| |
| |||||||
Log-Analyse und Auswertung: Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviertWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
28.09.2016, 18:05
| #1 |
| |  Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert Hallo, Seit gestern bekomme ich in extrem unregelmäßigen Abständen ein blaues Pop Up Fenster, welches sich nach ca. einer Sekunde wieder schließt. Ich kann in der Zeit immer nur einen großen "LOADING..." Schriftzug erkennen. Ich habe schon mit Malwarebytes, SuperAntiMalware, CCleaner und Avira selbst gescannt jedoch wurde nichts gefunden. Wenn ich versuche, den Windows Defender zu öffnen bekomme ich diese Meldungen: hxxp://imgur.com/a/umXEp Außerdem ist hier der Echtzeitschutz und alles andere aus, obwohl ich es eingeschalten habe. Das ist definitiv erst seit gestern so. Hier die FRST Logs: FRST.txt: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 28-09-2016
durchgeführt von Agando (Administrator) auf AGANDO-PC (28-09-2016 17:59:59)
Gestartet von C:\Users\Agando\Desktop
Geladene Profile: Agando (Verfügbare Profile: Agando & Gast)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Opera)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
() C:\Program Files (x86)\AdBlocker\Service.WinServiceHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
() C:\Program Files (x86)\WhatPulse2\whatpulse.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Nenad Hrg (SoftwareOK.com)) C:\Users\Agando\Desktop\Dateien\programme\AutoHideMouseCursor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
() C:\Program Files (x86)\Origin\QtWebEngineProcess.exe
() C:\Program Files (x86)\Origin\QtWebEngineProcess.exe
() C:\Program Files (x86)\Origin\QtWebEngineProcess.exe
() C:\Program Files (x86)\WhatPulse2\whatpulse-watchdog.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Trend Micro Inc.) C:\Users\Agando\Desktop\Dateien\HijackThis.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-06-15] (NVIDIA Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [630912 2012-05-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [60136 2016-08-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [18536 2016-09-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [830064 2016-09-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [AMD_Display] => [X]
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2858272 2016-09-20] (Valve Corporation)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [WhatPulse] => C:\Program Files (x86)\WhatPulse2\whatpulse.exe [3942400 2016-02-25] ()
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7943072 2016-08-30] (SUPERAntiSpyware)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3503088 2016-09-20] (Electronic Arts)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [AutoHideMouseCursor] => C:\Users\Agando\Desktop\Dateien\programme\AutoHideMouseCursor.exe [34816 2013-08-27] (Nenad Hrg (SoftwareOK.com))
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8912088 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\MountPoints2: {4eeb9d88-7c98-11e6-8ea9-d8cb8a37411a} - F:\startme.exe
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\MountPoints2: {64225049-bb47-11e4-8f6d-806e6f6e6963} - D:\DVDSetup.exe
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-21] (Microsoft Corporation)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Winsock: Catalog9-x64 01 C:\Windows\system32\zdengine64.dll Keine Datei
Winsock: Catalog9-x64 02 C:\Windows\system32\zdengine64.dll Keine Datei
Winsock: Catalog9-x64 03 C:\Windows\system32\zdengine64.dll Keine Datei
Winsock: Catalog9-x64 04 C:\Windows\system32\zdengine64.dll Keine Datei
Winsock: Catalog9-x64 15 C:\Windows\system32\zdengine64.dll Keine Datei
Hosts: 0.0.0.1 mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{268427DE-E434-45BD-88EC-B67F4F63F895}: [DhcpNameServer] 192.168.9.1 192.168.9.1
Tcpip\..\Interfaces\{715DE7BB-61E4-4C78-973D-580A8E88C542}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{81DD97E4-ED28-4EAD-99E3-B6C5F20A5C2F}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{A95EB6A5-4DD0-42E9-AFFF-534397AD1C34}: [NameServer] 138.201.137.84,8.8.8.8
Tcpip\..\Interfaces\{A95EB6A5-4DD0-42E9-AFFF-534397AD1C34}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{AD54DC0C-B34B-4BFF-AAB8-2990E51F17E2}: [DhcpNameServer] 192.168.2.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Software\Microsoft\Internet Explorer\Main,Start Page =
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3320435249-1176308213-2412890335-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-27] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-27] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-27] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: AviraBrowserSafety.BrowserSafety -> {c3c77255-42c0-499f-b664-6e981a0b1647} -> C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-27] (Oracle Corporation)
Handler-x32: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll [2016-09-13] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2015-02-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei]
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-27] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-27] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] ( Microsoft Corporation)
FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-02-18] (Unity Technologies ApS)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll [2016-09-13] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-02-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-27] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [Keine Datei]
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-08-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-08-25] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-02-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: @nsroblox.roblox.com/launcher -> C:\Users\Agando\AppData\Local\Roblox\Versions\version-e6d872d544b64cd9\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: @nsroblox.roblox.com/launcher64 -> C:\Users\Agando\AppData\Local\Roblox\Versions\version-e6d872d544b64cd9\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Agando\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-01-22] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-08-29] ()
Chrome:
=======
CHR HomePage: Profile 1 -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyLkSna9LUifg6M5suwWTpzqcTYN8dCdaMZbXCSrGOY_xXasBjQ4DIVneKvjWDT4z9o7Y_46ZwULO9UTRX3xZipgVWGN2hkaHpXc9xmBmHMbsONjSwkj0navg66OawPwlyoYcX_4Y90kXzjdp_0vi43llhOOomXWqnKcBuTI4,
CHR StartupUrls: Profile 1 -> "hxxps://www.google.de/","hxxps://www.youtube.com/"
CHR Profile: C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1 [2016-09-28]
CHR Extension: (ProxFlow) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-08-13]
CHR Extension: (HD for YouTube™) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\akjbfncbadcmnkopckegnmjgihagponf [2015-11-21]
CHR Extension: (Google Drive) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (Adblock Plus) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-07-08]
CHR Extension: (Google Docs Offline) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (GoodWordGuide.com: Instant Dictionary) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mfembjnmeainjncdflaoclcjadfhpoim [2016-07-08]
CHR Extension: (Google Mail Checker) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2015-10-19]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR Extension: (Hover Zoom+) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pccckmaobkjjboncdfnnofkonhgpceea [2016-08-13]
Opera:
=======
OPR StartupUrls: "hxxp://www.google.com/","hxxp://www.youtube.com/"
OPR Extension: (ProxFlow) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-09-23]
OPR Extension: (YouTube™ Flash-HTML5) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\abpeogmjbjonedcakbihofgpoelmfbgj [2016-08-17]
OPR Extension: (HD quality for YouTube™ (1080p, 1440p, 2160p)) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\emcclmhiklabihbljnpjnacgdaaohpjc [2016-07-26]
OPR Extension: (Twitch Now) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\hiahmjdojdodmjjhhddegdnhcpjmokmo [2016-07-10]
OPR Extension: (Download Chrome Extension) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\kipjbhgniklcnglfaldilecjomjaddfi [2016-07-10]
OPR Extension: (Adblock Plus) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2016-08-24]
OPR Extension: (Hover Zoom+) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\pccckmaobkjjboncdfnnofkonhgpceea [2016-09-27]
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 AdBlockerService; C:\Program Files (x86)\AdBlocker\Service.WinServiceHost.exe [7168 2016-04-09] () [Datei ist nicht signiert]
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-05-04] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [989696 2016-09-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [470600 2016-09-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [470600 2016-09-09] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1454720 2016-09-09] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [324304 2016-08-19] (Avira Operations GmbH & Co. KG)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368 2016-06-15] (NVIDIA Corporation)
S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [8704 2015-09-02] (Hi-Rez Studios) [Datei ist nicht signiert]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29728 2016-08-15] (HP Inc.)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-02-18] (Logitech Inc.)
S4 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [289256 2015-06-26] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-06-15] (NVIDIA Corporation)
S3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-06-15] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-06-15] (NVIDIA Corporation)
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2141192 2016-09-20] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2206224 2016-09-20] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2016-08-30] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2016-09-02] ()
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [344576 2014-01-22] (Qualcomm Atheros) [Datei ist nicht signiert]
R2 SpeedupService; C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [26632 2016-09-05] (Avira Operations GmbH & Co. KG)
S4 VmbService; C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [8704 2013-09-05] (Vodafone) [Datei ist nicht signiert]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [55936 2011-11-13] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [171752 2016-07-28] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [145984 2016-07-28] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2015-12-03] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [79696 2016-05-11] (Avira Operations GmbH & Co. KG)
R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [80080 2013-11-08] (Qualcomm Atheros, Inc.)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-09-28] (Malwarebytes)
R2 npf; C:\Windows\System32\drivers\npf.sys [36600 2015-06-01] (Riverbed Technology, Inc.)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-06-15] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex) [Datei ist nicht signiert]
S3 YMIDUSBW; C:\Windows\System32\drivers\ymidusbx64.sys [51496 2013-04-04] (Yamaha Corporation)
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 UCOREW64; \??\C:\Users\Agando\AppData\Local\Temp\Rar$EXa0.815\AMIBIOS_and_Aptio_AMI_Firmware_Update_Utility\AMIBIOS\AFUWin\64\UCOREW64.SYS [X]
S3 VUSB3HUB; system32\DRIVERS\ViaHub3.sys [X]
S3 X6va060; \??\C:\Windows\SysWOW64\Drivers\X6va060 [X]
S3 X6va062; \??\C:\Windows\SysWOW64\Drivers\X6va062 [X]
S3 xhcdrv; system32\DRIVERS\xhcdrv.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
S3 xspirit; \??\C:\Windows\xspirit.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-09-28 17:59 - 2016-09-28 18:00 - 00028066 _____ C:\Users\Agando\Desktop\FRST.txt
2016-09-28 17:59 - 2016-09-28 17:59 - 02404352 _____ (Farbar) C:\Users\Agando\Desktop\FRST64.exe
2016-09-28 17:59 - 2016-09-28 17:59 - 00000000 ____D C:\FRST
2016-09-28 16:03 - 2016-09-28 16:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-09-28 16:03 - 2016-09-28 16:03 - 00000000 ____D C:\Program Files\CCleaner
2016-09-25 22:09 - 2016-09-25 22:09 - 00000000 ____D C:\Users\Agando\AppData\Local\GeoLocator
2016-09-25 21:34 - 2016-09-25 21:34 - 00000000 ____D C:\Users\Agando\AppData\Roaming\FlowStone
2016-09-25 21:34 - 2016-09-25 21:34 - 00000000 ____D C:\Program Files (x86)\DSPRobotics
2016-09-25 21:16 - 2016-09-26 16:23 - 00000000 ____D C:\Users\Agando\Downloads\FL Studio Producer Edition 11.0.4+Plugins Bundle R2R [ChingLiu]
2016-09-24 10:11 - 2016-09-24 10:11 - 00000000 _____ C:\TOSTACK
2016-09-24 10:10 - 2016-09-24 10:24 - 00000000 ____D C:\Program Files (x86)\AdBlocker
2016-09-24 10:10 - 2016-09-24 10:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AdBlocker
2016-09-24 10:08 - 2016-09-25 22:09 - 00000000 ____D C:\Users\Agando\ReportSender
2016-09-21 15:12 - 2016-08-12 19:02 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-09-21 15:12 - 2016-06-14 19:16 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2016-09-21 15:11 - 2016-08-29 17:31 - 14183424 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-09-21 15:11 - 2016-08-29 17:31 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-09-21 15:11 - 2016-08-29 17:31 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-09-21 15:11 - 2016-08-29 17:12 - 12880384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-09-21 15:11 - 2016-08-29 17:12 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-09-21 15:11 - 2016-08-29 17:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-09-21 15:11 - 2016-08-29 17:04 - 03229696 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-09-21 15:11 - 2016-08-29 16:55 - 02972672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-09-21 15:11 - 2016-08-16 22:40 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2016-09-21 15:11 - 2016-08-12 19:02 - 12574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-09-21 15:11 - 2016-08-12 19:02 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-09-21 15:11 - 2016-08-12 19:02 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-09-21 15:11 - 2016-08-12 19:02 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-09-21 15:11 - 2016-08-12 18:47 - 12574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-09-21 15:11 - 2016-08-12 18:47 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-09-21 15:11 - 2016-08-12 18:31 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-09-21 15:11 - 2016-08-12 18:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-09-21 15:11 - 2016-08-12 18:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-09-21 15:11 - 2016-08-12 18:26 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 02023424 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 01178112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 00249344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmRes.dll
2016-09-21 15:11 - 2016-08-06 17:01 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-09-21 15:11 - 2016-08-06 17:01 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe
2016-09-21 15:11 - 2016-08-06 16:53 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2016-09-21 15:11 - 2016-08-06 16:53 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmprovhost.exe
2016-09-21 15:11 - 2016-08-06 16:53 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmplpxy.dll
2016-09-21 15:11 - 2016-06-14 19:21 - 00094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-09-21 15:11 - 2016-06-14 19:16 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 01483264 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-09-21 15:11 - 2016-06-14 19:11 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-09-21 15:11 - 2016-06-14 17:21 - 03209216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 01176064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2016-09-21 15:11 - 2016-06-14 17:15 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-09-21 15:11 - 2016-06-14 17:15 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-09-21 15:11 - 2016-06-14 17:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-09-21 15:11 - 2016-06-14 17:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2016-09-21 15:11 - 2016-06-14 17:05 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-09-21 15:11 - 2016-06-14 17:00 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2016-09-21 15:11 - 2016-06-14 17:00 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2016-09-21 14:20 - 2016-09-21 14:20 - 00000000 _____ C:\Users\Agando\AppData\Local\Driver_LOM_8161Present.flag
2016-09-21 14:18 - 2016-09-21 14:19 - 00000000 ____D C:\CIMTEMP
2016-09-21 13:51 - 2016-08-05 17:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-09-21 13:51 - 2016-08-05 17:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-09-20 21:06 - 2016-09-20 21:06 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server
2016-09-20 21:05 - 2016-09-20 21:06 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2016-09-17 14:40 - 2016-09-17 14:40 - 00000000 ____D C:\e49e132389896a47af13baaab7
2016-09-17 09:02 - 2016-09-17 09:07 - 00000000 ____D C:\Users\Agando\Documents\RCT3
2016-09-17 09:02 - 2016-09-17 09:02 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Atari
2016-09-14 22:26 - 2016-09-01 21:26 - 00394440 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-09-14 22:26 - 2016-09-01 20:41 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-09-14 22:26 - 2016-09-01 05:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-09-14 22:26 - 2016-09-01 05:08 - 20312064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-09-14 22:26 - 2016-09-01 04:48 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-09-14 22:26 - 2016-09-01 04:46 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-09-14 22:26 - 2016-09-01 04:46 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-09-14 22:26 - 2016-09-01 04:46 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-09-14 22:26 - 2016-09-01 04:44 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-09-14 22:26 - 2016-09-01 04:34 - 02286592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-09-14 22:26 - 2016-09-01 04:31 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-09-14 22:26 - 2016-09-01 04:31 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-09-14 22:26 - 2016-09-01 04:26 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-09-14 22:26 - 2016-09-01 04:24 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-09-14 22:26 - 2016-09-01 04:24 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-09-14 22:26 - 2016-09-01 04:23 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-09-14 22:26 - 2016-09-01 04:08 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-09-14 22:26 - 2016-09-01 03:59 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-09-14 22:26 - 2016-09-01 03:57 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-09-14 22:26 - 2016-09-01 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-09-14 22:26 - 2016-09-01 03:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-09-14 22:26 - 2016-09-01 03:48 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-09-14 22:26 - 2016-09-01 03:45 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-09-14 22:26 - 2016-09-01 03:34 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-09-14 22:26 - 2016-09-01 03:30 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-09-14 22:26 - 2016-09-01 03:29 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-09-14 22:26 - 2016-09-01 03:29 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-09-14 22:26 - 2016-09-01 03:27 - 13808128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-09-14 22:26 - 2016-09-01 03:24 - 04607488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-09-14 22:26 - 2016-09-01 02:45 - 25770496 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-09-14 22:26 - 2016-09-01 02:43 - 02445824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-09-14 22:26 - 2016-09-01 02:42 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-09-14 22:26 - 2016-09-01 02:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-09-14 22:26 - 2016-09-01 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-09-14 22:26 - 2016-09-01 02:38 - 01316352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-09-14 22:26 - 2016-09-01 02:25 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-09-14 22:26 - 2016-09-01 02:24 - 02894336 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-09-14 22:26 - 2016-09-01 02:24 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-09-14 22:26 - 2016-09-01 02:24 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-09-14 22:26 - 2016-09-01 02:24 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-09-14 22:26 - 2016-09-01 02:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-09-14 22:26 - 2016-09-01 02:16 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-09-14 22:26 - 2016-09-01 02:15 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-09-14 22:26 - 2016-09-01 02:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-09-14 22:26 - 2016-09-01 02:11 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-09-14 22:26 - 2016-09-01 02:11 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-09-14 22:26 - 2016-09-01 02:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-09-14 22:26 - 2016-09-01 02:10 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-09-14 22:26 - 2016-09-01 02:06 - 06047232 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-09-14 22:26 - 2016-09-01 02:03 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-09-14 22:26 - 2016-09-01 01:59 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-09-14 22:26 - 2016-09-01 01:51 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-09-14 22:26 - 2016-09-01 01:50 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-09-14 22:26 - 2016-09-01 01:47 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-09-14 22:26 - 2016-09-01 01:46 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-09-14 22:26 - 2016-09-01 01:44 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-09-14 22:26 - 2016-09-01 01:42 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-09-14 22:26 - 2016-09-01 01:31 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-09-14 22:26 - 2016-09-01 01:29 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-09-14 22:26 - 2016-09-01 01:28 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-09-14 22:26 - 2016-09-01 01:27 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-09-14 22:26 - 2016-09-01 01:26 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-09-14 22:26 - 2016-09-01 01:15 - 15411712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-09-14 22:26 - 2016-09-01 01:10 - 02921472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-09-14 22:26 - 2016-09-01 00:58 - 01550848 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-09-14 22:26 - 2016-09-01 00:47 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-09-14 22:26 - 2016-08-12 18:26 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-09-14 22:26 - 2016-08-12 18:26 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-09-14 22:26 - 2016-08-12 18:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-09-14 22:25 - 2016-09-02 17:40 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-09-14 22:25 - 2016-09-02 17:35 - 05548264 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-09-14 22:25 - 2016-09-02 17:35 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-09-14 22:25 - 2016-09-02 17:35 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-09-14 22:25 - 2016-09-02 17:35 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-09-14 22:25 - 2016-09-02 17:34 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:21 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-09-14 22:25 - 2016-09-02 17:21 - 03944680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-09-14 22:25 - 2016-09-02 17:18 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:02 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-09-14 22:25 - 2016-09-02 17:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-09-14 22:25 - 2016-09-02 17:02 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-09-14 22:25 - 2016-09-02 17:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-09-14 22:25 - 2016-09-02 16:58 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-09-14 22:25 - 2016-09-02 16:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-09-14 22:25 - 2016-09-02 16:55 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-09-14 22:25 - 2016-09-02 16:54 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-09-14 22:25 - 2016-09-02 16:54 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-09-14 22:25 - 2016-09-02 16:53 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-09-14 22:25 - 2016-09-02 16:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-09-14 22:25 - 2016-09-02 16:53 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-09-14 22:25 - 2016-09-02 16:49 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-09-14 22:25 - 2016-09-02 16:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-09-14 22:25 - 2016-09-02 16:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-09-14 22:25 - 2016-09-02 16:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-09-14 22:25 - 2016-09-02 16:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-09-14 22:25 - 2016-09-02 16:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 16:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 16:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 16:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-09-14 22:25 - 2016-05-14 00:09 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-09-14 22:25 - 2016-05-14 00:09 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-09-14 22:25 - 2016-05-14 00:09 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-09-14 22:25 - 2016-05-14 00:07 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-09-14 22:25 - 2016-05-13 23:55 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-09-14 22:25 - 2016-05-13 23:53 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-09-14 22:25 - 2016-05-13 23:53 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-09-14 22:25 - 2016-05-13 23:52 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-09-14 22:25 - 2016-05-13 23:52 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-09-14 22:25 - 2016-05-13 23:52 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-09-14 22:25 - 2016-05-13 23:52 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-09-14 22:25 - 2016-05-13 23:50 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-09-14 22:25 - 2016-05-13 23:38 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-09-14 22:25 - 2016-05-13 23:38 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-09-14 22:25 - 2016-05-13 23:38 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-09-14 22:25 - 2016-05-13 23:38 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-09-14 22:25 - 2016-05-12 19:14 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-09-14 22:25 - 2016-05-12 17:18 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-09-14 22:25 - 2016-05-12 17:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-09-14 22:25 - 2016-05-04 19:21 - 00114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-09-14 22:25 - 2016-05-04 19:17 - 03244032 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-09-14 22:25 - 2016-05-04 19:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-09-14 22:25 - 2016-05-04 19:17 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-09-14 22:25 - 2016-05-04 19:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-09-14 22:25 - 2016-05-04 19:16 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-09-14 22:25 - 2016-05-04 17:04 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-09-14 22:25 - 2016-05-04 16:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-09-14 22:24 - 2016-08-16 19:36 - 01009152 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-09-14 22:24 - 2016-08-16 04:48 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-09-14 22:24 - 2016-08-16 04:35 - 03218432 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-09-14 22:24 - 2016-08-06 17:31 - 00877056 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-09-14 22:24 - 2016-08-06 17:15 - 00581632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-09-14 22:24 - 2016-07-07 17:36 - 01896168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-09-14 22:24 - 2016-07-07 17:36 - 00377576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-09-14 22:24 - 2016-07-07 17:36 - 00287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-09-14 22:24 - 2016-07-07 17:08 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-09-14 22:24 - 2016-07-01 17:31 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-09-14 22:24 - 2016-07-01 17:31 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2016-09-14 22:24 - 2016-07-01 17:13 - 00741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-09-14 22:24 - 2016-07-01 17:13 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2016-09-14 22:24 - 2016-05-04 19:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-09-14 22:24 - 2016-05-04 19:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-09-14 20:53 - 2016-09-14 20:53 - 00000000 ____D C:\Users\Agando\.QtWebEngineProcess
2016-09-14 20:53 - 2016-09-14 20:53 - 00000000 ____D C:\Users\Agando\.Origin
2016-09-14 18:54 - 2016-09-28 17:40 - 00000512 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 8a80bd6b-eafa-48a4-b767-55dbf8fad592.job
2016-09-14 18:54 - 2016-09-16 23:35 - 00003590 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 8a80bd6b-eafa-48a4-b767-55dbf8fad592
2016-09-14 18:54 - 2016-09-14 18:54 - 00003516 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 2b274173-6618-4046-8fa0-f7aba0175c32
2016-09-14 18:52 - 2016-09-14 18:52 - 00000000 ____D C:\Users\Agando\AppData\Roaming\SUPERAntiSpyware.com
2016-09-14 18:52 - 2016-09-14 18:52 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2016-09-14 18:52 - 2016-09-14 18:52 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2016-09-14 18:52 - 2016-09-14 18:52 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2016-09-14 18:44 - 2016-09-14 18:44 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD
2016-09-14 18:44 - 2016-09-14 18:44 - 00000000 ____D C:\Program Files (x86)\AMD
2016-09-14 18:40 - 2016-09-14 18:41 - 00000000 ____D C:\Program Files (x86)\CPU Thermometer
2016-09-14 18:40 - 2016-09-14 18:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPU Thermometer
2016-09-13 18:11 - 2016-09-28 17:43 - 00000000 ____D C:\Users\Public\Speedup Sessions
2016-09-07 22:26 - 2016-09-07 22:26 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2016-09-07 19:41 - 2016-09-07 19:41 - 00000000 ____D C:\Windows\system32\DAX2
2016-09-07 19:40 - 2016-06-03 08:29 - 72520720 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2016-09-07 19:40 - 2016-06-03 08:29 - 24399544 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRenderAVX64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 24310136 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRender64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 17359672 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioCapture64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 15202040 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 14057256 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 13122584 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 12988352 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO4064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 10512448 _____ (Intel Corporation) C:\Windows\system32\IntelSSTAPO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 07172920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 07096192 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 06402432 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV3apo.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 06264640 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64AF3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 06064046 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2016-09-07 19:40 - 2016-06-03 08:29 - 05804772 _____ C:\Windows\system32\Drivers\rtvienna.dat
2016-09-07 19:40 - 2016-06-03 08:29 - 05776968 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 05593624 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 05339552 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 05111040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2016-09-07 19:40 - 2016-06-03 08:29 - 03299824 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE2.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 03283248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 03282544 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 03199744 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 03181209 _____ C:\Windows\system32\Drivers\rtkSSTsetting.dat
2016-09-07 19:40 - 2016-06-03 08:29 - 03096248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02895104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2016-09-07 19:40 - 2016-06-03 08:29 - 02825104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO7064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02726416 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02477520 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02437760 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02190992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02110600 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02060032 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02050184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01965816 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01959608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64AF3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01847888 _____ (DTS, Inc.) C:\Windows\system32\slcnt64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01780624 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01608128 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01591064 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01508936 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01435144 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01422928 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01382240 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01355616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01336544 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaeapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01334384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01213664 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01186832 _____ (Intel Corporation) C:\Windows\system32\IntelSstCApoPropPage.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01166168 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01061120 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01023240 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01003864 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00999856 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00965032 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00962056 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tosasfapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00931624 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00927424 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00923744 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00873472 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00743968 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00727440 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00716112 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00708312 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00689888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00678184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00677672 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00618192 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00589072 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SECOMN32.DLL
2016-09-07 19:40 - 2016-06-03 08:29 - 00586424 _____ (Conexant Systems, Inc.) C:\Windows\system32\CAF64APO2.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00570096 _____ (Intel Corporation) C:\Windows\system32\tbb_waves.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00532384 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00524680 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaemaxapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00514528 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00504312 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00500560 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00472312 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00467168 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00450120 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00447728 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00447104 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\toseaeapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00445400 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00441272 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00428232 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00416512 _____ (Harman) C:\Windows\system32\HMUI.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00387320 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00381416 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00371456 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00366128 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\HMAPO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00362056 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64AF3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00360352 _____ (Harman) C:\Windows\system32\HMClariFi.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00343712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00341152 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00341152 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00330568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00327456 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00310424 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64F3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00272720 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00258872 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00253904 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00253872 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00252880 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00231920 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00221968 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00214832 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00209536 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00203848 _____ (Harman) C:\Windows\system32\HMHVS.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00192984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00190936 _____ (Harman) C:\Windows\system32\HMEQ_Voice.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00190936 _____ (Harman) C:\Windows\system32\HMEQ.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00179600 _____ (Harman) C:\Windows\system32\HMLimiter.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00166208 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00158704 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00154368 _____ (Harman) C:\Windows\system32\HarmanAudioInterface.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00151792 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00134208 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00122328 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00110984 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00090920 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00088352 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00088320 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00084616 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00083632 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00075544 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00065832 _____ (Conexant System, Inc.) C:\Windows\system32\Caf64api.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00023696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00007756 _____ C:\Windows\system32\cxapo.prop
2016-09-07 19:40 - 2016-06-03 08:29 - 00005604 _____ C:\Windows\system32\cxapo.lncs
2016-09-07 19:39 - 2016-06-03 08:29 - 00574760 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2016-09-07 19:39 - 2016-06-03 08:29 - 00118600 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2016-09-07 19:39 - 2016-06-03 08:29 - 00118592 _____ C:\Windows\system32\AcpiServiceVnA64.dll
2016-09-07 19:39 - 2016-06-03 08:29 - 00105312 _____ C:\Windows\system32\audioLibVc.dll
2016-09-07 19:34 - 2016-09-07 19:34 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Innovative Solutions
2016-09-07 19:34 - 2016-09-07 19:34 - 00000000 ____D C:\Users\Agando\AppData\Local\Innovative Solutions
2016-09-02 22:26 - 2016-08-25 22:50 - 00133056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-09-02 22:26 - 2016-05-04 04:23 - 00129824 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-09-02 22:26 - 2016-05-04 04:22 - 00130848 _____ C:\Windows\system32\vulkan-1.dll
2016-09-02 22:26 - 2016-05-04 04:22 - 00045344 _____ C:\Windows\system32\vulkaninfo.exe
2016-09-02 22:26 - 2016-05-04 04:22 - 00040224 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-09-02 22:21 - 2016-08-26 01:28 - 40070200 _____ C:\Windows\system32\nvcompiler.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 35182648 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 34801088 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 28207672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 14093368 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-09-02 22:21 - 2016-08-26 01:28 - 10865704 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 10737632 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 10278080 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 09086856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 08875408 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 08680696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 03594808 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 03160512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 01920960 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437270.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437270.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00956352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00941504 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00892864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00686896 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00575984 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00520912 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00493608 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00437696 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00436088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00408784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00390200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00223304 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-09-02 22:21 - 2016-08-26 01:28 - 00181488 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00159352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00153368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00131536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00054728 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00039731 _____ C:\Windows\system32\nvinfo.pb
2016-09-02 22:21 - 2016-08-26 01:28 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-09-02 22:21 - 2016-08-26 01:28 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2016-09-02 21:53 - 2016-09-02 21:53 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2016-09-02 20:31 - 2016-09-02 20:31 - 00000000 ____D C:\Neuer Ordner
2016-09-02 20:22 - 2016-09-28 17:42 - 00000000 ____D C:\Program Files (x86)\Steam
2016-09-02 19:53 - 2016-09-02 21:15 - 00000000 ____D C:\Program Files (x86)\Origin Games
2016-09-02 12:59 - 2015-05-05 14:01 - 01948928 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO264.dll
2016-09-02 12:58 - 2015-05-05 14:01 - 01716480 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO232.dll
2016-09-02 05:09 - 2016-09-02 05:09 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2016-08-31 22:26 - 2016-08-31 22:26 - 00000016 _____ C:\ProgramData\mntemp
2016-08-31 15:12 - 2016-08-31 15:24 - 00000000 ____D C:\Users\Agando\Documents\Battlefield 1 Open Beta
2016-08-31 15:10 - 2016-08-31 15:10 - 00000000 ____D C:\Program Files\Common Files\EAInstaller
2016-08-29 20:00 - 2016-08-29 20:00 - 02250024 _____ C:\Windows\SysWOW64\pbsvc.exe
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-09-28 17:59 - 2015-03-01 12:31 - 00000000 ___RD C:\Users\Agando\Desktop\Dateien
2016-09-28 17:59 - 2015-02-26 10:20 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Origin
2016-09-28 17:55 - 2016-04-25 19:48 - 00000000 ____D C:\Users\Agando\AppData\Local\whatpulse
2016-09-28 17:50 - 2009-07-14 06:45 - 00021648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-09-28 17:50 - 2009-07-14 06:45 - 00021648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-09-28 17:44 - 2015-02-26 10:18 - 00000000 ____D C:\ProgramData\Origin
2016-09-28 17:40 - 2015-02-23 13:06 - 00000000 ____D C:\ProgramData\NVIDIA
2016-09-28 17:40 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-09-28 17:40 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-28 17:29 - 2015-02-23 12:41 - 00000000 ____D C:\Users\Agando\AppData\Local\VirtualStore
2016-09-28 16:09 - 2016-03-06 23:27 - 00000000 ____D C:\Users\Agando\AppData\Local\CrashDumps
2016-09-28 16:09 - 2015-02-25 17:38 - 00000000 ____D C:\Windows\Minidump
2016-09-28 16:09 - 2015-02-23 12:32 - 00000000 ____D C:\Windows\Panther
2016-09-28 16:09 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-09-28 15:57 - 2015-04-08 13:45 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-09-28 15:43 - 2015-03-14 13:44 - 00000000 ____D C:\Users\Agando\AppData\Local\ElevatedDiagnostics
2016-09-26 13:33 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system
2016-09-25 22:12 - 2016-03-13 15:17 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForAgando.job
2016-09-25 21:21 - 2016-04-20 16:04 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-09-25 21:19 - 2015-05-30 15:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-09-25 21:00 - 2011-04-12 09:43 - 00699544 _____ C:\Windows\system32\perfh007.dat
2016-09-25 21:00 - 2011-04-12 09:43 - 00149426 _____ C:\Windows\system32\perfc007.dat
2016-09-25 21:00 - 2009-07-14 07:13 - 01620900 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-25 11:11 - 2016-03-13 15:17 - 00003192 _____ C:\Windows\System32\Tasks\HPCeeScheduleForAgando
2016-09-25 11:01 - 2016-04-20 16:04 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-09-25 00:05 - 2015-04-17 19:20 - 00000000 ____D C:\Users\Agando\AppData\Roaming\SoftGrid Client
2016-09-24 23:26 - 2016-07-17 19:26 - 00000946 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-09-24 10:09 - 2015-02-28 18:04 - 00000000 ____D C:\ProgramData\Package Cache
2016-09-24 10:08 - 2015-02-23 12:41 - 00000000 ____D C:\Users\Agando
2016-09-22 20:21 - 2016-07-09 18:48 - 00003870 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1468082936
2016-09-22 20:21 - 2015-07-28 18:54 - 00000000 ____D C:\Program Files (x86)\Opera
2016-09-21 16:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-09-21 15:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-09-21 15:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism
2016-09-21 15:25 - 2015-07-16 14:52 - 00000000 ____D C:\ProgramData\Skype
2016-09-21 15:19 - 2015-02-23 12:47 - 01594244 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-09-20 21:06 - 2015-02-28 20:40 - 00000000 ___HD C:\Windows\msdownld.tmp
2016-09-20 21:06 - 2015-02-28 20:40 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-09-20 21:05 - 2016-02-28 22:26 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2016-09-20 14:22 - 2015-02-26 10:18 - 00000000 ____D C:\Program Files (x86)\Origin
2016-09-20 12:15 - 2015-02-26 10:20 - 00000000 ____D C:\Users\Agando\AppData\Local\Origin
2016-09-18 23:14 - 2016-03-02 14:05 - 00000000 ____D C:\Users\Agando\AppData\Local\Battle.net
2016-09-18 10:14 - 2016-03-02 14:05 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-09-17 14:37 - 2015-02-28 16:11 - 00000000 ____D C:\Users\Agando\Documents\My Games
2016-09-17 13:45 - 2016-02-09 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-09-17 08:24 - 2016-04-20 16:04 - 00002187 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-09-16 20:49 - 2016-04-24 21:39 - 00000000 ____D C:\Program Files (x86)\Overwatch
2016-09-15 13:45 - 2009-07-14 06:45 - 00278064 _____ C:\Windows\system32\FNTCACHE.DAT
2016-09-14 22:45 - 2016-01-24 22:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-09-14 22:44 - 2016-01-24 22:17 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-09-14 22:44 - 2016-01-24 22:17 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-09-14 22:44 - 2015-02-28 01:03 - 00000000 ____D C:\Windows\system32\MRT
2016-09-14 22:36 - 2015-02-28 01:03 - 144199024 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-09-14 19:31 - 2015-02-25 22:42 - 00000000 ____D C:\Users\Agando\AppData\Local\TeamSpeak 3 Client
2016-09-14 18:43 - 2015-08-26 23:52 - 00007598 _____ C:\Users\Agando\AppData\Local\Resmon.ResmonCfg
2016-09-13 19:19 - 2016-07-17 19:26 - 00003944 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-09-13 19:19 - 2015-05-30 15:10 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-09-13 19:19 - 2015-05-30 15:10 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-09-13 19:19 - 2015-05-30 15:10 - 00000000 ____D C:\Windows\system32\Macromed
2016-09-13 19:19 - 2015-04-10 03:14 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-09-13 19:19 - 2015-04-10 03:14 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-09-13 18:11 - 2016-07-25 15:28 - 00003344 _____ C:\Windows\System32\Tasks\Avira System Speedup Tray
2016-09-13 18:11 - 2015-03-01 20:11 - 00000000 ____D C:\Program Files (x86)\Avira
2016-09-10 18:09 - 2015-06-22 18:02 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Mumble
2016-09-07 20:51 - 2015-03-03 14:51 - 00000000 ____D C:\Users\Agando\AppData\Local\Ubisoft Game Launcher
2016-09-07 19:41 - 2015-02-23 12:52 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-09-07 19:29 - 2015-02-23 12:51 - 00000000 ___HD C:\Program Files (x86)\Temp
2016-09-02 22:27 - 2015-02-23 13:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-09-02 22:27 - 2015-02-23 13:06 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-09-02 21:52 - 2016-02-22 20:20 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-09-02 21:52 - 2016-02-22 20:20 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2016-09-02 21:52 - 2015-03-01 13:17 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-09-02 20:25 - 2015-02-25 18:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-09-02 13:31 - 2015-02-23 12:51 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-09-02 05:17 - 2015-03-23 21:49 - 00000000 ____D C:\Users\Gast
2016-09-02 05:17 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\security
2016-09-02 05:16 - 2015-02-23 12:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-09-02 05:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2016-09-02 01:03 - 2016-04-29 20:27 - 00000000 ____D C:\Users\Agando\Documents\Overwatch
2016-09-02 01:03 - 2016-03-02 14:04 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Battle.net
2016-09-02 01:03 - 2015-12-19 21:20 - 00000000 ____D C:\Windows\System32\Tasks\Hewlett-Packard
2016-09-02 01:03 - 2015-02-23 13:05 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-09-02 01:03 - 2015-02-23 12:52 - 00000000 ____D C:\Program Files\Realtek
2016-09-02 01:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2016-09-02 01:02 - 2015-02-23 13:06 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-09-02 01:01 - 2016-05-29 13:49 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-08-31 00:26 - 2016-06-21 20:49 - 00000000 ____D C:\Program Files (x86)\Overwatch Test
2016-08-30 19:54 - 2015-04-04 02:02 - 00076152 _____ C:\Windows\system32\PnkBstrA.exe
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-12-30 21:14 - 2007-06-18 22:20 - 1731584 _____ (Ovosoft) C:\Program Files (x86)\snapper.exe
2015-04-13 15:00 - 2015-04-13 15:00 - 0000080 _____ () C:\Users\Agando\AppData\Roaming\vibranceGUI.ini
2015-05-03 20:43 - 2015-05-03 20:43 - 0003584 _____ () C:\Users\Agando\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-09-21 14:20 - 2016-09-21 14:20 - 0000000 _____ () C:\Users\Agando\AppData\Local\Driver_LOM_8161Present.flag
2016-06-06 21:03 - 2016-06-06 21:03 - 0000872 _____ () C:\Users\Agando\AppData\Local\recently-used.xbel
2015-08-26 23:52 - 2016-09-14 18:43 - 0007598 _____ () C:\Users\Agando\AppData\Local\Resmon.ResmonCfg
2015-04-22 19:40 - 2015-04-22 19:40 - 0000057 _____ () C:\ProgramData\Ament.ini
2016-09-02 05:09 - 2016-09-02 05:09 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-08-31 22:26 - 2016-08-31 22:26 - 0000016 _____ () C:\ProgramData\mntemp
2015-11-20 22:25 - 2015-11-20 22:59 - 0000098 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
Einige Dateien in TEMP:
====================
C:\Users\Agando\AppData\Local\Temp\avgnt.exe
C:\Users\Agando\AppData\Local\Temp\devcon64.exe
C:\Users\Gast\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-09-25 12:40
==================== Ende von FRST.txt ============================
Pastebin weil der Thread sonst zu lange ist: hxxp://pastebin.com/1M65FKUS Hoffe jemand kann mir helfen Geändert von axyo (28.09.2016 um 18:16 Uhr) |
|
28.09.2016, 21:42
| #2 |
| /// TB-Ausbilder   | Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen. Bitte beachte folgende Hinweise:
Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Danke für deine Mitarbeit! Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers |
|
29.09.2016, 16:24
| #3 |
| | Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviertCode:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org
Database version:
main: v2016.09.29.08
rootkit: v2016.09.26.02
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18449
Agando :: AGANDO-PC [administrator]
29.09.2016 16:13:12
mbar-log-2016-09-29 (16-13-12).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 356166
Time elapsed: 25 minute(s), 31 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org
Database version:
main: v2016.09.29.08
rootkit: v2016.09.26.02
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18449
Agando :: AGANDO-PC [administrator]
29.09.2016 16:48:43
mbar-log-2016-09-29 (16-48-43).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 356053
Time elapsed: 22 minute(s), 32 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
|
|
29.09.2016, 19:45
| #4 |
| /// TB-Ausbilder | Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert Servus, Scan mit Combofix
|
|
30.09.2016, 12:08
| #5 |
| | Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviertCode:
ATTFilter Combofix Logfile: |
|
30.09.2016, 20:12
| #6 |
| /// TB-Ausbilder | Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert Servus, Schritt 1 Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt 2 Downloade Dir bitte  Malwarebytes Anti-Malware
Schritt 3 Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Schritt 4
Bitte poste mit deiner nächsten Antwort
|
|
30.09.2016, 22:31
| #7 |
| | Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert AdwCleaner: AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v6.020 - Bericht erstellt am 30/09/2016 um 21:48:59
# Aktualisiert am 14/09/2016 von ToolsLib
# Datenbank : 2016-09-30.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (X64)
# Benutzername : Agando - AGANDO-PC
# Gestartet von : C:\Users\Agando\Desktop\Dateien\programme\AdwCleaner.exe
# Modus: Löschen
# Unterstützung : https://toolslib.net/forum
***** [ Dienste ] *****
***** [ Ordner ] *****
***** [ Dateien ] *****
***** [ DLL ] *****
***** [ WMI ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
*************************
:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: "Prefetch" Dateien gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [6615 Bytes] - [28/09/2016 19:34:05]
C:\AdwCleaner\AdwCleaner[C2].txt - [1054 Bytes] - [30/09/2016 21:48:59]
C:\AdwCleaner\AdwCleaner[S1].txt - [6175 Bytes] - [20/11/2015 22:26:42]
C:\AdwCleaner\AdwCleaner[S2].txt - [6546 Bytes] - [28/09/2016 19:26:45]
C:\AdwCleaner\AdwCleaner[S3].txt - [1580 Bytes] - [30/09/2016 16:32:41]
C:\AdwCleaner\AdwCleaner[S4].txt - [1653 Bytes] - [30/09/2016 21:48:41]
########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1419 Bytes] ##########
[/CODE] MBAM: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 30.09.2016 Scan Time: 21:57 Logfile: MBAM log.txt Administrator: Yes Version: 2.2.1.1043 Malware Database: v2016.09.30.14 Rootkit Database: v2016.09.26.02 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: Agando Scan Type: Threat Scan Result: Completed Objects Scanned: 365233 Time Elapsed: 27 min, 9 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 0 (No malicious items detected) Physical Sectors: 0 (No malicious items detected) (end) Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.8 (09.20.2016)
Operating System: Windows 7 Home Premium x64
Ran by Agando (Administrator) on 30.09.2016 at 23:05:11,84
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 24
Successfully deleted: C:\ProgramData\mntemp (File)
Successfully deleted: C:\ProgramData\productdata (Folder)
Successfully deleted: C:\Users\Agando\AppData\Local\crashrpt (Folder)
Successfully deleted: C:\Users\Agando\AppData\Local\innovative solutions (Folder)
Successfully deleted: C:\Users\Agando\AppData\Roaming\innovative solutions (Folder)
Successfully deleted: C:\Windows\system32\Tasks\Avira System Speedup Tray (Task)
Successfully deleted: C:\Users\Agando\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Agando\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Agando\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B2RPNEZX (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Agando\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BIAMGC4C (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Agando\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C2SWLOZA (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Agando\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D79VPEIT (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Agando\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Agando\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B2RPNEZX (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BIAMGC4C (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C2SWLOZA (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D79VPEIT (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\SysWOW64\sho109E.tmp (File)
Successfully deleted: C:\Windows\SysWOW64\sho7BDF.tmp (File)
Deleted the following from C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\prefs.js
user_pref(browser.urlbar.suggest.searches, true);
user_pref(extensions.Imagus.tls, {\advanced\:false,\sieveAutoUpdate\:true,\sieveCacheRes\:true,\opzoom\:true,\sendToHosts\:[[\+TinEye\,\hxxps://www.tineye.com/
Registry: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30.09.2016 at 23:07:38,97
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 28-09-2016
durchgeführt von Agando (Administrator) auf AGANDO-PC (30-09-2016 23:08:57)
Gestartet von C:\Users\Agando\Desktop\virus
Geladene Profile: Agando & (Verfügbare Profile: Agando & Gast)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Opera)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
() C:\Program Files (x86)\WhatPulse2\whatpulse.exe
() C:\Program Files (x86)\WhatPulse2\whatpulse-watchdog.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Users\Agando\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-06-15] (NVIDIA Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [630912 2012-05-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [60136 2016-08-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [18536 2016-09-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [830064 2016-09-09] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2858272 2016-09-20] (Valve Corporation)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [WhatPulse] => c:\program files (x86)\whatpulse2\whatpulse.exe [3942400 2016-02-25] ()
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7943072 2016-08-30] (SUPERAntiSpyware)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3503088 2016-09-20] (Electronic Arts)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [AutoHideMouseCursor] => C:\Users\Agando\Desktop\Dateien\programme\AutoHideMouseCursor.exe [34816 2013-08-27] (Nenad Hrg (SoftwareOK.com))
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8912088 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-21] (Microsoft Corporation)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2858272 2016-09-20] (Valve Corporation)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [WhatPulse] => C:\Program Files (x86)\WhatPulse2\whatpulse.exe [3942400 2016-02-25] ()
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7943072 2016-08-30] (SUPERAntiSpyware)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3503088 2016-09-20] (Electronic Arts)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [AutoHideMouseCursor] => C:\Users\Agando\Desktop\Dateien\programme\AutoHideMouseCursor.exe [34816 2013-08-27] (Nenad Hrg (SoftwareOK.com))
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8912088 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-21] (Microsoft Corporation)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2858272 2016-09-20] (Valve Corporation)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [WhatPulse] => C:\Program Files (x86)\WhatPulse2\whatpulse.exe [3942400 2016-02-25] ()
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7943072 2016-08-30] (SUPERAntiSpyware)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3503088 2016-09-20] (Electronic Arts)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [AutoHideMouseCursor] => C:\Users\Agando\Desktop\Dateien\programme\AutoHideMouseCursor.exe [34816 2013-08-27] (Nenad Hrg (SoftwareOK.com))
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8912088 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-21] (Microsoft Corporation)
Startup: C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2016-09-30]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2016-09-30]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{268427DE-E434-45BD-88EC-B67F4F63F895}: [DhcpNameServer] 192.168.9.1 192.168.9.1
Tcpip\..\Interfaces\{715DE7BB-61E4-4C78-973D-580A8E88C542}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{81DD97E4-ED28-4EAD-99E3-B6C5F20A5C2F}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{A95EB6A5-4DD0-42E9-AFFF-534397AD1C34}: [NameServer] 138.201.199.90,8.8.8.8
Tcpip\..\Interfaces\{A95EB6A5-4DD0-42E9-AFFF-534397AD1C34}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{AD54DC0C-B34B-4BFF-AAB8-2990E51F17E2}: [DhcpNameServer] 192.168.2.1
ManualProxies:
Internet Explorer:
==================
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Software\Microsoft\Internet Explorer\Main,Start Page =
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page =
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main,Start Page =
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3320435249-1176308213-2412890335-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-27] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-27] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-27] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: AviraBrowserSafety.BrowserSafety -> {c3c77255-42c0-499f-b664-6e981a0b1647} -> C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-27] (Oracle Corporation)
Handler-x32: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll [2016-09-13] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2015-02-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei]
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-27] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-27] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] ( Microsoft Corporation)
FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-02-18] (Unity Technologies ApS)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll [2016-09-13] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-02-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-27] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [Keine Datei]
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-08-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-08-25] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-02-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: @nsroblox.roblox.com/launcher -> C:\Users\Agando\AppData\Local\Roblox\Versions\version-e6d872d544b64cd9\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: @nsroblox.roblox.com/launcher64 -> C:\Users\Agando\AppData\Local\Roblox\Versions\version-e6d872d544b64cd9\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Agando\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-01-22] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-08-29] ()
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-02-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @nsroblox.roblox.com/launcher -> C:\Users\Agando\AppData\Local\Roblox\Versions\version-e6d872d544b64cd9\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @nsroblox.roblox.com/launcher64 -> C:\Users\Agando\AppData\Local\Roblox\Versions\version-e6d872d544b64cd9\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Agando\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-01-22] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-08-29] ()
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-02-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1: @nsroblox.roblox.com/launcher -> C:\Users\Agando\AppData\Local\Roblox\Versions\version-e6d872d544b64cd9\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1: @nsroblox.roblox.com/launcher64 -> C:\Users\Agando\AppData\Local\Roblox\Versions\version-e6d872d544b64cd9\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Agando\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-01-22] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-08-29] ()
FF Extension: (Dictionary Tooltip) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\extensions\{C6128004-4838-4708-9A97-BB172D17767D}.xpi [2016-06-12]
FF Extension: (Grammarly for Firefox) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\Extensions\87677a2c52b84ad3a151a4a72f5bd3c4@jetpack.xpi [2016-07-05]
FF Extension: (Avira Browser Safety) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\Extensions\abs@avira.com [2016-06-22]
FF Extension: (Battlefield Heroes Updater) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\Extensions\battlefieldheroespatcher@ea.com [2015-04-19] [ist nicht signiert]
FF Extension: (Twitch Now) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\Extensions\jid1-jwVSihNsgAw5jA@jetpack.xpi [2016-05-19]
FF Extension: (YouTube™ HD Plus) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\Extensions\jid1-wkCmfgboni3B1Q@jetpack.xpi [2016-04-21]
FF Extension: (Imagus) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\Extensions\{00000f2a-7cde-4f20-83ed-434fcb420d71}.xpi [2016-05-27]
FF Extension: (ProxTube - Gesperrte YouTube Videos entsperren) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}.xpi [2016-04-25]
FF Extension: (Adblock Plus) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt => nicht gefunden
Chrome:
=======
CHR HomePage: Profile 1 -> hxxps://www.google.com/
CHR StartupUrls: Profile 1 -> "hxxps://www.google.de/","hxxps://www.youtube.com/"
CHR Profile: C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1 [2016-09-28]
CHR Extension: (ProxFlow) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-08-13]
CHR Extension: (HD for YouTube™) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\akjbfncbadcmnkopckegnmjgihagponf [2015-11-21]
CHR Extension: (Google Drive) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (Adblock Plus) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-07-08]
CHR Extension: (Google Docs Offline) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (GoodWordGuide.com: Instant Dictionary) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mfembjnmeainjncdflaoclcjadfhpoim [2016-07-08]
CHR Extension: (Google Mail Checker) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2015-10-19]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR Extension: (Hover Zoom+) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pccckmaobkjjboncdfnnofkonhgpceea [2016-08-13]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp] - hxxps://clients2.google.com/service/update2/crx
Opera:
=======
OPR StartupUrls: "hxxp://www.google.com/","hxxp://www.youtube.com/"
OPR Extension: (ProxFlow) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-09-23]
OPR Extension: (YouTube™ Flash-HTML5) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\abpeogmjbjonedcakbihofgpoelmfbgj [2016-08-17]
OPR Extension: (Block site) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\eiimnmioipafcokbfikbljfdeojpcgbh [2016-09-28]
OPR Extension: (HD quality for YouTube™ (1080p, 1440p, 2160p)) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\emcclmhiklabihbljnpjnacgdaaohpjc [2016-07-26]
OPR Extension: (Twitch Now) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\hiahmjdojdodmjjhhddegdnhcpjmokmo [2016-07-10]
OPR Extension: (JavaScript Popup Blocker) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\hiajdlfgbgnnjakkbnpdhmhfhklkbiol [2016-09-30]
OPR Extension: (Download Chrome Extension) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\kipjbhgniklcnglfaldilecjomjaddfi [2016-07-10]
OPR Extension: (Adblock Plus) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2016-08-24]
OPR Extension: (Hover Zoom+) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\pccckmaobkjjboncdfnnofkonhgpceea [2016-09-27]
OPR Extension: (That's Pretty Good (iDubbbzTV)) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\pnidecdngnainebcfbmebgpkmnmljdng [2016-07-27]
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-05-04] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [989696 2016-09-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [470600 2016-09-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [470600 2016-09-09] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1454720 2016-09-09] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [324304 2016-08-19] (Avira Operations GmbH & Co. KG)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368 2016-06-15] (NVIDIA Corporation)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [8704 2015-09-02] (Hi-Rez Studios) [Datei ist nicht signiert]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29728 2016-08-15] (HP Inc.)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-02-18] (Logitech Inc.)
S4 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [289256 2015-06-26] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-06-15] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-06-15] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-06-15] (NVIDIA Corporation)
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2141192 2016-09-20] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2206224 2016-09-20] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2016-08-30] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2016-09-02] ()
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [344576 2014-01-22] (Qualcomm Atheros) [Datei ist nicht signiert]
R2 SpeedupService; C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [26632 2016-09-05] (Avira Operations GmbH & Co. KG)
S4 VmbService; C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [8704 2013-09-05] (Vodafone) [Datei ist nicht signiert]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [55936 2011-11-13] (Advanced Micro Devices)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [171752 2016-07-28] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [145984 2016-07-28] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2015-12-03] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [79696 2016-05-11] (Avira Operations GmbH & Co. KG)
R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [80080 2013-11-08] (Qualcomm Atheros, Inc.)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-06-15] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex) [Datei ist nicht signiert]
S3 YMIDUSBW; C:\Windows\System32\drivers\ymidusbx64.sys [51496 2013-04-04] (Yamaha Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 UCOREW64; \??\C:\Users\Agando\AppData\Local\Temp\Rar$EXa0.815\AMIBIOS_and_Aptio_AMI_Firmware_Update_Utility\AMIBIOS\AFUWin\64\UCOREW64.SYS [X]
S3 VUSB3HUB; system32\DRIVERS\ViaHub3.sys [X]
S3 X6va060; \??\C:\Windows\SysWOW64\Drivers\X6va060 [X]
S3 X6va062; \??\C:\Windows\SysWOW64\Drivers\X6va062 [X]
S3 xhcdrv; system32\DRIVERS\xhcdrv.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
S3 xspirit; \??\C:\Windows\xspirit.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-09-30 18:25 - 2016-09-30 18:25 - 01182367 _____ C:\Users\Agando\Downloads\Pflegeanleitung Tenorhorn.pdf
2016-09-30 12:59 - 2016-09-30 12:59 - 00025673 _____ C:\ComboFix.txt
2016-09-30 12:20 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2016-09-30 12:20 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2016-09-30 12:20 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-09-30 12:20 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-09-30 12:20 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-09-30 12:20 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2016-09-30 12:20 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2016-09-30 12:20 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2016-09-30 12:19 - 2016-09-30 12:59 - 00000000 ____D C:\Qoobox
2016-09-30 12:19 - 2016-09-30 12:55 - 00000000 ____D C:\Windows\erdnt
2016-09-29 16:12 - 2016-09-29 17:24 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-09-28 22:17 - 2016-09-30 23:08 - 00000000 ____D C:\Users\Agando\Desktop\virus
2016-09-28 19:55 - 2016-09-28 19:55 - 00002794 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-09-28 17:59 - 2016-09-30 23:08 - 00000000 ____D C:\FRST
2016-09-28 17:33 - 2016-09-28 17:33 - 00000004 _____ C:\Users\Agando\Documents\'hosts.'.txt
2016-09-28 16:03 - 2016-09-28 16:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-09-28 16:03 - 2016-09-28 16:03 - 00000000 ____D C:\Program Files\CCleaner
2016-09-25 22:09 - 2016-09-25 22:09 - 00000000 ____D C:\Users\Agando\AppData\Local\GeoLocator
2016-09-25 21:34 - 2016-09-25 21:34 - 00000000 ____D C:\Users\Agando\AppData\Roaming\FlowStone
2016-09-25 21:34 - 2016-09-25 21:34 - 00000000 ____D C:\Program Files (x86)\DSPRobotics
2016-09-25 21:16 - 2016-09-26 16:23 - 00000000 ____D C:\Users\Agando\Downloads\FL Studio Producer Edition 11.0.4+Plugins Bundle R2R [ChingLiu]
2016-09-24 10:11 - 2016-09-24 10:11 - 00000000 _____ C:\TOSTACK
2016-09-24 10:08 - 2016-09-25 22:09 - 00000000 ____D C:\Users\Agando\ReportSender
2016-09-21 15:12 - 2016-08-12 19:02 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-09-21 15:12 - 2016-06-14 19:16 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2016-09-21 15:11 - 2016-08-29 17:31 - 14183424 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-09-21 15:11 - 2016-08-29 17:31 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-09-21 15:11 - 2016-08-29 17:31 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-09-21 15:11 - 2016-08-29 17:12 - 12880384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-09-21 15:11 - 2016-08-29 17:12 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-09-21 15:11 - 2016-08-29 17:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-09-21 15:11 - 2016-08-29 17:04 - 03229696 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-09-21 15:11 - 2016-08-29 16:55 - 02972672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-09-21 15:11 - 2016-08-16 22:40 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2016-09-21 15:11 - 2016-08-12 19:02 - 12574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-09-21 15:11 - 2016-08-12 19:02 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-09-21 15:11 - 2016-08-12 19:02 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-09-21 15:11 - 2016-08-12 19:02 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-09-21 15:11 - 2016-08-12 18:47 - 12574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-09-21 15:11 - 2016-08-12 18:47 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-09-21 15:11 - 2016-08-12 18:31 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-09-21 15:11 - 2016-08-12 18:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-09-21 15:11 - 2016-08-12 18:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-09-21 15:11 - 2016-08-12 18:26 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 02023424 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 01178112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 00249344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmRes.dll
2016-09-21 15:11 - 2016-08-06 17:01 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-09-21 15:11 - 2016-08-06 17:01 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe
2016-09-21 15:11 - 2016-08-06 16:53 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2016-09-21 15:11 - 2016-08-06 16:53 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmprovhost.exe
2016-09-21 15:11 - 2016-08-06 16:53 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmplpxy.dll
2016-09-21 15:11 - 2016-06-14 19:21 - 00094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-09-21 15:11 - 2016-06-14 19:16 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 01483264 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-09-21 15:11 - 2016-06-14 19:11 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-09-21 15:11 - 2016-06-14 17:21 - 03209216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 01176064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2016-09-21 15:11 - 2016-06-14 17:15 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-09-21 15:11 - 2016-06-14 17:15 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-09-21 15:11 - 2016-06-14 17:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-09-21 15:11 - 2016-06-14 17:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2016-09-21 15:11 - 2016-06-14 17:05 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-09-21 15:11 - 2016-06-14 17:00 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2016-09-21 15:11 - 2016-06-14 17:00 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2016-09-21 14:20 - 2016-09-21 14:20 - 00000000 _____ C:\Users\Agando\AppData\Local\Driver_LOM_8161Present.flag
2016-09-21 14:18 - 2016-09-21 14:19 - 00000000 ____D C:\CIMTEMP
2016-09-21 13:51 - 2016-08-05 17:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-09-21 13:51 - 2016-08-05 17:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-09-20 21:06 - 2016-09-20 21:06 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server
2016-09-20 21:05 - 2016-09-20 21:06 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2016-09-17 14:40 - 2016-09-17 14:40 - 00000000 ____D C:\e49e132389896a47af13baaab7
2016-09-17 09:02 - 2016-09-17 09:07 - 00000000 ____D C:\Users\Agando\Documents\RCT3
2016-09-17 09:02 - 2016-09-17 09:02 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Atari
2016-09-14 22:26 - 2016-09-01 21:26 - 00394440 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-09-14 22:26 - 2016-09-01 20:41 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-09-14 22:26 - 2016-09-01 05:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-09-14 22:26 - 2016-09-01 05:08 - 20312064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-09-14 22:26 - 2016-09-01 04:48 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-09-14 22:26 - 2016-09-01 04:46 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-09-14 22:26 - 2016-09-01 04:46 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-09-14 22:26 - 2016-09-01 04:46 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-09-14 22:26 - 2016-09-01 04:44 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-09-14 22:26 - 2016-09-01 04:34 - 02286592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-09-14 22:26 - 2016-09-01 04:31 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-09-14 22:26 - 2016-09-01 04:31 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-09-14 22:26 - 2016-09-01 04:26 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-09-14 22:26 - 2016-09-01 04:24 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-09-14 22:26 - 2016-09-01 04:24 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-09-14 22:26 - 2016-09-01 04:23 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-09-14 22:26 - 2016-09-01 04:08 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-09-14 22:26 - 2016-09-01 03:59 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-09-14 22:26 - 2016-09-01 03:57 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-09-14 22:26 - 2016-09-01 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-09-14 22:26 - 2016-09-01 03:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-09-14 22:26 - 2016-09-01 03:48 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-09-14 22:26 - 2016-09-01 03:45 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-09-14 22:26 - 2016-09-01 03:34 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-09-14 22:26 - 2016-09-01 03:30 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-09-14 22:26 - 2016-09-01 03:29 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-09-14 22:26 - 2016-09-01 03:29 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-09-14 22:26 - 2016-09-01 03:27 - 13808128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-09-14 22:26 - 2016-09-01 03:24 - 04607488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-09-14 22:26 - 2016-09-01 02:45 - 25770496 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-09-14 22:26 - 2016-09-01 02:43 - 02445824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-09-14 22:26 - 2016-09-01 02:42 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-09-14 22:26 - 2016-09-01 02:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-09-14 22:26 - 2016-09-01 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-09-14 22:26 - 2016-09-01 02:38 - 01316352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-09-14 22:26 - 2016-09-01 02:25 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-09-14 22:26 - 2016-09-01 02:24 - 02894336 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-09-14 22:26 - 2016-09-01 02:24 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-09-14 22:26 - 2016-09-01 02:24 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-09-14 22:26 - 2016-09-01 02:24 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-09-14 22:26 - 2016-09-01 02:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-09-14 22:26 - 2016-09-01 02:16 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-09-14 22:26 - 2016-09-01 02:15 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-09-14 22:26 - 2016-09-01 02:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-09-14 22:26 - 2016-09-01 02:11 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-09-14 22:26 - 2016-09-01 02:11 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-09-14 22:26 - 2016-09-01 02:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-09-14 22:26 - 2016-09-01 02:10 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-09-14 22:26 - 2016-09-01 02:06 - 06047232 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-09-14 22:26 - 2016-09-01 02:03 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-09-14 22:26 - 2016-09-01 01:59 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-09-14 22:26 - 2016-09-01 01:51 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-09-14 22:26 - 2016-09-01 01:50 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-09-14 22:26 - 2016-09-01 01:47 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-09-14 22:26 - 2016-09-01 01:46 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-09-14 22:26 - 2016-09-01 01:44 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-09-14 22:26 - 2016-09-01 01:42 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-09-14 22:26 - 2016-09-01 01:31 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-09-14 22:26 - 2016-09-01 01:29 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-09-14 22:26 - 2016-09-01 01:28 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-09-14 22:26 - 2016-09-01 01:27 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-09-14 22:26 - 2016-09-01 01:26 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-09-14 22:26 - 2016-09-01 01:15 - 15411712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-09-14 22:26 - 2016-09-01 01:10 - 02921472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-09-14 22:26 - 2016-09-01 00:58 - 01550848 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-09-14 22:26 - 2016-09-01 00:47 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-09-14 22:26 - 2016-08-12 18:26 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-09-14 22:26 - 2016-08-12 18:26 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-09-14 22:26 - 2016-08-12 18:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-09-14 22:25 - 2016-09-02 17:40 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-09-14 22:25 - 2016-09-02 17:35 - 05548264 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-09-14 22:25 - 2016-09-02 17:35 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-09-14 22:25 - 2016-09-02 17:35 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-09-14 22:25 - 2016-09-02 17:35 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-09-14 22:25 - 2016-09-02 17:34 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:21 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-09-14 22:25 - 2016-09-02 17:21 - 03944680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-09-14 22:25 - 2016-09-02 17:18 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:02 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-09-14 22:25 - 2016-09-02 17:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-09-14 22:25 - 2016-09-02 17:02 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-09-14 22:25 - 2016-09-02 17:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-09-14 22:25 - 2016-09-02 16:58 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-09-14 22:25 - 2016-09-02 16:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-09-14 22:25 - 2016-09-02 16:55 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-09-14 22:25 - 2016-09-02 16:54 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-09-14 22:25 - 2016-09-02 16:54 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-09-14 22:25 - 2016-09-02 16:53 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-09-14 22:25 - 2016-09-02 16:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-09-14 22:25 - 2016-09-02 16:53 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-09-14 22:25 - 2016-09-02 16:49 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-09-14 22:25 - 2016-09-02 16:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-09-14 22:25 - 2016-09-02 16:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-09-14 22:25 - 2016-09-02 16:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-09-14 22:25 - 2016-09-02 16:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-09-14 22:25 - 2016-09-02 16:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 16:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 16:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 16:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-09-14 22:25 - 2016-05-14 00:09 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-09-14 22:25 - 2016-05-14 00:09 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-09-14 22:25 - 2016-05-14 00:09 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-09-14 22:25 - 2016-05-14 00:07 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-09-14 22:25 - 2016-05-13 23:55 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-09-14 22:25 - 2016-05-13 23:53 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-09-14 22:25 - 2016-05-13 23:53 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-09-14 22:25 - 2016-05-13 23:52 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-09-14 22:25 - 2016-05-13 23:52 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-09-14 22:25 - 2016-05-13 23:52 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-09-14 22:25 - 2016-05-13 23:52 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-09-14 22:25 - 2016-05-13 23:50 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-09-14 22:25 - 2016-05-13 23:38 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-09-14 22:25 - 2016-05-13 23:38 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-09-14 22:25 - 2016-05-13 23:38 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-09-14 22:25 - 2016-05-13 23:38 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-09-14 22:25 - 2016-05-12 19:14 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-09-14 22:25 - 2016-05-12 17:18 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-09-14 22:25 - 2016-05-12 17:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-09-14 22:25 - 2016-05-04 19:21 - 00114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-09-14 22:25 - 2016-05-04 19:17 - 03244032 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-09-14 22:25 - 2016-05-04 19:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-09-14 22:25 - 2016-05-04 19:17 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-09-14 22:25 - 2016-05-04 19:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-09-14 22:25 - 2016-05-04 19:16 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-09-14 22:25 - 2016-05-04 17:04 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-09-14 22:25 - 2016-05-04 16:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-09-14 22:24 - 2016-08-16 19:36 - 01009152 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-09-14 22:24 - 2016-08-16 04:48 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-09-14 22:24 - 2016-08-16 04:35 - 03218432 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-09-14 22:24 - 2016-08-06 17:31 - 00877056 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-09-14 22:24 - 2016-08-06 17:15 - 00581632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-09-14 22:24 - 2016-07-07 17:36 - 01896168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-09-14 22:24 - 2016-07-07 17:36 - 00377576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-09-14 22:24 - 2016-07-07 17:36 - 00287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-09-14 22:24 - 2016-07-07 17:08 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-09-14 22:24 - 2016-07-01 17:31 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-09-14 22:24 - 2016-07-01 17:31 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2016-09-14 22:24 - 2016-07-01 17:13 - 00741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-09-14 22:24 - 2016-07-01 17:13 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2016-09-14 22:24 - 2016-05-04 19:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-09-14 22:24 - 2016-05-04 19:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-09-14 20:53 - 2016-09-14 20:53 - 00000000 ____D C:\Users\Agando\.QtWebEngineProcess
2016-09-14 20:53 - 2016-09-14 20:53 - 00000000 ____D C:\Users\Agando\.Origin
2016-09-14 18:52 - 2016-09-14 18:52 - 00000000 ____D C:\Users\Agando\AppData\Roaming\SUPERAntiSpyware.com
2016-09-14 18:52 - 2016-09-14 18:52 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2016-09-14 18:52 - 2016-09-14 18:52 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2016-09-14 18:52 - 2016-09-14 18:52 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2016-09-14 18:44 - 2016-09-14 18:44 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD
2016-09-14 18:44 - 2016-09-14 18:44 - 00000000 ____D C:\Program Files (x86)\AMD
2016-09-14 18:40 - 2016-09-14 18:41 - 00000000 ____D C:\Program Files (x86)\CPU Thermometer
2016-09-14 18:40 - 2016-09-14 18:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPU Thermometer
2016-09-13 18:11 - 2016-09-30 21:51 - 00000000 ____D C:\Users\Public\Speedup Sessions
2016-09-07 22:26 - 2016-09-07 22:26 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2016-09-07 19:41 - 2016-09-07 19:41 - 00000000 ____D C:\Windows\system32\DAX2
2016-09-07 19:40 - 2016-06-03 08:29 - 72520720 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2016-09-07 19:40 - 2016-06-03 08:29 - 24399544 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRenderAVX64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 24310136 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRender64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 17359672 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioCapture64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 15202040 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 14057256 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 13122584 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 12988352 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO4064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 10512448 _____ (Intel Corporation) C:\Windows\system32\IntelSSTAPO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 07172920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 07096192 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 06402432 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV3apo.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 06264640 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64AF3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 06064046 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2016-09-07 19:40 - 2016-06-03 08:29 - 05804772 _____ C:\Windows\system32\Drivers\rtvienna.dat
2016-09-07 19:40 - 2016-06-03 08:29 - 05776968 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 05593624 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 05339552 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 05111040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2016-09-07 19:40 - 2016-06-03 08:29 - 03299824 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE2.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 03283248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 03282544 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 03199744 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 03181209 _____ C:\Windows\system32\Drivers\rtkSSTsetting.dat
2016-09-07 19:40 - 2016-06-03 08:29 - 03096248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02895104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2016-09-07 19:40 - 2016-06-03 08:29 - 02825104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO7064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02726416 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02477520 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02437760 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02190992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02110600 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02060032 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02050184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01965816 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01959608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64AF3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01847888 _____ (DTS, Inc.) C:\Windows\system32\slcnt64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01780624 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01608128 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01591064 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01508936 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01435144 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01422928 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01382240 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01355616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01336544 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaeapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01334384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01213664 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01186832 _____ (Intel Corporation) C:\Windows\system32\IntelSstCApoPropPage.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01166168 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01061120 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01023240 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01003864 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00999856 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00965032 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00962056 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tosasfapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00931624 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00927424 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00923744 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00873472 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00743968 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00727440 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00716112 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00708312 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00689888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00678184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00677672 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00618192 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00589072 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SECOMN32.DLL
2016-09-07 19:40 - 2016-06-03 08:29 - 00586424 _____ (Conexant Systems, Inc.) C:\Windows\system32\CAF64APO2.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00570096 _____ (Intel Corporation) C:\Windows\system32\tbb_waves.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00532384 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00524680 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaemaxapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00514528 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00504312 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00500560 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00472312 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00467168 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00450120 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00447728 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00447104 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\toseaeapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00445400 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00441272 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00428232 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00416512 _____ (Harman) C:\Windows\system32\HMUI.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00387320 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00381416 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00371456 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00366128 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\HMAPO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00362056 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64AF3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00360352 _____ (Harman) C:\Windows\system32\HMClariFi.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00343712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00341152 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00341152 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00330568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00327456 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00310424 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64F3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00272720 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00258872 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00253904 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00253872 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00252880 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00231920 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00221968 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00214832 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00209536 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00203848 _____ (Harman) C:\Windows\system32\HMHVS.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00192984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00190936 _____ (Harman) C:\Windows\system32\HMEQ_Voice.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00190936 _____ (Harman) C:\Windows\system32\HMEQ.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00179600 _____ (Harman) C:\Windows\system32\HMLimiter.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00166208 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00158704 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00154368 _____ (Harman) C:\Windows\system32\HarmanAudioInterface.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00151792 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00134208 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00122328 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00110984 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00090920 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00088352 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00088320 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00084616 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00083632 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00075544 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00065832 _____ (Conexant System, Inc.) C:\Windows\system32\Caf64api.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00023696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00007756 _____ C:\Windows\system32\cxapo.prop
2016-09-07 19:40 - 2016-06-03 08:29 - 00005604 _____ C:\Windows\system32\cxapo.lncs
2016-09-07 19:39 - 2016-06-03 08:29 - 00574760 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2016-09-07 19:39 - 2016-06-03 08:29 - 00118600 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2016-09-07 19:39 - 2016-06-03 08:29 - 00118592 _____ C:\Windows\system32\AcpiServiceVnA64.dll
2016-09-07 19:39 - 2016-06-03 08:29 - 00105312 _____ C:\Windows\system32\audioLibVc.dll
2016-09-02 22:26 - 2016-08-25 22:50 - 00133056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-09-02 22:26 - 2016-05-04 04:23 - 00129824 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-09-02 22:26 - 2016-05-04 04:22 - 00130848 _____ C:\Windows\system32\vulkan-1.dll
2016-09-02 22:26 - 2016-05-04 04:22 - 00045344 _____ C:\Windows\system32\vulkaninfo.exe
2016-09-02 22:26 - 2016-05-04 04:22 - 00040224 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-09-02 22:21 - 2016-08-26 01:28 - 40070200 _____ C:\Windows\system32\nvcompiler.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 35182648 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 34801088 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 28207672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 14093368 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-09-02 22:21 - 2016-08-26 01:28 - 10865704 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 10737632 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 10278080 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 09086856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 08875408 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 08680696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 03594808 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 03160512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 01920960 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437270.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437270.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00956352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00941504 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00892864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00686896 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00575984 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00520912 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00493608 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00437696 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00436088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00408784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00390200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00223304 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-09-02 22:21 - 2016-08-26 01:28 - 00181488 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00159352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00153368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00131536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00054728 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00039731 _____ C:\Windows\system32\nvinfo.pb
2016-09-02 22:21 - 2016-08-26 01:28 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-09-02 22:21 - 2016-08-26 01:28 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2016-09-02 21:53 - 2016-09-02 21:53 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2016-09-02 20:31 - 2016-09-02 20:31 - 00000000 ____D C:\Neuer Ordner
2016-09-02 20:22 - 2016-09-30 21:50 - 00000000 ____D C:\Program Files (x86)\Steam
2016-09-02 19:53 - 2016-09-02 21:15 - 00000000 ____D C:\Program Files (x86)\Origin Games
2016-09-02 12:59 - 2015-05-05 14:01 - 01948928 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO264.dll
2016-09-02 12:58 - 2015-05-05 14:01 - 01716480 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO232.dll
2016-09-02 05:09 - 2016-09-02 05:09 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2016-08-31 15:12 - 2016-08-31 15:24 - 00000000 ____D C:\Users\Agando\Documents\Battlefield 1 Open Beta
2016-08-31 15:10 - 2016-08-31 15:10 - 00000000 ____D C:\Program Files\Common Files\EAInstaller
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-09-30 23:04 - 2016-04-25 19:48 - 00000000 ____D C:\Users\Agando\AppData\Local\whatpulse
2016-09-30 23:04 - 2015-03-01 12:31 - 00000000 ___RD C:\Users\Agando\Desktop\Dateien
2016-09-30 23:02 - 2015-02-26 10:20 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Origin
2016-09-30 22:21 - 2016-04-20 16:04 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-09-30 22:19 - 2015-05-30 15:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-09-30 22:00 - 2009-07-14 06:45 - 00021648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-09-30 22:00 - 2009-07-14 06:45 - 00021648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-09-30 21:56 - 2015-04-08 13:45 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-09-30 21:52 - 2015-02-26 10:18 - 00000000 ____D C:\ProgramData\Origin
2016-09-30 21:51 - 2015-11-20 22:26 - 00000000 ____D C:\AdwCleaner
2016-09-30 21:50 - 2016-04-20 16:04 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-09-30 21:50 - 2015-02-23 13:06 - 00000000 ____D C:\ProgramData\NVIDIA
2016-09-30 21:50 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-30 12:43 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2016-09-30 12:41 - 2009-07-14 04:34 - 01048576 _____ C:\Windows\system32\config\DEFAULT.bak
2016-09-30 12:41 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2016-09-30 12:41 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2016-09-30 06:14 - 2015-04-17 19:20 - 00000000 ____D C:\Users\Agando\AppData\Roaming\SoftGrid Client
2016-09-30 06:07 - 2015-07-29 15:12 - 00000000 ____D C:\Users\Agando\Desktop\schule
2016-09-29 17:25 - 2015-04-08 13:45 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-09-29 16:13 - 2015-04-08 13:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-09-29 11:11 - 2016-03-13 15:17 - 00003192 _____ C:\Windows\System32\Tasks\HPCeeScheduleForAgando
2016-09-29 11:11 - 2016-03-13 15:17 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForAgando.job
2016-09-28 19:33 - 2015-02-23 12:41 - 00000997 _____ C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-09-28 17:40 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-09-28 17:29 - 2015-02-23 12:41 - 00000000 ____D C:\Users\Agando\AppData\Local\VirtualStore
2016-09-28 16:09 - 2016-03-06 23:27 - 00000000 ____D C:\Users\Agando\AppData\Local\CrashDumps
2016-09-28 16:09 - 2015-02-25 17:38 - 00000000 ____D C:\Windows\Minidump
2016-09-28 16:09 - 2015-02-23 12:32 - 00000000 ____D C:\Windows\Panther
2016-09-28 16:09 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-09-28 15:43 - 2015-03-14 13:44 - 00000000 ____D C:\Users\Agando\AppData\Local\ElevatedDiagnostics
2016-09-27 20:05 - 2015-07-28 18:50 - 00000000 ____D C:\Program Files (x86)\Image-Line
2016-09-26 13:33 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system
2016-09-25 21:34 - 2015-07-28 18:54 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-09-25 21:34 - 2015-07-28 18:54 - 00000000 ____D C:\Program Files\Image-Line
2016-09-25 21:00 - 2011-04-12 09:43 - 00699544 _____ C:\Windows\system32\perfh007.dat
2016-09-25 21:00 - 2011-04-12 09:43 - 00149426 _____ C:\Windows\system32\perfc007.dat
2016-09-25 21:00 - 2009-07-14 07:13 - 01620900 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-24 23:26 - 2016-07-17 19:26 - 00000946 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-09-24 10:09 - 2015-02-28 18:04 - 00000000 ____D C:\ProgramData\Package Cache
2016-09-24 10:08 - 2015-02-23 12:41 - 00000000 ____D C:\Users\Agando
2016-09-22 20:21 - 2016-07-09 18:48 - 00003870 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1468082936
2016-09-22 20:21 - 2015-07-28 18:54 - 00000000 ____D C:\Program Files (x86)\Opera
2016-09-21 16:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-09-21 15:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-09-21 15:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism
2016-09-21 15:25 - 2015-07-16 14:52 - 00000000 ____D C:\ProgramData\Skype
2016-09-21 15:19 - 2015-02-23 12:47 - 01594244 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-09-20 21:06 - 2015-02-28 20:40 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-09-20 21:05 - 2016-02-28 22:26 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2016-09-20 14:22 - 2015-02-26 10:18 - 00000000 ____D C:\Program Files (x86)\Origin
2016-09-20 12:15 - 2015-02-26 10:20 - 00000000 ____D C:\Users\Agando\AppData\Local\Origin
2016-09-18 23:14 - 2016-03-02 14:05 - 00000000 ____D C:\Users\Agando\AppData\Local\Battle.net
2016-09-18 10:14 - 2016-03-02 14:05 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-09-17 14:37 - 2015-02-28 16:11 - 00000000 ____D C:\Users\Agando\Documents\My Games
2016-09-17 13:45 - 2016-02-09 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-09-17 08:24 - 2016-04-20 16:04 - 00002187 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-09-16 20:49 - 2016-04-24 21:39 - 00000000 ____D C:\Program Files (x86)\Overwatch
2016-09-15 13:45 - 2009-07-14 06:45 - 00278064 _____ C:\Windows\system32\FNTCACHE.DAT
2016-09-14 22:45 - 2016-01-24 22:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-09-14 22:44 - 2016-01-24 22:17 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-09-14 22:44 - 2016-01-24 22:17 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-09-14 22:44 - 2015-02-28 01:03 - 00000000 ____D C:\Windows\system32\MRT
2016-09-14 22:36 - 2015-02-28 01:03 - 144199024 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-09-14 19:31 - 2015-02-25 22:42 - 00000000 ____D C:\Users\Agando\AppData\Local\TeamSpeak 3 Client
2016-09-14 18:43 - 2015-08-26 23:52 - 00007598 _____ C:\Users\Agando\AppData\Local\Resmon.ResmonCfg
2016-09-13 19:19 - 2016-07-17 19:26 - 00003944 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-09-13 19:19 - 2015-05-30 15:10 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-09-13 19:19 - 2015-05-30 15:10 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-09-13 19:19 - 2015-05-30 15:10 - 00000000 ____D C:\Windows\system32\Macromed
2016-09-13 19:19 - 2015-04-10 03:14 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-09-13 19:19 - 2015-04-10 03:14 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-09-13 18:11 - 2015-03-01 20:11 - 00000000 ____D C:\Program Files (x86)\Avira
2016-09-10 18:09 - 2015-06-22 18:02 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Mumble
2016-09-07 20:51 - 2015-03-03 14:51 - 00000000 ____D C:\Users\Agando\AppData\Local\Ubisoft Game Launcher
2016-09-07 19:41 - 2015-02-23 12:52 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-09-07 19:29 - 2015-02-23 12:51 - 00000000 ___HD C:\Program Files (x86)\Temp
2016-09-02 22:27 - 2015-02-23 13:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-09-02 22:27 - 2015-02-23 13:06 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-09-02 21:52 - 2016-02-22 20:20 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-09-02 21:52 - 2016-02-22 20:20 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2016-09-02 21:52 - 2015-03-01 13:17 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-09-02 20:25 - 2015-02-25 18:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-09-02 13:31 - 2015-02-23 12:51 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-09-02 05:17 - 2015-03-23 21:49 - 00000000 ____D C:\Users\Gast
2016-09-02 05:17 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\security
2016-09-02 05:16 - 2015-02-23 12:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-09-02 05:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2016-09-02 01:03 - 2016-04-29 20:27 - 00000000 ____D C:\Users\Agando\Documents\Overwatch
2016-09-02 01:03 - 2016-03-02 14:04 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Battle.net
2016-09-02 01:03 - 2015-12-19 21:20 - 00000000 ____D C:\Windows\System32\Tasks\Hewlett-Packard
2016-09-02 01:03 - 2015-02-23 13:05 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-09-02 01:03 - 2015-02-23 12:52 - 00000000 ____D C:\Program Files\Realtek
2016-09-02 01:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2016-09-02 01:02 - 2015-02-23 13:06 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-09-02 01:01 - 2016-05-29 13:49 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-08-31 00:26 - 2016-06-21 20:49 - 00000000 ____D C:\Program Files (x86)\Overwatch Test
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-12-30 21:14 - 2007-06-18 22:20 - 1731584 _____ (Ovosoft) C:\Program Files (x86)\snapper.exe
2015-04-13 15:00 - 2015-04-13 15:00 - 0000080 _____ () C:\Users\Agando\AppData\Roaming\vibranceGUI.ini
2015-05-03 20:43 - 2015-05-03 20:43 - 0003584 _____ () C:\Users\Agando\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-09-21 14:20 - 2016-09-21 14:20 - 0000000 _____ () C:\Users\Agando\AppData\Local\Driver_LOM_8161Present.flag
2016-06-06 21:03 - 2016-06-06 21:03 - 0000872 _____ () C:\Users\Agando\AppData\Local\recently-used.xbel
2015-08-26 23:52 - 2016-09-14 18:43 - 0007598 _____ () C:\Users\Agando\AppData\Local\Resmon.ResmonCfg
2015-04-22 19:40 - 2015-04-22 19:40 - 0000057 _____ () C:\ProgramData\Ament.ini
2016-09-02 05:09 - 2016-09-02 05:09 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Einige Dateien in TEMP:
====================
C:\Users\Agando\AppData\Local\Temp\avgnt.exe
C:\Users\Agando\AppData\Local\Temp\libeay32.dll
C:\Users\Agando\AppData\Local\Temp\msvcr120.dll
C:\Users\Agando\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-09-25 12:40
==================== Ende von FRST.txt ============================
Addition.txt hier: hxxp://pastebin.com/fNwXE8ik Bzw als Download: hxxp://www.filedropper.com/addition |
|
01.10.2016, 12:48
| #8 |
| /// TB-Ausbilder | Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert Servus, du wunderst dich, dass die Echtzeitüberwachung von Windows Defender deaktiviert ist, obwohl der Echtzeitschutz von Avira aktiv ist?  Sobald man ein AV-Programm mit Echtzeitschutz installiert (z. B. Avira, wovon ich ehrlich gesagt nicht viel halte), ist es nur logisch, dass der Echtzeitschutz von Windows Defender deaktiviert ist bzw. wird. wir entfernen die letzten Reste und kontrollieren nochmal alles.  Hinweis: Der Suchlauf mit ESET kann länger dauern. Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
CloseProcesses:
CMD: dir "%ProgramFiles%"
CMD: dir "%ProgramFiles(x86)%"
CMD: dir "%ProgramData%"
CMD: dir "%Appdata%"
CMD: dir "%LocalAppdata%"
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 ESET Online Scanner
Schritt 3 Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.
Schritt 4
Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?Bitte poste mit deiner nächsten Antwort
|
|
01.10.2016, 23:15
| #9 |
| | Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert FRST-Fix: Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 28-09-2016
durchgeführt von Agando (01-10-2016 16:35:43) Run:1
Gestartet von C:\Users\Agando\Desktop\virus
Geladene Profile: Agando (Verfügbare Profile: Agando & Gast)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
start
CloseProcesses:
CMD: dir "%ProgramFiles%"
CMD: dir "%ProgramFiles(x86)%"
CMD: dir "%ProgramData%"
CMD: dir "%Appdata%"
CMD: dir "%LocalAppdata%"
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
*****************
Prozess erfolgreich geschlossen.
========= dir "%ProgramFiles%" =========
Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: BA9C-A625
Verzeichnis von C:\Program Files
28.09.2016 16:03 <DIR> .
28.09.2016 16:03 <DIR> ..
16.03.2015 15:41 <DIR> Adware-Removal-Tool
23.02.2015 12:49 <DIR> ATI
23.02.2015 12:49 <DIR> ATI Technologies
17.05.2015 14:07 <DIR> Blender Foundation
21.11.2015 13:57 <DIR> Bonjour
28.09.2016 16:03 <DIR> CCleaner
28.07.2015 18:54 <DIR> Common Files
06.08.2015 13:57 <DIR> CPUID
12.04.2011 09:55 <DIR> DVD Maker
29.07.2015 15:28 <DIR> Epic Games
16.05.2015 19:05 <DIR> GIMP 2
16.04.2016 17:21 <DIR> Highresolution Enterprises
22.04.2015 19:40 <DIR> HP
25.09.2016 21:34 <DIR> Image-Line
15.09.2016 13:43 <DIR> Internet Explorer
27.04.2015 14:58 <DIR> Java
05.03.2016 17:03 <DIR> Logitech Gaming Software
04.08.2015 15:10 <DIR> McAfee Security Scan
12.04.2011 09:55 <DIR> Microsoft Games
23.02.2015 13:15 <DIR> Microsoft Office
14.09.2016 22:44 <DIR> Microsoft Silverlight
24.02.2016 21:24 <DIR> mmpicker
14.07.2009 07:32 <DIR> MSBuild
27.08.2015 15:54 <DIR> Nem's Tools
02.09.2016 01:03 <DIR> NVIDIA Corporation
18.05.2016 16:41 <DIR> OBS
04.05.2015 18:58 <DIR> paint.net
23.02.2015 12:50 <DIR> Qualcomm Atheros
02.09.2016 01:03 <DIR> Realtek
14.07.2009 07:32 <DIR> Reference Assemblies
21.02.2016 17:34 <DIR> Rockstar Games
11.01.2016 22:07 <DIR> Siemens
14.09.2016 18:52 <DIR> SUPERAntiSpyware
20.04.2015 22:15 <DIR> Tracker Software
27.02.2015 22:34 <DIR> Unity
27.02.2015 21:19 <DIR> Windows Defender
12.04.2011 09:43 <DIR> Windows Mail
21.09.2016 15:27 <DIR> Windows Media Player
23.02.2015 12:41 <DIR> Windows NT
12.04.2011 09:43 <DIR> Windows Photo Viewer
21.11.2010 05:31 <DIR> Windows Portable Devices
12.04.2011 09:43 <DIR> Windows Sidebar
01.08.2015 10:32 <DIR> WinPcap
25.02.2015 18:42 <DIR> WinRAR
18.12.2015 20:20 <DIR> Yamaha
0 Datei(en), 0 Bytes
47 Verzeichnis(se), 412.854.845.440 Bytes frei
========= Ende von CMD: =========
========= dir "%ProgramFiles(x86)%" =========
Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: BA9C-A625
Verzeichnis von C:\Program Files (x86)
28.09.2016 19:33 <DIR> .
28.09.2016 19:33 <DIR> ..
07.09.2016 22:26 <DIR> AGEIA Technologies
14.09.2016 18:44 <DIR> AMD
23.02.2015 12:50 <DIR> AMD APP
23.02.2015 12:50 <DIR> ATI Technologies
08.08.2015 22:39 <DIR> Audacity
30.09.2015 15:36 <DIR> AV Voice Changer 8.2 Diamond
20.11.2015 23:13 <DIR> AVG
16.03.2015 22:10 <DIR> Avidemux 2.6
13.09.2016 18:11 <DIR> Avira
21.12.2015 21:00 <DIR> BandiMPEG1
01.10.2016 14:45 <DIR> Battle.net
02.09.2016 21:53 <DIR> Battlelog Web Plugins
21.11.2015 13:57 <DIR> Bonjour
27.09.2015 16:16 <DIR> CEVO
01.03.2015 23:13 <DIR> Cheat Engine 6.4
30.09.2016 12:29 <DIR> Common Files
14.09.2016 18:41 <DIR> CPU Thermometer
23.02.2015 12:58 <DIR> Creative
18.05.2016 16:37 <DIR> Digipen
25.09.2016 21:34 <DIR> DSPRobotics
23.08.2016 13:57 <DIR> Duty Calls
19.04.2015 21:04 <DIR> EA Games
25.02.2016 19:21 <DIR> ElsterFormular
29.07.2015 15:29 <DIR> Epic Games
22.01.2016 19:55 <DIR> Exact Audio Copy
16.03.2015 15:31 <DIR> Futuremark
29.07.2015 15:31 <DIR> GameforgeLive
03.05.2015 21:09 <DIR> GIF Viewer
20.04.2016 16:04 <DIR> Google
19.12.2015 21:25 <DIR> Hewlett-Packard
26.09.2015 00:12 <DIR> Hi-Rez Studios
22.04.2015 19:40 <DIR> HP
27.09.2016 20:05 <DIR> Image-Line
15.09.2016 13:42 <DIR> Internet Explorer
20.11.2015 23:23 <DIR> IObit
04.12.2015 23:24 <DIR> JAM Software
27.04.2015 14:59 <DIR> Java
20.02.2016 22:37 <DIR> Landwirtschafts Simulator 2011
10.07.2016 01:09 <DIR> Malwarebytes Anti-Malware
29.06.2015 23:51 <DIR> Microsoft Application Virtualization Client
29.06.2015 23:50 <DIR> Microsoft ASP.NET
01.03.2015 12:36 <DIR> Microsoft Chart Controls
23.02.2015 13:15 <DIR> Microsoft Office
14.09.2016 22:44 <DIR> Microsoft Silverlight
28.06.2015 23:14 <DIR> Microsoft SQL Server Compact Edition
02.07.2015 16:01 <DIR> Microsoft XNA
23.02.2015 12:45 <DIR> Microsoft.NET
03.05.2015 20:29 <DIR> MiniTool Partition Wizard Free 9.0
11.06.2016 10:33 <DIR> Mozilla Firefox
11.06.2016 10:33 <DIR> Mozilla Maintenance Service
14.07.2009 07:32 <DIR> MSBuild
16.04.2015 15:48 <DIR> MSECache
20.09.2016 21:05 <DIR> MSI Afterburner
05.08.2016 14:25 <DIR> Mumble
01.08.2015 10:40 <DIR> Nmap
30.10.2015 22:51 <DIR> Notepad++
02.09.2016 01:02 <DIR> NVIDIA Corporation
18.05.2016 16:41 <DIR> OBS
28.08.2016 16:30 <DIR> OpenAL
22.09.2016 20:21 <DIR> Opera
20.09.2016 14:22 <DIR> Origin
02.09.2016 21:15 <DIR> Origin Games
01.10.2016 14:46 <DIR> Overwatch
31.08.2016 00:26 <DIR> Overwatch Test
26.09.2015 16:30 <DIR> Project64 2.0
27.11.2015 14:25 <DIR> QuickTime
27.07.2015 16:23 <DIR> RandyRants.com
27.08.2015 21:01 <DIR> Razer
02.09.2016 13:31 <DIR> Realtek
14.07.2009 07:32 <DIR> Reference Assemblies
20.09.2016 21:06 <DIR> RivaTuner Statistics Server
21.02.2016 17:34 <DIR> Rockstar Games
10.12.2015 17:43 <DIR> Skiller PRO
11.12.2015 00:10 <DIR> Skiller PRO+
18.06.2007 22:20 1.731.584 snapper.exe
20.11.2015 22:12 <DIR> Sony
01.10.2016 14:45 <DIR> Steam
23.09.2015 21:27 <DIR> SystemRequirementsLab
01.05.2016 16:08 <DIR> Tag
20.11.2015 22:30 <DIR> TempInstaller
11.11.2015 17:52 <DIR> Tipp10
09.03.2015 18:14 <DIR> Ubisoft
21.11.2015 00:15 <DIR> UniqueApps
28.08.2015 15:51 <DIR> Valve
23.02.2015 13:00 <DIR> VIA
26.05.2015 14:41 <DIR> Vodafone
20.12.2015 22:26 <DIR> VstPlugins
02.09.2016 01:01 <DIR> VulkanRT
25.04.2016 19:48 <DIR> WhatPulse2
27.02.2015 21:19 <DIR> Windows Defender
28.06.2015 23:14 <DIR> Windows Live
12.04.2011 09:43 <DIR> Windows Mail
21.09.2016 15:27 <DIR> Windows Media Player
14.07.2009 07:32 <DIR> Windows NT
12.04.2011 09:43 <DIR> Windows Photo Viewer
21.11.2010 05:31 <DIR> Windows Portable Devices
12.04.2011 09:43 <DIR> Windows Sidebar
1 Datei(en), 1.731.584 Bytes
98 Verzeichnis(se), 412.854.841.344 Bytes frei
========= Ende von CMD: =========
========= dir "%ProgramData%" =========
Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: BA9C-A625
Verzeichnis von C:\ProgramData
30.09.2016 23:05 <DIR> .
30.09.2016 23:05 <DIR> ..
20.03.2016 00:21 <DIR> .mono
24.11.2015 15:27 <DIR> Adobe
23.02.2015 12:49 <DIR> AMD
22.04.2015 19:40 57 Ament.ini
21.11.2015 13:54 <DIR> Apple
27.11.2015 14:24 <DIR> Apple Computer
03.01.2016 17:31 <DIR> ATI
20.11.2015 23:13 <DIR> Avg
09.02.2016 21:21 <DIR> Avira
30.09.2015 15:31 <DIR> Avnex
02.03.2016 14:04 <DIR> Battle.net
02.03.2016 14:05 <DIR> Blizzard Entertainment
28.08.2016 17:21 <DIR> boost_interprocess
27.09.2015 16:18 <DIR> Celavimus
23.02.2015 12:59 <DIR> Creative
23.02.2015 12:50 <DIR> Downloaded Installations
04.04.2015 01:48 <DIR> Electronic Arts
25.02.2016 19:22 <DIR> elsterformular
19.04.2015 17:56 <DIR> Epic
26.05.2015 14:41 <DIR> FLEXnet
19.12.2015 21:47 <DIR> Hewlett-Packard
26.09.2015 00:12 <DIR> Hi-Rez Studios
19.12.2015 21:31 <DIR> HP
21.11.2015 13:56 <DIR> IObit
03.05.2015 20:31 <DIR> iSkysoft
17.05.2015 14:04 <DIR> IsolatedStorage
03.04.2015 20:55 <DIR> Logishrd
26.05.2015 14:41 <DIR> Macrovision
29.09.2016 16:13 <DIR> Malwarebytes
29.09.2016 17:24 <DIR> Malwarebytes' Anti-Malware (portable)
30.05.2015 15:10 <DIR> McAfee
21.11.2015 13:57 <DIR> McAfee Security Scan
20.11.2015 23:03 <DIR> MFAData
11.12.2015 21:42 <DIR> Microsoft Help
19.04.2015 21:02 <DIR> Mozilla
07.02.2016 23:56 <DIR> Nexon
07.02.2016 23:57 <DIR> NexonEU
01.10.2016 09:45 <DIR> NVIDIA
02.09.2016 22:27 <DIR> NVIDIA Corporation
27.04.2015 15:05 <DIR> Oracle
01.10.2016 09:48 <DIR> Origin
24.09.2016 10:09 <DIR> Package Cache
23.02.2015 12:51 <DIR> Qualcomm
27.08.2015 21:01 <DIR> Razer
20.03.2015 16:36 <DIR> Rockstar Games
21.09.2016 15:25 <DIR> Skype
25.02.2015 19:22 <DIR> Sun
14.09.2016 18:52 <DIR> SUPERAntiSpyware.com
17.04.2015 21:58 <DIR> VirtualizedApplications
26.05.2015 14:41 <DIR> Vodafone
1 Datei(en), 57 Bytes
51 Verzeichnis(se), 412.854.972.416 Bytes frei
========= Ende von CMD: =========
========= dir "%Appdata%" =========
Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: BA9C-A625
Verzeichnis von C:\Users\Agando\AppData\Roaming
30.09.2016 23:05 <DIR> .
30.09.2016 23:05 <DIR> ..
16.03.2016 21:08 <DIR> .minecraft
20.03.2016 00:21 <DIR> .mono
22.01.2016 19:55 <DIR> AccurateRip
28.02.2015 00:56 <DIR> Adobe
28.11.2015 13:02 <DIR> Apple Computer
17.09.2016 09:02 <DIR> Atari
03.01.2016 17:31 <DIR> ATI
03.07.2016 20:00 <DIR> Audacity
04.08.2015 20:58 <DIR> avidemux
09.02.2016 21:27 <DIR> Avira
02.09.2016 01:03 <DIR> Battle.net
26.01.2016 13:20 <DIR> bsnes
10.10.2015 20:54 <DIR> com.playsaurus.heroclicker
11.05.2015 00:23 <DIR> DesktopReminder
18.05.2016 16:40 <DIR> digipen
04.01.2016 03:43 <DIR> DVDVideoSoft
22.01.2016 19:55 <DIR> EAC
16.02.2016 16:49 <DIR> Edgemeal Software
25.02.2016 19:22 <DIR> elsterformular
20.07.2015 16:19 <DIR> eve Updater
26.05.2015 14:49 <DIR> FLEXnet
25.09.2016 21:34 <DIR> FlowStone
03.05.2015 20:52 <DIR> HandBrake
19.12.2015 21:26 <DIR> Hewlett-Packard
16.04.2016 17:18 <DIR> Highresolution Enterprises
19.12.2015 21:24 <DIR> hpqLog
23.02.2015 12:41 <DIR> Identities
28.07.2015 18:54 <DIR> Image-Line
11.12.2015 00:10 <DIR> InstallShield
21.11.2015 13:55 <DIR> IObit
17.05.2015 14:04 <DIR> IsolatedStorage
04.12.2015 23:24 <DIR> JAM Software
02.03.2015 17:59 <DIR> java
03.04.2015 20:59 <DIR> Logishrd
28.02.2015 00:50 <DIR> Logitech
12.04.2015 13:16 <DIR> Macromedia
12.04.2011 09:54 <DIR> Media Center Programs
19.04.2015 21:02 <DIR> Mozilla
10.09.2016 18:09 <DIR> Mumble
25.11.2015 20:02 <DIR> Notepad++
17.03.2015 19:21 <DIR> NVIDIA
25.03.2016 15:27 <DIR> OBS
28.07.2015 18:55 <DIR> Opera Software
01.10.2016 16:33 <DIR> Origin
28.08.2015 01:28 <DIR> ProcessLasso
30.09.2015 15:12 <DIR> Screaming Bee
08.06.2015 15:42 <DIR> Shooter
24.01.2016 22:25 <DIR> Skype
30.09.2016 06:14 <DIR> SoftGrid Client
20.11.2015 22:12 <DIR> Sony
14.09.2016 18:52 <DIR> SUPERAntiSpyware.com
11.11.2015 18:02 <DIR> TIPP10
23.02.2015 13:16 <DIR> TP
15.04.2016 15:42 <DIR> TubeTycoon
27.02.2015 23:10 <DIR> Unity
21.11.2015 13:58 <DIR> vibranceGUI
13.04.2015 15:00 80 vibranceGUI.ini
26.05.2015 14:41 <DIR> Vodafone
19.04.2015 00:10 <DIR> Wargaming.net
28.08.2016 16:31 <DIR> Waveform
25.02.2015 18:42 <DIR> WinRAR
1 Datei(en), 80 Bytes
63 Verzeichnis(se), 412.854.972.416 Bytes frei
========= Ende von CMD: =========
========= dir "%LocalAppdata%" =========
Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: BA9C-A625
Verzeichnis von C:\Users\Agando\AppData\Local
01.10.2016 09:47 <DIR> .
01.10.2016 09:47 <DIR> ..
17.07.2016 19:26 <DIR> Adobe
07.02.2016 23:38 <DIR> Akamai
01.04.2016 15:43 <DIR> AltF4Space
03.01.2016 17:31 <DIR> AMD
27.11.2015 14:24 <DIR> Apple
08.12.2015 07:30 <DIR> Apple Computer
25.02.2015 18:11 <DIR> Apps
20.03.2016 18:47 <DIR> Arktos
30.09.2016 12:34 <DIR> assembly
03.01.2016 17:31 <DIR> ATI
20.11.2015 22:56 <DIR> Avg
20.11.2015 23:10 <DIR> AvgSetupLog
09.02.2016 21:21 <DIR> Avira
01.10.2016 16:23 <DIR> Battle.net
02.03.2016 14:05 <DIR> Blizzard Entertainment
27.08.2016 20:34 <DIR> CallofDuty4MW
22.07.2015 13:43 <DIR> CEF
02.03.2015 00:07 <DIR> Chromium
28.09.2016 16:09 <DIR> CrashDumps
01.10.2016 09:46 <DIR> CrashRpt
17.12.2015 22:24 <DIR> Creative
20.12.2015 00:21 <DIR> Daybreak Game Company
03.05.2015 20:43 3.584 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
20.04.2016 16:04 <DIR> Deployment
09.05.2016 18:55 <DIR> Diagnostics
18.05.2016 16:40 <DIR> digipen
18.12.2015 20:19 <DIR> Downloaded Installations
21.09.2016 14:20 0 Driver_LOM_8161Present.flag
17.05.2016 21:15 <DIR> EdgeOfReality
28.09.2016 15:43 <DIR> ElevatedDiagnostics
19.04.2015 17:56 <DIR> EpicGamesLauncher
14.05.2016 17:42 <DIR> FalloutNV
16.05.2015 19:07 <DIR> fontconfig
09.02.2016 21:20 61.968 GDIPFONTCACHEV1.DAT
16.05.2015 19:07 <DIR> gegl-0.2
25.09.2016 22:09 <DIR> GeoLocator
12.09.2015 13:30 <DIR> Google
17.10.2015 20:10 <DIR> gtk-2.0
01.06.2015 10:18 <DIR> GWX
31.01.2016 12:53 <DIR> Hewlett-Packard
22.04.2015 19:41 <DIR> HP
11.05.2015 00:18 <DIR> InstallAware Installation Information
03.05.2015 20:31 <DIR> iSkysoft
03.04.2015 21:02 <DIR> Logitech
10.02.2016 16:37 <DIR> Macromedia
20.11.2015 23:02 <DIR> MFAData
20.09.2016 20:26 <DIR> Microsoft
11.12.2015 21:42 <DIR> Microsoft Help
19.04.2015 21:02 <DIR> Mozilla
03.03.2015 16:12 <DIR> My Games
25.08.2015 17:16 <DIR> Nem's Tools
29.05.2016 13:39 <DIR> NVIDIA
26.03.2016 14:35 <DIR> NVIDIA Corporation
07.02.2016 23:54 <DIR> NXEPassportClient
14.04.2015 22:53 <DIR> openvr
28.07.2015 18:55 <DIR> Opera Software
20.09.2016 12:15 <DIR> Origin
04.05.2015 18:59 <DIR> paint.net
31.03.2015 22:14 <DIR> PAYDAY
10.03.2015 19:53 <DIR> PAYDAY 2
02.04.2015 23:30 <DIR> PAYDAY 2 - Backup
11.05.2015 00:18 <DIR> Polenter_-_Software_Solut
23.02.2015 12:59 <DIR> Programs
19.04.2015 21:25 <DIR> PunkBuster
27.08.2015 21:01 <DIR> Razer
27.08.2015 17:55 <DIR> Razer_Inc
06.06.2016 21:03 872 recently-used.xbel
19.10.2015 19:30 <DIR> Reditr
14.09.2016 18:43 7.598 Resmon.ResmonCfg
28.07.2016 14:54 <DIR> Roblox
24.08.2016 15:28 <DIR> Savage
26.02.2015 12:47 <DIR> SCE
16.07.2015 14:53 <DIR> Skype
17.04.2015 19:20 <DIR> SoftGrid Client
20.11.2015 22:12 <DIR> Sony
23.02.2016 18:57 <DIR> spacegame
18.01.2016 17:17 <DIR> Steam
14.09.2016 19:31 <DIR> TeamSpeak 3 Client
01.10.2016 16:35 <DIR> Temp
20.11.2015 23:06 <DIR> Tempfolder
07.09.2016 20:51 <DIR> Ubisoft Game Launcher
10.02.2016 15:48 <DIR> Unity
24.08.2016 15:28 <DIR> UnrealEngine
19.04.2015 17:56 <DIR> UnrealEngineLauncher
28.09.2016 17:29 <DIR> VirtualStore
01.10.2016 16:30 <DIR> whatpulse
04.08.2015 20:58 <DIR> Windows Live
5 Datei(en), 74.022 Bytes
84 Verzeichnis(se), 412.854.964.224 Bytes frei
========= Ende von CMD: =========
========= RemoveProxy: =========
"HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Schlüssel erfolgreich entfernt
HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies\\ => Wert erfolgreich entfernt
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
========= Ende von RemoveProxy: =========
========= ipconfig /flushdns =========
Windows-IP-Konfiguration
Der DNS-Aufl”sungscache wurde geleert.
========= Ende von CMD: =========
========= netsh winsock reset =========
Der Winsock-Katalog wurde zurckgesetzt.
Sie mssen den Computer neu starten, um den Vorgang abzuschlieáen.
========= Ende von CMD: =========
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 4891462 B
Java, Flash, Steam htmlcache => 387022249 B
Windows/system/drivers => 84522 B
Edge => 0 B
Chrome => 14929920 B
Firefox => 18383244 B
Opera => 422655961 B
Temp, IE cache, history, cookies, recent:
Default => 33125 B
Public => 0 B
ProgramData => 0 B
systemprofile => 83687 B
systemprofile32 => 72596 B
LocalService => 66228 B
NetworkService => 66228 B
Agando => 136015533 B
Gast => 23858 B
RecycleBin => 28769690 B
EmptyTemp: => 974.2 MB temporäre Dateien entfernt.
================================
Das System musste neu gestartet werden.
==== Ende von Fixlog 16:36:32 ====
Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=9b389aea87373243b6db0a69b6a2df19
# end=init
# utc_time=2016-10-01 02:41:31
# local_time=2016-10-01 04:41:31 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 30931
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=9b389aea87373243b6db0a69b6a2df19
# end=updated
# utc_time=2016-10-01 02:43:24
# local_time=2016-10-01 04:43:24 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=9b389aea87373243b6db0a69b6a2df19
# engine=30931
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-10-01 05:26:49
# local_time=2016-10-01 07:26:49 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Antivirus'
# compatibility_mode=1815 16777213 100 98 12581 26193744 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 20310327 226972659 0 0
# scanned=457001
# found=1
# cleaned=1
# scan_time=9805
sh=02A40E3489799CCA06F3793FFCB9225E65F53601 ft=1 fh=fdeeb0affd325f87 vn="MSIL/FakeTool.PS Trojaner (Gesäubert durch Löschen)" ac=C fn="C:\Program Files\Adware-Removal-Tool\ARTP3.exe"
Code:
ATTFilter
FRST: hxxp://pastebin.com/G3jrQSi5 Addition: hxxp://pastebin.com/qVjdyxgX Download: hxxp://www.filedropper.com/logs_7 Blaues Popup ist immer noch da, sonst ist alles normal. |
|
02.10.2016, 12:52
| #10 |
| /// TB-Ausbilder | Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert Servus, Schritt 1 Setze Google Chrome nach dieser Anleitung zurück. Schritt 2 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
CloseProcesses:
S3 X6va060; \??\C:\Windows\SysWOW64\Drivers\X6va060 [X]
S3 X6va062; \??\C:\Windows\SysWOW64\Drivers\X6va062 [X]
C:\Program Files\Adware-Removal-Tool
Task: {1867A3AB-618C-4C12-9FF0-971B250A0DC9} - System32\Tasks\{D5902AEE-71FA-44DA-92AC-B9B5A5062745} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{6734CA10-8FB8-4C7F-B8C7-75317C617DC5}\setup.exe" -c -runfromtemp -l0x0409
DeleteKey: HKLM\SYSTEM\CurrentControlSet\services\DrvAgent64
DeleteKey: HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Software\IM
Unlock: HKEY_LOCAL_MACHINE\SOFTWARE\Policies
Unlock: HKEY_CURRENT_USER\SOFTWARE\Policies
CMD: reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /s
CMD: reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies" /s
CMD: reg query "HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows Defender" /s
CMD: reg query "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies" /s
Reboot:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Bitte poste mit deiner nächsten Antwort
|
|
02.10.2016, 13:42
| #11 |
| | Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviertCode:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 28-09-2016
durchgeführt von Agando (02-10-2016 14:38:12) Run:2
Gestartet von C:\Users\Agando\Desktop\virus
Geladene Profile: Agando (Verfügbare Profile: Agando & Gast)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
start
CloseProcesses:
S3 X6va060; \??\C:\Windows\SysWOW64\Drivers\X6va060 [X]
S3 X6va062; \??\C:\Windows\SysWOW64\Drivers\X6va062 [X]
C:\Program Files\Adware-Removal-Tool
Task: {1867A3AB-618C-4C12-9FF0-971B250A0DC9} - System32\Tasks\{D5902AEE-71FA-44DA-92AC-B9B5A5062745} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{6734CA10-8FB8-4C7F-B8C7-75317C617DC5}\setup.exe" -c -runfromtemp -l0x0409
DeleteKey: HKLM\SYSTEM\CurrentControlSet\services\DrvAgent64
DeleteKey: HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Software\IM
Unlock: HKEY_LOCAL_MACHINE\SOFTWARE\Policies
Unlock: HKEY_CURRENT_USER\SOFTWARE\Policies
CMD: reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /s
CMD: reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies" /s
CMD: reg query "HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows Defender" /s
CMD: reg query "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies" /s
Reboot:
end
*****************
Prozess erfolgreich geschlossen.
X6va060 => Dienst erfolgreich entfernt
X6va062 => Dienst erfolgreich entfernt
C:\Program Files\Adware-Removal-Tool => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1867A3AB-618C-4C12-9FF0-971B250A0DC9}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1867A3AB-618C-4C12-9FF0-971B250A0DC9}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{D5902AEE-71FA-44DA-92AC-B9B5A5062745} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D5902AEE-71FA-44DA-92AC-B9B5A5062745}" => Schlüssel erfolgreich entfernt
HKLM\SYSTEM\CurrentControlSet\services\DrvAgent64 => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKLM\SYSTEM\CurrentControlSet\services\DrvAgent64 => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Software\IM => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Software\IM => Schlüssel erfolgreich entfernt
"HKEY_LOCAL_MACHINE\SOFTWARE\Policies" => Schlüssel wurde entsperrt
"HKEY_CURRENT_USER\SOFTWARE\Policies" => Schlüssel wurde entsperrt
========= reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /s =========
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
DisableAntiSpyware REG_DWORD 0x1
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet
SpyNetReporting REG_DWORD 0x0
SubmitSamplesConsent REG_DWORD 0x2
========= Ende von CMD: =========
========= reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies" /s =========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop
NoAddingComponents REG_DWORD 0x1
NoComponents REG_DWORD 0x1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments
ScanWithAntiVirus REG_DWORD 0x3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
NoDrives REG_DWORD 0x0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum
{BDEADF00-C265-11D0-BCED-00A0C90AB50F} REG_DWORD 0x1
{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} REG_DWORD 0x40000021
{0DF44EAA-FF21-4412-828E-260A8728E7F1} REG_DWORD 0x20
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
ConsentPromptBehaviorAdmin REG_DWORD 0x5
ConsentPromptBehaviorUser REG_DWORD 0x3
EnableInstallerDetection REG_DWORD 0x1
EnableLUA REG_DWORD 0x1
EnableSecureUIAPaths REG_DWORD 0x1
EnableUIADesktopToggle REG_DWORD 0x0
EnableVirtualization REG_DWORD 0x1
PromptOnSecureDesktop REG_DWORD 0x1
ValidateAdminCodeSignatures REG_DWORD 0x0
dontdisplaylastusername REG_DWORD 0x0
legalnoticecaption REG_SZ
legalnoticetext REG_SZ
scforceoption REG_DWORD 0x0
shutdownwithoutlogon REG_DWORD 0x1
undockwithoutlogon REG_DWORD 0x1
FilterAdministratorToken REG_DWORD 0x0
DisableRegistryTools REG_DWORD 0x0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\UIPI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\UIPI\Clipboard
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\UIPI\Clipboard\ExceptionFormats
CF_TEXT REG_DWORD 0x1
CF_BITMAP REG_DWORD 0x2
CF_OEMTEXT REG_DWORD 0x7
CF_DIB REG_DWORD 0x8
CF_PALETTE REG_DWORD 0x9
CF_UNICODETEXT REG_DWORD 0xd
CF_DIBV5 REG_DWORD 0x11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Uninstall
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate
========= Ende von CMD: =========
========= reg query "HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows Defender" /s =========
FEHLER: Der angegebene Registrierungsschlssel bzw. Wert wurde nicht gefunden.
========= Ende von CMD: =========
========= reg query "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies" /s =========
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Associations
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
NoDriveTypeAutoRun REG_BINARY 00000000
NoDrives REG_DWORD 0x0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Network
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate
========= Ende von CMD: =========
Das System musste neu gestartet werden.
==== Ende von Fixlog 14:38:15 ====
|
|
03.10.2016, 09:46
| #12 |
| /// TB-Ausbilder | Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert Servus, Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
CloseProcesses:
Unlock: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
CMD: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /f
CMD: reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 0 /f
reboot:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 Downloade dir bitte  Farbar Service Scanner
Poste bitte den Inhalt hier. Bitte poste mit deiner nächsten Antwort
|
|
03.10.2016, 18:48
| #13 |
| | Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviertCode:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 28-09-2016
durchgeführt von Agando (03-10-2016 19:40:28) Run:3
Gestartet von C:\Users\Agando\Desktop\virus
Geladene Profile: Agando (Verfügbare Profile: Agando & Gast)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
start
CloseProcesses:
Unlock: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
CMD: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /f
CMD: reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 0 /f
reboot:
end
*****************
Prozess erfolgreich geschlossen.
"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" => Schlüssel wurde entsperrt
========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /f =========
Der Vorgang wurde erfolgreich beendet.
========= Ende von CMD: =========
========= reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 0 /f =========
Der Vorgang wurde erfolgreich beendet.
========= Ende von CMD: =========
Das System musste neu gestartet werden.
==== Ende von Fixlog 19:40:28 ====
Code:
ATTFilter Farbar Service Scanner Version: 27-01-2016
Ran by Agando (administrator) on 03-10-2016 at 19:45:50
Running from "C:\Users\Agando\Desktop\virus"
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************
Internet Services:
============
Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.
Windows Firewall:
=============
Firewall Disabled Policy:
==================
System Restore:
============
System Restore Policy:
========================
Action Center:
============
Windows Update:
============
Windows Autoupdate Disabled Policy:
============================
Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.
Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1
Other Services:
==============
File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
**** End of log ****
|
|
03.10.2016, 19:58
| #14 | ||||||||||
| /// TB-Ausbilder | Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert Servus, da Avira installiert ist, wird der Windows Defender automatisch deaktiviert. Bedeutet: Willst du, dass der Windows Defender läuft, musst du zuvor Avira über die Systemsteuerung deinstallieren. Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber.  Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.  Cleanup: Alle Logs gepostet? Dann lade Dir bitte  DelFix herunter.
DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.  Absicherung: Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Browser Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Sofern du noch unentschieden bist, verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:
Microsoft Security Essentials (MSE) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE entschieden hast, brauchst du nicht extra MSE zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür. Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional:  Adblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren. NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.Lade Software von einem sauberen Portal wie  .Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner . Abschließend noch ein paar grundsätzliche Bemerkungen:
Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen.  Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
|
03.10.2016, 20:07
| #15 |
| | Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert Scheint jetzt alles in Ordnung zu sein, das blaue Popup habe ich auch schon seit einer Weile nicht mehr gesehen. Danke für die Hilfe! |
|
| Themen zu Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert |
| .dll, administrator, antivirus, avira, bonjour, defender, error, explorer, flash player, hijack, home, homepage, installation, mozilla, prozesse, realtek, schutz, security, services.exe, software, svchost.exe, system, teamspeak, windows, winlogon.exe |
und 
und speichere die Logdatei auf Deinem Desktop.
