 - 2015-12-07 05:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-02-17 13:43 - 2015-12-07 05:00 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-02-17 13:45 - 2016-01-05 02:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-02-17 13:44 - 2016-01-05 02:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-02-17 13:45 - 2016-01-16 06:10 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-02-17 13:45 - 2016-01-16 06:13 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-10-21 08:30 - 2014-08-19 20:12 - 01356568 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2015-12-05 14:21 - 2016-01-11 18:30 - 01349824 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll
2015-10-20 19:48 - 2008-07-11 15:04 - 00200704 _____ () C:\Windows\SysWOW64\HsMgr.exe
2015-10-20 19:48 - 2008-07-11 15:03 - 00282112 _____ () C:\Windows\System\HsMgr64.exe
2015-07-08 07:58 - 2015-07-08 07:58 - 00292352 _____ () C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
2016-02-16 15:00 - 2016-02-16 15:00 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-10-10 18:14 - 2015-11-23 09:11 - 00175080 _____ () D:\Program Files (x86)\quazip.dll
2015-10-10 18:13 - 2015-11-23 09:11 - 00103400 _____ () D:\Program Files (x86)\soundbackends\directsound_win64.dll
2015-10-10 18:13 - 2015-11-23 09:11 - 00108008 _____ () D:\Program Files (x86)\soundbackends\windowsaudiosession_win64.dll
2016-01-28 21:43 - 2016-01-28 21:43 - 00262656 _____ () D:\Program Files (x86)\plugins\ClownfishForTeamspeak_win64.dll
2015-09-21 15:24 - 2015-09-21 15:24 - 00317440 _____ () D:\Program Files (x86)\ssleay32.dll
2015-09-21 15:24 - 2015-09-21 15:24 - 01709056 _____ () D:\Program Files (x86)\LIBEAY32.dll
2015-11-25 09:52 - 2014-11-04 11:06 - 00987136 _____ () D:\Program Files\FlyFF_EN\Flyff.exe
2015-11-20 23:19 - 2016-01-12 05:43 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-10-20 19:48 - 2012-06-06 09:56 - 00143360 ____N () C:\Program Files\UNi Xonar Audio\Customapp\VmixP8.dll
2016-01-11 10:36 - 2016-01-11 10:36 - 00932032 ____R () C:\Program Files (x86)\Skype\Phone\ssScreenVVS2.dll
2015-10-01 07:28 - 2015-10-01 07:28 - 00137728 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll
2015-11-07 09:52 - 2014-11-26 03:12 - 40622592 _____ () C:\Users\cletze\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libcef.dll
2015-11-07 09:52 - 2014-11-26 03:12 - 00911360 _____ () C:\Users\cletze\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libglesv2.dll
2015-11-07 09:52 - 2014-11-26 03:12 - 00134144 _____ () C:\Users\cletze\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libegl.dll
2015-05-27 14:51 - 2015-05-27 14:51 - 00129536 _____ () C:\Program Files (x86)\EVGA\PrecisionX 16\FW1FontWrapper.dll
2016-02-16 15:00 - 2016-02-16 15:00 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-02-16 15:00 - 2016-02-16 15:00 - 22330368 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2015-11-25 09:52 - 2004-09-03 04:12 - 00137216 _____ () D:\Program Files\FlyFF_EN\mssmp3.asi
2015-11-25 09:52 - 2010-03-22 06:26 - 00041472 _____ () D:\Program Files\FlyFF_EN\mssogg.asi
2015-11-04 02:10 - 2015-07-15 16:35 - 00030976 _____ () D:\Program Files\FlyFF_EN\GameGuard\ggsig.des
2015-11-09 23:23 - 2015-11-09 23:22 - 00678809 _____ () D:\Program Files\FlyFF_EN\GameGuard\ggexp.des
2016-02-20 00:07 - 2016-02-18 05:14 - 01630360 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libglesv2.dll
2016-02-20 00:07 - 2016-02-18 05:14 - 00085656 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-07-30 23:42 - 2015-07-30 23:39 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1314259541-1698729379-4188840987-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\cletze\Desktop\Hintergründe\exoplanet-2560x1080-planet-space-stars-4322.jpg
DNS Servers: 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1314259541-1698729379-4188840987-1001\...\StartupApproved\StartupFolder: => "GameVox.lnk"
HKU\S-1-5-21-1314259541-1698729379-4188840987-1001\...\StartupApproved\Run: => "EADM"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{A8548F5B-3A91-4EF9-947C-A08EDE185DE2}] => (Allow) F:\Tomb Raider\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{4309D88A-1EDF-46A5-AE5E-88E57A747051}] => (Allow) F:\Tomb Raider\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{CD0448FC-8A3A-4632-A86D-838040C38F19}] => (Allow) F:\Tomb Raider\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{F8494144-D2FD-4936-B6F5-289FFE673915}] => (Allow) F:\Tomb Raider\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{31DCF08E-35E7-4CD4-9F8B-F7A75C1D4B1D}] => (Allow) F:\Tomb Raider\steamapps\common\Rise of the Tomb Raider\ROTTR.exe
FirewallRules: [{4E432BD7-FBD6-4B7F-83CA-5D3827B16060}] => (Allow) F:\Tomb Raider\steamapps\common\Rise of the Tomb Raider\ROTTR.exe
FirewallRules: [{BD3F89E4-7C1C-4381-B7FD-F39BC23560F6}] => (Allow) D:\Origin\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [{1625055A-CF94-44BA-957C-5BCE4B912757}] => (Allow) D:\Origin\STAR WARS Battlefront\starwarsbattlefront.exe
FirewallRules: [UDP Query User{CA29FD34-D2FF-489B-AB7A-46CC75164717}C:\program files\crucial\crucial storage executive\java\bin\javaw.exe] => (Allow) C:\program files\crucial\crucial storage executive\java\bin\javaw.exe
FirewallRules: [TCP Query User{D4002AA0-895D-4B30-9B3C-17C93949E0A3}C:\program files\crucial\crucial storage executive\java\bin\javaw.exe] => (Allow) C:\program files\crucial\crucial storage executive\java\bin\javaw.exe
FirewallRules: [UDP Query User{CBDE0513-1C72-4D8C-BBFF-CC145AFA739B}E:\warsow 2.0\warsow_x64.exe] => (Allow) E:\warsow 2.0\warsow_x64.exe
FirewallRules: [TCP Query User{6062BCD2-598E-4CEE-8C56-EB927C81807F}E:\warsow 2.0\warsow_x64.exe] => (Allow) E:\warsow 2.0\warsow_x64.exe
FirewallRules: [UDP Query User{9EFCBB6C-F403-4623-87DD-3B660CCA9711}C:\program files (x86)\smart port forwarding\spf.exe] => (Allow) C:\program files (x86)\smart port forwarding\spf.exe
FirewallRules: [TCP Query User{20E38F7E-BF6D-4DCC-8069-CB969DC69493}C:\program files (x86)\smart port forwarding\spf.exe] => (Allow) C:\program files (x86)\smart port forwarding\spf.exe
FirewallRules: [{E1698678-3AD0-45FD-8707-3BBE5ABEE8CC}] => (Allow) D:\Origin\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{2E7820E2-2931-485B-A5CD-2AC0A7C11A27}] => (Allow) D:\Origin\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{53C3879C-DAF8-43E2-916B-4FA8104B9E6B}] => (Allow) D:\Origin\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{01BCECC2-FF51-49FD-BEBE-15518DEBE567}] => (Allow) D:\Origin\Battlefield 4\BF4WebHelper.exe
FirewallRules: [UDP Query User{FCC8D773-0ADE-4579-BF87-33483C09A04E}C:\sinusbot\ts3bot.exe] => (Allow) C:\sinusbot\ts3bot.exe
FirewallRules: [TCP Query User{5D21D1D9-31F1-4696-B961-58CD0EFC30E9}C:\sinusbot\ts3bot.exe] => (Allow) C:\sinusbot\ts3bot.exe
FirewallRules: [{8902CD39-D127-4F36-A706-5CF230A622BC}] => (Allow) C:\Users\cletze\AppData\Roaming\Steganos\OkayFreedom\Proxy\node.exe
FirewallRules: [{4EBE7EBC-8288-4F80-A920-790728355A7B}] => (Allow) D:\Steam spiele\steamapps\common\Call of Duty Black Ops III\BlackOps3.exe
FirewallRules: [{D4E1EFA7-4A6F-4856-98D5-4E50B63ED7D1}] => (Allow) D:\Steam spiele\steamapps\common\Call of Duty Black Ops III\BlackOps3.exe
FirewallRules: [UDP Query User{797B45C5-731E-4188-876E-A17FB35F33FB}E:\gta5\gta5.exe] => (Allow) E:\gta5\gta5.exe
FirewallRules: [TCP Query User{527B173D-A681-434F-9021-FD5C7FE4160D}E:\gta5\gta5.exe] => (Allow) E:\gta5\gta5.exe
FirewallRules: [UDP Query User{364277FE-F88F-43C1-B468-C80597B10684}C:\program files (x86)\epic games\4.10\engine\binaries\win64\ue4editor.exe] => (Allow) C:\program files (x86)\epic games\4.10\engine\binaries\win64\ue4editor.exe
FirewallRules: [TCP Query User{EEB261F3-77B4-412A-9E1E-CC5BE9713CBF}C:\program files (x86)\epic games\4.10\engine\binaries\win64\ue4editor.exe] => (Allow) C:\program files (x86)\epic games\4.10\engine\binaries\win64\ue4editor.exe
FirewallRules: [{D1197766-AA18-4108-B88A-6B19A59162BD}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{A32AC460-1866-4AF7-856B-0ADBB3A21737}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{A9FE2F59-B6F9-41B2-A95A-03958C3B8287}] => (Allow) E:\GTA5.exe
FirewallRules: [{73CA0013-6DC1-4FA4-AD11-24ADBF5D1F3A}] => (Allow) E:\GTA5.exe
FirewallRules: [{42A3A202-477A-43BB-B38F-9D9D7CF879A9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{3758CB3A-433D-4BB2-825E-0F5B1CA06ACD}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{3E367893-5743-45D4-B0D2-63ABE2A04057}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{99FC1B37-CF80-4104-A44A-30FCC60E3567}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{6CBE1BAB-3173-40D1-9086-9E4B32E265B0}] => (Allow) E:\Games\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{5379F663-778B-42D1-A6BB-1B107B95CC65}] => (Allow) E:\Games\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [UDP Query User{ED7BFA05-251F-4CC0-A1A1-5BE5C4B7838F}D:\origin\battlefield 4\bf4.exe] => (Allow) D:\origin\battlefield 4\bf4.exe
FirewallRules: [TCP Query User{B70187E4-CE2A-474C-81CE-C420334D2CD5}D:\origin\battlefield 4\bf4.exe] => (Allow) D:\origin\battlefield 4\bf4.exe
FirewallRules: [{78537056-4E88-4636-812E-B062AB3E63DC}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{44F4D86A-AB95-45FA-B672-9B7DB185B4DE}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{6FDF2B20-3A47-498A-A0B8-0B931A0CA35E}] => (Allow) C:\WINDOWS\SysWOW64\PnkBstrB.exe
FirewallRules: [{99C0D4D8-24E2-4D45-8041-06DE8395B8CC}] => (Allow) C:\WINDOWS\SysWOW64\PnkBstrB.exe
FirewallRules: [{935C3F0E-7CA4-4D16-826B-39F74FEAA25F}] => (Allow) C:\WINDOWS\SysWOW64\PnkBstrA.exe
FirewallRules: [{1CF0745F-9536-4C1E-B182-9AF434F6608A}] => (Allow) C:\WINDOWS\SysWOW64\PnkBstrA.exe
FirewallRules: [{4DD1CFC8-432A-4625-80A7-0FE5B9A8564B}] => (Allow) G:\Skyrim\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{620C1DF7-8C02-44D7-B2EF-DB781B5B86BE}] => (Allow) G:\Skyrim\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{0C924336-02BD-46E8-8E8A-2EB604A12E9E}] => (Allow) E:\The Witcher 3\steamapps\common\steamapps\common\The Witcher 3\bin\x64\witcher3.exe
FirewallRules: [{772F95CA-B8DB-4A12-8075-9546FA5A3F53}] => (Allow) E:\The Witcher 3\steamapps\common\steamapps\common\The Witcher 3\bin\x64\witcher3.exe
FirewallRules: [{98EFBF28-B091-4A5A-908E-9965E65F5634}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D8AC904D-35CD-4080-8BE1-89F05383554C}] => (Allow) G:\Skyrim\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{573F848E-54EE-4835-BDBF-B76FE16F2068}] => (Allow) G:\Skyrim\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{3499C89F-E678-4DF6-A75F-04D5FCD4B318}] => (Allow) E:\The Witcher 3\steamapps\common\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{CE983921-4EE4-4831-89D7-4905B9B42A84}] => (Allow) E:\The Witcher 3\steamapps\common\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [UDP Query User{27818C80-D3E4-4F23-9DE9-07DC59765F39}C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [TCP Query User{5EE26C6F-6692-4B0A-BF1F-30D73BCBF849}C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [{9995BB7E-31ED-4C60-B9E1-27541632CA05}] => (Allow) E:\The Witcher 3\steamapps\common\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{A2C8EC2E-1413-44B8-B534-C9D61DE8A983}] => (Allow) E:\The Witcher 3\steamapps\common\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [UDP Query User{4D3648E7-8AD3-4C79-A481-C7C6EF986FDC}E:\the witcher 3\steamapps\common\steamapps\common\america's army\aapg\binaries\win32\aagame.exe] => (Allow) E:\the witcher 3\steamapps\common\steamapps\common\america's army\aapg\binaries\win32\aagame.exe
FirewallRules: [TCP Query User{87B76E27-A38E-44C4-8A3D-2DBF8B622D5A}E:\the witcher 3\steamapps\common\steamapps\common\america's army\aapg\binaries\win32\aagame.exe] => (Allow) E:\the witcher 3\steamapps\common\steamapps\common\america's army\aapg\binaries\win32\aagame.exe
FirewallRules: [{EE8630EE-0A01-4EFE-81E5-69D093175DF9}] => (Allow) G:\Games\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{BE42B99A-6557-4E5F-83A9-316D55AF8F7E}] => (Allow) G:\Games\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{74896119-32AB-4EF2-B264-8D22A762D6E7}] => (Allow) G:\Games\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{8C759A2C-D70E-4F3F-B058-7B8F3FF0C1EF}] => (Allow) G:\Games\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [UDP Query User{C7270EA2-698B-4BFA-B941-16BB3D4F6F91}G:\games\origin games\battlefield 4\bf4.exe] => (Allow) G:\games\origin games\battlefield 4\bf4.exe
FirewallRules: [TCP Query User{6CA0EF40-F324-41BA-BC2C-EB896614BE60}G:\games\origin games\battlefield 4\bf4.exe] => (Allow) G:\games\origin games\battlefield 4\bf4.exe
FirewallRules: [{F3077107-0922-484A-9260-5B50F06C4AB3}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{3A5BB6A8-409B-4B0B-BF29-BF2F8ACE5C9F}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D14C39E6-6215-4CC4-A2F1-7FCD7C3CD2A1}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{09ED63DA-530B-4509-A11D-896857EA1097}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{0AE0326D-FFF8-4E3C-A92E-19FAE05464EC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{049B8A29-DED7-43A1-9CE5-FB4AF02A43D7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7E61BB6B-6A27-4226-9C4A-71FF0EFE7F73}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{9AC21CB9-4C82-4676-B645-14FB76FF6546}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{2E6E4254-0E75-4670-B13F-0D08E967246B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{E40B4985-65BC-428F-8671-0B9CC2EDD7B4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{45DE07FC-0883-407A-BABC-7E940D9F480F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{BA580998-6F0D-479E-B4C8-83A7F2324353}] => (Allow) C:\Users\cletze\Downloads\bin\BlackDesert32.exe
FirewallRules: [{C0769BEF-77E8-4347-92B4-6131AE90F24B}] => (Allow) C:\Users\cletze\Downloads\bin64\BlackDesert64.exe
FirewallRules: [{EB1F48D9-CA0A-47BD-A3ED-63A8603C60A0}] => (Allow) C:\Users\cletze\Downloads\BlackDesert_Launcher.exe
FirewallRules: [{9764A965-3488-421D-8897-25FCE92E6324}] => (Allow) C:\Users\cletze\Downloads\BlackDesert_Downloader.exe
FirewallRules: [{7E3F5E87-BE85-444B-9BEB-5881496B351A}] => (Allow) F:\Tom Clancy's The Division Beta\TheDivision.exe
FirewallRules: [{04078681-ED96-4635-BC9C-2F3D2DBEBADC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{6DF0ADE0-F4CA-4A49-9524-18C349E6565E}] => (Allow) D:\Steam spiele\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{48DA2367-C7F4-4DF8-BECD-6595891A68DB}] => (Allow) D:\Steam spiele\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe

==================== Wiederherstellungspunkte =========================

ACHTUNG: Systemwiederherstellung ist deaktiviert

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (02/23/2016 04:19:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Wacom_Tablet.exe, Version: 6.3.15.3, Zeitstempel: 0x5693e4c6
Name des fehlerhaften Moduls: Wacom_Tablet.exe, Version: 6.3.15.3, Zeitstempel: 0x5693e4c6
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000216c48
ID des fehlerhaften Prozesses: 0x14240
Startzeit der fehlerhaften Anwendung: 0xWacom_Tablet.exe0
Pfad der fehlerhaften Anwendung: Wacom_Tablet.exe1
Pfad des fehlerhaften Moduls: Wacom_Tablet.exe2
Berichtskennung: Wacom_Tablet.exe3
Vollständiger Name des fehlerhaften Pakets: Wacom_Tablet.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Wacom_Tablet.exe5

Error: (02/22/2016 09:52:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Wacom_Tablet.exe, Version: 6.3.15.3, Zeitstempel: 0x5693e4c6
Name des fehlerhaften Moduls: Wacom_Tablet.exe, Version: 6.3.15.3, Zeitstempel: 0x5693e4c6
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000216c48
ID des fehlerhaften Prozesses: 0x13e2c
Startzeit der fehlerhaften Anwendung: 0xWacom_Tablet.exe0
Pfad der fehlerhaften Anwendung: Wacom_Tablet.exe1
Pfad des fehlerhaften Moduls: Wacom_Tablet.exe2
Berichtskennung: Wacom_Tablet.exe3
Vollständiger Name des fehlerhaften Pakets: Wacom_Tablet.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Wacom_Tablet.exe5

Error: (02/22/2016 08:30:35 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.

Error: (02/22/2016 08:30:33 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.

Error: (02/22/2016 03:55:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: conhost.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d8aa
Name des fehlerhaften Moduls: npggNT64.des_unloaded, Version: 2015.12.23.1, Zeitstempel: 0x567a5c23
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000013410
ID des fehlerhaften Prozesses: 0x14db0
Startzeit der fehlerhaften Anwendung: 0xconhost.exe0
Pfad der fehlerhaften Anwendung: conhost.exe1
Pfad des fehlerhaften Moduls: conhost.exe2
Berichtskennung: conhost.exe3
Vollständiger Name des fehlerhaften Pakets: conhost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: conhost.exe5

Error: (02/21/2016 06:00:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ShellExperienceHost.exe, Version: 10.0.10586.35, Zeitstempel: 0x566505bc
Name des fehlerhaften Moduls: npggNT64.des_unloaded, Version: 2015.12.23.1, Zeitstempel: 0x567a5c23
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000017a71
ID des fehlerhaften Prozesses: 0x58c8
Startzeit der fehlerhaften Anwendung: 0xShellExperienceHost.exe0
Pfad der fehlerhaften Anwendung: ShellExperienceHost.exe1
Pfad des fehlerhaften Moduls: ShellExperienceHost.exe2
Berichtskennung: ShellExperienceHost.exe3
Vollständiger Name des fehlerhaften Pakets: ShellExperienceHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ShellExperienceHost.exe5

Error: (02/21/2016 12:00:39 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll8

Error: (02/21/2016 12:00:39 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: 

Error: (02/21/2016 12:00:39 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\WINDOWS\system32\msdtcuiu.DLL8

Error: (02/21/2016 12:00:39 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: LsaC:\Windows\System32\Secur32.dll8


Systemfehler:
=============
Error: (02/22/2016 11:17:13 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Synchronisierungshost_c96b2dc erreicht.

Error: (02/22/2016 11:17:03 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_c96b2dc" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/22/2016 11:17:03 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (02/22/2016 10:27:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (02/22/2016 10:27:40 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\cletze\AppData\Local\Temp\ehdrv.sys

Error: (02/22/2016 10:27:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (02/22/2016 10:27:40 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\cletze\AppData\Local\Temp\ehdrv.sys

Error: (02/22/2016 10:27:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (02/22/2016 10:27:40 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\cletze\AppData\Local\Temp\ehdrv.sys

Error: (02/22/2016 10:27:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275


CodeIntegrity:
===================================
  Date: 2016-02-21 01:22:06.037
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-02-18 13:34:38.494
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-02-14 01:06:37.314
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-02-14 01:06:36.938
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-02-14 01:02:56.835
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz
Prozentuale Nutzung des RAM: 32%
Installierter physikalischer RAM: 16325.76 MB
Verfügbarer physikalischer RAM: 11062.26 MB
Summe virtueller Speicher: 18757.76 MB
Verfügbarer virtueller Speicher: 13120.33 MB

==================== Laufwerke ================================

Drive c: (SSD_WIN7) (Fixed) (Total:118.7 GB) (Free:19.2 GB) NTFS
Drive d: () (Fixed) (Total:232.33 GB) (Free:0.52 GB) NTFS
Drive e: (SSD 840 Pro) (Fixed) (Total:232.88 GB) (Free:44.47 GB) NTFS
Drive f: (Volume) (Fixed) (Total:447.13 GB) (Free:224.03 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: CA676AD4)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=118.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 2AF7C198)

Partition: GPT.

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: E0140ECC)
Partition 1: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (MBR Code: Windows 7 or 8) (Size: 447.1 GB) (Disk ID: 4C8991B3)
Partition 1: (Not Active) - (Size=447.1 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         

Hi,

Schritt 1
Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop

• Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
• Drücke Start Scan
  
• Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
  TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
  Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

21:52:18.0519 0x2c58c  TDSS rootkit removing tool 3.1.0.9 Dec 11 2015 22:49:12
21:52:26.0856 0x2c58c  ============================================================
21:52:26.0856 0x2c58c  Current date / time: 2016/02/23 21:52:26.0856
21:52:26.0856 0x2c58c  SystemInfo:
21:52:26.0858 0x2c58c  
21:52:26.0858 0x2c58c  OS Version: 10.0.10586 ServicePack: 0.0
21:52:26.0858 0x2c58c  Product type: Workstation
21:52:26.0858 0x2c58c  ComputerName: MEINPC
21:52:26.0858 0x2c58c  UserName: cletze
21:52:26.0858 0x2c58c  Windows directory: C:\WINDOWS
21:52:26.0858 0x2c58c  System windows directory: C:\WINDOWS
21:52:26.0858 0x2c58c  Running under WOW64
21:52:26.0858 0x2c58c  Processor architecture: Intel x64
21:52:26.0858 0x2c58c  Number of processors: 8
21:52:26.0858 0x2c58c  Page size: 0x1000
21:52:26.0858 0x2c58c  Boot type: Normal boot
21:52:26.0858 0x2c58c  ============================================================
21:52:26.0892 0x2c58c  KLMD registered as C:\WINDOWS\system32\drivers\42671187.sys
21:52:27.0317 0x2c58c  System UUID: {54C202A0-B54C-4AB3-2564-62171F04080A}
21:52:27.0651 0x2c58c  Drive \Device\Harddisk0\DR0 - Size: 0x1DCF856000 ( 119.24 Gb ), SectorSize: 0x200, Cylinders: 0x3CCE, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:52:27.0653 0x2c58c  Drive \Device\Harddisk1\DR1 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:52:27.0654 0x2c58c  Drive \Device\Harddisk2\DR2 - Size: 0x3A38B2E000 ( 232.89 Gb ), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:52:27.0655 0x2c58c  Drive \Device\Harddisk3\DR3 - Size: 0x6FC86D6000 ( 447.13 Gb ), SectorSize: 0x200, Cylinders: 0xE401, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:52:27.0659 0x2c58c  ============================================================
21:52:27.0659 0x2c58c  \Device\Harddisk0\DR0:
21:52:27.0659 0x2c58c  MBR partitions:
21:52:27.0659 0x2c58c  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
21:52:27.0659 0x2c58c  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xED68000
21:52:27.0659 0x2c58c  \Device\Harddisk1\DR1:
21:52:27.0660 0x2c58c  GPT partitions:
21:52:27.0660 0x2c58c  \Device\Harddisk1\DR1\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {508F5F3D-59F2-44EB-BB9C-894FBA555C8C}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0xE1000
21:52:27.0660 0x2c58c  \Device\Harddisk1\DR1\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {6B70692E-D9F9-4518-B027-6D8B45267947}, Name: EFI system partition, StartLBA 0xE1800, BlocksNum 0x32000
21:52:27.0660 0x2c58c  \Device\Harddisk1\DR1\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {2047E7D2-561C-472F-A73B-B493984666C3}, Name: Microsoft reserved partition, StartLBA 0x113800, BlocksNum 0x8000
21:52:27.0660 0x2c58c  \Device\Harddisk1\DR1\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {AFDAA5EC-3BC6-4589-8B35-D5AC0E7C1FA5}, Name: Basic data partition, StartLBA 0x11B800, BlocksNum 0x1D0AA000
21:52:27.0660 0x2c58c  MBR partitions:
21:52:27.0660 0x2c58c  \Device\Harddisk2\DR2:
21:52:27.0660 0x2c58c  MBR partitions:
21:52:27.0660 0x2c58c  \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x1D1C4800
21:52:27.0660 0x2c58c  \Device\Harddisk3\DR3:
21:52:27.0660 0x2c58c  MBR partitions:
21:52:27.0660 0x2c58c  \Device\Harddisk3\DR3\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x37E42000
21:52:27.0660 0x2c58c  ============================================================
21:52:27.0661 0x2c58c  C: <-> \Device\Harddisk0\DR0\Partition2
21:52:27.0662 0x2c58c  D: <-> \Device\Harddisk1\DR1\Partition4
21:52:27.0664 0x2c58c  E: <-> \Device\Harddisk2\DR2\Partition1
21:52:27.0665 0x2c58c  F: <-> \Device\Harddisk3\DR3\Partition1
21:52:27.0665 0x2c58c  ============================================================
21:52:27.0665 0x2c58c  Initialize success
21:52:27.0665 0x2c58c  ============================================================
21:52:52.0600 0x2c7b8  ============================================================
21:52:52.0600 0x2c7b8  Scan started
21:52:52.0600 0x2c7b8  Mode: Manual; SigCheck; TDLFS; 
21:52:52.0600 0x2c7b8  ============================================================
21:52:52.0600 0x2c7b8  KSN ping started
21:52:54.0962 0x2c7b8  KSN ping finished: true
21:52:55.0411 0x2c7b8  ================ Scan system memory ========================
21:52:55.0411 0x2c7b8  System memory - ok
21:52:55.0411 0x2c7b8  ================ Scan services =============================
21:52:55.0454 0x2c7b8  1394ohci - ok
21:52:55.0456 0x2c7b8  3ware - ok
21:52:55.0458 0x2c7b8  ACPI - ok
21:52:55.0460 0x2c7b8  acpiex - ok
21:52:55.0461 0x2c7b8  acpipagr - ok
21:52:55.0463 0x2c7b8  AcpiPmi - ok
21:52:55.0464 0x2c7b8  acpitime - ok
21:52:55.0465 0x2c7b8  ADP80XX - ok
21:52:55.0467 0x2c7b8  AFD - ok
21:52:55.0469 0x2c7b8  agp440 - ok
21:52:55.0507 0x2c7b8  [ 8BA0756C7B80D039212F9BB957D84727, 2EFED9D87E37A95F7216D879FA2E054AE105DC5280F7393540C812C296E4FDAC ] AGSService      C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
21:52:55.0555 0x2c7b8  AGSService - ok
21:52:55.0561 0x2c7b8  ahcache - ok
21:52:55.0562 0x2c7b8  AJRouter - ok
21:52:55.0564 0x2c7b8  ALG - ok
21:52:55.0565 0x2c7b8  AmdK8 - ok
21:52:55.0569 0x2c7b8  AmdPPM - ok
21:52:55.0572 0x2c7b8  amdsata - ok
21:52:55.0576 0x2c7b8  amdsbs - ok
21:52:55.0580 0x2c7b8  amdxata - ok
21:52:55.0584 0x2c7b8  AppID - ok
21:52:55.0588 0x2c7b8  AppIDSvc - ok
21:52:55.0591 0x2c7b8  Appinfo - ok
21:52:55.0594 0x2c7b8  AppMgmt - ok
21:52:55.0597 0x2c7b8  AppReadiness - ok
21:52:55.0599 0x2c7b8  AppXSvc - ok
21:52:55.0602 0x2c7b8  arcsas - ok
21:52:55.0604 0x2c7b8  AsyncMac - ok
21:52:55.0609 0x2c7b8  atapi - ok
21:52:55.0613 0x2c7b8  AudioEndpointBuilder - ok
21:52:55.0617 0x2c7b8  Audiosrv - ok
21:52:55.0621 0x2c7b8  AxInstSV - ok
21:52:55.0624 0x2c7b8  b06bdrv - ok
21:52:55.0629 0x2c7b8  B5971947 - ok
21:52:55.0633 0x2c7b8  BasicDisplay - ok
21:52:55.0635 0x2c7b8  BasicRender - ok
21:52:55.0642 0x2c7b8  [ 09391BA416AA29682298A612FDFDD7B8, D889679C25DA37212E2E0E08E4B2CF774FFF395E83BCD168B240A59E74204070 ] BazisVirtualCDBus C:\WINDOWS\System32\drivers\BazisVirtualCDBus.sys
21:52:55.0652 0x2c7b8  BazisVirtualCDBus - ok
21:52:55.0656 0x2c7b8  bcmfn - ok
21:52:55.0658 0x2c7b8  bcmfn2 - ok
21:52:55.0682 0x2c7b8  [ 44E6E51AEDBF3E0B38A6CD5432649E57, AB7F3EF0F5859B6C759BF1B9704C2F839166905C02300057997836C4B07A2221 ] BCMH43XX        C:\WINDOWS\system32\DRIVERS\bcmwlhigh664.sys
21:52:55.0704 0x2c7b8  BCMH43XX - ok
21:52:55.0708 0x2c7b8  BDESVC - ok
21:52:55.0713 0x2c7b8  Beep - ok
21:52:55.0740 0x2c7b8  [ DA27D806461256EBF525FFBA2148C675, 500CD8F47BAAA612180E220849E01250FED8F49BBCE2ABA361D9B3C63BE3E93A ] BEService       C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
21:52:55.0764 0x2c7b8  BEService - ok
21:52:55.0768 0x2c7b8  BFE - ok
21:52:55.0771 0x2c7b8  BITS - ok
21:52:55.0774 0x2c7b8  bowser - ok
21:52:55.0778 0x2c7b8  BrokerInfrastructure - ok
21:52:55.0782 0x2c7b8  Browser - ok
21:52:55.0787 0x2c7b8  BthAvrcpTg - ok
21:52:55.0790 0x2c7b8  BthHFEnum - ok
21:52:55.0793 0x2c7b8  bthhfhid - ok
21:52:55.0796 0x2c7b8  BthHFSrv - ok
21:52:55.0799 0x2c7b8  BTHMODEM - ok
21:52:55.0803 0x2c7b8  bthserv - ok
21:52:55.0807 0x2c7b8  buttonconverter - ok
21:52:55.0811 0x2c7b8  CapImg - ok
21:52:55.0815 0x2c7b8  cdfs - ok
21:52:55.0818 0x2c7b8  CDPSvc - ok
21:52:55.0821 0x2c7b8  cdrom - ok
21:52:55.0824 0x2c7b8  CertPropSvc - ok
21:52:55.0827 0x2c7b8  circlass - ok
21:52:55.0830 0x2c7b8  CLFS - ok
21:52:55.0833 0x2c7b8  ClipSVC - ok
21:52:55.0843 0x2c7b8  CmBatt - ok
21:52:55.0887 0x2c7b8  [ 12145BABD827F3B68B27A4F73B7284CD, 29F539A3CE770D9B719FCDF055FCCD46353FC2A3752DCAE95F3C171CB40D1A44 ] cmudaxp         C:\WINDOWS\system32\drivers\cmudaxp.sys
21:52:55.0953 0x2c7b8  cmudaxp - ok
21:52:55.0959 0x2c7b8  CNG - ok
21:52:55.0961 0x2c7b8  cnghwassist - ok
21:52:55.0977 0x2c7b8  CompositeBus - ok
21:52:55.0980 0x2c7b8  COMSysApp - ok
21:52:55.0982 0x2c7b8  condrv - ok
21:52:55.0984 0x2c7b8  CoreMessagingRegistrar - ok
21:52:55.0989 0x2c7b8  CryptSvc - ok
21:52:55.0991 0x2c7b8  CSC - ok
21:52:55.0993 0x2c7b8  CscService - ok
21:52:55.0995 0x2c7b8  dam - ok
21:52:55.0999 0x2c7b8  DcomLaunch - ok
21:52:56.0001 0x2c7b8  DcpSvc - ok
21:52:56.0003 0x2c7b8  defragsvc - ok
21:52:56.0006 0x2c7b8  DeviceAssociationService - ok
21:52:56.0010 0x2c7b8  DeviceInstall - ok
21:52:56.0012 0x2c7b8  DevQueryBroker - ok
21:52:56.0015 0x2c7b8  Dfsc - ok
21:52:56.0018 0x2c7b8  Dhcp - ok
21:52:56.0020 0x2c7b8  diagnosticshub.standardcollector.service - ok
21:52:56.0023 0x2c7b8  DiagTrack - ok
21:52:56.0026 0x2c7b8  disk - ok
21:52:56.0029 0x2c7b8  DmEnrollmentSvc - ok
21:52:56.0031 0x2c7b8  dmvsc - ok
21:52:56.0033 0x2c7b8  dmwappushservice - ok
21:52:56.0035 0x2c7b8  Dnscache - ok
21:52:56.0038 0x2c7b8  dot3svc - ok
21:52:56.0040 0x2c7b8  DPS - ok
21:52:56.0044 0x2c7b8  drmkaud - ok
21:52:56.0046 0x2c7b8  DsmSvc - ok
21:52:56.0049 0x2c7b8  DsSvc - ok
21:52:56.0052 0x2c7b8  DXGKrnl - ok
21:52:56.0054 0x2c7b8  e1iexpress - ok
21:52:56.0057 0x2c7b8  Eaphost - ok
21:52:56.0059 0x2c7b8  ebdrv - ok
21:52:56.0061 0x2c7b8  EFS - ok
21:52:56.0063 0x2c7b8  EhStorClass - ok
21:52:56.0065 0x2c7b8  EhStorTcgDrv - ok
21:52:56.0067 0x2c7b8  embeddedmode - ok
21:52:56.0069 0x2c7b8  EntAppSvc - ok
21:52:56.0071 0x2c7b8  ErrDev - ok
21:52:56.0077 0x2c7b8  EventSystem - ok
21:52:56.0079 0x2c7b8  exfat - ok
21:52:56.0082 0x2c7b8  fastfat - ok
21:52:56.0084 0x2c7b8  Fax - ok
21:52:56.0086 0x2c7b8  fdc - ok
21:52:56.0088 0x2c7b8  fdPHost - ok
21:52:56.0090 0x2c7b8  FDResPub - ok
21:52:56.0093 0x2c7b8  fhsvc - ok
21:52:56.0095 0x2c7b8  FileCrypt - ok
21:52:56.0097 0x2c7b8  FileInfo - ok
21:52:56.0099 0x2c7b8  Filetrace - ok
21:52:56.0102 0x2c7b8  flpydisk - ok
21:52:56.0104 0x2c7b8  FltMgr - ok
21:52:56.0106 0x2c7b8  FontCache - ok
21:52:56.0110 0x2c7b8  FontCache3.0.0.0 - ok
21:52:56.0113 0x2c7b8  FsDepends - ok
21:52:56.0115 0x2c7b8  Fs_Rec - ok
21:52:56.0123 0x2c7b8  [ 18AEB680709A01F0FAA74165EE995F39, FBBEDD9A5BA1F620C6F71647550372C0C5A21C342272BB284CF797CC572487E7 ] Futuremark SystemInfo Service C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe
21:52:56.0132 0x2c7b8  Futuremark SystemInfo Service - ok
21:52:56.0136 0x2c7b8  fvevol - ok
21:52:56.0138 0x2c7b8  gagp30kx - ok
21:52:56.0141 0x2c7b8  gencounter - ok
21:52:56.0144 0x2c7b8  genericusbfn - ok
21:52:56.0165 0x2c7b8  [ 061CC5C12C39899D7398CFEBFD19F69F, 62319596863A74665FA801C305C952A0F20AAA0F1CDC2195F2F69D662790C80B ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
21:52:56.0187 0x2c7b8  GfExperienceService - ok
21:52:56.0190 0x2c7b8  GPIOClx0101 - ok
21:52:56.0192 0x2c7b8  gpsvc - ok
21:52:56.0194 0x2c7b8  GpuEnergyDrv - ok
21:52:56.0199 0x2c7b8  [ 053EEEE1ABAE53F044F1E386E22AE525, 195C8B78C0CF68F3DC1C08E58CE2A7146764F9273C39EF369194A366FA8EE1AD ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:52:56.0204 0x2c7b8  gupdate - ok
21:52:56.0209 0x2c7b8  [ 053EEEE1ABAE53F044F1E386E22AE525, 195C8B78C0CF68F3DC1C08E58CE2A7146764F9273C39EF369194A366FA8EE1AD ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:52:56.0215 0x2c7b8  gupdatem - ok
21:52:56.0218 0x2c7b8  HdAudAddService - ok
21:52:56.0220 0x2c7b8  HDAudBus - ok
21:52:56.0222 0x2c7b8  HidBatt - ok
21:52:56.0224 0x2c7b8  HidBth - ok
21:52:56.0226 0x2c7b8  hidi2c - ok
21:52:56.0228 0x2c7b8  hidinterrupt - ok
21:52:56.0230 0x2c7b8  HidIr - ok
21:52:56.0233 0x2c7b8  [ 9BC9CC2921F91D685FC63AD43528F72A, 1F717F369B50E0DD98178417C1ACEF31521E8F077CF0052D27453651E5EA847D ] hidkmdf         C:\WINDOWS\System32\drivers\hidkmdf.sys
21:52:56.0237 0x2c7b8  hidkmdf - ok
21:52:56.0239 0x2c7b8  hidserv - ok
21:52:56.0242 0x2c7b8  HidUsb - ok
21:52:56.0245 0x2c7b8  HomeGroupListener - ok
21:52:56.0248 0x2c7b8  HomeGroupProvider - ok
21:52:56.0250 0x2c7b8  HpSAMD - ok
21:52:56.0253 0x2c7b8  HTTP - ok
21:52:56.0255 0x2c7b8  hwpolicy - ok
21:52:56.0258 0x2c7b8  hyperkbd - ok
21:52:56.0260 0x2c7b8  i8042prt - ok
21:52:56.0262 0x2c7b8  iai2c - ok
21:52:56.0264 0x2c7b8  iaLPSS2i_I2C - ok
21:52:56.0266 0x2c7b8  iaLPSSi_GPIO - ok
21:52:56.0268 0x2c7b8  iaLPSSi_I2C - ok
21:52:56.0270 0x2c7b8  iaStorAV - ok
21:52:56.0273 0x2c7b8  iaStorV - ok
21:52:56.0276 0x2c7b8  ibbus - ok
21:52:56.0279 0x2c7b8  icssvc - ok
21:52:56.0281 0x2c7b8  IEEtwCollectorService - ok
21:52:56.0284 0x2c7b8  IKEEXT - ok
21:52:56.0286 0x2c7b8  intelide - ok
21:52:56.0288 0x2c7b8  intelpep - ok
21:52:56.0290 0x2c7b8  intelppm - ok
21:52:56.0294 0x2c7b8  IoQos - ok
21:52:56.0297 0x2c7b8  IpFilterDriver - ok
21:52:56.0299 0x2c7b8  iphlpsvc - ok
21:52:56.0302 0x2c7b8  IPMIDRV - ok
21:52:56.0305 0x2c7b8  IPNAT - ok
21:52:56.0309 0x2c7b8  IRENUM - ok
21:52:56.0313 0x2c7b8  isapnp - ok
21:52:56.0316 0x2c7b8  iScsiPrt - ok
21:52:56.0321 0x2c7b8  [ E489D12FF435AEEF4A5474C47D329590, 66A01F63EE4F66C0CD5BB9BF20E1722D57CC8252AC126780800806B536F4CEA9 ] ISODrive        C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys
21:52:56.0328 0x2c7b8  ISODrive - ok
21:52:56.0330 0x2c7b8  kbdclass - ok
21:52:56.0332 0x2c7b8  kbdhid - ok
21:52:56.0334 0x2c7b8  kdnic - ok
21:52:56.0337 0x2c7b8  KeyIso - ok
21:52:56.0339 0x2c7b8  KSecDD - ok
21:52:56.0343 0x2c7b8  KSecPkg - ok
21:52:56.0345 0x2c7b8  ksthunk - ok
21:52:56.0348 0x2c7b8  KtmRm - ok
21:52:56.0350 0x2c7b8  LanmanServer - ok
21:52:56.0352 0x2c7b8  LanmanWorkstation - ok
21:52:56.0355 0x2c7b8  lfsvc - ok
21:52:56.0358 0x2c7b8  LicenseManager - ok
21:52:56.0360 0x2c7b8  lltdio - ok
21:52:56.0362 0x2c7b8  lltdsvc - ok
21:52:56.0364 0x2c7b8  lmhosts - ok
21:52:56.0367 0x2c7b8  LSI_SAS - ok
21:52:56.0370 0x2c7b8  LSI_SAS2i - ok
21:52:56.0372 0x2c7b8  LSI_SAS3i - ok
21:52:56.0375 0x2c7b8  LSI_SSS - ok
21:52:56.0378 0x2c7b8  LSM - ok
21:52:56.0380 0x2c7b8  luafv - ok
21:52:56.0388 0x2c7b8  [ A0A527569856B9814E8920F52EBB67F5, 4347277C84B47E4CC048850BDEFB258CFB3B476AA99FD503FD71FBB70FFF5ACF ] lvrs64          C:\WINDOWS\system32\DRIVERS\lvrs64.sys
21:52:56.0397 0x2c7b8  lvrs64 - ok
21:52:56.0470 0x2c7b8  [ 415E344294D1C0D04627B29146F68481, B4A1A05BDF07E8F226A98E51F62BE18BE2C046A084C495BD8A95CABC79FD0614 ] LVUVC64         C:\WINDOWS\system32\DRIVERS\lvuvc64.sys
21:52:56.0540 0x2c7b8  LVUVC64 - ok
21:52:56.0548 0x2c7b8  MapsBroker - ok
21:52:56.0551 0x2c7b8  [ CFBC6C6D8A492697CABD1D353EE64933, DDAA844908324740C891EB8F08E2A8BB00457063B31C4A762745C1C2415FC12D ] MBAMProtector   C:\WINDOWS\system32\drivers\mbam.sys
21:52:56.0555 0x2c7b8  MBAMProtector - ok
21:52:56.0576 0x2c7b8  [ 40C126CB15FAB7D6C66490DCA9C1AED2, B32CEE2D2409232C245427D5E9647FDF59AF1D8AB5E8A98EE2D1F1314599FD14 ] MBAMService     C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
21:52:56.0596 0x2c7b8  MBAMService - ok
21:52:56.0601 0x2c7b8  [ 08DECFCB9BA97786165A69AB1015BC30, EDC8C8447B57BD412E2DEBCA9B5B1B58C19D40105DC7CE9520DE214081696B05 ] MBAMWebAccessControl C:\WINDOWS\system32\drivers\mwac.sys
21:52:56.0606 0x2c7b8  MBAMWebAccessControl - ok
21:52:56.0609 0x2c7b8  megasas - ok
21:52:56.0611 0x2c7b8  megasr - ok
21:52:56.0617 0x2c7b8  [ E7C9F74D8CAAB1FF7964C27C070FB16C, 76CCD9109E1031A336B7E275368520FFB60D500E24444B04066F205D1ED5BA2B ] MEIx64          C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys
21:52:56.0625 0x2c7b8  MEIx64 - ok
21:52:56.0628 0x2c7b8  MessagingService - ok
21:52:56.0637 0x2c7b8  mlx4_bus - ok
21:52:56.0640 0x2c7b8  MMCSS - ok
21:52:56.0642 0x2c7b8  Modem - ok
21:52:56.0645 0x2c7b8  monitor - ok
21:52:56.0647 0x2c7b8  mouclass - ok
21:52:56.0649 0x2c7b8  mouhid - ok
21:52:56.0652 0x2c7b8  mountmgr - ok
21:52:56.0656 0x2c7b8  [ 9763F3C17AC8C095C4419482BD1484BA, 5E329D63ADF7ADAF615DF45F7A0C1E9528B1A5CEE50B6340CEE8584EFE285FB9 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
21:52:56.0662 0x2c7b8  MozillaMaintenance - ok
21:52:56.0665 0x2c7b8  mpsdrv - ok
21:52:56.0667 0x2c7b8  MpsSvc - ok
21:52:56.0670 0x2c7b8  MRxDAV - ok
21:52:56.0673 0x2c7b8  mrxsmb - ok
21:52:56.0676 0x2c7b8  mrxsmb10 - ok
21:52:56.0678 0x2c7b8  mrxsmb20 - ok
21:52:56.0682 0x2c7b8  MsBridge - ok
21:52:56.0684 0x2c7b8  MSDTC - ok
21:52:56.0688 0x2c7b8  Msfs - ok
21:52:56.0690 0x2c7b8  msgpiowin32 - ok
21:52:56.0692 0x2c7b8  mshidkmdf - ok
21:52:56.0695 0x2c7b8  mshidumdf - ok
21:52:56.0697 0x2c7b8  msisadrv - ok
21:52:56.0699 0x2c7b8  MSiSCSI - ok
21:52:56.0701 0x2c7b8  msiserver - ok
21:52:56.0704 0x2c7b8  MSKSSRV - ok
21:52:56.0707 0x2c7b8  MsLldp - ok
21:52:56.0709 0x2c7b8  MSPCLOCK - ok
21:52:56.0712 0x2c7b8  MSPQM - ok
21:52:56.0714 0x2c7b8  MsRPC - ok
21:52:56.0719 0x2c7b8  mssmbios - ok
21:52:56.0722 0x2c7b8  MSTEE - ok
21:52:56.0724 0x2c7b8  MTConfig - ok
21:52:56.0726 0x2c7b8  Mup - ok
21:52:56.0728 0x2c7b8  mvumis - ok
21:52:56.0731 0x2c7b8  NativeWifiP - ok
21:52:56.0734 0x2c7b8  NcaSvc - ok
21:52:56.0736 0x2c7b8  NcbService - ok
21:52:56.0739 0x2c7b8  NcdAutoSetup - ok
21:52:56.0741 0x2c7b8  ndfltr - ok
21:52:56.0744 0x2c7b8  NDIS - ok
21:52:56.0746 0x2c7b8  NdisCap - ok
21:52:56.0748 0x2c7b8  NdisImPlatform - ok
21:52:56.0750 0x2c7b8  NdisTapi - ok
21:52:56.0752 0x2c7b8  Ndisuio - ok
21:52:56.0754 0x2c7b8  NdisVirtualBus - ok
21:52:56.0756 0x2c7b8  NdisWan - ok
21:52:56.0758 0x2c7b8  ndiswanlegacy - ok
21:52:56.0760 0x2c7b8  ndproxy - ok
21:52:56.0763 0x2c7b8  Ndu - ok
21:52:56.0765 0x2c7b8  NetBIOS - ok
21:52:56.0768 0x2c7b8  NetBT - ok
21:52:56.0770 0x2c7b8  Netlogon - ok
21:52:56.0773 0x2c7b8  Netman - ok
21:52:56.0775 0x2c7b8  netprofm - ok
21:52:56.0778 0x2c7b8  NetSetupSvc - ok
21:52:56.0780 0x2c7b8  NetTcpPortSharing - ok
21:52:56.0784 0x2c7b8  NgcCtnrSvc - ok
21:52:56.0787 0x2c7b8  NgcSvc - ok
21:52:56.0789 0x2c7b8  NlaSvc - ok
21:52:56.0791 0x2c7b8  Npfs - ok
21:52:56.0793 0x2c7b8  npggsvc - ok
21:52:56.0796 0x2c7b8  npsvctrig - ok
21:52:56.0798 0x2c7b8  nsi - ok
21:52:56.0800 0x2c7b8  nsiproxy - ok
21:52:56.0803 0x2c7b8  NTFS - ok
21:52:56.0806 0x2c7b8  Null - ok
21:52:56.0811 0x2c7b8  [ D812362E8AF615B521AD4DF19A93BD5A, B1F04122DFE9FCC3FC56BE327D86912D624C89F2EFB9684BE66FC22115D0E19F ] NVHDA           C:\WINDOWS\system32\drivers\nvhda64v.sys
21:52:56.0818 0x2c7b8  NVHDA - ok
21:52:57.0017 0x2c7b8  [ 2C5C31D18A238768346B896DCE154DBF, A6CD62787B1D57EE63A75B61063B0FEB2193571DF20845F52F6DBF42DC6C6110 ] nvlddmkm        C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys
21:52:57.0194 0x2c7b8  nvlddmkm - ok
21:52:57.0235 0x2c7b8  [ 1E3277F1C9F62F90488D02869A9522B7, 464870ACE9BDF7A6A9C46701209BEED5C33454CFF44CDABEAF871E06F23FEF17 ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
21:52:57.0265 0x2c7b8  NvNetworkService - ok
21:52:57.0268 0x2c7b8  nvraid - ok
21:52:57.0270 0x2c7b8  nvstor - ok
21:52:57.0273 0x2c7b8  [ 59A8DE923619F3DC0C6C63DC33FB231E, 29D20EA3EB9599DE829A0630F2063D5DFD2263E9222CD4E3559725792D1454A5 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
21:52:57.0277 0x2c7b8  NvStreamKms - ok
21:52:57.0373 0x2c7b8  [ 9B4B3747C6756F49B986398A46EC1FE0, D0A25F07CBFB39B86DCB148A2EC8F01FDDD9B6D994418C54F49AA2B782CE9811 ] NvStreamNetworkSvc C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
21:52:57.0468 0x2c7b8  NvStreamNetworkSvc - ok
21:52:57.0548 0x2c7b8  [ 266512CCC3B2E195CDE3A7A2C98A353A, DCB6C88A32FE3EE11D4FF242DE6E52B3C576C2EA4E4A5A245B4451CDEDCE94B0 ] NvStreamSvc     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
21:52:57.0620 0x2c7b8  NvStreamSvc - ok
21:52:57.0647 0x2c7b8  [ DAF8A50D2CFDFBEA9AE33F0EE5D1AE7B, C72B9FEC5354ED38F0CB08ACE64811307B97154B518EF618EA04F6E48376C5BE ] nvsvc           C:\WINDOWS\system32\nvvsvc.exe
21:52:57.0677 0x2c7b8  nvsvc - ok
21:52:57.0681 0x2c7b8  [ 64E8275CEAD43D3CA8E3A311B2F4B64A, 99E683890B9AF3243100B387317760B5F91745EF9F7FF2ABA2DC7B6551A6EAB6 ] nvvad_WaveExtensible C:\WINDOWS\system32\drivers\nvvad64v.sys
21:52:57.0686 0x2c7b8  nvvad_WaveExtensible - ok
21:52:57.0688 0x2c7b8  nv_agp - ok
21:52:57.0696 0x2c7b8  [ BBADDD6B22005AC66802483885C8CFD3, C37E97F60DB9820EF56AF72B08FB86CFFADD641CB7C8E71B91F184536AB116D7 ] OkayFreedom VPN Starter Service C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe
21:52:57.0706 0x2c7b8  OkayFreedom VPN Starter Service - ok
21:52:57.0709 0x2c7b8  OneSyncSvc - ok
21:52:57.0750 0x2c7b8  [ 40CB809645F1D0A93C535F9B0402F269, E683ED4ED824CE4E49715F23E3D3E8245B398D7A0D279E1F31470B9D7AF7E223 ] Origin Client Service C:\Program Files (x86)\Origin\OriginClientService.exe
21:52:57.0786 0x2c7b8  Origin Client Service - ok
21:52:57.0790 0x2c7b8  p2pimsvc - ok
21:52:57.0793 0x2c7b8  p2psvc - ok
21:52:57.0795 0x2c7b8  Parport - ok
21:52:57.0798 0x2c7b8  partmgr - ok
21:52:57.0800 0x2c7b8  PcaSvc - ok
21:52:57.0802 0x2c7b8  pci - ok
21:52:57.0806 0x2c7b8  pciide - ok
21:52:57.0809 0x2c7b8  pcmcia - ok
21:52:57.0811 0x2c7b8  pcw - ok
21:52:57.0814 0x2c7b8  pdc - ok
21:52:57.0816 0x2c7b8  PEAUTH - ok
21:52:57.0818 0x2c7b8  PeerDistSvc - ok
21:52:57.0820 0x2c7b8  percsas2i - ok
21:52:57.0823 0x2c7b8  percsas3i - ok
21:52:57.0848 0x2c7b8  PerfHost - ok
21:52:57.0854 0x2c7b8  PhoneSvc - ok
21:52:57.0856 0x2c7b8  PimIndexMaintenanceSvc - ok
21:52:57.0864 0x2c7b8  pla - ok
21:52:57.0866 0x2c7b8  PlugPlay - ok
21:52:57.0870 0x2c7b8  [ CD421DDB5C6E5458CE52EDC36DE7DC5B, 7B9C0A8B2B86BBF5D7E02F2620B0015A2530CBBC99724BE20313DE53EB31D62E ] PnkBstrA        C:\WINDOWS\system32\PnkBstrA.exe
21:52:57.0880 0x2c7b8  PnkBstrA - ok
21:52:57.0883 0x2c7b8  PNRPAutoReg - ok
21:52:57.0885 0x2c7b8  PNRPsvc - ok
21:52:57.0888 0x2c7b8  PolicyAgent - ok
21:52:57.0891 0x2c7b8  Power - ok
21:52:57.0894 0x2c7b8  PptpMiniport - ok
21:52:57.0950 0x2c7b8  [ 959F94AD1255BC749884EDDD14EC29C4, 2CD6DA9778EA36FA0B4080F6DB1C634712238E014E47546403CD3CDB35A1DCA8 ] PrintNotify     C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
21:52:58.0031 0x2c7b8  PrintNotify - ok
21:52:58.0038 0x2c7b8  Processor - ok
21:52:58.0041 0x2c7b8  ProfSvc - ok
21:52:58.0045 0x2c7b8  Psched - ok
21:52:58.0048 0x2c7b8  QWAVE - ok
21:52:58.0050 0x2c7b8  QWAVEdrv - ok
21:52:58.0052 0x2c7b8  RasAcd - ok
21:52:58.0054 0x2c7b8  RasAgileVpn - ok
21:52:58.0057 0x2c7b8  RasAuto - ok
21:52:58.0059 0x2c7b8  Rasl2tp - ok
21:52:58.0061 0x2c7b8  RasMan - ok
21:52:58.0063 0x2c7b8  RasPppoe - ok
21:52:58.0065 0x2c7b8  RasSstp - ok
21:52:58.0071 0x2c7b8  [ 170C5DE900F60768C380ECD8A812512F, BFD085C32CF25E8261EF4BCFA5903A496785BCDA08037F4EB580BBDEDF42B656 ] Razer Game Scanner Service C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
21:52:58.0078 0x2c7b8  Razer Game Scanner Service - ok
21:52:58.0081 0x2c7b8  rdbss - ok
21:52:58.0084 0x2c7b8  rdpbus - ok
21:52:58.0086 0x2c7b8  RDPDR - ok
21:52:58.0090 0x2c7b8  RdpVideoMiniport - ok
21:52:58.0093 0x2c7b8  rdyboost - ok
21:52:58.0095 0x2c7b8  ReFSv1 - ok
21:52:58.0099 0x2c7b8  RemoteAccess - ok
21:52:58.0101 0x2c7b8  RemoteRegistry - ok
21:52:58.0104 0x2c7b8  RetailDemo - ok
21:52:58.0107 0x2c7b8  RpcEptMapper - ok
21:52:58.0112 0x2c7b8  RpcLocator - ok
21:52:58.0115 0x2c7b8  RpcSs - ok
21:52:58.0117 0x2c7b8  rspndr - ok
21:52:58.0120 0x2c7b8  [ 55FFB814690A7D8A9E592B3DE1E0F6B6, 860F42D44D8C811D657BAF404939AE3451D6E766BAFFD6FD4912E313683EA316 ] rzendpt         C:\WINDOWS\System32\drivers\rzendpt.sys
21:52:58.0125 0x2c7b8  rzendpt - ok
21:52:58.0129 0x2c7b8  [ 0C90E6CEA576095888E779E5BD9DD060, 8A13A92D5A8E577E2B919CC879FA8CFA1FAD0A6BFF0CF4FCC59B8E74AB22A673 ] rzpmgrk         C:\WINDOWS\system32\drivers\rzpmgrk.sys
21:52:58.0133 0x2c7b8  rzpmgrk - ok
21:52:58.0138 0x2c7b8  [ 288471F132C7249F598032D03575F083, 9E3430D5E0E93BC4A5DCCC985053912065E65722BFC2EAF431BC1DA91410434C ] rzpnk           C:\WINDOWS\system32\drivers\rzpnk.sys
21:52:58.0146 0x2c7b8  rzpnk - ok
21:52:58.0151 0x2c7b8  [ 421497E425AFB40502013F362E4FA230, 20E2372BEE4BFB21138CA574C9806EC399DDA9D3439F3C391E34ABB2E518106D ] rzudd           C:\WINDOWS\System32\drivers\rzudd.sys
21:52:58.0158 0x2c7b8  rzudd - ok
21:52:58.0161 0x2c7b8  s3cap - ok
21:52:58.0163 0x2c7b8  SamSs - ok
21:52:58.0165 0x2c7b8  sbp2port - ok
21:52:58.0168 0x2c7b8  SCardSvr - ok
21:52:58.0170 0x2c7b8  ScDeviceEnum - ok
21:52:58.0173 0x2c7b8  scfilter - ok
21:52:58.0177 0x2c7b8  Schedule - ok
21:52:58.0180 0x2c7b8  SCPolicySvc - ok
21:52:58.0182 0x2c7b8  sdbus - ok
21:52:58.0184 0x2c7b8  SDRSVC - ok
21:52:58.0186 0x2c7b8  sdstor - ok
21:52:58.0188 0x2c7b8  seclogon - ok
21:52:58.0190 0x2c7b8  SENS - ok
21:52:58.0193 0x2c7b8  SensorDataService - ok
21:52:58.0195 0x2c7b8  SensorService - ok
21:52:58.0197 0x2c7b8  SensrSvc - ok
21:52:58.0199 0x2c7b8  SerCx - ok
21:52:58.0202 0x2c7b8  SerCx2 - ok
21:52:58.0204 0x2c7b8  Serenum - ok
21:52:58.0207 0x2c7b8  Serial - ok
21:52:58.0210 0x2c7b8  sermouse - ok
21:52:58.0216 0x2c7b8  SessionEnv - ok
21:52:58.0218 0x2c7b8  sfloppy - ok
21:52:58.0220 0x2c7b8  SharedAccess - ok
21:52:58.0222 0x2c7b8  ShellHWDetection - ok
21:52:58.0225 0x2c7b8  SiSRaid2 - ok
21:52:58.0227 0x2c7b8  SiSRaid4 - ok
21:52:58.0234 0x2c7b8  [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
21:52:58.0247 0x2c7b8  SkypeUpdate - ok
21:52:58.0249 0x2c7b8  smphost - ok
21:52:58.0252 0x2c7b8  SmsRouter - ok
21:52:58.0256 0x2c7b8  SNMPTRAP - ok
21:52:58.0258 0x2c7b8  spaceport - ok
21:52:58.0260 0x2c7b8  SpbCx - ok
21:52:58.0263 0x2c7b8  Spooler - ok
21:52:58.0265 0x2c7b8  sppsvc - ok
21:52:58.0267 0x2c7b8  srv - ok
21:52:58.0269 0x2c7b8  srv2 - ok
21:52:58.0272 0x2c7b8  srvnet - ok
21:52:58.0277 0x2c7b8  SSDPSRV - ok
21:52:58.0279 0x2c7b8  SstpSvc - ok
21:52:58.0281 0x2c7b8  StateRepository - ok
21:52:58.0296 0x2c7b8  [ 591249EA969797C2A24629AF7C71A6F8, 61F28FB495657916514DE2A7FFD4AD833A1B2BBA5591616BE0C9CCD7DAFA40B7 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
21:52:58.0315 0x2c7b8  Steam Client Service - ok
21:52:58.0326 0x2c7b8  [ 361FCD486D585F388B576E48D11157B2, D14B73976F46ADAC70A08B07B0A25928D25DBC808CFC6297C3E45077749C1758 ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
21:52:58.0337 0x2c7b8  Stereo Service - ok
21:52:58.0341 0x2c7b8  stexstor - ok
21:52:58.0344 0x2c7b8  stisvc - ok
21:52:58.0346 0x2c7b8  storahci - ok
21:52:58.0348 0x2c7b8  storflt - ok
21:52:58.0350 0x2c7b8  stornvme - ok
21:52:58.0353 0x2c7b8  storqosflt - ok
21:52:58.0355 0x2c7b8  StorSvc - ok
21:52:58.0358 0x2c7b8  storufs - ok
21:52:58.0360 0x2c7b8  storvsc - ok
21:52:58.0363 0x2c7b8  svsvc - ok
21:52:58.0366 0x2c7b8  swenum - ok
21:52:58.0368 0x2c7b8  swprv - ok
21:52:58.0372 0x2c7b8  Synth3dVsc - ok
21:52:58.0376 0x2c7b8  SysMain - ok
21:52:58.0379 0x2c7b8  SystemEventsBroker - ok
21:52:58.0382 0x2c7b8  TabletInputService - ok
21:52:58.0385 0x2c7b8  [ 84CA1EEF6A8A5AE5D5603BBC8ED83FCD, 1C30E026C5ACA703C1EB8164C29CC69FA4D3F3B563C22981F76E872E4CB7CECF ] tap0901         C:\WINDOWS\System32\drivers\tap0901.sys
21:52:58.0392 0x2c7b8  tap0901 - ok
21:52:58.0395 0x2c7b8  [ 6B7E47195E2BB728601BDF817E9305A0, 5DC5B7EF8CC769A83B8DB68838D46F519A8B295C9F1548A4A6DC2E9B16DC76BC ] taphss6         C:\WINDOWS\System32\drivers\taphss6.sys
21:52:58.0400 0x2c7b8  taphss6 - ok
21:52:58.0403 0x2c7b8  TapiSrv - ok
21:52:58.0407 0x2c7b8  Tcpip - ok
21:52:58.0410 0x2c7b8  Tcpip6 - ok
21:52:58.0413 0x2c7b8  tcpipreg - ok
21:52:58.0416 0x2c7b8  tdx - ok
21:52:58.0419 0x2c7b8  terminpt - ok
21:52:58.0421 0x2c7b8  TermService - ok
21:52:58.0424 0x2c7b8  Themes - ok
21:52:58.0426 0x2c7b8  TieringEngineService - ok
21:52:58.0429 0x2c7b8  tiledatamodelsvc - ok
21:52:58.0431 0x2c7b8  TimeBroker - ok
21:52:58.0433 0x2c7b8  TPM - ok
21:52:58.0437 0x2c7b8  TrkWks - ok
21:52:58.0441 0x2c7b8  TrustedInstaller - ok
21:52:58.0445 0x2c7b8  tsusbflt - ok
21:52:58.0448 0x2c7b8  TsUsbGD - ok
21:52:58.0450 0x2c7b8  tunnel - ok
21:52:58.0453 0x2c7b8  tzautoupdate - ok
21:52:58.0455 0x2c7b8  uagp35 - ok
21:52:58.0458 0x2c7b8  UASPStor - ok
21:52:58.0460 0x2c7b8  UcmCx0101 - ok
21:52:58.0463 0x2c7b8  UcmUcsi - ok
21:52:58.0465 0x2c7b8  Ucx01000 - ok
21:52:58.0468 0x2c7b8  UdeCx - ok
21:52:58.0470 0x2c7b8  udfs - ok
21:52:58.0474 0x2c7b8  UEFI - ok
21:52:58.0477 0x2c7b8  Ufx01000 - ok
21:52:58.0480 0x2c7b8  UfxChipidea - ok
21:52:58.0482 0x2c7b8  ufxsynopsys - ok
21:52:58.0486 0x2c7b8  UI0Detect - ok
21:52:58.0489 0x2c7b8  uliagpkx - ok
21:52:58.0491 0x2c7b8  umbus - ok
21:52:58.0494 0x2c7b8  UmPass - ok
21:52:58.0496 0x2c7b8  UmRdpService - ok
21:52:58.0499 0x2c7b8  UnistoreSvc - ok
21:52:58.0509 0x2c7b8  upnphost - ok
21:52:58.0512 0x2c7b8  UrsChipidea - ok
21:52:58.0515 0x2c7b8  UrsCx01000 - ok
21:52:58.0518 0x2c7b8  UrsSynopsys - ok
21:52:58.0520 0x2c7b8  usbaudio - ok
21:52:58.0523 0x2c7b8  usbccgp - ok
21:52:58.0526 0x2c7b8  usbcir - ok
21:52:58.0528 0x2c7b8  usbehci - ok
21:52:58.0530 0x2c7b8  usbhub - ok
21:52:58.0533 0x2c7b8  USBHUB3 - ok
21:52:58.0535 0x2c7b8  usbohci - ok
21:52:58.0538 0x2c7b8  usbprint - ok
21:52:58.0542 0x2c7b8  usbser - ok
21:52:58.0544 0x2c7b8  USBSTOR - ok
21:52:58.0547 0x2c7b8  usbuhci - ok
21:52:58.0549 0x2c7b8  USBXHCI - ok
21:52:58.0551 0x2c7b8  UserDataSvc - ok
21:52:58.0559 0x2c7b8  UserManager - ok
21:52:58.0561 0x2c7b8  UsoSvc - ok
21:52:58.0563 0x2c7b8  VaultSvc - ok
21:52:58.0565 0x2c7b8  vdrvroot - ok
21:52:58.0568 0x2c7b8  vds - ok
21:52:58.0570 0x2c7b8  VerifierExt - ok
21:52:58.0574 0x2c7b8  vhdmp - ok
21:52:58.0577 0x2c7b8  vhf - ok
21:52:58.0579 0x2c7b8  vmbus - ok
21:52:58.0582 0x2c7b8  VMBusHID - ok
21:52:58.0584 0x2c7b8  vmicguestinterface - ok
21:52:58.0587 0x2c7b8  vmicheartbeat - ok
21:52:58.0590 0x2c7b8  vmickvpexchange - ok
21:52:58.0592 0x2c7b8  vmicrdv - ok
21:52:58.0594 0x2c7b8  vmicshutdown - ok
21:52:58.0596 0x2c7b8  vmictimesync - ok
21:52:58.0598 0x2c7b8  vmicvmsession - ok
21:52:58.0600 0x2c7b8  vmicvss - ok
21:52:58.0603 0x2c7b8  volmgr - ok
21:52:58.0605 0x2c7b8  volmgrx - ok
21:52:58.0610 0x2c7b8  volsnap - ok
21:52:58.0614 0x2c7b8  vpci - ok
21:52:58.0616 0x2c7b8  vsmraid - ok
21:52:58.0618 0x2c7b8  VSS - ok
21:52:58.0620 0x2c7b8  VSTXRAID - ok
21:52:58.0623 0x2c7b8  vwifibus - ok
21:52:58.0626 0x2c7b8  vwififlt - ok
21:52:58.0628 0x2c7b8  W32Time - ok
21:52:58.0632 0x2c7b8  [ FCFD4B14A01D5AD7DDF2691FD00E3A44, 786AE1205E2006A41D92DA80AE70A41C1559B2C6756EE6D83E5A632A35933019 ] WacHidRouter    C:\WINDOWS\System32\drivers\wachidrouter.sys
21:52:58.0637 0x2c7b8  WacHidRouter - ok
21:52:58.0641 0x2c7b8  WacomPen - ok
21:52:58.0644 0x2c7b8  [ 335ACA8E3B778A2AEE17E004802B0C0E, 6E6CB8A9D75351E96B56816CBADA8D2EBBEE560C2DE5E3400CDA4CF8115D433E ] wacomrouterfilter C:\WINDOWS\System32\drivers\wacomrouterfilter.sys
21:52:58.0648 0x2c7b8  wacomrouterfilter - ok
21:52:58.0651 0x2c7b8  WalletService - ok
21:52:58.0653 0x2c7b8  wanarp - ok
21:52:58.0655 0x2c7b8  wanarpv6 - ok
21:52:58.0658 0x2c7b8  wbengine - ok
21:52:58.0660 0x2c7b8  WbioSrvc - ok
21:52:58.0662 0x2c7b8  Wcmsvc - ok
21:52:58.0664 0x2c7b8  wcncsvc - ok
21:52:58.0667 0x2c7b8  WcsPlugInService - ok
21:52:58.0669 0x2c7b8  WdBoot - ok
21:52:58.0671 0x2c7b8  Wdf01000 - ok
21:52:58.0674 0x2c7b8  WdFilter - ok
21:52:58.0678 0x2c7b8  WdiServiceHost - ok
21:52:58.0680 0x2c7b8  WdiSystemHost - ok
21:52:58.0683 0x2c7b8  wdiwifi - ok
21:52:58.0685 0x2c7b8  WdNisDrv - ok
21:52:58.0688 0x2c7b8  WdNisSvc - ok
21:52:58.0691 0x2c7b8  WebClient - ok
21:52:58.0693 0x2c7b8  Wecsvc - ok
21:52:58.0695 0x2c7b8  WEPHOSTSVC - ok
21:52:58.0698 0x2c7b8  wercplsupport - ok
21:52:58.0700 0x2c7b8  WerSvc - ok
21:52:58.0703 0x2c7b8  WFPLWFS - ok
21:52:58.0706 0x2c7b8  WiaRpc - ok
21:52:58.0709 0x2c7b8  WIMMount - ok
21:52:58.0710 0x2c7b8  WinDefend - ok
21:52:58.0715 0x2c7b8  WindowsTrustedRT - ok
21:52:58.0718 0x2c7b8  WindowsTrustedRTProxy - ok
21:52:58.0721 0x2c7b8  WinHttpAutoProxySvc - ok
21:52:58.0723 0x2c7b8  WinMad - ok
21:52:58.0729 0x2c7b8  Winmgmt - ok
21:52:58.0733 0x2c7b8  [ 27BCBEEC8A466178A6057B64BEF66512, A7B000ABBCC344444A9B00CFADE7AA22AB92CE0CADEC196C30EB1851AE4FA062 ] WinRing0_1_2_0  C:\Program Files (x86)\EVGA\PrecisionX 16\WinRing0\WinRing0x64.sys
21:52:58.0737 0x2c7b8  WinRing0_1_2_0 - ok
21:52:58.0741 0x2c7b8  WinRM - ok
21:52:58.0746 0x2c7b8  WINUSB - ok
21:52:58.0748 0x2c7b8  WinVerbs - ok
21:52:58.0751 0x2c7b8  WlanSvc - ok
21:52:58.0753 0x2c7b8  wlidsvc - ok
21:52:58.0755 0x2c7b8  WmiAcpi - ok
21:52:58.0759 0x2c7b8  wmiApSrv - ok
21:52:58.0760 0x2c7b8  WMPNetworkSvc - ok
21:52:58.0766 0x2c7b8  [ 2A9650FCC696DB28E45EA8B33B99B8E6, FBEBC6C05D50F578C6EEE0A7285EBE1DEADB08DD21FA3232630FD8D5A68FC3FB ] Wof             C:\WINDOWS\system32\drivers\Wof.sys
21:52:58.0778 0x2c7b8  Wof - ok
21:52:58.0781 0x2c7b8  workfolderssvc - ok
21:52:58.0784 0x2c7b8  wpcfltr - ok
21:52:58.0786 0x2c7b8  WPDBusEnum - ok
21:52:58.0789 0x2c7b8  WpdUpFltr - ok
21:52:58.0791 0x2c7b8  WpnService - ok
21:52:58.0793 0x2c7b8  ws2ifsl - ok
21:52:58.0796 0x2c7b8  wscsvc - ok
21:52:58.0797 0x2c7b8  WSearch - ok
21:52:58.0801 0x2c7b8  WSService - ok
21:52:58.0814 0x2c7b8  [ 539D52A1CB4CC3BFB9B6CAD7883B8ECA, 3CAC8F755F85F06C6FFA8C5328943DC55F410EAAA64F0E4241C3E7F60A48D4A9 ] WTabletServiceCon C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
21:52:58.0828 0x2c7b8  WTabletServiceCon - ok
21:52:58.0842 0x2c7b8  [ 4AF4C85F801F60157F943108DDBC4143, 5D246EF0AB7EE8D460921B6429FEE9B0793AEB92DB8CABD492BC20AF01F8A134 ] WTabletServicePro C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
21:52:58.0856 0x2c7b8  WTabletServicePro - ok
21:52:58.0859 0x2c7b8  wuauserv - ok
21:52:58.0861 0x2c7b8  WudfPf - ok
21:52:58.0864 0x2c7b8  WUDFRd - ok
21:52:58.0866 0x2c7b8  wudfsvc - ok
21:52:58.0868 0x2c7b8  WUDFWpdFs - ok
21:52:58.0871 0x2c7b8  WwanSvc - ok
21:52:58.0875 0x2c7b8  XblAuthManager - ok
21:52:58.0878 0x2c7b8  XblGameSave - ok
21:52:58.0880 0x2c7b8  xboxgip - ok
21:52:58.0883 0x2c7b8  XboxNetApiSvc - ok
21:52:58.0886 0x2c7b8  [ C40AE9F959A8EDA4AF63E0E28185A8AC, D630EDDFC61D7816C764D588BCB1E9E3C5F92D3B387B204DACC67F9B1A62F6ED ] xhunter1        C:\WINDOWS\xhunter1.sys
21:52:58.0890 0x2c7b8  xhunter1 - ok
21:52:58.0893 0x2c7b8  xinputhid - ok
21:52:58.0894 0x2c7b8  ================ Scan global ===============================
21:52:58.0903 0x2c7b8  [ Global ] - ok
21:52:58.0904 0x2c7b8  ================ Scan MBR ==================================
21:52:58.0906 0x2c7b8  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
21:52:59.0011 0x2c7b8  \Device\Harddisk0\DR0 - ok
21:52:59.0014 0x2c7b8  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
21:52:59.0033 0x2c7b8  \Device\Harddisk1\DR1 - ok
21:52:59.0036 0x2c7b8  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk2\DR2
21:52:59.0062 0x2c7b8  \Device\Harddisk2\DR2 - ok
21:52:59.0065 0x2c7b8  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk3\DR3
21:52:59.0076 0x2c7b8  \Device\Harddisk3\DR3 - ok
21:52:59.0077 0x2c7b8  ================ Scan VBR ==================================
21:52:59.0079 0x2c7b8  [ 80575C5BE01EE389ACC4BC8277FE79F8 ] \Device\Harddisk0\DR0\Partition1
21:52:59.0080 0x2c7b8  \Device\Harddisk0\DR0\Partition1 - ok
21:52:59.0083 0x2c7b8  [ FA7A125E9DEDDCC114FF51E4C25FB484 ] \Device\Harddisk0\DR0\Partition2
21:52:59.0083 0x2c7b8  \Device\Harddisk0\DR0\Partition2 - ok
21:52:59.0085 0x2c7b8  [ 4C773952F9042070D73D1DBAC65C1B80 ] \Device\Harddisk1\DR1\Partition1
21:52:59.0086 0x2c7b8  \Device\Harddisk1\DR1\Partition1 - ok
21:52:59.0088 0x2c7b8  [ AFA408DD742918EB19C15C22417AF938 ] \Device\Harddisk1\DR1\Partition2
21:52:59.0088 0x2c7b8  \Device\Harddisk1\DR1\Partition2 - ok
21:52:59.0090 0x2c7b8  [ F65347C46E1EFBF8E738071C40828E11 ] \Device\Harddisk1\DR1\Partition3
21:52:59.0090 0x2c7b8  \Device\Harddisk1\DR1\Partition3 - ok
21:52:59.0092 0x2c7b8  [ 656C1F0F5308663CE25AA99B5A8D0A15 ] \Device\Harddisk1\DR1\Partition4
21:52:59.0094 0x2c7b8  \Device\Harddisk1\DR1\Partition4 - ok
21:52:59.0095 0x2c7b8  [ 09E6E6D01BF455F43F1A3AFD68B257D0 ] \Device\Harddisk2\DR2\Partition1
21:52:59.0096 0x2c7b8  \Device\Harddisk2\DR2\Partition1 - ok
21:52:59.0097 0x2c7b8  [ C95859479AFF0DC46181C11F92452C33 ] \Device\Harddisk3\DR3\Partition1
21:52:59.0099 0x2c7b8  \Device\Harddisk3\DR3\Partition1 - ok
21:52:59.0099 0x2c7b8  ================ Scan generic autorun ======================
21:52:59.0142 0x2c7b8  [ E445C0DB7E5E89C657FC89C0C4CCEDE5, ABD7A9B36CFD6740CE06456B152D9EB1856C11CD7FB2A34E06D63BAD0639B2A0 ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
21:52:59.0185 0x2c7b8  NvBackend - ok
21:52:59.0190 0x2c7b8  ShadowPlay - ok
21:52:59.0214 0x2c7b8  Cmaudio8788 - ok
21:52:59.0219 0x2c7b8  [ 0740D338A42F7778760F2B0CB6DA5830, C6D275B4993502A155F85D8DE26B119866DEE106C98CF29CDAACBAF11484C94A ] C:\WINDOWS\syswow64\HsMgr.exe
21:52:59.0259 0x2c7b8  Cmaudio8788GX - detected UnsignedFile.Multi.Generic ( 1 )
21:53:00.0298 0x26980  Object required for P2P: [ DAF8A50D2CFDFBEA9AE33F0EE5D1AE7B ] nvsvc
21:53:01.0650 0x2c7b8  Detect skipped due to KSN trusted
21:53:01.0650 0x2c7b8  Cmaudio8788GX - ok
21:53:01.0657 0x2c7b8  [ BEF1B23AD0BBF805F02FAA01EAE0AF4E, 65CCFEC1F61E475A1F6759ECCA8DE1844A26AB7F827BC1F63339A0DFF554B039 ] C:\WINDOWS\system\HsMgr64.exe
21:53:01.0666 0x2c7b8  Cmaudio8788GX64 - detected UnsignedFile.Multi.Generic ( 1 )
21:53:02.0812 0x26980  Object send P2P result: true
21:53:04.0073 0x2c42c  Object required for P2P: [ C40AE9F959A8EDA4AF63E0E28185A8AC ] xhunter1
21:53:04.0282 0x2c7b8  Detect skipped due to KSN trusted
21:53:04.0282 0x2c7b8  Cmaudio8788GX64 - ok
21:53:04.0328 0x2c7b8  [ CB4591A8CE051E3823D07CF7C4B6FF8B, FE6911AB62FC221068C97BBAFE9870DC3E1F403D2255EEDB72AE9E5E0E856977 ] C:\Program Files (x86)\Flawless Widescreen\FlawlessWidescreen.exe
21:53:04.0397 0x2c7b8  FWS_FlawlessWidescreen - detected UnsignedFile.Multi.Generic ( 1 )
21:53:06.0582 0x2c42c  Object send P2P result: true
21:53:06.0802 0x2c7b8  Detect skipped due to KSN trusted
21:53:06.0802 0x2c7b8  FWS_FlawlessWidescreen - ok
21:53:06.0804 0x2c7b8  OneDriveSetup - ok
21:53:06.0806 0x2c7b8  OneDriveSetup - ok
21:53:06.0819 0x2c7b8  [ 1F93DAF10BC91666F52FC5B9632C86EB, 3D2AE1090198AAEE7CDB587ED1D2784B9FF4E4B03F4F65BC2F46E28B136F3F01 ] C:\Users\cletze\AppData\Local\Microsoft\OneDrive\OneDrive.exe
21:53:06.0833 0x2c7b8  OneDrive - ok
21:53:06.0835 0x2c7b8  Skype - ok
21:53:06.0944 0x2c7b8  [ E27BEF2C9576586E1C50A276A8DDBB3E, CE2A375269061AC36B91B4124975507CA40F2DE079CC2626B6BA1C26720DF886 ] C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe
21:53:07.0042 0x2c7b8  OKAYFREEDOM_Agent - ok
21:53:07.0102 0x2c7b8  [ 8B8E3CEECD3C9709D1E0DAB2E25565F7, C9ACD0669136667157AF433A96C0C00F771122CE4A3BA0D3924DD635C37BF5D0 ] C:\Program Files (x86)\Origin\Origin.exe
21:53:07.0165 0x2c7b8  EADM - ok
21:53:07.0173 0x2c7b8  [ 3C432A063D0C82E62816A54BD0ECDF35, 16F59EC33BA97EEC6579AD4EC1DC72FBC154EC23D1208AC18281D250D47CF81C ] C:\Program Files (x86)\Smart Port Forwarding\SPF.exe
21:53:07.0182 0x2c7b8  Smart Port Forwarding - detected UnsignedFile.Multi.Generic ( 1 )
21:53:09.0631 0x2c7b8  Detect skipped due to KSN trusted
21:53:09.0631 0x2c7b8  Smart Port Forwarding - ok
21:53:09.0631 0x2c7b8  Waiting for KSN requests completion. In queue: 3
21:53:10.0632 0x2c7b8  Waiting for KSN requests completion. In queue: 3
21:53:11.0632 0x2c7b8  Waiting for KSN requests completion. In queue: 3
21:53:12.0012 0x2c664  Object required for P2P: [ E27BEF2C9576586E1C50A276A8DDBB3E ] C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe
21:53:12.0633 0x2c7b8  Waiting for KSN requests completion. In queue: 2
21:53:13.0633 0x2c7b8  Waiting for KSN requests completion. In queue: 2
21:53:14.0538 0x2c664  Object send P2P result: true
21:53:14.0641 0x2c7b8  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.9.10586.0 ), 0x61100 ( enabled : updated )
21:53:14.0646 0x2c7b8  Win FW state via NFP2: enabled ( trusted )
21:53:17.0080 0x2c7b8  ============================================================
21:53:17.0080 0x2c7b8  Scan finished
21:53:17.0080 0x2c7b8  ============================================================
21:53:17.0091 0x2c798  Detected object count: 0
21:53:17.0092 0x2c798  Actual detected object count: 0
         

Schritt 1

• Download und Anleitung
• Starte Malwarebytes' Anti-Malware (MBAM).
• Unter Einstellungen/ Erkennung und Schutz setze bitte einen Haken bei "Suche nach Rootkits".
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass Deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 2

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 25.02.2016
Suchlaufzeit: 09:32
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.2.0.1024
Malware-Datenbank: v2016.02.25.02
Rootkit-Datenbank: v2016.02.17.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: cletze

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 413331
Abgelaufene Zeit: 16 Min., 39 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
         

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=a72d089dba9ffe4c93ebfd8609db8b41
# end=init
# utc_time=2016-02-22 07:30:40
# local_time=2016-02-22 08:30:40 (+0100, Mitteleuropäische Zeit)
# country="Austria"
# osver=6.2.9200 NT 
Update Init
Update Download
Update Finalize
Updated modules version: 28251
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=a72d089dba9ffe4c93ebfd8609db8b41
# end=updated
# utc_time=2016-02-22 07:31:54
# local_time=2016-02-22 08:31:54 (+0100, Mitteleuropäische Zeit)
# country="Austria"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=a72d089dba9ffe4c93ebfd8609db8b41
# engine=28251
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2016-02-22 09:27:39
# local_time=2016-02-22 10:27:39 (+0100, Mitteleuropäische Zeit)
# country="Austria"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 85897 9990602 0 0
# scanned=777616
# found=13
# cleaned=12
# scan_time=6944
sh=3AFB8F35896182AB832ACB8A474C83D79FAB0207 ft=0 fh=0000000000000000 vn="JS/Adware.OkayFreedom.B Anwendung" ac=I fn="D:\Users\cletze\Anwendungsdaten\Steganos\OkayFreedom\Proxy\node_modules\steganos\injection.js"
sh=3AFB8F35896182AB832ACB8A474C83D79FAB0207 ft=0 fh=0000000000000000 vn="JS/Adware.OkayFreedom.B Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\Users\cletze\AppData\Roaming\Steganos\OkayFreedom\Proxy\node_modules\steganos\injection.js"
sh=BCA22D01DCA4B578E6172C53C1BFE2008AC8BAB7 ft=0 fh=0000000000000000 vn="Variante von Win32/Packed.Themida.AAD Trojaner (gelöscht)" ac=C fn="C:\Users\cletze\Downloads\7c8c8b9c (1).zip"
sh=2A58ED35A2BE8A6A8B1528FF1FD5C549A3B889D7 ft=0 fh=0000000000000000 vn="Variante von Win32/Packed.Themida.AAD Trojaner (gelöscht)" ac=C fn="C:\Users\cletze\Downloads\7c8c8b9c (2).zip"
sh=66C30E828106FBCF7D13F608270D4BCFCF24A188 ft=0 fh=0000000000000000 vn="Variante von Win32/Packed.Themida.AAD Trojaner (gelöscht)" ac=C fn="C:\Users\cletze\Downloads\7c8c8b9c (3).zip"
sh=0A82D22543F210601DC370F55D81557D953A9C3D ft=0 fh=0000000000000000 vn="Variante von Win32/Packed.Themida.AAD Trojaner (gelöscht)" ac=C fn="C:\Users\cletze\Downloads\7c8c8b9c.zip"
sh=882E61641AD1C4BAD68D994270EDB5B074229A4D ft=1 fh=8f7fc315071890c2 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\Users\cletze\Downloads\BlueScreenView - CHIP-Installer.exe"
sh=2A155D235EE68C0ECA0A4E3719D8A3FD74377D0B ft=1 fh=c9c82e9f6368ceb5 vn="Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung (gelöscht)" ac=C fn="C:\Users\cletze\Downloads\ccsetup513pro.exe"
sh=65B2A04AFA5CA72AAF51C19D304182873FE500CB ft=1 fh=ad014ead74f488b7 vn="Win32/OpenCandy potenziell unsichere Anwendung (gelöscht)" ac=C fn="C:\Users\cletze\Downloads\CrystalDiskInfo6_7_2-en (1).exe"
sh=65B2A04AFA5CA72AAF51C19D304182873FE500CB ft=1 fh=ad014ead74f488b7 vn="Win32/OpenCandy potenziell unsichere Anwendung (gelöscht)" ac=C fn="C:\Users\cletze\Downloads\CrystalDiskInfo6_7_2-en.exe"
sh=EB4557643D3BA305C47B42DE4F6D7B3978163D9A ft=1 fh=27a567ff86c161ee vn="Win32/UniBlue.E evtl. unerwünschte Anwendung (gelöscht)" ac=C fn="C:\Windows.old\Users\cletze\AppData\Local\Microsoft\Windows\INetCache\IE\KVZ4TRKD\pcmechanicpm-standalone-setup[1].exe"
sh=66C30E828106FBCF7D13F608270D4BCFCF24A188 ft=0 fh=0000000000000000 vn="Variante von Win32/Packed.Themida.AAD Trojaner (gelöscht)" ac=C fn="D:\cheat i love cheat\7c8c8b9c (3).zip"
sh=240036D56DE69E08D4FFAD075F23ED751E43350F ft=1 fh=315e1ab87f71ddeb vn="Variante von Win32/Packed.NoobyProtect.P verdächtige Datei (Gesäubert durch Löschen)" ac=C fn="D:\x22\17292121.exe"
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=a72d089dba9ffe4c93ebfd8609db8b41
# end=init
# utc_time=2016-02-25 09:01:43
# local_time=2016-02-25 10:01:43 (+0100, Mitteleuropäische Zeit)
# country="Austria"
# osver=6.2.9200 NT 
Update Init
Update Download
Update Finalize
Updated modules version: 28293
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=a72d089dba9ffe4c93ebfd8609db8b41
# end=updated
# utc_time=2016-02-25 09:02:30
# local_time=2016-02-25 10:02:30 (+0100, Mitteleuropäische Zeit)
# country="Austria"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=a72d089dba9ffe4c93ebfd8609db8b41
# engine=28293
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-02-25 10:37:36
# local_time=2016-02-25 11:37:36 (+0100, Mitteleuropäische Zeit)
# country="Austria"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 136469 10210799 0 0
# scanned=778402
# found=2
# cleaned=1
# scan_time=5706
sh=3AFB8F35896182AB832ACB8A474C83D79FAB0207 ft=0 fh=0000000000000000 vn="JS/Adware.OkayFreedom.B Anwendung" ac=I fn="D:\Users\cletze\Anwendungsdaten\Steganos\OkayFreedom\Proxy\node_modules\steganos\injection.js"
sh=3AFB8F35896182AB832ACB8A474C83D79FAB0207 ft=0 fh=0000000000000000 vn="JS/Adware.OkayFreedom.B Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\Users\cletze\AppData\Roaming\Steganos\OkayFreedom\Proxy\node_modules\steganos\injection.js"
         

Welche Probleme bestehen aktuell noch?

Keine

Wir haben es geschafft!
Die Logs sehen für mich im Moment sauber aus.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen.
Es bleibt mir nur noch, Dir unbeschwertes und sicheres Surfen zu wünschen und dass wir uns hier so bald nicht wiedersehen.

Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
Combofix deinstallieren

• Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  
• Drücke bitte die + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
• Klicke auf OK.
  Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
• Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte DelFix herunter.

• Schließe alle offenen Programme.
• Starte die delfix.exe mit einem Doppelklick.
• Setze vor jede Funktion ein Häkchen.
• Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.



Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken (z.B. hier) in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.

Meine Kauf-Empfehlung:



Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware scannen.

Optional:
NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie .
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.