Guten Morgen Schrauber, hier die Logs, vielen dank für Deine Hilfe!!!

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:12-08-2015
durchgeführt von XXXXX (Administrator) auf XXXXXX (20-08-2015 09:10:50)
Gestartet von C:\Users\XXXXXX\Desktop\Trojaner Board
Geladene Profile: UpdatusUser & Susanne (Verfügbare Profile: UpdatusUser & Susanne)
Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
() C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfemms.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
() C:\ProgramData\Olkakladsujib\1.0.4.1\oronahim.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\CSP\1.6.1008.0\McCSPServiceHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\ProgramData\Olkakladsujib\1.0.4.1\oronahim.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_232.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_232.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\UPDMGR\3.0.4102.1\mcupdatemgr.exe


==================== Registry (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13545032 2013-05-28] (Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [gpuminer] => C:\Users\Susanne\AppData\Roaming\cpuminer\sgminer\sgminer.cmd
HKLM\...\Run: [SpaceSoundPro] => "C:\Program Files\SpaceSoundPro\SpaceSoundPro.exe"
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-25] (Atheros Communications)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-21-1794304933-3207535254-2068445666-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2014-11-21] (Microsoft Corporation)
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\Run: [CrashService] => "C:\Users\Susanne\AppData\Local\BoBrowser\Application\crash_service.exe" --max-reports=50 --no-window
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  Keine Datei
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  Keine Datei

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Richtlinienbeschränkung <======= ACHTUNG
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\SOFTWARE\Policies\Microsoft\Internet Explorer: Richtlinienbeschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-1794304933-3207535254-2068445666-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1794304933-3207535254-2068445666-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2013-01-25] (Qualcomm Atheros Commnucations)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-08-04] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-08-04] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-08-04] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-08-04] (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2015-07-21] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2015-07-21] (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{1E5210DC-85FF-4E1C-98B0-40CB3565919B}: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default
FF Homepage: hxxp://www.gmx.net/
https://www.google.de/
https://de.groups.yahoo.com/neo
https://groups.google.com/forum/#!overview
https://translate.google.de/?hl=de
https://www.congstar.de/meincongstar/
https://www.kabeldeutschland.de/csc/abmelden
http://www.trojaner-board.de/plagege...n-bekaempfung/
http://www.trojaner-board.de/169678-...uslastung.html
hxxp://www.alienskin.com/eyecandy/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-15] ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-07-21] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-15] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-07-21] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Extension: WOT - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-08-15]
FF Extension: Webmail Ad Blocker - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\gmailnoads@mywebber.com.xpi [2015-08-15]
FF Extension: S3.Google Translator - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\s3google@translator.xpi [2015-08-15]
FF Extension: McAfee WebAdvisor - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}.xpi [2015-08-14]
FF Extension: NoScript - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-08-15]
FF Extension: Adblock Plus - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-08-15]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2013-04-26]
FF Extension: Kein Name - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\extensions\defsearchp@gmail.com [nicht gefunden]
FF Extension: Kein Name - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\extensions\deskCutv2@gmail.com [nicht gefunden]
FF Extension: Kein Name - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\extensions\defsearchp@gmail.com [nicht gefunden]
FF Extension: Kein Name - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\extensions\deskCutv2@gmail.com [nicht gefunden]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-08-13]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-08-13]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] () [Datei ist nicht signiert]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-25] (Qualcomm Atheros Commnucations) [Datei ist nicht signiert]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [155368 2015-08-04] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [782608 2015-07-21] (McAfee, Inc.)
S3 McAWFwk; C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334760 2012-12-21] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.6.1008.0\McCSPServiceHost.exe [1694152 2015-07-23] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [639456 2015-07-17] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232656 2015-06-29] (McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [373704 2015-07-15] (McAfee, Inc.)
R2 mfevtp; C:\windows\system32\mfevtps.exe [254792 2015-06-29] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368048 2015-07-21] (McAfee, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-08-18] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-08-18] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-01-25] (Atheros) [Datei ist nicht signiert]
S2 Update Coupon Time; "C:\Program Files (x86)\Coupon Time\updateCouponTime.exe" [X]
S2 Util Coupon Time; "C:\Program Files (x86)\Coupon Time\bin\utilCouponTime.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [65784 2013-04-16] (ASUS Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-25] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-11-21] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [77536 2015-07-02] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [207208 2015-05-19] (McAfee, Inc.)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [412440 2015-07-02] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [347800 2015-07-02] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [80920 2015-07-02] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [496888 2015-07-02] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [875928 2015-07-02] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [529080 2015-06-28] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [109728 2015-06-28] (McAfee, Inc.)
R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [37960 2015-08-04] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [344704 2015-07-02] (McAfee, Inc.)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-20 07:02 - 2015-08-20 07:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-08-20 07:00 - 2015-08-20 07:00 - 00000000 ___RD C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-08-19 12:28 - 2015-08-19 12:28 - 00001095 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2015-08-19 12:28 - 2015-08-19 12:28 - 00000000 ____D C:\Users\Susanne\AppData\Local\VS Revo Group
2015-08-19 12:28 - 2015-08-19 12:28 - 00000000 ____D C:\ProgramData\VS Revo Group
2015-08-19 12:28 - 2015-08-19 12:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2015-08-19 12:28 - 2015-08-19 12:28 - 00000000 ____D C:\Program Files\VS Revo Group
2015-08-19 12:28 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys
2015-08-19 08:22 - 2015-08-19 08:22 - 00000000 ____D C:\ProgramData\Browser
2015-08-18 20:21 - 2015-08-18 20:21 - 00000000 ____D C:\TDSSKiller_Quarantine
2015-08-18 19:59 - 2015-08-19 12:22 - 00003436 _____ C:\WINDOWS\System32\Tasks\Olkakladsujib
2015-08-18 19:59 - 2015-08-18 19:59 - 00000000 ____D C:\ProgramData\Olkakladsujib
2015-08-18 19:54 - 2015-08-18 19:55 - 00000000 ____D C:\ProgramData\HWinManProH
2015-08-18 19:18 - 2015-08-18 19:18 - 00003154 _____ C:\WINDOWS\System32\Tasks\{A7D58E18-1B4E-465F-B6ED-4EFE3829029A}
2015-08-18 19:16 - 2015-08-18 19:16 - 00000000 ____D C:\ProgramData\6WinManPro6
2015-08-18 19:15 - 2015-08-18 19:54 - 00000434 _____ C:\task.vbs
2015-08-18 18:42 - 2015-08-18 18:42 - 00000000 ____D C:\AdwCleaner
2015-08-18 18:28 - 2015-08-18 18:28 - 00003130 _____ C:\WINDOWS\System32\Tasks\{D52E5E0D-7B83-453B-B34F-8346DD360FFF}
2015-08-18 18:27 - 2015-08-18 20:05 - 00001001 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-08-18 18:27 - 2015-08-18 18:27 - 00003152 _____ C:\WINDOWS\System32\Tasks\{825879E2-CC36-47E0-887E-8D5A3643532D}
2015-08-18 18:20 - 2015-08-18 18:20 - 00000000 ____D C:\ProgramData\1WinManPro1
2015-08-18 18:19 - 2015-08-18 18:19 - 00000000 ____D C:\Users\Susanne\AppData\Local\Google
2015-08-18 18:05 - 2015-08-18 18:24 - 00000004 _____ C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-08-18 18:05 - 2015-08-18 18:05 - 00003092 _____ C:\WINDOWS\System32\Tasks\cfr3011
2015-08-18 18:04 - 2015-08-18 18:04 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\NVIDIA
2015-08-18 18:04 - 2015-08-18 18:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-18 18:04 - 2015-08-18 18:04 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-08-18 18:03 - 2015-08-19 11:04 - 00000000 ____D C:\Program Files (x86)\88AF1429-1439913800-E311-993D-BCEE7B96E21F
2015-08-18 18:03 - 2015-08-18 18:03 - 00000000 ____D C:\Program Files (x86)\mbot_de_014010063
2015-08-18 18:02 - 2015-08-19 11:05 - 00000000 ____D C:\Program Files (x86)\I - Cinema
2015-08-18 18:02 - 2015-08-18 18:03 - 00000000 ____D C:\ProgramData\lWinManProl
2015-08-18 18:02 - 2015-08-18 18:02 - 00003190 _____ C:\WINDOWS\System32\Tasks\crash_service
2015-08-18 18:02 - 2015-08-18 18:02 - 00000000 _____ C:\WINDOWS\prleth.sys
2015-08-18 18:02 - 2015-08-18 18:02 - 00000000 _____ C:\WINDOWS\hgfs.sys
2015-08-18 15:16 - 2015-08-19 08:25 - 00003934 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{4A105045-E9F4-48C6-AC0D-2E7F7A2F8B9E}
2015-08-18 14:36 - 2015-08-20 07:00 - 00000000 ___RD C:\Users\Susanne\OneDrive
2015-08-18 14:34 - 2015-08-18 14:35 - 00000000 ____D C:\Users\Susanne\AppData\Local\PackageStaging
2015-08-18 14:33 - 2015-08-18 20:05 - 00001013 _____ C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-08-18 14:33 - 2015-08-18 14:33 - 00000020 ___SH C:\Users\Susanne\ntuser.ini
2015-08-18 14:24 - 2015-08-18 18:37 - 00000000 ___DC C:\WINDOWS\Panther
2015-08-18 14:23 - 2015-08-18 14:23 - 07032320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2015-08-18 14:23 - 2015-08-18 14:23 - 06213120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2015-08-18 14:23 - 2015-08-18 14:23 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-08-18 14:23 - 2015-08-18 14:23 - 01101824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2015-08-18 14:23 - 2015-08-18 14:23 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2015-08-18 14:23 - 2015-08-18 14:23 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
2015-08-18 14:23 - 2015-08-18 14:23 - 00000000 ____D C:\Windows.old
2015-08-18 14:22 - 2015-08-18 14:22 - 04837376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 01574400 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 01454080 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2015-08-18 14:22 - 2015-08-18 14:22 - 01154048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2015-08-18 14:22 - 2015-08-18 14:22 - 01142272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 01084416 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2015-08-18 14:22 - 2015-08-18 14:22 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00962216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00952896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00885760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2015-08-18 14:22 - 2015-08-18 14:22 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2015-08-18 14:22 - 2015-08-18 14:22 - 00801584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00786120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00733696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00658432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00551232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2015-08-18 14:22 - 2015-08-18 14:22 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00473408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2015-08-18 14:22 - 2015-08-18 14:22 - 00465408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2015-08-18 14:22 - 2015-08-18 14:22 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2015-08-18 14:22 - 2015-08-18 14:22 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\QSHVHOST.DLL
2015-08-18 14:22 - 2015-08-18 14:22 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascfg.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rascfg.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\QSHVHOST.DLL
2015-08-18 14:22 - 2015-08-18 14:22 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00136512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2015-08-18 14:22 - 2015-08-18 14:22 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2015-08-18 14:22 - 2015-08-18 14:22 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\QSVRMGMT.DLL
2015-08-18 14:22 - 2015-08-18 14:22 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2015-08-18 14:22 - 2015-08-18 14:22 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2015-08-18 14:22 - 2015-08-18 14:22 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\QSVRMGMT.DLL
2015-08-18 14:22 - 2015-08-18 14:22 - 00086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2015-08-18 14:22 - 2015-08-18 14:22 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2015-08-18 14:22 - 2015-08-18 14:22 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdiag.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2015-08-18 14:22 - 2015-08-18 14:22 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdiag.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00058176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2015-08-18 14:22 - 2015-08-18 14:22 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\kmddsp.tsp
2015-08-18 14:22 - 2015-08-18 14:22 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmxs.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00039744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2015-08-18 14:22 - 2015-08-18 14:22 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kmddsp.tsp
2015-08-18 14:22 - 2015-08-18 14:22 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasmxs.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasser.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
2015-08-18 14:22 - 2015-08-18 14:22 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasser.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcls.dll
2015-08-18 14:22 - 2015-08-18 14:22 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcls.dll
2015-08-18 14:21 - 2015-08-18 14:21 - 04417536 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2015-08-18 14:21 - 2015-08-18 14:21 - 02985984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2015-08-18 14:21 - 2015-08-18 14:21 - 01491456 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2015-08-18 14:21 - 2015-08-18 14:21 - 01207296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2015-08-18 14:21 - 2015-08-18 14:21 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll
2015-08-18 14:21 - 2015-08-18 14:21 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2015-08-18 14:21 - 2015-08-18 14:21 - 00316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2015-08-18 14:21 - 2015-08-18 14:21 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2015-08-18 14:21 - 2015-08-18 14:21 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2015-08-18 14:21 - 2015-08-18 14:21 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe
2015-08-18 14:21 - 2015-08-18 14:21 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe
2015-08-18 14:21 - 2015-08-18 14:21 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
2015-08-18 14:20 - 2015-08-18 14:20 - 03607552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2015-08-18 14:20 - 2015-08-18 14:20 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-08-18 14:20 - 2015-08-18 14:20 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-08-18 14:20 - 2015-08-18 14:20 - 02460160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-08-18 14:20 - 2015-08-18 14:20 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2015-08-18 14:20 - 2015-08-18 14:20 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-08-18 14:20 - 2015-08-18 14:20 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-08-18 14:20 - 2015-08-18 14:20 - 00672984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2015-08-18 14:20 - 2015-08-18 14:20 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2015-08-18 14:20 - 2015-08-18 14:20 - 00273240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2015-08-18 14:20 - 2015-08-18 14:20 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll
2015-08-18 14:20 - 2015-08-18 14:20 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2015-08-18 14:20 - 2015-08-18 14:20 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2015-08-18 14:19 - 2015-08-18 14:19 - 00000000 ____D C:\WINDOWS\SysWOW64\Drivers\en-GB
2015-08-18 14:19 - 2015-08-18 14:19 - 00000000 ____D C:\WINDOWS\system32\Drivers\en-GB
2015-08-18 14:19 - 2015-08-18 13:39 - 00000000 ____D C:\WINDOWS\en-GB
2015-08-18 14:11 - 2015-08-18 14:11 - 01763352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-08-18 14:11 - 2015-08-18 14:11 - 01488040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-08-18 14:11 - 2015-08-18 14:11 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-18 14:11 - 2015-08-18 14:11 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-08-18 14:11 - 2015-08-18 14:11 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-08-18 14:11 - 2015-08-18 14:11 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-08-18 14:11 - 2015-08-18 14:11 - 00411133 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-08-18 14:11 - 2015-08-18 14:11 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2015-08-18 14:11 - 2015-08-18 14:11 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2015-08-18 14:11 - 2015-08-18 14:11 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-18 14:11 - 2015-08-18 14:11 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys
2015-08-18 14:11 - 2015-08-18 14:11 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-18 14:11 - 2015-08-18 14:11 - 00059712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdclass.sys
2015-08-18 14:11 - 2015-08-18 14:11 - 00051008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys
2015-08-18 14:11 - 2015-08-18 14:11 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2015-08-18 14:11 - 2015-08-18 14:11 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys
2015-08-18 14:11 - 2015-08-18 14:11 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sermouse.sys
2015-08-18 14:10 - 2015-08-18 14:10 - 18823680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 15159296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 04177408 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-08-18 14:10 - 2015-08-18 14:10 - 03704320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 02228736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 01994752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 01559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 01381888 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00513480 _____ C:\WINDOWS\SysWOW64\locale.nls
2015-08-18 14:10 - 2015-08-18 14:10 - 00513480 _____ C:\WINDOWS\system32\locale.nls
2015-08-18 14:10 - 2015-08-18 14:10 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00301568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-08-18 14:10 - 2015-08-18 14:10 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2015-08-18 14:10 - 2015-08-18 14:10 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00046456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe
2015-08-18 14:10 - 2015-08-18 14:10 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-08-18 14:10 - 2015-08-18 14:10 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-08-18 14:10 - 2015-08-18 14:10 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-08-18 14:10 - 2015-08-18 14:10 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-08-18 14:09 - 2015-08-18 20:08 - 00000000 ___SD C:\WINDOWS\system32\GWX
2015-08-18 14:09 - 2015-08-18 14:09 - 01661576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 00653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2015-08-18 14:09 - 2015-08-18 14:09 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 00377152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-08-18 14:09 - 2015-08-18 14:09 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-08-18 14:09 - 2015-08-18 14:09 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-08-18 14:09 - 2015-08-18 14:09 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
2015-08-18 14:09 - 2015-08-18 14:09 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-08-18 14:08 - 2015-08-18 14:08 - 02529880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2015-08-18 14:08 - 2015-08-18 14:08 - 02476376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2015-08-18 14:08 - 2015-08-18 14:08 - 02345472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2015-08-18 14:08 - 2015-08-18 14:08 - 01901776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2015-08-18 14:08 - 2015-08-18 14:08 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2015-08-18 14:08 - 2015-08-18 14:08 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-08-18 14:08 - 2015-08-18 14:08 - 01380600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-08-18 14:08 - 2015-08-18 14:08 - 01201664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2015-08-18 14:08 - 2015-08-18 14:08 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-08-18 14:08 - 2015-08-18 14:08 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-08-18 14:08 - 2015-08-18 14:08 - 00993632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2015-08-18 14:08 - 2015-08-18 14:08 - 00987848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2015-08-18 14:08 - 2015-08-18 14:08 - 00690016 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120_clr0400.dll
2015-08-18 14:08 - 2015-08-18 14:08 - 00484552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp120_clr0400.dll
2015-08-18 14:08 - 2015-08-18 14:08 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2015-08-18 14:08 - 2015-08-18 14:08 - 00239424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2015-08-18 14:08 - 2015-08-18 14:08 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2015-08-18 14:08 - 2015-08-18 14:08 - 00154432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2015-08-18 14:08 - 2015-08-18 14:08 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2015-08-18 14:08 - 2015-08-18 14:08 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-08-18 14:08 - 2015-08-18 14:08 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-08-18 14:07 - 2015-08-18 14:07 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2015-08-18 14:07 - 2015-08-18 14:07 - 03551744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2015-08-18 14:07 - 2015-08-18 14:07 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdshext.dll
2015-08-18 14:07 - 2015-08-18 14:07 - 01969664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpdshext.dll
2015-08-18 14:07 - 2015-08-18 14:07 - 01696256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2015-08-18 14:07 - 2015-08-18 14:07 - 01488896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2015-08-18 14:07 - 2015-08-18 14:07 - 01464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2015-08-18 14:07 - 2015-08-18 14:07 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2015-08-18 14:07 - 2015-08-18 14:07 - 01204224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2015-08-18 14:07 - 2015-08-18 14:07 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-08-18 14:07 - 2015-08-18 14:07 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2015-08-18 14:07 - 2015-08-18 14:07 - 00325464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2015-08-18 14:07 - 2015-08-18 14:07 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-08-18 14:07 - 2015-08-18 14:07 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 22292672 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 19734960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 03109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 02162176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 01812992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 01311960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 01113944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-08-18 14:06 - 2015-08-18 14:06 - 00989184 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 00561928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-08-18 14:06 - 2015-08-18 14:06 - 00487256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 00442712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 00410128 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-08-18 14:06 - 2015-08-18 14:06 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2015-08-18 14:06 - 2015-08-18 14:06 - 00393560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 00332120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2015-08-18 14:06 - 2015-08-18 14:06 - 00270168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2015-08-18 14:06 - 2015-08-18 14:06 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2015-08-18 14:06 - 2015-08-18 14:06 - 00178008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-08-18 14:06 - 2015-08-18 14:06 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rgb9rast.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2015-08-18 14:06 - 2015-08-18 14:06 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorageContextHandler.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 00044560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2015-08-18 14:06 - 2015-08-18 14:06 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2015-08-18 14:06 - 2015-08-18 14:06 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 07784448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 07458648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-08-18 14:05 - 2015-08-18 14:05 - 05264384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 01735000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 01499920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00933888 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-08-18 14:05 - 2015-08-18 14:05 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-08-18 14:05 - 2015-08-18 14:05 - 00723072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00560392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-08-18 14:05 - 2015-08-18 14:05 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00101720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2015-08-18 14:05 - 2015-08-18 14:05 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-08-18 14:05 - 2015-08-18 14:05 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-08-18 14:05 - 2015-08-18 14:05 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-08-18 14:05 - 2015-08-18 14:05 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-08-18 14:04 - 2015-08-18 14:04 - 02256896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-08-18 14:04 - 2015-08-18 14:04 - 01943040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-08-18 14:04 - 2015-08-18 14:04 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-08-18 14:04 - 2015-08-18 14:04 - 00467776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-08-18 14:04 - 2015-08-18 14:04 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-08-18 14:04 - 2015-08-18 14:04 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2015-08-18 14:03 - 2015-08-18 14:03 - 03633664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2015-08-18 14:03 - 2015-08-18 14:03 - 02749952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2015-08-18 14:03 - 2015-08-18 14:03 - 02551808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-08-18 14:03 - 2015-08-18 14:03 - 01920000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2015-08-18 14:03 - 2015-08-18 14:03 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2015-08-18 14:03 - 2015-08-18 14:03 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2015-08-18 14:03 - 2015-08-18 14:03 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2015-08-18 14:03 - 2015-08-18 14:03 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2015-08-18 14:03 - 2015-08-18 14:03 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2015-08-18 14:03 - 2015-08-18 14:03 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2015-08-18 14:03 - 2015-08-18 14:03 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2015-08-18 14:03 - 2015-08-18 14:03 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2015-08-18 14:03 - 2015-08-18 14:03 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll
2015-08-18 14:02 - 2015-08-18 14:02 - 03084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-08-18 14:02 - 2015-08-18 14:02 - 02501368 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-08-18 14:02 - 2015-08-18 14:02 - 02471424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-08-18 14:02 - 2015-08-18 14:02 - 02207488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-08-18 14:02 - 2015-08-18 14:02 - 00991552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-08-18 14:02 - 2015-08-18 14:02 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2015-08-18 14:02 - 2015-08-18 14:02 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2015-08-18 14:02 - 2015-08-18 14:02 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\photowiz.dll
2015-08-18 14:02 - 2015-08-18 14:02 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\photowiz.dll
2015-08-18 14:02 - 2015-08-18 14:02 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll
2015-08-18 14:02 - 2015-08-18 14:02 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll
2015-08-18 14:02 - 2015-08-18 14:02 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2015-08-18 14:02 - 2015-08-18 14:02 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2015-08-18 14:01 - 2015-08-18 14:01 - 25192448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 19870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 14451200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 12856832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 05923328 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 04520448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 02427904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 02279424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-08-18 14:01 - 2015-08-18 14:01 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-08-18 14:01 - 2015-08-18 14:01 - 01951232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 01310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-08-18 14:01 - 2015-08-18 14:01 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-08-18 14:01 - 2015-08-18 14:01 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-08-18 14:01 - 2015-08-18 14:01 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2015-08-18 14:01 - 2015-08-18 14:01 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-08-18 14:01 - 2015-08-18 14:01 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2015-08-18 14:01 - 2015-08-18 14:01 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-08-18 14:00 - 2015-08-18 14:00 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-08-18 14:00 - 2015-08-18 14:00 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-08-18 14:00 - 2015-08-18 14:00 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-08-18 14:00 - 2015-08-18 14:00 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-08-18 14:00 - 2015-08-18 14:00 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-08-18 14:00 - 2015-08-18 14:00 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-08-18 14:00 - 2015-08-18 14:00 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2015-08-18 14:00 - 2015-08-18 14:00 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-08-18 14:00 - 2015-08-18 14:00 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-08-18 14:00 - 2015-08-18 14:00 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-08-18 14:00 - 2015-08-18 14:00 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-08-18 14:00 - 2015-08-18 14:00 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-08-18 13:59 - 2015-08-18 13:59 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-08-18 13:59 - 2015-08-18 13:59 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-08-18 13:59 - 2015-08-18 13:59 - 00000000 ____D C:\Program Files\MSBuild
2015-08-18 13:59 - 2015-08-18 13:59 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-08-18 13:59 - 2015-08-18 13:59 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-08-18 13:58 - 2015-08-18 13:58 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe
2015-08-18 13:58 - 2015-08-18 13:58 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe
2015-08-18 13:58 - 2013-08-03 06:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-08-18 13:58 - 2013-08-03 06:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-08-18 13:58 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-08-18 13:58 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Programme
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\ProgramData\Vorlagen
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\ProgramData\Startmenü
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\ProgramData\Dokumente
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2015-08-18 13:50 - 2015-08-18 13:50 - 00000000 _SHDL C:\Dokumente und Einstellungen
2015-08-18 13:49 - 2015-08-18 13:49 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-08-18 13:47 - 2015-08-18 13:47 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2015-08-18 13:38 - 2015-08-18 13:38 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-08-18 13:36 - 2015-08-18 13:36 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-08-18 13:35 - 2015-08-18 14:36 - 00000000 ____D C:\Users\Susanne
2015-08-18 13:35 - 2015-08-18 14:21 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-18 13:35 - 2015-08-18 14:21 - 00000000 ___RD C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-18 13:35 - 2015-08-18 13:49 - 00028578 _____ C:\WINDOWS\diagwrn.xml
2015-08-18 13:35 - 2015-08-18 13:49 - 00028578 _____ C:\WINDOWS\diagerr.xml
2015-08-18 13:35 - 2015-08-18 13:36 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-18 13:35 - 2015-08-18 13:36 - 00000000 ___RD C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\Susanne\Vorlagen
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\Susanne\Startmenü
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\Susanne\Netzwerkumgebung
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\Susanne\Lokale Einstellungen
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\Susanne\Eigene Dateien
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\Susanne\Druckumgebung
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\Susanne\Documents\Eigene Musik
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\Susanne\Documents\Eigene Bilder
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\Susanne\AppData\Local\Verlauf
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\Susanne\AppData\Local\Anwendungsdaten
2015-08-18 13:35 - 2015-08-18 13:35 - 00000000 _SHDL C:\Users\Susanne\Anwendungsdaten
2015-08-18 13:35 - 2014-11-21 12:52 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-18 13:35 - 2014-11-21 12:52 - 00000000 ___RD C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-18 13:35 - 2014-11-21 05:42 - 00000369 _____ C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-08-18 13:35 - 2014-11-21 05:42 - 00000369 _____ C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-08-18 13:35 - 2014-11-21 05:42 - 00000369 _____ C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-08-18 13:35 - 2014-11-21 05:42 - 00000369 _____ C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-08-18 13:35 - 2013-08-22 17:36 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-08-18 13:35 - 2013-08-22 17:36 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-08-18 13:28 - 2015-08-18 13:42 - 00000000 ____D C:\WINDOWS\SysWOW64\NV
2015-08-18 13:28 - 2015-08-18 13:42 - 00000000 ____D C:\WINDOWS\system32\NV
2015-08-18 13:28 - 2015-08-18 13:37 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-18 13:28 - 2015-08-18 13:37 - 00000000 ____D C:\Program Files\Intel
2015-08-18 13:28 - 2015-08-18 13:37 - 00000000 ____D C:\Program Files (x86)\Intel
2015-08-18 13:28 - 2015-08-18 13:28 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-08-18 13:28 - 2015-08-18 13:28 - 00000000 ____D C:\Program Files\Realtek
2015-08-18 13:28 - 2013-10-01 13:02 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2015-08-18 13:28 - 2013-10-01 13:02 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2015-08-18 13:28 - 2013-05-14 15:53 - 06411552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-08-18 13:28 - 2013-05-14 15:53 - 03462432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-08-18 13:28 - 2013-05-14 15:53 - 03165737 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-08-18 13:28 - 2013-05-14 15:53 - 02558240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-08-18 13:28 - 2013-05-14 15:53 - 01001760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2015-08-18 13:28 - 2013-05-14 15:53 - 00884512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-08-18 13:28 - 2013-05-14 15:53 - 00118560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-08-18 13:28 - 2013-05-14 15:53 - 00076064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2015-08-18 13:28 - 2013-05-14 15:53 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-08-18 13:27 - 2015-08-20 08:38 - 01879986 _____ C:\WINDOWS\WindowsUpdate.log
2015-08-18 13:27 - 2015-08-18 13:37 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-08-18 13:27 - 2015-08-18 13:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-08-18 13:27 - 2015-08-18 13:27 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-18 13:26 - 2015-08-18 13:26 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2015-08-18 09:17 - 2015-08-18 09:17 - 00005938 _____ C:\Users\Susanne\Desktop\PSP X7 Lizenzschlüssel.txt
2015-08-16 19:59 - 2015-08-19 12:47 - 00000000 ____D C:\Users\Susanne\AppData\Local\CrashDumps
2015-08-16 18:43 - 2015-08-16 18:43 - 00000043 _____ C:\Users\Susanne\Desktop\Photoshop Lizenzschlüssel.txt
2015-08-16 18:40 - 2015-08-16 18:42 - 375232764 _____ (Adobe Systems Inc. ) C:\Users\Susanne\Desktop\PS_CS2_Gr_NonRet.exe
2015-08-16 13:21 - 2015-08-18 13:49 - 00009765 _____ C:\WINDOWS\comsetup.log
2015-08-16 13:07 - 2015-08-16 13:07 - 00000207 _____ C:\WINDOWS\tweaking.com-regbackup-SUSANNE-Windows-8-(64-bit).dat
2015-08-16 13:07 - 2015-08-16 13:07 - 00000000 ____D C:\RegBackup
2015-08-16 12:58 - 2015-08-16 19:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-15 19:20 - 2015-08-18 18:10 - 00000000 ____D C:\WINDOWS\system32\AutoUpdateLicense
2015-08-15 18:49 - 2015-08-15 18:49 - 00000000 ____D C:\Users\Susanne\AppData\Local\Macromedia
2015-08-15 18:47 - 2015-08-20 09:03 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-08-15 18:47 - 2015-08-15 18:47 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-08-15 16:58 - 2015-08-15 16:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2015-08-15 16:58 - 2015-08-15 16:58 - 00000000 ____D C:\WINDOWS\System32\Tasks\McAfee
2015-08-15 13:15 - 2015-08-18 12:00 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2015-08-15 13:15 - 2015-08-18 12:00 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2015-08-15 13:15 - 2015-08-15 13:15 - 00003382 _____ C:\WINDOWS\System32\Tasks\Update Checker
2015-08-15 07:53 - 2015-03-04 09:26 - 00011105 _____ C:\WINDOWS\system32\AutoconfigV2.cab
2015-08-14 12:11 - 2015-05-19 13:59 - 00207208 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\HipShieldK.sys
2015-08-13 18:32 - 2015-08-19 08:45 - 00000000 ____D C:\Users\Susanne\Desktop\Trojaner Board
2015-08-13 18:30 - 2015-08-19 09:14 - 00000000 ____D C:\Users\Susanne\Desktop\Programme
2015-08-13 18:26 - 2015-08-18 21:21 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-08-13 18:26 - 2015-08-18 21:10 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-08-13 18:26 - 2015-08-13 18:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-13 18:25 - 2015-08-18 21:10 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-08-13 18:18 - 2015-08-13 18:20 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-08-13 18:18 - 2015-07-28 10:59 - 132483416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-08-13 15:59 - 2013-05-04 06:51 - 00014848 _____ (Microsoft) C:\WINDOWS\system32\rars.rs
2015-08-13 15:59 - 2013-05-04 06:10 - 00014848 _____ (Microsoft) C:\WINDOWS\SysWOW64\rars.rs
2015-08-13 11:25 - 2015-08-13 11:25 - 00000000 ____D C:\Program Files\Common Files\AV
2015-08-13 10:26 - 2015-08-14 09:43 - 00000000 ____D C:\sources
2015-08-13 09:15 - 2015-08-15 18:47 - 00000000 ____D C:\Users\Susanne\AppData\Local\Adobe
2015-08-13 08:24 - 2015-08-20 09:10 - 00000000 ____D C:\FRST
2015-08-13 08:24 - 2015-07-28 18:25 - 00025776 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-08-13 08:23 - 2015-08-13 08:23 - 00000000 _____ C:\Users\Susanne\defogger_reenable
2015-08-13 08:08 - 2015-08-16 12:50 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-08-13 08:07 - 2015-08-13 08:07 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-08-12 22:03 - 2015-08-18 14:23 - 00000000 __SHD C:\Recovery
2015-08-12 21:36 - 2015-08-16 19:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-12 21:36 - 2015-08-12 21:37 - 00000000 ____D C:\Users\Susanne\AppData\Local\Mozilla
2015-08-12 21:36 - 2015-08-12 21:36 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\Mozilla
2015-08-12 21:22 - 2015-08-12 21:22 - 00000000 _____ C:\Users\Susanne\agent.log
2015-08-12 21:21 - 2015-08-12 21:21 - 00001085 _____ C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Downloads.lnk
2015-08-12 21:19 - 2015-08-20 07:13 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1794304933-3207535254-2068445666-1002
2015-08-12 21:14 - 2015-08-12 21:14 - 00000000 ____D C:\Users\Susanne\Documents\Bluetooth Folder
2015-08-12 21:14 - 2015-08-12 21:14 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\Macromedia
2015-08-12 21:14 - 2015-08-12 21:14 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\Atheros
2015-08-12 21:14 - 2015-08-12 21:14 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\ASUS WebStorage
2015-08-12 21:14 - 2015-08-12 21:14 - 00000000 ____D C:\Users\Susanne\AppData\Local\BMExplorer
2015-08-12 21:13 - 2015-08-20 07:01 - 00000073 _____ C:\Users\Susanne\AppData\Roaming\sp_data.sys
2015-08-12 21:13 - 2015-08-13 09:15 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\Adobe
2015-08-12 21:13 - 2015-08-12 21:13 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2015-08-12 21:12 - 2015-08-18 14:35 - 00000000 ____D C:\Users\Susanne\AppData\Local\Packages
2015-08-12 21:12 - 2015-08-12 21:12 - 00000196 _____ C:\WINDOWS\FixPatch.log
2015-08-12 21:12 - 2015-08-12 21:12 - 00000000 ____D C:\Users\Susanne\AppData\Local\VirtualStore
2015-08-12 21:12 - 2015-08-12 21:12 - 00000000 ____D C:\Users\Susanne\AppData\Local\ASUS

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-20 09:00 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-08-20 07:11 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-08-20 07:00 - 2014-03-01 12:33 - 00000868 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2015-08-19 10:50 - 2014-03-01 12:33 - 00000870 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2015-08-19 08:24 - 2014-11-21 05:35 - 01776918 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-08-19 08:24 - 2014-11-21 04:45 - 00765582 _____ C:\WINDOWS\system32\perfh007.dat
2015-08-19 08:24 - 2014-11-21 04:45 - 00159366 _____ C:\WINDOWS\system32\perfc007.dat
2015-08-18 21:04 - 2014-11-20 20:24 - 00016570 _____ C:\WINDOWS\PFRO.log
2015-08-18 21:04 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\ADFS
2015-08-18 21:04 - 2013-08-22 16:46 - 00328818 _____ C:\WINDOWS\setupact.log
2015-08-18 21:04 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-08-18 21:04 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-08-18 20:49 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\restore
2015-08-18 14:35 - 2014-11-21 23:57 - 00000000 ___HD C:\$Windows.~BT
2015-08-18 14:23 - 2013-08-22 17:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template
2015-08-18 14:23 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-08-18 14:22 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2015-08-18 14:22 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\setup
2015-08-18 14:21 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-18 14:21 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-18 14:19 - 2014-11-21 05:13 - 00000000 ____D C:\Program Files\Windows Journal
2015-08-18 14:19 - 2014-11-21 04:45 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2015-08-18 14:19 - 2014-11-21 04:45 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2015-08-18 14:19 - 2014-11-21 04:45 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2015-08-18 14:19 - 2014-11-21 04:45 - 00000000 ____D C:\WINDOWS\system32\winrm
2015-08-18 14:19 - 2014-11-21 04:45 - 00000000 ____D C:\WINDOWS\system32\slmgr
2015-08-18 14:19 - 2014-11-21 04:45 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2015-08-18 14:19 - 2013-08-22 17:36 - 00000000 ___SD C:\WINDOWS\system32\dsc
2015-08-18 14:19 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\WinStore
2015-08-18 14:19 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-08-18 14:19 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\migwiz
2015-08-18 14:19 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\FileManager
2015-08-18 14:19 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-08-18 14:19 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-08-18 14:19 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-08-18 14:19 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-08-18 14:19 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2015-08-18 14:19 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\servicing
2015-08-18 14:10 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-08-18 14:09 - 2014-11-21 05:27 - 02473472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-08-18 14:06 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-18 14:06 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-18 14:05 - 2013-08-22 17:36 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-18 14:00 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2015-08-18 13:51 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache
2015-08-18 13:50 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\Registration
2015-08-18 13:50 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows NT
2015-08-18 13:50 - 2013-08-22 15:36 - 00000000 __RHD C:\Users\Default
2015-08-18 13:48 - 2013-08-22 17:36 - 00000000 __RSD C:\WINDOWS\Media
2015-08-18 13:48 - 2013-08-22 17:36 - 00000000 __RHD C:\Users\Public\Libraries
2015-08-18 13:40 - 2013-08-22 16:44 - 00338016 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-08-18 13:39 - 2014-03-01 12:33 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-08-18 13:39 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-08-18 13:39 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2015-08-18 13:39 - 2013-04-26 01:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-08-18 13:39 - 2013-04-26 01:17 - 00000000 ____D C:\WINDOWS\nl
2015-08-18 13:39 - 2013-04-26 01:17 - 00000000 ____D C:\WINDOWS\it
2015-08-18 13:39 - 2013-04-26 01:17 - 00000000 ____D C:\WINDOWS\fr
2015-08-18 13:39 - 2013-04-26 01:17 - 00000000 ____D C:\WINDOWS\de
2015-08-18 13:39 - 2013-04-26 01:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2015-08-18 13:38 - 2014-11-21 04:45 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2015-08-18 13:38 - 2014-11-21 04:45 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-08-18 13:38 - 2014-11-21 04:45 - 00000000 ____D C:\WINDOWS\system32\WCN
2015-08-18 13:38 - 2014-03-01 12:31 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2015-08-18 13:38 - 2013-08-22 17:37 - 00005217 _____ C:\WINDOWS\DtcInstall.log
2015-08-18 13:38 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-08-18 13:38 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-08-18 13:38 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-08-18 13:38 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2015-08-18 13:38 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-08-18 13:38 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\spool
2015-08-18 13:38 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-08-18 13:38 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\IME
2015-08-18 13:38 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\en-GB
2015-08-18 13:38 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2015-08-18 13:38 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-08-18 13:38 - 2012-07-26 07:37 - 00000000 ____D C:\Users\Default.migrated
2015-08-18 13:37 - 2014-03-01 12:46 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUSDVD
2015-08-18 13:37 - 2014-03-01 12:40 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program
2015-08-18 13:37 - 2013-08-22 17:43 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-08-18 13:37 - 2013-08-22 17:36 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-08-18 13:37 - 2013-08-22 17:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2015-08-18 13:37 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-08-18 13:37 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\IME
2015-08-18 13:37 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\Help
2015-08-18 13:37 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\System
2015-08-18 13:37 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-08-18 13:37 - 2012-08-02 15:28 - 00000000 ____D C:\ProgramData\PRICache
2015-08-18 13:36 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\Recovery
2015-08-18 13:28 - 2013-08-22 16:46 - 00000084 _____ C:\WINDOWS\setuperr.log
2015-08-18 12:52 - 2014-03-01 12:35 - 02085532 _____ C:\WINDOWS\WindowsUpdate (1).log
2015-08-18 08:56 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2015-08-16 17:58 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-08-16 13:21 - 2012-07-26 07:26 - 00000160 _____ C:\WINDOWS\win.ini
2015-08-16 12:45 - 2013-04-26 01:18 - 00000000 ____D C:\Program Files (x86)\McAfee
2015-08-16 12:32 - 2013-04-26 01:15 - 00000000 ____D C:\ProgramData\Adobe
2015-08-15 17:00 - 2013-04-26 01:18 - 00000000 ____D C:\ProgramData\McAfee
2015-08-15 16:59 - 2013-04-26 01:18 - 00000000 ____D C:\Program Files\Common Files\mcafee
2015-08-15 16:59 - 2012-07-26 10:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-08-15 13:15 - 2013-04-26 01:16 - 00000000 ____D C:\Program Files (x86)\ASUS
2015-08-12 21:14 - 2014-03-01 12:44 - 00000000 ____D C:\ProgramData\Atheros
2015-08-12 21:12 - 2012-08-02 15:33 - 00000000 ____D C:\WINDOWS\Log

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Susanne\AppData\Roaming\5v5z2bJDn9
2015-08-12 21:13 - 2015-08-20 07:01 - 0000073 _____ () C:\Users\Susanne\AppData\Roaming\sp_data.sys
2013-04-26 01:15 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2013-04-26 01:15 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2013-04-26 01:15 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\SetStretch.VBS


Einige Dateien in TEMP:
====================
C:\Users\Susanne\AppData\Local\Temp\2390.exe
C:\Users\Susanne\AppData\Local\Temp\653.exe
C:\Users\Susanne\AppData\Local\Temp\sqlite3.dll
C:\Users\Susanne\AppData\Local\Temp\SYk6A98.exe
C:\Users\Susanne\AppData\Local\Temp\SYk9801.exe
C:\Users\Susanne\AppData\Local\Temp\Uninstall.exe
C:\Users\Susanne\AppData\Local\Temp\UninstallModule.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-08-18 13:25

==================== Ende von Ergebnis ============================
         

Malware ist da keine. Bissl Adware-Reste.


Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Hallo Schrauber, viel gefunden hat er nicht!!!

Was ist denn eigentlich das für eine Datei im FRST Log
C:\ProgramData\SetStretch.VBS?

Hier der Scan vom Adware Cleaner, vielen dank!!!

# AdwCleaner v5.000 - Logfile created 21/08/2015 at 09:07:13
# Updated 14/08/2015 by Xplode
# Database : 2015-08-20.1 [Server]
# Operating system : Windows 8.1  (x64)
# Username : Susanne - SUSANNE
# Running from : C:\Users\Susanne\Desktop\Programme\AdwCleaner_5.000.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\ProgramData\Browser

***** [ Files ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****


*************************

:: Proxy settings cleared
:: Winsock settings cleared

*************************

C:\AdwCleaner[C4].txt - [679 octets] - [21/08/2015 09:07:13]
C:\AdwCleaner[S5].txt - [712 octets] - [21/08/2015 09:06:12]

########## EOF - C:\AdwCleaner[C4].txt - [803 octets] ##########
         

Ich sag ja auch, nur en bissl Adware

Die Datei und die andern 2 können raus:

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

2013-04-26 01:15 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2013-04-26 01:15 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2013-04-26 01:15 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

Emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Hallo Schrauber, hier der Fixlog.txt!! Vielen dank!!!

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:21-08-2015 03
durchgeführt von XXXXX (2015-08-22 15:08:39) Run:1
Gestartet von C:\Users\XXXXX\Desktop\Programme
Geladene Profile: UpdatusUser & XXXXX (Verfügbare Profile: UpdatusUser & XXXXX)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
2013-04-26 01:15 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2013-04-26 01:15 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2013-04-26 01:15 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

Emptytemp:
         
*****************

C:\ProgramData\SetStretch.cmd => erfolgreich verschoben
C:\ProgramData\SetStretch.exe => erfolgreich verschoben
C:\ProgramData\SetStretch.VBS => erfolgreich verschoben
EmptyTemp: => 17.1 MB temporäre Dateien entfernt.


Das System musste neu gestartet werden.. 

==== Ende von Fixlog 15:08:41 ====
         

Wie läuft der Rechner?

Hallo Schrauber,
ich denke mal gut mit Deiner Hilfe.

Auffälligkeiten sind nicht zu sehen oder habe ich nicht bemerkt.

Ich interessiere mich für EmsisoftinternetSecurity für 2 Rechner. PN an Dich?

Habe gerade eine Spende an Euch überwiesen für die Hilfe und Mühe.

Ich würde so etwas auch gerne lernen und anderen helfen!! Allerdings ohne Stress!!!

Herzliche Grüße und vielen dank nochmals. JSM

Hi,

dann kannste EIS auf beiden einfach mal installieren und testen, sind ja 30 Tage gratis, dann eine PM an mich wenn es gefällt


Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
Combofix deinstallieren .

• Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  
• Drücke bitte die + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
• Klicke auf OK.
  Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
• Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte DelFix herunter.

• Schließe alle offenen Programme.
• Starte die delfix.exe mit einem Doppelklick.
• Setze vor jede Funktion ein Häkchen.
• Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen.

Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:

Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie .
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwarecleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Ich danke Dir nochmals für Deine Hilfe!!!! Melde mich auf jeden Fall wegen EIS. Bin jetzt erstmal in Urlaub aber werde es in der Zwischenzeit schon mal testen!!!

Super auch die Hinweise wegen dem Aufräumen auf dem PC und die Infos zum Cleanup und zur Absicherung!!!

Vielen dank für alles!!!

Gern Geschehen