Hallo

Wenn ich meinen Laptop starte startet der Microsoft Edge und da ist IMMER die Seite Mail.ru und auch wenn ich den Google Chrome zum ersten mal starte ist auch wieder die Seite Mail.ru und ich änder das jedes mal in den Einstellungen vom Google Chrome und dann klappt das auch alles nur wenn ich den Laptop neu starte kommt das wieder und ich änder das wieder in den Einstellungen es nervt mich total und ich habe keine lust Windows neu zu installieren

Danke im Voraus

MFG Jonas1912

mail.ru ist aber eine legitime Seite und keine malware --> https://de.wikipedia.org/wiki/Mail.Ru_Group


Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Sorry die datei ist zu groß kann sie nicht schicken und habe alles eingefügt und das sind dann zu viele zeichen hast du noch einen anderen Tipp wie ich dir das schicken kann ?

Vlt über Email ?

Vllt mal Lesestoff richtig lesen?

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 21-06-2017 01
durchgeführt von jonas (Administrator) auf DESKTOP-SDFHP2T (22-06-2017 10:23:17)
Gestartet von C:\Users\jonas\Downloads
Geladene Profile: jonas (Verfügbare Profile: jonas)
Platform: Windows 10 Pro Version 1703 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(Lenovo.) C:\Windows\System32\LPlatSvc.exe
(Lenovo.) C:\Windows\System32\LPlatSvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Olof Lagerkvist) C:\Windows\System32\imdsksvc.exe
(Microsoft) C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe
(Symantec Corporation) C:\Program Files\Norton Security\Engine\22.9.4.8\ns.exe
(pdfforge GmbH) C:\Program Files\PDF Architect 5\creator-ws.exe
(© pdfforge GmbH.) C:\Program Files (x86)\PDF Architect 5 Manager\PDF Architect 5\Architect Manager.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.3.225\WsAppService.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Lenovo.) C:\Windows\System32\LPlatSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Symantec Corporation) C:\Program Files\Norton Security\Engine\22.9.4.8\ns.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Program Files\Ashampoo\Ashampoo Driver Updater\ashpdu.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Symantec Corporation) C:\Program Files\Norton Security\Engine\22.9.4.8\conathst.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11705.1001.21.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.12990.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft Games\Microsoft Flight Simulator X\fsx.exe
(Microsoft Corporation) C:\Windows\System32\GameBarPresenceWriter.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\PlacesServer.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\PlacesServer.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [303928 2017-05-09] (Apple Inc.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-2182765339-3254949556-2727863788-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3042592 2017-06-08] (Valve Corporation)
HKU\S-1-5-21-2182765339-3254949556-2727863788-1001\...\Run: [GoogleChromeAutoLaunch_EE92DA24D002778557D1C2B055218649] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1143640 2017-05-09] (Google Inc.)
HKU\S-1-5-21-2182765339-3254949556-2727863788-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9773272 2017-05-19] (Piriform Ltd)
HKU\S-1-5-21-2182765339-3254949556-2727863788-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3048312 2017-06-20] (Electronic Arts)
HKU\S-1-5-21-2182765339-3254949556-2727863788-1001\...\RunOnce: [Uninstall 17.3.6816.0313\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\jonas\AppData\Local\Microsoft\OneDrive\17.3.6816.0313\amd64"
HKU\S-1-5-21-2182765339-3254949556-2727863788-1001\...\RunOnce: [Uninstall 17.3.6816.0313] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\jonas\AppData\Local\Microsoft\OneDrive\17.3.6816.0313"
HKU\S-1-5-21-2182765339-3254949556-2727863788-1001\...\MountPoints2: {5f5d741c-420e-11e7-8504-806e6f6e6963} - "F:\dvdcheck.exe" 
ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.9.4.8\buShell.dll [2017-05-11] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.9.4.8\buShell.dll [2017-05-11] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.9.4.8\buShell.dll [2017-05-11] (Symantec Corporation)
ShellIconOverlayIdentifiers-x32: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine32\22.9.4.8\buShell.dll [2017-05-11] (Symantec Corporation)
ShellIconOverlayIdentifiers-x32: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine32\22.9.4.8\buShell.dll [2017-05-11] (Symantec Corporation)
ShellIconOverlayIdentifiers-x32: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine32\22.9.4.8\buShell.dll [2017-05-11] (Symantec Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HandyAndy.lnk [2017-05-27]
ShortcutTarget: HandyAndy.lnk -> C:\Program Files\Andy\HandyAndy.exe (Andy OS, inc.)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Beschränkung <======= ACHTUNG
GroupPolicy\User: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\..\Interfaces\{7856a1c0-062e-417c-a721-a5051e33b01c}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2182765339-3254949556-2727863788-1001 -> DefaultScope {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-06-17] (Microsoft Corporation)
BHO: Norton Identity Safety -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine\22.9.4.8\coIEPlg.dll [2017-05-26] (Symantec Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-06-17] (Microsoft Corporation)
BHO-x32: Norton Identity Safety -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine32\22.9.4.8\coIEPlg.dll [2017-05-26] (Symantec Corporation)
BHO-x32: PDF Architect 5 Helper -> {AEA429F3-D2D4-4BD7-A03E-5357DA017733} -> C:\Program Files (x86)\PDF Architect 5\creator-ie-helper.dll [2017-05-08] (pdfforge GmbH)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine\22.9.4.8\coIEPlg.dll [2017-05-26] (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine32\22.9.4.8\coIEPlg.dll [2017-05-26] (Symantec Corporation)
Toolbar: HKLM-x32 - PDF Architect 5 Toolbar - {84F23192-A475-4038-B5C0-8584777F2DF4} - C:\Program Files (x86)\PDF Architect 5\creator-ie-plugin.dll [2017-05-08] (pdfforge GmbH)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-06-17] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-06-17] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-06-17] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-06-17] (Microsoft Corporation)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.9.3.13\coFFAddon
FF Extension: (Norton Security Toolbar) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.9.3.13\coFFAddon [2017-05-26]
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.9.3.13\coFFAddon
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-06-17] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-26] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-26] (Google Inc.)
FF Plugin-x32: PDF Architect 5 -> C:\Program Files (x86)\PDF Architect 5\np-previewer.dll [2017-05-08] (pdfforge GmbH)

Chrome: 
=======
CHR HomePage: Default -> hxxp://mail.ru/cnt/10445?gp=811013
CHR StartupUrls: Default -> "hxxp://mail.ru/cnt/10445?gp=811013"
CHR NewTab: Default ->  Not-active:"chrome-extension://ophopjonlomiomjdjphigoapegkicmih/homePageRedirect.html", Not-active:"chrome-extension://ejbdobdndcjhdmljipngpeoekdinlohe/homePageRedirect.html"
CHR DefaultSearchURL: Default -> hxxps://nortonsafe.search.ask.com/web?q={searchTerms}&o=APN11908&prt=cr
CHR DefaultSearchKeyword: Default -> NortonSafe
CHR DefaultSuggestURL: Default -> hxxps://ss-sym.search.ask.com/ss?q={searchTerms}&li=ff
CHR Profile: C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default [2017-06-22]
CHR Extension: (Google Präsentationen) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-05-26]
CHR Extension: (Google Docs) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-05-26]
CHR Extension: (Google Drive) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-05-26]
CHR Extension: (YouTube) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-05-26]
CHR Extension: (Norton Security Toolbar) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2017-06-09]
CHR Extension: (Norton Home Page for Chrome) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejbdobdndcjhdmljipngpeoekdinlohe [2017-05-26]
CHR Extension: (Google Tabellen) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-05-26]
CHR Extension: (Google Docs Offline) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-05-26]
CHR Extension: (AdBlock) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmbdchmgaaihfdlphhcdlecjehdngbk [2017-06-21]
CHR Extension: (Norton Identity Safe) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2017-05-26]
CHR Extension: (Norton Internet Security) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mccinmnpibofepgpkcpojckmdmmajbmd [2017-05-26]
CHR Extension: (Norton Antivirus) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdhdbjonjphnkjoicalejgcaaigbilhl [2017-05-26]
CHR Extension: (Norton Safe) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmgcfemagnogdodbambjhdcmfcpicngl [2017-05-26]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-05-26]
CHR Extension: (Material Dark) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\npadhaijchjemiifipabpmeebeelbmpd [2017-06-03]
CHR Extension: (Adblock plus uBlock - Werbeblocker) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oofnbdifeelbaidfgpikinijekkjcicg [2017-06-21]
CHR Extension: (Norton Home Page) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ophopjonlomiomjdjphigoapegkicmih [2017-06-21]
CHR Extension: (Norton Security) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfbnibmoolhgbfipkfleejeebdhpmecl [2017-05-26]
CHR Extension: (Google Mail) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-05-26]
CHR Extension: (Chrome Media Router) - C:\Users\jonas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-26]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files\Norton Security\Engine\22.9.4.8\Exts\Chrome.crx [2017-06-05]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files\Norton Security\Engine\22.9.4.8\Exts\Chrome.crx [2017-06-05]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-04-03] (Apple Inc.)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2015-03-27] (Broadcom Corporation.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4122816 2017-06-10] (Microsoft Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319096 2016-05-12] (Intel Corporation)
R2 ImDskSvc; C:\Windows\system32\imdsksvc.exe [19552 2015-12-15] (Olof Lagerkvist)
R2 LPlatSvc; C:\Windows\system32\LPlatSvc.exe [711248 2017-04-01] (Lenovo.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
R2 NovaPdfServer; C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [51112 2017-02-22] (Microsoft)
R2 NS; C:\Program Files\Norton Security\Engine\22.9.4.8\NS.exe [326160 2017-05-27] (Symantec Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2168208 2017-06-20] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3148184 2017-06-20] (Electronic Arts)
S3 PDF Architect 5; C:\Program Files\PDF Architect 5\ws.exe [2706720 2017-05-08] (pdfforge GmbH)
S3 PDF Architect 5 CrashHandler; C:\Program Files\PDF Architect 5\crash-handler-ws.exe [1048864 2017-05-08] (pdfforge GmbH)
R2 PDF Architect 5 Creator; C:\Program Files\PDF Architect 5\creator-ws.exe [856864 2017-05-08] (pdfforge GmbH)
R2 PDF Architect 5 Manager; C:\Program Files (x86)\PDF Architect 5 Manager\PDF Architect 5\Architect Manager.exe [985848 2017-05-16] (© pdfforge GmbH.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2017-05-30] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [259176 2016-10-02] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.225\WsAppService.exe [473824 2017-05-05] (Wondershare)
S2 WsDrvInst; C:\Program Files (x86)\Wondershare\Wondershare Dr.Fone for iOS\Library\DriverInstaller\DriverInstall.exe [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [73976 2015-06-04] (Advanced Micro Devices, Inc.)
R2 AWEAlloc; C:\Windows\system32\DRIVERS\awealloc.sys [21048 2015-12-15] (Olof Lagerkvist)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [177432 2015-12-01] (Broadcom Corporation.)
R1 BHDrvx64; C:\Program Files\Norton Security\NortonData\22.9.3.13\Definitions\BASHDefs\20170620.005\BHDrvx64.sys [1862784 2017-06-14] (Symantec Corporation)
R1 ccSet_NS; C:\Windows\system32\drivers\NSx64\1609040.008\ccSetx64.sys [174232 2017-05-11] (Symantec Corporation)
R3 e1cexpress; C:\Windows\system32\DRIVERS\e1c65x64.sys [472016 2016-07-18] (Intel Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [507032 2017-05-05] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [156824 2017-05-05] (Symantec Corporation)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77376 2017-05-25] ()
R1 IDSVia64; C:\Program Files\Norton Security\NortonData\22.9.3.13\Definitions\IPSDefs\20170621.001\IDSvia64.sys [1053824 2017-05-25] (Symantec Corporation)
R2 ImDisk; C:\Windows\system32\DRIVERS\imdisk.sys [48704 2015-12-15] (Olof Lagerkvist)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [188312 2017-06-22] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [113592 2017-06-22] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [44960 2017-06-22] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [252832 2017-06-22] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [93600 2017-06-22] (Malwarebytes)
R3 NETwNe64; C:\Windows\System32\drivers\NETwew01.sys [3343872 2017-03-18] (Intel Corporation)
S3 SDFRd; C:\Windows\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42600 2016-06-07] (Synaptics Incorporated)
R1 SRTSP; C:\Windows\System32\Drivers\NSx64\1609040.008\SRTSP64.SYS [770712 2017-05-11] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NSx64\1609040.008\SRTSPX64.SYS [49304 2017-05-11] (Symantec Corporation)
R0 SymEFASI; C:\Windows\System32\drivers\NSx64\1609040.008\SYMEFASI64.SYS [1714328 2017-05-11] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NSx64\1609040.008\SymELAM.sys [24608 2017-05-11] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [102608 2017-05-26] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NSx64\1609040.008\Ironx64.SYS [291480 2017-05-11] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NSx64\1609040.008\SYMNETS.SYS [567496 2017-05-11] (Symantec Corporation)
R1 vmkbd3; C:\Windows\system32\DRIVERS\vmkbd.sys [52288 2016-11-11] (VMware, Inc.)
R0 vsock; C:\Windows\system32\DRIVERS\vsock.sys [91712 2016-09-30] (VMware, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
U3 DfSdkS; kein ImagePath
S3 NAVENG; \??\C:\Program Files\Norton Security\NortonData\22.9.3.13\Definitions\SDSDefs\20170526.019\NAVENG.SYS [X]
S3 NAVEX15; \??\C:\Program Files\Norton Security\NortonData\22.9.3.13\Definitions\SDSDefs\20170526.019\NAVEX15.SYS [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-06-22 10:23 - 2017-06-22 10:24 - 00025054 _____ C:\Users\jonas\Downloads\FRST.txt
2017-06-22 10:22 - 2017-06-22 10:23 - 00000000 ____D C:\FRST
2017-06-22 10:21 - 2017-06-22 10:21 - 02439680 _____ (Farbar) C:\Users\jonas\Downloads\frst64.exe
2017-06-22 09:01 - 2017-06-22 10:04 - 00093600 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-06-22 09:01 - 2017-06-22 09:01 - 00252832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-06-22 09:01 - 2017-06-22 09:01 - 00188312 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-06-22 09:01 - 2017-06-22 09:01 - 00113592 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-06-22 09:01 - 2017-06-22 09:01 - 00044960 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-06-22 09:00 - 2017-06-22 09:00 - 00001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-06-22 09:00 - 2017-06-22 09:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-06-22 09:00 - 2017-06-22 09:00 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-06-22 09:00 - 2017-06-22 09:00 - 00000000 ____D C:\Program Files\Malwarebytes
2017-06-22 09:00 - 2017-05-25 11:58 - 00077376 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-06-22 08:58 - 2017-06-22 08:58 - 64232976 _____ (Malwarebytes ) C:\Users\jonas\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.141-1.0.2092.exe
2017-06-22 08:52 - 2017-06-22 08:52 - 00000000 ___HD C:\OneDriveTemp
2017-06-22 08:51 - 2017-06-22 08:51 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Skype
2017-06-21 12:43 - 2017-06-21 12:43 - 00000000 ____D C:\Windows\System32\Tasks\Remediation
2017-06-21 12:28 - 2017-06-21 12:28 - 00000000 ____D C:\Windows\PCHEALTH
2017-06-20 20:28 - 2017-06-20 20:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-06-20 19:01 - 2017-06-21 13:50 - 00000000 ____D C:\Users\jonas\Desktop\FSX
2017-06-18 16:41 - 2017-06-18 16:41 - 00003538 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{A5AC393F-57F6-4179-858E-854495A2D1B5}
2017-06-18 16:33 - 2017-06-18 16:33 - 00018274 _____ C:\Users\jonas\Downloads\F1_2012_Realistic_Damage_v30_Cromiell (1).zip
2017-06-18 16:01 - 2017-06-18 16:01 - 00018274 _____ C:\Users\jonas\Downloads\F1_2012_Realistic_Damage_v30_Cromiell.zip
2017-06-18 15:50 - 2017-06-18 15:50 - 00000000 ____D C:\Users\jonas\Documents\My Games
2017-06-18 15:50 - 2017-06-18 15:50 - 00000000 ____D C:\ProgramData\Codemasters
2017-06-18 15:28 - 2017-06-18 15:33 - 00000000 ____D C:\Users\jonas\Documents\FIFA 14
2017-06-18 15:23 - 2017-06-18 15:23 - 00000222 _____ C:\Users\jonas\Desktop\F1 2012.url
2017-06-18 15:10 - 2017-06-18 15:10 - 00000000 ____D C:\Users\jonas\Documents\Criterion Games
2017-06-18 13:52 - 2017-06-18 13:52 - 00001378 _____ C:\Users\Public\Desktop\Need for Speed™ Most Wanted.lnk
2017-06-18 11:30 - 2017-06-18 11:30 - 00001327 _____ C:\Users\Public\Desktop\FIFA 14.lnk
2017-06-17 13:26 - 2017-06-17 13:26 - 00006117 _____ C:\Users\jonas\Downloads\gcfv_cor.zip
2017-06-14 18:30 - 2017-06-14 18:30 - 00002437 _____ C:\Users\jonas\Desktop\Elcomsoft Forensic Disk Decryptor.lnk
2017-06-14 18:29 - 2017-06-14 18:29 - 12763136 _____ C:\Users\jonas\Downloads\efdd_setup_en.msi
2017-06-14 18:29 - 2017-06-14 18:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elcomsoft Password Recovery
2017-06-14 18:29 - 2017-06-14 18:29 - 00000000 ____D C:\ProgramData\Elcomsoft Password Recovery
2017-06-14 18:29 - 2017-06-14 18:29 - 00000000 ____D C:\Program Files (x86)\Elcomsoft Password Recovery
2017-06-14 18:29 - 2017-06-14 18:29 - 00000000 ____D C:\Program Files (x86)\Elcomsoft
2017-06-14 18:29 - 2015-12-15 01:20 - 00048704 _____ (Olof Lagerkvist) C:\Windows\system32\Drivers\imdisk.sys
2017-06-14 18:29 - 2015-12-15 01:20 - 00021048 _____ (Olof Lagerkvist) C:\Windows\system32\Drivers\awealloc.sys
2017-06-14 18:29 - 2015-12-15 01:19 - 00051304 _____ (Olof Lagerkvist) C:\Windows\SysWOW64\imdisk.exe
2017-06-14 18:29 - 2015-12-15 01:19 - 00051304 _____ (Olof Lagerkvist) C:\Windows\system32\imdisk.exe
2017-06-14 18:29 - 2015-12-15 01:19 - 00019552 _____ (Olof Lagerkvist) C:\Windows\system32\imdsksvc.exe
2017-06-14 18:29 - 2015-12-15 01:18 - 00119920 _____ (Olof Lagerkvist) C:\Windows\system32\imdisk.cpl
2017-06-14 18:29 - 2015-12-15 01:18 - 00108656 _____ (Olof Lagerkvist) C:\Windows\SysWOW64\imdisk.cpl
2017-06-14 18:29 - 2015-03-29 23:18 - 00001324 _____ C:\Windows\system32\uninstall_imdisk.cmd
2017-06-14 16:10 - 2017-06-14 16:11 - 00000000 ____D C:\Users\jonas\Documents\FIFA 15
2017-06-14 14:45 - 2017-06-03 11:35 - 02259768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreUIComponents.dll
2017-06-14 14:45 - 2017-06-03 11:23 - 20373920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-06-14 14:45 - 2017-06-03 11:23 - 06760024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-06-14 14:45 - 2017-06-03 11:20 - 00583160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2017-06-14 14:45 - 2017-06-03 10:57 - 01248768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2017-06-14 14:45 - 2017-06-03 10:53 - 04559360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2017-06-14 14:45 - 2017-05-20 10:48 - 04469832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2017-06-14 14:45 - 2017-05-20 10:23 - 06728192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2017-06-14 14:45 - 2017-05-20 10:21 - 00476672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2017-06-14 14:45 - 2017-05-20 10:17 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cldapi.dll
2017-06-14 14:45 - 2017-05-20 10:16 - 05225984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2017-06-14 14:44 - 2017-06-03 12:09 - 01003624 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-06-14 14:44 - 2017-06-03 12:07 - 00119712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-06-14 14:44 - 2017-06-03 12:00 - 00219040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2017-06-14 14:44 - 2017-06-03 11:59 - 01409048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2017-06-14 14:44 - 2017-06-03 11:59 - 00626528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2017-06-14 14:44 - 2017-06-03 11:59 - 00311200 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-06-14 14:44 - 2017-06-03 11:59 - 00259400 _____ (Microsoft Corporation) C:\Windows\system32\MusNotifyIcon.exe
2017-06-14 14:44 - 2017-06-03 11:55 - 02681760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-06-14 14:44 - 2017-06-03 11:36 - 01150784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2017-06-14 14:44 - 2017-06-03 11:26 - 00266640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capauthz.dll
2017-06-14 14:44 - 2017-06-03 11:23 - 00573856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2017-06-14 14:44 - 2017-06-03 11:21 - 01516448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppVEntSubsystems32.dll
2017-06-14 14:44 - 2017-06-03 11:14 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\utcutil.dll
2017-06-14 14:44 - 2017-06-03 11:12 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2017-06-14 14:44 - 2017-06-03 11:11 - 02958848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2017-06-14 14:44 - 2017-06-03 11:11 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-06-14 14:44 - 2017-06-03 11:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2017-06-14 14:44 - 2017-06-03 11:11 - 00038912 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-06-14 14:44 - 2017-06-03 11:11 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
2017-06-14 14:44 - 2017-06-03 11:10 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2017-06-14 14:44 - 2017-06-03 11:10 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2017-06-14 14:44 - 2017-06-03 11:09 - 00094720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2017-06-14 14:44 - 2017-06-03 11:07 - 00721920 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2017-06-14 14:44 - 2017-06-03 11:07 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2017-06-14 14:44 - 2017-06-03 11:05 - 20506624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2017-06-14 14:44 - 2017-06-03 11:05 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-06-14 14:44 - 2017-06-03 11:05 - 00169984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devicengccredprov.dll
2017-06-14 14:44 - 2017-06-03 11:04 - 00805888 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2017-06-14 14:44 - 2017-06-03 11:03 - 19336192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-06-14 14:44 - 2017-06-03 11:03 - 00467456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TpmCoreProvisioning.dll
2017-06-14 14:44 - 2017-06-03 11:02 - 08245760 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2017-06-14 14:44 - 2017-06-03 11:00 - 03379200 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-06-14 14:44 - 2017-06-03 11:00 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-06-14 14:44 - 2017-06-03 11:00 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2017-06-14 14:44 - 2017-06-03 10:59 - 04730368 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-06-14 14:44 - 2017-06-03 10:59 - 02672128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-06-14 14:44 - 2017-06-03 10:59 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-06-14 14:44 - 2017-06-03 10:59 - 00636416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
2017-06-14 14:44 - 2017-06-03 10:58 - 05961216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-06-14 14:44 - 2017-06-03 10:58 - 02516480 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2017-06-14 14:44 - 2017-06-03 10:58 - 01046016 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2017-06-14 14:44 - 2017-06-03 10:57 - 06535168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe
2017-06-14 14:44 - 2017-06-03 10:57 - 00797184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-06-14 14:44 - 2017-06-03 10:56 - 06292992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2017-06-14 14:44 - 2017-06-03 10:55 - 03656192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-06-14 14:44 - 2017-06-03 10:55 - 02132480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-06-14 14:44 - 2017-06-03 10:55 - 01019904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2017-06-14 14:44 - 2017-06-03 10:54 - 02341376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-06-14 14:44 - 2017-06-03 10:54 - 02298368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2017-06-14 14:44 - 2017-05-20 11:13 - 01333136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2017-06-14 14:44 - 2017-05-20 10:55 - 00606960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2017-06-14 14:44 - 2017-05-20 10:47 - 01474800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2017-06-14 14:44 - 2017-05-20 10:46 - 05821496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2017-06-14 14:44 - 2017-05-20 10:46 - 01266544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2017-06-14 14:44 - 2017-05-20 10:46 - 00754080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2017-06-14 14:44 - 2017-05-20 10:45 - 00349600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-06-14 14:44 - 2017-05-20 10:44 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2017-06-14 14:44 - 2017-05-20 10:44 - 00181664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2017-06-14 14:44 - 2017-05-20 10:43 - 05802968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2017-06-14 14:44 - 2017-05-20 10:43 - 04672848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2017-06-14 14:44 - 2017-05-20 10:43 - 02424016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2017-06-14 14:44 - 2017-05-20 10:43 - 01529384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2017-06-14 14:44 - 2017-05-20 10:43 - 01455592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2017-06-14 14:44 - 2017-05-20 10:43 - 01120864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2017-06-14 14:44 - 2017-05-20 10:43 - 00354400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll
2017-06-14 14:44 - 2017-05-20 10:29 - 13840384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2017-06-14 14:44 - 2017-05-20 10:27 - 02199552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-06-14 14:44 - 2017-05-20 10:27 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\smartscreenps.dll
2017-06-14 14:44 - 2017-05-20 10:26 - 00059904 _____ C:\Windows\SysWOW64\xboxgipsynthetic.dll
2017-06-14 14:44 - 2017-05-20 10:26 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
2017-06-14 14:44 - 2017-05-20 10:25 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NPSMDesktopProvider.dll
2017-06-14 14:44 - 2017-05-20 10:25 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Diagnostics.dll
2017-06-14 14:44 - 2017-05-20 10:24 - 00362496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
2017-06-14 14:44 - 2017-05-20 10:22 - 01292288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVPXENC.dll
2017-06-14 14:44 - 2017-05-20 10:22 - 00754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MessagingDataModel2.dll
2017-06-14 14:44 - 2017-05-20 10:22 - 00394240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DictationManager.dll
2017-06-14 14:44 - 2017-05-20 10:21 - 01984000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceFlows.DataModel.dll
2017-06-14 14:44 - 2017-05-20 10:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Launcher.dll
2017-06-14 14:44 - 2017-05-20 10:20 - 00807424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2017-06-14 14:44 - 2017-05-20 10:20 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-06-14 14:44 - 2017-05-20 10:20 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2017-06-14 14:44 - 2017-05-20 10:20 - 00354304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2017-06-14 14:44 - 2017-05-20 10:19 - 05719040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2017-06-14 14:44 - 2017-05-20 10:18 - 01450496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2017-06-14 14:44 - 2017-05-20 10:17 - 00952832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2017-06-14 14:44 - 2017-05-20 10:17 - 00909312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2017-06-14 14:44 - 2017-05-20 10:17 - 00329728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2017-06-14 14:44 - 2017-05-20 10:16 - 03667456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-06-14 14:44 - 2017-05-20 10:16 - 02588160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapRouter.dll
2017-06-14 14:44 - 2017-05-20 10:16 - 00899584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2017-06-14 14:44 - 2017-05-20 10:15 - 02088960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapGeocoder.dll
2017-06-14 14:44 - 2017-05-20 10:14 - 04417024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-06-14 14:44 - 2017-05-20 10:14 - 04056576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2017-06-14 14:44 - 2017-05-20 10:14 - 02679296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2017-06-14 14:44 - 2017-05-20 10:14 - 02211328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2017-06-14 14:44 - 2017-05-20 10:14 - 01035264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2017-06-14 14:44 - 2017-05-20 10:11 - 01536512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2017-06-14 14:44 - 2017-05-20 10:10 - 00332800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Midi.dll
2017-06-14 14:44 - 2017-05-20 10:10 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NPSM.dll
2017-06-14 14:44 - 2017-05-20 10:10 - 00089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2017-06-14 14:44 - 2017-05-20 10:08 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RstrtMgr.dll
2017-06-14 14:44 - 2017-05-20 09:07 - 00287648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2017-06-14 14:44 - 2017-05-20 08:58 - 00188824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2017-06-14 14:44 - 2017-05-20 08:55 - 01911752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2017-06-14 14:44 - 2017-05-20 08:55 - 01055648 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2017-06-14 14:44 - 2017-05-20 08:54 - 00730016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2017-06-14 14:44 - 2017-05-20 08:54 - 00546208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2017-06-14 14:44 - 2017-05-20 08:54 - 00144288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storahci.sys
2017-06-14 14:44 - 2017-05-20 08:53 - 00335808 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthService.exe
2017-06-14 14:44 - 2017-05-20 08:51 - 01670496 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2017-06-14 14:44 - 2017-05-20 08:10 - 00809472 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthSSO.dll
2017-06-14 14:44 - 2017-05-20 08:08 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rootmdm.sys
2017-06-14 14:44 - 2017-05-20 08:07 - 00277504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2017-06-14 14:44 - 2017-05-20 08:07 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\XblGameSaveExt.dll
2017-06-14 14:44 - 2017-05-20 08:07 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\snmptrap.exe
2017-06-14 14:44 - 2017-05-20 08:06 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Diagnostics.dll
2017-06-14 14:44 - 2017-05-20 08:00 - 01078272 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2017-06-14 14:44 - 2017-05-20 08:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2017-06-14 14:44 - 2017-05-20 07:58 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2017-06-14 14:43 - 2017-06-03 12:15 - 01596600 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2017-06-14 14:43 - 2017-06-03 12:15 - 00750560 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2017-06-14 14:43 - 2017-06-03 12:15 - 00382368 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-06-14 14:43 - 2017-06-03 12:14 - 01147296 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2017-06-14 14:43 - 2017-06-03 12:14 - 01024928 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2017-06-14 14:43 - 2017-06-03 12:09 - 08318880 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-06-14 14:43 - 2017-06-03 12:08 - 02969880 _____ (Microsoft Corporation) C:\Windows\system32\CoreUIComponents.dll
2017-06-14 14:43 - 2017-06-03 12:02 - 02444192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-06-14 14:43 - 2017-06-03 12:01 - 05477096 _____ (Microsoft Corporation) C:\Windows\system32\OneCoreUAPCommonProxyStub.dll
2017-06-14 14:43 - 2017-06-03 12:00 - 00872472 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2017-06-14 14:43 - 2017-06-03 11:58 - 21352696 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-06-14 14:43 - 2017-06-03 11:58 - 07904784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-06-14 14:43 - 2017-06-03 11:58 - 00254176 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2017-06-14 14:43 - 2017-06-03 11:56 - 01854880 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
2017-06-14 14:43 - 2017-06-03 11:28 - 23677440 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2017-06-14 14:43 - 2017-06-03 11:14 - 03673088 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2017-06-14 14:43 - 2017-06-03 11:14 - 00047104 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-06-14 14:43 - 2017-06-03 11:11 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-06-14 14:43 - 2017-06-03 11:09 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-06-14 14:43 - 2017-06-03 11:09 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\devicengccredprov.dll
2017-06-14 14:43 - 2017-06-03 11:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-06-14 14:43 - 2017-06-03 11:07 - 23682048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-06-14 14:43 - 2017-06-03 11:05 - 01878016 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2017-06-14 14:43 - 2017-06-03 11:04 - 12787200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-06-14 14:43 - 2017-06-03 11:03 - 01260544 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2017-06-14 14:43 - 2017-06-03 11:01 - 02804736 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2017-06-14 14:43 - 2017-06-03 10:59 - 02056192 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2017-06-14 14:43 - 2017-06-03 10:59 - 01142784 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-06-14 14:43 - 2017-06-03 10:59 - 00975360 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-06-14 14:43 - 2017-06-03 10:58 - 02650112 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2017-06-14 14:43 - 2017-06-03 10:58 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-06-14 14:43 - 2017-06-03 10:58 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-06-14 14:43 - 2017-06-03 10:57 - 11870720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-06-14 14:43 - 2017-06-03 10:57 - 05557760 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2017-06-14 14:43 - 2017-06-03 10:57 - 02829824 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-06-14 14:43 - 2017-06-03 10:57 - 01675264 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2017-06-14 14:43 - 2017-06-03 10:54 - 00794112 _____ (Microsoft Corporation) C:\Windows\system32\pwcreator.exe
2017-06-14 14:43 - 2017-05-20 09:08 - 00543648 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2017-06-14 14:43 - 2017-05-20 09:03 - 00777400 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-06-14 14:43 - 2017-05-20 08:56 - 04847928 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2017-06-14 14:43 - 2017-05-20 08:56 - 00712608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2017-06-14 14:43 - 2017-05-20 08:55 - 07325584 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2017-06-14 14:43 - 2017-05-20 08:55 - 00211872 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2017-06-14 14:43 - 2017-05-20 08:53 - 00411040 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-06-14 14:43 - 2017-05-20 08:53 - 00363424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2017-06-14 14:43 - 2017-05-20 08:52 - 04709528 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2017-06-14 14:43 - 2017-05-20 08:52 - 01700408 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2017-06-14 14:43 - 2017-05-20 08:51 - 06551856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2017-06-14 14:43 - 2017-05-20 08:51 - 02604256 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2017-06-14 14:43 - 2017-05-20 08:51 - 01219560 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2017-06-14 14:43 - 2017-05-20 08:48 - 00387928 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2017-06-14 14:43 - 2017-05-20 08:10 - 00361472 _____ (Microsoft Corporation) C:\Windows\system32\ConhostV2.dll
2017-06-14 14:43 - 2017-05-20 08:08 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2017-06-14 14:43 - 2017-05-20 08:05 - 07931392 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2017-06-14 14:43 - 2017-05-20 08:05 - 00518144 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2017-06-14 14:43 - 2017-05-20 08:03 - 08331264 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2017-06-14 14:43 - 2017-05-20 08:03 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2017-06-14 14:43 - 2017-05-20 08:01 - 00590848 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-06-14 14:43 - 2017-05-20 08:01 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2017-06-14 14:43 - 2017-05-20 08:00 - 00846848 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2017-06-14 14:43 - 2017-05-20 08:00 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\cldapi.dll
2017-06-14 14:43 - 2017-05-20 07:59 - 01468416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2017-06-14 14:43 - 2017-05-20 07:59 - 01141760 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2017-06-14 14:43 - 2017-05-20 07:59 - 01028608 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2017-06-14 14:43 - 2017-05-20 07:59 - 00687104 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2017-06-14 14:43 - 2017-05-20 07:58 - 03784704 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll
2017-06-14 14:43 - 2017-05-20 07:58 - 03135488 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll
2017-06-14 14:43 - 2017-05-20 07:58 - 01886208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2017-06-14 14:43 - 2017-05-20 07:58 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\ISM.dll
2017-06-14 14:43 - 2017-05-20 07:55 - 04396032 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-06-14 14:43 - 2017-05-20 07:55 - 02499584 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2017-06-14 14:43 - 2017-05-20 07:55 - 01102848 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2017-06-14 14:43 - 2017-05-20 07:54 - 04537344 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2017-06-14 14:43 - 2017-05-20 07:54 - 02938880 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2017-06-14 14:43 - 2017-05-20 07:52 - 01356800 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2017-06-14 14:43 - 2017-05-20 07:52 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2017-06-14 14:43 - 2017-05-20 07:52 - 00557568 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2017-06-14 14:43 - 2017-05-20 07:52 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2017-06-14 14:43 - 2017-05-20 07:51 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll
2017-06-14 14:43 - 2017-05-20 07:50 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\NPSM.dll
2017-06-14 14:43 - 2017-05-20 07:48 - 02438656 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2017-06-14 14:42 - 2017-06-03 12:10 - 00130464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
2017-06-14 14:42 - 2017-06-03 12:07 - 00923048 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2017-06-14 14:42 - 2017-06-03 12:00 - 00321376 _____ (Microsoft Corporation) C:\Windows\system32\capauthz.dll
2017-06-14 14:42 - 2017-06-03 11:58 - 00660384 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2017-06-14 14:42 - 2017-06-03 11:57 - 00371616 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2017-06-14 14:42 - 2017-06-03 11:56 - 02228120 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystems64.dll
2017-06-14 14:42 - 2017-06-03 11:56 - 01693600 _____ (Microsoft Corporation) C:\Windows\system32\AppVIntegration.dll
2017-06-14 14:42 - 2017-06-03 11:56 - 01458592 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystemController.dll
2017-06-14 14:42 - 2017-06-03 11:56 - 00848288 _____ (Microsoft Corporation) C:\Windows\system32\AppVOrchestration.dll
2017-06-14 14:42 - 2017-06-03 11:56 - 00846752 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe
2017-06-14 14:42 - 2017-06-03 11:56 - 00844696 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntStreamingManager.dll
2017-06-14 14:42 - 2017-06-03 11:56 - 00697760 _____ (Microsoft Corporation) C:\Windows\system32\AppVCatalog.dll
2017-06-14 14:42 - 2017-06-03 11:56 - 00672672 _____ (Microsoft Corporation) C:\Windows\system32\AppVPublishing.dll
2017-06-14 14:42 - 2017-06-03 11:56 - 00399264 _____ (Microsoft Corporation) C:\Windows\system32\AppVScripting.dll
2017-06-14 14:42 - 2017-06-03 11:14 - 00443392 _____ (Microsoft Corporation) C:\Windows\system32\PerceptionSimulationExtensions.dll
2017-06-14 14:42 - 2017-06-03 11:14 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2017-06-14 14:42 - 2017-06-03 11:10 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCredentialDeployment.exe
2017-06-14 14:42 - 2017-06-03 11:07 - 00778240 _____ C:\Windows\system32\MBR2GPT.EXE
2017-06-14 14:42 - 2017-06-03 11:07 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2017-06-14 14:42 - 2017-06-03 11:06 - 00551936 _____ (Microsoft Corporation) C:\Windows\system32\TpmCoreProvisioning.dll
2017-06-14 14:42 - 2017-06-03 11:05 - 07336448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-06-14 14:42 - 2017-06-03 11:04 - 00925696 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2017-06-14 14:42 - 2017-06-03 11:01 - 06726656 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2017-06-14 14:42 - 2017-06-03 10:59 - 02625024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2017-06-14 14:42 - 2017-06-03 10:59 - 01293824 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2017-06-14 14:42 - 2017-06-03 10:51 - 00064512 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe
2017-06-14 14:42 - 2017-05-20 10:29 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
2017-06-14 14:42 - 2017-05-20 09:08 - 01459728 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2017-06-14 14:42 - 2017-05-20 08:59 - 00112544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2017-06-14 14:42 - 2017-05-20 08:56 - 00370928 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2017-06-14 14:42 - 2017-05-20 08:55 - 01506712 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2017-06-14 14:42 - 2017-05-20 08:55 - 00961952 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
2017-06-14 14:42 - 2017-05-20 08:53 - 00654976 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2017-06-14 14:42 - 2017-05-20 08:53 - 00255904 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2017-06-14 14:42 - 2017-05-20 08:51 - 00406064 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2017-06-14 14:42 - 2017-05-20 08:10 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2017-06-14 14:42 - 2017-05-20 08:10 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\winsrvext.dll
2017-06-14 14:42 - 2017-05-20 08:10 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksthunk.sys
2017-06-14 14:42 - 2017-05-20 08:09 - 17365504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2017-06-14 14:42 - 2017-05-20 08:09 - 02199552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2017-06-14 14:42 - 2017-05-20 08:09 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\smartscreenps.dll
2017-06-14 14:42 - 2017-05-20 08:08 - 00086016 _____ C:\Windows\system32\xboxgipsynthetic.dll
2017-06-14 14:42 - 2017-05-20 08:06 - 00866816 _____ (Microsoft Corporation) C:\Windows\system32\NPSMDesktopProvider.dll
2017-06-14 14:42 - 2017-05-20 08:06 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.SharedPC.AccountManager.dll
2017-06-14 14:42 - 2017-05-20 08:03 - 00892416 _____ (Microsoft Corporation) C:\Windows\system32\MessagingDataModel2.dll
2017-06-14 14:42 - 2017-05-20 08:03 - 00549888 _____ (Microsoft Corporation) C:\Windows\system32\DictationManager.dll
2017-06-14 14:42 - 2017-05-20 08:03 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Display.dll
2017-06-14 14:42 - 2017-05-20 08:03 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2017-06-14 14:42 - 2017-05-20 08:02 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\WindowManagement.dll
2017-06-14 14:42 - 2017-05-20 08:02 - 00601088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Launcher.dll
2017-06-14 14:42 - 2017-05-20 08:01 - 02347520 _____ (Microsoft Corporation) C:\Windows\system32\DeviceFlows.DataModel.dll
2017-06-14 14:42 - 2017-05-20 08:01 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2017-06-14 14:42 - 2017-05-20 08:01 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2017-06-14 14:42 - 2017-05-20 08:01 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2017-06-14 14:42 - 2017-05-20 08:01 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2017-06-14 14:42 - 2017-05-20 08:01 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\embeddedmodesvc.dll
2017-06-14 14:42 - 2017-05-20 08:00 - 01067008 _____ (Microsoft Corporation) C:\Windows\system32\XboxNetApiSvc.dll
2017-06-14 14:42 - 2017-05-20 07:59 - 01818624 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2017-06-14 14:42 - 2017-05-20 07:59 - 00972800 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2017-06-14 14:42 - 2017-05-20 07:59 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2017-06-14 14:42 - 2017-05-20 07:58 - 01046016 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2017-06-14 14:42 - 2017-05-20 07:57 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2017-06-14 14:42 - 2017-05-20 07:56 - 02730496 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
2017-06-14 14:42 - 2017-05-20 07:56 - 01076736 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2017-06-14 14:42 - 2017-05-20 07:55 - 03332096 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2017-06-14 14:42 - 2017-05-20 07:54 - 04707840 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-06-14 14:42 - 2017-05-20 07:54 - 03803136 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-06-14 14:42 - 2017-05-20 07:54 - 01275904 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2017-06-14 14:42 - 2017-05-20 07:51 - 01706496 _____ (Microsoft Corporation)
         

C:\Windows\system32\Windows.UI.Immersive.dll
2017-06-14 14:42 - 2017-05-20 07:50 - 00439808 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2017-06-14 14:42 - 2017-05-20 07:48 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll
2017-06-14 14:42 - 2017-05-20 07:47 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll
2017-06-14 14:42 - 2017-05-20 07:47 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\RstrtMgr.dll
2017-06-12 21:23 - 2017-06-12 21:23 - 00000358 _____ C:\Users\jonas\Desktop\FSX .txt
2017-06-12 20:31 - 2017-06-12 21:10 - 118786478 _____ C:\Users\jonas\Downloads\tdsx_7879_klm_fixed.zip
2017-06-12 20:06 - 2017-06-12 20:31 - 74381007 _____ C:\Users\jonas\Downloads\tbpb-fsxv100.zip
2017-06-12 20:01 - 2017-06-12 20:01 - 01488211 _____ C:\Users\jonas\Downloads\tncm_jd.zip
2017-06-12 19:54 - 2017-06-12 19:58 - 14340624 _____ C:\Users\jonas\Downloads\caribben.zip
2017-06-12 16:40 - 2017-06-12 16:59 - 60272016 _____ C:\Users\jonas\Downloads\an73fsx.zip
2017-06-12 16:35 - 2017-06-12 16:38 - 09536996 _____ C:\Users\jonas\Downloads\ab738ml-x-fsrepaintsger.zip
2017-06-12 16:22 - 2017-06-12 16:34 - 35115552 _____ C:\Users\jonas\Downloads\pmdg737-800_wl_airberlin_d-abmp.zip
2017-06-12 16:18 - 2017-06-12 16:20 - 04028182 _____ C:\Users\jonas\Downloads\ab737-1.zip
2017-06-12 15:32 - 2017-06-12 15:37 - 14926875 _____ C:\Users\jonas\Downloads\738dabkc (1).zip
2017-06-12 14:42 - 2017-06-12 14:42 - 00000000 ____D C:\ProgramData\Electronic Arts
2017-06-12 14:21 - 2017-06-12 14:21 - 00001224 _____ C:\Users\Public\Desktop\FIFA 15.lnk
2017-06-12 14:21 - 2017-06-12 14:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 15
2017-06-11 18:49 - 2017-06-11 18:53 - 14256258 _____ C:\Users\jonas\Downloads\po752sff.zip
2017-06-11 18:37 - 2017-06-11 18:43 - 18396138 _____ C:\Users\jonas\Downloads\os_757-200_tcx_new.zip
2017-06-11 18:30 - 2017-06-11 18:34 - 11740358 _____ C:\Users\jonas\Downloads\b752acsf.zip
2017-06-11 18:26 - 2017-06-11 18:28 - 07253244 _____ C:\Users\jonas\Downloads\POSKY 757 VC.zip
2017-06-11 18:17 - 2017-06-11 18:25 - 26390216 _____ C:\Users\jonas\Downloads\fsx_cs_b753_condor_2002 (1).zip
2017-06-11 17:40 - 2017-06-11 17:46 - 19934764 _____ C:\Users\jonas\Downloads\united-757-200.zip
2017-06-11 17:37 - 2017-06-11 17:39 - 05901646 _____ C:\Users\jonas\Downloads\359v4dlx.zip
2017-06-11 17:29 - 2017-06-11 17:36 - 21308187 _____ C:\Users\jonas\Downloads\a380-800edelweissair.zip
2017-06-11 17:27 - 2017-06-11 17:29 - 04932200 _____ C:\Users\jonas\Downloads\a380-800dfw.zip
2017-06-11 17:26 - 2017-06-11 17:27 - 03103980 _____ C:\Users\jonas\Downloads\a380v3d3.zip
2017-06-11 17:24 - 2017-06-11 17:26 - 05478505 _____ C:\Users\jonas\Downloads\359v4skx.zip
2017-06-11 17:17 - 2017-06-11 17:23 - 19742164 _____ C:\Users\jonas\Downloads\toma3st.zip
2017-06-11 17:13 - 2017-06-11 17:17 - 13196710 _____ C:\Users\jonas\Downloads\a350f_demo03_fsx.zip
2017-06-11 17:11 - 2017-06-11 17:13 - 03296748 _____ C:\Users\jonas\Downloads\a350dm01.zip
2017-06-11 17:05 - 2017-06-11 17:08 - 08153586 _____ C:\Users\jonas\Downloads\paaa35x.zip
2017-06-11 17:00 - 2017-06-11 17:05 - 16150577 _____ C:\Users\jonas\Downloads\airbus_a350_xwb_final_pack_-_fsx.zip
2017-06-11 16:58 - 2017-06-11 16:59 - 02414042 _____ C:\Users\jonas\Downloads\aribus_a350-900_xwb_qatar.zip
2017-06-11 16:52 - 2017-06-11 16:57 - 13340578 _____ C:\Users\jonas\Downloads\a350f_demo01_fsx.zip
2017-06-11 16:21 - 2017-06-18 13:28 - 00000000 ____D C:\Program Files (x86)\Origin Games
2017-06-11 16:15 - 2017-06-19 18:35 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Origin
2017-06-11 16:14 - 2017-06-20 17:53 - 00000000 ____D C:\Program Files (x86)\Origin
2017-06-11 16:14 - 2017-06-11 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2017-06-11 16:12 - 2017-06-20 14:15 - 00000000 ____D C:\ProgramData\Origin
2017-06-11 16:12 - 2017-06-11 16:21 - 00000000 ____D C:\Users\jonas\AppData\Local\Origin
2017-06-11 16:12 - 2017-06-11 16:12 - 00000000 ____D C:\Users\jonas\.QtWebEngineProcess
2017-06-11 16:12 - 2017-06-11 16:12 - 00000000 ____D C:\Users\jonas\.Origin
2017-06-11 16:05 - 2017-06-11 16:06 - 54854408 _____ (Electronic Arts) C:\Users\jonas\Downloads\OriginThinSetup.exe
2017-06-11 12:20 - 2017-06-11 12:20 - 00000000 ____D C:\Users\jonas\Documents\Ubisoft
2017-06-11 11:45 - 2017-06-11 11:45 - 00019704 _____ C:\Users\jonas\Downloads\autosave.dat
2017-06-10 16:03 - 2017-06-10 16:03 - 00001013 _____ C:\Users\jonas\Desktop\Challenger.lnk
2017-06-10 16:02 - 2017-06-10 16:03 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Challenger
2017-06-10 16:02 - 2017-06-10 16:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Challenger
2017-06-10 16:02 - 2017-06-10 16:02 - 00000000 ____D C:\Program Files (x86)\Challenger
2017-06-10 15:57 - 2017-06-10 15:57 - 00000000 ____D C:\Program Files\NortonInstaller
2017-06-10 15:25 - 2017-06-10 15:25 - 00853726 _____ C:\Users\jonas\Downloads\Challenger2424f.zip
2017-06-10 15:16 - 2017-06-10 15:17 - 37349038 _____ C:\Users\jonas\Downloads\trupax9A_win32.zip
2017-06-10 14:55 - 2017-06-10 14:56 - 01633840 _____ C:\Users\jonas\Downloads\baw_dh8.zip
2017-06-10 14:48 - 2017-06-10 14:51 - 08579339 _____ C:\Users\jonas\Downloads\oadashq-100fsx.zip
2017-06-10 14:19 - 2017-06-10 14:42 - 70563517 _____ C:\Users\jonas\Downloads\dash8_39.zip
2017-06-10 14:17 - 2017-06-10 14:18 - 03277270 _____ C:\Users\jonas\Downloads\dehavillanddash8airberlinv2.zip
2017-06-10 14:14 - 2017-06-10 14:17 - 09281165 _____ C:\Users\jonas\Downloads\ab738fsx-oneworld.zip
2017-06-10 14:08 - 2017-06-10 14:13 - 14926875 _____ C:\Users\jonas\Downloads\738dabkc.zip
2017-06-10 14:06 - 2017-06-10 14:08 - 05289924 _____ C:\Users\jonas\Downloads\727con78.zip
2017-06-10 13:57 - 2017-06-10 14:06 - 26390216 _____ C:\Users\jonas\Downloads\fsx_cs_b753_condor_2002.zip
2017-06-10 13:54 - 2017-06-10 13:57 - 07972841 _____ C:\Users\jonas\Downloads\germania_ifly.zip
2017-06-10 13:48 - 2017-06-10 13:53 - 15741574 _____ C:\Users\jonas\Downloads\fsx_pa319_germania.zip
2017-06-10 13:33 - 2017-06-10 13:48 - 44514508 _____ C:\Users\jonas\Downloads\a340-313x_german_airforce.zip
2017-06-10 13:20 - 2017-06-10 13:33 - 38569835 _____ C:\Users\jonas\Downloads\74mr1fsx.zip
2017-06-10 13:19 - 2017-06-10 13:20 - 04377776 _____ C:\Users\jonas\Downloads\fsxaf1.zip
2017-06-10 13:07 - 2017-06-10 13:08 - 02752954 _____ C:\Users\jonas\Downloads\742af1.zip
2017-06-10 13:00 - 2017-06-10 13:06 - 19498396 _____ C:\Users\jonas\Downloads\fsx_pa319_federal_republic_of_germany.zip
2017-06-10 12:52 - 2017-06-10 12:52 - 00006472 _____ C:\Users\jonas\Downloads\af2eddwl.zip
2017-06-10 12:49 - 2017-06-10 12:50 - 05205629 _____ C:\Users\jonas\Downloads\eddw2k43.zip
2017-06-10 12:41 - 2017-06-10 12:41 - 00667565 _____ C:\Users\jonas\Downloads\egkk_rs_fsx.zip
2017-06-10 12:17 - 2017-06-10 12:23 - 00000000 ____D C:\Users\jonas\AppData\Local\3D-Modellbahn Studio
2017-06-10 12:16 - 2017-06-10 12:16 - 00001216 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\3D-Modellbahn Studio.lnk
2017-06-10 12:15 - 2017-06-10 12:16 - 00000000 ____D C:\Program Files (x86)\3D-Modellbahn Studio
2017-06-10 12:14 - 2017-06-10 12:14 - 139931115 _____ C:\Users\jonas\Downloads\SetupModellbahnStudio_3.1.7.0.exe.zip
2017-06-10 11:28 - 2017-06-10 12:06 - 00000000 ____D C:\Users\jonas\AppData\Local\Loksim3D
2017-06-10 11:28 - 2017-06-10 11:28 - 00000000 ____D C:\Users\jonas\AppData\Local\CrashRpt
2017-06-10 11:27 - 2017-06-10 12:05 - 00000000 ____D C:\Users\Public\Documents\Loksim3D
2017-06-10 11:27 - 2017-06-10 11:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Loksim3D
2017-06-10 11:27 - 2017-06-10 11:27 - 00000000 ____D C:\Program Files (x86)\Loksim3D
2017-06-10 11:25 - 2017-06-10 11:25 - 121098700 _____ C:\Users\jonas\Downloads\Setup-Loksim3D-2-9-2.zip
2017-06-10 10:57 - 2017-06-10 10:57 - 00002870 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2017-06-10 10:57 - 2017-06-10 10:57 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-06-10 10:57 - 2017-06-10 10:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-06-10 10:57 - 2017-06-10 10:57 - 00000000 ____D C:\Program Files\CCleaner
2017-06-10 10:54 - 2017-06-10 10:54 - 09551280 _____ (Piriform Ltd) C:\Users\jonas\Downloads\ccsetup530.exe
2017-06-09 16:15 - 2017-06-09 17:23 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Bitcoin
2017-06-09 16:12 - 2017-06-09 16:17 - 16974169 _____ C:\Users\jonas\Downloads\pa320iae_wizzair.zip
2017-06-09 16:07 - 2017-06-09 16:11 - 13429168 _____ C:\Users\jonas\Downloads\joghurtb.zip
2017-06-09 16:03 - 2017-06-09 16:07 - 11062726 _____ C:\Users\jonas\Downloads\eza320-214fsx.zip
2017-06-09 15:59 - 2017-06-09 16:02 - 09268103 _____ C:\Users\jonas\Downloads\air320p1.zip
2017-06-09 15:56 - 2017-06-09 15:59 - 08182791 _____ C:\Users\jonas\Downloads\a320_demo02_fsx.zip
2017-06-09 15:54 - 2017-06-09 15:54 - 00046076 _____ C:\Users\jonas\Downloads\eddh_ade_rs_fsx.zip
2017-06-09 15:53 - 2017-06-09 15:54 - 00063369 _____ C:\Users\jonas\Downloads\af2geman.zip
2017-06-09 15:48 - 2017-06-09 15:53 - 14432618 _____ C:\Users\jonas\Downloads\kjfk_pr_fsx.zip
2017-06-09 15:43 - 2017-06-09 15:43 - 00430669 _____ C:\Users\jonas\Downloads\flightsimaddontracker.zip
2017-06-09 15:42 - 2017-06-09 15:42 - 00001776 _____ C:\Users\jonas\Desktop\Bitcoin Core (testnet, 64-bit).lnk
2017-06-09 15:41 - 2017-06-09 15:41 - 00000890 _____ C:\Users\jonas\Desktop\Bitcoin Core (64-bit).lnk
2017-06-09 15:41 - 2017-06-09 15:41 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bitcoin Core
2017-06-09 15:41 - 2017-06-09 15:41 - 00000000 ____D C:\Program Files\Bitcoin
2017-06-09 15:39 - 2017-06-09 15:41 - 08192266 _____ C:\Users\jonas\Downloads\fsx_analog_minipanel_v2_1.zip
2017-06-09 15:38 - 2017-06-09 15:39 - 39770178 _____ C:\Users\jonas\Downloads\ivap-v2.0.2-b2773 (1).zip
2017-06-09 15:33 - 2017-06-09 15:34 - 13833808 _____ (Bitcoin Core project) C:\Users\jonas\Downloads\bitcoin-0.14.1-win64-setup.exe
2017-06-07 21:04 - 2017-06-07 21:09 - 13313559 _____ C:\Users\jonas\Downloads\rcmct64.zip
2017-06-07 21:00 - 2017-06-07 21:03 - 07106158 _____ C:\Users\jonas\Downloads\fsaom366.zip
2017-06-07 20:55 - 2017-06-07 20:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Addit! Pro For Flight Simulator X
2017-06-07 20:54 - 2017-06-09 16:55 - 00000000 ____D C:\Program Files (x86)\Addit! Pro FSX
2017-06-07 20:54 - 2017-06-07 20:54 - 00000000 ____D C:\Users\jonas\AppData\Local\{5ED2C117-4B4E-4995-A790-23D90796B4AC}
2017-06-07 20:43 - 2017-06-07 20:47 - 12220668 _____ C:\Users\jonas\Downloads\apxv754.zip
2017-06-07 19:03 - 2017-06-16 17:19 - 00000000 ____D C:\Users\jonas\AppData\Roaming\teamspeak2
2017-06-07 19:00 - 2017-06-07 19:00 - 00034064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lhacm.acm
2017-06-07 19:00 - 2017-06-07 19:00 - 00001195 _____ C:\Users\jonas\Desktop\Teamspeak 2 RC2.lnk
2017-06-07 19:00 - 2017-06-07 19:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Teamspeak2 RC2
2017-06-07 18:06 - 2017-06-07 18:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IVAO
2017-06-07 18:05 - 2017-06-21 13:50 - 00000000 ____D C:\Program Files (x86)\IVAO
2017-06-07 18:05 - 2017-06-07 18:05 - 00000000 ____D C:\Users\jonas\AppData\Roaming\IVAO
2017-06-07 18:04 - 2017-06-07 18:04 - 39770178 _____ C:\Users\jonas\Downloads\ivap-v2.0.2-b2773.zip
2017-06-07 17:43 - 2017-06-07 17:44 - 04775425 _____ C:\Users\jonas\Downloads\ch46upxa.zip
2017-06-07 17:36 - 2017-06-07 17:40 - 09783287 _____ C:\Users\jonas\Downloads\fsx_mil_mi-6_hook.zip
2017-06-07 17:35 - 2017-06-07 17:36 - 01362149 _____ C:\Users\jonas\Downloads\S61nbsp.zip
2017-06-07 17:29 - 2017-06-07 17:35 - 16795563 _____ C:\Users\jonas\Downloads\cobra.zip
2017-06-07 17:28 - 2017-06-07 17:29 - 00000000 ____D C:\FSXAIRPLANESINSTALLER
2017-06-07 17:28 - 2017-06-07 17:28 - 00033466 _____ C:\Users\jonas\Downloads\fsxacfti.zip
2017-06-07 17:25 - 2017-06-07 17:26 - 03902179 _____ C:\Users\jonas\Downloads\22raf101.zip
2017-06-07 17:23 - 2017-06-07 17:24 - 06012386 _____ C:\Users\jonas\Downloads\s-61_ph-nza.zip
2017-06-07 17:17 - 2017-06-07 17:22 - 16193908 _____ C:\Users\jonas\Downloads\royalnavyre-paint.zip
2017-06-07 17:06 - 2017-06-07 17:16 - 30145109 _____ C:\Users\jonas\Downloads\os_ups_747f_n570up_v2.zip
2017-06-07 17:01 - 2017-06-07 17:06 - 14474833 _____ C:\Users\jonas\Downloads\a330_demo02_fsx.zip
2017-06-07 16:51 - 2017-06-07 16:51 - 02634391 _____ C:\Users\jonas\Downloads\boeing-747-400_fsx-cargo.zip
2017-06-07 16:50 - 2017-06-07 16:50 - 00011874 _____ C:\Users\jonas\Downloads\aflagof9.zip
2017-06-07 16:35 - 2016-01-22 12:07 - 00000052 ____N C:\Users\jonas\Downloads\Go to Fly Away Simulation.url
2017-06-07 16:35 - 2013-10-30 00:09 - 00000959 ____N C:\Users\jonas\Downloads\flyawaysimulation.txt
2017-06-07 16:34 - 2017-06-07 16:34 - 00564434 _____ C:\Users\jonas\Downloads\fsx_2d_cabin_window_wing_view_panel.zip
2017-06-07 16:32 - 2017-06-07 16:32 - 00000000 ____D C:\Users\jonas\Desktop\ShadersHLSL
2017-06-07 16:30 - 2011-01-26 00:28 - 00752437 _____ (Bojote) C:\Users\jonas\Downloads\setup.exe
2017-06-07 16:30 - 2011-01-26 00:27 - 00010632 _____ C:\Users\jonas\Downloads\readme.txt
2017-06-07 16:30 - 2011-01-26 00:10 - 00000000 ____D C:\Users\jonas\Downloads\MANUAL_INSTALATION
2017-06-07 16:29 - 2017-06-07 16:29 - 00513630 _____ C:\Users\jonas\Downloads\FSX Shader 3 Mod.zip
2017-06-07 16:08 - 2017-06-07 16:09 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\aerostudios
2017-06-07 16:08 - 2017-06-07 16:09 - 00000000 ____D C:\Program Files (x86)\ATCsimulator2
2017-06-07 16:08 - 2017-06-07 16:08 - 00249856 ____N (Microsoft Corporation) C:\Windows\Setup1.exe
2017-06-07 16:08 - 2017-06-07 16:08 - 00073216 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE
2017-06-07 16:07 - 2017-06-07 16:07 - 00668797 _____ C:\Users\jonas\Downloads\tncm_v1_0.zip
2017-06-07 16:07 - 2017-06-07 16:07 - 00000000 ____D C:\Windows\lhsp
2017-06-07 16:00 - 2017-06-07 16:07 - 21394944 _____ C:\Users\jonas\Downloads\atcs2demo.exe
2017-06-06 12:20 - 2017-06-06 12:21 - 00000000 ____D C:\Users\jonas\Desktop\Neuer Ordner
2017-06-06 12:17 - 2017-06-21 13:05 - 00000000 ____D C:\Users\jonas\Documents\Flight Simulator X-Dateien
2017-06-06 12:14 - 2017-06-06 12:14 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0
2017-06-06 11:50 - 2017-06-06 11:50 - 00000000 ____D C:\Users\jonas\AppData\Local\Вoйти в Интeрнет
2017-06-06 11:46 - 2017-06-06 11:46 - 00000000 ____D C:\Users\jonas\AppData\Local\Поиcк в Интeрнете
2017-06-06 11:46 - 2017-06-06 11:44 - 00565416 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-06-06 11:45 - 2017-06-06 12:08 - 00000000 ____D C:\ProgramData\Mail.Ru
2017-06-06 11:43 - 2017-06-06 11:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Games
2017-06-06 11:38 - 2017-06-06 11:38 - 00003372 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2017-06-05 12:26 - 2017-06-05 12:26 - 00000000 ____D C:\Users\jonas\Documents\ProcAlyzer Dumps
2017-06-05 12:22 - 2017-06-05 12:22 - 00001009 _____ C:\Users\jonas\Desktop\Don't Panic!.lnk
2017-06-05 12:22 - 2017-06-05 12:22 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Don't Panic!
2017-06-05 12:22 - 2017-06-05 12:22 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Don't Panic!
2017-06-05 12:21 - 2017-06-05 12:21 - 00001464 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2017-06-05 12:21 - 2017-06-05 12:21 - 00001452 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2017-06-05 12:21 - 2017-06-05 12:21 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2017-06-05 12:21 - 2017-06-05 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2017-06-05 12:21 - 2017-06-05 12:21 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2017-06-05 12:21 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2017-06-05 12:20 - 2017-06-05 12:20 - 02681119 _____ C:\Users\jonas\Downloads\Dont_Panic_3.1.0.30.zip
2017-06-05 12:19 - 2017-06-05 12:19 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\jonas\Downloads\spybot-2.4.exe
2017-06-05 12:17 - 2017-06-05 12:17 - 00278291 _____ C:\Users\jonas\Downloads\elevatedshortcut.zip
2017-06-05 12:17 - 2017-06-05 12:17 - 00001183 _____ C:\Users\Public\Desktop\Elevated Shortcut.lnk
2017-06-05 12:17 - 2017-06-05 12:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elevated Shortcut
2017-06-05 12:17 - 2017-06-05 12:17 - 00000000 ____D C:\Program Files (x86)\Elevated Shortcut
2017-06-05 12:15 - 2017-06-05 12:15 - 00000000 ____D C:\Users\jonas\Desktop\God mode.{ED7BA470-8E54-465E-825C-99712043E01C}
2017-06-05 12:14 - 2017-06-05 12:14 - 00000498 _____ C:\Users\jonas\Downloads\GodMode.zip
2017-06-05 12:07 - 2017-06-22 08:47 - 00290944 _____ C:\Windows\system32\FNTCACHE.DAT
2017-06-04 14:11 - 2017-06-04 14:11 - 00001132 _____ C:\Users\Public\Desktop\OpenOffice 4.1.3.lnk
2017-06-04 14:11 - 2017-06-04 14:11 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.3
2017-06-04 14:11 - 2017-06-04 14:11 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2017-06-04 14:10 - 2017-06-04 14:10 - 00000000 ____D C:\Users\jonas\OpenOffice 4.1.3 (de) Installation Files
2017-06-04 14:08 - 2017-06-04 14:09 - 171330228 _____ C:\Users\jonas\Downloads\Apache_OpenOffice_4.1.3_Win_x86_install_de.exe
2017-06-04 14:03 - 2017-06-04 14:03 - 00002583 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2017-06-04 14:03 - 2017-06-04 14:03 - 00002579 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2017-06-04 14:03 - 2017-06-04 14:03 - 00002558 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2017-06-04 14:03 - 2017-06-04 14:03 - 00002497 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2017-06-04 14:03 - 2017-06-04 14:03 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2017-06-04 14:03 - 2017-06-04 14:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools
2017-06-04 14:00 - 2017-06-17 09:31 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-06-04 14:00 - 2017-06-04 14:00 - 00000000 ____D C:\Program Files\Microsoft Office 15
2017-06-04 13:47 - 2017-06-04 13:58 - 2907316224 _____ C:\Users\jonas\Downloads\HomeBusinessRetail.img
2017-06-04 12:58 - 2017-06-04 12:59 - 00000000 ____D C:\NPE
2017-06-04 12:54 - 2016-05-12 16:43 - 04382840 _____ (Intel Corporation) C:\Windows\system32\Gfxv4_0.exe
2017-06-04 12:54 - 2016-05-12 16:43 - 04379256 _____ (Intel Corporation) C:\Windows\system32\Gfxv2_0.exe
2017-06-04 12:54 - 2016-05-12 16:43 - 02497568 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiVAD64.exe
2017-06-04 12:54 - 2016-05-12 16:43 - 00959608 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe
2017-06-04 12:54 - 2016-05-12 16:43 - 00545912 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe
2017-06-04 12:54 - 2016-05-12 16:43 - 00545400 _____ (Intel Corporation) C:\Windows\system32\DPTopologyAppv2_0.exe
2017-06-04 12:54 - 2016-05-12 16:43 - 00433784 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUMS64.exe
2017-06-04 12:54 - 2016-05-12 16:43 - 00399992 _____ (Intel Corporation) C:\Windows\system32\CustomModeApp.exe
2017-06-04 12:54 - 2016-05-12 16:43 - 00399480 _____ (Intel Corporation) C:\Windows\system32\CustomModeAppv2_0.exe
2017-06-04 12:54 - 2016-05-12 16:43 - 00280696 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
2017-06-04 12:54 - 2016-05-12 16:43 - 00195192 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2017-06-04 12:54 - 2016-05-12 16:43 - 00156280 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2017-06-04 12:54 - 2016-05-12 16:39 - 22905344 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 17837568 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 11783680 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 10946840 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 10474040 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 08513536 _____ (Intel Corporation) C:\Windows\system32\ig7icd64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 06500352 _____ (Intel Corporation) C:\Windows\SysWOW64\ig7icd32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 04015576 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAAC64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 03650832 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 02027008 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 01986560 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 01785856 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 01758208 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 01461208 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSecureSourceFilter64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 01137120 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 01133000 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00863704 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiWinNextAgent64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00650712 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAudioFilter64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00609280 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00608216 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMux64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00454760 _____ (Intel Corporation) C:\Windows\system32\igdmd64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00376832 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00371712 _____ (Intel Corporation) C:\Windows\system32\igfxOSP.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00366680 _____ (Intel Corporation) C:\Windows\SysWOW64\igdmd32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00366080 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00349144 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSilenceFilter64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00321536 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00286720 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00255488 _____ C:\Windows\system32\igfxCPL.cpl
2017-06-04 12:54 - 2016-05-12 16:39 - 00221184 _____ C:\Windows\system32\igdde64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00218848 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00215000 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUtils64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00191476 _____ C:\Windows\system32\resTHA.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00190464 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v4425.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00188496 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00184832 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00184036 _____ C:\Windows\system32\resELL.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00183840 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00182784 _____ C:\Windows\SysWOW64\igdde32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00182232 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiDDEAgent64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00179828 _____ C:\Windows\system32\resRUS.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00165460 _____ C:\Windows\system32\resARA.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00164948 _____ C:\Windows\system32\resJPN.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00164884 _____ C:\Windows\system32\resHEB.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00162304 _____ C:\Windows\system32\igdail64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00160260 _____ C:\Windows\system32\resHUN.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00160196 _____ C:\Windows\system32\resFRA.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00159096 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00158532 _____ C:\Windows\system32\resKOR.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00158388 _____ C:\Windows\system32\resDEU.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00158356 _____ C:\Windows\system32\resITA.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00158148 _____ C:\Windows\system32\resROM.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00158052 _____ C:\Windows\system32\resESN.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00157652 _____ C:\Windows\system32\resPLK.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00157492 _____ C:\Windows\system32\resSKY.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00157332 _____ C:\Windows\system32\resNLD.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00156708 _____ C:\Windows\system32\resPTB.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00156628 _____ C:\Windows\system32\resCSY.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00156596 _____ C:\Windows\system32\resTRK.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00156420 _____ C:\Windows\system32\resPTG.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00155972 _____ C:\Windows\system32\resFIN.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00155540 _____ C:\Windows\system32\resHRV.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00155136 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00155124 _____ C:\Windows\system32\resSVE.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00154964 _____ C:\Windows\system32\resSLV.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00154004 _____ C:\Windows\system32\resNOR.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00153508 _____ C:\Windows\system32\resDAN.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00152164 _____ C:\Windows\system32\resENU.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00150404 _____ C:\Windows\system32\resCHT.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00149524 _____ C:\Windows\system32\resCHS.cui
2017-06-04 12:54 - 2016-05-12 16:39 - 00143872 _____ C:\Windows\SysWOW64\igdail32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00133080 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMCUMD64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00098776 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiLogServer64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00094208 _____ C:\Windows\system32\IccLibDll_x64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00086528 _____ C:\Windows\system32\igfxCUIServicePS.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00069632 _____ ( ) C:\Windows\system32\igfxDHLibv2_0.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00064000 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00060416 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00059904 _____ ( ) C:\Windows\system32\igfxDHLib.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00031448 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00030720 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00010752 _____ ( ) C:\Windows\system32\igfxDILibv2_0.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00010752 _____ ( ) C:\Windows\system32\igfxDILib.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLibv2_0.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00010240 _____ ( ) C:\Windows\system32\igfxEMLib.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLibv2_0.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00005120 _____ ( ) C:\Windows\system32\igfxLHMLib.dll
2017-06-04 12:54 - 2016-05-12 16:39 - 00002582 _____ C:\Windows\system32\iglhxs64.vp
2017-06-04 12:52 - 2017-06-04 12:52 - 00000000 ____D C:\Program Files\DIFX
2017-06-04 12:49 - 2015-12-01 13:30 - 00187168 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwampfl.sys
2017-06-04 12:49 - 2015-08-05 10:19 - 00070898 _____ C:\Windows\system32\Drivers\BCM20702A1_001.002.014.1502.1757.hex
2017-06-04 12:44 - 2017-06-04 12:44 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2017-06-04 12:44 - 2015-06-18 04:25 - 00040592 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\L8042Kbd.sys
2017-06-04 12:43 - 2016-06-07 21:33 - 00042600 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2017-06-04 12:43 - 2014-01-30 18:17 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll
2017-06-04 12:17 - 2017-06-04 12:17 - 00001064 _____ C:\Users\Public\Desktop\Xleaner.lnk
2017-06-04 12:17 - 2017-06-04 12:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xleaner
2017-06-04 12:17 - 2017-06-04 12:17 - 00000000 ____D C:\Program Files (x86)\Xleaner
2017-06-04 12:17 - 2005-04-15 16:58 - 01351392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.ocx
2017-06-04 12:16 - 2017-06-04 12:16 - 01262752 _____ (More Than A Cleaner.de ) C:\Users\jonas\Downloads\xleanersetup428.exe
2017-06-04 12:05 - 2017-06-22 09:13 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Ashampoo
2017-06-04 12:05 - 2017-06-04 12:56 - 00001289 _____ C:\Users\jonas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo Driver Updater.lnk
2017-06-04 12:05 - 2017-06-04 12:05 - 00000000 ____D C:\Program Files\Ashampoo
2017-06-03 20:11 - 2017-06-03 20:11 - 19118405 _____ C:\Users\jonas\Downloads\Impactor_0.9.41 (1).zip
2017-06-03 19:40 - 2017-06-04 13:40 - 00000000 ____D C:\AdwCleaner
2017-06-03 19:39 - 2017-06-03 19:39 - 04110280 _____ C:\Users\jonas\Downloads\adwcleaner_6.047__1_.exe
2017-06-03 19:19 - 2017-06-20 18:43 - 00000000 ____D C:\Users\jonas\AppData\Local\CrashDumps
2017-06-03 18:40 - 2017-06-04 13:04 - 00000000 ____D C:\Users\jonas\AppData\Local\NPE
2017-06-03 18:20 - 2017-06-03 18:20 - 00000000 ____D C:\Users\jonas\AppData\Local\Chromium
2017-06-03 18:15 - 2017-06-03 18:21 - 00000000 ____D C:\Users\jonas\AppData\Local\wmipr
2017-06-03 18:14 - 2017-06-03 18:14 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Wondershare
2017-06-03 18:13 - 2017-06-03 18:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2017-06-03 18:13 - 2017-01-12 11:45 - 00076384 _____ (hxxp://libusb-win32.sourceforge.net) C:\Windows\SysWOW64\libusb0.dll
2017-06-03 18:13 - 2017-01-12 11:45 - 00052832 _____ (hxxp://libusb-win32.sourceforge.net) C:\Windows\SysWOW64\Drivers\libusb0.sys
2017-06-03 18:13 - 2015-02-27 10:35 - 00000232 _____ C:\Windows\SysWOW64\dllhost.exe.config
2017-06-03 18:12 - 2017-06-03 18:15 - 00000000 ____D C:\ProgramData\Wondershare
2017-06-03 18:12 - 2017-06-03 18:15 - 00000000 ____D C:\Program Files (x86)\Wondershare
2017-06-03 18:12 - 2017-06-03 18:12 - 00000000 ____D C:\Users\Public\Documents\Wondershare
2017-06-03 18:12 - 2017-06-03 18:12 - 00000000 ____D C:\Users\jonas\AppData\Roaming\WinRAR
2017-06-03 18:12 - 2017-06-03 18:12 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-06-03 18:12 - 2017-06-03 18:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-06-03 18:11 - 2017-06-03 18:12 - 00000000 ____D C:\Program Files\WinRAR
2017-06-03 18:11 - 2017-06-03 18:11 - 02309992 _____ C:\Users\jonas\Downloads\winrar-x64-540d.exe
2017-06-03 18:07 - 2017-06-03 18:25 - 00000000 ____D C:\Users\jonas\Documents\ios_10_x_jailbreak_updated
2017-06-03 17:43 - 2017-06-03 17:43 - 00000000 ____D C:\Users\jonas\Documents\teiron
2017-06-03 17:43 - 2017-06-03 17:43 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Teiron
2017-06-03 17:43 - 2017-06-03 17:43 - 00000000 ____D C:\Users\jonas\AppData\Roaming\ahelper
2017-06-03 13:56 - 2017-06-03 13:48 - 00086252 _____ C:\Users\jonas\Desktop\Trident.ipa
2017-06-03 13:51 - 2017-06-03 13:53 - 00000000 ____D C:\Users\jonas\Desktop\iPhone 5s Backup
2017-06-03 13:49 - 2017-06-03 13:49 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2017-06-03 13:49 - 2017-06-03 13:49 - 00000000 ____D C:\ProgramData\DigiDNA
2017-06-03 13:48 - 2017-06-06 12:23 - 00000000 ____D C:\Users\jonas\AppData\Roaming\iMazing
2017-06-03 13:48 - 2017-06-03 13:48 - 00086252 _____ C:\Users\jonas\Downloads\Trident.ipa
2017-06-03 13:48 - 2017-06-03 13:48 - 00000000 ____D C:\Users\jonas\AppData\Local\DigiDNA
2017-06-03 12:49 - 2017-06-03 12:49 - 00000000 ____D C:\Users\jonas\.android
2017-06-03 12:47 - 2017-06-03 14:11 - 00000000 ____D C:\Users\jonas\Desktop\Impactor_0.9.41
2017-06-03 12:26 - 2017-06-03 12:26 - 00001861 _____ C:\Users\Public\Desktop\iMazing.lnk
2017-06-03 12:26 - 2017-06-03 12:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iMazing
2017-06-03 12:26 - 2017-06-03 12:26 - 00000000 ____D C:\Program Files\DigiDNA
2017-06-03 12:25 - 2017-06-03 12:25 - 59023944 _____ (DigiDNA ) C:\Users\jonas\Downloads\iMazing2forWindows.exe
2017-06-03 12:19 - 2017-06-03 13:50 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Apple Computer
2017-06-03 12:19 - 2017-06-03 12:19 - 00001822 _____ C:\Users\Public\Desktop\iTunes.lnk
2017-06-03 12:19 - 2017-06-03 12:19 - 00000000 ____D C:\Users\jonas\AppData\Local\Apple Computer
2017-06-03 12:19 - 2017-06-03 12:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-06-03 12:19 - 2017-06-03 12:18 - 19118405 _____ C:\Users\jonas\Desktop\Impactor_0.9.41.zip
2017-06-03 12:18 - 2017-06-03 12:19 - 00000000 ____D C:\Program Files\iTunes
2017-06-03 12:18 - 2017-06-03 12:18 - 19118405 _____ C:\Users\jonas\Downloads\Impactor_0.9.41.zip
2017-06-03 12:18 - 2017-06-03 12:18 - 00000000 ____D C:\ProgramData\Apple Computer
2017-06-03 12:18 - 2017-06-03 12:18 - 00000000 ____D C:\Program Files\iPod
2017-06-03 12:17 - 2017-06-03 12:17 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2017-06-03 12:17 - 2017-06-03 12:17 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2017-06-03 12:17 - 2017-06-03 12:17 - 00000000 ____D C:\Users\jonas\AppData\Local\Apple
2017-06-03 12:17 - 2017-06-03 12:17 - 00000000 ____D C:\Program Files\Bonjour
2017-06-03 12:17 - 2017-06-03 12:17 - 00000000 ____D C:\Program Files (x86)\Bonjour
2017-06-03 12:17 - 2017-06-03 12:17 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2017-06-03 12:16 - 2017-06-03 12:17 - 00000000 ____D C:\Program Files\Common Files\Apple
2017-06-03 12:11 - 2017-06-03 12:11 - 259195720 _____ (Apple Inc.) C:\Users\jonas\Downloads\iTunes64Setup.exe
2017-06-03 12:10 - 2017-06-03 12:10 - 15009512 _____ (Reincubate Ltd) C:\Users\jonas\Downloads\iphonebackup748extractor-latest.exe
2017-06-02 20:33 - 2017-06-02 20:33 - 00003678 _____ C:\Windows\System32\Tasks\doPDF Update
2017-06-02 20:33 - 2017-06-02 20:33 - 00000000 ____D C:\ProgramData\Softland
2017-06-02 20:33 - 2017-06-02 20:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\doPDF 8
2017-06-02 20:32 - 2017-06-02 20:32 - 00000000 ____D C:\ProgramData\regid.2008-09.org.wixtoolset
2017-06-02 20:32 - 2017-06-02 20:32 - 00000000 ____D C:\Program Files\Softland
2017-06-02 20:30 - 2017-06-02 20:30 - 00000841 _____ C:\Users\Public\Desktop\PDF Architect 5.lnk
2017-06-02 20:30 - 2017-06-02 20:30 - 00000000 ____D C:\Users\jonas\AppData\Local\PDFCreator
2017-06-02 20:30 - 2017-06-02 20:30 - 00000000 ____D C:\Program Files (x86)\PDF Architect 5 Manager
2017-06-02 20:29 - 2017-06-12 14:21 - 00000000 ____D C:\ProgramData\Package Cache
2017-06-02 20:29 - 2017-06-02 20:30 - 00000000 ____D C:\Program Files\PDF Architect 5
2017-06-02 20:29 - 2017-06-02 20:29 - 00000000 ____D C:\Users\jonas\Documents\PDF Architect
2017-06-02 20:29 - 2017-06-02 20:29 - 00000000 ____D C:\Users\jonas\AppData\Roaming\PDF Architect 5
2017-06-02 20:29 - 2017-06-02 20:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 5
2017-06-02 20:29 - 2017-06-02 20:29 - 00000000 ____D C:\Program Files (x86)\PDF Architect 5
2017-06-02 20:28 - 2017-06-02 20:28 - 00116224 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2017-06-02 20:28 - 2017-06-02 20:28 - 00000000 ____D C:\ProgramData\PDF Architect 5
2017-06-02 20:27 - 2017-06-10 16:28 - 00000000 ____D C:\Program Files\PDFCreator
2017-06-02 20:27 - 2017-06-02 20:27 - 00000877 _____ C:\Users\Public\Desktop\PDFCreator.lnk
2017-06-02 20:27 - 2017-06-02 20:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2017-06-02 20:26 - 2017-06-02 20:26 - 29032240 _____ (pdfforge GmbH ) C:\Users\jonas\Downloads\PDFCreator-2_5_2-Setup__1_.exe
2017-06-02 19:22 - 2017-06-02 19:22 - 00001511 _____ C:\Users\jonas\Desktop\PDF Assistant PRO.lnk
2017-06-01 20:20 - 2017-06-02 14:57 - 00000000 ____D C:\Users\jonas\Documents\Thief - Deadly Shadows
2017-06-01 20:18 - 2017-06-01 20:18 - 00000000 ____D C:\ProgramData\Documents\Thief - Deadly Shadows
2017-06-01 19:53 - 2017-06-01 19:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eidos
2017-06-01 19:43 - 2017-06-21 12:52 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-06-01 19:43 - 2017-06-01 19:53 - 00000000 ____D C:\Program Files (x86)\Thief - Deadly Shadows
2017-06-01 19:10 - 2017-06-01 19:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Square Enix
2017-06-01 19:10 - 2017-06-01 19:42 - 00000000 ____D C:\Program Files (x86)\Square Enix
2017-06-01 19:06 - 2017-06-11 16:21 - 00000000 ____D C:\Users\jonas\Desktop\Spiele
2017-05-28 15:29 - 2017-06-18 15:23 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-05-28 15:27 - 2017-05-28 15:27 - 00000000 ____D C:\Users\jonas\AppData\Local\Steam
2017-05-28 15:24 - 2017-06-19 18:35 - 00000000 ____D C:\Program Files (x86)\Steam
2017-05-28 15:24 - 2017-05-28 15:24 - 01446792 _____ C:\Users\jonas\Downloads\SteamSetup.exe
2017-05-28 15:24 - 2017-05-28 15:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2017-05-28 11:56 - 2017-05-28 11:56 - 00001378 _____ C:\Users\jonas\Desktop\Movie Maker.lnk
2017-05-28 11:55 - 2017-05-28 11:55 - 00001447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2017-05-28 11:55 - 2017-05-28 11:55 - 00001378 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2017-05-28 11:55 - 2017-05-28 11:55 - 00000000 ____D C:\Windows\de
2017-05-28 11:55 - 2017-05-28 11:55 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2017-05-28 11:54 - 2017-05-28 11:55 - 00000000 ____D C:\Program Files (x86)\Windows Live
2017-05-28 11:53 - 2017-06-05 12:25 - 00000000 ____D C:\Users\jonas\AppData\Local\Windows Live
2017-05-28 11:52 - 2017-05-28 11:52 - 142182064 _____ (Microsoft Corporation) C:\Users\jonas\Downloads\wlsetup3528-all.exe
2017-05-28 11:51 - 2017-05-28 11:51 - 00000955 _____ C:\Users\Public\Desktop\Avidemux 2.6 - 64 bits.lnk
2017-05-28 11:51 - 2017-05-28 11:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avidemux (64 bits)
2017-05-28 11:51 - 2017-05-28 11:51 - 00000000 ____D C:\Program Files\Avidemux 2.6 - 64 bits
2017-05-28 11:50 - 2017-05-28 11:50 - 20614189 _____ C:\Users\jonas\Downloads\avidemux_2.6.21_win64.exe
2017-05-28 11:47 - 2017-05-28 11:47 - 00001565 _____ C:\Users\Public\Desktop\Ein-Klick-Optimierung (WO2017).lnk
2017-05-28 11:47 - 2017-05-28 11:47 - 00001329 _____ C:\Users\Public\Desktop\Ashampoo WinOptimizer 2017.lnk
2017-05-28 11:47 - 2017-05-28 11:47 - 00000000 ____D C:\Users\jonas\AppData\Local\DBG
2017-05-28 11:44 - 2017-05-28 11:45 - 22027464 _____ (Ashampoo GmbH & Co. KG ) C:\Users\jonas\Downloads\ashampoo_winoptimizer_2017_25274.exe
2017-05-28 11:43 - 2017-06-22 09:17 - 00000000 ____D C:\ProgramData\Ashampoo
2017-05-28 11:43 - 2017-06-04 12:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2017-05-28 11:43 - 2017-05-30 15:11 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2017-05-28 11:41 - 2017-05-28 11:42 - 30613776 _____ (Ashampoo GmbH & Co. KG ) C:\Users\jonas\Downloads\ashampoo_winoptimizer_12_e12.00.45_sm.exe
2017-05-27 18:33 - 2017-05-27 18:33 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2017-05-27 18:33 - 2017-05-27 18:33 - 00000000 ____D C:\Program Files\Reference Assemblies
2017-05-27 18:33 - 2017-05-27 18:33 - 00000000 ____D C:\Program Files\MSBuild
2017-05-27 18:33 - 2017-05-27 18:33 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-05-27 18:33 - 2017-05-27 18:33 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-05-27 18:31 - 2017-05-30 15:45 - 00000000 ____D C:\Users\jonas\Documents\Assassin's Creed III
2017-05-27 18:31 - 2017-02-10 11:26 - 01166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2017-05-27 18:31 - 2017-02-10 11:26 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2017-05-27 18:31 - 2017-02-10 11:26 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2017-05-27 18:31 - 2017-02-10 11:21 - 00778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll
2017-05-27 18:31 - 2017-02-10 11:21 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-05-27 18:31 - 2017-02-10 11:21 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2017-05-27 18:27 - 2017-05-27 18:27 - 01080832 _____ (HeiDoc.net) C:\Users\jonas\Downloads\Windows_ISO_Downloader.exe
2017-05-27 18:27 - 2017-05-27 18:27 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Macromedia
2017-05-27 16:40 - 2017-03-15 16:17 - 00149304 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2017-05-27 16:16 - 2017-05-27 16:16 - 00000000 ____D C:\Users\jonas\Documents\FeedbackHub
2017-05-27 16:15 - 2017-05-27 16:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Andy
2017-05-27 16:15 - 2017-04-28 17:37 - 00961768 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2017-05-27 16:14 - 2016-11-11 23:22 - 00400968 _____ (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
2017-05-27 16:14 - 2016-11-11 23:22 - 00366664 _____ (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
2017-05-27 16:14 - 2016-11-11 23:21 - 01148488 _____ (VMware, Inc.) C:\Windows\system32\vnetlib64.dll
2017-05-27 16:14 - 2016-11-11 23:16 - 00088128 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmx86.sys
2017-05-27 16:14 - 2016-11-11 23:16 - 00052288 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmkbd.sys
2017-05-27 16:14 - 2016-11-11 23:05 - 00066624 _____ (VMware, Inc.) C:\Windows\system32\vnetinst.dll
2017-05-27 16:14 - 2016-11-11 23:05 - 00044096 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmnetuserif.sys
2017-05-27 16:14 - 2016-09-30 01:12 - 00091712 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vsock.sys
2017-05-27 16:14 - 2016-09-30 01:12 - 00069104 _____ (VMware, Inc.) C:\Windows\system32\vsocklib.dll
2017-05-27 16:14 - 2016-09-30 01:12 - 00065016 _____ (VMware, Inc.) C:\Windows\SysWOW64\vsocklib.dll
2017-05-27 16:14 - 2016-09-06 18:48 - 00083008 _____ (VMware, Inc.) C:\Windows\system32\Drivers\hcmon.sys
2017-05-27 16:13 - 2017-06-22 08:46 - 00000000 ____D C:\ProgramData\VMware
2017-05-27 16:13 - 2017-05-27 16:15 - 00000000 ____D C:\Program Files (x86)\VMware
2017-05-27 16:13 - 2017-05-27 16:13 - 01852296 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-05-27 16:13 - 2017-05-27 16:13 - 00000000 ____D C:\Program Files\Common Files\VMware
2017-05-27 16:12 - 2017-06-03 12:17 - 00000000 ____D C:\ProgramData\Apple
2017-05-27 16:09 - 2017-05-27 16:15 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Andy
2017-05-27 16:09 - 2017-05-27 16:09 - 00000000 ____D C:\Users\jonas\Andy
2017-05-27 16:09 - 2017-05-27 16:09 - 00000000 ____D C:\Users\jona\Andy
2017-05-27 16:09 - 2017-05-27 16:09 - 00000000 ____D C:\Users\jona
2017-05-27 16:08 - 2017-06-04 12:40 - 00000000 ____D C:\Program Files\Andy
2017-05-27 16:08 - 2017-05-27 16:08 - 00000000 ____D C:\Users\jonas\AppData\Local\PeerDistRepub
2017-05-27 16:07 - 2017-05-27 16:08 - 123669848 _____ (Oracle Corporation) C:\Users\jonas\Downloads\VirtualBox-5.1.22-115126-Win.exe
2017-05-27 16:04 - 2017-05-27 16:07 - 490896224 _____ (Andy OS, inc.) C:\Users\jonas\Downloads\Andy_46.16_66_x64.exe
2017-05-27 16:00 - 2017-05-27 16:03 - 490896224 _____ (Andy OS, inc.) C:\Users\jonas\Downloads\Nicht bestätigt 662421.crdownload
2017-05-27 15:56 - 2017-06-14 15:34 - 00000000 ____D C:\Windows\system32\MRT
2017-05-27 15:55 - 2017-06-14 15:30 - 133627792 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-05-27 15:53 - 2017-04-28 03:19 - 01839872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-05-27 15:53 - 2017-04-28 03:16 - 00599576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-05-27 15:53 - 2017-04-28 03:11 - 02158544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-05-27 15:53 - 2017-04-28 03:09 - 01557288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2017-05-27 15:53 - 2017-04-28 03:08 - 02399728 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-05-27 15:53 - 2017-04-28 03:08 - 02330520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2017-05-27 15:53 - 2017-04-28 03:07 - 00988168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-05-27 15:53 - 2017-04-28 03:06 - 00708712 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-05-27 15:53 - 2017-04-28 03:03 - 00667040 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2017-05-27 15:53 - 2017-04-28 02:59 - 02635336 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-05-27 15:53 - 2017-04-28 02:59 - 00388000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2017-05-27 15:53 - 2017-04-28 02:59 - 00027040 _____ (Microsoft Corporation) C:\Windows\system32\browser_broker.exe
2017-05-27 15:53 - 2017-04-28 02:58 - 01852776 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2017-05-27 15:53 - 2017-04-28 02:57 - 03116184 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2017-05-27 15:53 - 2017-04-28 02:55 - 01325456 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-05-27 15:53 - 2017-04-28 02:52 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2017-05-27 15:53 - 2017-04-28 02:49 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-05-27 15:53 - 2017-04-28 02:46 - 00329728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2017-05-27 15:53 - 2017-04-28 02:46 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-05-27 15:53 - 2017-04-28 02:45 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2017-05-27 15:53 - 2017-04-28 02:44 - 00338432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-05-27 15:53 - 2017-04-28 02:44 - 00266240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-05-27 15:53 - 2017-04-28 02:42 - 00663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-05-27 15:53 - 2017-04-28 02:40 - 02008576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-05-27 15:53 - 2017-04-28 02:40 - 00799232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2017-05-27 15:53 - 2017-04-28 02:39 - 02859520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-05-27 15:53 - 2017-04-28 02:37 - 01626624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-05-27 15:53 - 2017-04-28 02:34 - 00891904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2017-05-27 15:53 - 2017-04-28 02:15 - 01051648 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2017-05-27 15:53 - 2017-04-28 02:11 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-05-27 15:53 - 2017-04-28 02:09 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-05-27 15:53 - 2017-04-28 02:08 - 00457728 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2017-05-27 15:53 - 2017-04-28 02:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\SettingsEnvironment.Desktop.dll
2017-05-27 15:53 - 2017-04-28 02:08 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-05-27 15:53 - 2017-04-28 02:07 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2017-05-27 15:53 - 2017-04-28 02:06 - 01302528 _____ (Microsoft Corporation) C:\Windows\system32\MSVPXENC.dll
2017-05-27 15:53 - 2017-04-28 02:06 - 00386560 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-05-27 15:53 - 2017-04-28 02:06 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-05-27 15:53 - 2017-04-28 02:05 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-05-27 15:53 - 2017-04-28 02:04 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2017-05-27 15:53 - 2017-04-28 02:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2017-05-27 15:53 - 2017-04-28 02:03 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-05-27 15:53 - 2017-04-28 02:01 - 02077184 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-05-27 15:53 - 2017-04-28 01:59 - 03307008 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-05-27 15:53 - 2017-04-28 01:58 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2017-05-27 15:53 - 2017-04-28 01:57 - 01803264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-05-27 15:53 - 2017-04-28 01:54 - 00985600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2017-05-27 15:53 - 2017-04-28 01:54 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2017-05-27 15:53 - 2017-04-28 01:54 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-05-27 15:53 - 2017-04-28 01:54 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-05-27 15:53 - 2017-04-28 01:52 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.ps.dll
2017-05-27 15:53 - 2017-04-19 09:06 - 00651680 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2017-05-27 15:53 - 2017-04-19 09:04 - 00142240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcifs.sys
2017-05-27 15:53 - 2017-04-19 09:02 - 00716440 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
2017-05-27 15:53 - 2017-04-19 08:18 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netvsc.sys
2017-05-27 15:53 - 2017-04-19 08:16 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2017-05-27 15:53 - 2017-04-19 08:15 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2017-05-27 15:53 - 2017-04-19 08:14 - 00646656 _____ (Microsoft Corporation) C:\Windows\system32\LockHostingFramework.dll
2017-05-27 15:53 - 2017-04-19 08:13 - 00980992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2017-05-27 15:53 - 2017-04-19 08:12 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\PackageStateRoaming.dll
2017-05-27 15:53 - 2017-04-19 08:11 - 04446208 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2017-05-27 15:53 - 2017-04-19 08:10 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
2017-05-27 15:53 - 2017-04-19 08:10 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
2017-05-27 15:53 - 2017-04-19 08:10 - 01600512 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2017-05-27 15:53 - 2017-04-19 08:07 - 01242624 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2017-05-27 15:53 - 2017-04-19 08:07 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2017-05-27 15:53 - 2017-04-19 08:02 - 00559000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2017-05-27 15:53 - 2017-04-19 08:01 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\catsrvps.dll
2017-05-27 15:53 - 2017-04-19 07:59 - 01087488 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2017-05-27 15:53 - 2017-04-19 07:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WiFiDisplay.dll
2017-05-27 15:53 - 2017-04-19 07:34 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PackageStateRoaming.dll
2017-05-27 15:53 - 2017-04-19 07:32 - 01285120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
2017-05-27 15:53 - 2017-04-14 02:35 - 00741784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2017-05-27 15:53 - 2017-04-14 02:35 - 00673112 _____ (Microsoft Corporation) C:\Windows\system32\AppResolver.dll
2017-05-27 15:53 - 2017-04-14 02:33 - 02085280 _____ (Microsoft Corporation) C:\Windows\system32\UpdateAgent.dll
2017-05-27 15:53 - 2017-04-14 02:32 - 01320352 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
2017-05-27 15:53 - 2017-04-14 02:30 - 00105456 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2017-05-27 15:53 - 2017-04-14 01:43 - 00523296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppResolver.dll
2017-05-27 15:53 - 2017-04-14 01:41 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2017-05-27 15:53 - 2017-04-14 01:40 - 00095584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2017-05-27 15:53 - 2017-04-14 01:39 - 00974848 _____ (Microsoft Corporation) C:\Windows\system32\mmgaserver.exe
2017-05-27 15:53 - 2017-04-14 01:39 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
2017-05-27 15:53 - 2017-04-14 01:39 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\VEStoreEventHandlers.dll
2017-05-27 15:53 - 2017-04-14 01:38 - 00251904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Preview.dll
2017-05-27 15:53 - 2017-04-14 01:38 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.AppDefaults.dll
2017-05-27 15:53 - 2017-04-14 01:37 - 00450048 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2017-05-27 15:53 - 2017-04-14 01:37 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\NotificationObjFactory.dll
2017-05-27 15:53 - 2017-04-14 01:37 - 00301056 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseAppMgmtSvc.dll
2017-05-27 15:53 - 2017-04-14 01:37 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2017-05-27 15:53 - 2017-04-14 01:36 - 00524800 _____ (Microsoft Corporation) C:\Windows\system32\TileDataRepository.dll
2017-05-27 15:53 - 2017-04-14 01:36 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\CloudBackupSettings.dll
2017-05-27 15:53 - 2017-04-14 01:35 - 01433600 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2017-05-27 15:53 - 2017-04-14 01:35 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\TDLMigration.dll
2017-05-27 15:53 - 2017-04-14 01:35 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-05-27 15:53 - 2017-04-14 01:34 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\InputSwitch.dll
2017-05-27 15:53 - 2017-04-14 01:33 - 01269760 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2017-05-27 15:53 - 2017-04-14 01:33 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2017-05-27 15:53 - 2017-04-14 01:31 - 01611776 _____ (Microsoft Corporation) C:\Windows\system32\SpeechPal.dll
2017-05-27 15:53 - 2017-04-14 01:31 - 00673280 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
2017-05-27 15:53 - 2017-04-14 01:29 - 01583616 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-05-27 15:53 - 2017-04-14 01:29 - 01295872 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2017-05-27 15:53 - 2017-04-14 01:29 - 00840192 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2017-05-27 15:53 - 2017-04-14 01:29 - 00647168 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2017-05-27 15:53 - 2017-04-14 01:28 - 02443776 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-05-27 15:53 - 2017-04-14 01:26 - 01257472 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2017-05-27 15:53 - 2017-04-14 01:25 - 00750080 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2017-05-27 15:53 - 2017-04-14 01:24 - 01628160 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2017-05-27 15:53 - 2017-04-14 01:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2017-05-27 15:53 - 2017-04-14 01:18 - 00731136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmgaserver.exe
2017-05-27 15:53 - 2017-04-14 01:15 - 00282112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll
2017-05-27 15:53 - 2017-04-14 01:15 - 00232448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudBackupSettings.dll
2017-05-27 15:53 - 2017-04-14 01:13 - 00354304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputSwitch.dll
2017-05-27 15:53 - 2017-04-14 01:13 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-05-27 15:53 - 2017-04-14 01:08 - 01463296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-05-27 15:53 - 2017-04-14 01:06 - 00987648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2017-05-27 15:53 - 2017-04-14 01:04 - 00392704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2017-05-27 15:53 - 2017-04-14 01:01 - 00057856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll
2017-05-27 15:53 - 2017-04-01 02:52 - 00409504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-05-27 15:53 - 2017-04-01 02:51 - 01760264 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2017-05-27 15:53 - 2017-04-01 02:29 - 01518088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2017-05-27 15:53 - 2017-04-01 02:28 - 00354360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2017-05-27 15:53 - 2017-04-01 02:04 - 00364032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll
2017-05-27 15:53 - 2017-04-01 02:02 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsDocumentTargetPrint.dll
2017-05-27 15:53 - 2017-04-01 02:01 - 00429568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2017-05-27 15:53 - 2017-04-01 01:58 - 01506816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-05-27 15:53 - 2017-04-01 01:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\msIso.dll
2017-05-27 15:53 - 2017-04-01 01:56 - 01060352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2017-05-27 15:53 - 2017-04-01 01:55 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2017-05-27 15:53 - 2017-04-01 01:55 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\XpsDocumentTargetPrint.dll
2017-05-27 15:53 - 2017-04-01 01:52 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
2017-05-27 15:53 - 2017-04-01 01:52 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2017-05-27 15:53 - 2017-04-01 01:50 - 01657344 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2017-05-27 15:53 - 2017-04-01 01:50 - 01605632 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-05-27 15:53 - 2017-04-01 01:45 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2017-05-27 15:53 - 2017-04-01 01:44 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-05-27 15:53 - 2017-03-31 23:00 - 00032004 _____ C:\Windows\system32\edgehtmlpluginpolicy.bin
2017-05-27 15:43 - 2017-05-27 15:43 - 00000144 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-05-26 20:47 - 2017-05-30 15:15 - 00281392 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2017-05-26 20:47 - 2017-05-30 15:15 - 00000000 ____D C:\Users\jonas\AppData\Local\PunkBuster
2017-05-26 20:16 - 2017-05-26 20:47 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Ubisoft
2017-05-26 15:38 - 2017-06-04 12:59 - 00000451 _____ C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2017-05-26 15:03 - 2017-06-07 15:54 - 00000000 ____D C:\Program Files\Common Files\AV
2017-05-26 14:58 - 2017-05-30 15:15 - 00281392 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2017-05-26 14:58 - 2017-05-30 15:15 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2017-05-26 14:58 - 2017-05-27 18:31 - 00189248 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2017-05-26 14:58 - 2017-05-26 20:16 - 00000000 ____D C:\ProgramData\Ubisoft
2017-05-26 14:58 - 2017-05-26 14:50 - 00835440 _____ C:\Windows\SysWOW64\pbsvc.exe
2017-05-26 14:57 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2017-05-26 14:57 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2017-05-26 14:57 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2017-05-26 14:57 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2017-05-26 14:57 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2017-05-26 14:57 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2017-05-26 14:57 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2017-05-26 14:57 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2017-05-26 14:57 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2017-05-26 14:57 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2017-05-26 14:57 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2017-05-26 14:57 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2017-05-26 14:57 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2017-05-26 14:57 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2017-05-26 14:57 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2017-05-26 14:57 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2017-05-26 14:57 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2017-05-26 14:57 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2017-05-26 14:57 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2017-05-26 14:57 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2017-05-26 14:57 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2017-05-26 14:57 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2017-05-26 14:57 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2017-05-26 14:57 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2017-05-26 14:57 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2017-05-26 14:57 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2017-05-26 14:57 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2017-05-26 14:57 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2017-05-26 14:57 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2017-05-26 14:57 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2017-05-26 14:57 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2017-05-26 14:57 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2017-05-26 14:57 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2017-05-26 14:57 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2017-05-26 14:57 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2017-05-26 14:57 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2017-05-26 14:57 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2017-05-26 14:57 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2017-05-26 14:57 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2017-05-26 14:57 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2017-05-26 14:57 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2017-05-26 14:57 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2017-05-26 14:57 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2017-05-26 14:57 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2017-05-26 14:57 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2017-05-26 14:57 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2017-05-26 14:57 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2017-05-26 14:57 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2017-05-26 14:57 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2017-05-26 14:57 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2017-05-26 14:57 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2017-05-26 14:57 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2017-05-26 14:57 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2017-05-26 14:57 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2017-05-26 14:57 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2017-05-26 14:57 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2017-05-26 14:57 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2017-05-26 14:57 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2017-05-26 14:57 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2017-05-26 14:57 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2017-05-26 14:57 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2017-05-26 14:57 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2017-05-26 14:57 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2017-05-26 14:57 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2017-05-26 14:57 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2017-05-26 14:57 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2017-05-26 14:57 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2017-05-26 14:57 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2017-05-26 14:57 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2017-05-26 14:57 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2017-05-26 14:57 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2017-05-26 14:57 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2017-05-26 14:57 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2017-05-26 14:57 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2017-05-26 14:57 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2017-05-26 14:57 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2017-05-26 14:57 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2017-05-26 14:57 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2017-05-26 14:57 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2017-05-26 14:57 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2017-05-26 14:57 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2017-05-26 14:57 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2017-05-26 14:57 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2017-05-26 14:57 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2017-05-26 14:57 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2017-05-26 14:57 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2017-05-26 14:57 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2017-05-26 14:57 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2017-05-26 14:57 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2017-05-26 14:57 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2017-05-26 14:57 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2017-05-26 14:57 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2017-05-26 14:57 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2017-05-26 14:57 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2017-05-26 14:57 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2017-05-26 14:57 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2017-05-26 14:57 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2017-05-26 14:57 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2017-05-26 14:57 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2017-05-26 14:57 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2017-05-26 14:57 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2017-05-26 14:57 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2017-05-26 14:57 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2017-05-26 14:57 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2017-05-26 14:57 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2017-05-26 14:57 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2017-05-26 14:57 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2017-05-26 14:57 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2017-05-26 14:57 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2017-05-26 14:57 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2017-05-26 14:57 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2017-05-26 14:57 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2017-05-26 14:57 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2017-05-26 14:57 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2017-05-26 14:57 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2017-05-26 14:57 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2017-05-26 14:57 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2017-05-26 14:57 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2017-05-26 14:57 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2017-05-26 14:57 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2017-05-26 14:57 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2017-05-26 14:57 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2017-05-26 14:57 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2017-05-26 14:57 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2017-05-26 14:57 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2017-05-26 14:57 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2017-05-26 14:57 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2017-05-26 14:57 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2017-05-26 14:57 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2017-05-26 14:57 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2017-05-26 14:57 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2017-05-26 14:57 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2017-05-26 14:57 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2017-05-26 14:57 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2017-05-26 14:57 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2017-05-26 14:57 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2017-05-26 14:57 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2017-05-26 14:57 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2017-05-26 14:57 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2017-05-26 14:57 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2017-05-26 14:57 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2017-05-26 14:57 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2017-05-26 14:57 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2017-05-26 14:57 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2017-05-26 14:57 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2017-05-26 14:57 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2017-05-26 14:57 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2017-05-26 14:57 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2017-05-26 14:57 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2017-05-26 14:57 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2017-05-26 14:57 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2017-05-26 14:57 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2017-05-26 14:57 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2017-05-26 14:57 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2017-05-26 14:57 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2017-05-26 14:57 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2017-05-26 14:57 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2017-05-26 14:57 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2017-05-26 14:56 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2017-05-26 14:56 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2017-05-26 14:56 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2017-05-26 14:56 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2017-05-26 14:56 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2017-05-26 14:56 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2017-05-26 14:56 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2017-05-26 14:56 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2017-05-26 14:56 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2017-05-26 14:56 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2017-05-26 14:56 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2017-05-26 14:56 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2017-05-26 14:56 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2017-05-26 14:56 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2017-05-26 14:56 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2017-05-26 14:56 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2017-05-26 14:56 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2017-05-26 14:56 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2017-05-26 14:56 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2017-05-26 14:56 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2017-05-26 14:56 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2017-05-26 14:56 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2017-05-26 14:56 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2017-05-26 14:56 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2017-05-26 14:37 - 2017-06-22 08:52 - 00000000 ____D C:\Windows\System32\Tasks\Norton Security
2017-05-26 14:35 - 2017-06-06 11:38 - 00002306 _____ C:\Users\Public\Desktop\Norton Security.lnk
2017-05-26 14:35 - 2017-05-26 14:35 - 00102608 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2017-05-26 14:35 - 2017-05-26 14:35 - 00008339 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2017-05-26 14:35 - 2017-05-26 14:35 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2017-05-26 14:33 - 2017-06-06 11:38 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security
2017-05-26 14:33 - 2017-06-06 11:38 - 00000000 ____D C:\Windows\system32\Drivers\NSx64
2017-05-26 14:33 - 2017-05-26 14:33 - 00000000 ____D C:\ProgramData\NortonInstaller
2017-05-26 14:33 - 2017-05-26 14:33 - 00000000 ____D C:\Program Files\Norton Security
2017-05-26 14:33 - 2017-05-26 14:33 - 00000000 ____D C:\Program Files (x86)\NortonInstaller
2017-05-26 14:25 - 2017-05-28 11:53 - 00000000 ____D C:\Windows\Panther
2017-05-26 14:23 - 2017-06-03 18:40 - 00000000 ____D C:\ProgramData\Norton
2017-05-26 14:23 - 2017-05-26 14:23 - 00000000 ____D C:\Users\Public\Downloads\Norton
2017-05-26 14:18 - 2017-06-17 10:47 - 00000000 ____D C:\Users\jonas\AppData\Local\Ubisoft Game Launcher
2017-05-26 14:18 - 2017-05-26 14:18 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2017-05-26 14:18 - 2017-05-26 14:18 - 00000000 ____D C:\Users\jonas\AppData\Local\CEF
2017-05-26 14:18 - 2017-05-26 14:18 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2017-05-26 14:11 - 2017-05-26 14:12 - 63350552 _____ (Ubisoft) C:\Users\jonas\Downloads\UplayInstaller.exe
2017-05-26 14:03 - 2017-05-26 14:03 - 00002340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-26 14:03 - 2017-05-26 14:03 - 00002328 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-05-26 14:02 - 2017-05-26 14:18 - 00000000 ____D C:\Users\jonas\AppData\Local\Google
2017-05-26 14:02 - 2017-05-26 14:03 - 00000000 ____D C:\Program Files (x86)\Google
2017-05-26 14:02 - 2017-05-26 14:02 - 00003628 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-05-26 14:02 - 2017-05-26 14:02 - 00003504 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-05-26 14:00 - 2017-05-26 14:00 - 00000000 ____D C:\Users\jonas\AppData\Local\MicrosoftEdge
2017-05-26 13:58 - 2017-05-26 13:58 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2017-05-26 13:54 - 2017-06-22 08:52 - 00003290 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
2017-05-26 13:54 - 2017-06-22 08:52 - 00002387 _____ C:\Users\jonas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-05-26 13:54 - 2017-06-22 08:52 - 00000000 ___RD C:\Users\jonas\OneDrive
2017-05-26 13:54 - 2017-05-26 13:54 - 00000000 ____D C:\Users\jonas\AppData\Local\Comms
2017-05-26 13:53 - 2017-06-22 08:49 - 00000000 __SHD C:\Users\jonas\IntelGraphicsProfiles
2017-05-26 13:53 - 2017-05-26 13:53 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2017-05-26 13:51 - 2017-06-21 12:18 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-05-26 13:51 - 2017-06-15 16:35 - 00000000 ____D C:\Users\jonas\AppData\Local\Packages
2017-05-26 13:51 - 2017-06-07 16:11 - 00000000 ____D C:\Users\jonas\AppData\Local\VirtualStore
2017-05-26 13:51 - 2017-05-26 13:52 - 00000000 ____D C:\Users\jonas\AppData\Local\PackageStaging
2017-05-26 13:51 - 2017-05-26 13:52 - 00000000 ____D C:\Users\jonas\AppData\Local\ConnectedDevicesPlatform
2017-05-26 13:51 - 2017-05-26 13:51 - 00000000 ____D C:\Users\jonas\AppData\Roaming\Adobe
2017-05-26 13:51 - 2017-05-26 13:51 - 00000000 ____D C:\Users\jonas\AppData\Local\TileDataLayer
2017-05-26 13:51 - 2017-05-26 13:51 - 00000000 ____D C:\Users\jonas\AppData\Local\Publishers
2017-05-26 13:50 - 2017-05-26 13:50 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2017-05-26 13:50 - 2017-05-26 13:50 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2017-05-26 13:50 - 2017-05-26 13:50 - 00000000 ____D C:\Windows\system32\DAX2
2017-05-26 13:50 - 2017-05-26 13:50 - 00000000 ____D C:\Program Files\Realtek
2017-05-26 13:50 - 2017-05-26 13:50 - 00000000 ____D C:\Program Files (x86)\Realtek
2017-05-26 13:50 - 2015-10-01 07:02 - 00002108 _____ C:\Windows\system32\Drivers\SAMSFPA.DAT
2017-05-26 13:50 - 2015-10-01 07:02 - 00000712 _____ C:\Windows\system32\Drivers\RTMICEQ0.DAT
2017-05-26 13:50 - 2015-10-01 07:02 - 00000098 _____ C:\Windows\system32\Drivers\RTMICAR.DAT
2017-05-26 13:47 - 2017-05-26 13:47 - 00000000 ____D C:\Program Files\Intel
2017-05-26 13:47 - 2017-05-26 13:47 - 00000000 ____D C:\Program Files (x86)\Intel
2017-05-26 13:47 - 2017-05-26 13:47 - 00000000 ____D C:\Intel
2017-05-26 13:47 - 2016-05-12 16:39 - 00064000 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2017-05-26 13:46 - 2017-06-22 09:52 - 00000000 ____D C:\Users\jonas
2017-05-26 13:46 - 2017-05-26 13:46 - 00000020 ___SH C:\Users\jonas\ntuser.ini
2017-05-26 13:46 - 2017-05-26 13:46 - 00000000 _SHDL C:\Users\jonas\Vorlagen
2017-05-26 13:46 - 2017-05-26 13:46 - 00000000 _SHDL C:\Users\jonas\Startmenü
2017-05-26 13:46 - 2017-05-26 13:46 - 00000000 _SHDL C:\Users\jonas\Netzwerkumgebung
2017-05-26 13:46 - 2017-05-26 13:46 - 00000000 _SHDL C:\Users\jonas\Lokale Einstellungen
2017-05-26 13:46 - 2017-05-26 13:46 - 00000000 _SHDL C:\Users\jonas\Eigene Dateien
2017-05-26 13:46 - 2017-05-26 13:46 - 00000000 _SHDL C:\Users\jonas\Druckumgebung
2017-05-26 13:46 - 2017-05-26 13:46 - 00000000 _SHDL C:\Users\jonas\Documents\Eigene Videos
2017-05-26 13:46 - 2017-05-26 13:46 - 00000000 _SHDL C:\Users\jonas\Documents\Eigene Musik
2017-05-26 13:46 - 2017-05-26 13:46 - 00000000 _SHDL C:\Users\jonas\Documents\Eigene Bilder
2017-05-26 13:46 - 2017-05-26 13:46 - 00000000 _SHDL C:\Users\jonas\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-05-26 13:46 - 2017-05-26 13:46 - 00000000 _SHDL C:\Users\jonas\AppData\Local\Verlauf
2017-05-26 13:46 - 2017-05-26 13:46 - 00000000 _SHDL C:\Users\jonas\AppData\Local\Anwendungsdaten
2017-05-26 13:46 - 2017-05-26 13:46 - 00000000 _SHDL C:\Users\jonas\Anwendungsdaten
2017-05-26 13:45 - 2017-05-26 13:45 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2017-05-26 13:45 - 2017-05-26 13:45 - 00000000 ____D C:\Program Files\Synaptics
2017-05-26 13:40 - 2017-05-26 13:40 - 00000000 ____D C:\ProgramData\USOShared
2017-05-26 13:34 - 2017-06-16 15:06 - 02415026 _____ C:\Windows\system32\PerfStringBackup.INI
2017-05-26 13:32 - 2017-05-26 13:32 - 00000000 ____D C:\Windows\CSC
2017-05-26 13:32 - 2017-03-18 22:56 - 02233344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default\Vorlagen
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default\Startmenü
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Programme
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\ProgramData\Vorlagen
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\ProgramData\Startmenü
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\ProgramData\Dokumente
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2017-05-26 13:30 - 2017-05-26 13:30 - 00000000 _SHDL C:\Dokumente und Einstellungen
2017-05-26 13:26 - 2017-05-26 13:26 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_11_00.Wdf
2017-05-26 13:25 - 2017-06-22 09:13 - 00000000 ____D C:\Windows\system32\SleepStudy
2017-05-26 13:25 - 2017-06-22 08:46 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-05-26 13:25 - 2017-05-26 13:25 - 00000000 ____D C:\Windows\ServiceProfiles

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-06-22 08:52 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps
2017-06-22 08:52 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\AppReadiness
2017-06-21 17:57 - 2017-03-18 13:40 - 00786432 _____ C:\Windows\system32\config\BBI
2017-06-21 12:41 - 2017-03-18 23:01 - 00000000 ____D C:\Windows\INF
2017-06-18 11:01 - 2017-03-18 13:40 - 00032768 _____ C:\Windows\system32\config\ELAM
2017-06-17 09:33 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-06-16 15:06 - 2017-03-20 06:41 - 01109034 _____ C:\Windows\system32\perfh007.dat
2017-06-16 15:06 - 2017-03-20 06:41 - 00248150 _____ C:\Windows\system32\perfc007.dat
2017-06-14 18:02 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\rescache
2017-06-14 15:32 - 2017-03-18 23:03 - 00000000 ___SD C:\Windows\SysWOW64\F12
2017-06-14 15:32 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2017-06-14 15:31 - 2017-03-18 23:03 - 00000000 ___SD C:\Windows\system32\F12
2017-06-14 15:31 - 2017-03-18 23:03 - 00000000 ___RD C:\Program Files\Windows Defender
2017-06-14 15:31 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\system32\oobe
2017-06-14 15:31 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\system32\appraiser
2017-06-14 15:31 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\ShellExperiences
2017-06-14 15:31 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-06-14 15:31 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-06-14 15:30 - 2017-03-18 22:51 - 00000000 ____D C:\Windows\CbsTemp
2017-06-11 13:45 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\LiveKernelReports
2017-06-10 10:11 - 2017-03-18 23:03 - 00000000 ___HD C:\Windows\ELAMBKUP
2017-06-07 16:36 - 2013-01-04 20:54 - 00000000 ____D C:\Users\jonas\Downloads\FSX_2D_Window
2017-06-04 14:10 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-06-03 18:11 - 2017-03-18 23:03 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2017-06-03 18:11 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2017-06-03 08:32 - 2017-03-18 23:06 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-06-03 08:32 - 2017-03-18 23:06 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-05-27 18:33 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\SysWOW64\MUI
2017-05-27 18:33 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\system32\MUI
2017-05-27 18:12 - 2017-03-18 23:03 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2017-05-27 18:12 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\SysWOW64\Dism
2017-05-27 18:12 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\Provisioning
2017-05-27 18:12 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\PolicyDefinitions
2017-05-27 18:12 - 2017-03-18 13:40 - 00000000 ____D C:\Windows\system32\Dism
2017-05-26 15:39 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\appcompat
2017-05-26 14:24 - 2017-03-18 23:03 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2017-05-26 13:40 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\USOPrivate
2017-05-26 13:33 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2017-05-26 13:32 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\system32\spool
2017-05-26 13:32 - 2017-03-18 23:03 - 00000000 ____D C:\Windows\system32\FxsTmp
2017-05-26 13:30 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows NT
2017-05-26 13:28 - 2017-03-18 13:40 - 00000000 ____D C:\Windows\system32\Sysprep
2017-05-26 13:27 - 2017-03-18 23:03 - 00000000 ___RD C:\Windows\PrintDialog
2017-05-26 13:27 - 2017-03-18 23:03 - 00000000 ___RD C:\Windows\MiracastView
2017-05-26 13:26 - 2017-03-20 06:43 - 00000000 ____D C:\Windows\HoloShell

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-05-26 13:50 - 2017-05-26 13:50 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-06-18 13:33

==================== Ende von FRST.txt ============================
         

Nochmal: Lesestoff richtig lesen. Die CODE-Tags bitte richtig setzen!

Das ist die .txt datei

Ja so isses jetzt richtig, danke für die Korrektur!

Die Addition.txt bitte genau so posten in CODE-Tags.

Ja so isses jetzt richtig, danke für die Korrektur!

Die Addition.txt bitte genau so posten in CODE-Tags.

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 21-06-2017 01
durchgeführt von jonas (22-06-2017 10:26:20)
Gestartet von C:\Users\jonas\Downloads
Windows 10 Pro Version 1703 (X64) (2017-05-26 11:31:04)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2182765339-3254949556-2727863788-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2182765339-3254949556-2727863788-503 - Limited - Disabled)
Gast (S-1-5-21-2182765339-3254949556-2727863788-501 - Limited - Disabled)
jonas (S-1-5-21-2182765339-3254949556-2727863788-1001 - Administrator - Enabled) => C:\Users\jonas

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Norton Security (Enabled - Up to date) {30744133-1E94-7B35-F4A3-82A5AEF1CBAA}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: Norton Security (Enabled - Up to date) {8B15A0D7-38AE-74BB-CE13-B9D7D5768117}
FW: Norton Security (Enabled) {084FC016-54FB-7A6D-DFFC-2B9050228CD1}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

3D-Modellbahn Studio (HKLM-x32\...\3D-Modellbahn Studio_is1) (Version: 3.1.7.0 - Stefan Werner)
Addit! Pro For Flight Simulator X (HKLM-x32\...\{8DDD9A95-43C2-420F-B188-A1A62B202201}) (Version: 7.5.0004 - Joseph Stearns)
Andy OS (HKLM\...\Andy OS) (Version: 46.16 - Andy OS, Inc)
Apple Application Support (32-Bit) (HKLM-x32\...\{E92BB800-BCC5-4C25-8102-AC2C3B7C7C1E}) (Version: 5.5 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{9C912B1E-06DD-43EF-BB2B-45CB2C88BAAE}) (Version: 5.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
Ashampoo WinOptimizer 2017 (HKLM-x32\...\{4209F371-6CE9-533C-2CDC-94E053273B35}_is1) (Version: 14.00.04 - Ashampoo GmbH & Co. KG)
Assassin's Creed Brotherhood (HKLM-x32\...\Uplay Install 26) (Version:  - Ubisoft)
Assassin's Creed II (HKLM-x32\...\Uplay Install 4) (Version:  - Ubisoft)
Assassin's Creed III (HKLM-x32\...\Uplay Install 54) (Version:  - Ubisoft)
ATCsimulator®2 Demo (HKLM-x32\...\ST6UNST #1) (Version:  - )
Avidemux 2.6 - 64 bits (HKLM-x32\...\Avidemux 2.6 - 64 bits (64-bit)) (Version: 2.6.21.170501 - )
Bitcoin Core (64-bit) (HKU\S-1-5-21-2182765339-3254949556-2727863788-1001\...\Bitcoin Core (64-bit)) (Version: 0.14.1 - Bitcoin Core project)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.30 - Piriform)
Challenger (HKLM-x32\...\Challenger) (Version: 2.4.24 - HB.Fomm)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
doPDF (Version: 8.8.947 - Softland) Hidden
doPDF 8 (HKLM-x32\...\{40114d1e-366c-42d4-a83c-70c0adfbccf6}) (Version: 8.8.947 - Softland)
Driver San Francisco (HKLM-x32\...\Uplay Install 13) (Version:  - Ubisoft)
EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.8.0.0 - Electronic Arts)
Elcomsoft Forensic Disk Decryptor (HKLM-x32\...\{C21FFEA6-569F-45E2-A81D-EDEDB9E612D1}) (Version: 1.12.324.3299 - Elcomsoft Co. Ltd.)
Elevated Shortcut (HKLM-x32\...\Elevated Shortcut) (Version: 1.1 - hxxp://www.winreview.ru/)
F1 2012 (HKLM\...\Steam App 208500) (Version:  - Codemasters Birmingham)
FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.7 - Electronic Arts)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Garry's Mod (HKLM\...\Steam App 4000) (Version:  - Facepunch Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)
Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden
iMazing 2.2.7.0 (HKLM\...\iMazing_is1) (Version: 2.2.7.0 - DigiDNA)
ImDisk Virtual Disk Driver (HKLM\...\ImDisk) (Version: * - LTR Data)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4425 - Intel Corporation)
iTunes (HKLM\...\{F0C7385A-9D20-45F3-8101-05D383885180}) (Version: 12.6.1.25 - Apple Inc.)
IvAp v2.0.2 (build 2773) (HKLM-x32\...\IvAp-v2_is1) (Version:  - IVAO)
Lenovo Power Management Driver (Version: 1.67.12.24 - Lenovo) Hidden
Lernout & Hauspie TruVoice American English TTS Engine (HKLM-x32\...\tv_enua) (Version:  - )
Loksim3D (HKLM\...\Loksim3D_is1) (Version: 2.9.2 - Loksim3D)
Malwarebytes Version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
Manager (x32 Version: 5.0.26.33533 - 2017 pdfforge GmbH. All rights reserved) Hidden
Microsoft Flight Simulator SimConnect Client v10.0.60905.0 (HKLM-x32\...\{D1AC9B0B-2727-4811-91DC-1FC3C4E47A9B}) (Version: 10.0.60905.0 - Microsoft Corporation)
Microsoft Flight Simulator X (HKLM-x32\...\InstallShield_{F535B2CF-C9BB-4162-B03A-02D6971F32CC}) (Version: 10.0.60905 - Microsoft Game Studios)
Microsoft Office Home and Business 2016 - de-de (HKLM\...\HomeBusinessRetail - de-de) (Version: 16.0.8201.2102 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2182765339-3254949556-2727863788-1001\...\OneDriveSetup.exe) (Version: 17.3.6917.0607 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Need for Speed™ Most Wanted (HKLM-x32\...\{FB0127F3-985B-44CE-AE29-378CAF60B361}) (Version: 1.5.0.0 - Electronic Arts)
Norton Security (HKLM-x32\...\NS) (Version: 22.9.4.8 - Symantec Corporation)
novaPDF 8 Printer Driver (HKLM\...\{6CE23ADA-C3A6-4974-A4DB-27BCA371010B}) (Version: 8.8.947 - Softland)
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.8201.2102 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (Version: 16.0.8201.2102 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.8201.2102 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.8201.2075 - Microsoft Corporation) Hidden
OpenOffice 4.1.3 (HKLM-x32\...\{8D5FCC56-BB9F-4122-923C-71753F50F6F5}) (Version: 4.13.9783 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 10.4.13.6637 - Electronic Arts, Inc.)
PDF Architect 5 (HKLM-x32\...\PDF Architect 5) (Version: 5.0.22.32360 - pdfforge GmbH)
PDF Architect 5 Create Module (Version: 5.0.24.33400 - pdfforge GmbH) Hidden
PDF Architect 5 Edit Module (Version: 5.0.24.33400 - pdfforge GmbH) Hidden
PDF Architect 5 View Module (Version: 5.0.24.33400 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.5.2 - pdfforge GmbH)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7614 - Realtek Semiconductor Corp.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.17.115 - Synaptics Incorporated)
Team Fortress 2 (HKLM\...\Steam App 440) (Version:  - Valve)
TeamSpeak 2 RC2 (HKLM-x32\...\Teamspeak 2 RC2_is1) (Version: 2.0.32.60 - Dominating Bytes Design)
Thief - Deadly Shadows (HKLM-x32\...\{FC123EEA-330A-4685-911C-95B8F5E9DE68}) (Version: 1.0 - )
Thief 2: The Metal Age version 1.18 (HKLM-x32\...\{54B5CB3B-AFD9-49BB-B0C2-CD88A2F4B0EA}_is1) (Version: 1.18 - Square Enix)
Thief Gold version 1.37 (HKLM-x32\...\{43DD5CB5-3CB7-44EC-8A7A-2F300BED7301}_is1) (Version: 1.37 - Square Enix)
Uplay (HKLM-x32\...\Uplay) (Version: 32.1 - Ubisoft)
VMware Player (HKLM\...\{6D211A09-EB2A-4B83-ACCB-13B1BC12AF4E}) (Version: 12.5.2 - VMware, Inc.)
Windows Driver Package - Intel (MEIx64) System  (07/07/2015 11.0.0.1157) (HKLM\...\0B20AD533A71C19F1C9AC8BB34246A06D7EAD201) (Version: 07/07/2015 11.0.0.1157 - Intel)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Xleaner v4.28.1368 (HKLM-x32\...\{72D84E46-E633-4729-8A77-2347C8CD4096}_is1) (Version:  - More Than A Cleaner.de)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2182765339-3254949556-2727863788-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {004C402C-8D42-491D-9B61-7FF9B34AF418} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton Security\Engine\22.9.4.8\WSCStub.exe [2017-05-27] (Symantec Corporation)
Task: {0A7CFFB4-A71E-49D9-874C-C0EC19EE3FA4} - System32\Tasks\Norton Security\Norton Security Autofix => C:\Program Files\Norton Security\Engine\22.9.4.8\SymErr.exe [2017-05-11] (Symantec Corporation)
Task: {26BF4EE6-27DB-45B1-8E4E-2F645EE2602E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-05-19] (Piriform Ltd)
Task: {30784CD8-0F04-404B-A3BA-B2B3CB4B5827} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-06-10] (Microsoft Corporation)
Task: {5A629309-5B3C-482D-A639-0AABB10EAC90} - System32\Tasks\doPDF Update => C:\Program Files\Softland\novaPDF 8\Driver\UpdateApplication.exe [2017-02-22] ()
Task: {673C887D-1709-440C-8B4D-B8D3179D27CA} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Security\Upgrade.exe [2017-05-27] (Symantec Corporation)
Task: {70EC27D7-0123-406A-B615-39D9BBC869BB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-05-26] (Google Inc.)
Task: {7DAF1F43-D006-42D0-AC41-951CCB4F2FED} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-06-10] (Microsoft Corporation)
Task: {7DE9BEDF-120C-4107-A6EA-05D9077794B4} - System32\Tasks\Norton Security\Norton Security Error Analyzer => C:\Program Files\Norton Security\Engine\22.9.4.8\SymErr.exe [2017-05-11] (Symantec Corporation)
Task: {8616096F-EF92-43AA-A150-A8FC3195DB20} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-06-17] ()
Task: {8A372C07-AD25-4C4B-A729-B245B055A61B} - \Ashampoo Driver Updater_Logon -> Keine Datei <==== ACHTUNG
Task: {8CE0F8A8-99AC-4B77-A09E-BA24F6CDD4DE} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-06-17] ()
Task: {9A985D4E-0DBC-4A13-9AC8-D88932134245} - System32\Tasks\Norton Security\Norton Security Error Processor => C:\Program Files\Norton Security\Engine\22.9.4.8\SymErr.exe [2017-05-11] (Symantec Corporation)
Task: {E1147120-37E2-46C0-821C-B8DE98381952} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-05-26] (Google Inc.)
Task: {E1E8E562-19B0-44CD-87D5-4B688E532B44} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-02-14] (Apple Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2017-05-09 00:44 - 2017-05-09 00:44 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-05-09 00:44 - 2017-05-09 00:44 - 01354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2017-02-22 11:18 - 2017-02-22 11:18 - 00145696 _____ () C:\Program Files\Softland\novaPDF 8\Server\AgileDotNetRT64.dll
2017-05-26 14:58 - 2017-05-30 15:15 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2017-06-04 12:05 - 2017-04-19 12:27 - 04150320 _____ () C:\Program Files\Ashampoo\Ashampoo Driver Updater\ashpdu.exe
2017-06-04 12:05 - 2016-09-21 15:43 - 00171008 _____ () C:\Program Files\Ashampoo\Ashampoo Driver Updater\Microsoft.Win32.TaskScheduler.dll
2017-06-04 12:05 - 2016-09-21 15:43 - 00049152 _____ () C:\Program Files\Ashampoo\Ashampoo Driver Updater\Interop.IWshRuntimeLibrary.dll
2017-03-18 22:58 - 2017-03-18 22:58 - 00138000 _____ () C:\Windows\SYSTEM32\inputhost.dll
2017-03-18 22:59 - 2017-03-20 06:43 - 01731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-06-21 12:21 - 2017-06-21 12:21 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-06-21 12:21 - 2017-06-21 12:21 - 00203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-06-21 12:21 - 2017-06-21 12:21 - 43454464 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-06-21 12:21 - 2017-06-21 12:21 - 02437120 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\skypert.dll
2017-05-19 20:17 - 2017-05-19 20:17 - 00069632 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2017-05-26 14:03 - 2017-05-09 11:13 - 03767640 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libglesv2.dll
2017-05-26 14:03 - 2017-05-09 11:13 - 00100696 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libegl.dll
2017-06-22 09:00 - 2017-05-25 14:11 - 02270664 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-05-26 14:53 - 2017-05-26 14:53 - 03139496 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11705.1001.21.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-06-22 08:51 - 2017-06-22 08:52 - 00766464 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11705.1001.21.0_x64__8wekyb3d8bbwe\WinStore.Vui.dll
2017-06-22 08:51 - 2017-06-22 08:52 - 10628608 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11705.1001.21.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2017-06-22 08:51 - 2017-06-22 08:52 - 02640384 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11705.1001.21.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll
2017-06-17 13:15 - 2017-06-17 13:16 - 00020480 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.12990.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2017-06-17 13:15 - 2017-06-17 13:16 - 27430400 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.12990.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-06-15 16:29 - 2017-06-15 16:30 - 00460288 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.12990.0_x64__8wekyb3d8bbwe\Microsoft.Photos.AGM.Native.Windows.dll
2017-06-15 16:29 - 2017-06-15 16:30 - 02275328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.12990.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2017-05-26 14:53 - 2017-05-26 14:53 - 03139496 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.12990.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-06-15 16:29 - 2017-06-15 16:30 - 00046080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.12990.0_x64__8wekyb3d8bbwe\Microsoft.Photos.Edit.Services.dll
2017-05-26 14:35 - 2017-05-26 14:46 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.12990.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2017-06-15 16:29 - 2017-06-15 16:30 - 00900096 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.12990.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2017-05-26 14:35 - 2017-05-26 14:46 - 01062400 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.12990.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll
2017-03-20 06:45 - 2017-03-20 06:45 - 00291328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.12990.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2017-03-18 22:58 - 2017-03-18 22:58 - 01899008 _____ () C:\Windows\System32\speech_onecore\engines\tts\MSTTSEngine_OneCore.dll
2017-06-05 12:21 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2017-06-05 12:21 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2017-06-05 12:21 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2017-06-05 12:21 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2017-06-05 12:21 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2017-06-04 14:01 - 2017-06-17 09:24 - 00164544 _____ () C:\Program Files (x86)\Microsoft Office\root\Office16\JitV.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2017-03-18 23:03 - 2017-03-18 23:01 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2182765339-3254949556-2727863788-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\jonas\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{93d2172e-6a53-4b47-998d-2edc146fcc09}.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\StartupFolder: => "HandyAndy.lnk"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "SDTray"
HKU\S-1-5-21-2182765339-3254949556-2727863788-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_EE92DA24D002778557D1C2B055218649"
HKU\S-1-5-21-2182765339-3254949556-2727863788-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2182765339-3254949556-2727863788-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-2182765339-3254949556-2727863788-1001\...\StartupApproved\Run: => "EADM"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{CD0EA363-5D79-4F9E-B2D1-637C5FE93CBE}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{2F98A2B5-B79C-4903-96B0-2F24DED9E8E7}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed Brotherhood\ACBSP.exe
FirewallRules: [{89BC0A92-7C71-47F7-94EE-62A10E25304C}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed Brotherhood\ACBSP.exe
FirewallRules: [{60B50022-3A44-4BB0-9E45-D6DE92A08382}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed Brotherhood\ACBMP.exe
FirewallRules: [{B319A7D2-0070-46DD-BAFC-AF8ADE6E6171}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed Brotherhood\ACBMP.exe
FirewallRules: [{08CEB729-2708-41BE-BF74-09DB141274D0}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed II\AssassinsCreedIIGame.exe
FirewallRules: [{C26FD311-8A6E-46C0-9559-8C339BA77F9B}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed II\AssassinsCreedIIGame.exe
FirewallRules: [{93B95E87-EA38-4E8B-92EB-4D618E7D4EE4}] => (Allow) C:\Program Files\Andy\andy.exe
FirewallRules: [{5C8B8D77-EC6F-4C8B-8D01-783903326515}] => (Allow) C:\Program Files\Andy\andy.exe
FirewallRules: [{25FE1CBC-125F-4828-BE61-9719CC44DE85}] => (Allow) C:\Program Files\Andy\AndyConsole.exe
FirewallRules: [{C00DC16F-E42B-4FCC-9407-35FBD8808D74}] => (Allow) C:\Program Files\Andy\AndyConsole.exe
FirewallRules: [{7BBDAA38-DE80-461D-A364-03E79BC87B73}] => (Allow) C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{73BD867C-3488-41BA-94FA-A245C52FE34F}] => (Allow) C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{CC876513-214B-4646-A970-0754FB4542B1}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe
FirewallRules: [{E0F5AA48-70DB-418E-B309-E58D5EFD6AC8}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe
FirewallRules: [{4E740A7D-880D-4AA5-A604-EEF04BB25AEF}] => (Allow) C:\Program Files\Andy\SetupFiles\VMwareCheck.exe
FirewallRules: [{7A5BBAB4-E85F-42DD-80EE-9F806BE52AA3}] => (Allow) C:\Program Files\Andy\SetupFiles\VMwareCheck.exe
FirewallRules: [{34F0A97D-B99C-4754-95DC-4A3B71EC381E}] => (Allow) C:\Program Files\Andy\SetupFiles\AndyDoctor.exe
FirewallRules: [{54D65627-5D66-4BD1-81A9-164C8525CEB4}] => (Allow) C:\Program Files\Andy\SetupFiles\AndyDoctor.exe
FirewallRules: [{FE659F91-1DAC-485E-B711-78E33FEAFAC1}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [{C69663D7-FE2D-4B2F-8053-E23A050943A0}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [{09FF679E-DEC3-4CCA-86F7-5DB19D9D9CEB}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed III\AC3SP.exe
FirewallRules: [{659F5E1A-DF9D-45C8-B3BA-859B40762916}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed III\AC3SP.exe
FirewallRules: [{BC7C13AA-954F-4CDA-9942-178D01C2AB78}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed III\AC3MP.exe
FirewallRules: [{80D08079-C7C6-4D36-AA39-174DE9C437D1}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed III\AC3MP.exe
FirewallRules: [{0265FAB7-79D0-4FF2-B0F4-4A4E5625EE69}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{58307F58-715C-4FB2-B7B3-E99E54297D5F}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{924FE6C3-5442-4D3D-8600-1676BCBC1497}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{F4023511-8214-4370-A0DC-E27F907469C3}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C3C84DB8-E3ED-4309-AA17-98DB4C1404E8}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{09EC53F7-2D4C-4EA3-8F61-589AC7498892}] => (Allow) LPort=2869
FirewallRules: [{4D712B6C-D5C5-4052-9467-3B0C4D4EA93F}] => (Allow) LPort=1900
FirewallRules: [{2426BE72-FE4C-4960-AD7E-D296ED5146EA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{432ACA3E-6DC2-495F-85A0-84ABFC0F8E71}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{66D04363-3FDF-4796-8C6B-FA016B190D69}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{5BB3E2D9-DB27-4A17-88ED-80C78FE8B447}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{CD7CBCFC-939D-4255-8FB3-04B060004F43}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{34F94E76-20C2-4EA4-A2BF-3FB5062F4310}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{EB4A36F0-0438-438C-810F-45A086521E99}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{0598AF4C-A381-4024-BBAB-C49C284A5D9E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{4E34AAB8-0B70-4BAA-8205-67538F2746E4}] => (Allow) LPort=8501
FirewallRules: [{DD748276-E9D9-41D0-B3F4-14D66A797845}] => (Allow) LPort=8501
FirewallRules: [{DFF78509-ADD0-4504-8418-E06A18CEA9B6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B13D684A-0B49-4947-A139-BDB8D2B46CA6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{894C4A81-EA1E-4F73-B76A-3ADC96F99C98}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{40FD88E2-20D7-4D61-8C2C-0439E341C0C9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{EEC98087-0FDE-4545-9A7F-10ACE4A3A592}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{3ADCA670-4A1A-4201-ABBD-693AF1E7C266}C:\program files (x86)\pp助手5.0\adevicehelpermon.exe] => (Block) C:\program files (x86)\pp助手5.0\adevicehelpermon.exe
FirewallRules: [UDP Query User{A81528FB-09F8-42CF-B102-257137607F41}C:\program files (x86)\pp助手5.0\adevicehelpermon.exe] => (Block) C:\program files (x86)\pp助手5.0\adevicehelpermon.exe
FirewallRules: [TCP Query User{4211897E-7AAB-4667-A83F-6E4B1EC7179F}C:\program files (x86)\pp助手5.0\pphelper5.exe] => (Block) C:\program files (x86)\pp助手5.0\pphelper5.exe
FirewallRules: [UDP Query User{87F05853-89CD-44E5-8398-B45EBB65FAE0}C:\program files (x86)\pp助手5.0\pphelper5.exe] => (Block) C:\program files (x86)\pp助手5.0\pphelper5.exe
FirewallRules: [{C6F42400-805A-41B6-BAFB-DD420A27CFB5}] => (Allow) C:\Program Files (x86)\3D-Modellbahn Studio\ModellbahnStudio.exe
FirewallRules: [{4E681A5D-5A59-43E8-B155-3CF656AEDD88}] => (Allow) C:\Program Files (x86)\3D-Modellbahn Studio\ModellbahnStudio.exe
FirewallRules: [{88296324-0F64-438B-8F7F-0FF58C9EBAA6}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Driver San Francisco\Driver.exe
FirewallRules: [{B7FD6388-633C-48A9-84A5-1C1E897B642E}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Driver San Francisco\Driver.exe
FirewallRules: [{30470874-D318-415E-8F65-CDF26779300D}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{3922FB51-A1A6-43C0-9096-2D27ADECA933}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{4073BAA7-A295-45A3-9362-552ED24768DC}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{00C4C1CC-2AF0-45A6-A863-81166AF9B19D}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 14\Game\fifa14.exe
FirewallRules: [{647A445F-E04A-4DC4-A945-791039A34A7B}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 14\Game\fifa14.exe
FirewallRules: [{D0E72D06-5E23-4CAE-B0A3-682D427133CF}] => (Allow) C:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe
FirewallRules: [{BB1AEB38-DAC8-4062-86AB-9475FA54EC0E}] => (Allow) C:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe
FirewallRules: [{DBCCB9C8-6E81-4525-80F4-0501E160986F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\F1 2012\F1_2012.exe
FirewallRules: [{DAB37F94-9A63-4C04-8AF6-A63759BF2DA8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\F1 2012\F1_2012.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Wiederherstellungspunkte =========================

14-06-2017 14:45:35 Windows Update
20-06-2017 19:27:06 Windows Update
         

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (06/20/2017 06:48:53 PM) (Source: MSPAC) (EventID: 304) (User: )
Description: Event-ID 304

Error: (06/20/2017 06:42:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fsx.exe, Version: 10.0.60905.0, Zeitstempel: 0x44fd0a92
Name des fehlerhaften Moduls: API.DLL, Version: 10.0.60905.0, Zeitstempel: 0x44fd0f33
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002c247
ID des fehlerhaften Prozesses: 0x1b98
Startzeit der fehlerhaften Anwendung: 0x01d2e9e43ea736f0
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Microsoft Games\Microsoft Flight Simulator X\fsx.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Microsoft Games\Microsoft Flight Simulator X\API.DLL
Berichtskennung: 7b292304-e6fe-41fd-8e79-4157318939b5
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (06/20/2017 06:39:43 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-SDFHP2T)
Description: Bei der Aktivierung der App „Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (06/20/2017 06:14:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fsx.exe, Version: 10.0.60905.0, Zeitstempel: 0x44fd0a92
Name des fehlerhaften Moduls: API.DLL, Version: 10.0.60905.0, Zeitstempel: 0x44fd0f33
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002c247
ID des fehlerhaften Prozesses: 0xd84
Startzeit der fehlerhaften Anwendung: 0x01d2e9e03e723be0
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Microsoft Games\Microsoft Flight Simulator X\fsx.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Microsoft Games\Microsoft Flight Simulator X\API.DLL
Berichtskennung: afc73024-ab72-4cf6-abe0-c8e34b895761
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (06/20/2017 06:07:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fsx.exe, Version: 10.0.60905.0, Zeitstempel: 0x44fd0a92
Name des fehlerhaften Moduls: API.DLL, Version: 10.0.60905.0, Zeitstempel: 0x44fd0f33
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002c247
ID des fehlerhaften Prozesses: 0xc4
Startzeit der fehlerhaften Anwendung: 0x01d2e9df567f7d21
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Microsoft Games\Microsoft Flight Simulator X\fsx.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Microsoft Games\Microsoft Flight Simulator X\API.DLL
Berichtskennung: 50a969b8-1e38-496f-ad29-bb753b5f0d56
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (06/20/2017 05:59:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fsx.exe, Version: 10.0.60905.0, Zeitstempel: 0x44fd0a92
Name des fehlerhaften Moduls: API.DLL, Version: 10.0.60905.0, Zeitstempel: 0x44fd0f33
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002c247
ID des fehlerhaften Prozesses: 0xcf8
Startzeit der fehlerhaften Anwendung: 0x01d2e9de291c469d
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Microsoft Games\Microsoft Flight Simulator X\fsx.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Microsoft Games\Microsoft Flight Simulator X\API.DLL
Berichtskennung: 7ed6efc0-f2fe-45e1-82dd-6491c50f55a6
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (06/20/2017 05:58:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fsx.exe, Version: 10.0.60905.0, Zeitstempel: 0x44fd0a92
Name des fehlerhaften Moduls: API.DLL, Version: 10.0.60905.0, Zeitstempel: 0x44fd0f33
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002c247
ID des fehlerhaften Prozesses: 0x31d0
Startzeit der fehlerhaften Anwendung: 0x01d2e9de1138b8c4
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Microsoft Games\Microsoft Flight Simulator X\fsx.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Microsoft Games\Microsoft Flight Simulator X\API.DLL
Berichtskennung: 5569944e-b74b-4607-86ad-9a74d10174af
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (06/20/2017 05:51:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-SDFHP2T)
Description: Bei der Aktivierung der App „Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (06/20/2017 05:48:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fsx.exe, Version: 10.0.60905.0, Zeitstempel: 0x44fd0a92
Name des fehlerhaften Moduls: API.DLL, Version: 10.0.60905.0, Zeitstempel: 0x44fd0f33
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002c247
ID des fehlerhaften Prozesses: 0x1fc4
Startzeit der fehlerhaften Anwendung: 0x01d2e9dc82947fe9
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Microsoft Games\Microsoft Flight Simulator X\fsx.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Microsoft Games\Microsoft Flight Simulator X\API.DLL
Berichtskennung: 431dcbda-71cf-4606-be8c-6cee0ad9f641
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (06/20/2017 05:47:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fsx.exe, Version: 10.0.60905.0, Zeitstempel: 0x44fd0a92
Name des fehlerhaften Moduls: FSUIPC4.dll_unloaded, Version: 4.8.5.3, Zeitstempel: 0x50477966
Ausnahmecode: 0xc000041d
Fehleroffset: 0x0007f6cf
ID des fehlerhaften Prozesses: 0x1004
Startzeit der fehlerhaften Anwendung: 0x01d2e9d6180ad818
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Microsoft Games\Microsoft Flight Simulator X\fsx.exe
Pfad des fehlerhaften Moduls: FSUIPC4.dll
Berichtskennung: 9d2d1de0-acb9-49e1-95d6-be75776a0c3f
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:


Systemfehler:
=============
Error: (06/22/2017 09:17:27 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-SDFHP2T)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "DESKTOP-SDFHP2T\jonas" (SID: S-1-5-21-2182765339-3254949556-2727863788-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (06/22/2017 08:49:03 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (06/22/2017 08:49:03 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (06/22/2017 08:49:03 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (06/22/2017 08:49:03 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 und der APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (06/22/2017 08:47:28 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Origin Web Helper Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (06/22/2017 08:47:28 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Origin Web Helper Service erreicht.

Error: (06/22/2017 08:46:57 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "WsDrvInst" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (06/22/2017 08:46:56 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet: 
Die Anforderung wird nicht unterstützt.

Error: (06/21/2017 12:55:08 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-SDFHP2T)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "DESKTOP-SDFHP2T\jonas" (SID: S-1-5-21-2182765339-3254949556-2727863788-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.


CodeIntegrity:
===================================
  Date: 2017-06-22 09:20:46.687
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Andy\msvcr100.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-06-22 09:20:46.601
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Andy\msvcp100.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-06-20 18:45:33.929
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Andy\msvcr100.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-06-20 18:45:33.843
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Andy\msvcp100.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-06-20 18:00:51.147
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Andy\msvcr100.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-06-20 18:00:51.077
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Andy\msvcp100.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-06-20 14:19:33.741
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Andy\msvcr100.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-06-20 14:19:33.489
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Andy\msvcp100.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-06-19 14:34:27.661
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Andy\msvcr100.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-06-19 14:34:27.550
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Andy\msvcp100.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-3320M CPU @ 2.60GHz
Prozentuale Nutzung des RAM: 65%
Installierter physikalischer RAM: 3774.24 MB
Verfügbarer physikalischer RAM: 1310.53 MB
Summe virtueller Speicher: 6590.24 MB
Verfügbarer virtueller Speicher: 2773.49 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:244.14 GB) (Free:20.91 GB) NTFS
Drive e: (Lenovo_Recovery) (Fixed) (Total:23.69 GB) (Free:15.55 GB) NTFS

==================== MBR & Partitionstabelle ==================

==================== Ende von Addition.txt ============================
         

Lade Dir bitte von hier Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

• Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
• Klicke auf Optionen und wähle als Sprache Deutsch.
• Suche im Uninstallerfeld nach den Programmen:
  
  
  Ashampoo WinOptimizer 2017
  
  CCleaner
  
  Norton Security
  
  Spybot - Search & Destroy
  
  
  
• Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
• Wähle anschließend den Modus "Moderat" aus.
  
• Reste löschen:
  Klicke auf dann auf und dann auf .

 

Aber wieso die Folgenden Programme

Ashampoo WinOptimizer 17

CCleaner

Norton Secruity

Spybot
??

Diese Programme sind unnötig und tw. gefährlich, hau sie bitte runter.