Win 7: normaler Modus extrem langsam, läuft normal abgesichert

Hermundure · 23.03.2017, 21:29

Hallo liebes Trojaner-Team,

seit heute ist mein Computer im normalen Modus extrem langsam, Ordner öffnen sich nach dem Doppelklicken erst nach ca. 10 Sekunden, der Inhalt des Fensters ist danach leer und wird nur nach und nach geladen, was weitere 10 - 20 Sekunden dauern kann.

Im abgesicherten Modus (mit und ohne Netzwerk) läuft der PC normal.

Zu anderen Symptomen kann ich im normalen Modus leider nicht viel schreiben, da ich keine Programme öffnen kann.

Das Herunterfahren des Rechners funktioniert nur durch Reset oder Ausschalten, da sich der Rechner am Bildschirm: "Folgende Programme müssen noch geschlossen werden..." festhängt, ohne dort ein Programm anzuzeigen (ein einziges Mal stand dort "Netzwerkumgebung", ansonsten ist das Fenster der zu schließenden Programme leer)

Mehrere Male ging der Rechner nach diesem Fenster zu einem Black-Screen über, bei dem der Mauszeiger allerdings noch sichtbar und zu bewegen war.
Außerdem ist auffällig, das der Bootvorgang nicht bei jedem Male gelingt, in 1 von 10 Fällen bekomme ich, bevor Windows geladen wird, die Fehlermeldung "CPU Overglocking failed" - obwohl von mir kein Übertakten des CPUs eingestellt worden ist (ob das werkseitig geschah kann ich allerdings nicht sagen).

Hier nun meine zwei Logs (Additions.txt muss ich leider anhängen, da die maximalen Zeichen weit überschritten wurden): (Für die angebotene Hilfe bin ich wirklich dankbar!)

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017
durchgeführt von Steffen (Administrator) auf GOLIATH (23-03-2017 21:03:50)
Gestartet von E:\1 Downloads
Geladene Profile: Steffen (Verfügbare Profile: Steffen)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
() C:\Windows\SysWOW64\ASGT.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
(DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\WAC\PSANHost.exe
(NCP engineering GmbH) C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncpclcfg.exe
(NCP Engineering GmbH) C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncprwsnt.exe
() C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncpsec.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(Â© pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\WAC\PSUAService.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\RAPID\SamsungRapidSvc.exe
(TODO: <Company name>) C:\Program Files (x86)\ASUS\GPU TweakII\GPUTweakII.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(TeamViewer GmbH) C:\Users\Steffen\AppData\Local\Temp\TeamViewer\TeamViewer_Service.exe
(Panda Security International) C:\Program Files (x86)\Panda Security\WaAgent\WAHost\WAHost.exe
(LogMeIn Inc.) C:\Program Files (x86)\Hamachi\x64\hamachi-2.exe
(LogMeIn, Inc.) C:\Program Files (x86)\Hamachi\x64\LMIGuardianSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\NCS2\WMIProv\ncs2prov.exe
(LogMeIn Inc.) C:\Program Files (x86)\Hamachi\hamachi-2-ui.exe
(LogMeIn, Inc.) C:\Program Files (x86)\Hamachi\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Apple Inc.) E:\ITunes\iTunesHelper.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Dropbox, Inc.) C:\Users\Steffen\AppData\Local\Dropbox\Update\DropboxUpdate.exe
() C:\Program Files\EIZO\ColorNavigator 6\ColorNavigator 6.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(NCP engineering GmbH) C:\Program Files (x86)\LANCOM\Advanced VPN Client\NcpBudgetGui.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AdobeGCClient.exe
(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Contour Design, Inc.) C:\Program Files (x86)\Contour Shuttle\ShuttleHelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(BitLeader) C:\Program Files (x86)\lg_fwupdate\fwupdate.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\WAC\PSUAMain.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Contour Design, Inc.) C:\Program Files (x86)\Contour Shuttle\ShuttleEngine.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe
() C:\Program Files\EIZO\ColorNavigator 6\core\cn6_eacore.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
(TODO: <Company name>) C:\Program Files (x86)\ASUS\GPU TweakII\Monitor.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\LogiAppBroker.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SamsungRapidApp] => C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe [281776 2014-09-16] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7636696 2014-08-21] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1392344 2014-08-26] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => E:\ITunes\iTunesHelper.exe [176440 2016-12-06] (Apple Inc.)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [13318424 2015-02-26] (Logitech Inc.)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3113592 2015-08-26] (Logitech, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-06-27] (Intel Corporation)
HKLM-x32\...\Run: [NcpPopup] => C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncppopup.exe [964848 2015-01-20] (NCP engineering GmbH)
HKLM-x32\...\Run: [NcpBudgetGui] => C:\Program Files (x86)\LANCOM\Advanced VPN Client\NcpBudgetGui.exe [1819888 2015-01-20] (NCP engineering GmbH)
HKLM-x32\...\Run: [LGODDFU] => C:\Program Files (x86)\lg_fwupdate\lgfw.exe [27760 2012-07-12] (Bitleader)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2756672 2016-03-09] (Dominik Reichl)
HKLM-x32\...\Run: [Contour Shuttle Device Helper] => C:\Program Files (x86)\Contour Shuttle\ShuttleHelper.exe [126464 2015-09-23] (Contour Design, Inc.)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2011-03-09] (CyberLink)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [179976 2013-09-02] (cyberlink)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\WAC\PSUAMain.exe [111896 2016-11-08] (Panda Security, S.L.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\Hamachi\hamachi-2-ui.exe [5883912 2017-03-02] (LogMeIn Inc.)
HKLM\...\Winlogon: [Userinit] C:\Windows\SysWOW64\userinit.exe,
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-225253568-2950696071-1607657666-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-225253568-2950696071-1607657666-1000\...\Run: [Dropbox Update] => C:\Users\Steffen\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.)
HKU\S-1-5-21-225253568-2950696071-1607657666-1000\...\RunOnce: [Application Restart #3] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-25] (Adobe Systems Incorporated)
HKU\S-1-5-21-225253568-2950696071-1607657666-1000\...\RunOnce: [Application Restart #4] => C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe [2360000 2016-10-25] (Adobe Systems Incorporated)
HKU\S-1-5-21-225253568-2950696071-1607657666-1000\...\MountPoints2: {6c123a37-0ce2-11e5-b123-02001e677b44} - H:\start.exe
HKU\S-1-5-18\...\RunOnce: [Application Restart #2] => C:\Program Files (x86)\ASUS\GPU TweakII\Monitor.exe [2670032 2015-11-30] (TODO: <Company name>)
HKU\S-1-5-18\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\ASUS\GPU TweakII\Monitor.exe [2670032 2015-11-30] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
Startup: C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ColorNavigator 6.lnk [2016-12-14]
ShortcutTarget: ColorNavigator 6.lnk -> C:\Program Files\EIZO\ColorNavigator 6\ColorNavigator 6.exe ()
GroupPolicy\User: Beschränkung <======= ACHTUNG
GroupPolicyScripts: Beschränkung <======= ACHTUNG
GroupPolicyScripts-x32: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{0C5514B9-6611-4F5C-B63C-6D0B30FC22B8}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{988511EF-296C-4FBE-A8E5-68A749AD6919}: [DhcpNameServer] 172.20.10.1

Internet Explorer:
==================
HKU\S-1-5-21-225253568-2950696071-1607657666-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.de/
SearchScopes: HKU\S-1-5-21-225253568-2950696071-1607657666-1000 -> DefaultScope {616C8BC5-CC0A-48D7-A6F0-A2AD941590EB} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-225253568-2950696071-1607657666-1000 -> {616C8BC5-CC0A-48D7-A6F0-A2AD941590EB} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-22] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files (x86)\PDF Architect 4\creator-ie-helper.dll [2016-08-05] (pdfforge GmbH)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
Toolbar: HKLM-x32 - PDF Architect 4 Toolbar - {23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - C:\Program Files (x86)\PDF Architect 4\creator-ie-plugin.dll [2016-08-05] (pdfforge GmbH)

FireFox:
========
FF ProfilePath: C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\o2qp70bm.default-1447440277188 [2017-03-23]
FF Extension: (MEGA) - C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\o2qp70bm.default-1447440277188\Extensions\firefox@mega.co.nz.xpi [2017-03-17]
FF Extension: (Adblock Plus) - C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\o2qp70bm.default-1447440277188\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-25]
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2017-01-03] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2017-03-23] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_25_0_0_127.dll [2017-03-14] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-10-25] (Adobe Systems)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_127.dll [2017-03-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-04-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-04-03] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-02-09] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-02-09] (NVIDIA Corporation)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-25] (Adobe Systems)
FF Plugin-x32: PDF Architect 4 -> C:\Program Files (x86)\PDF Architect 4\np-previewer.dll [2016-08-05] (pdfforge GmbH)
FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin HKU\S-1-5-21-225253568-2950696071-1607657666-1000: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-10-25] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-02-27] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-01-28] ()
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [48640 2015-08-18] () [Datei ist nicht signiert]
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-04-24] () [Datei ist nicht signiert]
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243464 2013-09-02] (CyberLink)
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [240576 2013-10-06] (DTS, Inc)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342456 2016-04-13] (Futuremark)
R2 Hamachi2Svc; C:\Program Files (x86)\Hamachi\x64\hamachi-2.exe [3416584 2017-03-02] (LogMeIn Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2014-04-03] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-04-03] (Intel Corporation)
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\WAC\PSANHost.exe [109336 2016-10-25] (Panda Security, S.L.)
R2 ncpclcfg; C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncpclcfg.exe [531208 2015-01-20] (NCP engineering GmbH)
R2 ncprwsnt; C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncprwsnt.exe [1782024 2015-01-20] (NCP Engineering GmbH)
R2 ncpsec; C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncpsec.exe [125952 2015-01-20] () [Datei ist nicht signiert]
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462784 2017-02-10] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2017-01-20] (NVIDIA Corporation)
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2438880 2016-08-05] (pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-08-05] (pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-08-05] (pdfforge GmbH)
R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [972056 2016-05-18] (Â© pdfforge GmbH.)
R2 PSI_SVC_2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (arvato digital services llc)
R2 PSI_SVC_2_x64; C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (arvato digital services llc)
R2 PSUAService; C:\Program Files (x86)\Panda Security\WAC\PSUAService.exe [48584 2016-11-03] (Panda Security, S.L.)
R2 SamsungRapidSvc; C:\Windows\System32\RAPID\SamsungRapidSvc.exe [28848 2014-09-16] (Samsung Electronics Co., Ltd.)
R2 TeamViewer; c:\users\steffen\appdata\local\temp\teamviewer\TeamViewer_Service.exe [5495056 2015-06-01] (TeamViewer GmbH) <==== ACHTUNG
S3 vncserver; C:\Program Files\RealVNC\VNC Server\vncservice.exe [639808 2014-11-28] (RealVNC Ltd)
R2 WAHost; C:\Program Files (x86)\Panda Security\WaAgent\WAHost\WAHost.exe [573736 2016-11-11] (Panda Security International)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [672208 2017-02-03] (Wacom Technology, Corp.)
S2 NVIDIA Wireless Controller Service; "C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 AIDA64Driver; E:\9 Service\aida64extreme_5_70\kerneld.x64 [45728 2016-04-09] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-01-28] ()
R2 dvctprov; C:\Windows\System32\DRIVERS\dvctprov.sys [112888 2015-12-22] (Panda Security, S.L.)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [487704 2014-03-14] (Intel Corporation)
R3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [215608 2016-08-22] (GenesysLogic)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-05-28] (Intel Corporation)
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2014-10-23] (ASUSTeK Computer Inc.)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
S3 ncpfilt; C:\Windows\System32\DRIVERS\ncplelhp.sys [112560 2015-01-20] (NCP Engineering GmbH)
R3 ncplelhp; C:\Windows\System32\DRIVERS\ncplelhp.sys [112560 2015-01-20] (NCP Engineering GmbH)
R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [105232 2016-10-06] (Panda Security, S.L.)
R1 NNSDHCP; C:\Windows\System32\DRIVERS\NNSDhcp.sys [102160 2016-10-06] (Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [209168 2016-10-06] (Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [118032 2016-10-06] (Panda Security, S.L.)
R1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [123664 2016-10-06] (Panda Security, S.L.)
R1 NNSNAHSL; C:\Windows\System32\DRIVERS\NNSNAHSL.sys [75544 2016-10-20] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [114448 2016-10-06] (Panda Security, S.L.)
R1 NNSPIHSW; C:\Windows\System32\DRIVERS\NNSPihsw.sys [82192 2016-10-06] (Panda Security, S.L.)
R1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [133392 2016-10-06] (Panda Security, S.L.)
R1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [334096 2016-10-06] (Panda Security, S.L.)
R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [195344 2016-10-06] (Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [121104 2016-10-06] (Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [278944 2016-10-17] (Panda Security, S.L.)
R1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [123152 2016-10-06] (Panda Security, S.L.)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2017-01-20] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47672 2017-01-06] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57792 2017-01-20] (NVIDIA Corporation)
R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [178504 2016-10-24] (Panda Security, S.L.)
R0 PSINDvct; C:\Windows\System32\DRIVERS\PSINDvct.sys [62224 2015-01-23] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [132672 2016-10-24] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [206832 2016-10-24] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [132160 2016-10-24] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [145544 2016-10-24] (Panda Security, S.L.)
R2 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [115704 2016-10-24] (Panda Security, S.L.)
R3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [70360 2016-08-08] (Panda Security, S.L.)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
R0 SamsungRapidDiskFltr; C:\Windows\System32\DRIVERS\SamsungRapidDiskFltr.sys [268976 2014-09-16] (Samsung Electronics Co., Ltd.)
R0 SamsungRapidFSFltr; C:\Windows\System32\DRIVERS\SamsungRapidFSFltr.sys [111280 2014-09-16] (Samsung Electronics Co., Ltd.)
S3 Spyder4; C:\Windows\System32\DRIVERS\dccmtr.sys [15360 2013-09-18] (Datacolor)
S3 WacHidRouterPro; C:\Windows\System32\DRIVERS\wachidrouter.sys [119952 2017-01-25] (Wacom Technology)
S3 ZMHFSAudioSrv; C:\Windows\System32\drivers\zmhfsau.sys [53672 2015-07-02] (ZOOM)
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-03-23 21:03 - 2017-03-23 21:03 - 00000000 ____D C:\Users\Steffen\AppData\Local\Logishrd
2017-03-23 21:03 - 2017-03-23 21:03 - 00000000 ____D C:\Program Files\Logitech
2017-03-23 21:03 - 2017-03-23 21:03 - 00000000 ____D C:\FRST
2017-03-23 21:01 - 2014-10-23 22:57 - 00024824 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\IOMap64.sys
2017-03-23 20:08 - 2017-03-23 20:58 - 00530846 _____ C:\Windows\ntbtlog.txt
2017-03-23 19:21 - 2017-03-23 21:01 - 00000000 ___HD C:\Users\Public\Documents\AdobeGC
2017-03-23 18:18 - 2016-08-08 10:00 - 00070360 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSKMAD.sys
2017-03-22 22:33 - 2017-03-22 22:33 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign3522b414ee5f9289
2017-03-22 22:25 - 2017-03-22 22:25 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign9472ae9bca46bdfb
2017-03-22 22:25 - 2017-03-22 22:25 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign8b941b61aa63c200
2017-03-22 22:25 - 2017-03-22 22:25 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign4c799dbaa0836c71
2017-03-22 22:24 - 2017-03-22 22:24 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign52fb7dc6e2f2431f
2017-03-22 22:22 - 2017-03-22 22:22 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign5dfc0570b1545032
2017-03-22 22:22 - 2017-03-22 22:22 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign3f895039a947c9d0
2017-03-22 22:22 - 2017-03-22 22:22 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign3db1fd738c4fd133
2017-03-18 11:02 - 2017-03-18 11:02 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign3f32149163157501
2017-03-18 11:01 - 2017-03-18 11:01 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigna9ea2a2358f1a012
2017-03-18 11:01 - 2017-03-18 11:01 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign8e7bbfe0b29cce1b
2017-03-18 11:01 - 2017-03-18 11:01 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign632d91b43a2e33b3
2017-03-18 11:00 - 2017-03-18 11:00 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignbb01f50534baba9e
2017-03-18 11:00 - 2017-03-18 11:00 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignade4b4adec8c098f
2017-03-18 11:00 - 2017-03-18 11:00 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigna33aa977c8a4df07
2017-03-18 11:00 - 2017-03-18 11:00 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign603b4b6c84017ae5
2017-03-17 22:52 - 2017-03-17 22:52 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign9fcffb9c5b53b0c5
2017-03-17 22:52 - 2017-03-17 22:52 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign90deb015c280d81a
2017-03-17 22:52 - 2017-03-17 22:52 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign7bc768bc1b944b78
2017-03-17 22:52 - 2017-03-17 22:52 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign5b848efeca649f56
2017-03-14 19:18 - 2017-03-04 18:24 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-03-14 19:18 - 2017-03-04 17:39 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-03-14 19:18 - 2017-03-04 09:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-03-14 19:18 - 2017-03-04 09:20 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-03-14 19:18 - 2017-03-04 09:02 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-03-14 19:18 - 2017-03-04 09:01 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-03-14 19:18 - 2017-03-04 09:01 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-03-14 19:18 - 2017-03-04 09:01 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-03-14 19:18 - 2017-03-04 09:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-03-14 19:18 - 2017-03-04 08:59 - 02895360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-03-14 19:18 - 2017-03-04 08:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-03-14 19:18 - 2017-03-04 08:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-03-14 19:18 - 2017-03-04 08:48 - 25746944 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-03-14 19:18 - 2017-03-04 08:46 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-03-14 19:18 - 2017-03-04 08:45 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-03-14 19:18 - 2017-03-04 08:45 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-03-14 19:18 - 2017-03-04 08:45 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-03-14 19:18 - 2017-03-04 08:44 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-03-14 19:18 - 2017-03-04 08:36 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-03-14 19:18 - 2017-03-04 08:32 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-03-14 19:18 - 2017-03-04 08:31 - 06045696 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-03-14 19:18 - 2017-03-04 08:23 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-03-14 19:18 - 2017-03-04 08:21 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-03-14 19:18 - 2017-03-04 08:16 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-03-14 19:18 - 2017-03-04 08:16 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-03-14 19:18 - 2017-03-04 08:13 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-03-14 19:18 - 2017-03-04 08:11 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-03-14 19:18 - 2017-03-04 07:57 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-03-14 19:18 - 2017-03-04 07:55 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-03-14 19:18 - 2017-03-04 07:54 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-03-14 19:18 - 2017-03-04 07:52 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-03-14 19:18 - 2017-03-04 07:52 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-03-14 19:18 - 2017-03-04 07:26 - 15259648 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-03-14 19:18 - 2017-03-04 07:25 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-03-14 19:18 - 2017-03-04 07:12 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-03-14 19:18 - 2017-03-04 07:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-03-14 19:18 - 2017-03-04 05:18 - 20281856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-03-14 19:18 - 2017-03-02 19:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-03-14 19:18 - 2017-03-02 19:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-03-14 19:18 - 2017-03-02 19:01 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-03-14 19:18 - 2017-03-02 19:01 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-03-14 19:18 - 2017-03-02 19:01 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-03-14 19:18 - 2017-03-02 19:00 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-03-14 19:18 - 2017-03-02 18:55 - 02287104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-03-14 19:18 - 2017-03-02 18:54 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-03-14 19:18 - 2017-03-02 18:53 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-03-14 19:18 - 2017-03-02 18:51 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-03-14 19:18 - 2017-03-02 18:50 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-03-14 19:18 - 2017-03-02 18:49 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-03-14 19:18 - 2017-03-02 18:49 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-03-14 19:18 - 2017-03-02 18:41 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-03-14 19:18 - 2017-03-02 18:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-03-14 19:18 - 2017-03-02 18:35 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-03-14 19:18 - 2017-03-02 18:32 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-03-14 19:18 - 2017-03-02 18:31 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-03-14 19:18 - 2017-03-02 18:29 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-03-14 19:18 - 2017-03-02 18:28 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-03-14 19:18 - 2017-03-02 18:22 - 04604416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-03-14 19:18 - 2017-03-02 18:21 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-03-14 19:18 - 2017-03-02 18:19 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-03-14 19:18 - 2017-03-02 18:17 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-03-14 19:18 - 2017-03-02 18:17 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-03-14 19:18 - 2017-03-02 18:11 - 13654528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-03-14 19:18 - 2017-03-02 17:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-03-14 19:18 - 2017-03-02 17:50 - 01312768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-03-14 19:18 - 2017-03-02 17:50 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-03-14 19:18 - 2017-02-11 16:58 - 00462848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-03-14 19:18 - 2017-02-11 16:58 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-03-14 19:18 - 2017-02-11 16:58 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-03-14 19:18 - 2017-02-10 17:32 - 00803328 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-03-14 19:18 - 2017-02-10 17:32 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-03-14 19:18 - 2017-02-10 17:17 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-03-14 19:18 - 2017-02-10 17:17 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-03-14 19:18 - 2017-02-10 15:33 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-03-14 19:18 - 2017-02-09 17:36 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-03-14 19:18 - 2017-02-09 17:35 - 05548264 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-03-14 19:18 - 2017-02-09 17:35 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-03-14 19:18 - 2017-02-09 17:35 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-03-14 19:18 - 2017-02-09 17:35 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-03-14 19:18 - 2017-02-09 17:33 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:19 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-03-14 19:18 - 2017-02-09 17:19 - 03945192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-03-14 19:18 - 2017-02-09 17:16 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:03 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-03-14 19:18 - 2017-02-09 17:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-03-14 19:18 - 2017-02-09 17:03 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-03-14 19:18 - 2017-02-09 17:02 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-03-14 19:18 - 2017-02-09 17:00 - 03220480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-03-14 19:18 - 2017-02-09 16:59 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-03-14 19:18 - 2017-02-09 16:58 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-03-14 19:18 - 2017-02-09 16:55 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-03-14 19:18 - 2017-02-09 16:55 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-03-14 19:18 - 2017-02-09 16:55 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-03-14 19:18 - 2017-02-09 16:54 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-03-14 19:18 - 2017-02-09 16:54 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-03-14 19:18 - 2017-02-09 16:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-03-14 19:18 - 2017-02-09 16:51 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcsPlugInService.dll
2017-03-14 19:18 - 2017-02-09 16:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-03-14 19:18 - 2017-02-09 16:50 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-03-14 19:18 - 2017-02-09 16:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-03-14 19:18 - 2017-02-09 16:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-03-14 19:18 - 2017-02-09 16:49 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-03-14 19:18 - 2017-02-09 16:49 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 16:49 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 16:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 16:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 15:06 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-03-14 19:18 - 2017-02-09 15:06 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-03-14 19:18 - 2017-02-06 17:14 - 00733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-03-14 19:18 - 2017-01-13 19:00 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-03-14 19:18 - 2017-01-13 19:00 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2017-03-14 19:18 - 2017-01-13 18:45 - 00741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-03-14 19:18 - 2017-01-13 18:45 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2017-03-14 19:18 - 2017-01-11 19:01 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-03-14 19:18 - 2017-01-11 19:01 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2017-03-14 19:18 - 2017-01-11 18:43 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2017-03-14 19:18 - 2017-01-11 18:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2017-03-14 19:18 - 2017-01-06 19:00 - 01574912 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-03-14 19:18 - 2017-01-06 18:44 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-03-14 19:13 - 2017-02-23 00:42 - 00084712 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-03-14 19:13 - 2017-02-23 00:37 - 01285632 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-03-14 19:13 - 2017-02-18 15:05 - 01609216 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-03-14 19:13 - 2017-02-18 15:05 - 00646656 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-03-14 19:13 - 2016-12-31 16:36 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-03-14 19:13 - 2016-12-31 16:36 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-03-14 19:13 - 2016-12-31 16:36 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2017-03-14 19:13 - 2016-12-31 16:36 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-03-14 19:13 - 2016-12-31 16:36 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-03-13 19:45 - 2017-03-13 19:45 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignf828a9e4a43e9359
2017-03-13 19:45 - 2017-03-13 19:45 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignaf948186c2b62e09
2017-03-13 19:45 - 2017-03-13 19:45 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign793062088fc6e40d
2017-03-10 17:35 - 2017-03-10 17:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2017-03-09 19:44 - 2017-03-09 19:44 - 00000000 ____D C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-03-08 13:07 - 2017-03-11 17:14 - 00975215 _____ C:\Users\Steffen\Desktop\Recipe_Crafting_for_Consumables_v12.pdf
2017-03-06 13:56 - 2017-03-06 13:56 - 00000887 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2017-03-06 13:56 - 2017-03-06 13:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hamachi
2017-03-06 13:56 - 2017-03-06 13:56 - 00000000 ____D C:\Program Files (x86)\Hamachi
2017-03-05 20:17 - 2017-03-05 20:17 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigne320bf1d6478ab3d
2017-03-05 20:17 - 2017-03-05 20:17 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign8d28c75275aa1bf8
2017-03-05 20:17 - 2017-03-05 20:17 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign4830e0a65f509be5
2017-03-05 20:17 - 2017-03-05 20:17 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign04c03f3782d6204c
2017-03-05 20:17 - 2017-03-05 20:17 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign020bb32d7c0a7120
2017-03-05 19:57 - 2017-03-05 19:57 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignc075e6a626a5e9d7
2017-03-05 19:57 - 2017-03-05 19:57 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignaf34f736d7c2ec7f
2017-03-05 19:57 - 2017-03-05 19:57 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign4a8aabf8564eb668
2017-03-05 19:57 - 2017-03-05 19:57 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign125d6688a2a4bc82
2017-03-05 19:53 - 2017-03-05 19:53 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignfd524355622e66c0
2017-03-05 19:53 - 2017-03-05 19:53 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigne043021ad060ac32
2017-03-05 19:53 - 2017-03-05 19:53 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign1d2e85d2c8c2f32c
2017-03-05 19:53 - 2017-03-05 19:53 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign0f3a575fe9274ac6
2017-03-05 19:53 - 2017-03-05 19:53 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign0c3cf78944823d6c
2017-03-05 18:37 - 2017-03-05 18:37 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign3a267b3d8503c607
2017-03-05 18:37 - 2017-03-05 18:37 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign0cc46aabd2a7495e
2017-03-05 18:05 - 2017-03-05 18:05 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignd879ed78251f15fb
2017-03-05 18:05 - 2017-03-05 18:05 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign9bb69a483d131560
2017-03-05 18:05 - 2017-03-05 18:05 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign8b56a28b323211bf
2017-03-03 00:56 - 2017-03-03 00:56 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign5616c423a719f841
2017-03-03 00:47 - 2017-03-03 00:47 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign9049144652823399
2017-03-03 00:44 - 2017-03-03 00:44 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignd07d9faac3df70b0
2017-03-03 00:44 - 2017-03-03 00:44 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigncbabd037933ce7f5
2017-03-03 00:44 - 2017-03-03 00:44 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignc0234fece709c698
2017-03-03 00:44 - 2017-03-03 00:44 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign3ad3f8bfc15f5fc9
2017-03-03 00:43 - 2017-03-03 00:43 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignb1df85c51ff4016a
2017-03-03 00:43 - 2017-03-03 00:43 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign950ede8506014384
2017-03-03 00:43 - 2017-03-03 00:43 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign73a926123a22ab1a
2017-03-03 00:43 - 2017-03-03 00:43 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign53a04fdad0c66284
2017-03-03 00:31 - 2017-03-03 00:31 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignefedc1ee99a1bf3f
2017-03-03 00:31 - 2017-03-03 00:31 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign9e31a00e59b440da
2017-03-03 00:31 - 2017-03-03 00:31 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign879ba87f35a9a340
2017-03-03 00:31 - 2017-03-03 00:31 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign31b8190032a3f9cc
2017-03-03 00:30 - 2017-03-03 00:30 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign87334d25c949180d
2017-03-03 00:30 - 2017-03-03 00:30 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign7519ec81d10c48dc
2017-03-03 00:30 - 2017-03-03 00:30 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign7514ec56e6fdb2b6
2017-03-03 00:30 - 2017-03-03 00:30 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign0330f063eb3ff62e
2017-03-03 00:26 - 2017-03-03 00:26 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignd983f450b7072858
2017-03-03 00:26 - 2017-03-03 00:26 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignc4926d3f1ca23f1a
2017-03-03 00:26 - 2017-03-03 00:26 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign92ce3fb0f86a5a82
2017-03-03 00:26 - 2017-03-03 00:26 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign8bcfb47ee3618480
2017-03-03 00:22 - 2017-03-03 00:22 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignac8006f6b493fd54
2017-03-03 00:22 - 2017-03-03 00:22 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignab888dc8f7228f3d
2017-03-03 00:22 - 2017-03-03 00:22 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign7244a78267ea7a99
2017-03-03 00:22 - 2017-03-03 00:22 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign425c3ad00ee18c62
2017-03-03 00:22 - 2017-03-03 00:22 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign2d3896876e76484d
2017-03-03 00:21 - 2017-03-03 00:21 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignc6d03791164bf351
2017-03-03 00:21 - 2017-03-03 00:21 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign5d7c6ef84c8cad53
2017-03-03 00:21 - 2017-03-03 00:21 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign54329148f4addb80
2017-03-03 00:21 - 2017-03-03 00:21 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign02e71ebd9e1a6da5
2017-03-03 00:19 - 2017-03-03 00:19 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign4aa60639810d650b
2017-03-03 00:19 - 2017-03-03 00:19 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign4937233701222918
2017-03-03 00:19 - 2017-03-03 00:19 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign1ef408ec67522db0
2017-03-03 00:19 - 2017-03-03 00:19 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign168e210977ff1ed3
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignb24173af6321d48c
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign9b00d10d3414cd7b
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign97065b74af83a60c
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign05751b2af7e46dea
2017-03-03 00:08 - 2017-03-03 00:08 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignd681a7e18e4c466b
2017-03-03 00:08 - 2017-03-03 00:08 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigna30f07bf11c794f8
2017-03-03 00:08 - 2017-03-03 00:08 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign999bf919626f5a6c
2017-03-03 00:08 - 2017-03-03 00:08 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign04405e4df8660f49
2017-03-03 00:06 - 2017-03-03 00:06 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett
2017-03-03 00:05 - 2017-03-03 00:05 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign6b596bd61b809391
2017-03-03 00:05 - 2017-03-03 00:05 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign41018435c98d87e2
2017-03-03 00:05 - 2017-03-03 00:05 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign2152e5640299c5f5
2017-03-03 00:03 - 2017-03-03 00:03 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign923550409788ab20
2017-03-03 00:03 - 2017-03-03 00:03 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign3fbd8590cda9f3d5
2017-03-03 00:03 - 2017-03-03 00:03 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign1db0314ce54e0893
2017-03-03 00:03 - 2017-03-03 00:03 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign0fc222487ec798b0
2017-03-03 00:01 - 2017-03-03 00:01 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign78111f7d587d52a4
2017-03-03 00:01 - 2017-03-03 00:01 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign38458270ff40727f
2017-03-03 00:01 - 2017-03-03 00:01 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign31e9691cef61e7d5
2017-03-03 00:01 - 2017-03-03 00:01 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign246adc359cff76d8
2017-03-03 00:00 - 2017-03-03 00:00 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigneae252886290de0e
2017-03-03 00:00 - 2017-03-03 00:00 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignbf3736a77157b9f0
2017-03-03 00:00 - 2017-03-03 00:00 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign75d975a21d357a9a
2017-03-03 00:00 - 2017-03-03 00:00 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign5a7e8d4915cc41a8
2017-03-02 23:54 - 2017-03-02 23:54 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigna9f110d81b645b7c
2017-03-02 23:53 - 2017-03-02 23:53 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignb017b6d1d9f51967
2017-03-02 23:53 - 2017-03-02 23:53 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign625e9bb3abc44c46
2017-03-02 23:53 - 2017-03-02 23:53 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign2944c45181046ebb
2017-03-02 15:47 - 2017-03-02 15:47 - 00000000 ____D C:\Users\Steffen\ansel
2017-03-01 23:51 - 2017-03-01 23:51 - 00000000 ____D C:\Users\Steffen\Documents\League of Legends
2017-03-01 22:58 - 2017-03-01 22:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignebc81f377b9bffee
2017-03-01 22:58 - 2017-03-01 22:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignb694f4a6c45efd46
2017-03-01 22:58 - 2017-03-01 22:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign23869647cf2702cb
2017-03-01 20:33 - 2017-03-10 17:35 - 00000000 ____D C:\Users\Steffen\AppData\Roaming\Riot Games
2017-03-01 18:29 - 2017-02-09 23:39 - 00134592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-03-01 18:27 - 2017-02-10 01:52 - 40192056 _____ C:\Windows\system32\nvcompiler.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 35272760 _____ C:\Windows\SysWOW64\nvcompiler.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 34937280 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 28212280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 19110088 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 19006832 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 16398896 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 14674896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 14373824 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2017-03-01 18:27 - 2017-02-10 01:52 - 13377072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 11122912 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 11019704 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 09305984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 08990072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 03627064 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 03187256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 01983424 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437866.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 01589696 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437866.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 01051584 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00989120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00961080 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00912440 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00687224 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00611384 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00576192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00504104 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00500792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00425288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00408272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00170360 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00153184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00131720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2017-02-28 14:50 - 2017-03-01 18:01 - 00000000 ____D C:\Users\Steffen\Desktop\Wasser
2017-02-28 14:21 - 2017-02-28 14:21 - 00170626 _____ C:\Users\Steffen\Desktop\RE Pfosten ******.pdf
2017-02-28 14:21 - 2017-02-28 14:21 - 00118098 _____ C:\Users\Steffen\Desktop\*************#001_01.pdf
2017-02-27 19:58 - 2017-02-27 19:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign743238a32e3935e0
2017-02-27 19:58 - 2017-02-27 19:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign256a8eae710fe0a1
2017-02-27 19:58 - 2017-02-27 19:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign096dbc766b43beb6
2017-02-27 19:58 - 2017-02-27 19:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign045cf28ff3c3aae5
2017-02-27 17:12 - 2017-02-27 17:12 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign91f9eab813b431a2
2017-02-27 17:12 - 2017-02-27 17:12 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign28892ea7e82b8d5d
2017-02-27 17:11 - 2017-02-27 17:11 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignc89e0dedabf009ed
2017-02-27 17:11 - 2017-02-27 17:11 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign238d5f5b27072f77
2017-02-24 14:43 - 2017-03-18 10:58 - 00000000 ____D C:\Users\Steffen\Desktop\Versicherungen
2017-02-24 14:43 - 2017-02-24 14:43 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigncb27a1abed96655d
2017-02-24 14:43 - 2017-02-24 14:43 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignc6915b5b9dd5d53d
2017-02-24 14:43 - 2017-02-24 14:43 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign3682da2c86b92b7b
2017-02-22 17:14 - 2017-02-22 17:14 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign5970cf5eb684722e
2017-02-22 17:14 - 2017-02-22 17:14 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign2ddc9204c3239c69
2017-02-22 17:14 - 2017-02-22 17:14 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign2c20ca73eeee0b02
2017-02-22 12:32 - 2017-02-22 12:32 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignde45a7d54d3921a0
2017-02-22 12:32 - 2017-02-22 12:32 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign75d631e6d9aa8be0
2017-02-22 12:32 - 2017-02-22 12:32 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign41b7491243c898c3
2017-02-22 11:58 - 2017-02-22 11:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign7e0a2e9df570596d
2017-02-22 11:58 - 2017-02-22 11:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign18e2d90631db7daf
2017-02-22 11:58 - 2017-02-22 11:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign0feebbf7ca457958
2017-02-22 11:57 - 2017-02-22 11:57 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigndee63ce8d1f0f003
2017-02-22 11:57 - 2017-02-22 11:57 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign17abefa566ed7402
2017-02-22 11:57 - 2017-02-22 11:57 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign05dfedc94fd6f8bd
2017-02-22 11:48 - 2017-02-22 11:48 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignec0c103d29533501
2017-02-22 11:48 - 2017-02-22 11:48 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignc274e8b137416c30
2017-02-22 11:48 - 2017-02-22 11:48 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign9f15f55a71780f5f
2017-02-22 11:02 - 2017-02-22 17:26 - 02902016 _____ C:\Users\Steffen\Desktop\V.ppt
2017-02-22 10:56 - 2017-02-22 10:56 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignf4854b59b824bdc6
2017-02-22 10:56 - 2017-02-22 10:56 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignca532994e3c17e34
2017-02-22 10:56 - 2017-02-22 10:56 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigna25ecca9274336a0
2017-02-22 01:37 - 2017-02-22 01:37 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignbb3dc7c1099aef12
2017-02-22 01:37 - 2017-02-22 01:37 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign9a98ed49c533bda2
2017-02-22 01:37 - 2017-02-22 01:37 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign94125149cf1ed793
2017-02-22 01:18 - 2017-02-22 01:23 - 00000000 ____D C:\Users\Steffen\Desktop\Videos Canada
2017-02-22 00:12 - 2017-02-22 13:45 - 00000000 ____D C:\Users\Steffen\Desktop\V

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-03-23 21:03 - 2015-02-13 15:50 - 00000000 ____D C:\Users\Public\Documents\Logishrd
2017-03-23 21:03 - 2015-02-13 15:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2017-03-23 21:03 - 2015-02-13 15:50 - 00000000 ____D C:\ProgramData\Logitech
2017-03-23 21:03 - 2015-02-13 15:50 - 00000000 ____D C:\ProgramData\Logishrd
2017-03-23 21:03 - 2015-02-13 15:50 - 00000000 ____D C:\Program Files\Common Files\LogiShrd
2017-03-23 21:03 - 2009-07-14 05:45 - 00025152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-03-23 21:03 - 2009-07-14 05:45 - 00025152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-03-23 21:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-03-23 21:01 - 2016-12-08 10:50 - 00000000 ____D C:\ProgramData\NVIDIA
2017-03-23 21:01 - 2016-11-04 17:19 - 00000346 _____ C:\Windows\Tasks\Health-Check-auto.job
2017-03-23 21:01 - 2016-08-21 18:27 - 00000000 ____D C:\Users\Steffen\AppData\Local\LogMeIn Hamachi
2017-03-23 21:01 - 2015-07-29 16:29 - 00000000 ___RD C:\Users\Steffen\Creative Cloud Files
2017-03-23 21:01 - 2015-01-28 20:58 - 00000344 _____ C:\Windows\lgfwup.ini
2017-03-23 21:01 - 2015-01-28 20:58 - 00000000 ____D C:\Program Files (x86)\lg_fwupdate
2017-03-23 21:01 - 2015-01-28 20:54 - 00000000 ____D C:\Users\Steffen\AppData\Local\Adobe
2017-03-23 21:01 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-23 20:58 - 2016-11-16 13:52 - 00000000 ____D C:\Users\Steffen\AppData\LocalLow\Mozilla
2017-03-23 20:22 - 2015-06-02 14:38 - 00001232 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-225253568-2950696071-1607657666-1000UA.job
2017-03-23 20:18 - 2011-04-12 08:43 - 00663500 _____ C:\Windows\system32\perfh007.dat
2017-03-23 20:18 - 2011-04-12 08:43 - 00136320 _____ C:\Windows\system32\perfc007.dat
2017-03-23 20:18 - 2009-07-14 06:13 - 01528896 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-23 19:28 - 2015-06-02 14:38 - 00000000 ____D C:\Users\Steffen\AppData\Local\Dropbox
2017-03-23 18:27 - 2015-01-28 20:28 - 00003934 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{E5B51F7A-A4D6-4F95-A8E5-ADE925EF3107}
2017-03-22 23:06 - 2016-03-10 00:25 - 00001788 _____ C:\Users\Steffen\AppData\Roaming\Coolorus 2
2017-03-21 15:44 - 2015-02-22 00:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-03-20 13:56 - 2016-12-14 15:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-03-18 10:55 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2017-03-15 16:01 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2017-03-15 14:31 - 2009-07-14 05:45 - 05117544 _____ C:\Windows\system32\FNTCACHE.DAT
2017-03-15 14:30 - 2015-01-28 22:39 - 00000000 ___SD C:\Windows\system32\CompatTel
2017-03-15 14:30 - 2015-01-28 22:39 - 00000000 ____D C:\Windows\system32\appraiser
2017-03-15 14:30 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\DVD Maker
2017-03-14 23:42 - 2015-01-29 16:24 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2017-03-14 23:42 - 2015-01-28 21:14 - 00000000 ____D C:\Windows\system32\MRT
2017-03-14 23:41 - 2015-01-28 21:14 - 138634176 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-03-14 23:40 - 2015-01-28 21:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-03-14 23:39 - 2015-01-28 21:30 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-03-14 23:39 - 2015-01-28 21:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-03-14 21:20 - 2015-02-24 19:40 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-03-14 21:20 - 2015-02-24 19:40 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-03-14 21:20 - 2015-02-24 19:40 - 00004366 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-03-14 21:20 - 2015-02-24 19:40 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-03-14 21:20 - 2015-02-24 19:40 - 00000000 ____D C:\Windows\system32\Macromed
2017-03-13 20:05 - 2016-03-02 15:46 - 00000000 ____D C:\Users\Steffen\Desktop\Games
2017-03-13 19:57 - 2015-01-31 18:25 - 00000000 ____D C:\Users\Steffen\AppData\Roaming\KeePass
2017-03-12 19:10 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-03-11 10:22 - 2015-06-02 14:38 - 00001180 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-225253568-2950696071-1607657666-1000Core.job
2017-03-09 22:27 - 2015-04-05 20:16 - 00000000 ____D C:\Users\Steffen\AppData\Roaming\.minecraft
2017-03-09 19:44 - 2015-02-03 20:11 - 00000000 ____D C:\Users\Steffen\AppData\Roaming\Dropbox
2017-03-08 13:06 - 2015-01-28 20:18 - 00000000 ____D C:\ProgramData\Adobe
2017-03-06 21:47 - 2016-09-16 13:18 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi
2017-03-06 21:47 - 2016-09-16 13:18 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi
2017-03-05 19:49 - 2015-02-02 21:10 - 00000000 ____D C:\Users\Steffen\AppData\Roaming\vlc
2017-03-03 00:06 - 2015-06-11 16:13 - 00000000 ____D C:\Program Files\Tablet
2017-03-02 15:47 - 2015-01-28 19:34 - 00000000 ____D C:\Users\Steffen
2017-03-02 13:26 - 2016-09-16 13:17 - 00034720 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys
2017-03-01 18:29 - 2016-12-08 10:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-03-01 18:29 - 2016-03-12 10:18 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-03-01 18:29 - 2015-01-28 20:40 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-02-27 19:58 - 2015-02-01 08:45 - 00000000 ____D C:\Users\Steffen\AppData\Local\Lazy Nezumi Pro
2017-02-27 17:28 - 2016-06-30 18:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lazy Nezumi Pro
2017-02-27 17:28 - 2016-06-30 18:14 - 00000000 ____D C:\Program Files (x86)\Lazy Nezumi Pro
2017-02-22 15:11 - 2016-04-20 16:51 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2017-02-22 10:56 - 2015-06-10 21:24 - 00000000 ____D C:\Users\Steffen\AppData\Local\CrashDumps
2017-02-21 23:21 - 2015-02-03 22:10 - 00000000 ____D C:\Users\Steffen\AppData\Roaming\Skype

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-03-10 00:25 - 2017-03-22 23:06 - 0001788 _____ () C:\Users\Steffen\AppData\Roaming\Coolorus 2
2015-02-01 08:23 - 2015-02-01 08:23 - 0000028 _____ () C:\Users\Steffen\AppData\Roaming\kulerdata.json
2015-09-05 13:58 - 2016-07-09 07:18 - 0069632 ___SH () C:\Users\Steffen\AppData\Roaming\Thumbs.db
2016-11-02 21:47 - 2016-11-02 21:47 - 0001557 _____ () C:\Users\Steffen\AppData\Local\recently-used.xbel
2015-01-28 19:56 - 2015-01-28 19:56 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-12-02 22:49 - 2015-12-02 22:49 - 0000121 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2016-12-26 11:24 - 2017-01-13 14:42 - 0005110 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-26 11:24 - 2017-01-13 00:59 - 0005110 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1

Einige Dateien in TEMP:
====================
2008-11-10 21:54 - 2008-11-10 21:54 - 0106496 _____ (Microsoft Corporation) C:\Users\Steffen\AppData\Local\Temp\GameuxInstallHelper.dll
2016-12-26 11:23 - 2015-08-08 20:11 - 0134656 _____ (Irfan Skiljan, IrfanView) C:\Users\Steffen\AppData\Local\Temp\iv_uninstall.exe
2016-12-08 10:49 - 2017-01-20 15:07 - 0352704 _____ (NVIDIA Corporation) C:\Users\Steffen\AppData\Local\Temp\nvStInst.exe
2016-12-08 10:51 - 2016-11-17 14:44 - 1135552 _____ (NVIDIA Corporation) C:\Users\Steffen\AppData\Local\Temp\NvTelemetry.dll
2016-12-08 10:51 - 2017-01-06 02:10 - 0255032 _____ (NVIDIA Corporation) C:\Users\Steffen\AppData\Local\Temp\NvTelemetryAPI32.dll
2016-12-08 10:51 - 2017-01-06 02:10 - 0335928 _____ (NVIDIA Corporation) C:\Users\Steffen\AppData\Local\Temp\NvTelemetryAPI64.dll
2006-10-27 14:01 - 2006-10-27 14:01 - 0049152 _____ () C:\Users\Steffen\AppData\Local\Temp\SettingUpdate.exe
2016-12-27 00:13 - 2011-10-12 23:12 - 0314272 _____ () C:\Users\Steffen\AppData\Local\Temp\Uninstaller-12212.exe
2016-12-27 00:11 - 2011-10-12 23:12 - 0314272 _____ () C:\Users\Steffen\AppData\Local\Temp\Uninstaller-1976.exe
2016-12-27 00:11 - 2011-10-12 23:12 - 0314272 _____ () C:\Users\Steffen\AppData\Local\Temp\Uninstaller-9912.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-03-14 19:40

==================== Ende von FRST.txt ============================

cosinus · 23.03.2017, 21:57

Hi,

Wieso noch Windows 7, du hast doch recht neue Hardware?

Ist das ein gewerblich genutztes System? Wenn nicht bitte um kurze Erklärung. Und bitte auch warum das Schädlinge sein sollen bzw warum du das glaubst.

Hermundure · 23.03.2017, 22:13

Hallo Cosinus,

danke für die Antwort.
Meine Hardware ist zwar noch recht aktuell, neu ist sie allerdings nicht, meinen Rechner habe ich schon gut 2 Jahre (evtl. sogar länger, die Grafikkarte war damals ganz neu auf dem Markt wenn ich mich recht entsinne).

Windows 7 habe ich gewählt weil es XP so ähnlich sieht, ich bin kein Computer-affiner Mensch, jedes "Anlernen" an ein neues OS ist mir ehrlich gesagt ein Graus.
Darüber hinaus wurde das Upgrade auf Win 10 kostenlos angeboten, solchen "Geschenken" stehe ich prinzipiell skeptisch gegenüber...

Zu Deiner zweiten Frage:
Ich bin mir nicht sicher ob das Schädlinge sind oder nicht, ich habe nach den Syptomen gegoogelt und bei "bleepingcomputer" wurde dieser Slowdown wohl mehrfach mit Malware in Verbindung gebracht. Über diese Seite bin ich dann auf euch gestoßen.

Oh und nein, das ist kein gewerbliches System, wir haben thin clients und einen Zentralserver an der Arbeit.
Das Zeichenpad, Photoshop, Painter, Color Corrector etc. gehört zu meinem Hobbly, ich male und zeichne am Rechner, zum Beispiel für Virtual Table Tops (Rollenspiel am PC), als "Beweis" hänge ich mal ein altes Forumsposting mit drei "attached images" von mir an:
https://www.fantasygrounds.com/forums/showthread.php?33326-Poll-Low-Fantasy-vs-High-Fantasy-and-a-little-teaser-p

cosinus · 23.03.2017, 23:00

es macht wenig bis keinen Sinn, aktuelle Hardware mit alten Betriebssystemen zu verwenden. Bei dir geht das wohl so gerade noch aber Microsoft unterstützt das nicht mehr bei brandneuer Hardware siehe https://heise.de/-3656807

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Hermundure · 23.03.2017, 23:21

Der Mbar Bericht ist fertiggestellt:

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.03.23.15
  rootkit: v2017.03.11.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18617
Steffen :: GOLIATH [administrator]

23.03.2017 23:06:05
mbar-log-2017-03-23 (23-06-05).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 388987
Time elapsed: 13 minute(s), 42 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

cosinus · 23.03.2017, 23:24

Das wird nicht an Malware liegen. Meine Meinung. Aber lass ruhig nochmal adwCleaner und JRT durchlaufen:

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Wir haben leider noch ne ältere Anleitung vom adwCleaner, bitte nochmal ausführen und so einstellen:

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Hermundure · 23.03.2017, 23:58

Wir haben was gefunden! :-)

Hier die beiden Berichte:

Code:

ATTFilter

# AdwCleaner v6.044 - Bericht erstellt am 23/03/2017 um 23:50:30
# Aktualisiert am 28/02/2017 von Malwarebytes
# Datenbank : 2017-03-23.2 [Lokal]
# Betriebssystem : Windows 7 Professional Service Pack 1 (X64)
# Benutzername : Steffen - GOLIATH
# Gestartet von : E:\1 Downloads\AdwCleaner_6.044.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****



***** [ Ordner ] *****



***** [ Dateien ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.watch4.de
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.watch4.de


***** [ Browser ] *****



*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: "Prefetch" Dateien gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [1796 Bytes] - [23/03/2017 23:50:30]
C:\AdwCleaner\AdwCleaner[S0].txt - [2031 Bytes] - [23/03/2017 23:48:09]
C:\AdwCleaner\AdwCleaner[S1].txt - [2103 Bytes] - [23/03/2017 23:49:51]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [2015 Bytes] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.2 (03.10.2017)
Operating System: Windows 7 Professional x64 
Ran by Steffen (Administrator) on 23.03.2017 at 23:54:44,31
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 42 

Failed to delete: C:\ProgramData\pdfforge (Folder) 
Successfully deleted: C:\Program Files (x86)\Common Files\innovative solutions (Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0P1ZZDKQ (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4T4PJT9Z (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\71HURK2X (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8HLRVZ6O (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8JUA3LBT (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8OV2JJNO (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AHYRK89I (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B0OCQRRL (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BFQ1TU29 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BMZ3OD31 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FGJBUECU (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GEZE21DR (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I2GE3Y30 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9C23QW9 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P641ZWPV (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Steffen\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XATB9XSV (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0P1ZZDKQ (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4T4PJT9Z (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\71HURK2X (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8HLRVZ6O (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8JUA3LBT (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8OV2JJNO (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AHYRK89I (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B0OCQRRL (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BFQ1TU29 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BMZ3OD31 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FGJBUECU (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GEZE21DR (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I2GE3Y30 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9C23QW9 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P641ZWPV (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XATB9XSV (Temporary Internet Files Folder) 



Registry: 1 

Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} (Registry Value) 




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 23.03.2017 at 23:55:46,28
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

cosinus · 24.03.2017, 00:05

adwcleaner zwecks Kontrolle bitte wiederholen

Hermundure · 24.03.2017, 00:10

Ich hab zwar keine Ahnung was wir da gefunden hatten, aber jetzt ists weg! Danke! :-)

Code:

ATTFilter

# AdwCleaner v6.044 - Bericht erstellt am 24/03/2017 um 00:08:28
# Aktualisiert am 28/02/2017 von Malwarebytes
# Datenbank : 2017-03-23.2 [Lokal]
# Betriebssystem : Windows 7 Professional Service Pack 1 (X64)
# Benutzername : Steffen - GOLIATH
# Gestartet von : C:\Users\Steffen\Desktop\System\Malware Removal\AdwCleaner_6.044.exe
# Modus: Suchlauf
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****

Keine schädlichen Dienste gefunden.


***** [ Ordner ] *****

Keine schädlichen Ordner gefunden.


***** [ Dateien ] *****

Keine schädlichen Dateien gefunden.


***** [ DLL ] *****

Keine infizierten DLLs gefunden.


***** [ WMI ] *****

Keine schädlichen Schlüssel gefunden.


***** [ Verknüpfungen ] *****

Keine infizierten Verknüpfungen gefunden.


***** [ Aufgabenplanung ] *****

Keine schädlichen Aufgaben gefunden.


***** [ Registrierungsdatenbank ] *****

Keine schädlichen Elemente in der Registrierungsdatenbank gefunden.


***** [ Internetbrowser ] *****

Keine schädlichen Elemente in Firefox basierten Browsern gefunden.
Keine schädlichen Elemente in Chrome basierten Browsern gefunden.

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [2113 Bytes] - [23/03/2017 23:50:30]
C:\AdwCleaner\AdwCleaner[S0].txt - [2031 Bytes] - [23/03/2017 23:48:09]
C:\AdwCleaner\AdwCleaner[S1].txt - [2103 Bytes] - [23/03/2017 23:49:51]
C:\AdwCleaner\AdwCleaner[S2].txt - [1452 Bytes] - [24/03/2017 00:08:28]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1525 Bytes] ##########

cosinus · 24.03.2017, 00:11

Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

Hermundure · 24.03.2017, 00:17

Was sagen diese FRST Logs denn aus?
Ich poste sie hintereinander, die Zeichenanzahl ist zu lang :-)

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017
durchgeführt von Steffen (Administrator) auf GOLIATH (24-03-2017 00:15:26)
Gestartet von C:\Users\Steffen\Desktop\System\Malware Removal
Geladene Profile: Steffen (Verfügbare Profile: Steffen)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
() C:\Windows\SysWOW64\ASGT.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
(DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\WAC\PSANHost.exe
(NCP engineering GmbH) C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncpclcfg.exe
(NCP Engineering GmbH) C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncprwsnt.exe
() C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncpsec.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(Â© pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\WAC\PSUAService.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\RAPID\SamsungRapidSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(TODO: <Company name>) C:\Program Files (x86)\ASUS\GPU TweakII\GPUTweakII.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(TeamViewer GmbH) C:\Users\Steffen\AppData\Local\Temp\TeamViewer\TeamViewer_Service.exe
(Apple Inc.) E:\ITunes\iTunesHelper.exe
(Panda Security International) C:\Program Files (x86)\Panda Security\WaAgent\WAHost\WAHost.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(LogMeIn Inc.) C:\Program Files (x86)\Hamachi\x64\hamachi-2.exe
() C:\Program Files\EIZO\ColorNavigator 6\ColorNavigator 6.exe
(LogMeIn, Inc.) C:\Program Files (x86)\Hamachi\x64\LMIGuardianSvc.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Intel(R) Corporation) C:\Program Files\Intel\NCS2\WMIProv\ncs2prov.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(NCP engineering GmbH) C:\Program Files (x86)\LANCOM\Advanced VPN Client\NcpBudgetGui.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Contour Design, Inc.) C:\Program Files (x86)\Contour Shuttle\ShuttleHelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(BitLeader) C:\Program Files (x86)\lg_fwupdate\fwupdate.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\WAC\PSUAMain.exe
(LogMeIn Inc.) C:\Program Files (x86)\Hamachi\hamachi-2-ui.exe
(LogMeIn, Inc.) C:\Program Files (x86)\Hamachi\LMIGuardianSvc.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Contour Design, Inc.) C:\Program Files (x86)\Contour Shuttle\ShuttleEngine.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AdobeGCClient.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
() C:\Program Files\EIZO\ColorNavigator 6\core\cn6_eacore.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
(TODO: <Company name>) C:\Program Files (x86)\ASUS\GPU TweakII\Monitor.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SamsungRapidApp] => C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe [281776 2014-09-16] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7636696 2014-08-21] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1392344 2014-08-26] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => E:\ITunes\iTunesHelper.exe [176440 2016-12-06] (Apple Inc.)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [13318424 2015-02-26] (Logitech Inc.)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3113592 2015-08-26] (Logitech, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-06-27] (Intel Corporation)
HKLM-x32\...\Run: [NcpPopup] => C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncppopup.exe [964848 2015-01-20] (NCP engineering GmbH)
HKLM-x32\...\Run: [NcpBudgetGui] => C:\Program Files (x86)\LANCOM\Advanced VPN Client\NcpBudgetGui.exe [1819888 2015-01-20] (NCP engineering GmbH)
HKLM-x32\...\Run: [LGODDFU] => C:\Program Files (x86)\lg_fwupdate\lgfw.exe [27760 2012-07-12] (Bitleader)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2756672 2016-03-09] (Dominik Reichl)
HKLM-x32\...\Run: [Contour Shuttle Device Helper] => C:\Program Files (x86)\Contour Shuttle\ShuttleHelper.exe [126464 2015-09-23] (Contour Design, Inc.)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2011-03-09] (CyberLink)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [179976 2013-09-02] (cyberlink)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\WAC\PSUAMain.exe [111896 2016-11-08] (Panda Security, S.L.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\Hamachi\hamachi-2-ui.exe [5883912 2017-03-02] (LogMeIn Inc.)
HKLM\...\Winlogon: [Userinit] C:\Windows\SysWOW64\userinit.exe,
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-225253568-2950696071-1607657666-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-225253568-2950696071-1607657666-1000\...\Run: [Dropbox Update] => C:\Users\Steffen\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.)
HKU\S-1-5-21-225253568-2950696071-1607657666-1000\...\RunOnce: [Application Restart #3] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-25] (Adobe Systems Incorporated)
HKU\S-1-5-21-225253568-2950696071-1607657666-1000\...\RunOnce: [Application Restart #4] => C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe [2360000 2016-10-25] (Adobe Systems Incorporated)
HKU\S-1-5-21-225253568-2950696071-1607657666-1000\...\MountPoints2: {6c123a37-0ce2-11e5-b123-02001e677b44} - H:\start.exe
HKU\S-1-5-18\...\RunOnce: [Application Restart #2] => C:\Program Files (x86)\ASUS\GPU TweakII\Monitor.exe [2670032 2015-11-30] (TODO: <Company name>)
HKU\S-1-5-18\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\ASUS\GPU TweakII\Monitor.exe [2670032 2015-11-30] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
Startup: C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ColorNavigator 6.lnk [2016-12-14]
ShortcutTarget: ColorNavigator 6.lnk -> C:\Program Files\EIZO\ColorNavigator 6\ColorNavigator 6.exe ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\..\Interfaces\{0C5514B9-6611-4F5C-B63C-6D0B30FC22B8}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{988511EF-296C-4FBE-A8E5-68A749AD6919}: [DhcpNameServer] 172.20.10.1

Internet Explorer:
==================
HKU\S-1-5-21-225253568-2950696071-1607657666-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.de/
SearchScopes: HKU\S-1-5-21-225253568-2950696071-1607657666-1000 -> DefaultScope {616C8BC5-CC0A-48D7-A6F0-A2AD941590EB} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-225253568-2950696071-1607657666-1000 -> {616C8BC5-CC0A-48D7-A6F0-A2AD941590EB} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-22] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files (x86)\PDF Architect 4\creator-ie-helper.dll [2016-08-05] (pdfforge GmbH)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\o2qp70bm.default-1447440277188 [2017-03-24]
FF Extension: (MEGA) - C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\o2qp70bm.default-1447440277188\Extensions\firefox@mega.co.nz.xpi [2017-03-23]
FF Extension: (Adblock Plus) - C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\o2qp70bm.default-1447440277188\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-25]
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2017-01-03] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2017-03-23] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_25_0_0_127.dll [2017-03-14] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-10-25] (Adobe Systems)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_127.dll [2017-03-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-04-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-04-03] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-02-09] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-02-09] (NVIDIA Corporation)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-25] (Adobe Systems)
FF Plugin-x32: PDF Architect 4 -> C:\Program Files (x86)\PDF Architect 4\np-previewer.dll [2016-08-05] (pdfforge GmbH)
FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin HKU\S-1-5-21-225253568-2950696071-1607657666-1000: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-10-25] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-02-27] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-01-28] ()
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [48640 2015-08-18] () [Datei ist nicht signiert]
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-04-24] () [Datei ist nicht signiert]
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243464 2013-09-02] (CyberLink)
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [240576 2013-10-06] (DTS, Inc)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342456 2016-04-13] (Futuremark)
R2 Hamachi2Svc; C:\Program Files (x86)\Hamachi\x64\hamachi-2.exe [3416584 2017-03-02] (LogMeIn Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2014-04-03] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-04-03] (Intel Corporation)
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\WAC\PSANHost.exe [109336 2016-10-25] (Panda Security, S.L.)
R2 ncpclcfg; C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncpclcfg.exe [531208 2015-01-20] (NCP engineering GmbH)
R2 ncprwsnt; C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncprwsnt.exe [1782024 2015-01-20] (NCP Engineering GmbH)
R2 ncpsec; C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncpsec.exe [125952 2015-01-20] () [Datei ist nicht signiert]
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462784 2017-02-10] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2017-01-20] (NVIDIA Corporation)
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2438880 2016-08-05] (pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-08-05] (pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-08-05] (pdfforge GmbH)
R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [972056 2016-05-18] (Â© pdfforge GmbH.)
R2 PSI_SVC_2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (arvato digital services llc)
R2 PSI_SVC_2_x64; C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (arvato digital services llc)
R2 PSUAService; C:\Program Files (x86)\Panda Security\WAC\PSUAService.exe [48584 2016-11-03] (Panda Security, S.L.)
R2 SamsungRapidSvc; C:\Windows\System32\RAPID\SamsungRapidSvc.exe [28848 2014-09-16] (Samsung Electronics Co., Ltd.)
R2 TeamViewer; c:\users\steffen\appdata\local\temp\teamviewer\TeamViewer_Service.exe [5495056 2015-06-01] (TeamViewer GmbH) <==== ACHTUNG
S3 vncserver; C:\Program Files\RealVNC\VNC Server\vncservice.exe [639808 2014-11-28] (RealVNC Ltd)
R2 WAHost; C:\Program Files (x86)\Panda Security\WaAgent\WAHost\WAHost.exe [573736 2016-11-11] (Panda Security International)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [672208 2017-02-03] (Wacom Technology, Corp.)
S2 NVIDIA Wireless Controller Service; "C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 AIDA64Driver; E:\9 Service\aida64extreme_5_70\kerneld.x64 [45728 2016-04-09] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-01-28] ()
R2 dvctprov; C:\Windows\System32\DRIVERS\dvctprov.sys [112888 2015-12-22] (Panda Security, S.L.)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [487704 2014-03-14] (Intel Corporation)
R3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [215608 2016-08-22] (GenesysLogic)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-05-28] (Intel Corporation)
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2014-10-23] (ASUSTeK Computer Inc.)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
S3 ncpfilt; C:\Windows\System32\DRIVERS\ncplelhp.sys [112560 2015-01-20] (NCP Engineering GmbH)
R3 ncplelhp; C:\Windows\System32\DRIVERS\ncplelhp.sys [112560 2015-01-20] (NCP Engineering GmbH)
R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [105232 2016-10-06] (Panda Security, S.L.)
R1 NNSDHCP; C:\Windows\System32\DRIVERS\NNSDhcp.sys [102160 2016-10-06] (Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [209168 2016-10-06] (Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [118032 2016-10-06] (Panda Security, S.L.)
R1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [123664 2016-10-06] (Panda Security, S.L.)
R1 NNSNAHSL; C:\Windows\System32\DRIVERS\NNSNAHSL.sys [75544 2016-10-20] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [114448 2016-10-06] (Panda Security, S.L.)
R1 NNSPIHSW; C:\Windows\System32\DRIVERS\NNSPihsw.sys [82192 2016-10-06] (Panda Security, S.L.)
R1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [133392 2016-10-06] (Panda Security, S.L.)
R1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [334096 2016-10-06] (Panda Security, S.L.)
R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [195344 2016-10-06] (Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [121104 2016-10-06] (Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [278944 2016-10-17] (Panda Security, S.L.)
R1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [123152 2016-10-06] (Panda Security, S.L.)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2017-01-20] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47672 2017-01-06] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57792 2017-01-20] (NVIDIA Corporation)
R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [178504 2016-10-24] (Panda Security, S.L.)
R0 PSINDvct; C:\Windows\System32\DRIVERS\PSINDvct.sys [62224 2015-01-23] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [132672 2016-10-24] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [206832 2016-10-24] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [132160 2016-10-24] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [145544 2016-10-24] (Panda Security, S.L.)
R2 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [115704 2016-10-24] (Panda Security, S.L.)
U3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [70360 2016-08-08] (Panda Security, S.L.)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
R0 SamsungRapidDiskFltr; C:\Windows\System32\DRIVERS\SamsungRapidDiskFltr.sys [268976 2014-09-16] (Samsung Electronics Co., Ltd.)
R0 SamsungRapidFSFltr; C:\Windows\System32\DRIVERS\SamsungRapidFSFltr.sys [111280 2014-09-16] (Samsung Electronics Co., Ltd.)
S3 Spyder4; C:\Windows\System32\DRIVERS\dccmtr.sys [15360 2013-09-18] (Datacolor)
S3 WacHidRouterPro; C:\Windows\System32\DRIVERS\wachidrouter.sys [119952 2017-01-25] (Wacom Technology)
S3 ZMHFSAudioSrv; C:\Windows\System32\drivers\zmhfsau.sys [53672 2015-07-02] (ZOOM)
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-03-24 00:13 - 2016-08-08 10:00 - 00070360 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSKMAD.sys
2017-03-23 23:06 - 2017-03-23 23:20 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-03-23 22:34 - 2017-03-23 22:34 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigneecd34df8fe3e448
2017-03-23 22:34 - 2017-03-23 22:34 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigne5afe8c8d014a945
2017-03-23 22:34 - 2017-03-23 22:34 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignc0dbdc73aaa69f6b
2017-03-23 22:34 - 2017-03-23 22:34 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign324f6f09f06e30e2
2017-03-23 21:03 - 2017-03-24 00:15 - 00000000 ____D C:\FRST
2017-03-23 21:03 - 2017-03-23 21:03 - 00000000 ____D C:\Users\Steffen\AppData\Local\Logishrd
2017-03-23 21:03 - 2017-03-23 21:03 - 00000000 ____D C:\Program Files\Logitech
2017-03-23 21:01 - 2014-10-23 22:57 - 00024824 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\IOMap64.sys
2017-03-23 20:08 - 2017-03-23 20:58 - 00530846 _____ C:\Windows\ntbtlog.txt
2017-03-23 19:21 - 2017-03-24 00:13 - 00000000 ___HD C:\Users\Public\Documents\AdobeGC
2017-03-22 22:33 - 2017-03-22 22:33 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign3522b414ee5f9289
2017-03-22 22:25 - 2017-03-22 22:25 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign9472ae9bca46bdfb
2017-03-22 22:25 - 2017-03-22 22:25 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign8b941b61aa63c200
2017-03-22 22:25 - 2017-03-22 22:25 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign4c799dbaa0836c71
2017-03-22 22:24 - 2017-03-22 22:24 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign52fb7dc6e2f2431f
2017-03-22 22:22 - 2017-03-22 22:22 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign5dfc0570b1545032
2017-03-22 22:22 - 2017-03-22 22:22 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign3f895039a947c9d0
2017-03-22 22:22 - 2017-03-22 22:22 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign3db1fd738c4fd133
2017-03-18 11:02 - 2017-03-18 11:02 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign3f32149163157501
2017-03-18 11:01 - 2017-03-18 11:01 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigna9ea2a2358f1a012
2017-03-18 11:01 - 2017-03-18 11:01 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign8e7bbfe0b29cce1b
2017-03-18 11:01 - 2017-03-18 11:01 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign632d91b43a2e33b3
2017-03-18 11:00 - 2017-03-18 11:00 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignbb01f50534baba9e
2017-03-18 11:00 - 2017-03-18 11:00 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignade4b4adec8c098f
2017-03-18 11:00 - 2017-03-18 11:00 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigna33aa977c8a4df07
2017-03-18 11:00 - 2017-03-18 11:00 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign603b4b6c84017ae5
2017-03-17 22:52 - 2017-03-17 22:52 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign9fcffb9c5b53b0c5
2017-03-17 22:52 - 2017-03-17 22:52 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign90deb015c280d81a
2017-03-17 22:52 - 2017-03-17 22:52 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign7bc768bc1b944b78
2017-03-17 22:52 - 2017-03-17 22:52 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign5b848efeca649f56
2017-03-14 19:18 - 2017-03-04 18:24 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-03-14 19:18 - 2017-03-04 17:39 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-03-14 19:18 - 2017-03-04 09:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-03-14 19:18 - 2017-03-04 09:20 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-03-14 19:18 - 2017-03-04 09:02 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-03-14 19:18 - 2017-03-04 09:01 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-03-14 19:18 - 2017-03-04 09:01 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-03-14 19:18 - 2017-03-04 09:01 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-03-14 19:18 - 2017-03-04 09:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-03-14 19:18 - 2017-03-04 08:59 - 02895360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-03-14 19:18 - 2017-03-04 08:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-03-14 19:18 - 2017-03-04 08:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-03-14 19:18 - 2017-03-04 08:48 - 25746944 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-03-14 19:18 - 2017-03-04 08:46 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-03-14 19:18 - 2017-03-04 08:45 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-03-14 19:18 - 2017-03-04 08:45 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-03-14 19:18 - 2017-03-04 08:45 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-03-14 19:18 - 2017-03-04 08:44 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-03-14 19:18 - 2017-03-04 08:36 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-03-14 19:18 - 2017-03-04 08:32 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-03-14 19:18 - 2017-03-04 08:31 - 06045696 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-03-14 19:18 - 2017-03-04 08:23 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-03-14 19:18 - 2017-03-04 08:21 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-03-14 19:18 - 2017-03-04 08:16 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-03-14 19:18 - 2017-03-04 08:16 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-03-14 19:18 - 2017-03-04 08:13 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-03-14 19:18 - 2017-03-04 08:11 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-03-14 19:18 - 2017-03-04 07:57 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-03-14 19:18 - 2017-03-04 07:55 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-03-14 19:18 - 2017-03-04 07:54 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-03-14 19:18 - 2017-03-04 07:52 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-03-14 19:18 - 2017-03-04 07:52 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-03-14 19:18 - 2017-03-04 07:26 - 15259648 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-03-14 19:18 - 2017-03-04 07:25 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-03-14 19:18 - 2017-03-04 07:12 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-03-14 19:18 - 2017-03-04 07:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-03-14 19:18 - 2017-03-04 05:18 - 20281856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-03-14 19:18 - 2017-03-02 19:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-03-14 19:18 - 2017-03-02 19:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-03-14 19:18 - 2017-03-02 19:01 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-03-14 19:18 - 2017-03-02 19:01 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-03-14 19:18 - 2017-03-02 19:01 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-03-14 19:18 - 2017-03-02 19:00 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-03-14 19:18 - 2017-03-02 18:55 - 02287104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-03-14 19:18 - 2017-03-02 18:54 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-03-14 19:18 - 2017-03-02 18:53 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-03-14 19:18 - 2017-03-02 18:51 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-03-14 19:18 - 2017-03-02 18:50 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-03-14 19:18 - 2017-03-02 18:49 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-03-14 19:18 - 2017-03-02 18:49 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-03-14 19:18 - 2017-03-02 18:41 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-03-14 19:18 - 2017-03-02 18:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-03-14 19:18 - 2017-03-02 18:35 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-03-14 19:18 - 2017-03-02 18:32 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-03-14 19:18 - 2017-03-02 18:31 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-03-14 19:18 - 2017-03-02 18:29 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-03-14 19:18 - 2017-03-02 18:28 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-03-14 19:18 - 2017-03-02 18:22 - 04604416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-03-14 19:18 - 2017-03-02 18:21 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-03-14 19:18 - 2017-03-02 18:19 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-03-14 19:18 - 2017-03-02 18:17 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-03-14 19:18 - 2017-03-02 18:17 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-03-14 19:18 - 2017-03-02 18:11 - 13654528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-03-14 19:18 - 2017-03-02 17:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-03-14 19:18 - 2017-03-02 17:50 - 01312768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-03-14 19:18 - 2017-03-02 17:50 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-03-14 19:18 - 2017-02-11 16:58 - 00462848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-03-14 19:18 - 2017-02-11 16:58 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-03-14 19:18 - 2017-02-11 16:58 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-03-14 19:18 - 2017-02-10 17:32 - 00803328 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-03-14 19:18 - 2017-02-10 17:32 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-03-14 19:18 - 2017-02-10 17:17 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-03-14 19:18 - 2017-02-10 17:17 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-03-14 19:18 - 2017-02-10 15:33 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-03-14 19:18 - 2017-02-09 17:36 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-03-14 19:18 - 2017-02-09 17:35 - 05548264 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-03-14 19:18 - 2017-02-09 17:35 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-03-14 19:18 - 2017-02-09 17:35 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-03-14 19:18 - 2017-02-09 17:35 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-03-14 19:18 - 2017-02-09 17:33 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-03-14 19:18 - 2017-02-09 17:32 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:19 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-03-14 19:18 - 2017-02-09 17:19 - 03945192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-03-14 19:18 - 2017-02-09 17:16 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:14 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 17:03 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-03-14 19:18 - 2017-02-09 17:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-03-14 19:18 - 2017-02-09 17:03 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-03-14 19:18 - 2017-02-09 17:02 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-03-14 19:18 - 2017-02-09 17:00 - 03220480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-03-14 19:18 - 2017-02-09 16:59 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-03-14 19:18 - 2017-02-09 16:58 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-03-14 19:18 - 2017-02-09 16:55 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-03-14 19:18 - 2017-02-09 16:55 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-03-14 19:18 - 2017-02-09 16:55 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-03-14 19:18 - 2017-02-09 16:54 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-03-14 19:18 - 2017-02-09 16:54 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-03-14 19:18 - 2017-02-09 16:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-03-14 19:18 - 2017-02-09 16:51 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcsPlugInService.dll
2017-03-14 19:18 - 2017-02-09 16:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-03-14 19:18 - 2017-02-09 16:50 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-03-14 19:18 - 2017-02-09 16:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-03-14 19:18 - 2017-02-09 16:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-03-14 19:18 - 2017-02-09 16:49 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-03-14 19:18 - 2017-02-09 16:49 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 16:49 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 16:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 16:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-03-14 19:18 - 2017-02-09 15:06 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-03-14 19:18 - 2017-02-09 15:06 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-03-14 19:18 - 2017-02-06 17:14 - 00733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-03-14 19:18 - 2017-01-13 19:00 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-03-14 19:18 - 2017-01-13 19:00 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2017-03-14 19:18 - 2017-01-13 18:45 - 00741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-03-14 19:18 - 2017-01-13 18:45 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2017-03-14 19:18 - 2017-01-11 19:01 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-03-14 19:18 - 2017-01-11 19:01 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2017-03-14 19:18 - 2017-01-11 18:43 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2017-03-14 19:18 - 2017-01-11 18:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2017-03-14 19:18 - 2017-01-06 19:00 - 01574912 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-03-14 19:18 - 2017-01-06 18:44 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-03-14 19:13 - 2017-02-23 00:42 - 00084712 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-03-14 19:13 - 2017-02-23 00:37 - 01285632 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-03-14 19:13 - 2017-02-18 15:05 - 01609216 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-03-14 19:13 - 2017-02-18 15:05 - 00646656 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-03-14 19:13 - 2016-12-31 16:36 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-03-14 19:13 - 2016-12-31 16:36 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-03-14 19:13 - 2016-12-31 16:36 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2017-03-14 19:13 - 2016-12-31 16:36 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-03-14 19:13 - 2016-12-31 16:36 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-03-13 19:45 - 2017-03-13 19:45 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignf828a9e4a43e9359
2017-03-13 19:45 - 2017-03-13 19:45 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignaf948186c2b62e09
2017-03-13 19:45 - 2017-03-13 19:45 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign793062088fc6e40d
2017-03-10 17:35 - 2017-03-10 17:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2017-03-09 19:44 - 2017-03-09 19:44 - 00000000 ____D C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-03-08 13:07 - 2017-03-11 17:14 - 00975215 _____ C:\Users\Steffen\Desktop\Recipe_Crafting_for_Consumables_v12.pdf
2017-03-06 13:56 - 2017-03-06 13:56 - 00000887 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2017-03-06 13:56 - 2017-03-06 13:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hamachi
2017-03-06 13:56 - 2017-03-06 13:56 - 00000000 ____D C:\Program Files (x86)\Hamachi
2017-03-05 20:17 - 2017-03-05 20:17 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigne320bf1d6478ab3d
2017-03-05 20:17 - 2017-03-05 20:17 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign8d28c75275aa1bf8
2017-03-05 20:17 - 2017-03-05 20:17 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign4830e0a65f509be5
2017-03-05 20:17 - 2017-03-05 20:17 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign04c03f3782d6204c
2017-03-05 20:17 - 2017-03-05 20:17 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign020bb32d7c0a7120
2017-03-05 19:57 - 2017-03-05 19:57 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignc075e6a626a5e9d7
2017-03-05 19:57 - 2017-03-05 19:57 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignaf34f736d7c2ec7f
2017-03-05 19:57 - 2017-03-05 19:57 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign4a8aabf8564eb668
2017-03-05 19:57 - 2017-03-05 19:57 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign125d6688a2a4bc82
2017-03-05 19:53 - 2017-03-05 19:53 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignfd524355622e66c0
2017-03-05 19:53 - 2017-03-05 19:53 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigne043021ad060ac32
2017-03-05 19:53 - 2017-03-05 19:53 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign1d2e85d2c8c2f32c
2017-03-05 19:53 - 2017-03-05 19:53 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign0f3a575fe9274ac6
2017-03-05 19:53 - 2017-03-05 19:53 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign0c3cf78944823d6c
2017-03-05 18:37 - 2017-03-05 18:37 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign3a267b3d8503c607
2017-03-05 18:37 - 2017-03-05 18:37 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign0cc46aabd2a7495e
2017-03-05 18:05 - 2017-03-05 18:05 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignd879ed78251f15fb
2017-03-05 18:05 - 2017-03-05 18:05 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign9bb69a483d131560
2017-03-05 18:05 - 2017-03-05 18:05 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign8b56a28b323211bf
2017-03-03 00:56 - 2017-03-03 00:56 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign5616c423a719f841
2017-03-03 00:47 - 2017-03-03 00:47 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign9049144652823399
2017-03-03 00:44 - 2017-03-03 00:44 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignd07d9faac3df70b0
2017-03-03 00:44 - 2017-03-03 00:44 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigncbabd037933ce7f5
2017-03-03 00:44 - 2017-03-03 00:44 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignc0234fece709c698
2017-03-03 00:44 - 2017-03-03 00:44 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign3ad3f8bfc15f5fc9
2017-03-03 00:43 - 2017-03-03 00:43 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignb1df85c51ff4016a
2017-03-03 00:43 - 2017-03-03 00:43 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign950ede8506014384
2017-03-03 00:43 - 2017-03-03 00:43 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign73a926123a22ab1a
2017-03-03 00:43 - 2017-03-03 00:43 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign53a04fdad0c66284
2017-03-03 00:31 - 2017-03-03 00:31 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignefedc1ee99a1bf3f
2017-03-03 00:31 - 2017-03-03 00:31 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign9e31a00e59b440da
2017-03-03 00:31 - 2017-03-03 00:31 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign879ba87f35a9a340
2017-03-03 00:31 - 2017-03-03 00:31 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign31b8190032a3f9cc
2017-03-03 00:30 - 2017-03-03 00:30 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign87334d25c949180d
2017-03-03 00:30 - 2017-03-03 00:30 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign7519ec81d10c48dc
2017-03-03 00:30 - 2017-03-03 00:30 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign7514ec56e6fdb2b6
2017-03-03 00:30 - 2017-03-03 00:30 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign0330f063eb3ff62e
2017-03-03 00:26 - 2017-03-03 00:26 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignd983f450b7072858
2017-03-03 00:26 - 2017-03-03 00:26 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignc4926d3f1ca23f1a
2017-03-03 00:26 - 2017-03-03 00:26 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign92ce3fb0f86a5a82
2017-03-03 00:26 - 2017-03-03 00:26 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign8bcfb47ee3618480
2017-03-03 00:22 - 2017-03-03 00:22 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignac8006f6b493fd54
2017-03-03 00:22 - 2017-03-03 00:22 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignab888dc8f7228f3d
2017-03-03 00:22 - 2017-03-03 00:22 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign7244a78267ea7a99
2017-03-03 00:22 - 2017-03-03 00:22 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign425c3ad00ee18c62
2017-03-03 00:22 - 2017-03-03 00:22 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign2d3896876e76484d
2017-03-03 00:21 - 2017-03-03 00:21 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignc6d03791164bf351
2017-03-03 00:21 - 2017-03-03 00:21 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign5d7c6ef84c8cad53
2017-03-03 00:21 - 2017-03-03 00:21 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign54329148f4addb80
2017-03-03 00:21 - 2017-03-03 00:21 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign02e71ebd9e1a6da5
2017-03-03 00:19 - 2017-03-03 00:19 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign4aa60639810d650b
2017-03-03 00:19 - 2017-03-03 00:19 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign4937233701222918
2017-03-03 00:19 - 2017-03-03 00:19 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign1ef408ec67522db0
2017-03-03 00:19 - 2017-03-03 00:19 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign168e210977ff1ed3
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignb24173af6321d48c
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign9b00d10d3414cd7b
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign97065b74af83a60c
2017-03-03 00:16 - 2017-03-03 00:16 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign05751b2af7e46dea
2017-03-03 00:08 - 2017-03-03 00:08 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignd681a7e18e4c466b
2017-03-03 00:08 - 2017-03-03 00:08 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigna30f07bf11c794f8
2017-03-03 00:08 - 2017-03-03 00:08 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign999bf919626f5a6c
2017-03-03 00:08 - 2017-03-03 00:08 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign04405e4df8660f49
2017-03-03 00:06 - 2017-03-03 00:06 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett
2017-03-03 00:05 - 2017-03-03 00:05 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign6b596bd61b809391
2017-03-03 00:05 - 2017-03-03 00:05 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign41018435c98d87e2
2017-03-03 00:05 - 2017-03-03 00:05 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign2152e5640299c5f5
2017-03-03 00:03 - 2017-03-03 00:03 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign923550409788ab20
2017-03-03 00:03 - 2017-03-03 00:03 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign3fbd8590cda9f3d5
2017-03-03 00:03 - 2017-03-03 00:03 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign1db0314ce54e0893
2017-03-03 00:03 - 2017-03-03 00:03 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign0fc222487ec798b0
2017-03-03 00:01 - 2017-03-03 00:01 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign78111f7d587d52a4
2017-03-03 00:01 - 2017-03-03 00:01 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign38458270ff40727f
2017-03-03 00:01 - 2017-03-03 00:01 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign31e9691cef61e7d5
2017-03-03 00:01 - 2017-03-03 00:01 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign246adc359cff76d8
2017-03-03 00:00 - 2017-03-03 00:00 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigneae252886290de0e
2017-03-03 00:00 - 2017-03-03 00:00 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignbf3736a77157b9f0
2017-03-03 00:00 - 2017-03-03 00:00 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign75d975a21d357a9a
2017-03-03 00:00 - 2017-03-03 00:00 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign5a7e8d4915cc41a8
2017-03-02 23:54 - 2017-03-02 23:54 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigna9f110d81b645b7c
2017-03-02 23:53 - 2017-03-02 23:53 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignb017b6d1d9f51967
2017-03-02 23:53 - 2017-03-02 23:53 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign625e9bb3abc44c46
2017-03-02 23:53 - 2017-03-02 23:53 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign2944c45181046ebb
2017-03-02 15:47 - 2017-03-02 15:47 - 00000000 ____D C:\Users\Steffen\ansel
2017-03-01 23:51 - 2017-03-01 23:51 - 00000000 ____D C:\Users\Steffen\Documents\League of Legends
2017-03-01 22:58 - 2017-03-01 22:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignebc81f377b9bffee
2017-03-01 22:58 - 2017-03-01 22:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignb694f4a6c45efd46
2017-03-01 22:58 - 2017-03-01 22:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign23869647cf2702cb
2017-03-01 20:33 - 2017-03-10 17:35 - 00000000 ____D C:\Users\Steffen\AppData\Roaming\Riot Games
2017-03-01 18:29 - 2017-02-09 23:39 - 00134592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-03-01 18:27 - 2017-02-10 01:52 - 40192056 _____ C:\Windows\system32\nvcompiler.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 35272760 _____ C:\Windows\SysWOW64\nvcompiler.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 34937280 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 28212280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 19110088 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 19006832 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 16398896 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 14674896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 14373824 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2017-03-01 18:27 - 2017-02-10 01:52 - 13377072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 11122912 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 11019704 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 09305984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 08990072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 03627064 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 03187256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 01983424 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437866.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 01589696 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437866.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 01051584 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00989120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00961080 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00912440 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00687224 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00611384 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00576192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00504104 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00500792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00425288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00408272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00170360 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00153184 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2017-03-01 18:27 - 2017-02-10 01:52 - 00131720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2017-02-28 14:50 - 2017-03-01 18:01 - 00000000 ____D C:\Users\Steffen\Desktop\Wasser
2017-02-28 14:21 - 2017-02-28 14:21 - 00170626 _____ C:\Users\Steffen\Desktop\RE Pfosten *****.pdf
2017-02-28 14:21 - 2017-02-28 14:21 - 00118098 _____ C:\Users\Steffen\Desktop\********#001_01.pdf
2017-02-27 19:58 - 2017-02-27 19:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign743238a32e3935e0
2017-02-27 19:58 - 2017-02-27 19:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign256a8eae710fe0a1
2017-02-27 19:58 - 2017-02-27 19:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign096dbc766b43beb6
2017-02-27 19:58 - 2017-02-27 19:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign045cf28ff3c3aae5
2017-02-27 17:12 - 2017-02-27 17:12 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign91f9eab813b431a2
2017-02-27 17:12 - 2017-02-27 17:12 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign28892ea7e82b8d5d
2017-02-27 17:11 - 2017-02-27 17:11 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignc89e0dedabf009ed
2017-02-27 17:11 - 2017-02-27 17:11 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign238d5f5b27072f77
2017-02-24 14:43 - 2017-03-18 10:58 - 00000000 ____D C:\Users\Steffen\Desktop\Versicherungen
2017-02-24 14:43 - 2017-02-24 14:43 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigncb27a1abed96655d
2017-02-24 14:43 - 2017-02-24 14:43 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignc6915b5b9dd5d53d
2017-02-24 14:43 - 2017-02-24 14:43 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign3682da2c86b92b7b
2017-02-22 17:14 - 2017-02-22 17:14 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign5970cf5eb684722e
2017-02-22 17:14 - 2017-02-22 17:14 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign2ddc9204c3239c69
2017-02-22 17:14 - 2017-02-22 17:14 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign2c20ca73eeee0b02
2017-02-22 12:32 - 2017-02-22 12:32 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignde45a7d54d3921a0
2017-02-22 12:32 - 2017-02-22 12:32 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign75d631e6d9aa8be0
2017-02-22 12:32 - 2017-02-22 12:32 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign41b7491243c898c3
2017-02-22 11:58 - 2017-02-22 11:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign7e0a2e9df570596d
2017-02-22 11:58 - 2017-02-22 11:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign18e2d90631db7daf
2017-02-22 11:58 - 2017-02-22 11:58 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign0feebbf7ca457958
2017-02-22 11:57 - 2017-02-22 11:57 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigndee63ce8d1f0f003
2017-02-22 11:57 - 2017-02-22 11:57 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign17abefa566ed7402
2017-02-22 11:57 - 2017-02-22 11:57 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign05dfedc94fd6f8bd
2017-02-22 11:48 - 2017-02-22 11:48 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignec0c103d29533501
2017-02-22 11:48 - 2017-02-22 11:48 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignc274e8b137416c30
2017-02-22 11:48 - 2017-02-22 11:48 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign9f15f55a71780f5f
2017-02-22 11:02 - 2017-02-22 17:26 - 02902016 _____ C:\Users\Steffen\Desktop\V.ppt
2017-02-22 10:56 - 2017-02-22 10:56 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignf4854b59b824bdc6
2017-02-22 10:56 - 2017-02-22 10:56 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignca532994e3c17e34
2017-02-22 10:56 - 2017-02-22 10:56 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsigna25ecca9274336a0
2017-02-22 01:37 - 2017-02-22 01:37 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsignbb3dc7c1099aef12
2017-02-22 01:37 - 2017-02-22 01:37 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign9a98ed49c533bda2
2017-02-22 01:37 - 2017-02-22 01:37 - 00000000 ____D C:\Users\Steffen\AppData\Local\Tempzxpsign94125149cf1ed793
2017-02-22 01:18 - 2017-02-22 01:23 - 00000000 ____D C:\Users\Steffen\Desktop\Videos Canada
2017-02-22 00:12 - 2017-02-22 13:45 - 00000000 ____D C:\Users\Steffen\Desktop\V

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-03-24 00:14 - 2016-11-16 13:52 - 00000000 ____D C:\Users\Steffen\AppData\LocalLow\Mozilla
2017-03-24 00:13 - 2016-12-08 10:50 - 00000000 ____D C:\ProgramData\NVIDIA
2017-03-24 00:13 - 2016-08-21 18:27 - 00000000 ____D C:\Users\Steffen\AppData\Local\LogMeIn Hamachi
2017-03-24 00:13 - 2015-07-29 16:29 - 00000000 ___RD C:\Users\Steffen\Creative Cloud Files
2017-03-24 00:13 - 2015-01-28 20:58 - 00000344 _____ C:\Windows\lgfwup.ini
2017-03-24 00:13 - 2015-01-28 20:58 - 00000000 ____D C:\Program Files (x86)\lg_fwupdate
2017-03-24 00:13 - 2015-01-28 20:54 - 00000000 ____D C:\Users\Steffen\AppData\Local\Adobe
2017-03-24 00:12 - 2016-11-04 17:19 - 00000346 _____ C:\Windows\Tasks\Health-Check-auto.job
2017-03-24 00:12 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-24 00:04 - 2015-02-02 21:10 - 00000000 ____D C:\Users\Steffen\AppData\Roaming\vlc
2017-03-24 00:02 - 2015-01-31 15:37 - 00000000 ___RD C:\Users\Steffen\Desktop\System
2017-03-23 23:59 - 2009-07-14 05:45 - 00025152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-03-23 23:59 - 2009-07-14 05:45 - 00025152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-03-23 23:57 - 2011-04-12 08:43 - 00663500 _____ C:\Windows\system32\perfh007.dat
2017-03-23 23:57 - 2011-04-12 08:43 - 00136320 _____ C:\Windows\system32\perfc007.dat
2017-03-23 23:57 - 2009-07-14 06:13 - 01528896 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-23 23:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-03-23 23:50 - 2015-06-10 21:24 - 00000000 ____D C:\Users\Steffen\AppData\Local\CrashDumps
2017-03-23 23:22 - 2015-06-02 14:38 - 00001232 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-225253568-2950696071-1607657666-1000UA.job
2017-03-23 23:21 - 2015-01-28 20:28 - 00003934 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{E5B51F7A-A4D6-4F95-A8E5-ADE925EF3107}
2017-03-23 23:00 - 2016-03-10 00:25 - 00001788 _____ C:\Users\Steffen\AppData\Roaming\Coolorus 2
2017-03-23 22:52 - 2015-07-29 19:05 - 00000000 ____D C:\Users\Steffen\AppData\Roaming\TS3Client
2017-03-23 21:03 - 2015-02-13 15:50 - 00000000 ____D C:\Users\Public\Documents\Logishrd
2017-03-23 21:03 - 2015-02-13 15:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2017-03-23 21:03 - 2015-02-13 15:50 - 00000000 ____D C:\ProgramData\Logitech
2017-03-23 21:03 - 2015-02-13 15:50 - 00000000 ____D C:\ProgramData\Logishrd
2017-03-23 21:03 - 2015-02-13 15:50 - 00000000 ____D C:\Program Files\Common Files\LogiShrd
2017-03-23 19:28 - 2015-06-02 14:38 - 00000000 ____D C:\Users\Steffen\AppData\Local\Dropbox
2017-03-21 15:44 - 2015-02-22 00:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-03-20 13:56 - 2016-12-14 15:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-03-18 10:55 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2017-03-15 16:01 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2017-03-15 14:31 - 2009-07-14 05:45 - 05117544 _____ C:\Windows\system32\FNTCACHE.DAT
2017-03-15 14:30 - 2015-01-28 22:39 - 00000000 ___SD C:\Windows\system32\CompatTel
2017-03-15 14:30 - 2015-01-28 22:39 - 00000000 ____D C:\Windows\system32\appraiser
2017-03-15 14:30 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\DVD Maker
2017-03-14 23:42 - 2015-01-29 16:24 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2017-03-14 23:42 - 2015-01-28 21:14 - 00000000 ____D C:\Windows\system32\MRT
2017-03-14 23:41 - 2015-01-28 21:14 - 138634176 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-03-14 23:40 - 2015-01-28 21:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-03-14 23:39 - 2015-01-28 21:30 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-03-14 23:39 - 2015-01-28 21:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-03-14 21:20 - 2015-02-24 19:40 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-03-14 21:20 - 2015-02-24 19:40 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-03-14 21:20 - 2015-02-24 19:40 - 00004366 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-03-14 21:20 - 2015-02-24 19:40 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-03-14 21:20 - 2015-02-24 19:40 - 00000000 ____D C:\Windows\system32\Macromed
2017-03-13 20:05 - 2016-03-02 15:46 - 00000000 ____D C:\Users\Steffen\Desktop\Games
2017-03-13 19:57 - 2015-01-31 18:25 - 00000000 ____D C:\Users\Steffen\AppData\Roaming\KeePass
2017-03-12 19:10 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-03-11 10:22 - 2015-06-02 14:38 - 00001180 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-225253568-2950696071-1607657666-1000Core.job
2017-03-09 22:27 - 2015-04-05 20:16 - 00000000 ____D C:\Users\Steffen\AppData\Roaming\.minecraft
2017-03-09 19:44 - 2015-02-03 20:11 - 00000000 ____D C:\Users\Steffen\AppData\Roaming\Dropbox
2017-03-08 13:06 - 2015-01-28 20:18 - 00000000 ____D C:\ProgramData\Adobe
2017-03-06 21:47 - 2016-09-16 13:18 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi
2017-03-06 21:47 - 2016-09-16 13:18 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi
2017-03-03 00:06 - 2015-06-11 16:13 - 00000000 ____D C:\Program Files\Tablet
2017-03-02 15:47 - 2015-01-28 19:34 - 00000000 ____D C:\Users\Steffen
2017-03-02 13:26 - 2016-09-16 13:17 - 00034720 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys
2017-03-01 18:29 - 2016-12-08 10:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-03-01 18:29 - 2016-03-12 10:18 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-03-01 18:29 - 2015-01-28 20:40 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-02-27 19:58 - 2015-02-01 08:45 - 00000000 ____D C:\Users\Steffen\AppData\Local\Lazy Nezumi Pro
2017-02-27 17:28 - 2016-06-30 18:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lazy Nezumi Pro
2017-02-27 17:28 - 2016-06-30 18:14 - 00000000 ____D C:\Program Files (x86)\Lazy Nezumi Pro
2017-02-22 15:11 - 2016-04-20 16:51 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-03-10 00:25 - 2017-03-23 23:00 - 0001788 _____ () C:\Users\Steffen\AppData\Roaming\Coolorus 2
2015-02-01 08:23 - 2015-02-01 08:23 - 0000028 _____ () C:\Users\Steffen\AppData\Roaming\kulerdata.json
2015-09-05 13:58 - 2016-07-09 07:18 - 0069632 ___SH () C:\Users\Steffen\AppData\Roaming\Thumbs.db
2016-11-02 21:47 - 2016-11-02 21:47 - 0001557 _____ () C:\Users\Steffen\AppData\Local\recently-used.xbel
2015-01-28 19:56 - 2015-01-28 19:56 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-12-02 22:49 - 2015-12-02 22:49 - 0000121 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2016-12-26 11:24 - 2017-01-13 14:42 - 0005110 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-26 11:24 - 2017-01-13 00:59 - 0005110 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1

Einige Dateien in TEMP:
====================
2008-11-10 21:54 - 2008-11-10 21:54 - 0106496 _____ (Microsoft Corporation) C:\Users\Steffen\AppData\Local\Temp\GameuxInstallHelper.dll
2016-12-26 11:23 - 2015-08-08 20:11 - 0134656 _____ (Irfan Skiljan, IrfanView) C:\Users\Steffen\AppData\Local\Temp\iv_uninstall.exe
2016-12-08 10:49 - 2017-01-20 15:07 - 0352704 _____ (NVIDIA Corporation) C:\Users\Steffen\AppData\Local\Temp\nvStInst.exe
2016-12-08 10:51 - 2016-11-17 14:44 - 1135552 _____ (NVIDIA Corporation) C:\Users\Steffen\AppData\Local\Temp\NvTelemetry.dll
2016-12-08 10:51 - 2017-01-06 02:10 - 0255032 _____ (NVIDIA Corporation) C:\Users\Steffen\AppData\Local\Temp\NvTelemetryAPI32.dll
2016-12-08 10:51 - 2017-01-06 02:10 - 0335928 _____ (NVIDIA Corporation) C:\Users\Steffen\AppData\Local\Temp\NvTelemetryAPI64.dll
2006-10-27 14:01 - 2006-10-27 14:01 - 0049152 _____ () C:\Users\Steffen\AppData\Local\Temp\SettingUpdate.exe
2016-12-27 00:13 - 2011-10-12 23:12 - 0314272 _____ () C:\Users\Steffen\AppData\Local\Temp\Uninstaller-12212.exe
2016-12-27 00:11 - 2011-10-12 23:12 - 0314272 _____ () C:\Users\Steffen\AppData\Local\Temp\Uninstaller-1976.exe
2016-12-27 00:11 - 2011-10-12 23:12 - 0314272 _____ () C:\Users\Steffen\AppData\Local\Temp\Uninstaller-9912.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-03-14 19:40

==================== Ende von FRST.txt ============================

Hermundure · 24.03.2017, 00:18

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15-03-2017
durchgeführt von Steffen (24-03-2017 00:15:49)
Gestartet von C:\Users\Steffen\Desktop\System\Malware Removal
Windows 7 Professional Service Pack 1 (X64) (2015-01-28 18:34:35)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-225253568-2950696071-1607657666-500 - Administrator - Disabled)
Gast (S-1-5-21-225253568-2950696071-1607657666-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-225253568-2950696071-1607657666-1002 - Limited - Enabled)
Steffen (S-1-5-21-225253568-2950696071-1607657666-1000 - Administrator - Enabled) => C:\Users\Steffen

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Panda Endpoint Protection (Enabled - Up to date) {46AEFD02-ACA3-E038-1FA5-4A15EFD361E0}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Panda Endpoint Protection (Enabled - Up to date) {FDCF1CE6-8A99-EFB6-2515-716794542B5D}
FW: LANCOM Advanced VPN Client (Disabled) {BEB21647-135A-7893-42A0-BBC3960C218D}
FW: Panda Endpoint Protection Firewall (Disabled) {7E957C27-E6CC-E160-34FA-E3201100269B}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

3DMark (HKLM-x32\...\{b7d2ce14-2f17-410d-bea7-9126b9d4bb31}) (Version: 2.0.2067.0 - Futuremark)
3DMark (Version: 2.0.2067.0 - Futuremark) Hidden
Action! (HKLM-x32\...\Mirillis Action!) (Version: 1.24.3 - Mirillis)
Adobe Bridge CC 2017 (HKLM-x32\...\KBRG_7_0) (Version: 7.0 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.9.1.335 - Adobe Systems Incorporated)
Adobe Extension Manager CC (HKLM-x32\...\{244FD30F-63F1-49B9-9D98-1150FF4FFCB1}) (Version: 7.3.2 - Adobe Systems Incorporated)
Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.127 - Adobe Systems Incorporated)
Adobe Photoshop CC 2017 (HKLM-x32\...\PHSP_18_0_1) (Version: 18.0.1 - Adobe Systems Incorporated)
Adobe Reader XI  MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.00 - Adobe Systems Incorporated)
Ansel (Version: 378.66 - NVIDIA Corporation) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{D079CAAD-0C31-47A2-9AF5-A82F9CD9B221}) (Version: 5.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{64E6007B-1DA9-42CD-BBE4-D5FA67A7C71D}) (Version: 5.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.15.0 - Asmedia Technology)
ASUS GPU TweakII (HKLM-x32\...\InstallShield_{0075AAC2-EA9F-490E-83F7-5D5F81EB2A43}) (Version: 1.1.8.3 - ASUSTek COMPUTER INC.)
ASUS GPU TweakII (x32 Version: 1.1.8.3 - ASUSTek COMPUTER INC.) Hidden
Autodesk SketchBook (HKLM\...\{395089E8-C8F2-4280-BB2D-115E72A4EC0E}) (Version: 8.31.0000 - Autodesk)
Battle Brothers (HKLM\...\Steam App 365360) (Version:  - Overhype Studios)
bl (x32 Version: 1.0.0 - Your Company Name) Hidden
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version:  - Canon Inc.)
Canon MG7100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG7100_series) (Version: 1.01 - Canon Inc.)
Castle In The Darkness (HKLM-x32\...\Steam App 262960) (Version:  - Matt Kap)
Chaos Reborn (HKLM\...\Steam App 319050) (Version:  - Snapshot Games Inc.)
ColorNavigator 6 (HKLM\...\{207AD5A9-A797-4C4B-B8C5-1CB8B54972C8}_is1) (Version: 6.4.15 - EIZO Corporation)
Contour Shuttle (HKLM-x32\...\{51ADFD15-6B63-4F8E-8076-F4E31FFEE32A}) (Version: 2.13.1 - Contour Design, Inc.)
Corel Painter 2017 - Content (Version: 16.1 - Corel Corporation) Hidden
Corel Painter 2017 - Core (Version: 16.1 - Corel Corporation) Hidden
Corel Painter 2017 - Corex64 (Version: 16.0 - Corel Corporation) Hidden
Corel Painter 2017 - Corex64 (Version: 16.1 - Corel Corporation) Hidden
Corel Painter 2017 - CT (Version: 16.1 - Corel Corporation) Hidden
Corel Painter 2017 - DE (Version: 16.1 - Corel Corporation) Hidden
Corel Painter 2017 - EN (Version: 16.1 - Corel Corporation) Hidden
Corel Painter 2017 - FR (Version: 16.1 - Corel Corporation) Hidden
Corel Painter 2017 - IPM (Version: 16.1 - Corel Corporation) Hidden
Corel Painter 2017 - IPM Content (Version: 16.1 - Corel Corporation) Hidden
Corel Painter 2017 - JP (Version: 16.1 - Corel Corporation) Hidden
Corel Painter 2017 (HKLM\...\_{0EB4382B-8422-4059-8027-3403DE8E8C3F}) (Version: 16.1.0.456 - Corel Corporation)
Corel Update Manager (Version: 2.3.129 - Corel corporation) Hidden
Corel Update Manager (x32 Version: 2.3.77 - Corel corporation) Hidden
Crusader Kings II (HKLM-x32\...\Steam App 203770) (Version:  - Paradox Development Studio)
CyberLink BD_3D Advisor 2.0 (HKLM-x32\...\{2D2D8FE2-605C-4D3C-B706-36E981E7EEF0}) (Version: 2.0.6410 - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)
Dark Age of Camelot (HKLM-x32\...\Dark Age of Camelot) (Version:  - Electronic Arts)
DDS Viewer (HKLM-x32\...\{707333E0-C796-4E2D-B0DA-5A429706C361}_is1) (Version:  - IdeaMK)
Delver (HKLM\...\Steam App 249630) (Version:  - Priority Interrupt)
Die Siedler II - Die nächste Generation (HKLM-x32\...\S2TNG) (Version:  - )
Discord (HKU\S-1-5-21-225253568-2950696071-1607657666-1000\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)
Distant Worlds: Universe (HKLM\...\Steam App 261470) (Version:  - Code Force)
Dominions 4 (HKLM\...\Steam App 259060) (Version:  - Illwinter Game Design)
Dropbox (HKU\S-1-5-21-225253568-2950696071-1607657666-1000\...\Dropbox) (Version: 21.4.25 - Dropbox, Inc.)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
Factorio (HKLM\...\Steam App 427520) (Version:  - Wube Software LTD.)
FastPictureViewer Codec Pack 3.7.0.94 (HKLM-x32\...\{689AED04-976D-4E0E-9E9D-7042E5921FA5}) (Version: 3.7.0.94 - Axel Rietschin Software Developments)
Flame Painter 3 Pro (HKLM\...\Flame Painter 3 Pro_is1) (Version: 3.2.0 - Escape Motions, s.r.o)
Futuremark SystemInfo (HKLM-x32\...\{5052D282-C9AE-48CC-A9F5-17058BEEAA50}) (Version: 4.45.590.0 - Futuremark)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
GPUTweakStreaming (HKLM-x32\...\InstallShield_{D2A41AA7-4313-43D5-AA39-7E3FBBE0556D}) (Version: 1.0.3.5 - ASUS)
GPUTweakStreaming (x32 Version: 1.0.3.5 - ASUS) Hidden
Greenshot 1.2.4.10 (HKLM\...\Greenshot_is1) (Version: 1.2.4.10 - Greenshot)
Gremlins, Inc. (HKLM\...\Steam App 369990) (Version:  - Alexey Bokulev)
H_and_F_Series_ASIO64 (HKLM\...\{527E253F-3E4D-4F33-AA7B-896E5A881276}) (Version: 3.0.1.5 - ZOOM)
IaaM_RC_P2016 (x32 Version: 1.00.0000 - Your Company Name) Hidden
IconHandler 64 bit (Version: 2.1 - Corel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.1.1000 - Intel Corporation)
Intel(R) Network Connections 19.1.51.0 (HKLM\...\PROSetDX) (Version: 19.1.51.0 - Intel)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{7224B7CE-196C-4E2A-A1AE-1D7BF259FD36}) (Version: 3.4.1942 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.34 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.17 - Intel(R) Corporation) Hidden
Invisible, Inc. (HKLM-x32\...\Steam App 243970) (Version:  - Klei Entertainment)
iTunes (HKLM\...\{81C96689-EA5B-4B7D-A04F-16326EC51BC2}) (Version: 12.5.4.42 - Apple Inc.)
KeePass Password Safe 2.32 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.32 - Dominik Reichl)
LANCOM Advanced VPN Client (HKLM\...\{81C44F7F-5A1E-4FA9-ADE2-B84C866B8091}) (Version: 3.00.21499 - NCP engineering GmbH)
Lazy Nezumi Pro 17.2.24.1614 (HKLM-x32\...\Lazy Nezumi Pro_is1) (Version: 17.2.24.1614 - Guillaume Stordeur)
League of Legends (HKLM-x32\...\League of Legends 4.2.1) (Version: 4.2.1 - Riot Games)
League of Legends (x32 Version: 4.2.1 - Riot Games) Hidden
LG ODD Auto Firmware Update (HKLM-x32\...\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 10.01.0712.01 - )
Logitech Gaming Software 8.58 (HKLM\...\Logitech Gaming Software) (Version: 8.58.177 - Logitech Inc.)
Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.83 - Logitech)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.558 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.558 - LogMeIn, Inc.) Hidden
Lucas Schach v. 9.08 (HKLM-x32\...\El ajedrez de Lucas_is1) (Version:  - )
Manager (x32 Version: 4.1.4.27792 - 2015 pdfforge GmbH. All rights reserved) Hidden
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Standard 2013 (HKLM-x32\...\Office15.STANDARD) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50905.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mordheim: City of the Damned (HKLM-x32\...\Steam App 276810) (Version:  - Rogue Factor)
Mount & Blade: Warband (HKLM\...\Steam App 48700) (Version:  - TaleWorlds Entertainment)
Mozilla Firefox 52.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 52.0.1 (x86 de)) (Version: 52.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.1.6284 - Mozilla)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 378.66 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 378.66 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.3.0.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.3.0.95 - NVIDIA Corporation)
NVIDIA Grafiktreiber 378.66 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 378.66 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.21 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.3.0.95 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 2.3.5.0 - NVIDIA Corporation) Hidden
NvvHci (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
Offworld Trading Company (HKLM\...\Steam App 271240) (Version:  - Mohawk Games)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
P2002_Titan (HKLM-x32\...\P2002_Titan 2.0.0) (Version: 2.0.0 - Project 2002)
P2002_Titan (x32 Version: 2.0.0 - Project 2002) Hidden
Painter 2017 - Setup Files (Version: 16.1 - Corel Corporation) Hidden
Panda Endpoint Agent (HKLM-x32\...\PCOP Agent) (Version: 7.65.00.0000 - Panda Security)
Panda Endpoint Agent (x32 Version: 7.65.00.0000 - Panda Security) Hidden
Panda Endpoint Protection (HKLM-x32\...\Panda Universal Agent Endpoint) (Version: 7.65.1 - Panda Security)
Panda Endpoint Protection (Version: 8.33.01 - Panda Security) Hidden
Path of Exile (HKLM-x32\...\{ae968447-9577-40ff-91b5-e08c7d973628}) (Version: 2.1.2.52444 - Grinding Gear Games)
Path of Exile (x32 Version: 2.1.2.52444 - Grinding Gear Games) Hidden
PDF Architect 4 (HKLM-x32\...\PDF Architect 4) (Version: 4.0.34.26215 - pdfforge GmbH)
PDF Architect 4 Create Module (Version: 4.1.5.29097 - pdfforge GmbH) Hidden
PDF Architect 4 Edit Module (Version: 4.1.5.29097 - pdfforge GmbH) Hidden
PDF Architect 4 View Module (Version: 4.1.5.29097 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.4.1 - pdfforge GmbH)
ph (x32 Version: 1.0.0 - Your Company Name) Hidden
Polaris Sector (HKLM\...\Steam App 418250) (Version:  - SoftWarWare)
Polaris Sector (HKLM-x32\...\Polaris Sector) (Version: 1.05b - Slitherine)
Project 2002 Client (HKU\S-1-5-21-225253568-2950696071-1607657666-1000\...\Project 2002 Client 1.0.1) (Version: 1.0.1 - Project 2002)
Project 2002 Client (x32 Version: 1.0.1 - Project 2002) Hidden
Quest for Glory - So You Want To Be A Hero (HKLM-x32\...\1207661313_is1) (Version: 2.1.0.33 - GOG.com)
RAPID Mode (Version: 1.0.1.81 - Samsung Electronics Co., Ltd.) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7329 - Realtek Semiconductor Corp.)
RimWorld (HKLM\...\Steam App 294100) (Version:  - Ludeon Studios)
Rogue's Tale (HKLM-x32\...\Steam App 265990) (Version:  - Epixx.org)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{90150000-0012-0000-0000-0000000FF1CE}_Office15.STANDARD_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version:  - Microsoft)
SHIELD Streaming (Version: 7.1.0351 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.3.0.95 - NVIDIA Corporation) Hidden
SimpleMind desktop Pro 1.15.2 (HKLM-x32\...\SMPRO1_is1) (Version: 1.15.2 - ModelMaker Tools BV)
SketchUp 2015 (HKLM\...\{A83795B9-570F-40FF-ACB4-710B568EBA22}) (Version: 15.3.331 - Trimble Navigation Limited)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stellaris (HKLM\...\Steam App 281990) (Version:  - Paradox Development Studio)
Subnautica (HKLM-x32\...\Steam App 264710) (Version:  - Unknown Worlds Entertainment)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Total War: WARHAMMER (HKLM\...\Steam App 364360) (Version:  - Creative Assembly)
TreeSize Professional 3.31 (HKLM-x32\...\TreeSize Professional_is1) (Version:  - JAM Software)
Uthgard Launcher (HKLM-x32\...\Uthgard Launcher) (Version: 1.00.00.00 - Uthgard)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
Visual Studio 2010 SP1 Runtime x64 (HKLM\...\{F6305232-7952-4CCE-BDCD-9B2E66591C4A}) (Version: 1.0.0 - Microsoft Corporation)
Visual Studio 2010 SP1 Runtime x86 (HKLM-x32\...\{AEA163A5-BA2F-4E63-9529-DE8606AC82A4}) (Version: 1.0.0 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VNC Server 5.2.2 (HKLM\...\{6CCBB6CD-9B1E-4C9E-AFB3-70B1B392D52F}) (Version: 5.2.2 - RealVNC Ltd)
VNC Viewer 5.2.2 (HKLM\...\{8F6EB328-DB55-442C-AA6A-BC7D1096F408}) (Version: 5.2.2 - RealVNC Ltd)
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1) (Version: 1.0.39.1 - LunarG, Inc.)
Wacom Tablett (HKLM\...\Wacom Tablet Driver) (Version: 6.3.20-7 - Wacom Technology Corp.)
Warhammer: End Times - Vermintide (HKLM-x32\...\Steam App 235540) (Version:  - Fatshark)
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
Windows Media Encoder 9 Series (HKLM-x32\...\Windows Media Encoder 9) (Version:  - )
Windows-Treiberpaket - Colorimetry Research, Inc. (usbser) Ports  (01/08/2015 1.1.0000) (HKLM\...\F020C50F002449A77844336A713D5B63AA9D5C17) (Version: 01/08/2015 1.1.0000 - Colorimetry Research, Inc.)
Windows-Treiberpaket - Datacolor (Spyder3) USB  (09/10/2007 1.0.0.3) (HKLM\...\2F24D930929D08C29A697E2C2E0574EC1CCCAE1D) (Version: 09/10/2007 1.0.0.3 - Datacolor)
Windows-Treiberpaket - Datacolor (Spyder4) USB  (06/01/2011 1.0.0.1) (HKLM\...\E5E9268B6D7B0E662E34736CC110C89D595E4222) (Version: 06/01/2011 1.0.0.1 - Datacolor)
Windows-Treiberpaket - Datacolor (Spyder5) USB  (08/26/2014 1.0.0.1) (HKLM\...\D1CF369DD689097AF9D7AD184A04FD57BD8EF4BA) (Version: 08/26/2014 1.0.0.1 - Datacolor)
Windows-Treiberpaket - FTDI CDM Driver Package - Bus/D2XX Driver (07/10/2015 2.12.06) (HKLM\...\B85E5F21D69245012A4E4C2DFAF38615FC7CF7AA) (Version: 07/10/2015 2.12.06 - FTDI)
Windows-Treiberpaket - FTDI CDM Driver Package - VCP Driver (07/10/2015 2.12.06) (HKLM\...\71B7FC12B248030B4BBBCA0C57826D74F64DB010) (Version: 07/10/2015 2.12.06 - FTDI)
Windows-Treiberpaket - FTDI CDM Driver Package (07/12/2010 2.08.02) (HKLM\...\498B9978CE49397903524B0761200F43EC650044) (Version: 07/12/2010 2.08.02 - FTDI)
Windows-Treiberpaket - FTDI CDM Driver Package (07/12/2010 2.08.02) (HKLM\...\67170FB0228B69BCCBEF8CE14A76953A5505D8EA) (Version: 07/12/2010 2.08.02 - FTDI)
Windows-Treiberpaket - Photo Research, Inc. (usbser) Ports  (09/11/2009 2.1.0.0) (HKLM\...\7CCE8D3A2B1BD6469628EED79C6E88A36680E0C8) (Version: 09/11/2009 2.1.0.0 - Photo Research, Inc.)
Windows-Treiberpaket - X-Rite (colormunki) XRiteDevices  (08/21/2006 2.40.0.1315) (HKLM\...\975DA77B1E3D07FC79378569A82F13404D027518) (Version: 08/21/2006 2.40.0.1315 - X-Rite)
Windows-Treiberpaket - X-Rite (EyeOne) XRiteDevices  (04/21/2009 2.40.0.1315) (HKLM\...\60DFC39027B2B7734E1FBB0C005E7A477317D42D) (Version: 04/21/2009 2.40.0.1315 - X-Rite)
Windows-Treiberpaket - X-Rite (EyeOne) XRiteDevices  (08/21/2006 2.40.0.1315) (HKLM\...\4BCA7532847C66A175AD419E8ED0CB00EA9F9A4A) (Version: 08/21/2006 2.40.0.1315 - X-Rite)
Windows-Treiberpaket - X-Rite (EyeOneDisplay) XRiteDevices  (08/21/2006 2.0.0.0) (HKLM\...\BE6334FA182AB4DD51AECFD703C81D6B65B2BBF3) (Version: 08/21/2006 2.0.0.0 - X-Rite)
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
Xenonauts (HKLM\...\Steam App 223830) (Version:  - Goldhawk Interactive)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-225253568-2950696071-1607657666-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Steffen\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-225253568-2950696071-1607657666-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
CustomCLSID: HKU\S-1-5-21-225253568-2950696071-1607657666-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-225253568-2950696071-1607657666-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-225253568-2950696071-1607657666-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-225253568-2950696071-1607657666-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-225253568-2950696071-1607657666-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-225253568-2950696071-1607657666-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-225253568-2950696071-1607657666-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-225253568-2950696071-1607657666-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-225253568-2950696071-1607657666-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-225253568-2950696071-1607657666-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-225253568-2950696071-1607657666-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-225253568-2950696071-1607657666-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Steffen\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {01C6E51C-69E2-48A4-A210-24AC2D9ACE44} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {03676AA9-339F-4377-B4C2-B21E54E42368} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-03-14] (Adobe Systems Incorporated)
Task: {0D59D641-1639-462A-BBD2-E502FA01BCDA} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-01-20] (NVIDIA Corporation)
Task: {2A2880B4-56CF-429D-9E12-C2D2833AD4AD} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {2C012FA7-2AD4-4012-AA11-EDAD68F38D31} - System32\Tasks\CorelUpdateHelperTaskCore => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2017-01-12] (Corel Corporation)
Task: {3E5FC3A5-D851-4DF4-8FB7-A92A2AF5B6F5} - System32\Tasks\Health-Check-auto => C:\Program Files (x86)\Innovative Solutions\Advanced Uninstaller PRO\healthcheck.exe 
Task: {3EE7A94E-043E-4134-A989-63CE16012154} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-01-20] (NVIDIA Corporation)
Task: {47B98522-C05C-42DD-B9A3-4D336BD10FF7} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-01-20] (NVIDIA Corporation)
Task: {6ACE479B-4B60-4F7E-A543-C2F187776B58} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-01-20] (NVIDIA Corporation)
Task: {6ADA3046-1B7D-414F-9FD4-2A2900038868} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {80E98A04-3D3E-4219-9D1C-4341FB123BAC} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-225253568-2950696071-1607657666-1000UA => C:\Users\Steffen\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.)
Task: {857165AE-AD86-48EF-83B7-31ECE461B744} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-01-20] (NVIDIA Corporation)
Task: {98137CD3-3685-4DD0-BD2B-26D97A392D2C} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-225253568-2950696071-1607657666-1000Core => C:\Users\Steffen\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.)
Task: {9A4E6FC4-2C67-420D-BE70-3E97863D5B12} - System32\Tasks\{EDA8A970-E704-46B8-AAA0-D76686F28078} => pcalua.exe -a C:\Users\Steffen\Desktop\FGWebInstall.exe -d C:\Users\Steffen\Desktop
Task: {A41F2BD5-6F88-4181-9FF8-E299A81CDBC6} - System32\Tasks\AsLiftRightsForClient_SessionSessionId1 => C:\Users\Steffen\AppData\Local\pcvisit Software AG\caloa\pcvisit.Support.guest.15\release\15.0.4.6350\client.exe [2015-04-11] (pcvisit Software ag)
Task: {B299730A-CD16-4450-960D-D7B57E843CC4} - System32\Tasks\AdobeAAMUpdater-1.0-GOLIATH-Steffen => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
Task: {B6D3C8D4-FE08-4EE3-B746-B025C5ACCC17} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => %ProgramFiles%\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe 
Task: {B702DA60-6956-47B3-BBF5-54DC0D32B9FD} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-01-20] (NVIDIA Corporation)
Task: {B8C07D65-C69C-4442-A0D3-4BD3B6E83F77} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2016-08-12] (Intel Corporation)
Task: {BE79B1CB-42A0-4C02-9610-EF8CBF883DBE} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-01-20] (NVIDIA Corporation)
Task: {C217AC08-3CBD-4FA0-BE5B-1E38E8771902} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2016-08-12] (Intel Corporation)
Task: {FB2C4BB9-6C04-4ED8-99CB-98EDF247BCEF} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\AsLiftRightsForClient_SessionSessionId1.job => C:\Users\Steffen\AppData\Local\pcvisit Software AG\caloa\pcvisit.Support.guest.15\release\15.0.4.6350\client.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-225253568-2950696071-1607657666-1000Core.job => C:\Users\Steffen\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-225253568-2950696071-1607657666-1000UA.job => C:\Users\Steffen\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\Health-Check-auto.job => C:\Program Files (x86)\Innovative Solutions\Advanced Uninstaller PRO\healthcheck.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Polaris Sector\rtq_es.lnk -> E:\Games\Polaris Sector\ModKit\1.05\rtq_es.bat ()
Shortcut: C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Polaris Sector\rtq_es_conv.lnk -> E:\Games\Polaris Sector\ModKit\1.05\rtq_es_conv.bat ()

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-09-01 17:12 - 2016-09-01 17:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-11-17 01:28 - 2016-11-17 01:28 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-01-28 04:16 - 2014-01-28 04:16 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
2016-10-25 09:57 - 2016-10-25 09:57 - 00491184 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2015-08-18 21:31 - 2015-08-18 21:31 - 00048640 _____ () C:\Windows\SysWOW64\ASGT.exe
2015-01-28 19:54 - 2014-04-24 07:29 - 01360016 ____R () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
2015-01-20 14:03 - 2015-01-20 14:03 - 00169472 _____ () C:\Program Files (x86)\LANCOM\Advanced VPN Client\x64\ncpbudget2008.dll
2015-01-20 14:03 - 2015-01-20 14:03 - 00112392 _____ () C:\Program Files (x86)\LANCOM\Advanced VPN Client\x64\ncpmif32.dll
2015-01-20 14:03 - 2015-01-20 14:03 - 00125952 _____ () C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncpsec.exe
2016-12-08 10:51 - 2017-01-20 19:39 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-12-08 10:51 - 2017-01-20 19:39 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-12-08 10:50 - 2017-02-09 23:57 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-09-18 08:23 - 2014-09-18 08:23 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2015-02-26 19:39 - 2015-02-26 19:39 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2014-09-18 08:23 - 2014-09-18 08:23 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2015-02-26 19:39 - 2015-02-26 19:39 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2015-02-01 12:54 - 2016-08-09 10:01 - 00148096 _____ () C:\Program Files\EIZO\ColorNavigator 6\ColorNavigator 6.exe
2015-06-11 16:13 - 2017-02-03 01:01 - 01658320 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll
2016-10-25 09:57 - 2016-10-25 09:57 - 31723696 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
2015-02-01 12:54 - 2016-08-09 10:01 - 00080512 _____ () C:\Program Files\EIZO\ColorNavigator 6\core\cn6_eacore.exe
2015-01-28 19:54 - 2017-03-24 00:12 - 00042792 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll
2015-01-28 19:54 - 2014-01-28 04:16 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll
2015-12-15 18:17 - 2015-12-15 18:17 - 00618544 _____ () C:\Program Files (x86)\Panda Security\WAC\SQLite3.dll
2015-01-20 14:03 - 2015-01-20 14:03 - 01759232 _____ () C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncpgacc.dll
2015-01-20 14:03 - 2015-01-20 14:03 - 00099840 _____ () C:\Program Files (x86)\LANCOM\Advanced VPN Client\bsdntif.dll
2015-01-20 14:03 - 2015-01-20 14:03 - 00101640 _____ () C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncpmif32.dll
2015-12-02 14:30 - 2015-12-02 14:30 - 00065536 _____ () C:\Program Files (x86)\ASUS\GPU TweakII\Exeio.dll
2016-01-18 10:10 - 2016-01-18 10:10 - 01946624 _____ () C:\Program Files (x86)\ASUS\GPU TweakII\Vender.dll
2016-12-08 10:51 - 2017-01-20 19:39 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-12-08 10:51 - 2017-01-20 19:39 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-12-08 10:51 - 2017-01-20 19:39 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-11-10 21:30 - 2016-11-10 21:30 - 00046336 _____ () C:\Program Files (x86)\Panda Security\WaAgent\Common\ApiCr.dll
2016-11-10 21:30 - 2016-11-10 21:30 - 00103680 _____ () C:\Program Files (x86)\Panda Security\WaAgent\Common\MiniCrypto.dll
2015-01-20 14:03 - 2015-01-20 14:03 - 00117760 _____ () C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncpcfg.dll
2015-01-20 14:03 - 2015-01-20 14:03 - 00198144 _____ () C:\Program Files (x86)\LANCOM\Advanced VPN Client\ncpdlg.dll
2011-03-09 14:21 - 2011-03-09 14:21 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2011-03-09 14:21 - 2011-03-09 14:21 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2016-08-10 10:14 - 2016-08-10 10:14 - 40523480 _____ () C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\libcef.dll
2016-10-12 01:08 - 2016-10-12 01:08 - 00118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\fs-ext\build\Release\fs-ext.node
2016-10-12 01:08 - 2016-10-12 01:08 - 00223232 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2016-10-12 01:08 - 2016-10-12 01:08 - 00117248 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ref\build\Release\binding.node
2016-10-12 01:08 - 2016-10-12 01:08 - 00124928 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ffi\build\Release\ffi_bindings.node
2016-10-25 10:49 - 2016-10-25 10:49 - 00109760 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin7.dll
2016-10-12 01:08 - 2016-10-12 01:08 - 00166400 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\idle-gc\build\Release\idle-gc.node
2016-12-08 10:51 - 2017-01-20 19:38 - 64245184 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2016-12-08 10:51 - 2017-01-20 14:36 - 00338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-12-08 10:51 - 2017-01-20 14:36 - 00254008 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-12-08 10:51 - 2017-01-20 14:36 - 02808888 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-12-08 10:51 - 2017-01-20 14:36 - 00384568 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-12-08 10:51 - 2017-01-20 14:36 - 00537656 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-12-08 10:51 - 2017-01-20 14:36 - 00468024 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-12-08 10:51 - 2017-01-20 14:36 - 01066552 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2016-12-26 11:24 - 2017-01-20 14:36 - 01014840 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSDKAPINode.node
2015-02-01 12:54 - 2016-08-09 10:00 - 00211968 _____ () C:\Program Files\EIZO\ColorNavigator 6\core\libcolour.dll
2015-02-01 12:54 - 2016-08-09 10:00 - 01016832 _____ () C:\Program Files\EIZO\ColorNavigator 6\core\plugins\cn_Procs.dll
2015-02-01 12:54 - 2016-08-09 10:00 - 00136192 _____ () C:\Program Files\EIZO\ColorNavigator 6\core\libimpronta.dll
2015-01-28 20:38 - 2014-09-28 17:59 - 00019872 _____ () C:\Program Files (x86)\Samsung\Samsung Magician\SAMSUNG_SSD.dll
2016-10-10 23:15 - 2016-10-10 23:15 - 00118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\fs-ext\build\Release\fs-ext.node
2016-10-10 23:15 - 2016-10-10 23:15 - 00117760 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ref\build\Release\binding.node
2016-10-10 23:15 - 2016-10-10 23:15 - 00125440 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ffi\build\Release\ffi_bindings.node
2016-10-10 23:17 - 2016-10-10 23:17 - 00223232 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2016-10-25 10:41 - 2016-10-25 10:41 - 00109760 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin7.dll
2016-10-10 23:14 - 2016-10-10 23:14 - 00121856 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\bufferutil\build\Release\bufferutil.node
2016-10-10 23:14 - 2016-10-10 23:14 - 00166400 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\idle-gc\build\Release\idle-gc.node
2014-04-03 16:48 - 2014-04-03 16:48 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NanoServiceMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSUAService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MSIServer => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NanoServiceMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ProtexisLicensing => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PSI_SVC_2 => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PSI_SVC_2_x64 => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PSUAService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-225253568-2950696071-1607657666-1000\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupreg: iTunesHelper => "E:\ITunes\iTunesHelper.exe"
MSCONFIG\startupreg: RemoteControl10 => "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{F2A93C03-8C45-4DFD-9C05-623CFF5051DE}] => (Allow) LPort=5900
FirewallRules: [{9D861C7E-E79F-4F14-838D-4C287B261801}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [TCP Query User{9C90F57E-4EDA-4340-BECA-4E09DC3B0065}C:\program files (x86)\lancom\advanced vpn client\ncpmon.exe] => (Allow) C:\program files (x86)\lancom\advanced vpn client\ncpmon.exe
FirewallRules: [UDP Query User{CB639DA2-4005-4003-92A5-8F69FD1EAE26}C:\program files (x86)\lancom\advanced vpn client\ncpmon.exe] => (Allow) C:\program files (x86)\lancom\advanced vpn client\ncpmon.exe
FirewallRules: [{C46AAACF-1647-437E-83FD-45CF6F3556A1}] => (Allow) E:\Steam\Steam.exe
FirewallRules: [{67AB82AC-B5CB-4EA2-846E-DA2D6D01F17E}] => (Allow) E:\Steam\Steam.exe
FirewallRules: [{D7EB5322-4E3B-41AF-87F4-65D526280DDE}] => (Allow) E:\Steam\steamapps\common\Crusader Kings II\CK2game.exe
FirewallRules: [{0AF0DB6C-2A88-4841-A260-FC0F1ACA3AD0}] => (Allow) E:\Steam\steamapps\common\Crusader Kings II\CK2game.exe
FirewallRules: [{07940C7A-CBE2-42FB-BAFF-91F7F1A03F21}] => (Allow) C:\Users\Steffen\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{6AE4A4F9-D2D7-42F4-941E-3411806AA5C8}] => (Allow) C:\Users\Steffen\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{F9DA5AAA-E1CB-49F9-ADAF-14BDBB2A2F0F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7F9E29C5-2DD7-44FF-9176-485BFB586611}] => (Allow) E:\Steam\steamapps\common\Hand of Fate\Hand of Fate.exe
FirewallRules: [{57EF204B-4D4D-4E22-8F22-409F7090A0E6}] => (Allow) E:\Steam\steamapps\common\Hand of Fate\Hand of Fate.exe
FirewallRules: [{4D01B9F5-C205-48D6-8A33-06B52FAF86FD}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{FB137414-ED7A-4B54-B664-339F9855EEE7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{877069EC-AFD9-4B30-A9EE-63D04A275720}] => (Allow) E:\Steam\steamapps\common\Europa Universalis IV\eu4.exe
FirewallRules: [{0B6122C4-CAED-49B5-B5DD-CB35AB06331D}] => (Allow) E:\Steam\steamapps\common\Europa Universalis IV\eu4.exe
FirewallRules: [{8D1625FF-320E-40A8-8A04-4567B73E9E07}] => (Allow) E:\Steam\steamapps\common\Subnautica\Subnautica.exe
FirewallRules: [{E5003E83-5934-411C-B1BC-0FE3C706EBC6}] => (Allow) E:\Steam\steamapps\common\Subnautica\Subnautica.exe
FirewallRules: [{5E9CB0EC-8337-45F1-A280-28BF1051B6AE}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{24302634-7E15-452C-933B-F644DDA99192}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{6D0C5A68-2FDC-4E02-A8F6-D4F0B23733EC}] => (Allow) C:\Program Files (x86)\ModelMakerTools\SimpleMind\1.9.4\iPhoneLink.exe
FirewallRules: [{FA73E1A4-C09A-49D2-8CEF-CD188D6101CF}] => (Allow) C:\Program Files (x86)\ModelMakerTools\SimpleMind\1.9.4\iPhoneLink.exe
FirewallRules: [{27473020-917C-4F49-A47B-F6B65478A78B}] => (Allow) C:\Program Files (x86)\ModelMakerTools\SimpleMind\1.9.4\iPhoneLink.exe
FirewallRules: [{0152254B-1199-47F2-A93D-EF97A4621D4F}] => (Allow) E:\Steam\steamapps\common\Rogue's Tale\Launcher.exe
FirewallRules: [{06CABB84-E6AD-4DE5-93D7-53D937A01671}] => (Allow) E:\Steam\steamapps\common\Rogue's Tale\Launcher.exe
FirewallRules: [{3C4977FC-552B-4F8B-BA4F-83EACCFD7960}] => (Allow) E:\Steam\steamapps\common\InvisibleInc\invisibleinc.exe
FirewallRules: [{793E8154-C246-4C90-A8CA-73A0FDABE9F2}] => (Allow) E:\Steam\steamapps\common\InvisibleInc\invisibleinc.exe
FirewallRules: [{9402B8E1-FF6E-4D86-BE74-3ECAEB35074C}] => (Allow) E:\Steam\steamapps\common\Castle In The Darkness\CastleInTheDarkness.exe
FirewallRules: [{8C1DFC38-BE8B-488C-AE1C-3A60502D6BD4}] => (Allow) E:\Steam\steamapps\common\Castle In The Darkness\CastleInTheDarkness.exe
FirewallRules: [{E3BCF557-BF72-47FE-8E74-592FF8E43686}] => (Allow) C:\Program Files (x86)\ModelMakerTools\SimpleMind\1.9.4\iPhoneLink.exe
FirewallRules: [{3377BCA9-2695-4776-9B7A-F996F64F6FDE}] => (Allow) C:\Program Files (x86)\ModelMakerTools\SimpleMind\1.9.4\iPhoneLink.exe
FirewallRules: [{134776D6-F017-4A4B-81C6-158462DF565B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{18FB1C6A-B9EA-4686-B3D1-1831E50A3676}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4CE4D6A1-26B1-43AB-89E0-96C8BDA8AE1B}] => (Allow) C:\Program Files (x86)\ModelMakerTools\SimpleMind\1.9.4\iPhoneLink.exe
FirewallRules: [{7F1CC258-2AD8-4A51-9B2B-28E1BBA55C8C}] => (Allow) E:\Steam\steamapps\common\mordheim\mordheim.exe
FirewallRules: [{01669B5F-173F-4481-9634-E38C5806D8C8}] => (Allow) E:\Steam\steamapps\common\mordheim\mordheim.exe
FirewallRules: [{4EF20A2F-C282-4B5C-87F3-64B8E2D861E2}] => (Allow) E:\Steam\steamapps\common\Warhammer End Times Vermintide\launcher\launcher.exe
FirewallRules: [{790FBF75-52F5-449B-98B2-C8CEBDF1FFD2}] => (Allow) E:\Steam\steamapps\common\Warhammer End Times Vermintide\launcher\launcher.exe
FirewallRules: [{77F20955-C9CA-4ECF-ACC7-E9869F8BA91D}] => (Allow) E:\Steam\steamapps\common\Warhammer End Times Vermintide\binaries\vermintide.exe
FirewallRules: [{0810AC73-D60F-483B-95CA-D45D455CB1F6}] => (Allow) E:\Steam\steamapps\common\Warhammer End Times Vermintide\binaries\vermintide.exe
FirewallRules: [{10D763E2-D3BA-4FC2-B7FC-AAECE6B7C28F}] => (Allow) C:\Program Files (x86)\ModelMakerTools\SimpleMind\1.9.4\iPhoneLink.exe
FirewallRules: [{9E30E09A-5CD1-4A54-BB8A-924179B1771E}] => (Allow) E:\Steam\steamapps\common\Battle Brothers\win32\BattleBrothers.exe
FirewallRules: [{36702DE6-C70E-4D19-A46D-55E45CF380E4}] => (Allow) E:\Steam\steamapps\common\Battle Brothers\win32\BattleBrothers.exe
FirewallRules: [{92C0D8B3-10AE-4431-BBA3-CB6ACF9B7281}] => (Allow) E:\Steam\steamapps\common\Dominions4\Dominions4.exe
FirewallRules: [{65413EA0-5D50-4DA8-951E-74558E587D96}] => (Allow) E:\Steam\steamapps\common\Dominions4\Dominions4.exe
FirewallRules: [{30878B28-15F6-4C12-874C-886153818745}] => (Allow) E:\Steam\steamapps\common\Distant Worlds Universe\autorun.exe
FirewallRules: [{AA720929-3B09-4C20-917E-9F5B15B007FA}] => (Allow) E:\Steam\steamapps\common\Distant Worlds Universe\autorun.exe
FirewallRules: [{861D439F-58E3-4902-A2AD-5DEA3B0559F9}] => (Allow) C:\Program Files (x86)\ModelMakerTools\SimpleMind\1.9.4\iPhoneLink.exe
FirewallRules: [{CA6C2A49-60B6-4489-8417-1333957452AF}] => (Allow) E:\Steam\steamapps\common\Polaris Sector\autorun.exe
FirewallRules: [{71328888-C4A9-468F-B4CA-CE7E3FA93DAD}] => (Allow) E:\Steam\steamapps\common\Polaris Sector\autorun.exe
FirewallRules: [{ACE6BEB3-54F5-4FF5-8C9F-868B2F688AB1}] => (Allow) C:\Program Files\RealVNC\VNC Server\vncserver.exe
FirewallRules: [{BF29FFE6-C079-450A-8ED4-8F451B55304C}] => (Allow) C:\Program Files\RealVNC\VNC Server\vncserver.exe
FirewallRules: [{94A9D037-C654-4A5E-9795-B7A63F00D27D}] => (Allow) E:\Steam\steamapps\common\Offworld Trading Company\Offworld.exe
FirewallRules: [{08A33BED-D240-47B2-9535-208B5C9DCC8A}] => (Allow) E:\Steam\steamapps\common\Offworld Trading Company\Offworld.exe
FirewallRules: [{9B1978A0-1A5E-4FDC-855F-27FDC2E01A3C}] => (Allow) C:\Program Files (x86)\ModelMakerTools\SimpleMind\1.9.4\iPhoneLink.exe
FirewallRules: [{2F3E0256-2961-44F1-84FC-452EF66DBC65}] => (Allow) E:\Steam\steamapps\common\Stellaris\stellaris.exe
FirewallRules: [{3683D5DB-8EAB-4804-A1B8-55A8E4ACA051}] => (Allow) E:\Steam\steamapps\common\Stellaris\stellaris.exe
FirewallRules: [{B40BE12C-33B5-4805-91B0-7B3897014FE4}] => (Allow) E:\Steam\steamapps\common\Gremlins\Gremlins_Inc.exe
FirewallRules: [{CACE34F1-3F77-45E4-AC3B-FA45AFA0A4E9}] => (Allow) E:\Steam\steamapps\common\Gremlins\Gremlins_Inc.exe
FirewallRules: [{137BFE3B-9F01-4D70-A524-31506A1F227B}] => (Allow) C:\Program Files (x86)\ModelMakerTools\SimpleMind\1.9.4\iPhoneLink.exe
FirewallRules: [{78A99E5F-00D7-480F-8CAF-CB4400A0B13D}] => (Allow) E:\Steam\steamapps\common\ChaosReborn\ChaosRebornWin64.exe
FirewallRules: [{612631DA-9D68-47DE-8257-8A9319C8C09F}] => (Allow) E:\Steam\steamapps\common\ChaosReborn\ChaosRebornWin64.exe
FirewallRules: [{FFDAB811-D99B-4A5B-87A1-BFA15D426A7E}] => (Allow) E:\Steam\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [{2530B42B-7F74-439C-83DA-111B9CF153CD}] => (Allow) E:\Steam\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [{67E41973-C96C-4355-98A0-A63E98046F49}] => (Allow) E:\Steam\steamapps\common\Delver\delver.exe
FirewallRules: [{2E906408-ECBA-4880-97CD-317F9D4AC876}] => (Allow) E:\Steam\steamapps\common\Delver\delver.exe
FirewallRules: [{FE42FFCC-E98B-4566-BFE2-8F74DC5BDEE4}] => (Allow) E:\Steam\steamapps\common\Factorio\bin\x64\factorio.exe
FirewallRules: [{4B7C183D-77B8-4569-B148-8416FFD28035}] => (Allow) E:\Steam\steamapps\common\Factorio\bin\x64\factorio.exe
FirewallRules: [{4AA6DBB3-F5CD-4BB1-B6C5-CCE86F28687C}] => (Allow) C:\Program Files (x86)\ModelMakerTools\SimpleMind\1.9.4\iPhoneLink.exe
FirewallRules: [{A2339749-B915-4BB3-B484-33F7D1FEC144}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{8AF07250-3900-4FE7-BB86-1BCEC8741BCB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{423DF29E-6091-4E3F-9BB1-525EA1F17A71}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{97BFE585-A225-411C-8222-54E029B67BAB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A63AC79A-096F-49E2-80DB-6C8B432B5531}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{38FBF523-A0A4-40FC-9643-9BC4C7FD90A8}] => (Allow) E:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{9393E8BE-511C-45A9-A782-5A03F7D31711}] => (Allow) E:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{440ED368-350D-46AF-8080-791D80E445DE}] => (Allow) C:\Program Files\EIZO\ColorNavigator 6\core\cn6_eacore.exe
FirewallRules: [{75D3BD36-B73A-483A-9269-D79D9AB2DB57}] => (Allow) C:\Program Files\EIZO\ColorNavigator 6\core\cn6_eacore.exe
FirewallRules: [{31A2E892-B5B2-47EC-BD1D-82AF503BB368}] => (Allow) E:\ITunes\iTunes.exe
FirewallRules: [{B7E00AA1-03D6-48BA-9242-DEF47BDA0D7E}] => (Allow) E:\Steam\steamapps\common\Offworld Trading Company\StardockLauncher.exe
FirewallRules: [{1EEBF4CE-D1EE-4570-943D-1DC6C81B3085}] => (Allow) E:\Steam\steamapps\common\Offworld Trading Company\StardockLauncher.exe
FirewallRules: [{6255D53E-D6D0-427C-A58B-552569920737}] => (Allow) E:\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe
FirewallRules: [{3CB18D6F-BBC2-4E17-9232-53D3574D86D9}] => (Allow) E:\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe
FirewallRules: [{18C029C6-12CA-4FB5-B212-4BD45ADE343C}] => (Allow) E:\Steam\steamapps\common\Xenonauts\Xenonauts.exe
FirewallRules: [{559F557B-6AE3-4200-873C-2E8E7008FF9A}] => (Allow) E:\Steam\steamapps\common\Xenonauts\Xenonauts.exe
FirewallRules: [{680CEF1D-BC40-4B7F-AFBB-BD522EB905C9}] => (Allow) C:\Program Files (x86)\ModelMakerTools\SimpleMind\1.9.4\iPhoneLink.exe
FirewallRules: [{AA541AF4-E7F6-4890-9F8D-0383F20AB604}] => (Allow) E:\Steam\steamapps\common\RimWorld\RimWorldWin.exe
FirewallRules: [{F6A53C38-9886-4A1C-A94B-BCD4940124DA}] => (Allow) E:\Steam\steamapps\common\RimWorld\RimWorldWin.exe
FirewallRules: [{352EC102-DD51-4331-9E7A-154CB9674B19}] => (Allow) E:\Steam\steamapps\common\Factorio\bin\x64\factorio.exe
FirewallRules: [{210E9A6C-48A6-4A7C-BF48-3DD85D646126}] => (Allow) E:\Steam\steamapps\common\Factorio\bin\x64\factorio.exe
FirewallRules: [{63CF0A53-19BC-4CD5-8886-5841518A1E8A}] => (Allow) E:\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe
FirewallRules: [{5954E9A0-1974-47AF-A411-3919D08548BD}] => (Allow) E:\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe
FirewallRules: [{595FA294-A482-49FC-8590-6FECA9197F0B}] => (Allow) C:\Program Files (x86)\Panda Security\WaAgent\WAHost\WAHost.exe
FirewallRules: [{652EDBAD-65B0-4D1A-A639-BC17487F06B1}] => (Allow) C:\Program Files (x86)\Panda Security\WaAgent\WAHost\WAHost.exe

==================== Wiederherstellungspunkte =========================

04-03-2017 20:17:28 Windows Update
07-03-2017 22:13:17 Windows Update
09-03-2017 22:22:03 Removed League of Legends
10-03-2017 17:35:40 Installed League of Legends
10-03-2017 17:35:47 DirectX wurde installiert
14-03-2017 19:09:30 Windows Update
14-03-2017 23:39:14 Windows Update
21-03-2017 15:52:31 Windows Update
23-03-2017 23:54:44 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (03/24/2017 12:13:14 AM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz   konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet.   0x0.

Error: (03/24/2017 12:13:14 AM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Kontext:  Anwendung, SystemIndex Katalog

Error: (03/24/2017 12:13:13 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (03/24/2017 12:13:13 AM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Error: (03/24/2017 12:11:51 AM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz   konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet.   0x0.

Error: (03/24/2017 12:11:51 AM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Kontext:  Anwendung, SystemIndex Katalog

Error: (03/24/2017 12:11:51 AM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Error: (03/23/2017 11:51:55 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz   konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet.   0x0.

Error: (03/23/2017 11:51:54 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Kontext:  Anwendung, SystemIndex Katalog

Error: (03/23/2017 11:51:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.


Systemfehler:
=============
Error: (03/24/2017 12:15:25 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{0C5514B9-6611-4F5C-B63C-6D0B30FC22B8}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (03/24/2017 12:12:07 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden.

Error: (03/24/2017 12:12:07 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WMPNetworkSvc" konnte sich nicht als "NT AUTHORITY\NetworkService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
Die Anforderung wird nicht unterstützt.


Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (03/24/2017 12:12:07 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden.

Error: (03/24/2017 12:12:07 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WSearch" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
Die Anforderung wird nicht unterstützt.


Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (03/24/2017 12:11:37 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "NVIDIA LocalSystem Container" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/24/2017 12:11:37 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/24/2017 12:11:37 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel® ME Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/24/2017 12:11:37 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/24/2017 12:11:37 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===================================
  Date: 2017-03-24 00:13:11.219
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-03-23 23:51:46.534
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-03-23 23:50:13.050
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-03-23 23:17:28.792
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-03-23 23:07:52.950
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-03-23 22:55:33.336
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-03-23 22:33:18.746
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-03-23 22:17:38.731
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-03-23 22:01:16.653
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-03-23 21:36:10.793
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-5820K CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 15%
Installierter physikalischer RAM: 32680.43 MB
Verfügbarer physikalischer RAM: 27769.32 MB
Summe virtueller Speicher: 65359.04 MB
Verfügbarer virtueller Speicher: 60306.77 MB

==================== Laufwerke ================================

Drive c: (SYS) (Fixed) (Total:465.54 GB) (Free:261.7 GB) NTFS
Drive d: (APP) (Fixed) (Total:465.63 GB) (Free:427.99 GB) NTFS
Drive e: (DATA) (Fixed) (Total:3725.9 GB) (Free:3120.25 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 3C3BB73B)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 3726 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================

cosinus · 24.03.2017, 00:32

Zitat:

AS: Panda Endpoint Protection (Enabled - Up to date) {FDCF1CE6-8A99-EFB6-2515-716794542B5D}
FW: LANCOM Advanced VPN Client (Disabled) {BEB21647-135A-7893-42A0-BBC3960C218D}
FW: Panda Endpoint Protection Firewall (Disabled) {7E957C27-E6CC-E160-34FA-E3201100269B}

So jetzt aber mal ganz ehrlich

Das hat man doch nicht auf dem Rechner zu Hause

Hermundure · 24.03.2017, 00:34

Hehe doch, mit dem VPN kann ich am WE oder im Urlaub vom Firmenserver Mails abrufen und die Panda-Lizenz war in der Firma... übrig ;-p

cosinus · 24.03.2017, 00:44

wenn du meinst

Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte:

1. Schritt: Malwarebytes Version 3

Downloade Dir bitte Malwarebytes Anti-Malware 3

Installiere das Programm in den vorgegebenen Pfad.
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scan, wähle den Bedrohungs-Scan aus und klicke auf Scan starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Ausgewählte Elemente in die Quarantäne verschieben.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM nach dem Neustart, klicke auf Berichte.
Wähle den neuesten Scan-Bericht aus, klicke auf Bericht anzeigen und dann auf Export.
Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

2. Schritt: ESET

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

3. Schritt: SecurityCheck

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

24.03.2017, 00:05	#8
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Win 7: normaler Modus extrem langsam, läuft normal abgesichert adwcleaner zwecks Kontrolle bitte wiederholen __________________ Logfiles bitte immer in CODE-Tags posten

24.03.2017, 00:11	#10
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Win 7: normaler Modus extrem langsam, läuft normal abgesichert Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken __________________ Logfiles bitte immer in CODE-Tags posten

Win 7: normaler Modus extrem langsam, läuft normal abgesichert

Log-Analyse und Auswertung: Win 7: normaler Modus extrem langsam, läuft normal abgesichert