Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.

TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.


Plagegeister aller Art und deren Bekämpfung: TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 27.02.2016, 19:16   #1
Lenani
 
TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los. - Standard

TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.


Hallo liebes Trojaner-Board Team,

vor Kurzem musste ich meinen neu Rechner aufsetzen, da eine meiner Festplatten den Geist aufgab. Bin jetzt auf Windows 10 64bit.

Dazu muss ich sagen, dass ich selbstständige Grafikerin bin, der Rechner also sowohl privat als auch gewerblich genutzt wird (aber nur von mir) für grafische Arbeiten. Ich bin aber Einzelkämpfer, d.h. ich habe keine IT-Abteilung, die mir bei meinem Problem helfen kann. Ich habe gelesen, dass ihr Ausnahmen macht und mir ist klar, dass ihr u. U. sensible Daten von meinem Rechner erhaltet. Dennoch hoffe ich, dass ihr mir helfen könnt.

Keine 2 Tage nach der Neuinstallation springt mich auf einmal der Echtzeitscanner von Avira Pro mit folgender Meldung an: Muster 'TR/Patched.Ren.Gen [trojan]' in Datei 'C:\Windows\Temp\a1dd92f1-5714-436f-bf26-f943fc2e956f\tmp0000265f\tmp00008178 gefunden. Durchgeführte Aktion: Zugriff verweigern.

Ich konnte den Virus weder entfernen noch in die Quarantäne verschieben. Ich habe dann den Komplettscan von Avira Pro laufen lassen – kein Fund. Auch der Housecall von Trend Micro hat nichts gefunden. Nun weiss ich aber, dass Avira auch mal Falschmeldungen rausgibt, deswegen habe ich es erstmal dabei belassen und beobachtet.

Ein paar Tage später kriege ich dann eine andere Meldung von Avira (und Adaware, das habe ich zusätzlich drauf, habe jetzt hier im Board aber schon gelesen, dass man das nicht machen sollte):
Muster 'ADWARE/iBryte.bxop [adware]' in Datei 'C:\Windows\Temp\875038cf-f126-4857-bb7c-c8998818385e\tmp00006c27\tmp00000ec7 gefunden. Durchgeführte Aktion: Zugriff verweigern

Er hat also auf einmal mehrere verdächtige Muster gefunden. Ich habe dann im Internet recherchiert und bin dieser Anleitung gefolgt: https://malwaretips.com/blogs/adware-win32-ibryte-removal/.

Danach war erstmal Ruhe, keine Funde mehr. Die Virenmeldung sprang mich indes immer wieder an, aber jeder Komplettscan brachte keinen Fund. Ich bin dann nach dieser Anleitung gegangen: https://malwaretips.com/blogs/tr-patched-ren-gen-removal/
Das hatte aber keinen Effekt, da die gelisteten Programme alle nichts gefunden haben. Auch der Echtzeitscanner hat mir weiterhin die gleiche Meldung gegeben, ein Komplettscan brachte weiterhin null Resultate.

Jetzt, ein paar Tage später habe ich auf einmal wieder den iBryte auf der Platte. Ich bin also wieder nach der o.g Methode vorgegangen. Die Scanner haben auch alle was gefunden, nur kriege ich die Malware diesmal nicht komplett entfernt, Malewarbytes findet auch nach mehreren Durchläufen immer noch verdächtige Dateien.

Ich weiss nicht, ob ich mich im Netz auf einer meiner häufig frequentierten Seiten immer wieder anstecke. Ich dachte, der Browserschutz von Avira würde das verhindern. Vielleicht war es auch einer der Treiber etc., die ich während der Neuinstallation meines Rechners installiert habe.

Ich habe jetzt mehrere Fragen:
1. Wie werde ich die iBryte Malware los?
2. Wie werde ich den Trojaner los?
3. Wie kann ich mich in Zukunft noch besser vor so was schützen?
4. Wie kann ich die Quelle meiner Infektion herausfinden, damit ich mich nicht immer wieder anstecke? (Programm? Internetseite?)
5. Welche Programme eigenen sich für meinen Rechnerschutz am Besten? Ich habe hier jetzt schon mehrfach gelesen, dass Avira nicht so der Hit sein soll. Welches Programm wäre denn geeigneter?

Dazu muss ich sagen, dass dies mein erster Fall von Virenbefall ist und ich mich bisher mit dem Thema nicht auseinandersetzen musste. Ich habe in den anderen Threads gesehen, dass ihr immer sehr kompetente Hilfe anbietet, für mich als Laien liest sich das aber manchmal wie ein Buch mit sieben Siegeln. Wenn ich also mal die ein oder andere Nachfrage stelle, weil ich eure Anweisungen nicht sofort raffe, seht es mir nach Vielen Dank schonmal.

Alt 27.02.2016, 19:35   #2
burningice
/// Malwareteam
 
TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los. - Standard

TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.



Mein Name ist Rafael und ich werde dir bei der Bereinigung helfen.

Damit ich dir optimal helfen kann, halte dich bitte an folgende Regeln:
  • Bitte lies meine Posts komplett durch bevor du sie abarbeitest
  • Wenn ein Problem auftauchen sollte oder dir etwas unklar ist, unterbreche deine Arbeit und beschreibe es so genau wie möglich.
  • Bitte kein Crossposting
  • Installiere oder Deinstalliere keine Software ohne Aufforderung
  • Bitte verwende nur die Tools, welche hier im Thread erwähnt werden und führe sie nur gemäß Anweisung aus
  • Bitte antworte innerhalb von 24h um eine sinnvolle Bereinigung zu ermöglichen
  • Poste die Logs immer in CODE-Tags (#-Button), zur Not die Logs einfach aufteilen
  • Wichtig: Nur weil dein Problem mit einem Schritt plötzlich behoben ist, bedeutet das nicht, dass dein PC auch sauber ist. Mache solange weiter, bis ich dir sage, dass dein PC "clean" ist
Los geht's

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________
Alt 28.02.2016, 11:28   #3
Lenani
 
TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los. - Standard

TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.


Alles klar, kann losgehen *krempelt die Ärmel hoch*

Hier der erste Teil der FRST:

Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:27-02-2016
durchgeführt von Annika (Administrator) auf FUSSEL (28-02-2016 11:19:13)
Gestartet von C:\Users\Annika\Desktop
Geladene Profile: Annika (Verfügbare Profile: Annika)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Advanced Micro Devices) C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI Backupper\ABService.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Fatal1ty Utility\F-Stream Tuning\Bin\IOMonitorSrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files (x86)\ASRock Utility\APP Shop\AsrAPPShop.exe
(Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cnext.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
() C:\Program Files\Rainlendar2\Rainlendar2.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Celartem, Inc., doing business as Extensis.) C:\Program Files (x86)\Extensis\Suitcase Fusion 6\FMCore.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTSched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
( ) C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSYNC.EXE
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\SBZ.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Joyent, Inc) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
(Joyent, Inc) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\ielowutil.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\cnext.exe [4888264 2016-02-03] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-01-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [804168 2016-02-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-12-11] (Raptr, Inc)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2312896 2016-02-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [1867448 2015-12-18] (Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [14960 2016-02-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [UpdReg] => C:\WINDOWS\UpdReg.EXE
HKLM-x32\...\Run: [Sound Blaster Z-Series Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\SBZ.exe [877056 2014-11-24] (Creative Technology Ltd)
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [465920 2015-10-30] (Microsoft Corporation)
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\Run: [Rainlendar2] => C:\Program Files\Rainlendar2\Rainlendar2.exe [3097640 2015-11-13] ()
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8619224 2016-01-15] (Piriform Ltd)
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\Run: [FMCore.exe] => C:\Program Files (x86)\Extensis\Suitcase Fusion 6\FMCore.exe [10434560 2016-01-06] (Celartem, Inc., doing business as Extensis.)
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [881336 2015-12-18] (Adobe Systems Incorporated)
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\Run: [CreativeTaskScheduler] => C:\Program Files (x86)\Creative\Shared Files\CTSched.exe [53341 2006-11-17] (Creative Technology Ltd)
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\Run: [GoogleChromeAutoLaunch_274C5222135F6341A42E2BBA9B0EBCBF] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [746648 2016-02-18] (Google Inc.)
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\MountPoints2: {83159446-d3e1-11e5-9558-806e6f6e6963} - "D:\Data\autorun.exe" 
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-01-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-01-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-01-22] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2016-02-15]
ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{401FADAA-1C16-4721-9F02-19067E1A1CA8}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpyderUtility.lnk [2016-02-21]
ShortcutTarget: SpyderUtility.lnk -> C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility.exe ( )

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{03005a01-b149-4343-99d1-17aaf8234965}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-02-05] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-12-18] (Adobe Systems Incorporated)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-02-04] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-12-18] (Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-12-18] (Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-12-18] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-12-18] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-12-18] (Adobe Systems Incorporated)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Annika\AppData\Roaming\Mozilla\Firefox\Profiles\sBxubisY.default
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-02-12] (Adobe Systems)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-02-04] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-15] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-02-12] (Adobe Systems)
FF Extension: Avira Browser Safety - C:\Users\Annika\AppData\Roaming\Mozilla\Firefox\Profiles\sBxubisY.default\Extensions\abs@avira.com.xpi [2016-02-18]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat DC - Create PDF - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn [2016-02-19]

Chrome: 
=======
CHR StartupUrls: Default -> "hxxps://www.facebook.com/","hxxp://annika-lewin.de/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\pdf.dll => Keine Datei
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll => Keine Datei
CHR Profile: C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Auf den Amazon-Wunschzettel) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced [2016-02-15]
CHR Extension: (Chromebleed) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\eeoekjnjgppnaegdjbcafdggilajhpic [2016-02-15]
CHR Extension: (Adobe Acrobat) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2016-02-15]
CHR Extension: (Avira SafeSearch) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\eglgfnfolcgijipffhlhbbnefdcbjbml [2016-02-26]
CHR Extension: (Avira Browserschutz) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-02-18]
CHR Extension: (AdBlock) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-02-16]
CHR Extension: („Pin it“-Button) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2016-02-15]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-02-15]
CHR Extension: (Do Share) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglhhmnmdocfhmhlekfdecokagmbchnf [2016-02-27]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [693440 2016-01-28] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2020056 2016-02-09] (Adobe Systems, Incorporated)
R2 amdacpusrsvc; C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe [121856 2016-02-03] (Advanced Micro Devices) [Datei ist nicht signiert]
R2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [948392 2016-02-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [466408 2016-02-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [466408 2016-02-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1417592 2016-02-18] (Avira Operations GmbH & Co. KG)
R2 ASRockIOMon; C:\Program Files (x86)\Fatal1ty Utility\F-Stream Tuning\Bin\IOMonitorSrv.exe [463112 2014-07-31] ()
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [260456 2016-01-27] (Avira Operations GmbH & Co. KG)
R2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [29912 2015-09-15] (AOMEI Tech Co., Ltd.)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2804976 2016-02-04] (Microsoft Corporation)
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2012-10-08] (Creative Technology Ltd) [Datei ist nicht signiert]
R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [122888 2015-06-22] (Creative Technology Ltd)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [451072 2015-11-24] (Rivet Networks) [Datei ist nicht signiert]
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [343040 2013-08-08] (Qualcomm Atheros) [Datei ist nicht signiert]
R2 SpeedupService; C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [24224 2016-02-01] (Avira Operations GmbH & Co. KG)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [30648 2015-02-26] () [Datei ist nicht signiert]
R2 amdacpksd; C:\WINDOWS\system32\drivers\amdacpksd.sys [296648 2016-02-03] (Advanced Micro Devices)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [40720 2015-07-28] (Advanced Micro Devices, Inc.)
R2 ammntdrv; C:\WINDOWS\system32\ammntdrv.sys [151480 2015-02-26] () [Datei ist nicht signiert]
R2 amwrtdrv; C:\WINDOWS\system32\amwrtdrv.sys [17848 2015-02-26] () [Datei ist nicht signiert]
R3 AsrAutoChkUpdDrv; C:\WINDOWS\SysWOW64\Drivers\AsrAutoChkUpdDrv.sys [22280 2016-02-28] (ASRock Incorporation)
R3 AsrDrv101; C:\Windows\SysWOW64\Drivers\AsrDrv101.sys [22280 2016-02-15] (ASRock Incorporation)
S3 AsrHidFilter; C:\Windows\System32\DRIVERS\AsrHidFilter.sys [20232 2014-06-30] (ASRock Inc.)
R0 AsrRamDisk; C:\Windows\System32\drivers\AsrRamDisk.sys [40200 2013-08-02] (ASRock Inc.)
S3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [111120 2016-01-24] (Advanced Micro Devices)
S3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [282000 2016-01-05] (BitDefender)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [135880 2016-02-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [146704 2016-02-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [35488 2016-02-15] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [73032 2016-02-15] (Avira Operations GmbH & Co. KG)
R1 BfLwf; C:\Windows\system32\DRIVERS\bflwfx64.sys [147016 2015-11-20] (Rivet Networks, LLC.)
R3 cthda; C:\Windows\system32\drivers\cthda.sys [1074472 2015-06-22] (Creative Technology Ltd)
R3 cthdb; C:\Windows\system32\DRIVERS\cthdb.sys [42792 2015-06-22] (Creative Technology Ltd)
R1 epp; C:\EEK\bin64\epp.sys [123992 2015-10-23] (Emsisoft Ltd)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-02-19] ()
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [22216 2014-02-03] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [22728 2014-02-03] ()
R3 ISCT; C:\Windows\System32\drivers\ISCTD.sys [44744 2014-02-03] ()
R3 Ke2200; C:\Windows\System32\drivers\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-02-28] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [183584 2015-06-12] (Intel Corporation)
S3 Spyder4; C:\Windows\System32\drivers\dccmtr.sys [15360 2011-06-02] (Datacolor)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; kein ImagePath
U3 wpcsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-02-28 11:19 - 2016-02-28 11:19 - 00025903 _____ C:\Users\Annika\Desktop\FRST.txt
2016-02-28 11:19 - 2016-02-28 11:19 - 00000000 ____D C:\FRST
2016-02-28 11:17 - 2016-02-28 11:18 - 02371072 _____ (Farbar) C:\Users\Annika\Desktop\FRST64.exe
2016-02-28 11:15 - 2016-02-28 11:15 - 00000000 ___HD C:\OneDriveTemp
2016-02-27 15:28 - 2016-02-27 15:28 - 00000000 ____D C:\Users\Annika\Documents\Benutzerdefinierte Office-Vorlagen
2016-02-27 13:57 - 2016-02-27 13:57 - 02405664 _____ (Trend Micro Inc.) C:\Users\Annika\Downloads\HousecallLauncher64.exe
2016-02-27 12:05 - 2016-02-27 12:05 - 68564970 _____ C:\Users\Annika\Desktop\031-5x8-Multi-Paperback-Book-Presentation-COVERVAULT.psd
2016-02-26 12:53 - 2016-02-26 13:54 - 00000000 ____D C:\Users\Annika\Desktop\Mirja
2016-02-26 12:08 - 2016-02-26 13:54 - 01662976 _____ C:\Users\Annika\Desktop\HochzeitseinladungMirja.indd
2016-02-26 11:45 - 2016-02-26 11:45 - 01371668 _____ (Igor Pavlov) C:\Users\Annika\Desktop\7z1514-x64.exe
2016-02-26 11:40 - 2016-02-26 11:42 - 28386785 _____ C:\Users\Annika\Desktop\Zimmer Bürgerhof Faltschachtel 140x40x380.ai
2016-02-26 11:00 - 2016-02-26 11:36 - 00042019 _____ C:\Users\Annika\Desktop\Zimmer Bürgerhof Faltschachtel 140x40x380.DXF
2016-02-26 10:58 - 2016-02-26 10:58 - 00000000 ___RD C:\Users\Annika\3D Objects
2016-02-25 15:17 - 2016-02-27 13:40 - 00000000 ____D C:\Users\Annika\AppData\Local\CrashDumps
2016-02-25 13:56 - 2016-02-25 13:56 - 00000000 ____D C:\Users\Annika\Desktop\031-5x8-Multi-Paperback-Book-Presentation-COVERVAULT
2016-02-25 13:55 - 2016-02-25 13:56 - 52601024 _____ C:\Users\Annika\Desktop\031-5x8-Multi-Paperback-Book-Presentation-COVERVAULT.zip
2016-02-24 17:10 - 2016-02-24 17:10 - 00000000 ____D C:\ProgramData\Creative
2016-02-24 17:09 - 2016-02-24 17:09 - 00466520 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll
2016-02-24 17:09 - 2016-02-24 17:09 - 00445016 _____ (Creative Labs) C:\WINDOWS\SysWOW64\wrap_oal.dll
2016-02-24 17:09 - 2016-02-24 17:09 - 00123480 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\OpenAL32.dll
2016-02-24 17:09 - 2016-02-24 17:09 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\SysWOW64\OpenAL32.dll
2016-02-24 17:09 - 2016-02-24 17:09 - 00002395 _____ C:\Users\Public\Desktop\Creative-Produktregistrierung.lnk
2016-02-24 17:09 - 2016-02-24 17:09 - 00000105 ___RH C:\WINDOWS\ctfile.rfc
2016-02-24 17:09 - 2016-02-24 17:09 - 00000000 ____D C:\WINDOWS\LastGood
2016-02-24 17:09 - 2016-02-24 17:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
2016-02-24 17:09 - 2016-02-24 17:09 - 00000000 ____D C:\Program Files\Creative
2016-02-24 17:09 - 2015-06-22 10:43 - 00004888 _____ C:\WINDOWS\cthdaGER.reg
2016-02-24 17:09 - 2015-06-22 10:43 - 00004850 _____ C:\WINDOWS\cthdaENG.reg
2016-02-24 17:09 - 2014-04-25 16:33 - 01898496 ____N (Creative) C:\WINDOWS\system32\Sens_oal.dll
2016-02-24 17:09 - 2014-04-25 16:29 - 01609728 ____N (Creative) C:\WINDOWS\SysWOW64\Sens_oal.dll
2016-02-24 17:09 - 2012-11-26 17:19 - 00005687 ____N C:\WINDOWS\SysWOW64\CTOPT352.cat
2016-02-24 17:09 - 2012-11-26 16:52 - 00005783 ____N C:\WINDOWS\system32\CTOPT352.cat
2016-02-24 17:09 - 2012-08-13 14:51 - 00183808 _____ (Creative Technology Ltd) C:\WINDOWS\system32\CTOPT352.dll
2016-02-24 17:09 - 2012-08-13 14:51 - 00167424 ____N (Creative Technology Ltd) C:\WINDOWS\SysWOW64\CTOPT352.dll
2016-02-24 17:09 - 2010-10-04 15:20 - 00088576 ____N (Creative Technology Ltd) C:\WINDOWS\system32\CTOPT399.dll
2016-02-24 17:09 - 2010-10-04 15:20 - 00079360 ____N (Creative Technology Ltd) C:\WINDOWS\SysWOW64\CTOPT399.dll
2016-02-24 17:09 - 2010-10-03 14:54 - 00005594 ____N C:\WINDOWS\system32\CTOPT399.cat
2016-02-24 17:09 - 2010-10-03 14:48 - 00005498 ____N C:\WINDOWS\SysWOW64\CTOPT399.cat
2016-02-24 17:09 - 2008-12-22 20:13 - 00061440 ____N (Creative Technology Ltd) C:\WINDOWS\SysWOW64\CTChkAud.dll
2016-02-24 17:09 - 2008-12-22 20:13 - 00049664 ____N (Creative Technology Ltd) C:\WINDOWS\system32\CTChkAud.dll
2016-02-24 17:09 - 2006-12-05 13:53 - 00042496 ____N (Creative Technology Ltd.) C:\WINDOWS\SysWOW64\AddCat.exe
2016-02-24 17:09 - 2006-12-05 13:53 - 00042496 ____N (Creative Technology Ltd.) C:\WINDOWS\system32\AddCat.exe
2016-02-24 17:09 - 2006-10-06 14:17 - 00053248 ____N (Creative Technology Ltd ) C:\WINDOWS\Ctregrun.exe
2016-02-24 17:09 - 2003-06-12 23:25 - 00007062 _____ C:\WINDOWS\SysWOW64\audiopid.vxd
2016-02-24 17:09 - 2000-05-22 16:58 - 00647872 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mscomct2.ocx
2016-02-24 17:09 - 2000-05-11 01:00 - 00090112 ____N (Creative Technology Ltd.) C:\WINDOWS\Updreg.EXE
2016-02-24 17:08 - 2016-02-24 17:09 - 00000000 ____D C:\Program Files (x86)\Creative
2016-02-24 17:07 - 2016-02-24 17:08 - 165440896 _____ (Creative Technology Ltd) C:\Users\Annika\Downloads\SBZ_CD_L13_1_01_03.exe
2016-02-24 17:01 - 2016-02-24 17:01 - 00001145 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-02-24 17:01 - 2016-02-24 17:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-02-24 17:00 - 2016-02-24 17:00 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2016-02-24 16:57 - 2016-02-24 16:58 - 00000000 ____D C:\Users\Annika\Desktop\AntiMalwareVirus
2016-02-24 13:39 - 2016-02-27 11:38 - 00000000 ____D C:\Users\Annika\Desktop\Bigstock
2016-02-24 11:25 - 2016-02-24 11:26 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2016-02-23 14:13 - 2016-02-25 14:28 - 00001024 ____H C:\SYSTAG.BIN
2016-02-23 14:11 - 2016-02-25 14:28 - 00000082 _____ C:\WINDOWS\SysWOW64\winsevr.dat
2016-02-23 14:11 - 2016-02-23 14:22 - 00000000 ____D C:\ProgramData\AomeiBR
2016-02-23 14:11 - 2016-02-23 14:11 - 00001136 _____ C:\Users\Public\Desktop\AOMEI Backupper Professional.lnk
2016-02-23 14:11 - 2016-02-23 14:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Backupper
2016-02-23 14:11 - 2015-02-26 00:00 - 00151480 _____ C:\WINDOWS\system32\ammntdrv.sys
2016-02-23 14:11 - 2015-02-26 00:00 - 00030648 _____ C:\WINDOWS\system32\ambakdrv.sys
2016-02-23 14:11 - 2015-02-26 00:00 - 00017848 _____ C:\WINDOWS\system32\amwrtdrv.sys
2016-02-23 14:10 - 2016-02-23 14:11 - 00000000 ____D C:\Program Files (x86)\AOMEI Backupper
2016-02-23 13:20 - 2016-02-23 13:22 - 00000000 ____D C:\Users\Annika\AppData\Local\NPE
2016-02-23 13:20 - 2016-02-23 13:21 - 00000000 ____D C:\NPE
2016-02-23 13:20 - 2016-02-23 13:20 - 00000000 ____D C:\ProgramData\Norton
2016-02-23 12:40 - 2016-02-23 12:45 - 00000000 ____D C:\EEK
2016-02-23 12:30 - 2016-02-23 12:30 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2016-02-21 16:55 - 2016-02-25 12:21 - 00000000 ____D C:\WINDOWS\Minidump
2016-02-21 16:49 - 2016-02-21 16:49 - 00002262 _____ C:\Users\Annika\Desktop\Spyder4Express 4.5.4.lnk
2016-02-21 16:49 - 2016-02-21 16:49 - 00000000 ____D C:\Users\Annika\AppData\Local\Datacolor
2016-02-21 16:49 - 2016-02-21 16:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Datacolor
2016-02-21 16:49 - 2016-02-21 16:49 - 00000000 ____D C:\Program Files (x86)\Datacolor
2016-02-21 16:49 - 2008-01-30 17:36 - 00090112 _____ (MindVision Software) C:\WINDOWS\unvise32.exe
2016-02-21 13:05 - 2016-02-26 12:18 - 00000033 _____ C:\Users\Annika\AppData\Roaming\AdobeWLCMCache.dat
2016-02-21 12:54 - 2016-02-24 14:08 - 00000000 ____D C:\Users\Public\Speedup Sessions
2016-02-21 12:43 - 2016-02-27 12:39 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2016-02-21 12:41 - 2016-02-21 12:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2016-02-21 12:41 - 2016-02-21 12:41 - 00000000 ____D C:\Program Files\HitmanPro
2016-02-21 12:40 - 2016-02-21 12:44 - 00000000 ____D C:\ProgramData\HitmanPro
2016-02-21 12:25 - 2016-02-28 11:16 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-02-21 12:25 - 2016-02-21 12:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-02-21 12:25 - 2016-02-21 12:25 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-02-21 12:25 - 2016-02-21 12:25 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-02-21 12:25 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-02-21 12:25 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-02-21 12:25 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-02-21 11:47 - 2016-02-27 13:39 - 00000000 ____D C:\AdwCleaner
2016-02-21 11:18 - 2016-02-21 11:18 - 00007597 _____ C:\Users\Annika\AppData\Local\Resmon.ResmonCfg
2016-02-19 12:52 - 2016-02-19 12:52 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2016-02-19 12:52 - 2016-02-19 12:52 - 00000000 _____ C:\autoexec.bat
2016-02-19 12:37 - 2016-02-27 16:43 - 00515530 _____ C:\Users\Annika\AppData\Local\census.cache
2016-02-19 12:37 - 2016-02-27 16:43 - 00120432 _____ C:\Users\Annika\AppData\Local\ars.cache
2016-02-19 12:27 - 2016-02-19 12:27 - 00000036 _____ C:\Users\Annika\AppData\Local\housecall.guid.cache
2016-02-18 12:30 - 2016-02-18 12:30 - 00001456 _____ C:\Users\Annika\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2016-02-18 12:14 - 2016-02-18 12:14 - 00000000 ____D C:\Users\Annika\AppData\Local\AviraSpeedup
2016-02-18 12:14 - 2016-02-18 12:14 - 00000000 ____D C:\Users\Annika\AppData\Local\Avira
2016-02-18 12:10 - 2016-02-18 12:10 - 05404312 _____ (Avira Operations GmbH & Co. KG) C:\Users\Annika\Downloads\avira_de_ispm0_3007526238_pyrw2rxhgj3e92dm6uwn_wd.exe
2016-02-17 11:01 - 2016-02-17 11:01 - 00000000 ____D C:\Users\Annika\AppData\Roaming\Macromedia
2016-02-17 10:39 - 2016-02-17 10:39 - 00000728 _____ C:\Users\Annika\Desktop\Desktop - Verknüpfung.lnk
2016-02-16 16:55 - 2016-02-16 16:55 - 00000000 ____D C:\Users\Annika\AppData\LocalLow\Temp
2016-02-16 16:31 - 2016-02-16 16:31 - 00000000 ____D C:\Users\Annika\AppData\Local\CEF
2016-02-16 15:25 - 2016-02-16 15:25 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-02-16 14:51 - 2016-02-28 11:15 - 00000000 ____D C:\Users\Annika\.rainlendar2
2016-02-16 14:51 - 2016-02-16 14:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rainlendar2
2016-02-16 14:51 - 2016-02-16 14:51 - 00000000 ____D C:\Program Files\Rainlendar2
2016-02-16 14:31 - 2016-02-16 14:31 - 00000043 _____ C:\ProgramData\.SF170
2016-02-16 14:28 - 2016-02-16 14:40 - 00000000 ____D C:\Users\Annika\AppData\Local\Extensis
2016-02-16 14:28 - 2016-02-16 14:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Extensis
2016-02-16 14:28 - 2016-02-16 14:28 - 00000000 ____D C:\Program Files (x86)\Extensis
2016-02-16 14:28 - 2016-02-16 14:28 - 00000000 ____D C:\Program Files (x86)\Bonjour
2016-02-16 13:47 - 2016-02-16 13:47 - 00000043 _____ C:\ProgramData\.ST160
2016-02-16 13:45 - 2016-02-28 11:18 - 00004154 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{06D3F4CE-9D51-4FBE-A373-26E45E04F2C7}
2016-02-16 13:18 - 2016-02-16 13:18 - 00000010 _____ C:\Users\Annika\AppData\Local\.C3F2FH85-G3D2-2F02-D5CH-7D3D8C553E56
2016-02-16 13:18 - 2016-02-16 13:18 - 00000010 _____ C:\ProgramData\.F4G6EEC4-B493-3E31-C6BG-8C6C9B764D36
2016-02-16 13:08 - 2016-02-23 14:10 - 83998720 _____ (AOMEI Technology Co., Ltd. ) C:\Users\Annika\Desktop\ABPro.exe
2016-02-16 12:39 - 2016-02-16 12:39 - 00001239 _____ C:\Users\Annika\Desktop\The Bat.lnk
2016-02-16 12:13 - 2016-02-16 16:31 - 00000000 ____D C:\Users\Annika\AppData\LocalLow\Adobe
2016-02-16 12:13 - 2016-02-16 12:13 - 00003602 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-Fussel-Annika
2016-02-15 17:34 - 2016-02-15 17:35 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-02-15 17:34 - 2016-02-15 17:34 - 146614896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-02-15 17:34 - 2016-01-27 06:45 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-02-15 17:34 - 2016-01-27 06:10 - 22394368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-02-15 17:34 - 2016-01-27 05:54 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-02-15 17:34 - 2016-01-16 07:23 - 08728920 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-02-15 17:34 - 2016-01-16 07:20 - 06971752 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-02-15 17:34 - 2016-01-16 06:45 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-02-15 17:34 - 2016-01-16 06:35 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-02-15 17:33 - 2016-01-29 07:57 - 04502352 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-02-15 17:33 - 2016-01-29 07:33 - 04064320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-02-15 17:33 - 2016-01-27 07:15 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-02-15 17:33 - 2016-01-27 07:15 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-02-15 17:33 - 2016-01-27 07:01 - 07476064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-02-15 17:33 - 2016-01-27 07:01 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-02-15 17:33 - 2016-01-27 07:01 - 01819720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-02-15 17:33 - 2016-01-27 06:59 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-02-15 17:33 - 2016-01-27 06:57 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-02-15 17:33 - 2016-01-27 06:57 - 01824264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-02-15 17:33 - 2016-01-27 06:57 - 00820704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-02-15 17:33 - 2016-01-27 06:56 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-02-15 17:33 - 2016-01-27 06:55 - 05242496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-02-15 17:33 - 2016-01-27 06:54 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-02-15 17:33 - 2016-01-27 06:46 - 02606824 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-02-15 17:33 - 2016-01-27 06:46 - 01270072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-02-15 17:33 - 2016-01-27 06:45 - 06605544 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-02-15 17:33 - 2016-01-27 06:43 - 00359776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-02-15 17:33 - 2016-01-27 06:37 - 01998176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-02-15 17:33 - 2016-01-27 06:37 - 00576352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-02-15 17:33 - 2016-01-27 06:08 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-15 17:33 - 2016-01-27 06:05 - 19339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-02-15 17:33 - 2016-01-27 06:05 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-02-15 17:33 - 2016-01-27 06:04 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-02-15 17:33 - 2016-01-27 06:01 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-02-15 17:33 - 2016-01-27 05:58 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-02-15 17:33 - 2016-01-27 05:55 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-02-15 17:33 - 2016-01-27 05:55 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-02-15 17:33 - 2016-01-27 05:52 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-02-15 17:33 - 2016-01-27 05:50 - 02230784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-02-15 17:33 - 2016-01-27 05:49 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-02-15 17:33 - 2016-01-27 05:48 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-02-15 17:33 - 2016-01-27 05:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-02-15 17:33 - 2016-01-27 05:41 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-02-15 17:33 - 2016-01-27 05:39 - 02275328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-02-15 17:33 - 2016-01-27 05:38 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-02-15 17:33 - 2016-01-27 05:38 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-02-15 17:33 - 2016-01-27 05:37 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-02-15 17:33 - 2016-01-27 05:36 - 02757120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-02-15 17:33 - 2016-01-16 07:37 - 00202472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2016-02-15 17:33 - 2016-01-16 07:36 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-02-15 17:33 - 2016-01-16 07:36 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-02-15 17:33 - 2016-01-16 07:34 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-02-15 17:33 - 2016-01-16 07:24 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-02-15 17:33 - 2016-01-16 07:23 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-02-15 17:33 - 2016-01-16 07:23 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-02-15 17:33 - 2016-01-16 07:23 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-02-15 17:33 - 2016-01-16 07:23 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-02-15 17:33 - 2016-01-16 07:21 - 01750440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2016-02-15 17:33 - 2016-01-16 07:20 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-02-15 17:33 - 2016-01-16 07:20 - 00431240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2016-02-15 17:33 - 2016-01-16 07:19 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-02-15 17:33 - 2016-01-16 07:19 - 00405568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-02-15 17:33 - 2016-01-16 07:12 - 01415200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-02-15 17:33 - 2016-01-16 07:09 - 01089880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2016-02-15 17:33 - 2016-01-16 07:08 - 01174008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-02-15 17:33 - 2016-01-16 07:08 - 00440152 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2016-02-15 17:33 - 2016-01-16 06:44 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-02-15 17:33 - 2016-01-16 06:38 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-02-15 17:33 - 2016-01-16 06:38 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-02-15 17:33 - 2016-01-16 06:38 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimCfg.dll
2016-02-15 17:33 - 2016-01-16 06:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-02-15 17:33 - 2016-01-16 06:37 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-02-15 17:33 - 2016-01-16 06:37 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2016-02-15 17:33 - 2016-01-16 06:36 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-02-15 17:33 - 2016-01-16 06:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-02-15 17:33 - 2016-01-16 06:36 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimAuth.dll
2016-02-15 17:33 - 2016-01-16 06:35 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-02-15 17:33 - 2016-01-16 06:34 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2016-02-15 17:33 - 2016-01-16 06:34 - 00477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2016-02-15 17:33 - 2016-01-16 06:34 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-02-15 17:33 - 2016-01-16 06:33 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2016-02-15 17:33 - 2016-01-16 06:33 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2016-02-15 17:33 - 2016-01-16 06:32 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2016-02-15 17:33 - 2016-01-16 06:31 - 00851456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-02-15 17:33 - 2016-01-16 06:31 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-02-15 17:33 - 2016-01-16 06:31 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-02-15 17:33 - 2016-01-16 06:31 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-02-15 17:33 - 2016-01-16 06:30 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-02-15 17:33 - 2016-01-16 06:30 - 01053696 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-02-15 17:33 - 2016-01-16 06:30 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-02-15 17:33 - 2016-01-16 06:30 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimCfg.dll
2016-02-15 17:33 - 2016-01-16 06:29 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2016-02-15 17:33 - 2016-01-16 06:29 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-02-15 17:33 - 2016-01-16 06:28 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-02-15 17:33 - 2016-01-16 06:28 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-02-15 17:33 - 2016-01-16 06:28 - 00884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2016-02-15 17:33 - 2016-01-16 06:28 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimAuth.dll
2016-02-15 17:33 - 2016-01-16 06:27 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-02-15 17:33 - 2016-01-16 06:26 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2016-02-15 17:33 - 2016-01-16 06:26 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-02-15 17:33 - 2016-01-16 06:26 - 00260608 _____ C:\WINDOWS\system32\MTFServer.dll
2016-02-15 17:33 - 2016-01-16 06:25 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2016-02-15 17:33 - 2016-01-16 06:25 - 00235008 _____ C:\WINDOWS\system32\MTF.dll
2016-02-15 17:33 - 2016-01-16 06:24 - 02057216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2016-02-15 17:33 - 2016-01-16 06:24 - 00613888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2016-02-15 17:33 - 2016-01-16 06:24 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-02-15 17:33 - 2016-01-16 06:24 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2016-02-15 17:33 - 2016-01-16 06:23 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-02-15 17:33 - 2016-01-16 06:23 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-02-15 17:33 - 2016-01-16 06:21 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-02-15 17:33 - 2016-01-16 06:20 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-02-15 17:33 - 2016-01-16 06:20 - 02597888 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-02-15 17:33 - 2016-01-16 06:20 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-02-15 17:33 - 2016-01-16 06:20 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2016-02-15 17:33 - 2016-01-16 06:19 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2016-02-15 17:33 - 2016-01-16 06:19 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2016-02-15 17:33 - 2016-01-16 06:19 - 00162816 _____ C:\WINDOWS\SysWOW64\MTF.dll
2016-02-15 17:33 - 2016-01-16 06:18 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-02-15 17:33 - 2016-01-16 06:17 - 05503488 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-02-15 17:33 - 2016-01-16 06:16 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-02-15 17:33 - 2016-01-16 06:16 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2016-02-15 17:33 - 2016-01-16 06:15 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-02-15 17:33 - 2016-01-16 06:14 - 01946624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-02-15 17:33 - 2016-01-16 06:14 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-02-15 17:33 - 2016-01-05 03:50 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2016-02-15 17:33 - 2016-01-05 03:48 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2016-02-15 17:33 - 2016-01-05 03:45 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-02-15 17:33 - 2016-01-05 03:42 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2016-02-15 17:33 - 2016-01-05 03:37 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-02-15 17:33 - 2016-01-05 03:37 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-02-15 17:33 - 2016-01-05 03:37 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-02-15 17:33 - 2016-01-05 03:37 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-02-15 17:33 - 2016-01-05 03:37 - 00234504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll
2016-02-15 17:33 - 2016-01-05 03:36 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-02-15 17:33 - 2016-01-05 03:33 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-02-15 17:33 - 2016-01-05 03:33 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-02-15 17:33 - 2016-01-05 03:33 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-02-15 17:33 - 2016-01-05 03:33 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll
2016-02-15 17:33 - 2016-01-05 03:33 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-02-15 17:33 - 2016-01-05 03:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-02-15 17:33 - 2016-01-05 03:27 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-02-15 17:33 - 2016-01-05 03:24 - 00796352 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-02-15 17:33 - 2016-01-05 03:23 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-02-15 17:33 - 2016-01-05 03:23 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-02-15 17:33 - 2016-01-05 03:23 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2016-02-15 17:33 - 2016-01-05 03:21 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-02-15 17:33 - 2016-01-05 03:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2016-02-15 17:33 - 2016-01-05 03:16 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL
2016-02-15 17:33 - 2016-01-05 02:54 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-02-15 17:33 - 2016-01-05 02:53 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2016-02-15 17:33 - 2016-01-05 02:50 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-02-15 17:33 - 2016-01-05 02:50 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-02-15 17:33 - 2016-01-05 02:49 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2016-02-15 17:33 - 2016-01-05 02:49 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-02-15 17:33 - 2016-01-05 02:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll
2016-02-15 17:33 - 2016-01-05 02:48 - 01009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL
2016-02-15 17:33 - 2016-01-05 02:48 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2016-02-15 17:33 - 2016-01-05 02:47 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-02-15 17:33 - 2016-01-05 02:47 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-02-15 17:33 - 2016-01-05 02:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-02-15 17:33 - 2016-01-05 02:45 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-02-15 17:33 - 2016-01-05 02:44 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2016-02-15 17:33 - 2016-01-05 02:43 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-02-15 17:33 - 2016-01-05 02:43 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-02-15 17:33 - 2016-01-05 02:43 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-02-15 17:33 - 2016-01-05 02:41 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2016-02-15 17:33 - 2016-01-05 02:41 - 00558592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-02-15 17:33 - 2016-01-05 02:40 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL
2016-02-15 17:33 - 2016-01-05 02:40 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll
2016-02-15 17:33 - 2016-01-05 02:39 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-02-15 17:33 - 2016-01-05 02:39 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-02-15 17:33 - 2016-01-05 02:39 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-02-15 17:33 - 2016-01-05 02:38 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-02-15 17:33 - 2016-01-05 02:36 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2016-02-15 17:33 - 2016-01-05 02:36 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-02-15 17:33 - 2016-01-05 02:30 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-02-15 17:33 - 2015-12-07 05:57 - 00973664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-02-15 17:33 - 2015-12-07 05:55 - 01281376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
__________________
Alt 28.02.2016, 11:30   #4
Lenani
 
TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los. - Standard

TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.


Hier der zweite Teil der FRST:

Code:
ATTFilter
2016-02-15 17:33 - 2015-12-07 05:48 - 01155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 01092456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 01065080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 01020096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00983464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00884256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00823264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00526856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00450904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00337840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-02-15 17:33 - 2015-12-07 05:47 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-02-15 17:33 - 2015-12-07 05:47 - 00898184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-02-15 17:33 - 2015-12-07 05:47 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-02-15 17:33 - 2015-12-07 05:46 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-02-15 17:33 - 2015-12-07 05:45 - 00264544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-02-15 17:33 - 2015-12-07 05:15 - 01035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll
2016-02-15 17:33 - 2015-12-07 05:10 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2016-02-15 17:33 - 2015-12-07 05:09 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2016-02-15 17:33 - 2015-12-07 05:06 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2016-02-15 17:33 - 2015-12-07 05:06 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-02-15 17:33 - 2015-12-07 05:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-02-15 17:33 - 2015-12-07 05:01 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-02-15 17:33 - 2015-12-07 05:00 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2016-02-15 17:33 - 2015-12-07 05:00 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2016-02-15 17:33 - 2015-12-07 04:59 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-02-15 17:33 - 2015-12-07 04:59 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-02-15 17:33 - 2015-12-07 04:59 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-02-15 17:33 - 2015-12-07 04:57 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-02-15 17:33 - 2015-12-07 04:57 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2016-02-15 17:33 - 2015-12-07 04:56 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-02-15 17:33 - 2015-12-07 04:56 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-02-15 17:33 - 2015-12-07 04:53 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2016-02-15 17:33 - 2015-12-07 04:50 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-02-15 17:33 - 2015-12-07 04:49 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-02-15 17:33 - 2015-12-07 04:45 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-02-15 17:33 - 2015-12-07 04:45 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-02-15 17:33 - 2015-12-07 04:45 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-02-15 17:33 - 2015-12-07 04:43 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2016-02-15 17:33 - 2015-12-07 04:41 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-02-15 17:33 - 2015-12-07 04:40 - 01995776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-02-15 17:33 - 2015-12-07 04:40 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-02-15 17:33 - 2015-12-07 04:33 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-02-15 17:33 - 2015-12-07 04:32 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2016-02-15 17:33 - 2015-12-01 08:12 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-02-15 17:33 - 2015-11-24 11:26 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-02-15 17:33 - 2015-11-24 10:37 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2016-02-15 17:33 - 2015-11-24 10:26 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-02-15 17:33 - 2015-11-24 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-02-15 17:33 - 2015-11-24 09:52 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-02-15 17:33 - 2015-11-24 09:49 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2016-02-15 17:33 - 2015-11-24 08:59 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-02-15 17:33 - 2015-11-24 08:57 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2016-02-15 17:33 - 2015-11-24 08:29 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-02-15 17:33 - 2015-11-24 08:04 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-02-15 17:33 - 2015-11-22 11:47 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-02-15 17:33 - 2015-11-22 11:41 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-02-15 17:33 - 2015-11-22 11:24 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-02-15 17:33 - 2015-11-22 11:14 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-02-15 17:33 - 2015-11-22 10:54 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2016-02-15 17:33 - 2015-11-22 10:43 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-02-15 17:33 - 2015-11-22 10:42 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2016-02-15 17:33 - 2015-11-22 10:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2016-02-15 17:33 - 2015-11-22 10:41 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-02-15 17:33 - 2015-11-22 10:39 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-02-15 17:33 - 2015-11-22 10:39 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-02-15 17:33 - 2015-11-22 10:38 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2016-02-15 17:33 - 2015-11-22 10:38 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-02-15 17:33 - 2015-11-22 10:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2016-02-15 17:33 - 2015-11-22 10:37 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2016-02-15 17:33 - 2015-11-22 10:37 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-02-15 17:33 - 2015-11-22 10:36 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2016-02-15 17:33 - 2015-11-22 10:34 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2016-02-15 17:33 - 2015-11-22 10:32 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2016-02-15 17:33 - 2015-11-22 10:31 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2016-02-15 17:33 - 2015-11-22 10:31 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-02-15 17:33 - 2015-11-22 10:28 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2016-02-15 17:33 - 2015-11-22 10:28 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2016-02-15 17:33 - 2015-11-22 10:27 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-02-15 17:33 - 2015-11-22 10:27 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-02-15 17:33 - 2015-11-22 10:26 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2016-02-15 17:33 - 2015-11-22 10:26 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2016-02-15 17:33 - 2015-11-22 10:26 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2016-02-15 17:33 - 2015-11-22 10:26 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-02-15 17:33 - 2015-11-22 10:20 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2016-02-15 17:33 - 2015-11-22 10:18 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2016-02-15 17:33 - 2015-11-22 10:18 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2016-02-15 17:33 - 2015-11-22 10:17 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2016-02-15 17:33 - 2015-11-22 10:11 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2016-02-15 17:33 - 2015-11-21 06:29 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-02-15 17:33 - 2015-11-21 06:07 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2016-02-15 17:33 - 2015-11-13 07:51 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2016-02-15 17:33 - 2015-11-13 07:43 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2016-02-15 17:33 - 2015-11-13 07:42 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2016-02-15 17:33 - 2015-11-13 07:33 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2016-02-15 17:33 - 2015-11-13 07:33 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2016-02-15 17:33 - 2015-11-13 07:32 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2016-02-15 17:33 - 2015-11-13 07:21 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2016-02-15 17:33 - 2015-11-13 07:21 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2016-02-15 17:33 - 2015-11-13 07:09 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2016-02-15 17:33 - 2015-11-13 06:58 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2016-02-15 17:33 - 2015-11-13 06:57 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-02-15 17:33 - 2015-11-13 06:55 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-02-15 17:33 - 2015-11-13 06:53 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-02-15 17:33 - 2015-11-13 06:49 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-02-15 17:33 - 2015-11-13 06:39 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-02-15 17:33 - 2015-11-13 06:27 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-02-15 17:33 - 2015-11-13 06:19 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-02-15 17:33 - 2015-11-05 13:05 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2016-02-15 17:33 - 2015-11-05 11:40 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-02-15 17:33 - 2015-11-05 11:25 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2016-02-15 17:33 - 2015-11-05 10:41 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-02-15 17:33 - 2015-11-05 10:10 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-02-15 17:33 - 2015-11-05 09:15 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-02-15 17:32 - 2016-01-27 06:55 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2016-02-15 17:32 - 2016-01-27 06:44 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-02-15 17:32 - 2016-01-27 06:44 - 00085320 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2016-02-15 17:32 - 2016-01-27 06:21 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
2016-02-15 17:32 - 2016-01-27 06:15 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll
2016-02-15 17:32 - 2016-01-27 06:13 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-02-15 17:32 - 2016-01-27 06:12 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-02-15 17:32 - 2016-01-27 06:11 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
2016-02-15 17:32 - 2016-01-27 06:10 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2016-02-15 17:32 - 2016-01-27 06:08 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll
2016-02-15 17:32 - 2016-01-27 06:07 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll
2016-02-15 17:32 - 2016-01-27 06:05 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-02-15 17:32 - 2016-01-27 06:05 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-02-15 17:32 - 2016-01-27 06:04 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2016-02-15 17:32 - 2016-01-27 06:03 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-02-15 17:32 - 2016-01-27 06:02 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2016-02-15 17:32 - 2016-01-27 05:59 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll
2016-02-15 17:32 - 2016-01-27 05:57 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-02-15 17:32 - 2016-01-27 05:50 - 01504768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-02-15 17:32 - 2016-01-27 05:50 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-02-15 17:32 - 2016-01-27 05:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll
2016-02-15 17:32 - 2016-01-27 05:32 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-02-15 17:32 - 2016-01-27 05:31 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2016-02-15 17:32 - 2016-01-16 07:23 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-02-15 17:32 - 2016-01-16 07:20 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2016-02-15 17:32 - 2016-01-16 06:46 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2016-02-15 17:32 - 2016-01-16 06:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll
2016-02-15 17:32 - 2016-01-16 06:44 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2016-02-15 17:32 - 2016-01-16 06:43 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttpcom.dll
2016-02-15 17:32 - 2016-01-16 06:42 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-02-15 17:32 - 2016-01-16 06:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscoreext.dll
2016-02-15 17:32 - 2016-01-16 06:41 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2016-02-15 17:32 - 2016-01-16 06:40 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll
2016-02-15 17:32 - 2016-01-16 06:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2016-02-15 17:32 - 2016-01-16 06:40 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasautou.exe
2016-02-15 17:32 - 2016-01-16 06:39 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\FilterDS.dll
2016-02-15 17:32 - 2016-01-16 06:38 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll
2016-02-15 17:32 - 2016-01-16 06:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-02-15 17:32 - 2016-01-16 06:36 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll
2016-02-15 17:32 - 2016-01-16 06:36 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll
2016-02-15 17:32 - 2016-01-16 06:35 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasadhlp.dll
2016-02-15 17:32 - 2016-01-16 06:34 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2016-02-15 17:32 - 2016-01-16 06:34 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttpcom.dll
2016-02-15 17:32 - 2016-01-16 06:33 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-02-15 17:32 - 2016-01-16 06:32 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe
2016-02-15 17:32 - 2016-01-16 06:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasautou.exe
2016-02-15 17:32 - 2016-01-16 06:30 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll
2016-02-15 17:32 - 2016-01-16 06:26 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-02-15 17:32 - 2016-01-16 06:25 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-02-15 17:32 - 2016-01-16 06:19 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-02-15 17:32 - 2016-01-16 06:11 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2016-02-15 17:32 - 2016-01-05 03:51 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-02-15 17:32 - 2016-01-05 03:51 - 01141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-02-15 17:32 - 2016-01-05 03:23 - 00119320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL
2016-02-15 17:32 - 2016-01-05 02:57 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll
2016-02-15 17:32 - 2016-01-05 02:57 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll
2016-02-15 17:32 - 2016-01-05 02:56 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2016-02-15 17:32 - 2016-01-05 02:52 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-02-15 17:32 - 2016-01-05 02:51 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-02-15 17:32 - 2016-01-05 02:51 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-02-15 17:32 - 2016-01-05 02:49 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2016-02-15 17:32 - 2016-01-05 02:48 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll
2016-02-15 17:32 - 2016-01-05 02:47 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2016-02-15 17:32 - 2016-01-05 02:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-02-15 17:32 - 2016-01-05 02:39 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2016-02-15 17:32 - 2015-12-07 05:49 - 00412512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2016-02-15 17:32 - 2015-12-07 05:48 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-02-15 17:32 - 2015-12-07 05:15 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2016-02-15 17:32 - 2015-12-07 05:09 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2016-02-15 17:32 - 2015-12-07 05:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2016-02-15 17:32 - 2015-12-07 05:07 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2016-02-15 17:32 - 2015-12-07 05:07 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2016-02-15 17:32 - 2015-12-07 05:06 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2016-02-15 17:32 - 2015-12-07 05:05 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-02-15 17:32 - 2015-12-07 05:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe
2016-02-15 17:32 - 2015-12-07 05:04 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-02-15 17:32 - 2015-12-07 05:04 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2016-02-15 17:32 - 2015-12-07 05:02 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-02-15 17:32 - 2015-12-07 05:01 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe
2016-02-15 17:32 - 2015-12-07 05:00 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-02-15 17:32 - 2015-12-07 04:59 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2016-02-15 17:32 - 2015-12-07 04:58 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-02-15 17:32 - 2015-12-07 04:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-02-15 17:32 - 2015-12-07 04:51 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-02-15 17:32 - 2015-12-07 04:39 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-02-15 17:32 - 2015-12-07 04:38 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2016-02-15 17:32 - 2015-11-24 11:01 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2016-02-15 17:32 - 2015-11-24 10:54 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2016-02-15 17:32 - 2015-11-24 10:53 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-02-15 17:32 - 2015-11-24 10:45 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2016-02-15 17:32 - 2015-11-24 10:19 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2016-02-15 17:32 - 2015-11-24 10:12 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2016-02-15 17:32 - 2015-11-24 09:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2016-02-15 17:32 - 2015-11-24 09:14 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2016-02-15 17:32 - 2015-11-22 11:41 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-02-15 17:32 - 2015-11-22 11:34 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2016-02-15 17:32 - 2015-11-22 11:33 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2016-02-15 17:32 - 2015-11-22 11:33 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2016-02-15 17:32 - 2015-11-22 11:33 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2016-02-15 17:32 - 2015-11-22 11:30 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-02-15 17:32 - 2015-11-22 11:25 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2016-02-15 17:32 - 2015-11-22 11:00 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-02-15 17:32 - 2015-11-22 11:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2016-02-15 17:32 - 2015-11-22 10:57 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2016-02-15 17:32 - 2015-11-22 10:57 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2016-02-15 17:32 - 2015-11-22 10:57 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2016-02-15 17:32 - 2015-11-22 10:57 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2016-02-15 17:32 - 2015-11-22 10:56 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-02-15 17:32 - 2015-11-22 10:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-02-15 17:32 - 2015-11-22 10:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2016-02-15 17:32 - 2015-11-22 10:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2016-02-15 17:32 - 2015-11-22 10:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2016-02-15 17:32 - 2015-11-22 10:55 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2016-02-15 17:32 - 2015-11-22 10:54 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2016-02-15 17:32 - 2015-11-22 10:54 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2016-02-15 17:32 - 2015-11-22 10:54 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2016-02-15 17:32 - 2015-11-22 10:54 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2016-02-15 17:32 - 2015-11-22 10:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-02-15 17:32 - 2015-11-22 10:54 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2016-02-15 17:32 - 2015-11-22 10:54 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2016-02-15 17:32 - 2015-11-22 10:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2016-02-15 17:32 - 2015-11-22 10:52 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2016-02-15 17:32 - 2015-11-22 10:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-02-15 17:32 - 2015-11-22 10:51 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2016-02-15 17:32 - 2015-11-22 10:51 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-02-15 17:32 - 2015-11-22 10:51 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2016-02-15 17:32 - 2015-11-22 10:51 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2016-02-15 17:32 - 2015-11-22 10:50 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2016-02-15 17:32 - 2015-11-22 10:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2016-02-15 17:32 - 2015-11-22 10:49 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2016-02-15 17:32 - 2015-11-22 10:48 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2016-02-15 17:32 - 2015-11-22 10:45 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2016-02-15 17:32 - 2015-11-22 10:45 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2016-02-15 17:32 - 2015-11-22 10:45 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2016-02-15 17:32 - 2015-11-22 10:45 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2016-02-15 17:32 - 2015-11-22 10:45 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2016-02-15 17:32 - 2015-11-22 10:45 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2016-02-15 17:32 - 2015-11-22 10:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2016-02-15 17:32 - 2015-11-22 10:44 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-02-15 17:32 - 2015-11-22 10:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-02-15 17:32 - 2015-11-22 10:43 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2016-02-15 17:32 - 2015-11-22 10:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2016-02-15 17:32 - 2015-11-22 10:42 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2016-02-15 17:32 - 2015-11-22 10:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2016-02-15 17:32 - 2015-11-22 10:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2016-02-15 17:32 - 2015-11-22 10:41 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2016-02-15 17:32 - 2015-11-22 10:40 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-02-15 17:32 - 2015-11-22 10:40 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2016-02-15 17:32 - 2015-11-22 10:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2016-02-15 17:32 - 2015-11-22 10:39 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-02-15 17:32 - 2015-11-22 10:39 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-02-15 17:32 - 2015-11-22 10:39 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-02-15 17:32 - 2015-11-22 10:39 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2016-02-15 17:32 - 2015-11-22 10:39 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-02-15 17:32 - 2015-11-22 10:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2016-02-15 17:32 - 2015-11-22 10:34 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2016-02-15 17:32 - 2015-11-22 10:34 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2016-02-15 17:32 - 2015-11-22 10:33 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2016-02-15 17:32 - 2015-11-22 10:29 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-02-15 17:32 - 2015-11-22 10:28 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2016-02-15 17:32 - 2015-11-22 10:28 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2016-02-15 17:32 - 2015-11-22 10:28 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-02-15 17:32 - 2015-11-22 10:28 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2016-02-15 17:32 - 2015-11-22 10:27 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-02-15 17:32 - 2015-11-22 10:27 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-02-15 17:32 - 2015-11-22 10:24 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2016-02-15 17:32 - 2015-11-22 10:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2016-02-15 17:32 - 2015-11-21 06:44 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2016-02-15 17:32 - 2015-11-13 07:55 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2016-02-15 17:32 - 2015-11-13 07:51 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2016-02-15 17:32 - 2015-11-13 07:51 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2016-02-15 17:32 - 2015-11-13 07:43 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2016-02-15 17:32 - 2015-11-13 07:43 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2016-02-15 17:32 - 2015-11-13 07:42 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2016-02-15 17:32 - 2015-11-13 07:33 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-02-15 17:32 - 2015-11-13 07:21 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2016-02-15 17:32 - 2015-11-13 07:21 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2016-02-15 17:32 - 2015-11-13 07:07 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-02-15 17:32 - 2015-11-13 07:06 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2016-02-15 17:32 - 2015-11-13 07:05 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2016-02-15 17:32 - 2015-11-13 07:05 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2016-02-15 17:32 - 2015-11-13 07:05 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2016-02-15 17:32 - 2015-11-13 07:05 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2016-02-15 17:32 - 2015-11-13 07:04 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-02-15 17:32 - 2015-11-13 07:04 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-02-15 17:32 - 2015-11-13 07:04 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2016-02-15 17:32 - 2015-11-13 07:03 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2016-02-15 17:32 - 2015-11-13 07:00 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2016-02-15 17:32 - 2015-11-13 06:59 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-02-15 17:32 - 2015-11-13 06:56 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2016-02-15 17:32 - 2015-11-13 06:40 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-02-15 17:32 - 2015-11-13 06:40 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2016-02-15 17:32 - 2015-11-13 06:34 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2016-02-15 17:32 - 2015-11-13 06:33 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-02-15 17:32 - 2015-11-13 06:30 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-02-15 17:32 - 2015-11-13 06:30 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-02-15 17:32 - 2015-11-13 06:23 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-02-15 17:32 - 2015-11-05 11:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2016-02-15 17:32 - 2015-11-05 11:08 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2016-02-15 17:32 - 2015-11-05 11:04 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-02-15 17:32 - 2015-11-05 11:00 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-02-15 17:32 - 2015-11-05 10:44 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-02-15 17:32 - 2015-11-05 10:03 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2016-02-15 17:32 - 2015-11-05 10:02 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2016-02-15 17:32 - 2015-11-05 09:59 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-02-15 17:32 - 2015-11-05 09:55 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2016-02-15 17:32 - 2015-11-05 09:42 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-02-15 17:28 - 2016-02-18 12:17 - 00000010 _____ C:\Users\Annika\AppData\Local\.DG212F11-EC8C-210D-DE1E-D9584D18D740
2016-02-15 17:28 - 2016-02-18 12:17 - 00000010 _____ C:\ProgramData\.D6E5339F-CB2B-32C1-CD2D-C0295C19C822
2016-02-15 17:16 - 2016-02-15 17:16 - 00000000 ____D C:\ProgramData\Extensis
2016-02-15 16:53 - 2016-02-15 16:53 - 00001414 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CC.lnk
2016-02-15 16:50 - 2016-02-15 16:50 - 00001075 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CC (64bit).lnk
2016-02-15 16:48 - 2016-02-19 10:15 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2016-02-15 16:48 - 2016-02-15 16:48 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-02-15 16:48 - 2016-02-15 16:48 - 00002114 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk
2016-02-15 16:39 - 2016-02-15 16:39 - 00001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InDesign CC 2015.lnk
2016-02-15 16:34 - 2016-02-15 16:34 - 00002199 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CC 2015.lnk
2016-02-15 16:30 - 2016-02-15 16:30 - 00001029 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom.lnk
2016-02-15 16:20 - 2016-02-16 12:13 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-02-15 16:20 - 2016-02-15 16:20 - 00001085 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015.lnk
2016-02-15 16:20 - 2016-02-15 16:20 - 00000000 ____D C:\Users\Annika\Documents\Adobe
2016-02-15 16:19 - 2016-02-15 16:50 - 00000000 ____D C:\Program Files\Adobe
2016-02-15 16:19 - 2016-02-15 16:38 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-02-15 16:13 - 2016-02-28 11:15 - 00000000 ___RD C:\Users\Annika\Creative Cloud Files
2016-02-15 16:13 - 2016-02-27 13:54 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-02-15 16:12 - 2016-02-15 16:12 - 00001298 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2016-02-15 16:11 - 2016-02-15 17:40 - 00000000 ____D C:\ProgramData\Adobe
2016-02-15 16:11 - 2016-02-15 16:53 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-02-15 16:08 - 2016-02-28 11:18 - 00000000 ____D C:\Users\Annika\AppData\Local\Adobe
2016-02-15 16:08 - 2016-02-15 16:08 - 00692928 _____ (Adobe Systems Incorporated) C:\Users\Annika\Downloads\CreativeCloudSet-Up.exe
2016-02-15 15:37 - 2016-02-15 15:37 - 00002854 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2016-02-15 15:37 - 2016-02-15 15:37 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-02-15 15:37 - 2016-02-15 15:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-02-15 15:37 - 2016-02-15 15:37 - 00000000 ____D C:\Program Files\CCleaner
2016-02-15 15:36 - 2016-02-15 15:36 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2016-02-15 15:34 - 2016-02-16 11:55 - 00000000 ____D C:\Program Files (x86)\Rainlendar2
2016-02-15 15:23 - 2016-02-15 15:23 - 00002583 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2016-02-15 15:23 - 2016-02-15 15:23 - 00002579 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2016-02-15 15:23 - 2016-02-15 15:23 - 00002558 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2016-02-15 15:23 - 2016-02-15 15:23 - 00002533 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2016-02-15 15:23 - 2016-02-15 15:23 - 00002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2016-02-15 15:23 - 2016-02-15 15:23 - 00002497 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2016-02-15 15:23 - 2016-02-15 15:23 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2016-02-15 15:23 - 2016-02-15 15:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools
2016-02-15 15:21 - 2016-02-24 11:21 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-02-15 15:21 - 2016-02-15 15:21 - 03206344 _____ (Microsoft Corporation) C:\Users\Annika\Downloads\Setup.X86.de-DE_O365HomePremRetail_885e26a7-471a-412b-8df1-b0e831bd3451_TX_DB_.exe
2016-02-15 15:21 - 2016-02-15 15:21 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-02-15 15:19 - 2016-02-15 15:19 - 00000000 ____D C:\Users\Annika\AppData\Local\MicrosoftEdge
2016-02-15 15:16 - 2016-02-24 17:07 - 00000000 ____D C:\Users\Public\Creative
2016-02-15 15:15 - 2016-02-15 15:15 - 00000000 ____D C:\Users\Annika\AppData\Local\Comms
2016-02-15 15:13 - 2016-02-28 11:15 - 00000000 ___RD C:\Users\Annika\OneDrive
2016-02-15 15:13 - 2016-02-15 15:13 - 00002386 _____ C:\Users\Annika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-02-15 15:13 - 2016-02-15 15:13 - 00001047 _____ C:\Users\Annika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optionale Features.lnk
2016-02-15 15:13 - 2016-02-15 15:13 - 00000000 ____D C:\Users\Annika\AppData\Local\ActiveSync
2016-02-15 15:13 - 2016-02-15 15:13 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-02-15 15:13 - 2015-10-29 19:43 - 05739520 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2016-02-15 15:13 - 2015-10-29 19:43 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2016-02-15 15:13 - 2015-10-29 19:41 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2016-02-15 15:13 - 2015-10-29 19:25 - 06359040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2016-02-15 15:13 - 2015-10-29 19:24 - 04847616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2016-02-15 15:12 - 2016-02-28 11:15 - 00022280 _____ (ASRock Incorporation) C:\WINDOWS\SysWOW64\Drivers\AsrAutoChkUpdDrv.sys
2016-02-15 15:12 - 2016-02-15 15:12 - 00000000 ____D C:\Users\Annika\AppData\Local\Publishers
2016-02-15 15:11 - 2016-02-21 13:05 - 00000000 ____D C:\Users\Annika\AppData\Roaming\Adobe
2016-02-15 15:11 - 2016-02-19 11:29 - 00000000 ____D C:\Users\Annika\AppData\Local\Packages
2016-02-15 15:11 - 2016-02-16 11:53 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-02-15 15:11 - 2016-02-15 15:11 - 00000020 ___SH C:\Users\Annika\ntuser.ini
2016-02-15 15:11 - 2016-02-15 15:11 - 00000000 ____D C:\Users\Annika\AppData\Local\TileDataLayer
2016-02-15 15:07 - 2016-02-27 13:53 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-02-15 15:07 - 2016-02-15 15:07 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 ____D C:\ProgramData\USOShared
2016-02-15 15:06 - 2016-02-15 15:06 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-02-15 15:06 - 2016-02-15 15:06 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
2016-02-15 15:06 - 2016-02-15 15:06 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
2016-02-15 15:06 - 2016-02-15 15:06 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2016-02-15 15:05 - 2016-02-27 14:00 - 02089590 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-15 15:05 - 2016-02-26 10:58 - 00000000 ____D C:\Users\Annika
2016-02-15 15:05 - 2016-02-15 15:15 - 00000000 ____D C:\Program Files\Common Files\logishrd
2016-02-15 15:05 - 2016-02-15 15:05 - 01989310 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Vorlagen
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Startmenü
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Netzwerkumgebung
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Lokale Einstellungen
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Eigene Dateien
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Druckumgebung
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Documents\Eigene Videos
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Documents\Eigene Musik
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Documents\Eigene Bilder
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\AppData\Local\Verlauf
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\AppData\Local\Anwendungsdaten
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Anwendungsdaten
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 ___HD C:\ProgramData\CanonBJ
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-02-15 15:05 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2016-02-15 15:04 - 2016-02-27 11:05 - 00336880 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-02-15 15:04 - 2016-02-18 12:16 - 00000000 ___DC C:\WINDOWS\Panther
2016-02-15 15:03 - 2016-02-15 15:03 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-02-15 15:03 - 2016-02-15 15:03 - 00000000 ____D C:\Windows.old
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\WINDOWS\system32\msmq
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\Program Files\MSBuild
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\inetpub
2016-02-15 15:02 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2016-02-15 15:02 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-02-15 15:02 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2016-02-15 15:02 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-02-15 15:02 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2016-02-15 15:02 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-02-15 15:02 - 2013-08-26 05:00 - 00391168 _____ (CANON INC.) C:\WINDOWS\system32\CNMLMC4.DLL
2016-02-15 14:52 - 2016-02-15 14:52 - 06828320 _____ (Piriform Ltd) C:\Users\Annika\Downloads\ccsetup_514.exe
2016-02-15 14:50 - 2016-02-15 15:07 - 00010447 _____ C:\WINDOWS\diagerr.xml
2016-02-15 14:50 - 2016-02-15 15:07 - 00009528 _____ C:\WINDOWS\diagwrn.xml
2016-02-15 14:50 - 2016-02-15 14:59 - 00000000 ___HD C:\$WINDOWS.~BT
2016-02-15 14:49 - 2016-02-15 14:49 - 00000000 ____D C:\ESD
2016-02-15 14:44 - 2016-02-15 14:44 - 00000000 ___HD C:\$Windows.~WS
2016-02-15 14:37 - 2016-02-15 14:37 - 00000000 ____D C:\Users\Annika\AppData\Roaming\ATI
2016-02-15 14:37 - 2016-02-15 14:37 - 00000000 ____D C:\Users\Annika\AppData\Local\ATI
2016-02-15 14:36 - 2016-02-15 14:36 - 07635472 _____ (Microsoft Corporation) C:\Users\Annika\Downloads\GetWindows10-sds_____________.exe
2016-02-15 14:35 - 2016-02-27 13:53 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin
2016-02-15 14:35 - 2016-02-15 14:35 - 00000000 _____ C:\WINDOWS\ativpsrm.bin
2016-02-15 14:34 - 2016-02-24 11:26 - 00004296 _____ C:\WINDOWS\System32\Tasks\AMD Updater
2016-02-15 14:30 - 2016-02-28 11:15 - 00000000 ____D C:\Users\Annika\AppData\Roaming\Raptr
2016-02-15 14:30 - 2016-02-18 12:16 - 00000000 ____D C:\Program Files (x86)\Raptr
2016-02-15 14:30 - 2016-02-16 12:13 - 00000000 ____D C:\Users\Annika\AppData\Local\AMD
2016-02-15 14:30 - 2016-02-15 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2016-02-15 14:30 - 2016-02-15 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2016-02-15 14:30 - 2016-02-15 14:30 - 00000000 ____D C:\Users\Annika\AppData\Roaming\library_dir
2016-02-15 14:29 - 2016-02-24 11:25 - 00000000 ____D C:\Program Files\AMD
2016-02-15 14:29 - 2016-02-15 15:06 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2016-02-15 14:26 - 2016-02-24 11:24 - 00000000 ____D C:\AMD
2016-02-15 14:22 - 2016-02-15 14:22 - 00000000 ____D C:\Users\Annika\AppData\Local\Intel_Corporation
2016-02-15 14:18 - 2016-02-15 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros
2016-02-15 14:18 - 2016-02-15 14:18 - 00000000 ____D C:\ProgramData\Qualcomm
2016-02-15 14:17 - 2016-02-15 14:17 - 00000000 ____D C:\Program Files\Qualcomm Atheros
2016-02-15 14:06 - 2016-02-28 11:15 - 00003084 _____ C:\WINDOWS\System32\Tasks\AsrKM
2016-02-15 13:46 - 2016-02-28 11:15 - 00003036 _____ C:\WINDOWS\System32\Tasks\AsrSP.exe
2016-02-15 13:46 - 2016-02-15 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Killer Networking
2016-02-15 13:46 - 2016-02-15 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fatal1ty Utility
2016-02-15 13:46 - 2016-02-15 14:18 - 00000000 ____D C:\ProgramData\Killer
2016-02-15 13:46 - 2016-02-15 13:46 - 00022280 _____ (ASRock Incorporation) C:\WINDOWS\SysWOW64\Drivers\AsrDrv101.sys
2016-02-15 13:46 - 2016-02-15 13:46 - 00001309 _____ C:\Users\Public\Desktop\F-Stream Tuning.lnk
2016-02-15 13:46 - 2016-02-15 13:46 - 00001048 _____ C:\Users\Public\Desktop\ASRock SmartConnect.lnk
2016-02-15 13:46 - 2016-02-15 13:46 - 00000000 ____D C:\WINDOWS\ASRock
2016-02-15 13:46 - 2016-02-15 13:46 - 00000000 ____D C:\Program Files\Killer Networking
2016-02-15 13:46 - 2016-02-15 13:46 - 00000000 ____D C:\Program Files\ASRock Utility
2016-02-15 13:46 - 2016-02-15 13:46 - 00000000 ____D C:\Program Files (x86)\Fatal1ty Utility
2016-02-15 13:46 - 2014-07-31 16:17 - 00609544 _____ C:\WINDOWS\system32\USBKeyCredentialProvider.dll
2016-02-15 13:46 - 2014-06-30 15:10 - 00020232 _____ (ASRock Inc.) C:\WINDOWS\system32\Drivers\AsrHidFilter.sys
2016-02-15 13:46 - 2013-08-02 16:39 - 00040200 _____ (ASRock Inc.) C:\WINDOWS\system32\Drivers\AsrRamDisk.sys
2016-02-15 13:46 - 2011-11-07 10:13 - 00017192 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\AsrAppCharger.sys
2016-02-15 13:42 - 2016-02-15 13:42 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2016-02-15 13:41 - 2016-02-15 15:06 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-02-15 13:41 - 2016-02-15 14:14 - 00000000 ____D C:\ProgramData\Intel
2016-02-15 13:41 - 2016-02-15 13:41 - 00000000 ____D C:\Users\Annika\AppData\Roaming\Intel Corporation
2016-02-15 13:40 - 2016-02-15 13:40 - 00000000 ____D C:\Users\Annika\Intel
2016-02-15 13:39 - 2016-02-15 15:06 - 00000000 ____D C:\Program Files\Intel
2016-02-15 13:36 - 2012-07-26 03:36 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wdfres.dll
2016-02-15 13:36 - 2012-06-02 15:35 - 00000003 _____ C:\WINDOWS\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2016-02-15 13:35 - 2016-02-15 13:35 - 00000000 ____D C:\Users\Annika\AppData\Roaming\Avira
2016-02-15 13:30 - 2016-02-15 13:30 - 00000000 ____D C:\Users\Annika\AppData\Roaming\Mozilla
2016-02-15 13:29 - 2016-02-18 11:29 - 00146704 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2016-02-15 13:29 - 2016-02-15 15:13 - 00135880 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2016-02-15 13:29 - 2016-02-15 15:13 - 00073032 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2016-02-15 13:29 - 2016-02-15 15:13 - 00035488 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2016-02-15 13:28 - 2016-02-24 11:25 - 00000000 ____D C:\ProgramData\Package Cache
2016-02-15 13:28 - 2016-02-21 12:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-02-15 13:28 - 2016-02-21 12:54 - 00000000 ____D C:\Program Files (x86)\Avira
2016-02-15 13:28 - 2016-02-18 12:11 - 00001289 _____ C:\Users\Public\Desktop\Avira Launcher.lnk
2016-02-15 13:28 - 2016-02-18 12:11 - 00000000 ____D C:\ProgramData\Avira
2016-02-15 13:27 - 2016-02-28 11:15 - 00003022 _____ C:\WINDOWS\System32\Tasks\AsrAPPShop
2016-02-15 13:27 - 2016-02-15 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASRock Utility
2016-02-15 13:27 - 2016-02-15 13:46 - 00000000 ____D C:\Program Files (x86)\ASRock Utility
2016-02-15 13:27 - 2016-02-15 13:27 - 00001198 _____ C:\Users\Public\Desktop\APP Shop.lnk
2016-02-15 13:27 - 2016-02-15 13:27 - 00000000 ____D C:\ProgramData\ASRock
2016-02-15 13:25 - 2016-02-15 13:25 - 00000000 ____D C:\Users\Annika\Downloads\APPShop(v1.0.22)
2016-02-15 13:22 - 2016-02-15 13:46 - 00000000 ____D C:\Program Files (x86)\Intel
2016-02-15 13:22 - 2016-02-15 13:22 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2016-02-15 13:22 - 2016-02-15 13:22 - 00000000 ____D C:\Intel
2016-02-15 13:20 - 2016-02-24 17:09 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-02-15 13:20 - 2016-02-15 13:27 - 00057952 _____ C:\Users\Annika\AppData\Local\GDIPFONTCACHEV1.DAT
2016-02-15 13:19 - 2016-02-15 14:18 - 00002783 _____ C:\Users\Public\Desktop\Killer Network Manager.lnk
2016-02-15 13:18 - 2016-02-15 14:17 - 00000000 _____ C:\Users\Annika\AppData\Local\Driver_LOM_8161Present.flag
2016-02-15 13:18 - 2016-02-15 13:46 - 00000000 ____D C:\ProgramData\Downloaded Installations
2016-02-15 13:16 - 2016-02-28 11:15 - 00001106 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-15 13:16 - 2016-02-27 17:25 - 00001110 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-15 13:16 - 2016-02-19 22:26 - 00002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-15 13:16 - 2016-02-19 22:26 - 00002258 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-02-15 13:16 - 2016-02-15 15:52 - 00000000 ____D C:\Users\Annika\AppData\Local\Google
2016-02-15 13:16 - 2016-02-15 15:07 - 00004216 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-15 13:16 - 2016-02-15 15:07 - 00003964 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-15 13:16 - 2016-02-15 14:08 - 00000000 ____D C:\Users\Annika\Downloads\Setup
2016-02-15 13:16 - 2016-02-15 13:16 - 00000000 ____D C:\Program Files (x86)\Google
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Vorlagen
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Startmenü
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Netzwerkumgebung
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Lokale Einstellungen
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Eigene Dateien
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Druckumgebung
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Videos
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Musik
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Bilder
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Verlauf
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Anwendungsdaten
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Programme
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\ProgramData\Vorlagen
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\ProgramData\Startmenü
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\ProgramData\Favoriten
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\ProgramData\Dokumente
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Dokumente und Einstellungen
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 ____D C:\Users\Annika\AppData\Local\VirtualStore
2016-02-15 13:04 - 2011-04-12 08:54 - 00000000 ____D C:\Users\Annika\AppData\Roaming\Media Center Programs
2016-02-03 17:14 - 2016-02-03 17:14 - 00118608 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2016-02-03 17:13 - 2016-02-03 17:13 - 00458472 _____ C:\WINDOWS\system32\amdmiracast.dll
2016-02-03 17:13 - 2016-02-03 17:13 - 00141792 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2016-02-03 17:13 - 2016-02-03 17:13 - 00128384 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2016-02-03 17:13 - 2016-02-03 17:13 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2016-02-03 17:13 - 2016-02-03 17:13 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2016-02-03 17:13 - 2016-02-03 17:13 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2016-02-03 17:13 - 2016-02-03 17:13 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2016-02-03 17:12 - 2016-02-03 17:12 - 10963496 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll
2016-02-03 17:12 - 2016-02-03 17:12 - 00120656 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll
2016-02-03 17:09 - 2016-02-03 17:09 - 00296648 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdacpksd.sys
2016-02-03 17:01 - 2016-02-03 17:01 - 49984512 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll
2016-02-03 17:01 - 2016-02-03 17:01 - 00235008 _____ C:\WINDOWS\system32\clinfo.exe
2016-02-03 16:58 - 2016-02-03 16:58 - 00065024 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2016-02-03 16:58 - 2016-02-03 16:58 - 00059392 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2016-02-03 16:57 - 2016-02-03 16:57 - 27596800 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl64.dll
2016-02-03 16:35 - 2016-02-03 16:35 - 06643200 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle64.dll
2016-02-03 16:35 - 2016-02-03 16:35 - 00677888 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2016-02-03 16:35 - 2016-02-03 16:35 - 00562688 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2016-02-03 16:35 - 2016-02-03 16:35 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll
2016-02-03 16:35 - 2016-02-03 16:35 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll
2016-02-03 16:30 - 2016-02-03 16:30 - 05223936 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmantle32.dll
2016-02-03 16:27 - 2016-02-03 16:27 - 00134656 _____ C:\WINDOWS\system32\amdhdl64.dll
2016-02-03 16:27 - 2016-02-03 16:27 - 00123392 _____ C:\WINDOWS\SysWOW64\amdhdl32.dll
2016-02-03 16:26 - 2016-02-03 16:26 - 31378432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll
2016-02-03 16:26 - 2016-02-03 16:26 - 00096256 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll
2016-02-03 16:26 - 2016-02-03 16:26 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll
2016-02-03 16:25 - 2016-02-03 16:25 - 08007680 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll
2016-02-03 16:24 - 2016-02-03 16:24 - 09803264 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll
2016-02-03 16:24 - 2016-02-03 16:24 - 00865280 _____ (AMD) C:\WINDOWS\system32\coinst_15.30.dll
2016-02-03 16:23 - 2016-02-03 16:23 - 15711744 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll
2016-02-03 16:23 - 2016-02-03 16:23 - 00685672 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb
2016-02-03 16:23 - 2016-02-03 16:23 - 00685672 _____ C:\WINDOWS\system32\atiapfxx.blb
2016-02-03 16:23 - 2016-02-03 16:23 - 00367104 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2016-02-03 16:23 - 2016-02-03 16:23 - 00062464 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll
2016-02-03 16:23 - 2016-02-03 16:23 - 00055808 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll
2016-02-03 16:23 - 2016-02-03 16:23 - 00052224 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll
2016-02-03 16:23 - 2016-02-03 16:23 - 00049152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll
2016-02-03 16:22 - 2016-02-03 16:22 - 14302208 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll
2016-02-03 16:21 - 2016-02-03 16:21 - 00050688 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll
2016-02-03 16:21 - 2016-02-03 16:21 - 00039424 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll
2016-02-03 16:20 - 2016-02-03 16:20 - 25841152 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll
2016-02-03 16:19 - 2016-02-03 16:19 - 03437632 _____ C:\WINDOWS\system32\atiumd6a.cap
2016-02-03 16:16 - 2016-02-03 16:16 - 00561664 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2016-02-03 16:16 - 2016-02-03 16:16 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2016-02-03 16:16 - 2016-02-03 16:16 - 00246272 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2016-02-03 16:16 - 2016-02-03 16:16 - 00224256 _____ C:\WINDOWS\system32\dgtrayicon.exe
2016-02-03 16:16 - 2016-02-03 16:16 - 00209920 _____ C:\WINDOWS\system32\GameManager64.dll
2016-02-03 16:16 - 2016-02-03 16:16 - 00204800 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2016-02-03 16:16 - 2016-02-03 16:16 - 00189952 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2016-02-03 16:16 - 2016-02-03 16:16 - 00186368 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2016-02-03 16:16 - 2016-02-03 16:16 - 00162304 _____ C:\WINDOWS\system32\atieah64.exe
2016-02-03 16:16 - 2016-02-03 16:16 - 00145408 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2016-02-03 16:16 - 2016-02-03 16:16 - 00078336 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2016-02-03 16:15 - 2016-02-03 16:15 - 00190976 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll
2016-02-03 16:14 - 2016-02-03 16:14 - 03471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap
2016-02-03 16:11 - 2016-02-03 16:11 - 01272832 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2016-02-03 16:11 - 2016-02-03 16:11 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2016-02-03 16:10 - 2016-02-03 16:10 - 00941568 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2016-02-03 16:10 - 2016-02-03 16:10 - 00157696 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2016-02-03 16:10 - 2016-02-03 16:10 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2016-02-03 16:10 - 2016-02-03 16:10 - 00075776 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll
2016-02-03 16:10 - 2016-02-03 16:10 - 00070144 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll
2016-02-03 16:10 - 2016-02-03 16:10 - 00070144 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll
2016-02-03 16:10 - 2016-02-03 16:10 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
2016-02-03 16:09 - 2016-02-03 16:09 - 00195072 _____ C:\WINDOWS\system32\hsa-thunk64.dll
2016-02-03 16:09 - 2016-02-03 16:09 - 00174592 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll
2016-02-03 10:35 - 2016-02-03 10:35 - 02412544 _____ C:\WINDOWS\system32\amdacpusl.pdb
2016-02-03 10:26 - 2016-02-03 10:26 - 00364544 _____ (Advanced Micro Devices) C:\WINDOWS\system32\amdacpusl.dll
2016-02-03 10:26 - 2016-02-03 10:26 - 00306176 _____ C:\WINDOWS\system32\amdacpusl.pdb.pub
2016-02-03 10:26 - 2016-02-03 10:26 - 00248832 _____ (Advanced Micro Devices) C:\WINDOWS\SysWOW64\amdacpusl.dll
2016-01-31 09:10 - 2016-01-31 09:10 - 00635120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp140.dll
2016-01-31 09:10 - 2016-01-31 09:10 - 00390408 _____ (Microsoft Corporation) C:\WINDOWS\system32\vccorlib140.dll
2016-01-31 09:10 - 2016-01-31 09:10 - 00333080 _____ (Microsoft Corporation) C:\WINDOWS\system32\concrt140.dll
2016-01-31 09:10 - 2016-01-31 09:10 - 00088816 _____ (Microsoft Corporation) C:\WINDOWS\system32\vcruntime140.dll
2016-01-31 07:17 - 2016-01-31 07:17 - 00439536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp140.dll
2016-01-31 07:17 - 2016-01-31 07:17 - 00267016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vccorlib140.dll
2016-01-31 07:17 - 2016-01-31 07:17 - 00243480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\concrt140.dll
2016-01-31 07:17 - 2016-01-31 07:17 - 00085232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vcruntime140.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-02-27 14:00 - 2015-10-30 19:35 - 00889046 _____ C:\WINDOWS\system32\perfh007.dat
2016-02-27 14:00 - 2015-10-30 19:35 - 00197628 _____ C:\WINDOWS\system32\perfc007.dat
2016-02-27 14:00 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-02-27 13:53 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-02-27 12:48 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2016-02-27 12:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-02-27 11:11 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-02-26 10:35 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-02-24 11:22 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-02-22 15:08 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-02-21 12:33 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SchCache
2016-02-19 11:39 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2016-02-18 12:16 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MsDtc
2016-02-16 11:56 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat
2016-02-15 21:44 - 2015-10-30 19:44 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-02-15 21:44 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-02-15 21:44 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-02-15 15:21 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-02-15 15:13 - 2015-10-30 19:36 - 00000000 ____D C:\WINDOWS\OCR
2016-02-15 15:12 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2016-02-15 15:12 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2016-02-15 15:07 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media
2016-02-15 15:07 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries
2016-02-15 15:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-02-15 15:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2016-02-15 15:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2016-02-15 15:07 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate
2016-02-15 15:07 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT
2016-02-15 15:07 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-02-15 15:06 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2016-02-15 15:06 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\DigitalLocker
2016-02-15 15:06 - 2015-10-30 08:24 - 00000000 __SHD C:\Program Files\Windows Sidebar
2016-02-15 15:06 - 2015-10-30 08:24 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2016-02-15 15:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2016-02-15 15:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2016-02-15 15:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-02-15 15:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\IME
2016-02-15 15:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\schemas
2016-02-15 15:06 - 2011-04-12 08:54 - 00000000 ___RD C:\Users\Public\Recorded TV
2016-02-15 15:06 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Microsoft Games
2016-02-15 15:06 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\DVD Maker
2016-02-15 15:06 - 2009-07-14 04:20 - 00000000 ____D C:\Users\Default.migrated
2016-02-15 15:05 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-02-15 15:04 - 2015-10-30 19:55 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2016-02-15 15:04 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-02-15 15:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2016-02-15 15:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2016-02-15 15:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI
2016-02-15 15:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2016-02-15 15:02 - 2015-10-30 08:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2016-02-15 15:02 - 2015-10-30 08:19 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2016-02-15 15:02 - 2015-10-30 08:19 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2016-02-15 15:02 - 2015-10-30 08:19 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2016-02-15 15:02 - 2015-10-30 08:19 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2016-02-15 15:02 - 2015-10-30 08:19 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2016-02-15 15:02 - 2015-10-30 08:18 - 01417728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2016-02-15 15:02 - 2015-10-30 08:18 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2016-02-15 15:02 - 2015-10-30 08:18 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2016-02-15 15:02 - 2015-10-30 08:18 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2016-02-15 15:02 - 2015-10-30 08:18 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2016-02-15 15:02 - 2015-10-30 08:18 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2016-02-15 15:02 - 2015-10-30 08:18 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2016-02-15 15:02 - 2015-10-30 08:18 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2016-02-15 15:02 - 2015-10-30 08:18 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2016-02-15 15:00 - 2009-07-14 05:45 - 00021856 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-15 15:00 - 2009-07-14 05:45 - 00021856 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-15 13:02 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-02-03 20:01 - 2015-10-30 08:26 - 00828920 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-02-03 20:01 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-03 17:14 - 2015-12-16 20:06 - 00110344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2016-02-03 17:13 - 2015-12-16 20:06 - 00152056 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 13395360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 11098920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 09176928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 09017808 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 08089248 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 01503416 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 01235128 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 00133528 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 00102616 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll
2016-02-03 17:06 - 2015-12-16 20:07 - 23976448 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys
2016-02-03 16:59 - 2015-12-16 20:07 - 41510912 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll
2016-02-03 16:57 - 2015-12-16 20:07 - 22348288 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl12cl.dll
2016-02-03 16:10 - 2015-12-16 20:07 - 00941568 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2016-02-03 16:10 - 2015-12-16 20:07 - 00672768 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys
2016-02-03 16:10 - 2015-12-16 20:07 - 00142336 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-02-21 13:05 - 2016-02-26 12:18 - 0000033 _____ () C:\Users\Annika\AppData\Roaming\AdobeWLCMCache.dat
2016-02-16 13:18 - 2016-02-16 13:18 - 0000010 _____ () C:\Users\Annika\AppData\Local\.C3F2FH85-G3D2-2F02-D5CH-7D3D8C553E56
2016-02-15 17:28 - 2016-02-18 12:17 - 0000010 _____ () C:\Users\Annika\AppData\Local\.DG212F11-EC8C-210D-DE1E-D9584D18D740
2016-02-18 12:30 - 2016-02-18 12:30 - 0001456 _____ () C:\Users\Annika\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2016-02-19 12:37 - 2016-02-27 16:43 - 0120432 _____ () C:\Users\Annika\AppData\Local\ars.cache
2016-02-19 12:37 - 2016-02-27 16:43 - 0515530 _____ () C:\Users\Annika\AppData\Local\census.cache
2016-02-15 13:18 - 2016-02-15 14:17 - 0000000 _____ () C:\Users\Annika\AppData\Local\Driver_LOM_8161Present.flag
2016-02-19 12:27 - 2016-02-19 12:27 - 0000036 _____ () C:\Users\Annika\AppData\Local\housecall.guid.cache
2016-02-21 11:18 - 2016-02-21 11:18 - 0007597 _____ () C:\Users\Annika\AppData\Local\Resmon.ResmonCfg
2016-02-15 17:28 - 2016-02-18 12:17 - 0000010 _____ () C:\ProgramData\.D6E5339F-CB2B-32C1-CD2D-C0295C19C822
2016-02-16 13:18 - 2016-02-16 13:18 - 0000010 _____ () C:\ProgramData\.F4G6EEC4-B493-3E31-C6BG-8C6C9B764D36
2016-02-16 14:31 - 2016-02-16 14:31 - 0000043 _____ () C:\ProgramData\.SF170
2016-02-16 13:47 - 2016-02-16 13:47 - 0000043 _____ () C:\ProgramData\.ST160

Einige Dateien in TEMP:
====================
C:\Users\Annika\AppData\Local\Temp\avgnt.exe
C:\Users\Annika\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-02-25 15:27

==================== Ende von FRST.txt ============================
Erster Teil Addition:

HTML-Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-02-2016
durchgeführt von Annika (2016-02-28 11:19:31)
Gestartet von C:\Users\Annika\Desktop
Windows 10 Home Version 1511 (X64) (2016-02-15 14:11:56)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-318997953-1686202031-3206138427-500 - Administrator - Disabled)
Annika (S-1-5-21-318997953-1686202031-3206138427-1000 - Administrator - Enabled) => C:\Users\Annika
DefaultAccount (S-1-5-21-318997953-1686202031-3206138427-503 - Limited - Disabled)
Gast (S-1-5-21-318997953-1686202031-3206138427-501 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

ACP Application (Version: 2016.0203.1025.57 - Advanced Micro Devices, Inc.) Hidden
Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 15.010.20059 - Adobe Systems Incorporated)
Adobe Bridge CC (64 Bit) (HKLM-x32\...\{359F8007-6486-429C-A8C5-D67F6897C88C}) (Version: 6.2 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.5.1.209 - Adobe Systems Incorporated)
Adobe Extension Manager CC (HKLM-x32\...\{244FD30F-63F1-49B9-9D98-1150FF4FFCB1}) (Version: 7.3.2 - Adobe Systems Incorporated)
Adobe Illustrator CC 2015 (HKLM-x32\...\ILST_19_2_1) (Version: 19.2.1 - Adobe Systems Incorporated)
Adobe InDesign CC 2015 (HKLM-x32\...\{DBFD0312-6E55-1014-8952-E78D43BC0147}) (Version: 11.2.0.100 - Adobe Systems Incorporated)
Adobe Lightroom (HKLM-x32\...\{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.4 - Adobe Systems Incorporated)
Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.1.2 - Adobe Systems Incorporated)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 5.00 - Advanced Micro Devices, Inc.)
AOMEI Backupper Professional (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF55E6C09D}_is1) (Version:  - AOMEI Technology Co., Ltd.)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.15.141 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{3b87484e-d70b-4b4f-ad59-2ae89571e2cf}) (Version: 1.1.56.9119 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.56.9119 - Avira Operations GmbH & Co. KG) Hidden
Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 2.1.12.1147 - Avira Operations GmbH & Co. KG)
Catalyst Control Center Next Localization BR (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.14 - Piriform)
Dolby Digital Live Pack (HKLM-x32\...\Dolby Digital Live Pack) (Version: 3.03 - Creative Technology Limited)
DTS Connect Pack (HKLM-x32\...\DTS Connect Pack) (Version: 1.00 - Creative Technology Limited)
Extensis Suitcase Fusion 6 (HKLM-x32\...\{4D39B605-C4D2-4391-B47F-41033BD1E570}) (Version: 17.2.2 - 2016 Celartem, Inc. d.b.a Extensis All rights reserved)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.116 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.13.258 - SurfRight B.V.)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1153 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{7228EFBA-512B-4EB3-B8A7-E2C331475DF4}) (Version: 5.0.10.2808 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Killer Bandwidth Control Filter Driver (Version: 1.1.56.1651 - Rivet Networks) Hidden
Killer E220x Drivers (Version: 1.1.56.1651 - Rivet Networks) Hidden
Killer Network Manager (Version: 1.1.56.1651 - Rivet Networks) Hidden
Killer Performance Suite (HKLM-x32\...\{DB8A465E-67BE-4450-9C9A-FECEA6222B95}) (Version: 1.1.56.1651 - Rivet Networks)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.6568.2025 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.6528.1011 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.6528.1011 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.6528.1011 - Microsoft Corporation) Hidden
Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.0.30.1259 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer E220x Drivers (Version: 1.0.30.1259 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer Network Manager Suite (HKLM-x32\...\{FE5DFB80-6937-4154-A2C7-EF845C1301F8}) (Version: 1.0.30.1259 - Qualcomm Atheros)
Qualcomm Atheros Network Manager (Version: 1.0.30.1259 - Qualcomm Atheros) Hidden
Rainlendar2 (remove only) (HKLM-x32\...\Rainlendar2) (Version:  - )
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Sound Blaster Z-Series (HKLM-x32\...\{9E61ABC7-B276-46F1-808F-A8A4EF0D57DF}) (Version: 1.01.03 - Creative Technology Limited)
Sound Blaster Z-Series Extras (HKLM-x32\...\{9D9DB4BA-E352-4AC8-AD2B-B10104F5AB80}) (Version: 1.0 - Creative Technology Limited)
Spyder4Express (HKLM-x32\...\Spyder4Express) (Version:  - )
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.2 - VideoLAN)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-318997953-1686202031-3206138427-1000_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-368E4FF85B2B}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-318997953-1686202031-3206138427-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Annika\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-318997953-1686202031-3206138427-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0DFD8B90-CC1D-49DD-B302-B9A40114C045} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {1CBB63A7-4C85-44F2-A7F9-43F71B24C3CF} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {1CFA021B-1EB6-41B9-A6E0-7FD9DAD20D15} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {2359E615-45A3-46F1-A0F1-A2DA02820F28} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {2E863842-590C-4D93-B3CA-260C21AD697E} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {2F101599-3BE8-4FBA-850E-F17D1A9B292B} - System32\Tasks\AsrKM => C:\Program Files (x86)\ASRock Utility\Key Master\AsrKM.exe [2014-04-23] ()
Task: {32FD6C7A-15DB-4F35-A5F6-E6B4AD8F79FC} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-02-04] (Microsoft Corporation)
Task: {39F94EEE-F85A-4542-8A8F-630BAB4119EC} - System32\Tasks\AsrSP.exe => C:\Program Files (x86)\Fatal1ty Utility\F-Stream Tuning\Bin\AsrSP.exe [2014-12-02] ()
Task: {59B721FA-E0F8-48D5-9C1A-1D29E8690301} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-14] (Adobe Systems Incorporated)
Task: {5A472278-D0F2-4351-9997-1992E39077E7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-01-15] (Piriform Ltd)
Task: {5BC57399-97D3-40CE-9407-74ECC25C48BB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-02-04] (Microsoft Corporation)
Task: {5CD79A7B-2F1A-45D8-A39E-9EF4B9DB7B45} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {5D8AA55B-8E4A-42D7-9B93-767A9EF3B27B} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {5DC294E0-637D-497D-A0C1-C8411D61A82F} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {615B5EDE-644E-475A-B03A-6021F6F7A1AD} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {637DDE10-6D39-4841-AA42-FD845F2FFCA1} - System32\Tasks\AsrAPPShop => C:\Program Files (x86)\ASRock Utility\APP Shop\AsrAPPShop.exe [2015-11-11] ()
Task: {6B8077C4-DB79-4F8C-9692-8FC13B74308D} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {6BB2AC0A-5326-4FBE-A6C5-43E1BCB7BE2A} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-02-24] (Microsoft Corporation)
Task: {8AA4449C-94B8-4614-81F5-4D23D360230E} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {98C9151F-019E-475A-915B-84B68E8B73F0} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-02-03] (Advanced Micro Devices, Inc.)
Task: {9C86CD8D-E38B-4D17-BE82-02B87C497638} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {AFFA05D4-5302-4F99-BC15-6FCD0693961E} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {B606BD65-313E-4E7B-AA00-1FA24A6525DF} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {C2F28DBE-A241-44A5-B555-E70F69E12DF7} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {C4966D06-5C97-498E-8738-0FC9E8DC895D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-15] (Google Inc.)
Task: {C88D7775-3BDD-4874-941C-77200A650728} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-15] (Google Inc.)
Task: {CA9A9898-A0BB-4363-96E2-1CFCED2A6401} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {CEEB3B9E-B252-4459-8BE9-D9A03A9B9B3C} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-02-15] (Microsoft Corporation)
Task: {D57ED578-CEE2-480A-94F8-33E685D45082} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {D5FCBB04-4199-4EE7-9DB2-DF7AE7B75A61} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {DF71AE38-D69E-4330-BA59-B74FBC75CD66} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {EB1A0986-8D0B-45F8-95CC-9053E72DEE88} - System32\Tasks\AdobeAAMUpdater-1.0-Fussel-Annika => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-01-07] (Adobe Systems Incorporated)
Task: {EFF5BDC0-2C44-4D86-B72E-B9627610FAC1} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {FD0BAC08-6F15-4A47-ACFB-CDE11CF93EBD} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {FD176E6E-8C25-4FED-9F6F-9E9F5A90D979} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {FF4BE04F-C2E3-4AA1-A696-C655D9BEABA7} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-02-15 13:46 - 2014-07-31 16:17 - 00463112 _____ () C:\Program Files (x86)\Fatal1ty Utility\F-Stream Tuning\Bin\IOMonitorSrv.exe
2016-02-15 15:21 - 2016-02-04 05:51 - 00173256 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll
2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-02-15 17:33 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-02-15 13:27 - 2015-11-11 15:03 - 06101768 _____ () C:\Program Files (x86)\ASRock Utility\APP Shop\AsrAPPShop.exe
2016-02-15 17:33 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-01-22 13:55 - 2016-01-22 13:55 - 00553136 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2016-02-15 17:32 - 2015-12-07 05:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-02-15 17:32 - 2015-12-07 05:00 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-02-15 17:33 - 2016-01-05 02:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-02-15 17:33 - 2016-01-05 02:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-02-15 17:33 - 2016-01-16 06:10 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-02-15 17:33 - 2016-01-16 06:13 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-11-13 13:19 - 2015-11-13 13:19 - 03097640 _____ () C:\Program Files\Rainlendar2\Rainlendar2.exe
2014-04-28 07:19 - 2014-04-28 07:19 - 00184320 _____ () C:\Program Files\Rainlendar2\lua52.dll
2015-11-13 10:51 - 2015-11-13 10:51 - 00330240 _____ () C:\Program Files\Rainlendar2\libical.dll
2015-11-13 10:51 - 2015-11-13 10:51 - 00060928 _____ () C:\Program Files\Rainlendar2\libicalss.dll
2015-11-13 13:19 - 2015-11-13 13:19 - 00075816 _____ () C:\Program Files\Rainlendar2\plugins\iCalendarPlugin.dll
2015-11-13 13:20 - 2015-11-13 13:20 - 00283176 _____ () C:\Program Files\Rainlendar2\plugins\GoogleCalendarPlugin.dll
2014-04-28 07:19 - 2014-04-28 07:19 - 00015872 _____ () C:\Program Files\Rainlendar2\lfs.dll
2016-01-15 21:44 - 2016-01-15 21:44 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2013-08-08 14:30 - 2013-08-08 14:30 - 00283648 _____ () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
2016-01-22 13:54 - 2016-01-22 13:54 - 31420080 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
2016-02-15 15:37 - 2016-02-15 15:37 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-02-23 14:11 - 2015-09-15 17:56 - 00306904 _____ () C:\Program Files (x86)\AOMEI Backupper\UiLogic.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00241368 _____ () C:\Program Files (x86)\AOMEI Backupper\diskmgr.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00290520 _____ () C:\Program Files (x86)\AOMEI Backupper\Comn.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00122584 _____ () C:\Program Files (x86)\AOMEI Backupper\FuncLogic.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00347864 _____ () C:\Program Files (x86)\AOMEI Backupper\ImgFile.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00028376 _____ () C:\Program Files (x86)\AOMEI Backupper\Encrypt.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00483032 _____ () C:\Program Files (x86)\AOMEI Backupper\EnumFolder.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00069336 _____ () C:\Program Files (x86)\AOMEI Backupper\Compress.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00102104 _____ () C:\Program Files (x86)\AOMEI Backupper\BrLog.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00691928 _____ () C:\Program Files (x86)\AOMEI Backupper\Sync.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00282328 _____ () C:\Program Files (x86)\AOMEI Backupper\Clone.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00118488 _____ () C:\Program Files (x86)\AOMEI Backupper\Backup.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00155352 _____ () C:\Program Files (x86)\AOMEI Backupper\FlBackup.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00077528 _____ () C:\Program Files (x86)\AOMEI Backupper\Ldm.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00061144 _____ () C:\Program Files (x86)\AOMEI Backupper\Device.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00282328 _____ () C:\Program Files (x86)\AOMEI Backupper\BrFat.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00962264 _____ () C:\Program Files (x86)\AOMEI Backupper\BrNtfs.dll
2016-02-23 14:11 - 2015-02-26 00:00 - 02403504 _____ () C:\Program Files (x86)\AOMEI Backupper\QtCore4.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00102104 _____ () C:\Program Files (x86)\AOMEI Backupper\BrVol.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00253656 _____ () C:\Program Files (x86)\AOMEI Backupper\GptBcd.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00175832 _____ () C:\Program Files (x86)\AOMEI Backupper\DeviceMgr.dll
2016-02-24 10:48 - 2016-02-24 10:48 - 00158400 _____ () C:\Program Files (x86)\Microsoft Office\root\Office16\JitV.dll
2016-01-06 11:48 - 2016-01-06 11:48 - 01007616 _____ () C:\Program Files (x86)\Extensis\Suitcase Fusion 6\libxml2.2.6.24.dll
2016-01-06 11:48 - 2016-01-06 11:48 - 00901120 _____ () C:\Program Files (x86)\Extensis\Suitcase Fusion 6\iconv-1.9.2.dll
2016-01-06 11:48 - 2016-01-06 11:48 - 00007168 _____ () C:\Program Files (x86)\Extensis\Suitcase Fusion 6\libcharset.dll
2011-08-09 16:06 - 2012-02-07 14:59 - 00139264 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\Appearance Pak.dll
2011-08-09 16:06 - 2012-02-07 14:59 - 00151552 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\RegEx.dll
2011-08-09 16:06 - 2012-02-07 14:59 - 12977947 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\RBScript.dll
2011-08-09 16:06 - 2012-02-07 14:59 - 00098304 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\Shell.dll
2011-08-09 16:06 - 2012-02-07 14:59 - 00761856 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\XML.dll
2011-08-09 16:06 - 2012-02-07 14:59 - 00274432 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\CGamma.dll
2011-08-09 16:06 - 2012-02-07 14:59 - 00086016 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\CSensor.dll
2011-09-22 15:22 - 2012-02-07 14:59 - 00039936 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\MBSRegistrationPlugin16724.dll
2011-09-22 15:22 - 2012-02-07 14:59 - 00025600 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\MBSPluginVersionPlugin16724.dll
2016-02-19 22:26 - 2016-02-18 05:14 - 01630360 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libglesv2.dll
2016-02-19 22:26 - 2016-02-18 05:14 - 00085656 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libegl.dll
2016-01-28 12:32 - 2016-01-28 12:32 - 40523456 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libcef.dll
2015-03-17 01:34 - 2015-03-17 01:34 - 00010240 _____ () C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\locale\de_de\acrotray.deu
2010-11-22 23:56 - 2010-11-22 23:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd
2014-05-14 00:26 - 2014-05-14 00:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd
2014-05-14 00:26 - 2014-05-14 00:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd
2014-05-14 00:26 - 2014-05-14 00:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd
2014-05-14 00:26 - 2014-05-14 00:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd
2010-11-22 23:57 - 2010-11-22 23:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll
2010-11-22 23:56 - 2010-11-22 23:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd
2010-11-22 23:57 - 2010-11-22 23:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd
2010-11-22 23:57 - 2010-11-22 23:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd
2011-02-15 19:17 - 2011-02-15 19:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll
2010-11-22 23:57 - 2010-11-22 23:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd
2014-05-14 00:26 - 2014-05-14 00:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd
2015-10-21 21:29 - 2015-10-21 21:29 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll
2015-10-21 21:29 - 2015-10-21 21:29 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll
2015-06-27 00:09 - 2015-06-27 00:09 - 00271872 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll
2010-11-22 23:56 - 2010-11-22 23:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll
2010-11-22 23:57 - 2010-11-22 23:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd
2010-11-22 23:57 - 2010-11-22 23:57 - 00024064 _____ () C:\Program Files (x86)\Raptr\win32pipe.pyd
2016-01-28 12:32 - 2016-01-28 12:32 - 01365696 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libglesv2.dll
2016-01-28 12:32 - 2016-01-28 12:32 - 00219328 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libegl.dll
2010-11-22 23:57 - 2010-11-22 23:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd
2014-06-18 01:56 - 2014-06-18 01:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd
2011-02-15 19:17 - 2011-02-15 19:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll
2010-11-23 00:06 - 2010-11-23 00:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll
2013-05-10 00:52 - 2013-05-10 00:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll
2013-05-10 00:52 - 2013-05-10 00:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll
2013-05-10 00:52 - 2013-05-10 00:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll
2013-05-03 19:57 - 2013-05-03 19:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll
2013-05-03 19:56 - 2013-05-03 19:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll
2013-05-03 19:56 - 2013-05-03 19:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll
Alt 28.02.2016, 11:31   #5
Lenani
 
TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los. - Standard

TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.


zweiter Teil Addition:

HTML-Code:
2013-05-03 19:57 - 2013-05-03 19:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll
2013-05-03 19:56 - 2013-05-03 19:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll
2013-05-03 19:57 - 2013-05-03 19:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll
2013-05-03 19:57 - 2013-05-03 19:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll
2013-05-03 19:57 - 2013-05-03 19:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll
2013-05-03 19:57 - 2013-05-03 19:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll
2016-01-21 00:22 - 2016-01-21 00:22 - 00124416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\fs-ext\build\Release\fs-ext.node
2016-01-21 00:22 - 2016-01-21 00:22 - 00188416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2016-01-21 00:23 - 2016-01-21 00:23 - 00121344 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ref\build\Release\binding.node
2016-01-21 00:23 - 2016-01-21 00:23 - 00129536 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ffi\build\Release\ffi_bindings.node
2016-02-12 10:24 - 2016-02-12 10:24 - 00158400 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-ProxyResolver\native\ProxyResolverWin.dll
2016-01-21 00:22 - 2016-01-21 00:22 - 00081408 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\idle-gc\build\Release\idle-gc.node
2016-01-08 03:05 - 2016-01-08 03:05 - 00124416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\fs-ext\build\Release\fs-ext.node
2016-01-08 03:05 - 2016-01-08 03:05 - 00121344 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ref\build\Release\binding.node
2016-01-08 03:05 - 2016-01-08 03:05 - 00129536 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ffi\build\Release\ffi_bindings.node
2016-01-08 03:05 - 2016-01-08 03:05 - 00188416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2016-01-28 13:03 - 2016-01-28 13:03 - 00158400 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-ProxyResolver\native\ProxyResolverWin.dll
2016-01-08 03:05 - 2016-01-08 03:05 - 00085504 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ws\build\Release\bufferutil.node
2016-01-08 03:05 - 2016-01-08 03:05 - 00086016 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ws\build\Release\validation.node
2016-01-08 03:05 - 2016-01-08 03:05 - 00081408 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\idle-gc\build\Release\idle-gc.node
2016-02-15 15:37 - 2016-02-15 15:37 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-02-15 15:37 - 2016-02-15 15:37 - 22330368 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkyWrap.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-318997953-1686202031-3206138427-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Annika\Desktop\bg.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\Run: => "AdAwareTray"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{EED89F22-33F2-4022-864B-2CC1D23F396A}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1D104A6F-7EE8-4F89-A048-E9681A29EE3C}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{C526DCB8-C0BF-495B-94AC-F1AB6D44628D}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{D0FE2D06-BED8-4A85-B472-94353CAC3953}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{3831CED4-48F4-439F-B4D4-0B66DB8DF384}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [TCP Query User{46EFE2F5-3C50-499A-9404-CA82756FFD4D}C:\program files\adobe\adobe photoshop cc 2015\photoshop.exe] => (Allow) C:\program files\adobe\adobe photoshop cc 2015\photoshop.exe
FirewallRules: [UDP Query User{9CE16210-54C3-4A12-8EC1-84169D5D1F83}C:\program files\adobe\adobe photoshop cc 2015\photoshop.exe] => (Allow) C:\program files\adobe\adobe photoshop cc 2015\photoshop.exe
FirewallRules: [TCP Query User{58CC27AD-6B30-49D3-BD71-E96DC1A7C54B}C:\program files\adobe\adobe indesign cc 2015\indesign.exe] => (Allow) C:\program files\adobe\adobe indesign cc 2015\indesign.exe
FirewallRules: [UDP Query User{60747B28-AAC4-40C4-87EE-96A16A212742}C:\program files\adobe\adobe indesign cc 2015\indesign.exe] => (Allow) C:\program files\adobe\adobe indesign cc 2015\indesign.exe
FirewallRules: [{7C4CFC67-CDC3-4E3F-B4CC-04E5D74C983B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{251E0E60-F7B7-4959-A942-47001E998BF9}C:\program files\adobe\adobe illustrator cc 2015\support files\contents\windows\illustrator.exe] => (Allow) C:\program files\adobe\adobe illustrator cc 2015\support files\contents\windows\illustrator.exe
FirewallRules: [UDP Query User{B26FF3B1-A3DC-426C-B2B3-599327C35A1D}C:\program files\adobe\adobe illustrator cc 2015\support files\contents\windows\illustrator.exe] => (Allow) C:\program files\adobe\adobe illustrator cc 2015\support files\contents\windows\illustrator.exe

==================== Wiederherstellungspunkte =========================

23-02-2016 12:51:40 JRT Pre-Junkware Removal
24-02-2016 17:08:50 Installed Sound Blaster Z-Series.
27-02-2016 12:27:46 JRT Pre-Junkware Removal
27-02-2016 12:42:50 JRT Pre-Junkware Removal
27-02-2016 13:23:24 JRT Pre-Junkware Removal
27-02-2016 13:40:30 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: AMD High Definition Audio Device
Description: AMD High Definition Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Advanced Micro Devices
Service: AtiHDAudioService
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (02/27/2016 06:52:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LogonUI.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d88c
Name des fehlerhaften Moduls: USBKeyCredentialProvider.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x53d9fa55
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002f53f
ID des fehlerhaften Prozesses: 0x2a54
Startzeit der fehlerhaften Anwendung: 0xLogonUI.exe0
Pfad der fehlerhaften Anwendung: LogonUI.exe1
Pfad des fehlerhaften Moduls: LogonUI.exe2
Berichtskennung: LogonUI.exe3
Vollständiger Name des fehlerhaften Pakets: LogonUI.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LogonUI.exe5

Error: (02/27/2016 02:06:45 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8

Error: (02/27/2016 01:53:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LogonUI.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d88c
Name des fehlerhaften Moduls: USBKeyCredentialProvider.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x53d9fa55
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002b4a8
ID des fehlerhaften Prozesses: 0x60
Startzeit der fehlerhaften Anwendung: 0xLogonUI.exe0
Pfad der fehlerhaften Anwendung: LogonUI.exe1
Pfad des fehlerhaften Moduls: LogonUI.exe2
Berichtskennung: LogonUI.exe3
Vollständiger Name des fehlerhaften Pakets: LogonUI.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LogonUI.exe5

Error: (02/27/2016 01:53:05 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Fussel)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/27/2016 01:40:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Adobe CEF Helper.exe, Version: 3.5.0.205, Zeitstempel: 0x56aa74a2
Name des fehlerhaften Moduls: libcef.dll, Version: 3.2171.2069.0, Zeitstempel: 0x551bdc44
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00444106
ID des fehlerhaften Prozesses: 0x25f8
Startzeit der fehlerhaften Anwendung: 0xAdobe CEF Helper.exe0
Pfad der fehlerhaften Anwendung: Adobe CEF Helper.exe1
Pfad des fehlerhaften Moduls: Adobe CEF Helper.exe2
Berichtskennung: Adobe CEF Helper.exe3
Vollständiger Name des fehlerhaften Pakets: Adobe CEF Helper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Adobe CEF Helper.exe5

Error: (02/27/2016 01:40:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (02/27/2016 01:39:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LogonUI.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d88c
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10586.103, Zeitstempel: 0x56a8483f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003624a
ID des fehlerhaften Prozesses: 0x17c
Startzeit der fehlerhaften Anwendung: 0xLogonUI.exe0
Pfad der fehlerhaften Anwendung: LogonUI.exe1
Pfad des fehlerhaften Moduls: LogonUI.exe2
Berichtskennung: LogonUI.exe3
Vollständiger Name des fehlerhaften Pakets: LogonUI.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LogonUI.exe5

Error: (02/27/2016 01:39:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Adobe CEF Helper.exe, Version: 3.5.0.205, Zeitstempel: 0x56aa74a2
Name des fehlerhaften Moduls: libcef.dll, Version: 3.2171.2069.0, Zeitstempel: 0x551bdc44
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00444106
ID des fehlerhaften Prozesses: 0x2794
Startzeit der fehlerhaften Anwendung: 0xAdobe CEF Helper.exe0
Pfad der fehlerhaften Anwendung: Adobe CEF Helper.exe1
Pfad des fehlerhaften Moduls: Adobe CEF Helper.exe2
Berichtskennung: Adobe CEF Helper.exe3
Vollständiger Name des fehlerhaften Pakets: Adobe CEF Helper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Adobe CEF Helper.exe5

Error: (02/27/2016 01:35:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LogonUI.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d88c
Name des fehlerhaften Moduls: USBKeyCredentialProvider.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x53d9fa55
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002b4a8
ID des fehlerhaften Prozesses: 0x180
Startzeit der fehlerhaften Anwendung: 0xLogonUI.exe0
Pfad der fehlerhaften Anwendung: LogonUI.exe1
Pfad des fehlerhaften Moduls: LogonUI.exe2
Berichtskennung: LogonUI.exe3
Vollständiger Name des fehlerhaften Pakets: LogonUI.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LogonUI.exe5

Error: (02/27/2016 01:30:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LogonUI.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d88c
Name des fehlerhaften Moduls: USBKeyCredentialProvider.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x53d9fa55
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002b4a8
ID des fehlerhaften Prozesses: 0x178
Startzeit der fehlerhaften Anwendung: 0xLogonUI.exe0
Pfad der fehlerhaften Anwendung: LogonUI.exe1
Pfad des fehlerhaften Moduls: LogonUI.exe2
Berichtskennung: LogonUI.exe3
Vollständiger Name des fehlerhaften Pakets: LogonUI.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LogonUI.exe5


Systemfehler:
=============
Error: (02/27/2016 07:17:48 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_364c55d" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/27/2016 05:56:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_5b30e" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/27/2016 01:53:27 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (02/27/2016 01:53:05 PM) (Source: DCOM) (EventID: 10010) (User: Fussel)
Description: CortanaUI.AppXtpp90jhw9p0njjb85kvhxpppgrqfp117.mca

Error: (02/27/2016 01:53:03 PM) (Source: DCOM) (EventID: 10010) (User: Fussel)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (02/27/2016 01:53:03 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_42c42" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/27/2016 01:51:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Ad-Aware Service 11" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/27/2016 01:39:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (02/27/2016 01:39:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_43383" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/27/2016 01:39:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2016-02-27 16:14:34.280
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-userenv_31bf3856ad364e35_6.1.7601.17514_none_9247d45ea984f2ad\userenv.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:14:34.277
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-userenv_31bf3856ad364e35_6.1.7601.17514_none_9247d45ea984f2ad\userenv.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:14:11.679
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-rpc-remote_31bf3856ad364e35_6.1.7601.17514_none_c2a09d30916321d9\RpcRtRemote.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:14:11.674
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-rpc-remote_31bf3856ad364e35_6.1.7601.17514_none_c2a09d30916321d9\RpcRtRemote.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:10:40.317
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7600.16385_none_bd95ac45003914a8\appidapi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:10:40.312
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7600.16385_none_bd95ac45003914a8\appidapi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:09:00.872
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\Backup\x86_microsoft-windows-userenv_31bf3856ad364e35_6.1.7601.17514_none_9247d45ea984f2ad_userenv.dll_1a3a70b6 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:09:00.868
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\Backup\x86_microsoft-windows-userenv_31bf3856ad364e35_6.1.7601.17514_none_9247d45ea984f2ad_userenv.dll_1a3a70b6 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:08:35.846
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\Backup\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7600.16385_none_bd95ac45003914a8_appidapi.dll_affa6810 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:08:35.843
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\Backup\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7600.16385_none_bd95ac45003914a8_appidapi.dll_affa6810 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Prozentuale Nutzung des RAM: 23%
Installierter physikalischer RAM: 16335.09 MB
Verfügbarer physikalischer RAM: 12542.87 MB
Summe virtueller Speicher: 32719.09 MB
Verfügbarer virtueller Speicher: 28185.91 MB

==================== Laufwerke ================================

Drive c: (MASTER) (Fixed) (Total:465.32 GB) (Free:378.91 GB) NTFS
Drive h: (Firma) (Fixed) (Total:1863.01 GB) (Free:1367.61 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 64853259)
Partition 1: (Not Active) - (Size=465.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 0BD372D4)
Partition 1: (Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
Alt 28.02.2016, 13:14   #6
burningice
/// Malwareteam
 
TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los. - Standard

TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.


16GB RAM und netter Prozessor

Schritt 1
Lade dir folgendes Programm herunter und installiere es: Malwarebytes Anti-Malware Hier findest du dazu eine bebilderte Anleitung
  • Klicke auf die Einstellungen / Erkennung und Schutz und setze dabei den Haken bei "Nach Rootkits suchen"
  • Klicke im Anschluss auf Durchsuchen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Suchlaufprotokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 2
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Schritt 3
Bitte starte wieder FRST, setze den Haken bei Addition und drücke auf Untersuchen. Poste bitte wieder die beiden Textdateien, die so entstehen.

Bitte poste in deiner nächsten Antwort also:
  • Logfile von AdwCleaner
  • Logfile von Malwarebytes
  • Frst.txt
  • Addition.txt

Bitte poste das nächste Mal in [CODE] Tags und nicht [HTML] Tags
__________________
--> TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.

Alt 28.02.2016, 14:53   #7
Lenani
 
TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los. - Standard

TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.


Als Grafikerin ist viel RAM unschlagbar

So, hier das Logfile vom mbam:

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 28.02.2016
Suchlaufzeit: 13:29
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.2.0.1024
Malware-Datenbank: v2016.02.28.01
Rootkit-Datenbank: v2016.02.27.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: Annika

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 379918
Abgelaufene Zeit: 5 Min., 32 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
AdwCleaner:

Code:
ATTFilter
# AdwCleaner v5.036 - Bericht erstellt am 28/02/2016 um 13:39:41
# Aktualisiert am 22/02/2016 von Xplode
# Datenbank : 2016-02-28.1 [Server]
# Betriebssystem : Windows 10 Home  (x64)
# Benutzername : Annika - FUSSEL
# Gestartet von : C:\Users\Annika\Desktop\AntiMalwareVirus\adwcleaner_5.036.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****


***** [ Dateien ] *****

[-] Datei Gelöscht : C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[-] Datei Gelöscht : C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal

***** [ DLLs ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****


***** [ Registrierungsdatenbank ] *****

[-] Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\adawarebp
[-] Schlüssel Gelöscht : HKU\S-1-5-21-318997953-1686202031-3206138427-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\AppDataLow\Software\adawarebp

***** [ Internetbrowser ] *****


*************************

:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Chrome Richtlinien gelöscht

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [870 Bytes] - [21/02/2016 12:07:57]
C:\AdwCleaner\AdwCleaner[C2].txt - [870 Bytes] - [21/02/2016 12:22:08]
C:\AdwCleaner\AdwCleaner[C3].txt - [1413 Bytes] - [23/02/2016 12:48:38]
C:\AdwCleaner\AdwCleaner[C4].txt - [2013 Bytes] - [27/02/2016 12:24:34]
C:\AdwCleaner\AdwCleaner[C5].txt - [2468 Bytes] - [27/02/2016 12:40:44]
C:\AdwCleaner\AdwCleaner[C6].txt - [2487 Bytes] - [27/02/2016 13:21:39]
C:\AdwCleaner\AdwCleaner[C7].txt - [2015 Bytes] - [27/02/2016 13:39:03]
C:\AdwCleaner\AdwCleaner[C8].txt - [1863 Bytes] - [28/02/2016 13:39:41]
C:\AdwCleaner\AdwCleaner[S1].txt - [757 Bytes] - [21/02/2016 11:50:47]
C:\AdwCleaner\AdwCleaner[S2].txt - [757 Bytes] - [21/02/2016 12:04:13]
C:\AdwCleaner\AdwCleaner[S3].txt - [757 Bytes] - [21/02/2016 12:21:26]
C:\AdwCleaner\AdwCleaner[S4].txt - [1228 Bytes] - [23/02/2016 12:46:44]
C:\AdwCleaner\AdwCleaner[S5].txt - [1812 Bytes] - [27/02/2016 12:23:31]
C:\AdwCleaner\AdwCleaner[S6].txt - [2252 Bytes] - [27/02/2016 12:40:00]
C:\AdwCleaner\AdwCleaner[S7].txt - [2276 Bytes] - [27/02/2016 13:20:53]
C:\AdwCleaner\AdwCleaner[S8].txt - [1829 Bytes] - [27/02/2016 13:38:22]
C:\AdwCleaner\AdwCleaner[S9].txt - [2396 Bytes] - [28/02/2016 13:38:55]

########## EOF - C:\AdwCleaner\AdwCleaner[C8].txt - [2590 Bytes] ##########
Teil 1 FRST:

Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:27-02-2016
durchgeführt von Annika (Administrator) auf FUSSEL (28-02-2016 13:42:02)
Gestartet von C:\Users\Annika\Desktop\TrojanerBoard
Geladene Profile: Annika (Verfügbare Profile: Annika)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
() C:\Program Files (x86)\Fatal1ty Utility\F-Stream Tuning\Bin\IOMonitorSrv.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI Backupper\ABService.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CtHdaSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
() C:\Program Files (x86)\ASRock Utility\APP Shop\AsrAPPShop.exe
(Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cnext.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
() C:\Program Files\Rainlendar2\Rainlendar2.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Celartem, Inc., doing business as Extensis.) C:\Program Files (x86)\Extensis\Suitcase Fusion 6\FMCore.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTSched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
( ) C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSYNC.EXE
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\SBZ.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Joyent, Inc) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
(Joyent, Inc) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\cnext.exe [4888264 2016-02-03] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-01-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [804168 2016-02-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-12-11] (Raptr, Inc)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2312896 2016-02-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [1867448 2015-12-18] (Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [14960 2016-02-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [UpdReg] => C:\WINDOWS\UpdReg.EXE
HKLM-x32\...\Run: [Sound Blaster Z-Series Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\SBZ.exe [877056 2014-11-24] (Creative Technology Ltd)
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [465920 2015-10-30] (Microsoft Corporation)
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\Run: [Rainlendar2] => C:\Program Files\Rainlendar2\Rainlendar2.exe [3097640 2015-11-13] ()
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8619224 2016-01-15] (Piriform Ltd)
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\Run: [FMCore.exe] => C:\Program Files (x86)\Extensis\Suitcase Fusion 6\FMCore.exe [10434560 2016-01-06] (Celartem, Inc., doing business as Extensis.)
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [881336 2015-12-18] (Adobe Systems Incorporated)
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\Run: [CreativeTaskScheduler] => C:\Program Files (x86)\Creative\Shared Files\CTSched.exe [53341 2006-11-17] (Creative Technology Ltd)
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\Run: [GoogleChromeAutoLaunch_274C5222135F6341A42E2BBA9B0EBCBF] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [746648 2016-02-18] (Google Inc.)
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\...\MountPoints2: {83159446-d3e1-11e5-9558-806e6f6e6963} - "D:\Data\autorun.exe" 
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-01-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-01-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-01-22] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2016-02-15]
ShortcutTarget: Killer Network Manager.lnk -> C:\Windows\Installer\{401FADAA-1C16-4721-9F02-19067E1A1CA8}\NetworkManager.exe_130C27D738F34C89BDDF21BCFD74B56D.exe (Flexera Software LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpyderUtility.lnk [2016-02-21]
ShortcutTarget: SpyderUtility.lnk -> C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility.exe ( )

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{03005a01-b149-4343-99d1-17aaf8234965}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-318997953-1686202031-3206138427-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-02-05] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-12-18] (Adobe Systems Incorporated)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-02-04] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-12-18] (Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-12-18] (Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-12-18] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2015-12-18] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2015-12-18] (Adobe Systems Incorporated)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Annika\AppData\Roaming\Mozilla\Firefox\Profiles\sBxubisY.default
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-02-12] (Adobe Systems)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-02-04] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-15] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-02-12] (Adobe Systems)
FF Extension: Avira Browser Safety - C:\Users\Annika\AppData\Roaming\Mozilla\Firefox\Profiles\sBxubisY.default\Extensions\abs@avira.com.xpi [2016-02-18]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat DC - Create PDF - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn [2016-02-19]

Chrome: 
=======
CHR StartupUrls: Default -> "hxxps://www.facebook.com/","hxxp://annika-lewin.de/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\pdf.dll => Keine Datei
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll => Keine Datei
CHR Profile: C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Auf den Amazon-Wunschzettel) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced [2016-02-15]
CHR Extension: (Chromebleed) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\eeoekjnjgppnaegdjbcafdggilajhpic [2016-02-15]
CHR Extension: (Adobe Acrobat) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2016-02-15]
CHR Extension: (Avira SafeSearch) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\eglgfnfolcgijipffhlhbbnefdcbjbml [2016-02-26]
CHR Extension: (Avira Browserschutz) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-02-18]
CHR Extension: (AdBlock) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-02-16]
CHR Extension: („Pin it“-Button) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2016-02-15]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-02-15]
CHR Extension: (Do Share) - C:\Users\Annika\AppData\Local\Google\Chrome\User Data\Default\Extensions\oglhhmnmdocfhmhlekfdecokagmbchnf [2016-02-27]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [693440 2016-01-28] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2020056 2016-02-09] (Adobe Systems, Incorporated)
S2 amdacpusrsvc; C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe [121856 2016-02-03] (Advanced Micro Devices) [Datei ist nicht signiert]
R2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [948392 2016-02-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [466408 2016-02-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [466408 2016-02-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1417592 2016-02-18] (Avira Operations GmbH & Co. KG)
R2 ASRockIOMon; C:\Program Files (x86)\Fatal1ty Utility\F-Stream Tuning\Bin\IOMonitorSrv.exe [463112 2014-07-31] ()
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [260456 2016-01-27] (Avira Operations GmbH & Co. KG)
R2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [29912 2015-09-15] (AOMEI Tech Co., Ltd.)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2804976 2016-02-04] (Microsoft Corporation)
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2012-10-08] (Creative Technology Ltd) [Datei ist nicht signiert]
R2 CtHdaSvc; C:\Windows\sysWow64\CtHdaSvc.exe [122888 2015-06-22] (Creative Technology Ltd)
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [451072 2015-11-24] (Rivet Networks) [Datei ist nicht signiert]
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [343040 2013-08-08] (Qualcomm Atheros) [Datei ist nicht signiert]
R2 SpeedupService; C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [24224 2016-02-01] (Avira Operations GmbH & Co. KG)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [30648 2015-02-26] () [Datei ist nicht signiert]
R2 amdacpksd; C:\WINDOWS\system32\drivers\amdacpksd.sys [296648 2016-02-03] (Advanced Micro Devices)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [40720 2015-07-28] (Advanced Micro Devices, Inc.)
R2 ammntdrv; C:\WINDOWS\system32\ammntdrv.sys [151480 2015-02-26] () [Datei ist nicht signiert]
R2 amwrtdrv; C:\WINDOWS\system32\amwrtdrv.sys [17848 2015-02-26] () [Datei ist nicht signiert]
R3 AsrAutoChkUpdDrv; C:\WINDOWS\SysWOW64\Drivers\AsrAutoChkUpdDrv.sys [22280 2016-02-28] (ASRock Incorporation)
R3 AsrDrv101; C:\Windows\SysWOW64\Drivers\AsrDrv101.sys [22280 2016-02-15] (ASRock Incorporation)
S3 AsrHidFilter; C:\Windows\System32\DRIVERS\AsrHidFilter.sys [20232 2014-06-30] (ASRock Inc.)
R0 AsrRamDisk; C:\Windows\System32\drivers\AsrRamDisk.sys [40200 2013-08-02] (ASRock Inc.)
S3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [111120 2016-01-24] (Advanced Micro Devices)
S3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [282000 2016-01-05] (BitDefender)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [135880 2016-02-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [146704 2016-02-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [35488 2016-02-15] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [73032 2016-02-15] (Avira Operations GmbH & Co. KG)
R1 BfLwf; C:\Windows\system32\DRIVERS\bflwfx64.sys [147016 2015-11-20] (Rivet Networks, LLC.)
R3 cthda; C:\Windows\system32\drivers\cthda.sys [1074472 2015-06-22] (Creative Technology Ltd)
R3 cthdb; C:\Windows\system32\DRIVERS\cthdb.sys [42792 2015-06-22] (Creative Technology Ltd)
R1 epp; C:\EEK\bin64\epp.sys [123992 2015-10-23] (Emsisoft Ltd)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-02-19] ()
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [22216 2014-02-03] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [22728 2014-02-03] ()
R3 ISCT; C:\Windows\System32\drivers\ISCTD.sys [44744 2014-02-03] ()
R3 Ke2200; C:\Windows\System32\drivers\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-02-28] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [183584 2015-06-12] (Intel Corporation)
S3 Spyder4; C:\Windows\System32\drivers\dccmtr.sys [15360 2011-06-02] (Datacolor)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; kein ImagePath
U3 wpcsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-02-28 13:41 - 2016-02-28 13:41 - 00002672 _____ C:\Users\Annika\Desktop\AdwCleaner[C8].txt
2016-02-28 13:36 - 2016-02-28 13:36 - 00001183 _____ C:\Users\Annika\Desktop\mbam.txt
2016-02-28 13:09 - 2016-02-28 13:16 - 00000000 ____D C:\Users\Annika\Desktop\cover
2016-02-28 11:33 - 2016-02-28 11:33 - 00000000 ____D C:\Users\Annika\Desktop\TrojanerBoard
2016-02-28 11:19 - 2016-02-28 13:42 - 00000000 ____D C:\FRST
2016-02-28 11:15 - 2016-02-28 11:15 - 00000000 ___HD C:\OneDriveTemp
2016-02-27 15:28 - 2016-02-27 15:28 - 00000000 ____D C:\Users\Annika\Documents\Benutzerdefinierte Office-Vorlagen
2016-02-27 13:57 - 2016-02-27 13:57 - 02405664 _____ (Trend Micro Inc.) C:\Users\Annika\Downloads\HousecallLauncher64.exe
2016-02-27 12:05 - 2016-02-28 12:07 - 68651382 _____ C:\Users\Annika\Desktop\031-5x8-Multi-Paperback-Book-Presentation-COVERVAULT.psd
2016-02-26 12:53 - 2016-02-28 11:34 - 00000000 ____D C:\Users\Annika\Desktop\Mirja
2016-02-26 11:45 - 2016-02-26 11:45 - 01371668 _____ (Igor Pavlov) C:\Users\Annika\Desktop\7z1514-x64.exe
2016-02-26 11:40 - 2016-02-26 11:42 - 28386785 _____ C:\Users\Annika\Desktop\Zimmer Bürgerhof Faltschachtel 140x40x380.ai
2016-02-26 11:00 - 2016-02-26 11:36 - 00042019 _____ C:\Users\Annika\Desktop\Zimmer Bürgerhof Faltschachtel 140x40x380.DXF
2016-02-26 10:58 - 2016-02-26 10:58 - 00000000 ___RD C:\Users\Annika\3D Objects
2016-02-25 15:17 - 2016-02-27 13:40 - 00000000 ____D C:\Users\Annika\AppData\Local\CrashDumps
2016-02-24 17:10 - 2016-02-24 17:10 - 00000000 ____D C:\ProgramData\Creative
2016-02-24 17:09 - 2016-02-24 17:09 - 00466520 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll
2016-02-24 17:09 - 2016-02-24 17:09 - 00445016 _____ (Creative Labs) C:\WINDOWS\SysWOW64\wrap_oal.dll
2016-02-24 17:09 - 2016-02-24 17:09 - 00123480 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\OpenAL32.dll
2016-02-24 17:09 - 2016-02-24 17:09 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\SysWOW64\OpenAL32.dll
2016-02-24 17:09 - 2016-02-24 17:09 - 00002395 _____ C:\Users\Public\Desktop\Creative-Produktregistrierung.lnk
2016-02-24 17:09 - 2016-02-24 17:09 - 00000105 ___RH C:\WINDOWS\ctfile.rfc
2016-02-24 17:09 - 2016-02-24 17:09 - 00000000 ____D C:\WINDOWS\LastGood
2016-02-24 17:09 - 2016-02-24 17:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
2016-02-24 17:09 - 2016-02-24 17:09 - 00000000 ____D C:\Program Files\Creative
2016-02-24 17:09 - 2015-06-22 10:43 - 00004888 _____ C:\WINDOWS\cthdaGER.reg
2016-02-24 17:09 - 2015-06-22 10:43 - 00004850 _____ C:\WINDOWS\cthdaENG.reg
2016-02-24 17:09 - 2014-04-25 16:33 - 01898496 ____N (Creative) C:\WINDOWS\system32\Sens_oal.dll
2016-02-24 17:09 - 2014-04-25 16:29 - 01609728 ____N (Creative) C:\WINDOWS\SysWOW64\Sens_oal.dll
2016-02-24 17:09 - 2012-11-26 17:19 - 00005687 ____N C:\WINDOWS\SysWOW64\CTOPT352.cat
2016-02-24 17:09 - 2012-11-26 16:52 - 00005783 ____N C:\WINDOWS\system32\CTOPT352.cat
2016-02-24 17:09 - 2012-08-13 14:51 - 00183808 _____ (Creative Technology Ltd) C:\WINDOWS\system32\CTOPT352.dll
2016-02-24 17:09 - 2012-08-13 14:51 - 00167424 ____N (Creative Technology Ltd) C:\WINDOWS\SysWOW64\CTOPT352.dll
2016-02-24 17:09 - 2010-10-04 15:20 - 00088576 ____N (Creative Technology Ltd) C:\WINDOWS\system32\CTOPT399.dll
2016-02-24 17:09 - 2010-10-04 15:20 - 00079360 ____N (Creative Technology Ltd) C:\WINDOWS\SysWOW64\CTOPT399.dll
2016-02-24 17:09 - 2010-10-03 14:54 - 00005594 ____N C:\WINDOWS\system32\CTOPT399.cat
2016-02-24 17:09 - 2010-10-03 14:48 - 00005498 ____N C:\WINDOWS\SysWOW64\CTOPT399.cat
2016-02-24 17:09 - 2008-12-22 20:13 - 00061440 ____N (Creative Technology Ltd) C:\WINDOWS\SysWOW64\CTChkAud.dll
2016-02-24 17:09 - 2008-12-22 20:13 - 00049664 ____N (Creative Technology Ltd) C:\WINDOWS\system32\CTChkAud.dll
2016-02-24 17:09 - 2006-12-05 13:53 - 00042496 ____N (Creative Technology Ltd.) C:\WINDOWS\SysWOW64\AddCat.exe
2016-02-24 17:09 - 2006-12-05 13:53 - 00042496 ____N (Creative Technology Ltd.) C:\WINDOWS\system32\AddCat.exe
2016-02-24 17:09 - 2006-10-06 14:17 - 00053248 ____N (Creative Technology Ltd ) C:\WINDOWS\Ctregrun.exe
2016-02-24 17:09 - 2003-06-12 23:25 - 00007062 _____ C:\WINDOWS\SysWOW64\audiopid.vxd
2016-02-24 17:09 - 2000-05-22 16:58 - 00647872 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mscomct2.ocx
2016-02-24 17:09 - 2000-05-11 01:00 - 00090112 ____N (Creative Technology Ltd.) C:\WINDOWS\Updreg.EXE
2016-02-24 17:08 - 2016-02-24 17:09 - 00000000 ____D C:\Program Files (x86)\Creative
2016-02-24 17:07 - 2016-02-24 17:08 - 165440896 _____ (Creative Technology Ltd) C:\Users\Annika\Downloads\SBZ_CD_L13_1_01_03.exe
2016-02-24 17:01 - 2016-02-24 17:01 - 00001145 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-02-24 17:01 - 2016-02-24 17:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-02-24 17:00 - 2016-02-24 17:00 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2016-02-24 16:57 - 2016-02-24 16:58 - 00000000 ____D C:\Users\Annika\Desktop\AntiMalwareVirus
2016-02-24 13:39 - 2016-02-28 11:39 - 00000000 ____D C:\Users\Annika\Desktop\Bigstock
2016-02-24 11:25 - 2016-02-24 11:26 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2016-02-23 14:13 - 2016-02-25 14:28 - 00001024 ____H C:\SYSTAG.BIN
2016-02-23 14:11 - 2016-02-25 14:28 - 00000082 _____ C:\WINDOWS\SysWOW64\winsevr.dat
2016-02-23 14:11 - 2016-02-23 14:22 - 00000000 ____D C:\ProgramData\AomeiBR
2016-02-23 14:11 - 2016-02-23 14:11 - 00001136 _____ C:\Users\Public\Desktop\AOMEI Backupper Professional.lnk
2016-02-23 14:11 - 2016-02-23 14:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Backupper
2016-02-23 14:11 - 2015-02-26 00:00 - 00151480 _____ C:\WINDOWS\system32\ammntdrv.sys
2016-02-23 14:11 - 2015-02-26 00:00 - 00030648 _____ C:\WINDOWS\system32\ambakdrv.sys
2016-02-23 14:11 - 2015-02-26 00:00 - 00017848 _____ C:\WINDOWS\system32\amwrtdrv.sys
2016-02-23 14:10 - 2016-02-23 14:11 - 00000000 ____D C:\Program Files (x86)\AOMEI Backupper
2016-02-23 13:20 - 2016-02-23 13:22 - 00000000 ____D C:\Users\Annika\AppData\Local\NPE
2016-02-23 13:20 - 2016-02-23 13:21 - 00000000 ____D C:\NPE
2016-02-23 13:20 - 2016-02-23 13:20 - 00000000 ____D C:\ProgramData\Norton
2016-02-23 12:40 - 2016-02-23 12:45 - 00000000 ____D C:\EEK
2016-02-23 12:30 - 2016-02-23 12:30 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2016-02-21 16:55 - 2016-02-25 12:21 - 00000000 ____D C:\WINDOWS\Minidump
2016-02-21 16:49 - 2016-02-21 16:49 - 00002262 _____ C:\Users\Annika\Desktop\Spyder4Express 4.5.4.lnk
2016-02-21 16:49 - 2016-02-21 16:49 - 00000000 ____D C:\Users\Annika\AppData\Local\Datacolor
2016-02-21 16:49 - 2016-02-21 16:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Datacolor
2016-02-21 16:49 - 2016-02-21 16:49 - 00000000 ____D C:\Program Files (x86)\Datacolor
2016-02-21 16:49 - 2008-01-30 17:36 - 00090112 _____ (MindVision Software) C:\WINDOWS\unvise32.exe
2016-02-21 13:05 - 2016-02-26 12:18 - 00000033 _____ C:\Users\Annika\AppData\Roaming\AdobeWLCMCache.dat
2016-02-21 12:54 - 2016-02-24 14:08 - 00000000 ____D C:\Users\Public\Speedup Sessions
2016-02-21 12:43 - 2016-02-27 12:39 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2016-02-21 12:41 - 2016-02-21 12:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2016-02-21 12:41 - 2016-02-21 12:41 - 00000000 ____D C:\Program Files\HitmanPro
2016-02-21 12:40 - 2016-02-21 12:44 - 00000000 ____D C:\ProgramData\HitmanPro
2016-02-21 12:25 - 2016-02-28 13:29 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-02-21 12:25 - 2016-02-21 12:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-02-21 12:25 - 2016-02-21 12:25 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-02-21 12:25 - 2016-02-21 12:25 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-02-21 12:25 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-02-21 12:25 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-02-21 12:25 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-02-21 11:47 - 2016-02-28 13:39 - 00000000 ____D C:\AdwCleaner
2016-02-21 11:18 - 2016-02-21 11:18 - 00007597 _____ C:\Users\Annika\AppData\Local\Resmon.ResmonCfg
2016-02-19 12:52 - 2016-02-19 12:52 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2016-02-19 12:52 - 2016-02-19 12:52 - 00000000 _____ C:\autoexec.bat
2016-02-19 12:37 - 2016-02-27 16:43 - 00515530 _____ C:\Users\Annika\AppData\Local\census.cache
2016-02-19 12:37 - 2016-02-27 16:43 - 00120432 _____ C:\Users\Annika\AppData\Local\ars.cache
2016-02-19 12:27 - 2016-02-19 12:27 - 00000036 _____ C:\Users\Annika\AppData\Local\housecall.guid.cache
2016-02-18 12:30 - 2016-02-18 12:30 - 00001456 _____ C:\Users\Annika\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2016-02-18 12:14 - 2016-02-18 12:14 - 00000000 ____D C:\Users\Annika\AppData\Local\AviraSpeedup
2016-02-18 12:14 - 2016-02-18 12:14 - 00000000 ____D C:\Users\Annika\AppData\Local\Avira
2016-02-18 12:10 - 2016-02-18 12:10 - 05404312 _____ (Avira Operations GmbH & Co. KG) C:\Users\Annika\Downloads\avira_de_ispm0_3007526238_pyrw2rxhgj3e92dm6uwn_wd.exe
2016-02-17 11:01 - 2016-02-17 11:01 - 00000000 ____D C:\Users\Annika\AppData\Roaming\Macromedia
2016-02-17 10:39 - 2016-02-17 10:39 - 00000728 _____ C:\Users\Annika\Desktop\Desktop - Verknüpfung.lnk
2016-02-16 16:55 - 2016-02-16 16:55 - 00000000 ____D C:\Users\Annika\AppData\LocalLow\Temp
2016-02-16 16:31 - 2016-02-16 16:31 - 00000000 ____D C:\Users\Annika\AppData\Local\CEF
2016-02-16 15:25 - 2016-02-16 15:25 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-02-16 14:51 - 2016-02-28 13:40 - 00000000 ____D C:\Users\Annika\.rainlendar2
2016-02-16 14:51 - 2016-02-16 14:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rainlendar2
2016-02-16 14:51 - 2016-02-16 14:51 - 00000000 ____D C:\Program Files\Rainlendar2
2016-02-16 14:31 - 2016-02-16 14:31 - 00000043 _____ C:\ProgramData\.SF170
2016-02-16 14:28 - 2016-02-16 14:40 - 00000000 ____D C:\Users\Annika\AppData\Local\Extensis
2016-02-16 14:28 - 2016-02-16 14:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Extensis
2016-02-16 14:28 - 2016-02-16 14:28 - 00000000 ____D C:\Program Files (x86)\Extensis
2016-02-16 14:28 - 2016-02-16 14:28 - 00000000 ____D C:\Program Files (x86)\Bonjour
2016-02-16 13:47 - 2016-02-16 13:47 - 00000043 _____ C:\ProgramData\.ST160
2016-02-16 13:45 - 2016-02-28 11:55 - 00004154 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{06D3F4CE-9D51-4FBE-A373-26E45E04F2C7}
2016-02-16 13:18 - 2016-02-16 13:18 - 00000010 _____ C:\Users\Annika\AppData\Local\.C3F2FH85-G3D2-2F02-D5CH-7D3D8C553E56
2016-02-16 13:18 - 2016-02-16 13:18 - 00000010 _____ C:\ProgramData\.F4G6EEC4-B493-3E31-C6BG-8C6C9B764D36
2016-02-16 13:08 - 2016-02-23 14:10 - 83998720 _____ (AOMEI Technology Co., Ltd. ) C:\Users\Annika\Desktop\ABPro.exe
2016-02-16 12:39 - 2016-02-16 12:39 - 00001239 _____ C:\Users\Annika\Desktop\The Bat.lnk
2016-02-16 12:13 - 2016-02-16 16:31 - 00000000 ____D C:\Users\Annika\AppData\LocalLow\Adobe
2016-02-16 12:13 - 2016-02-16 12:13 - 00003602 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-Fussel-Annika
2016-02-15 17:34 - 2016-02-15 17:35 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-02-15 17:34 - 2016-02-15 17:34 - 146614896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-02-15 17:34 - 2016-01-27 06:45 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-02-15 17:34 - 2016-01-27 06:10 - 22394368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-02-15 17:34 - 2016-01-27 05:54 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-02-15 17:34 - 2016-01-16 07:23 - 08728920 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-02-15 17:34 - 2016-01-16 07:20 - 06971752 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-02-15 17:34 - 2016-01-16 06:45 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-02-15 17:34 - 2016-01-16 06:35 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-02-15 17:33 - 2016-01-29 07:57 - 04502352 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-02-15 17:33 - 2016-01-29 07:33 - 04064320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-02-15 17:33 - 2016-01-27 07:15 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-02-15 17:33 - 2016-01-27 07:15 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-02-15 17:33 - 2016-01-27 07:01 - 07476064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-02-15 17:33 - 2016-01-27 07:01 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-02-15 17:33 - 2016-01-27 07:01 - 01819720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-02-15 17:33 - 2016-01-27 06:59 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-02-15 17:33 - 2016-01-27 06:57 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-02-15 17:33 - 2016-01-27 06:57 - 01824264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-02-15 17:33 - 2016-01-27 06:57 - 00820704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-02-15 17:33 - 2016-01-27 06:56 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-02-15 17:33 - 2016-01-27 06:55 - 05242496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-02-15 17:33 - 2016-01-27 06:54 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-02-15 17:33 - 2016-01-27 06:46 - 02606824 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-02-15 17:33 - 2016-01-27 06:46 - 01270072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-02-15 17:33 - 2016-01-27 06:45 - 06605544 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-02-15 17:33 - 2016-01-27 06:43 - 00359776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-02-15 17:33 - 2016-01-27 06:37 - 01998176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-02-15 17:33 - 2016-01-27 06:37 - 00576352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-02-15 17:33 - 2016-01-27 06:08 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-15 17:33 - 2016-01-27 06:05 - 19339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-02-15 17:33 - 2016-01-27 06:05 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-02-15 17:33 - 2016-01-27 06:04 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-02-15 17:33 - 2016-01-27 06:01 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-02-15 17:33 - 2016-01-27 05:58 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-02-15 17:33 - 2016-01-27 05:55 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-02-15 17:33 - 2016-01-27 05:55 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-02-15 17:33 - 2016-01-27 05:52 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-02-15 17:33 - 2016-01-27 05:50 - 02230784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-02-15 17:33 - 2016-01-27 05:49 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-02-15 17:33 - 2016-01-27 05:48 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-02-15 17:33 - 2016-01-27 05:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-02-15 17:33 - 2016-01-27 05:41 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-02-15 17:33 - 2016-01-27 05:39 - 02275328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-02-15 17:33 - 2016-01-27 05:38 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-02-15 17:33 - 2016-01-27 05:38 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-02-15 17:33 - 2016-01-27 05:37 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-02-15 17:33 - 2016-01-27 05:36 - 02757120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-02-15 17:33 - 2016-01-16 07:37 - 00202472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2016-02-15 17:33 - 2016-01-16 07:36 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-02-15 17:33 - 2016-01-16 07:36 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-02-15 17:33 - 2016-01-16 07:34 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-02-15 17:33 - 2016-01-16 07:24 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-02-15 17:33 - 2016-01-16 07:23 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-02-15 17:33 - 2016-01-16 07:23 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-02-15 17:33 - 2016-01-16 07:23 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-02-15 17:33 - 2016-01-16 07:23 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-02-15 17:33 - 2016-01-16 07:21 - 01750440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2016-02-15 17:33 - 2016-01-16 07:20 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-02-15 17:33 - 2016-01-16 07:20 - 00431240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2016-02-15 17:33 - 2016-01-16 07:19 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-02-15 17:33 - 2016-01-16 07:19 - 00405568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-02-15 17:33 - 2016-01-16 07:12 - 01415200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-02-15 17:33 - 2016-01-16 07:09 - 01089880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2016-02-15 17:33 - 2016-01-16 07:08 - 01174008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-02-15 17:33 - 2016-01-16 07:08 - 00440152 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2016-02-15 17:33 - 2016-01-16 06:44 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-02-15 17:33 - 2016-01-16 06:38 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-02-15 17:33 - 2016-01-16 06:38 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-02-15 17:33 - 2016-01-16 06:38 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimCfg.dll
2016-02-15 17:33 - 2016-01-16 06:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-02-15 17:33 - 2016-01-16 06:37 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-02-15 17:33 - 2016-01-16 06:37 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2016-02-15 17:33 - 2016-01-16 06:36 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-02-15 17:33 - 2016-01-16 06:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-02-15 17:33 - 2016-01-16 06:36 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimAuth.dll
2016-02-15 17:33 - 2016-01-16 06:35 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-02-15 17:33 - 2016-01-16 06:34 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2016-02-15 17:33 - 2016-01-16 06:34 - 00477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2016-02-15 17:33 - 2016-01-16 06:34 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-02-15 17:33 - 2016-01-16 06:33 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2016-02-15 17:33 - 2016-01-16 06:33 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2016-02-15 17:33 - 2016-01-16 06:32 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2016-02-15 17:33 - 2016-01-16 06:31 - 00851456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-02-15 17:33 - 2016-01-16 06:31 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-02-15 17:33 - 2016-01-16 06:31 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-02-15 17:33 - 2016-01-16 06:31 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-02-15 17:33 - 2016-01-16 06:30 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-02-15 17:33 - 2016-01-16 06:30 - 01053696 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-02-15 17:33 - 2016-01-16 06:30 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-02-15 17:33 - 2016-01-16 06:30 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimCfg.dll
2016-02-15 17:33 - 2016-01-16 06:29 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2016-02-15 17:33 - 2016-01-16 06:29 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-02-15 17:33 - 2016-01-16 06:28 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-02-15 17:33 - 2016-01-16 06:28 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-02-15 17:33 - 2016-01-16 06:28 - 00884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2016-02-15 17:33 - 2016-01-16 06:28 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimAuth.dll
2016-02-15 17:33 - 2016-01-16 06:27 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-02-15 17:33 - 2016-01-16 06:26 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2016-02-15 17:33 - 2016-01-16 06:26 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-02-15 17:33 - 2016-01-16 06:26 - 00260608 _____ C:\WINDOWS\system32\MTFServer.dll
2016-02-15 17:33 - 2016-01-16 06:25 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2016-02-15 17:33 - 2016-01-16 06:25 - 00235008 _____ C:\WINDOWS\system32\MTF.dll
2016-02-15 17:33 - 2016-01-16 06:24 - 02057216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2016-02-15 17:33 - 2016-01-16 06:24 - 00613888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2016-02-15 17:33 - 2016-01-16 06:24 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-02-15 17:33 - 2016-01-16 06:24 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2016-02-15 17:33 - 2016-01-16 06:23 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-02-15 17:33 - 2016-01-16 06:23 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-02-15 17:33 - 2016-01-16 06:21 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-02-15 17:33 - 2016-01-16 06:20 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-02-15 17:33 - 2016-01-16 06:20 - 02597888 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-02-15 17:33 - 2016-01-16 06:20 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-02-15 17:33 - 2016-01-16 06:20 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2016-02-15 17:33 - 2016-01-16 06:19 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2016-02-15 17:33 - 2016-01-16 06:19 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2016-02-15 17:33 - 2016-01-16 06:19 - 00162816 _____ C:\WINDOWS\SysWOW64\MTF.dll
2016-02-15 17:33 - 2016-01-16 06:18 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-02-15 17:33 - 2016-01-16 06:17 - 05503488 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-02-15 17:33 - 2016-01-16 06:16 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-02-15 17:33 - 2016-01-16 06:16 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2016-02-15 17:33 - 2016-01-16 06:15 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-02-15 17:33 - 2016-01-16 06:14 - 01946624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-02-15 17:33 - 2016-01-16 06:14 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-02-15 17:33 - 2016-01-05 03:50 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2016-02-15 17:33 - 2016-01-05 03:48 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2016-02-15 17:33 - 2016-01-05 03:45 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-02-15 17:33 - 2016-01-05 03:42 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2016-02-15 17:33 - 2016-01-05 03:37 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-02-15 17:33 - 2016-01-05 03:37 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-02-15 17:33 - 2016-01-05 03:37 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-02-15 17:33 - 2016-01-05 03:37 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-02-15 17:33 - 2016-01-05 03:37 - 00234504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll
2016-02-15 17:33 - 2016-01-05 03:36 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-02-15 17:33 - 2016-01-05 03:33 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-02-15 17:33 - 2016-01-05 03:33 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-02-15 17:33 - 2016-01-05 03:33 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-02-15 17:33 - 2016-01-05 03:33 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll
2016-02-15 17:33 - 2016-01-05 03:33 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-02-15 17:33 - 2016-01-05 03:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-02-15 17:33 - 2016-01-05 03:27 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-02-15 17:33 - 2016-01-05 03:24 - 00796352 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-02-15 17:33 - 2016-01-05 03:23 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-02-15 17:33 - 2016-01-05 03:23 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-02-15 17:33 - 2016-01-05 03:23 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2016-02-15 17:33 - 2016-01-05 03:21 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-02-15 17:33 - 2016-01-05 03:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2016-02-15 17:33 - 2016-01-05 03:16 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL
2016-02-15 17:33 - 2016-01-05 02:54 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-02-15 17:33 - 2016-01-05 02:53 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2016-02-15 17:33 - 2016-01-05 02:50 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-02-15 17:33 - 2016-01-05 02:50 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-02-15 17:33 - 2016-01-05 02:49 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2016-02-15 17:33 - 2016-01-05 02:49 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-02-15 17:33 - 2016-01-05 02:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll
2016-02-15 17:33 - 2016-01-05 02:48 - 01009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL
2016-02-15 17:33 - 2016-01-05 02:48 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2016-02-15 17:33 - 2016-01-05 02:47 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-02-15 17:33 - 2016-01-05 02:47 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-02-15 17:33 - 2016-01-05 02:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-02-15 17:33 - 2016-01-05 02:45 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-02-15 17:33 - 2016-01-05 02:44 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2016-02-15 17:33 - 2016-01-05 02:43 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-02-15 17:33 - 2016-01-05 02:43 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-02-15 17:33 - 2016-01-05 02:43 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-02-15 17:33 - 2016-01-05 02:41 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2016-02-15 17:33 - 2016-01-05 02:41 - 00558592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-02-15 17:33 - 2016-01-05 02:40 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL
2016-02-15 17:33 - 2016-01-05 02:40 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll
2016-02-15 17:33 - 2016-01-05 02:39 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-02-15 17:33 - 2016-01-05 02:39 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-02-15 17:33 - 2016-01-05 02:39 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-02-15 17:33 - 2016-01-05 02:38 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-02-15 17:33 - 2016-01-05 02:36 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2016-02-15 17:33 - 2016-01-05 02:36 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-02-15 17:33 - 2016-01-05 02:30 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-02-15 17:33 - 2015-12-07 05:57 - 00973664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-02-15 17:33 - 2015-12-07 05:55 - 01281376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 01155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 01092456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 01065080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 01020096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00983464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00884256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00823264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00526856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00450904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00337840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2016-02-15 17:33 - 2015-12-07 05:48 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-02-15 17:33 - 2015-12-07 05:47 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-02-15 17:33 - 2015-12-07 05:47 - 00898184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-02-15 17:33 - 2015-12-07 05:47 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-02-15 17:33 - 2015-12-07 05:46 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-02-15 17:33 - 2015-12-07 05:45 - 00264544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-02-15 17:33 - 2015-12-07 05:15 - 01035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll
2016-02-15 17:33 - 2015-12-07 05:10 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2016-02-15 17:33 - 2015-12-07 05:09 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2016-02-15 17:33 - 2015-12-07 05:06 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2016-02-15 17:33 - 2015-12-07 05:06 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-02-15 17:33 - 2015-12-07 05:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-02-15 17:33 - 2015-12-07 05:01 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-02-15 17:33 - 2015-12-07 05:00 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2016-02-15 17:33 - 2015-12-07 05:00 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2016-02-15 17:33 - 2015-12-07 04:59 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-02-15 17:33 - 2015-12-07 04:59 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-02-15 17:33 - 2015-12-07 04:59 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-02-15 17:33 - 2015-12-07 04:57 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-02-15 17:33 - 2015-12-07 04:57 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2016-02-15 17:33 - 2015-12-07 04:56 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-02-15 17:33 - 2015-12-07 04:56 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-02-15 17:33 - 2015-12-07 04:53 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2016-02-15 17:33 - 2015-12-07 04:50 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-02-15 17:33 - 2015-12-07 04:49 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-02-15 17:33 - 2015-12-07 04:45 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-02-15 17:33 - 2015-12-07 04:45 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-02-15 17:33 - 2015-12-07 04:45 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-02-15 17:33 - 2015-12-07 04:43 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2016-02-15 17:33 - 2015-12-07 04:41 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-02-15 17:33 - 2015-12-07 04:40 - 01995776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-02-15 17:33 - 2015-12-07 04:40 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-02-15 17:33 - 2015-12-07 04:33 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-02-15 17:33 - 2015-12-07 04:32 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2016-02-15 17:33 - 2015-12-01 08:12 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-02-15 17:33 - 2015-11-24 11:26 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-02-15 17:33 - 2015-11-24 10:37 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2016-02-15 17:33 - 2015-11-24 10:26 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-02-15 17:33 - 2015-11-24 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-02-15 17:33 - 2015-11-24 09:52 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-02-15 17:33 - 2015-11-24 09:49 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2016-02-15 17:33 - 2015-11-24 08:59 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-02-15 17:33 - 2015-11-24 08:57 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2016-02-15 17:33 - 2015-11-24 08:29 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-02-15 17:33 - 2015-11-24 08:04 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-02-15 17:33 - 2015-11-22 11:47 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-02-15 17:33 - 2015-11-22 11:41 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-02-15 17:33 - 2015-11-22 11:24 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-02-15 17:33 - 2015-11-22 11:14 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-02-15 17:33 - 2015-11-22 10:54 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2016-02-15 17:33 - 2015-11-22 10:43 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-02-15 17:33 - 2015-11-22 10:42 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2016-02-15 17:33 - 2015-11-22 10:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2016-02-15 17:33 - 2015-11-22 10:41 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-02-15 17:33 - 2015-11-22 10:39 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-02-15 17:33 - 2015-11-22 10:39 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-02-15 17:33 - 2015-11-22 10:38 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2016-02-15 17:33 - 2015-11-22 10:38 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-02-15 17:33 - 2015-11-22 10:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2016-02-15 17:33 - 2015-11-22 10:37 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2016-02-15 17:33 - 2015-11-22 10:37 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-02-15 17:33 - 2015-11-22 10:36 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2016-02-15 17:33 - 2015-11-22 10:34 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2016-02-15 17:33 - 2015-11-22 10:32 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2016-02-15 17:33 - 2015-11-22 10:31 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2016-02-15 17:33 - 2015-11-22 10:31 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-02-15 17:33 - 2015-11-22 10:28 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2016-02-15 17:33 - 2015-11-22 10:28 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll

Alt 28.02.2016, 14:55   #8
Lenani
 
TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los. - Standard

TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.


Teil 2 FRST:

Code:
ATTFilter
2016-02-15 17:33 - 2015-11-22 10:27 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-02-15 17:33 - 2015-11-22 10:27 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-02-15 17:33 - 2015-11-22 10:26 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2016-02-15 17:33 - 2015-11-22 10:26 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2016-02-15 17:33 - 2015-11-22 10:26 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2016-02-15 17:33 - 2015-11-22 10:26 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-02-15 17:33 - 2015-11-22 10:20 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2016-02-15 17:33 - 2015-11-22 10:18 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2016-02-15 17:33 - 2015-11-22 10:18 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2016-02-15 17:33 - 2015-11-22 10:17 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2016-02-15 17:33 - 2015-11-22 10:11 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2016-02-15 17:33 - 2015-11-21 06:29 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-02-15 17:33 - 2015-11-21 06:07 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2016-02-15 17:33 - 2015-11-13 07:51 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2016-02-15 17:33 - 2015-11-13 07:43 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2016-02-15 17:33 - 2015-11-13 07:42 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2016-02-15 17:33 - 2015-11-13 07:33 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2016-02-15 17:33 - 2015-11-13 07:33 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2016-02-15 17:33 - 2015-11-13 07:32 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2016-02-15 17:33 - 2015-11-13 07:21 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2016-02-15 17:33 - 2015-11-13 07:21 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2016-02-15 17:33 - 2015-11-13 07:09 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2016-02-15 17:33 - 2015-11-13 06:58 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2016-02-15 17:33 - 2015-11-13 06:57 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-02-15 17:33 - 2015-11-13 06:55 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-02-15 17:33 - 2015-11-13 06:53 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-02-15 17:33 - 2015-11-13 06:49 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-02-15 17:33 - 2015-11-13 06:39 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-02-15 17:33 - 2015-11-13 06:27 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-02-15 17:33 - 2015-11-13 06:19 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-02-15 17:33 - 2015-11-05 13:05 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2016-02-15 17:33 - 2015-11-05 11:40 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-02-15 17:33 - 2015-11-05 11:25 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2016-02-15 17:33 - 2015-11-05 10:41 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-02-15 17:33 - 2015-11-05 10:10 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-02-15 17:33 - 2015-11-05 09:15 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-02-15 17:32 - 2016-01-27 06:55 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2016-02-15 17:32 - 2016-01-27 06:44 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-02-15 17:32 - 2016-01-27 06:44 - 00085320 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2016-02-15 17:32 - 2016-01-27 06:21 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
2016-02-15 17:32 - 2016-01-27 06:15 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll
2016-02-15 17:32 - 2016-01-27 06:13 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-02-15 17:32 - 2016-01-27 06:12 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-02-15 17:32 - 2016-01-27 06:11 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
2016-02-15 17:32 - 2016-01-27 06:10 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2016-02-15 17:32 - 2016-01-27 06:08 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll
2016-02-15 17:32 - 2016-01-27 06:07 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll
2016-02-15 17:32 - 2016-01-27 06:05 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-02-15 17:32 - 2016-01-27 06:05 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-02-15 17:32 - 2016-01-27 06:04 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2016-02-15 17:32 - 2016-01-27 06:03 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-02-15 17:32 - 2016-01-27 06:02 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2016-02-15 17:32 - 2016-01-27 05:59 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll
2016-02-15 17:32 - 2016-01-27 05:57 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-02-15 17:32 - 2016-01-27 05:50 - 01504768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-02-15 17:32 - 2016-01-27 05:50 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-02-15 17:32 - 2016-01-27 05:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll
2016-02-15 17:32 - 2016-01-27 05:32 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-02-15 17:32 - 2016-01-27 05:31 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2016-02-15 17:32 - 2016-01-16 07:23 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-02-15 17:32 - 2016-01-16 07:20 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2016-02-15 17:32 - 2016-01-16 06:46 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2016-02-15 17:32 - 2016-01-16 06:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll
2016-02-15 17:32 - 2016-01-16 06:44 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2016-02-15 17:32 - 2016-01-16 06:43 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttpcom.dll
2016-02-15 17:32 - 2016-01-16 06:42 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-02-15 17:32 - 2016-01-16 06:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscoreext.dll
2016-02-15 17:32 - 2016-01-16 06:41 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2016-02-15 17:32 - 2016-01-16 06:40 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll
2016-02-15 17:32 - 2016-01-16 06:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2016-02-15 17:32 - 2016-01-16 06:40 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasautou.exe
2016-02-15 17:32 - 2016-01-16 06:39 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\FilterDS.dll
2016-02-15 17:32 - 2016-01-16 06:38 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll
2016-02-15 17:32 - 2016-01-16 06:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-02-15 17:32 - 2016-01-16 06:36 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll
2016-02-15 17:32 - 2016-01-16 06:36 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll
2016-02-15 17:32 - 2016-01-16 06:35 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasadhlp.dll
2016-02-15 17:32 - 2016-01-16 06:34 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2016-02-15 17:32 - 2016-01-16 06:34 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttpcom.dll
2016-02-15 17:32 - 2016-01-16 06:33 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-02-15 17:32 - 2016-01-16 06:32 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe
2016-02-15 17:32 - 2016-01-16 06:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasautou.exe
2016-02-15 17:32 - 2016-01-16 06:30 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll
2016-02-15 17:32 - 2016-01-16 06:26 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-02-15 17:32 - 2016-01-16 06:25 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-02-15 17:32 - 2016-01-16 06:19 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-02-15 17:32 - 2016-01-16 06:11 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2016-02-15 17:32 - 2016-01-05 03:51 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-02-15 17:32 - 2016-01-05 03:51 - 01141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-02-15 17:32 - 2016-01-05 03:23 - 00119320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL
2016-02-15 17:32 - 2016-01-05 02:57 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll
2016-02-15 17:32 - 2016-01-05 02:57 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll
2016-02-15 17:32 - 2016-01-05 02:56 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2016-02-15 17:32 - 2016-01-05 02:52 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-02-15 17:32 - 2016-01-05 02:51 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-02-15 17:32 - 2016-01-05 02:51 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-02-15 17:32 - 2016-01-05 02:49 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2016-02-15 17:32 - 2016-01-05 02:48 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll
2016-02-15 17:32 - 2016-01-05 02:47 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2016-02-15 17:32 - 2016-01-05 02:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-02-15 17:32 - 2016-01-05 02:39 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2016-02-15 17:32 - 2015-12-07 05:49 - 00412512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2016-02-15 17:32 - 2015-12-07 05:48 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-02-15 17:32 - 2015-12-07 05:15 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2016-02-15 17:32 - 2015-12-07 05:09 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2016-02-15 17:32 - 2015-12-07 05:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2016-02-15 17:32 - 2015-12-07 05:07 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2016-02-15 17:32 - 2015-12-07 05:07 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2016-02-15 17:32 - 2015-12-07 05:06 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2016-02-15 17:32 - 2015-12-07 05:05 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-02-15 17:32 - 2015-12-07 05:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe
2016-02-15 17:32 - 2015-12-07 05:04 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-02-15 17:32 - 2015-12-07 05:04 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2016-02-15 17:32 - 2015-12-07 05:02 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-02-15 17:32 - 2015-12-07 05:01 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe
2016-02-15 17:32 - 2015-12-07 05:00 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-02-15 17:32 - 2015-12-07 04:59 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2016-02-15 17:32 - 2015-12-07 04:58 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-02-15 17:32 - 2015-12-07 04:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-02-15 17:32 - 2015-12-07 04:51 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-02-15 17:32 - 2015-12-07 04:39 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-02-15 17:32 - 2015-12-07 04:38 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2016-02-15 17:32 - 2015-11-24 11:01 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2016-02-15 17:32 - 2015-11-24 10:54 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2016-02-15 17:32 - 2015-11-24 10:53 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-02-15 17:32 - 2015-11-24 10:45 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2016-02-15 17:32 - 2015-11-24 10:19 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2016-02-15 17:32 - 2015-11-24 10:12 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2016-02-15 17:32 - 2015-11-24 09:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2016-02-15 17:32 - 2015-11-24 09:14 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2016-02-15 17:32 - 2015-11-22 11:41 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-02-15 17:32 - 2015-11-22 11:34 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2016-02-15 17:32 - 2015-11-22 11:33 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2016-02-15 17:32 - 2015-11-22 11:33 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2016-02-15 17:32 - 2015-11-22 11:33 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2016-02-15 17:32 - 2015-11-22 11:30 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-02-15 17:32 - 2015-11-22 11:25 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2016-02-15 17:32 - 2015-11-22 11:00 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-02-15 17:32 - 2015-11-22 11:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2016-02-15 17:32 - 2015-11-22 10:57 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2016-02-15 17:32 - 2015-11-22 10:57 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2016-02-15 17:32 - 2015-11-22 10:57 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2016-02-15 17:32 - 2015-11-22 10:57 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2016-02-15 17:32 - 2015-11-22 10:56 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-02-15 17:32 - 2015-11-22 10:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-02-15 17:32 - 2015-11-22 10:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2016-02-15 17:32 - 2015-11-22 10:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2016-02-15 17:32 - 2015-11-22 10:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2016-02-15 17:32 - 2015-11-22 10:55 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2016-02-15 17:32 - 2015-11-22 10:54 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2016-02-15 17:32 - 2015-11-22 10:54 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2016-02-15 17:32 - 2015-11-22 10:54 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2016-02-15 17:32 - 2015-11-22 10:54 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2016-02-15 17:32 - 2015-11-22 10:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-02-15 17:32 - 2015-11-22 10:54 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2016-02-15 17:32 - 2015-11-22 10:54 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2016-02-15 17:32 - 2015-11-22 10:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2016-02-15 17:32 - 2015-11-22 10:52 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2016-02-15 17:32 - 2015-11-22 10:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-02-15 17:32 - 2015-11-22 10:51 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2016-02-15 17:32 - 2015-11-22 10:51 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-02-15 17:32 - 2015-11-22 10:51 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2016-02-15 17:32 - 2015-11-22 10:51 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2016-02-15 17:32 - 2015-11-22 10:50 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2016-02-15 17:32 - 2015-11-22 10:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2016-02-15 17:32 - 2015-11-22 10:49 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2016-02-15 17:32 - 2015-11-22 10:48 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2016-02-15 17:32 - 2015-11-22 10:45 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2016-02-15 17:32 - 2015-11-22 10:45 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2016-02-15 17:32 - 2015-11-22 10:45 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2016-02-15 17:32 - 2015-11-22 10:45 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2016-02-15 17:32 - 2015-11-22 10:45 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2016-02-15 17:32 - 2015-11-22 10:45 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2016-02-15 17:32 - 2015-11-22 10:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2016-02-15 17:32 - 2015-11-22 10:44 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-02-15 17:32 - 2015-11-22 10:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-02-15 17:32 - 2015-11-22 10:43 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2016-02-15 17:32 - 2015-11-22 10:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2016-02-15 17:32 - 2015-11-22 10:42 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2016-02-15 17:32 - 2015-11-22 10:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2016-02-15 17:32 - 2015-11-22 10:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2016-02-15 17:32 - 2015-11-22 10:41 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2016-02-15 17:32 - 2015-11-22 10:40 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-02-15 17:32 - 2015-11-22 10:40 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2016-02-15 17:32 - 2015-11-22 10:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2016-02-15 17:32 - 2015-11-22 10:39 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-02-15 17:32 - 2015-11-22 10:39 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-02-15 17:32 - 2015-11-22 10:39 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-02-15 17:32 - 2015-11-22 10:39 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2016-02-15 17:32 - 2015-11-22 10:39 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-02-15 17:32 - 2015-11-22 10:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2016-02-15 17:32 - 2015-11-22 10:34 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2016-02-15 17:32 - 2015-11-22 10:34 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2016-02-15 17:32 - 2015-11-22 10:33 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2016-02-15 17:32 - 2015-11-22 10:29 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-02-15 17:32 - 2015-11-22 10:28 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2016-02-15 17:32 - 2015-11-22 10:28 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2016-02-15 17:32 - 2015-11-22 10:28 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-02-15 17:32 - 2015-11-22 10:28 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2016-02-15 17:32 - 2015-11-22 10:27 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-02-15 17:32 - 2015-11-22 10:27 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-02-15 17:32 - 2015-11-22 10:24 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2016-02-15 17:32 - 2015-11-22 10:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2016-02-15 17:32 - 2015-11-21 06:44 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2016-02-15 17:32 - 2015-11-13 07:55 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2016-02-15 17:32 - 2015-11-13 07:51 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2016-02-15 17:32 - 2015-11-13 07:51 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2016-02-15 17:32 - 2015-11-13 07:43 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2016-02-15 17:32 - 2015-11-13 07:43 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2016-02-15 17:32 - 2015-11-13 07:42 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2016-02-15 17:32 - 2015-11-13 07:33 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-02-15 17:32 - 2015-11-13 07:21 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2016-02-15 17:32 - 2015-11-13 07:21 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2016-02-15 17:32 - 2015-11-13 07:07 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-02-15 17:32 - 2015-11-13 07:06 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2016-02-15 17:32 - 2015-11-13 07:05 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2016-02-15 17:32 - 2015-11-13 07:05 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2016-02-15 17:32 - 2015-11-13 07:05 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2016-02-15 17:32 - 2015-11-13 07:05 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2016-02-15 17:32 - 2015-11-13 07:04 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-02-15 17:32 - 2015-11-13 07:04 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-02-15 17:32 - 2015-11-13 07:04 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2016-02-15 17:32 - 2015-11-13 07:03 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2016-02-15 17:32 - 2015-11-13 07:00 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2016-02-15 17:32 - 2015-11-13 06:59 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-02-15 17:32 - 2015-11-13 06:56 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2016-02-15 17:32 - 2015-11-13 06:40 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-02-15 17:32 - 2015-11-13 06:40 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2016-02-15 17:32 - 2015-11-13 06:34 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2016-02-15 17:32 - 2015-11-13 06:33 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-02-15 17:32 - 2015-11-13 06:30 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-02-15 17:32 - 2015-11-13 06:30 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-02-15 17:32 - 2015-11-13 06:23 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-02-15 17:32 - 2015-11-05 11:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2016-02-15 17:32 - 2015-11-05 11:08 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2016-02-15 17:32 - 2015-11-05 11:04 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-02-15 17:32 - 2015-11-05 11:00 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-02-15 17:32 - 2015-11-05 10:44 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-02-15 17:32 - 2015-11-05 10:03 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2016-02-15 17:32 - 2015-11-05 10:02 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2016-02-15 17:32 - 2015-11-05 09:59 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-02-15 17:32 - 2015-11-05 09:55 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2016-02-15 17:32 - 2015-11-05 09:42 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-02-15 17:28 - 2016-02-18 12:17 - 00000010 _____ C:\Users\Annika\AppData\Local\.DG212F11-EC8C-210D-DE1E-D9584D18D740
2016-02-15 17:28 - 2016-02-18 12:17 - 00000010 _____ C:\ProgramData\.D6E5339F-CB2B-32C1-CD2D-C0295C19C822
2016-02-15 17:16 - 2016-02-15 17:16 - 00000000 ____D C:\ProgramData\Extensis
2016-02-15 16:53 - 2016-02-15 16:53 - 00001414 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CC.lnk
2016-02-15 16:50 - 2016-02-15 16:50 - 00001075 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CC (64bit).lnk
2016-02-15 16:48 - 2016-02-19 10:15 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2016-02-15 16:48 - 2016-02-15 16:48 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-02-15 16:48 - 2016-02-15 16:48 - 00002114 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk
2016-02-15 16:39 - 2016-02-15 16:39 - 00001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InDesign CC 2015.lnk
2016-02-15 16:34 - 2016-02-15 16:34 - 00002199 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CC 2015.lnk
2016-02-15 16:30 - 2016-02-15 16:30 - 00001029 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom.lnk
2016-02-15 16:20 - 2016-02-16 12:13 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-02-15 16:20 - 2016-02-15 16:20 - 00001085 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015.lnk
2016-02-15 16:20 - 2016-02-15 16:20 - 00000000 ____D C:\Users\Annika\Documents\Adobe
2016-02-15 16:19 - 2016-02-15 16:50 - 00000000 ____D C:\Program Files\Adobe
2016-02-15 16:19 - 2016-02-15 16:38 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-02-15 16:13 - 2016-02-28 13:41 - 00000000 ___RD C:\Users\Annika\Creative Cloud Files
2016-02-15 16:13 - 2016-02-28 13:41 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-02-15 16:12 - 2016-02-15 16:12 - 00001298 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2016-02-15 16:11 - 2016-02-15 17:40 - 00000000 ____D C:\ProgramData\Adobe
2016-02-15 16:11 - 2016-02-15 16:53 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-02-15 16:08 - 2016-02-28 13:41 - 00000000 ____D C:\Users\Annika\AppData\Local\Adobe
2016-02-15 16:08 - 2016-02-15 16:08 - 00692928 _____ (Adobe Systems Incorporated) C:\Users\Annika\Downloads\CreativeCloudSet-Up.exe
2016-02-15 15:37 - 2016-02-15 15:37 - 00002854 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2016-02-15 15:37 - 2016-02-15 15:37 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-02-15 15:37 - 2016-02-15 15:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-02-15 15:37 - 2016-02-15 15:37 - 00000000 ____D C:\Program Files\CCleaner
2016-02-15 15:36 - 2016-02-15 15:36 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2016-02-15 15:34 - 2016-02-16 11:55 - 00000000 ____D C:\Program Files (x86)\Rainlendar2
2016-02-15 15:23 - 2016-02-15 15:23 - 00002583 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2016-02-15 15:23 - 2016-02-15 15:23 - 00002579 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2016-02-15 15:23 - 2016-02-15 15:23 - 00002558 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2016-02-15 15:23 - 2016-02-15 15:23 - 00002533 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2016-02-15 15:23 - 2016-02-15 15:23 - 00002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2016-02-15 15:23 - 2016-02-15 15:23 - 00002497 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2016-02-15 15:23 - 2016-02-15 15:23 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2016-02-15 15:23 - 2016-02-15 15:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools
2016-02-15 15:21 - 2016-02-24 11:21 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-02-15 15:21 - 2016-02-15 15:21 - 03206344 _____ (Microsoft Corporation) C:\Users\Annika\Downloads\Setup.X86.de-DE_O365HomePremRetail_885e26a7-471a-412b-8df1-b0e831bd3451_TX_DB_.exe
2016-02-15 15:21 - 2016-02-15 15:21 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-02-15 15:19 - 2016-02-15 15:19 - 00000000 ____D C:\Users\Annika\AppData\Local\MicrosoftEdge
2016-02-15 15:16 - 2016-02-24 17:07 - 00000000 ____D C:\Users\Public\Creative
2016-02-15 15:15 - 2016-02-15 15:15 - 00000000 ____D C:\Users\Annika\AppData\Local\Comms
2016-02-15 15:13 - 2016-02-28 13:40 - 00000000 ___RD C:\Users\Annika\OneDrive
2016-02-15 15:13 - 2016-02-15 15:13 - 00002386 _____ C:\Users\Annika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-02-15 15:13 - 2016-02-15 15:13 - 00001047 _____ C:\Users\Annika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optionale Features.lnk
2016-02-15 15:13 - 2016-02-15 15:13 - 00000000 ____D C:\Users\Annika\AppData\Local\ActiveSync
2016-02-15 15:13 - 2016-02-15 15:13 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-02-15 15:13 - 2015-10-29 19:43 - 05739520 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2016-02-15 15:13 - 2015-10-29 19:43 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2016-02-15 15:13 - 2015-10-29 19:41 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2016-02-15 15:13 - 2015-10-29 19:25 - 06359040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2016-02-15 15:13 - 2015-10-29 19:24 - 04847616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2016-02-15 15:12 - 2016-02-28 13:40 - 00022280 _____ (ASRock Incorporation) C:\WINDOWS\SysWOW64\Drivers\AsrAutoChkUpdDrv.sys
2016-02-15 15:12 - 2016-02-15 15:12 - 00000000 ____D C:\Users\Annika\AppData\Local\Publishers
2016-02-15 15:11 - 2016-02-28 12:04 - 00000000 ____D C:\Users\Annika\AppData\Local\Packages
2016-02-15 15:11 - 2016-02-21 13:05 - 00000000 ____D C:\Users\Annika\AppData\Roaming\Adobe
2016-02-15 15:11 - 2016-02-16 11:53 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-02-15 15:11 - 2016-02-15 15:11 - 00000020 ___SH C:\Users\Annika\ntuser.ini
2016-02-15 15:11 - 2016-02-15 15:11 - 00000000 ____D C:\Users\Annika\AppData\Local\TileDataLayer
2016-02-15 15:07 - 2016-02-28 13:40 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-02-15 15:07 - 2016-02-15 15:07 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-02-15 15:07 - 2016-02-15 15:07 - 00000000 ____D C:\ProgramData\USOShared
2016-02-15 15:06 - 2016-02-15 15:06 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-02-15 15:06 - 2016-02-15 15:06 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
2016-02-15 15:06 - 2016-02-15 15:06 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
2016-02-15 15:06 - 2016-02-15 15:06 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2016-02-15 15:05 - 2016-02-27 14:00 - 02089590 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-15 15:05 - 2016-02-26 10:58 - 00000000 ____D C:\Users\Annika
2016-02-15 15:05 - 2016-02-15 15:15 - 00000000 ____D C:\Program Files\Common Files\logishrd
2016-02-15 15:05 - 2016-02-15 15:05 - 01989310 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Vorlagen
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Startmenü
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Netzwerkumgebung
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Lokale Einstellungen
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Eigene Dateien
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Druckumgebung
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Documents\Eigene Videos
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Documents\Eigene Musik
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Documents\Eigene Bilder
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\AppData\Local\Verlauf
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\AppData\Local\Anwendungsdaten
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 _SHDL C:\Users\Annika\Anwendungsdaten
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 ___HD C:\ProgramData\CanonBJ
2016-02-15 15:05 - 2016-02-15 15:05 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-02-15 15:05 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2016-02-15 15:04 - 2016-02-28 13:40 - 01410064 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-02-15 15:04 - 2016-02-18 12:16 - 00000000 ___DC C:\WINDOWS\Panther
2016-02-15 15:03 - 2016-02-15 15:03 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-02-15 15:03 - 2016-02-15 15:03 - 00000000 ____D C:\Windows.old
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\WINDOWS\system32\msmq
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\Program Files\MSBuild
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-02-15 15:02 - 2016-02-15 15:02 - 00000000 ____D C:\inetpub
2016-02-15 15:02 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2016-02-15 15:02 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-02-15 15:02 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2016-02-15 15:02 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-02-15 15:02 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2016-02-15 15:02 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-02-15 15:02 - 2013-08-26 05:00 - 00391168 _____ (CANON INC.) C:\WINDOWS\system32\CNMLMC4.DLL
2016-02-15 14:52 - 2016-02-15 14:52 - 06828320 _____ (Piriform Ltd) C:\Users\Annika\Downloads\ccsetup_514.exe
2016-02-15 14:50 - 2016-02-15 15:07 - 00010447 _____ C:\WINDOWS\diagerr.xml
2016-02-15 14:50 - 2016-02-15 15:07 - 00009528 _____ C:\WINDOWS\diagwrn.xml
2016-02-15 14:50 - 2016-02-15 14:59 - 00000000 ___HD C:\$WINDOWS.~BT
2016-02-15 14:49 - 2016-02-15 14:49 - 00000000 ____D C:\ESD
2016-02-15 14:44 - 2016-02-15 14:44 - 00000000 ___HD C:\$Windows.~WS
2016-02-15 14:37 - 2016-02-15 14:37 - 00000000 ____D C:\Users\Annika\AppData\Roaming\ATI
2016-02-15 14:37 - 2016-02-15 14:37 - 00000000 ____D C:\Users\Annika\AppData\Local\ATI
2016-02-15 14:36 - 2016-02-15 14:36 - 07635472 _____ (Microsoft Corporation) C:\Users\Annika\Downloads\GetWindows10-sds_____________.exe
2016-02-15 14:35 - 2016-02-28 13:39 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin
2016-02-15 14:35 - 2016-02-15 14:35 - 00000000 _____ C:\WINDOWS\ativpsrm.bin
2016-02-15 14:34 - 2016-02-24 11:26 - 00004296 _____ C:\WINDOWS\System32\Tasks\AMD Updater
2016-02-15 14:30 - 2016-02-28 13:41 - 00000000 ____D C:\Users\Annika\AppData\Roaming\Raptr
2016-02-15 14:30 - 2016-02-18 12:16 - 00000000 ____D C:\Program Files (x86)\Raptr
2016-02-15 14:30 - 2016-02-16 12:13 - 00000000 ____D C:\Users\Annika\AppData\Local\AMD
2016-02-15 14:30 - 2016-02-15 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2016-02-15 14:30 - 2016-02-15 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2016-02-15 14:30 - 2016-02-15 14:30 - 00000000 ____D C:\Users\Annika\AppData\Roaming\library_dir
2016-02-15 14:29 - 2016-02-24 11:25 - 00000000 ____D C:\Program Files\AMD
2016-02-15 14:29 - 2016-02-15 15:06 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2016-02-15 14:26 - 2016-02-24 11:24 - 00000000 ____D C:\AMD
2016-02-15 14:22 - 2016-02-15 14:22 - 00000000 ____D C:\Users\Annika\AppData\Local\Intel_Corporation
2016-02-15 14:18 - 2016-02-15 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros
2016-02-15 14:18 - 2016-02-15 14:18 - 00000000 ____D C:\ProgramData\Qualcomm
2016-02-15 14:17 - 2016-02-15 14:17 - 00000000 ____D C:\Program Files\Qualcomm Atheros
2016-02-15 14:06 - 2016-02-28 13:40 - 00003084 _____ C:\WINDOWS\System32\Tasks\AsrKM
2016-02-15 13:46 - 2016-02-28 13:40 - 00003036 _____ C:\WINDOWS\System32\Tasks\AsrSP.exe
2016-02-15 13:46 - 2016-02-15 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Killer Networking
2016-02-15 13:46 - 2016-02-15 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fatal1ty Utility
2016-02-15 13:46 - 2016-02-15 14:18 - 00000000 ____D C:\ProgramData\Killer
2016-02-15 13:46 - 2016-02-15 13:46 - 00022280 _____ (ASRock Incorporation) C:\WINDOWS\SysWOW64\Drivers\AsrDrv101.sys
2016-02-15 13:46 - 2016-02-15 13:46 - 00001309 _____ C:\Users\Public\Desktop\F-Stream Tuning.lnk
2016-02-15 13:46 - 2016-02-15 13:46 - 00001048 _____ C:\Users\Public\Desktop\ASRock SmartConnect.lnk
2016-02-15 13:46 - 2016-02-15 13:46 - 00000000 ____D C:\WINDOWS\ASRock
2016-02-15 13:46 - 2016-02-15 13:46 - 00000000 ____D C:\Program Files\Killer Networking
2016-02-15 13:46 - 2016-02-15 13:46 - 00000000 ____D C:\Program Files\ASRock Utility
2016-02-15 13:46 - 2016-02-15 13:46 - 00000000 ____D C:\Program Files (x86)\Fatal1ty Utility
2016-02-15 13:46 - 2014-07-31 16:17 - 00609544 _____ C:\WINDOWS\system32\USBKeyCredentialProvider.dll
2016-02-15 13:46 - 2014-06-30 15:10 - 00020232 _____ (ASRock Inc.) C:\WINDOWS\system32\Drivers\AsrHidFilter.sys
2016-02-15 13:46 - 2013-08-02 16:39 - 00040200 _____ (ASRock Inc.) C:\WINDOWS\system32\Drivers\AsrRamDisk.sys
2016-02-15 13:46 - 2011-11-07 10:13 - 00017192 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\AsrAppCharger.sys
2016-02-15 13:42 - 2016-02-15 13:42 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2016-02-15 13:41 - 2016-02-15 15:06 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-02-15 13:41 - 2016-02-15 14:14 - 00000000 ____D C:\ProgramData\Intel
2016-02-15 13:41 - 2016-02-15 13:41 - 00000000 ____D C:\Users\Annika\AppData\Roaming\Intel Corporation
2016-02-15 13:40 - 2016-02-15 13:40 - 00000000 ____D C:\Users\Annika\Intel
2016-02-15 13:39 - 2016-02-15 15:06 - 00000000 ____D C:\Program Files\Intel
2016-02-15 13:36 - 2012-07-26 03:36 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wdfres.dll
2016-02-15 13:36 - 2012-06-02 15:35 - 00000003 _____ C:\WINDOWS\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2016-02-15 13:35 - 2016-02-15 13:35 - 00000000 ____D C:\Users\Annika\AppData\Roaming\Avira
2016-02-15 13:30 - 2016-02-15 13:30 - 00000000 ____D C:\Users\Annika\AppData\Roaming\Mozilla
2016-02-15 13:29 - 2016-02-18 11:29 - 00146704 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2016-02-15 13:29 - 2016-02-15 15:13 - 00135880 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2016-02-15 13:29 - 2016-02-15 15:13 - 00073032 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2016-02-15 13:29 - 2016-02-15 15:13 - 00035488 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2016-02-15 13:28 - 2016-02-24 11:25 - 00000000 ____D C:\ProgramData\Package Cache
2016-02-15 13:28 - 2016-02-21 12:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-02-15 13:28 - 2016-02-21 12:54 - 00000000 ____D C:\Program Files (x86)\Avira
2016-02-15 13:28 - 2016-02-18 12:11 - 00001289 _____ C:\Users\Public\Desktop\Avira Launcher.lnk
2016-02-15 13:28 - 2016-02-18 12:11 - 00000000 ____D C:\ProgramData\Avira
2016-02-15 13:27 - 2016-02-28 13:40 - 00003022 _____ C:\WINDOWS\System32\Tasks\AsrAPPShop
2016-02-15 13:27 - 2016-02-15 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASRock Utility
2016-02-15 13:27 - 2016-02-15 13:46 - 00000000 ____D C:\Program Files (x86)\ASRock Utility
2016-02-15 13:27 - 2016-02-15 13:27 - 00001198 _____ C:\Users\Public\Desktop\APP Shop.lnk
2016-02-15 13:27 - 2016-02-15 13:27 - 00000000 ____D C:\ProgramData\ASRock
2016-02-15 13:25 - 2016-02-15 13:25 - 00000000 ____D C:\Users\Annika\Downloads\APPShop(v1.0.22)
2016-02-15 13:22 - 2016-02-15 13:46 - 00000000 ____D C:\Program Files (x86)\Intel
2016-02-15 13:22 - 2016-02-15 13:22 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2016-02-15 13:22 - 2016-02-15 13:22 - 00000000 ____D C:\Intel
2016-02-15 13:20 - 2016-02-24 17:09 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-02-15 13:20 - 2016-02-15 13:27 - 00057952 _____ C:\Users\Annika\AppData\Local\GDIPFONTCACHEV1.DAT
2016-02-15 13:19 - 2016-02-15 14:18 - 00002783 _____ C:\Users\Public\Desktop\Killer Network Manager.lnk
2016-02-15 13:18 - 2016-02-15 14:17 - 00000000 _____ C:\Users\Annika\AppData\Local\Driver_LOM_8161Present.flag
2016-02-15 13:18 - 2016-02-15 13:46 - 00000000 ____D C:\ProgramData\Downloaded Installations
2016-02-15 13:16 - 2016-02-28 13:40 - 00001106 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-15 13:16 - 2016-02-28 13:25 - 00001110 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-15 13:16 - 2016-02-19 22:26 - 00002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-15 13:16 - 2016-02-19 22:26 - 00002258 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-02-15 13:16 - 2016-02-15 15:52 - 00000000 ____D C:\Users\Annika\AppData\Local\Google
2016-02-15 13:16 - 2016-02-15 15:07 - 00004216 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-15 13:16 - 2016-02-15 15:07 - 00003964 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-15 13:16 - 2016-02-15 14:08 - 00000000 ____D C:\Users\Annika\Downloads\Setup
2016-02-15 13:16 - 2016-02-15 13:16 - 00000000 ____D C:\Program Files (x86)\Google
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Vorlagen
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Startmenü
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Netzwerkumgebung
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Lokale Einstellungen
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Eigene Dateien
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Druckumgebung
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Videos
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Musik
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Bilder
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Verlauf
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Users\Default.migrated\Anwendungsdaten
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Programme
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\ProgramData\Vorlagen
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\ProgramData\Startmenü
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\ProgramData\Favoriten
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\ProgramData\Dokumente
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 _SHDL C:\Dokumente und Einstellungen
2016-02-15 13:04 - 2016-02-15 13:04 - 00000000 ____D C:\Users\Annika\AppData\Local\VirtualStore
2016-02-15 13:04 - 2011-04-12 08:54 - 00000000 ____D C:\Users\Annika\AppData\Roaming\Media Center Programs
2016-02-03 17:14 - 2016-02-03 17:14 - 00118608 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2016-02-03 17:13 - 2016-02-03 17:13 - 00458472 _____ C:\WINDOWS\system32\amdmiracast.dll
2016-02-03 17:13 - 2016-02-03 17:13 - 00141792 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2016-02-03 17:13 - 2016-02-03 17:13 - 00128384 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2016-02-03 17:13 - 2016-02-03 17:13 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2016-02-03 17:13 - 2016-02-03 17:13 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2016-02-03 17:13 - 2016-02-03 17:13 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2016-02-03 17:13 - 2016-02-03 17:13 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2016-02-03 17:12 - 2016-02-03 17:12 - 10963496 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll
2016-02-03 17:12 - 2016-02-03 17:12 - 00120656 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll
2016-02-03 17:09 - 2016-02-03 17:09 - 00296648 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdacpksd.sys
2016-02-03 17:01 - 2016-02-03 17:01 - 49984512 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll
2016-02-03 17:01 - 2016-02-03 17:01 - 00235008 _____ C:\WINDOWS\system32\clinfo.exe
2016-02-03 16:58 - 2016-02-03 16:58 - 00065024 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2016-02-03 16:58 - 2016-02-03 16:58 - 00059392 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2016-02-03 16:57 - 2016-02-03 16:57 - 27596800 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl64.dll
2016-02-03 16:35 - 2016-02-03 16:35 - 06643200 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle64.dll
2016-02-03 16:35 - 2016-02-03 16:35 - 00677888 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2016-02-03 16:35 - 2016-02-03 16:35 - 00562688 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2016-02-03 16:35 - 2016-02-03 16:35 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll
2016-02-03 16:35 - 2016-02-03 16:35 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll
2016-02-03 16:30 - 2016-02-03 16:30 - 05223936 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmantle32.dll
2016-02-03 16:27 - 2016-02-03 16:27 - 00134656 _____ C:\WINDOWS\system32\amdhdl64.dll
2016-02-03 16:27 - 2016-02-03 16:27 - 00123392 _____ C:\WINDOWS\SysWOW64\amdhdl32.dll
2016-02-03 16:26 - 2016-02-03 16:26 - 31378432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll
2016-02-03 16:26 - 2016-02-03 16:26 - 00096256 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll
2016-02-03 16:26 - 2016-02-03 16:26 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll
2016-02-03 16:25 - 2016-02-03 16:25 - 08007680 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll
2016-02-03 16:24 - 2016-02-03 16:24 - 09803264 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll
2016-02-03 16:24 - 2016-02-03 16:24 - 00865280 _____ (AMD) C:\WINDOWS\system32\coinst_15.30.dll
2016-02-03 16:23 - 2016-02-03 16:23 - 15711744 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll
2016-02-03 16:23 - 2016-02-03 16:23 - 00685672 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb
2016-02-03 16:23 - 2016-02-03 16:23 - 00685672 _____ C:\WINDOWS\system32\atiapfxx.blb
2016-02-03 16:23 - 2016-02-03 16:23 - 00367104 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2016-02-03 16:23 - 2016-02-03 16:23 - 00062464 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll
2016-02-03 16:23 - 2016-02-03 16:23 - 00055808 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll
2016-02-03 16:23 - 2016-02-03 16:23 - 00052224 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll
2016-02-03 16:23 - 2016-02-03 16:23 - 00049152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll
2016-02-03 16:22 - 2016-02-03 16:22 - 14302208 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll
2016-02-03 16:21 - 2016-02-03 16:21 - 00050688 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll
2016-02-03 16:21 - 2016-02-03 16:21 - 00039424 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll
2016-02-03 16:20 - 2016-02-03 16:20 - 25841152 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll
2016-02-03 16:19 - 2016-02-03 16:19 - 03437632 _____ C:\WINDOWS\system32\atiumd6a.cap
2016-02-03 16:16 - 2016-02-03 16:16 - 00561664 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2016-02-03 16:16 - 2016-02-03 16:16 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2016-02-03 16:16 - 2016-02-03 16:16 - 00246272 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2016-02-03 16:16 - 2016-02-03 16:16 - 00224256 _____ C:\WINDOWS\system32\dgtrayicon.exe
2016-02-03 16:16 - 2016-02-03 16:16 - 00209920 _____ C:\WINDOWS\system32\GameManager64.dll
2016-02-03 16:16 - 2016-02-03 16:16 - 00204800 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2016-02-03 16:16 - 2016-02-03 16:16 - 00189952 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2016-02-03 16:16 - 2016-02-03 16:16 - 00186368 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2016-02-03 16:16 - 2016-02-03 16:16 - 00162304 _____ C:\WINDOWS\system32\atieah64.exe
2016-02-03 16:16 - 2016-02-03 16:16 - 00145408 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2016-02-03 16:16 - 2016-02-03 16:16 - 00078336 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2016-02-03 16:15 - 2016-02-03 16:15 - 00190976 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll
2016-02-03 16:14 - 2016-02-03 16:14 - 03471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap
2016-02-03 16:11 - 2016-02-03 16:11 - 01272832 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2016-02-03 16:11 - 2016-02-03 16:11 - 00089088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2016-02-03 16:10 - 2016-02-03 16:10 - 00941568 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2016-02-03 16:10 - 2016-02-03 16:10 - 00157696 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2016-02-03 16:10 - 2016-02-03 16:10 - 00080896 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2016-02-03 16:10 - 2016-02-03 16:10 - 00075776 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll
2016-02-03 16:10 - 2016-02-03 16:10 - 00070144 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll
2016-02-03 16:10 - 2016-02-03 16:10 - 00070144 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll
2016-02-03 16:10 - 2016-02-03 16:10 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
2016-02-03 16:09 - 2016-02-03 16:09 - 00195072 _____ C:\WINDOWS\system32\hsa-thunk64.dll
2016-02-03 16:09 - 2016-02-03 16:09 - 00174592 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll
2016-02-03 10:35 - 2016-02-03 10:35 - 02412544 _____ C:\WINDOWS\system32\amdacpusl.pdb
2016-02-03 10:26 - 2016-02-03 10:26 - 00364544 _____ (Advanced Micro Devices) C:\WINDOWS\system32\amdacpusl.dll
2016-02-03 10:26 - 2016-02-03 10:26 - 00306176 _____ C:\WINDOWS\system32\amdacpusl.pdb.pub
2016-02-03 10:26 - 2016-02-03 10:26 - 00248832 _____ (Advanced Micro Devices) C:\WINDOWS\SysWOW64\amdacpusl.dll
2016-01-31 09:10 - 2016-01-31 09:10 - 00635120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp140.dll
2016-01-31 09:10 - 2016-01-31 09:10 - 00390408 _____ (Microsoft Corporation) C:\WINDOWS\system32\vccorlib140.dll
2016-01-31 09:10 - 2016-01-31 09:10 - 00333080 _____ (Microsoft Corporation) C:\WINDOWS\system32\concrt140.dll
2016-01-31 09:10 - 2016-01-31 09:10 - 00088816 _____ (Microsoft Corporation) C:\WINDOWS\system32\vcruntime140.dll
2016-01-31 07:17 - 2016-01-31 07:17 - 00439536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp140.dll
2016-01-31 07:17 - 2016-01-31 07:17 - 00267016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vccorlib140.dll
2016-01-31 07:17 - 2016-01-31 07:17 - 00243480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\concrt140.dll
2016-01-31 07:17 - 2016-01-31 07:17 - 00085232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vcruntime140.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-02-28 13:39 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-02-27 14:00 - 2015-10-30 19:35 - 00889046 _____ C:\WINDOWS\system32\perfh007.dat
2016-02-27 14:00 - 2015-10-30 19:35 - 00197628 _____ C:\WINDOWS\system32\perfc007.dat
2016-02-27 14:00 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-02-27 12:48 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2016-02-27 12:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-02-27 11:11 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-02-26 10:35 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-02-24 11:22 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-02-22 15:08 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-02-21 12:33 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SchCache
2016-02-19 11:39 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2016-02-18 12:16 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MsDtc
2016-02-16 11:56 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat
2016-02-15 21:44 - 2015-10-30 19:44 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-02-15 21:44 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-02-15 21:44 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-02-15 21:44 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-02-15 15:21 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-02-15 15:13 - 2015-10-30 19:36 - 00000000 ____D C:\WINDOWS\OCR
2016-02-15 15:12 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2016-02-15 15:12 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2016-02-15 15:07 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media
2016-02-15 15:07 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries
2016-02-15 15:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-02-15 15:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2016-02-15 15:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2016-02-15 15:07 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate
2016-02-15 15:07 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT
2016-02-15 15:07 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-02-15 15:06 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2016-02-15 15:06 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\DigitalLocker
2016-02-15 15:06 - 2015-10-30 08:24 - 00000000 __SHD C:\Program Files\Windows Sidebar
2016-02-15 15:06 - 2015-10-30 08:24 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2016-02-15 15:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2016-02-15 15:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2016-02-15 15:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-02-15 15:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\IME
2016-02-15 15:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\schemas
2016-02-15 15:06 - 2011-04-12 08:54 - 00000000 ___RD C:\Users\Public\Recorded TV
2016-02-15 15:06 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Microsoft Games
2016-02-15 15:06 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\DVD Maker
2016-02-15 15:06 - 2009-07-14 04:20 - 00000000 ____D C:\Users\Default.migrated
2016-02-15 15:05 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-02-15 15:04 - 2015-10-30 19:55 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2016-02-15 15:04 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-02-15 15:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2016-02-15 15:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2016-02-15 15:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI
2016-02-15 15:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2016-02-15 15:02 - 2015-10-30 08:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2016-02-15 15:02 - 2015-10-30 08:19 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2016-02-15 15:02 - 2015-10-30 08:19 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2016-02-15 15:02 - 2015-10-30 08:19 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2016-02-15 15:02 - 2015-10-30 08:19 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2016-02-15 15:02 - 2015-10-30 08:19 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2016-02-15 15:02 - 2015-10-30 08:19 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2016-02-15 15:02 - 2015-10-30 08:18 - 01417728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2016-02-15 15:02 - 2015-10-30 08:18 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2016-02-15 15:02 - 2015-10-30 08:18 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2016-02-15 15:02 - 2015-10-30 08:18 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2016-02-15 15:02 - 2015-10-30 08:18 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2016-02-15 15:02 - 2015-10-30 08:18 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2016-02-15 15:02 - 2015-10-30 08:18 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2016-02-15 15:02 - 2015-10-30 08:18 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2016-02-15 15:02 - 2015-10-30 08:18 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2016-02-15 15:02 - 2015-10-30 08:18 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2016-02-15 15:00 - 2009-07-14 05:45 - 00021856 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-15 15:00 - 2009-07-14 05:45 - 00021856 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-15 13:02 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-02-03 20:01 - 2015-10-30 08:26 - 00828920 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-02-03 20:01 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-03 17:14 - 2015-12-16 20:06 - 00110344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2016-02-03 17:13 - 2015-12-16 20:06 - 00152056 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 13395360 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 11098920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 09176928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 09017808 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 08089248 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 01503416 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 01235128 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 00133528 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll
2016-02-03 17:12 - 2015-12-16 20:06 - 00102616 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll
2016-02-03 17:06 - 2015-12-16 20:07 - 23976448 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys
2016-02-03 16:59 - 2015-12-16 20:07 - 41510912 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll
2016-02-03 16:57 - 2015-12-16 20:07 - 22348288 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl12cl.dll
2016-02-03 16:10 - 2015-12-16 20:07 - 00941568 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2016-02-03 16:10 - 2015-12-16 20:07 - 00672768 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys
2016-02-03 16:10 - 2015-12-16 20:07 - 00142336 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-02-21 13:05 - 2016-02-26 12:18 - 0000033 _____ () C:\Users\Annika\AppData\Roaming\AdobeWLCMCache.dat
2016-02-16 13:18 - 2016-02-16 13:18 - 0000010 _____ () C:\Users\Annika\AppData\Local\.C3F2FH85-G3D2-2F02-D5CH-7D3D8C553E56
2016-02-15 17:28 - 2016-02-18 12:17 - 0000010 _____ () C:\Users\Annika\AppData\Local\.DG212F11-EC8C-210D-DE1E-D9584D18D740
2016-02-18 12:30 - 2016-02-18 12:30 - 0001456 _____ () C:\Users\Annika\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2016-02-19 12:37 - 2016-02-27 16:43 - 0120432 _____ () C:\Users\Annika\AppData\Local\ars.cache
2016-02-19 12:37 - 2016-02-27 16:43 - 0515530 _____ () C:\Users\Annika\AppData\Local\census.cache
2016-02-15 13:18 - 2016-02-15 14:17 - 0000000 _____ () C:\Users\Annika\AppData\Local\Driver_LOM_8161Present.flag
2016-02-19 12:27 - 2016-02-19 12:27 - 0000036 _____ () C:\Users\Annika\AppData\Local\housecall.guid.cache
2016-02-21 11:18 - 2016-02-21 11:18 - 0007597 _____ () C:\Users\Annika\AppData\Local\Resmon.ResmonCfg
2016-02-15 17:28 - 2016-02-18 12:17 - 0000010 _____ () C:\ProgramData\.D6E5339F-CB2B-32C1-CD2D-C0295C19C822
2016-02-16 13:18 - 2016-02-16 13:18 - 0000010 _____ () C:\ProgramData\.F4G6EEC4-B493-3E31-C6BG-8C6C9B764D36
2016-02-16 14:31 - 2016-02-16 14:31 - 0000043 _____ () C:\ProgramData\.SF170
2016-02-16 13:47 - 2016-02-16 13:47 - 0000043 _____ () C:\ProgramData\.ST160

Einige Dateien in TEMP:
====================
C:\Users\Annika\AppData\Local\Temp\avgnt.exe
C:\Users\Annika\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-02-25 15:27

==================== Ende von FRST.txt ============================
Teil 1 Addition:

Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-02-2016
durchgeführt von Annika (2016-02-28 13:42:21)
Gestartet von C:\Users\Annika\Desktop\TrojanerBoard
Windows 10 Home Version 1511 (X64) (2016-02-15 14:11:56)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-318997953-1686202031-3206138427-500 - Administrator - Disabled)
Annika (S-1-5-21-318997953-1686202031-3206138427-1000 - Administrator - Enabled) => C:\Users\Annika
DefaultAccount (S-1-5-21-318997953-1686202031-3206138427-503 - Limited - Disabled)
Gast (S-1-5-21-318997953-1686202031-3206138427-501 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

ACP Application (Version: 2016.0203.1025.57 - Advanced Micro Devices, Inc.) Hidden
Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 15.010.20059 - Adobe Systems Incorporated)
Adobe Bridge CC (64 Bit) (HKLM-x32\...\{359F8007-6486-429C-A8C5-D67F6897C88C}) (Version: 6.2 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.5.1.209 - Adobe Systems Incorporated)
Adobe Extension Manager CC (HKLM-x32\...\{244FD30F-63F1-49B9-9D98-1150FF4FFCB1}) (Version: 7.3.2 - Adobe Systems Incorporated)
Adobe Illustrator CC 2015 (HKLM-x32\...\ILST_19_2_1) (Version: 19.2.1 - Adobe Systems Incorporated)
Adobe InDesign CC 2015 (HKLM-x32\...\{DBFD0312-6E55-1014-8952-E78D43BC0147}) (Version: 11.2.0.100 - Adobe Systems Incorporated)
Adobe Lightroom (HKLM-x32\...\{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.4 - Adobe Systems Incorporated)
Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.1.2 - Adobe Systems Incorporated)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 5.00 - Advanced Micro Devices, Inc.)
AOMEI Backupper Professional (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF55E6C09D}_is1) (Version:  - AOMEI Technology Co., Ltd.)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.15.141 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{3b87484e-d70b-4b4f-ad59-2ae89571e2cf}) (Version: 1.1.56.9119 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.56.9119 - Avira Operations GmbH & Co. KG) Hidden
Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 2.1.12.1147 - Avira Operations GmbH & Co. KG)
Catalyst Control Center Next Localization BR (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0203.1043.19267 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.14 - Piriform)
Dolby Digital Live Pack (HKLM-x32\...\Dolby Digital Live Pack) (Version: 3.03 - Creative Technology Limited)
DTS Connect Pack (HKLM-x32\...\DTS Connect Pack) (Version: 1.00 - Creative Technology Limited)
Extensis Suitcase Fusion 6 (HKLM-x32\...\{4D39B605-C4D2-4391-B47F-41033BD1E570}) (Version: 17.2.2 - 2016 Celartem, Inc. d.b.a Extensis All rights reserved)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.116 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.13.258 - SurfRight B.V.)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1153 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{7228EFBA-512B-4EB3-B8A7-E2C331475DF4}) (Version: 5.0.10.2808 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Killer Bandwidth Control Filter Driver (Version: 1.1.56.1651 - Rivet Networks) Hidden
Killer E220x Drivers (Version: 1.1.56.1651 - Rivet Networks) Hidden
Killer Network Manager (Version: 1.1.56.1651 - Rivet Networks) Hidden
Killer Performance Suite (HKLM-x32\...\{DB8A465E-67BE-4450-9C9A-FECEA6222B95}) (Version: 1.1.56.1651 - Rivet Networks)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.6568.2025 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.6528.1011 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.6528.1011 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.6528.1011 - Microsoft Corporation) Hidden
Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.0.30.1259 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer E220x Drivers (Version: 1.0.30.1259 - Qualcomm Atheros) Hidden
Qualcomm Atheros Killer Network Manager Suite (HKLM-x32\...\{FE5DFB80-6937-4154-A2C7-EF845C1301F8}) (Version: 1.0.30.1259 - Qualcomm Atheros)
Qualcomm Atheros Network Manager (Version: 1.0.30.1259 - Qualcomm Atheros) Hidden
Rainlendar2 (remove only) (HKLM-x32\...\Rainlendar2) (Version:  - )
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Sound Blaster Z-Series (HKLM-x32\...\{9E61ABC7-B276-46F1-808F-A8A4EF0D57DF}) (Version: 1.01.03 - Creative Technology Limited)
Sound Blaster Z-Series Extras (HKLM-x32\...\{9D9DB4BA-E352-4AC8-AD2B-B10104F5AB80}) (Version: 1.0 - Creative Technology Limited)
Spyder4Express (HKLM-x32\...\Spyder4Express) (Version:  - )
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.2 - VideoLAN)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-318997953-1686202031-3206138427-1000_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-368E4FF85B2B}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-318997953-1686202031-3206138427-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Annika\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-318997953-1686202031-3206138427-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0DFD8B90-CC1D-49DD-B302-B9A40114C045} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {1CBB63A7-4C85-44F2-A7F9-43F71B24C3CF} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {1CFA021B-1EB6-41B9-A6E0-7FD9DAD20D15} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {2359E615-45A3-46F1-A0F1-A2DA02820F28} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {2E863842-590C-4D93-B3CA-260C21AD697E} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {32FD6C7A-15DB-4F35-A5F6-E6B4AD8F79FC} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-02-04] (Microsoft Corporation)
Task: {3D8AEEB8-5BD0-4C4A-B89E-3C2182034243} - System32\Tasks\AsrSP.exe => C:\Program Files (x86)\Fatal1ty Utility\F-Stream Tuning\Bin\AsrSP.exe [2014-12-02] ()
Task: {59B721FA-E0F8-48D5-9C1A-1D29E8690301} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-14] (Adobe Systems Incorporated)
Task: {5A472278-D0F2-4351-9997-1992E39077E7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-01-15] (Piriform Ltd)
Task: {5BC57399-97D3-40CE-9407-74ECC25C48BB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-02-04] (Microsoft Corporation)
Task: {5CD79A7B-2F1A-45D8-A39E-9EF4B9DB7B45} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {5D8AA55B-8E4A-42D7-9B93-767A9EF3B27B} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {5DC294E0-637D-497D-A0C1-C8411D61A82F} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {5ECB1460-BB1B-485F-AD86-792E730669DE} - System32\Tasks\AsrAPPShop => C:\Program Files (x86)\ASRock Utility\APP Shop\AsrAPPShop.exe [2015-11-11] ()
Task: {615B5EDE-644E-475A-B03A-6021F6F7A1AD} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {6B8077C4-DB79-4F8C-9692-8FC13B74308D} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {6BB2AC0A-5326-4FBE-A6C5-43E1BCB7BE2A} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-02-24] (Microsoft Corporation)
Task: {8AA4449C-94B8-4614-81F5-4D23D360230E} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {98C9151F-019E-475A-915B-84B68E8B73F0} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-02-03] (Advanced Micro Devices, Inc.)
Task: {9C86CD8D-E38B-4D17-BE82-02B87C497638} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {AFFA05D4-5302-4F99-BC15-6FCD0693961E} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {B606BD65-313E-4E7B-AA00-1FA24A6525DF} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {BB5DB4A5-8119-497B-A264-FD405FB975DC} - System32\Tasks\AsrKM => C:\Program Files (x86)\ASRock Utility\Key Master\AsrKM.exe [2014-04-23] ()
Task: {C2F28DBE-A241-44A5-B555-E70F69E12DF7} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {C4966D06-5C97-498E-8738-0FC9E8DC895D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-15] (Google Inc.)
Task: {C88D7775-3BDD-4874-941C-77200A650728} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-15] (Google Inc.)
Task: {CA9A9898-A0BB-4363-96E2-1CFCED2A6401} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {CEEB3B9E-B252-4459-8BE9-D9A03A9B9B3C} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-02-15] (Microsoft Corporation)
Task: {D57ED578-CEE2-480A-94F8-33E685D45082} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {D5FCBB04-4199-4EE7-9DB2-DF7AE7B75A61} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {DF71AE38-D69E-4330-BA59-B74FBC75CD66} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {EB1A0986-8D0B-45F8-95CC-9053E72DEE88} - System32\Tasks\AdobeAAMUpdater-1.0-Fussel-Annika => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-01-07] (Adobe Systems Incorporated)
Task: {EFF5BDC0-2C44-4D86-B72E-B9627610FAC1} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {FD0BAC08-6F15-4A47-ACFB-CDE11CF93EBD} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {FD176E6E-8C25-4FED-9F6F-9E9F5A90D979} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {FF4BE04F-C2E3-4AA1-A696-C655D9BEABA7} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-02-15 13:46 - 2014-07-31 16:17 - 00463112 _____ () C:\Program Files (x86)\Fatal1ty Utility\F-Stream Tuning\Bin\IOMonitorSrv.exe
2016-02-15 15:21 - 2016-02-04 05:51 - 00173256 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll
2016-02-15 17:33 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-02-15 15:37 - 2016-02-15 15:37 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-02-15 17:33 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-01-22 13:55 - 2016-01-22 13:55 - 00553136 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2016-02-15 13:27 - 2015-11-11 15:03 - 06101768 _____ () C:\Program Files (x86)\ASRock Utility\APP Shop\AsrAPPShop.exe
2016-02-15 17:32 - 2015-12-07 05:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-02-15 17:32 - 2015-12-07 05:00 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-02-15 17:33 - 2016-01-05 02:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-02-15 17:33 - 2016-01-05 02:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-02-15 17:33 - 2016-01-16 06:10 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-02-15 17:33 - 2016-01-16 06:13 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-11-13 13:19 - 2015-11-13 13:19 - 03097640 _____ () C:\Program Files\Rainlendar2\Rainlendar2.exe
2014-04-28 07:19 - 2014-04-28 07:19 - 00184320 _____ () C:\Program Files\Rainlendar2\lua52.dll
2015-11-13 10:51 - 2015-11-13 10:51 - 00330240 _____ () C:\Program Files\Rainlendar2\libical.dll
2015-11-13 10:51 - 2015-11-13 10:51 - 00060928 _____ () C:\Program Files\Rainlendar2\libicalss.dll
2015-11-13 13:19 - 2015-11-13 13:19 - 00075816 _____ () C:\Program Files\Rainlendar2\plugins\iCalendarPlugin.dll
2015-11-13 13:20 - 2015-11-13 13:20 - 00283176 _____ () C:\Program Files\Rainlendar2\plugins\GoogleCalendarPlugin.dll
2014-04-28 07:19 - 2014-04-28 07:19 - 00015872 _____ () C:\Program Files\Rainlendar2\lfs.dll
2016-01-15 21:44 - 2016-01-15 21:44 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2013-08-08 14:30 - 2013-08-08 14:30 - 00283648 _____ () C:\Program Files\Qualcomm Atheros\Network Manager\NetworkManager.exe
2016-01-22 13:54 - 2016-01-22 13:54 - 31420080 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
2016-02-23 14:11 - 2015-09-15 17:56 - 00306904 _____ () C:\Program Files (x86)\AOMEI Backupper\UiLogic.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00241368 _____ () C:\Program Files (x86)\AOMEI Backupper\diskmgr.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00290520 _____ () C:\Program Files (x86)\AOMEI Backupper\Comn.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00122584 _____ () C:\Program Files (x86)\AOMEI Backupper\FuncLogic.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00347864 _____ () C:\Program Files (x86)\AOMEI Backupper\ImgFile.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00028376 _____ () C:\Program Files (x86)\AOMEI Backupper\Encrypt.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00483032 _____ () C:\Program Files (x86)\AOMEI Backupper\EnumFolder.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00069336 _____ () C:\Program Files (x86)\AOMEI Backupper\Compress.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00102104 _____ () C:\Program Files (x86)\AOMEI Backupper\BrLog.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00691928 _____ () C:\Program Files (x86)\AOMEI Backupper\Sync.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00282328 _____ () C:\Program Files (x86)\AOMEI Backupper\Clone.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00118488 _____ () C:\Program Files (x86)\AOMEI Backupper\Backup.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00155352 _____ () C:\Program Files (x86)\AOMEI Backupper\FlBackup.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00077528 _____ () C:\Program Files (x86)\AOMEI Backupper\Ldm.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00061144 _____ () C:\Program Files (x86)\AOMEI Backupper\Device.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00282328 _____ () C:\Program Files (x86)\AOMEI Backupper\BrFat.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00962264 _____ () C:\Program Files (x86)\AOMEI Backupper\BrNtfs.dll
2016-02-23 14:11 - 2015-02-26 00:00 - 02403504 _____ () C:\Program Files (x86)\AOMEI Backupper\QtCore4.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00102104 _____ () C:\Program Files (x86)\AOMEI Backupper\BrVol.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00253656 _____ () C:\Program Files (x86)\AOMEI Backupper\GptBcd.dll
2016-02-23 14:11 - 2015-09-15 17:56 - 00175832 _____ () C:\Program Files (x86)\AOMEI Backupper\DeviceMgr.dll
2016-02-15 15:37 - 2016-02-15 15:37 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-02-24 10:48 - 2016-02-24 10:48 - 00158400 _____ () C:\Program Files (x86)\Microsoft Office\root\Office16\JitV.dll
2016-01-06 11:48 - 2016-01-06 11:48 - 01007616 _____ () C:\Program Files (x86)\Extensis\Suitcase Fusion 6\libxml2.2.6.24.dll
2016-01-06 11:48 - 2016-01-06 11:48 - 00901120 _____ () C:\Program Files (x86)\Extensis\Suitcase Fusion 6\iconv-1.9.2.dll
2016-01-06 11:48 - 2016-01-06 11:48 - 00007168 _____ () C:\Program Files (x86)\Extensis\Suitcase Fusion 6\libcharset.dll
2011-08-09 16:06 - 2012-02-07 14:59 - 00139264 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\Appearance Pak.dll
2011-08-09 16:06 - 2012-02-07 14:59 - 00151552 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\RegEx.dll
2011-08-09 16:06 - 2012-02-07 14:59 - 12977947 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\RBScript.dll
2011-08-09 16:06 - 2012-02-07 14:59 - 00098304 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\Shell.dll
2011-08-09 16:06 - 2012-02-07 14:59 - 00761856 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\XML.dll
2011-08-09 16:06 - 2012-02-07 14:59 - 00274432 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\CGamma.dll
2011-08-09 16:06 - 2012-02-07 14:59 - 00086016 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\CSensor.dll
2011-09-22 15:22 - 2012-02-07 14:59 - 00039936 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\MBSRegistrationPlugin16724.dll
2011-09-22 15:22 - 2012-02-07 14:59 - 00025600 _____ () C:\Program Files (x86)\Datacolor\Spyder4Express\Utility\SpyderUtility Libs\MBSPluginVersionPlugin16724.dll
2016-02-19 22:26 - 2016-02-18 05:14 - 01630360 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libglesv2.dll
2016-02-19 22:26 - 2016-02-18 05:14 - 00085656 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libegl.dll
2016-01-28 12:32 - 2016-01-28 12:32 - 40523456 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libcef.dll
2015-03-17 01:34 - 2015-03-17 01:34 - 00010240 _____ () C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\locale\de_de\acrotray.deu
2010-11-22 23:56 - 2010-11-22 23:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd
2014-05-14 00:26 - 2014-05-14 00:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd
2014-05-14 00:26 - 2014-05-14 00:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd
2014-05-14 00:26 - 2014-05-14 00:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd
2014-05-14 00:26 - 2014-05-14 00:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd
2010-11-22 23:57 - 2010-11-22 23:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll
2010-11-22 23:56 - 2010-11-22 23:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd
2010-11-22 23:57 - 2010-11-22 23:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd
2010-11-22 23:57 - 2010-11-22 23:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd
2011-02-15 19:17 - 2011-02-15 19:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll
2010-11-22 23:57 - 2010-11-22 23:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd
2014-05-14 00:26 - 2014-05-14 00:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd
2015-10-21 21:29 - 2015-10-21 21:29 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll
2015-10-21 21:29 - 2015-10-21 21:29 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll
2015-06-27 00:09 - 2015-06-27 00:09 - 00271872 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll
2010-11-22 23:56 - 2010-11-22 23:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll
2010-11-22 23:57 - 2010-11-22 23:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd
2010-11-22 23:56 - 2010-11-22 23:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd
2010-11-22 23:57 - 2010-11-22 23:57 - 00024064 _____ () C:\Program Files (x86)\Raptr\win32pipe.pyd
2010-11-22 23:57 - 2010-11-22 23:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd
2014-06-18 01:56 - 2014-06-18 01:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd
2011-02-15 19:17 - 2011-02-15 19:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll
2010-11-23 00:06 - 2010-11-23 00:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll
2013-05-10 00:52 - 2013-05-10 00:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll
2013-05-10 00:52 - 2013-05-10 00:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll
2013-05-10 00:52 - 2013-05-10 00:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll
2013-05-03 19:57 - 2013-05-03 19:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll
2013-05-03 19:56 - 2013-05-03 19:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll
2013-05-03 19:56 - 2013-05-03 19:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll
2013-05-03 19:57 - 2013-05-03 19:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll
2013-05-03 19:56 - 2013-05-03 19:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll

Alt 28.02.2016, 14:55   #9
Lenani
 
TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los. - Standard

TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.


Teil 2 Addition:

Code:
ATTFilter
2013-05-03 19:57 - 2013-05-03 19:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll
2013-05-03 19:57 - 2013-05-03 19:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll
2013-05-03 19:57 - 2013-05-03 19:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll
2013-05-03 19:57 - 2013-05-03 19:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll
2016-01-28 12:32 - 2016-01-28 12:32 - 01365696 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libglesv2.dll
2016-01-28 12:32 - 2016-01-28 12:32 - 00219328 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libegl.dll
2016-01-21 00:22 - 2016-01-21 00:22 - 00124416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\fs-ext\build\Release\fs-ext.node
2016-01-21 00:22 - 2016-01-21 00:22 - 00188416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2016-01-21 00:23 - 2016-01-21 00:23 - 00121344 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ref\build\Release\binding.node
2016-01-21 00:23 - 2016-01-21 00:23 - 00129536 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ffi\build\Release\ffi_bindings.node
2016-02-12 10:24 - 2016-02-12 10:24 - 00158400 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-ProxyResolver\native\ProxyResolverWin.dll
2016-01-21 00:22 - 2016-01-21 00:22 - 00081408 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\idle-gc\build\Release\idle-gc.node
2016-01-08 03:05 - 2016-01-08 03:05 - 00124416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\fs-ext\build\Release\fs-ext.node
2016-01-08 03:05 - 2016-01-08 03:05 - 00121344 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ref\build\Release\binding.node
2016-01-08 03:05 - 2016-01-08 03:05 - 00129536 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ffi\build\Release\ffi_bindings.node
2016-01-08 03:05 - 2016-01-08 03:05 - 00188416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2016-01-28 13:03 - 2016-01-28 13:03 - 00158400 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-ProxyResolver\native\ProxyResolverWin.dll
2016-01-08 03:05 - 2016-01-08 03:05 - 00085504 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ws\build\Release\bufferutil.node
2016-01-08 03:05 - 2016-01-08 03:05 - 00086016 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ws\build\Release\validation.node
2016-01-08 03:05 - 2016-01-08 03:05 - 00081408 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\idle-gc\build\Release\idle-gc.node

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-318997953-1686202031-3206138427-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Annika\Desktop\bg.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\Run: => "AdAwareTray"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{EED89F22-33F2-4022-864B-2CC1D23F396A}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1D104A6F-7EE8-4F89-A048-E9681A29EE3C}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{C526DCB8-C0BF-495B-94AC-F1AB6D44628D}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{D0FE2D06-BED8-4A85-B472-94353CAC3953}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{3831CED4-48F4-439F-B4D4-0B66DB8DF384}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [TCP Query User{46EFE2F5-3C50-499A-9404-CA82756FFD4D}C:\program files\adobe\adobe photoshop cc 2015\photoshop.exe] => (Allow) C:\program files\adobe\adobe photoshop cc 2015\photoshop.exe
FirewallRules: [UDP Query User{9CE16210-54C3-4A12-8EC1-84169D5D1F83}C:\program files\adobe\adobe photoshop cc 2015\photoshop.exe] => (Allow) C:\program files\adobe\adobe photoshop cc 2015\photoshop.exe
FirewallRules: [TCP Query User{58CC27AD-6B30-49D3-BD71-E96DC1A7C54B}C:\program files\adobe\adobe indesign cc 2015\indesign.exe] => (Allow) C:\program files\adobe\adobe indesign cc 2015\indesign.exe
FirewallRules: [UDP Query User{60747B28-AAC4-40C4-87EE-96A16A212742}C:\program files\adobe\adobe indesign cc 2015\indesign.exe] => (Allow) C:\program files\adobe\adobe indesign cc 2015\indesign.exe
FirewallRules: [{7C4CFC67-CDC3-4E3F-B4CC-04E5D74C983B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{251E0E60-F7B7-4959-A942-47001E998BF9}C:\program files\adobe\adobe illustrator cc 2015\support files\contents\windows\illustrator.exe] => (Allow) C:\program files\adobe\adobe illustrator cc 2015\support files\contents\windows\illustrator.exe
FirewallRules: [UDP Query User{B26FF3B1-A3DC-426C-B2B3-599327C35A1D}C:\program files\adobe\adobe illustrator cc 2015\support files\contents\windows\illustrator.exe] => (Allow) C:\program files\adobe\adobe illustrator cc 2015\support files\contents\windows\illustrator.exe

==================== Wiederherstellungspunkte =========================

23-02-2016 12:51:40 JRT Pre-Junkware Removal
24-02-2016 17:08:50 Installed Sound Blaster Z-Series.
27-02-2016 12:27:46 JRT Pre-Junkware Removal
27-02-2016 12:42:50 JRT Pre-Junkware Removal
27-02-2016 13:23:24 JRT Pre-Junkware Removal
27-02-2016 13:40:30 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: AMD High Definition Audio Device
Description: AMD High Definition Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Advanced Micro Devices
Service: AtiHDAudioService
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (02/28/2016 11:25:15 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418220

Error: (02/27/2016 06:52:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LogonUI.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d88c
Name des fehlerhaften Moduls: USBKeyCredentialProvider.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x53d9fa55
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002f53f
ID des fehlerhaften Prozesses: 0x2a54
Startzeit der fehlerhaften Anwendung: 0xLogonUI.exe0
Pfad der fehlerhaften Anwendung: LogonUI.exe1
Pfad des fehlerhaften Moduls: LogonUI.exe2
Berichtskennung: LogonUI.exe3
Vollständiger Name des fehlerhaften Pakets: LogonUI.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LogonUI.exe5

Error: (02/27/2016 02:06:45 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8

Error: (02/27/2016 01:53:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LogonUI.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d88c
Name des fehlerhaften Moduls: USBKeyCredentialProvider.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x53d9fa55
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002b4a8
ID des fehlerhaften Prozesses: 0x60
Startzeit der fehlerhaften Anwendung: 0xLogonUI.exe0
Pfad der fehlerhaften Anwendung: LogonUI.exe1
Pfad des fehlerhaften Moduls: LogonUI.exe2
Berichtskennung: LogonUI.exe3
Vollständiger Name des fehlerhaften Pakets: LogonUI.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LogonUI.exe5

Error: (02/27/2016 01:53:05 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Fussel)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (02/27/2016 01:40:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Adobe CEF Helper.exe, Version: 3.5.0.205, Zeitstempel: 0x56aa74a2
Name des fehlerhaften Moduls: libcef.dll, Version: 3.2171.2069.0, Zeitstempel: 0x551bdc44
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00444106
ID des fehlerhaften Prozesses: 0x25f8
Startzeit der fehlerhaften Anwendung: 0xAdobe CEF Helper.exe0
Pfad der fehlerhaften Anwendung: Adobe CEF Helper.exe1
Pfad des fehlerhaften Moduls: Adobe CEF Helper.exe2
Berichtskennung: Adobe CEF Helper.exe3
Vollständiger Name des fehlerhaften Pakets: Adobe CEF Helper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Adobe CEF Helper.exe5

Error: (02/27/2016 01:40:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (02/27/2016 01:39:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LogonUI.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d88c
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10586.103, Zeitstempel: 0x56a8483f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003624a
ID des fehlerhaften Prozesses: 0x17c
Startzeit der fehlerhaften Anwendung: 0xLogonUI.exe0
Pfad der fehlerhaften Anwendung: LogonUI.exe1
Pfad des fehlerhaften Moduls: LogonUI.exe2
Berichtskennung: LogonUI.exe3
Vollständiger Name des fehlerhaften Pakets: LogonUI.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LogonUI.exe5

Error: (02/27/2016 01:39:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Adobe CEF Helper.exe, Version: 3.5.0.205, Zeitstempel: 0x56aa74a2
Name des fehlerhaften Moduls: libcef.dll, Version: 3.2171.2069.0, Zeitstempel: 0x551bdc44
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00444106
ID des fehlerhaften Prozesses: 0x2794
Startzeit der fehlerhaften Anwendung: 0xAdobe CEF Helper.exe0
Pfad der fehlerhaften Anwendung: Adobe CEF Helper.exe1
Pfad des fehlerhaften Moduls: Adobe CEF Helper.exe2
Berichtskennung: Adobe CEF Helper.exe3
Vollständiger Name des fehlerhaften Pakets: Adobe CEF Helper.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Adobe CEF Helper.exe5

Error: (02/27/2016 01:35:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LogonUI.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d88c
Name des fehlerhaften Moduls: USBKeyCredentialProvider.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x53d9fa55
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002b4a8
ID des fehlerhaften Prozesses: 0x180
Startzeit der fehlerhaften Anwendung: 0xLogonUI.exe0
Pfad der fehlerhaften Anwendung: LogonUI.exe1
Pfad des fehlerhaften Moduls: LogonUI.exe2
Berichtskennung: LogonUI.exe3
Vollständiger Name des fehlerhaften Pakets: LogonUI.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LogonUI.exe5


Systemfehler:
=============
Error: (02/28/2016 01:40:16 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (02/28/2016 01:39:56 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_3c7d3b9" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/28/2016 01:39:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/28/2016 01:39:51 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/28/2016 01:39:51 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/28/2016 01:39:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/28/2016 01:39:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira System Speedup" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/28/2016 01:39:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Qualcomm Atheros Killer Service V2" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/28/2016 01:39:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Sound Blaster Audio Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/28/2016 01:39:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMScheduler" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2016-02-27 16:14:34.280
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-userenv_31bf3856ad364e35_6.1.7601.17514_none_9247d45ea984f2ad\userenv.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:14:34.277
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-userenv_31bf3856ad364e35_6.1.7601.17514_none_9247d45ea984f2ad\userenv.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:14:11.679
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-rpc-remote_31bf3856ad364e35_6.1.7601.17514_none_c2a09d30916321d9\RpcRtRemote.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:14:11.674
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-rpc-remote_31bf3856ad364e35_6.1.7601.17514_none_c2a09d30916321d9\RpcRtRemote.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:10:40.317
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7600.16385_none_bd95ac45003914a8\appidapi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:10:40.312
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7600.16385_none_bd95ac45003914a8\appidapi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:09:00.872
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\Backup\x86_microsoft-windows-userenv_31bf3856ad364e35_6.1.7601.17514_none_9247d45ea984f2ad_userenv.dll_1a3a70b6 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:09:00.868
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\Backup\x86_microsoft-windows-userenv_31bf3856ad364e35_6.1.7601.17514_none_9247d45ea984f2ad_userenv.dll_1a3a70b6 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:08:35.846
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\Backup\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7600.16385_none_bd95ac45003914a8_appidapi.dll_affa6810 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-02-27 16:08:35.843
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\Backup\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7600.16385_none_bd95ac45003914a8_appidapi.dll_affa6810 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Prozentuale Nutzung des RAM: 19%
Installierter physikalischer RAM: 16335.09 MB
Verfügbarer physikalischer RAM: 13150.43 MB
Summe virtueller Speicher: 32719.09 MB
Verfügbarer virtueller Speicher: 29005.57 MB

==================== Laufwerke ================================

Drive c: (MASTER) (Fixed) (Total:465.32 GB) (Free:378.39 GB) NTFS
Drive h: (Firma) (Fixed) (Total:1863.01 GB) (Free:1367.51 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 64853259)
Partition 1: (Not Active) - (Size=465.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 0BD372D4)
Partition 1: (Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

Alt 01.03.2016, 18:15   #10
burningice
/// Malwareteam
 
TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los. - Standard

TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Hinweis: Dieser Scan kann schon einmal mehrere Stunden dauern...

Hast du noch irgendwelche Probleme mit deinem Rechner?
__________________
Mfg,
Rafael

~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~

Unterstütze uns mit einer Spende
......... Lob, Kritik oder Wünsche .........
.......... Folge uns auf Facebook ..........

Alt 02.03.2016, 09:12   #11
Lenani
 
TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los. - Standard

TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.


ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=0cb3821f0423ea4a86eadacb5460ba3a
# end=init
# utc_time=2016-03-01 06:47:28
# local_time=2016-03-01 07:47:28 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 28374
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=0cb3821f0423ea4a86eadacb5460ba3a
# end=updated
# utc_time=2016-03-01 06:50:20
# local_time=2016-03-01 07:50:20 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=0cb3821f0423ea4a86eadacb5460ba3a
# engine=28374
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-03-01 07:47:45
# local_time=2016-03-01 08:47:45 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 813606 10675808 0 0
# scanned=377617
# found=0
# cleaned=0
# scan_time=3444

Alt 02.03.2016, 16:21   #12
burningice
/// Malwareteam
 
TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los. - Standard

TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.


Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
CustomCLSID: HKU\S-1-5-21-318997953-1686202031-3206138427-1000_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-368E4FF85B2B}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => Keine Datei
emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Hast du noch irgendwelche Probleme mit deinem Rechner?
__________________
Mfg,
Rafael

~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~

Unterstütze uns mit einer Spende
......... Lob, Kritik oder Wünsche .........
.......... Folge uns auf Facebook ..........

Alt 02.03.2016, 17:04   #13
Lenani
 
TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los. - Standard

TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.


Weder Avira noch AdAware haben sich bisher wieder gemeldet. Der Echtzeitscanner von Avira hat auch keine Warnung mehr rausgegeben.

Kannst Du mir erklären, was das war? Welches Programm hat denn jetzt den Ausschlag gegeben?

Code:
ATTFilter
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:02-03-2016
durchgeführt von Annika (2016-03-02 16:58:25) Run:1
Gestartet von C:\Users\Annika\Desktop\TrojanerBoard
Geladene Profile: Annika &  (Verfügbare Profile: Annika)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
CustomCLSID: HKU\S-1-5-21-318997953-1686202031-3206138427-1000_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-368E4FF85B2B}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => Keine Datei
emptytemp:
*****************

"HKU\S-1-5-21-318997953-1686202031-3206138427-1000_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-368E4FF85B2B}" => Schlüssel erfolgreich entfernt
EmptyTemp: => 828.1 MB temporäre Dateien entfernt.


Das System musste neu gestartet werden.

==== Ende von Fixlog 16:58:49 ====

Alt 03.03.2016, 18:18   #14
burningice
/// Malwareteam
 
TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los. - Standard

TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.


Aus irgend einem Grund war das wohl in deinen temporären Dateien, warum kann ich dir nicht sagen

Die Logs von deinem Rechner sehen jetzt für mich sauber aus: Herzlichen Glückwunsch - du bist Clean



Zum Schluss müssen wir noch etwas aufräumen und ich gebe dir ein paar Hinweise mit auf den Weg:

Entfernen der verwendeten Tools

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde:
    1. Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    2. Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
  4. Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.
Malwarebytes Anti-Malware und ESET kannst du als Ergänzung zu deiner bestehenden Antivirus-Lösung auf dem Computer belassen und deinen Computer damit regelmäßig scannen.



Persönliche Empfehlungen

Aktiviere unbedingt die automatischen Updates von Windows und stelle auch sicher, dass diese regelmäßig installiert werden.


Verwende immer ein Antivirenprogramm und stelle sicher, dass es sich regelmäßig aktualisiert (sollte Standard sein).
Meine Empfehlungen dazu:
Aktiviere immer eine Firewall - die in Windows integrierte reicht dazu vollkommen aus.


Verwende nach Möglichkeit nicht den Internet Explorer oder unter Windows 10 den Browser Edge, da diese Browser wegen ihrer großen Verbreitung sehr häufig Ziel von Angriffen sind. Trotzdem achte darauf, dass auch dieser Browser durch die Windows Updates aktuell gehalten wird.
Meine Empfehlungen dazu:
Dazu gibt es einige praktische Add-ons:
  • Adblock (Firefox) -- Blockiert Werbung. Werbung kann sehr nervig sein, aber auch auf schädliche Links verweisen.
  • Web Of Trust -- Zeigt Userbewertungen zu besuchten Internetseiten an und kann so vor Phishing und Betrug schützen.


Halte immer deine Plug-ins und Software aktuell, am wichtigsten ist:Tipp: Deinstalliere am besten Flash Player und Java komplett, häufig benötigt man diese Anwendungen überhaupt nicht mehr.


Du kannst dir Malwarebytes Anti-Exploit installieren. Es schützt gegen viele aktuelle Sicherheitslücken und erhöht so deine Sicherheit.


Tipps, um dein System sicherer zu machen

Pass auf, wenn du dir Software aus dem Internet herunterlädst! Viele Portale im Internet wie Chip, Softonic und Sourceforge versuchen häufig, dir Adware oder sonstige Downloader mit unerwünschten Programmen unterzujubeln. Downloade nach Möglichkeit immer direkt von der Herstellerseite oder alternativ von einem sauberen Download-Portal, wie von FilePony.de.
Lese dir dazu auch folgenden Artikel durch: CHIP-Installer - was ist das? - Anleitungen

Selbst wenn du ein Programm von einer seriösen Quelle heruntergeladen hast, ist das keine Garantie, dass dein Programm nicht doch versucht, unerwünschte Änderungen an deinem Computer vorzunehmen. So versuchen immer mehr Programme, durch modifizierte Installationsroutinen unerwünschte Programme mit auf deinen PC zu schleusen. Das klappt leider auch häufig, weil viele Anwender nicht lesen, was auf dem Bildschirm steht und stattdessen schnell durchklicken.
Deshalb: Wenn du ein Programm installierst, wähle immer die benutzerdefinierte Installation und schaue, was du da gerade eigentlich alles mit einem Klick auf "Ok" oder "Weiter" abnickst - entferne entsprechend die Haken bei Dingen, die du nicht möchtest. Wer lesen kann, ist klar im Vorteil!

Ein Tool, welches dich dabei gut unterstützen kann, ist: Unchecky. Dieses überwacht im Hintergrund Installationsprozesse und hakt automatisch nervige Adwarekomponenten wie Toolbars ab. Falls man etwas übersieht, warnt noch ein Pop-up, bevor man fortfahren kann.


Benutze keine Optimizer, Cleaner oder sonstige SpeedUp Wunder, da diese Tools fast nie einen auch nur messbaren Performancegewinn bringen.
Du kannst jedoch regelmäßig auf deinem PC die Datenträgerbereinigung ausführen, so gewinnst du belegten Speicherplatz zurück.


Ändere regelmäßig deine Passwörter! Zudem musst du sichere Passwörter benutzen, das bedeutet: mindestens 8 Zeichen, Groß- und Kleinbuchstaben und Sonderzeichen.
Ganz wichtig: benutze pro Account ein anderes Passwort!
Tipp: Benutze einen Spruch, den du dir leicht merken kannst, als Hilfe für ein Passwort! Zum Beispiel: Der Himmel ist blau und wenn es regnet?-grau ==> DHibuwer?-grau


Unterstütze uns und empfiehl uns weiter

Du kennst Freunde und Bekannte, die Probleme mit ihrem Computer haben? Schick sie doch zu uns auf das Trojaner Board, wir helfen gerne

Wenn du uns mit einer Spende unterstützen möchtest, freuen wir uns sehr und dies kannst du hier tun: http://www.trojaner-board.de/79994-s...ndenkonto.html Herzlichen Dank dafür

Wir machen diese Tätigkeit hier freiwillig, darum freue ich mich besonders über ein kurzes Danke wenn du mit mir zufrieden warest oder sonst über Verbesserungsvorschläge - das kannst du gerne hier machen

Besuche und like unsere Facebook-Seite!


Danke für deine Mitarbeit und alles Gute!

Bitte gib mir Bescheid, wenn du das alles gelesen hast und du keine weiteren Fragen mehr hast, damit ich dieses Thema aus meinen Abos löschen kann.
__________________
Mfg,
Rafael

~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~

Unterstütze uns mit einer Spende
......... Lob, Kritik oder Wünsche .........
.......... Folge uns auf Facebook ..........

Alt 04.03.2016, 10:44   #15
Lenani
 
TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los. - Standard

TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.


Hallo,

vielen Dank für Deine Hilfe. Ich hab mir alles durchgelesen und werde es beherzigen. Ich habe keine weiteren Fragen mehr.

Antwort

Themen zu TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.
aufsetzen, avira, befall, datei, entfernen, festplatte, folge, frage, infektion, internet, internetseite, malewarbytes, micro, neu, problem, programme, rechner, scan, seite, seiten, temp, tmp, treiber, trend, virus, windows


« mp3-Variante von TeslaCrypt eingefangen - was tun? | ELBA Onlinebanking - da ist was faul »


Ähnliche Themen: TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los.


  1. Windows 10: Werde YTDownloader nicht los und habe Folge-Befall
    Log-Analyse und Auswertung - 07.02.2016 (16)
  2. Trojaner TR/Patched.Ren.Gen2 unter W7 64 bit
    Plagegeister aller Art und deren Bekämpfung - 17.01.2016 (33)
  3. Outlook unter Windows 10 geht nicht
    Alles rund um Windows - 19.08.2015 (3)
  4. Windows 7: C:\PROGRA~2\SEARCH~1\bin\VC32LO~.DLL ist entweder nicht für die Ausführung unter Windows vorgesehn oder enthält einen Fehler...
    Log-Analyse und Auswertung - 03.04.2015 (11)
  5. ADWARE/iBryte.Gen7 auf meinen Laptop
    Plagegeister aller Art und deren Bekämpfung - 05.02.2015 (29)
  6. lollipop werde ich nicht los, trotz Einsatz aller angeblich so tollen Antiviernprogramme postiver Erkennung unter "Schrauber "
    Log-Analyse und Auswertung - 24.11.2014 (21)
  7. PUP.optional.bandoo und ADWARE/iBryte.bxkc
    Plagegeister aller Art und deren Bekämpfung - 27.05.2014 (14)
  8. Wie werde ich Servieca los? Windows funktioniert (wahrscheinlich deshalb) nicht richtig.
    Plagegeister aller Art und deren Bekämpfung - 11.01.2014 (3)
  9. iBryte entfernen
    Anleitungen, FAQs & Links - 01.11.2013 (2)
  10. I have net - Problem bei der Google suche. Werde umgelitet auf verschiedene Seiten unter anderem I have net.com
    Plagegeister aller Art und deren Bekämpfung - 27.03.2013 (9)
  11. C:\Windows\system32\d3dx9_37.dll ist entweder nicht für die Ausführung unter Windows vorgesehen oder enthält einen Fehler.
    Alles rund um Windows - 23.03.2013 (3)
  12. Windows Firewall unter Windows 8 nicht mehr aktivierbar
    Alles rund um Windows - 28.01.2013 (5)
  13. 79.111.*.* - Werde im Netz unter einer Falschen IP-Adresse erkannt und in Foren als Spambot geblockt.
    Plagegeister aller Art und deren Bekämpfung - 13.11.2012 (5)
  14. W32/Generic.worm!p2p, W32.Patched.UB. Fehlermeldung beim Start von Windows und Virus den ich nicht gelöscht bekomme.
    Plagegeister aller Art und deren Bekämpfung - 13.08.2012 (4)
  15. Datei C:\Windows\System32\services.exe infiziert: W32/Patched.UB, Patched.UA, Patched.ZA
    Plagegeister aller Art und deren Bekämpfung - 19.07.2012 (5)
  16. Wie werde ich den Trojaner unter Sweetim.exe wieder los?
    Log-Analyse und Auswertung - 20.04.2012 (2)
  17. tr patched bd 248 unter windows/system hilfe!!!
    Plagegeister aller Art und deren Bekämpfung - 18.05.2008 (4)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los. - Hallo liebes Trojaner-Board Team, vor Kurzem musste ich meinen neu Rechner aufsetzen, da eine meiner Festplatten den Geist aufgab. Bin jetzt auf Windows 10 64bit. Dazu muss ich sagen, dass - TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los....
Archiv
Du betrachtest: TR/Patched.Ren.Gen und iBryte unter Windows 10: ich werde sie nicht los. auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129