Windows 10: Chrome öffnet websiten.

SmurfThis. · 26.11.2015, 22:20

Guten Tag,

Ich habe folgendes Problem:
Nach einer unbestimmten Zeit öffnet Chrome bis zu drei Websites. Es ist nicht leider nicht reproduzierbar und passiert einfach nach Zeit. Worauf hin ich mit CCleaner, WindowsDefender, SpywareBlaster, MalwareBytes AntiMailware versucht habe mein System zu säubern, schien erfolgreich (bis zu 101. Funde bereinigt) bis es heute nachmittag wieder passiert ist. Jetzt allerdings nur noch eine Website, dafür 3x die gleiche. Ich weiß nicht mehr weiter und wäre für Hilfe sehr dankbar.

FRST.txt

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:26-11-2015
durchgeführt von Stefan (Administrator) auf SWALTER (26-11-2015 21:48:03)
Gestartet von C:\Users\Stefan\Desktop
Geladene Profile: Stefan (Verfügbare Profile: Stefan)
Platform: Windows 10 Pro (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\47.0.2526.18\remoting_host.exe
(TeamViewer GmbH) D:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\47.0.2526.18\remoting_host.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Valve Corporation) D:\Program Files (x86)\Steam\Steam.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Piriform Ltd) D:\Program Files\CCleaner\CCleaner64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\NetworkUXBroker.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) D:\Program Files\Windows Defender\MSASCui.exe
(Microsoft Corporation) D:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) D:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1120.13270.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) D:\Program Files\Windows Defender\MpCmdRun.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [3011152 2015-11-10] (Valve Corporation)
HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\Run: [CCleaner Monitoring] => D:\Program Files\CCleaner\CCleaner64.exe [8551848 2015-10-19] (Piriform Ltd)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  Keine Datei
GroupPolicy: Beschränkung - Chrome <======= ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2
Tcpip\..\Interfaces\{51014fcf-d4c4-462c-80d2-ac5c0866d9f2}: [DhcpNameServer] 192.168.0.1 192.168.0.2

Internet Explorer:
==================
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> D:\Program Files (x86)\Java\bin\ssv.dll [2015-10-24] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> D:\Program Files (x86)\Java\bin\jp2ssv.dll [2015-10-24] (Oracle Corporation)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe

FireFox:
========
FF Plugin: @videolan.org/vlc,version=2.2.1 -> D:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> D:\Program Files (x86)\Java\bin\dtplugin\npDeployJava1.dll [2015-10-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> D:\Program Files (x86)\Java\bin\plugin2\npjp2.dll [2015-10-24] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&ts=1426191596&from=cor&uid=WDCXWD5000BEKT-75KA9T0_WD-WXR1AC0Y3001Y3001
CHR StartupUrls: Default -> "hxxp://www.mystartsearch.com/?type=hp&ts=1426191596&from=cor&uid=WDCXWD5000BEKT-75KA9T0_WD-WXR1AC0Y3001Y3001"
CHR Session Restore: Default -> ist aktiviert.
CHR Profile: C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-25]
CHR Extension: (Google Docs) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-25]
CHR Extension: (Google Drive) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-25]
CHR Extension: (YouTube) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-25]
CHR Extension: (Adblock Plus) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-11-25]
CHR Extension: (Google-Suche) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-25]
CHR Extension: (Google Tabellen) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-25]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2015-11-25]
CHR Extension: (Google Docs Offline) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-25]
CHR Extension: (ScriptSafe) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf [2015-11-25]
CHR Extension: (Google Mail) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-25]
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\47.0.2526.18\remoting_host.exe [69448 2015-10-14] (Google Inc.)
R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1394360 2015-10-24] (Intel Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [351120 2015-09-10] (Intel Corporation)
S2 MBAMService; D:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation)
R2 TeamViewer; D:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
S3 VSStandardCollectorService140; D:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [52968 2015-07-07] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R3 WdNisSvc; D:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
R2 WinDefend; D:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
S3 WMPNetworkSvc; D:\Program Files\Windows Media Player\wmpnetwk.exe [1473536 2015-07-10] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 athr; C:\Windows\System32\drivers\athw10x.sys [4325544 2015-09-10] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [97680 2015-08-23] (ASUS Corporation)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [53752 2015-10-24] (Intel Corporation)
R3 esif_lf; C:\Windows\system32\DRIVERS\esif_lf.sys [261624 2015-10-24] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [88256 2015-09-10] (Intel Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [193336 2015-09-10] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2015-09-10] (Realtek                                            )
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [410880 2015-09-11] (Realsil Semiconductor Corporation)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [214016 2015-07-10] (Microsoft Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
R3 WinDriver6; C:\Windows\system32\drivers\windrvr6.sys [268800 2014-01-28] (Jungo Connectivity)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-11-26 21:48 - 2015-11-26 21:48 - 00014735 _____ C:\Users\Stefan\Desktop\FRST.txt
2015-11-26 21:47 - 2015-11-26 21:48 - 00000000 ____D C:\FRST
2015-11-26 21:46 - 2015-11-26 21:46 - 02348544 _____ (Farbar) C:\Users\Stefan\Desktop\FRST64.exe
2015-11-26 21:44 - 2015-11-26 21:44 - 00050477 _____ C:\Users\Stefan\Desktop\Defogger.exe
2015-11-26 21:44 - 2015-11-26 21:44 - 00000000 _____ C:\Users\Stefan\defogger_reenable
2015-11-26 21:25 - 2015-11-26 21:25 - 00016148 _____ C:\Windows\system32\SWALTER_Stefan_HistoryPrediction.bin
2015-11-25 17:41 - 2015-11-25 17:41 - 00001243 _____ C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware .lnk
2015-11-25 17:01 - 2015-11-25 23:06 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-11-25 17:00 - 2015-11-25 17:00 - 00000000 ____D D:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-11-25 17:00 - 2015-11-25 17:00 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-11-25 17:00 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-11-25 17:00 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-11-25 17:00 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-11-25 16:42 - 2015-11-25 23:06 - 00000000 ____D C:\ProgramData\TEMP
2015-11-25 16:42 - 2015-11-25 16:45 - 00000000 ____D D:\Program Files (x86)\SpywareBlaster
2015-11-25 16:42 - 2015-11-25 16:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
2015-11-25 16:42 - 2012-05-02 12:17 - 01070152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2015-11-25 16:42 - 2009-03-24 13:52 - 00129872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSSTDFMT.DLL
2015-11-25 13:00 - 2015-11-25 13:00 - 00009702 _____ C:\Users\Stefan\Documents\cc_20151125_130009.reg
2015-11-25 12:22 - 2015-11-25 12:22 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\VisualAssistAtmel
2015-11-25 12:22 - 2015-11-25 12:22 - 00000000 ____D C:\Users\Stefan\AppData\Local\VisualAssistAtmel
2015-11-25 12:22 - 2015-11-25 12:22 - 00000000 ____D C:\Users\Stefan\AppData\Local\IsolatedStorage
2015-11-25 12:13 - 2015-11-25 12:13 - 00125848 _____ C:\Users\Stefan\Documents\cc_20151125_121327.reg
2015-11-25 12:05 - 2015-11-25 12:05 - 00002856 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-11-25 12:05 - 2015-11-25 12:05 - 00000000 ____D D:\Program Files\CCleaner
2015-11-25 12:05 - 2015-11-25 12:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-11-25 08:47 - 2015-11-25 08:47 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2015-11-25 08:41 - 2015-11-25 08:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-11-25 08:13 - 2015-11-25 08:13 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\NuGet
2015-11-25 08:13 - 2015-11-25 08:13 - 00000000 ____D C:\Users\Stefan\AppData\LocalLow\Temp
2015-11-24 20:50 - 2015-11-25 08:11 - 00000000 ____D C:\Users\Stefan\Documents\Visual Studio 2015
2015-11-24 20:47 - 2015-11-24 20:48 - 00000000 ____D D:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-11-24 20:47 - 2015-11-24 20:47 - 00000000 ____D D:\Program Files\Microsoft SQL Server Compact Edition
2015-11-24 20:47 - 2015-11-24 20:47 - 00000000 ____D C:\ProgramData\PreEmptive Solutions
2015-11-24 20:41 - 2015-11-24 20:41 - 00000000 ____D D:\Program Files\Microsoft DNX
2015-11-24 20:41 - 2015-11-24 20:41 - 00000000 ____D C:\ProgramData\Microsoft DNX
2015-11-24 20:38 - 2015-11-24 20:39 - 00000000 ____D D:\Program Files\IIS Express
2015-11-24 20:31 - 2015-11-24 20:31 - 00000000 ____D C:\ProgramData\NuGet
2015-11-24 20:30 - 2015-11-24 20:30 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2015.lnk
2015-11-24 20:30 - 2015-11-24 20:30 - 00000000 ____D D:\Program Files\IIS
2015-11-24 20:30 - 2015-11-24 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Expression
2015-11-24 20:27 - 2015-11-24 20:27 - 00000000 ____D D:\Program Files\Microsoft Visual Studio 12.0
2015-11-24 20:26 - 2015-11-24 20:26 - 00000000 ____D C:\Windows\symbols
2015-11-24 20:26 - 2015-11-24 20:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015
2015-11-24 20:25 - 2015-07-09 21:53 - 00097280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DxToolsReportGenerator.dll
2015-11-24 20:25 - 2015-07-09 21:36 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\DxToolsReportGenerator.dll
2015-11-24 20:25 - 2015-07-09 20:49 - 01133056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11_3SDKLayers.dll
2015-11-24 20:25 - 2015-07-09 20:49 - 00644608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d12SDKLayers.dll
2015-11-24 20:25 - 2015-07-09 20:48 - 06365696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXCaptureReplay.dll
2015-11-24 20:25 - 2015-07-09 20:40 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\d3d11_3SDKLayers.dll
2015-11-24 20:25 - 2015-07-09 20:40 - 00875008 _____ (Microsoft Corporation) C:\Windows\system32\d3d12SDKLayers.dll
2015-11-24 20:25 - 2015-07-09 20:39 - 00236544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf_gputiming.dll
2015-11-24 20:25 - 2015-07-09 20:38 - 08244736 _____ (Microsoft Corporation) C:\Windows\system32\DXCaptureReplay.dll
2015-11-24 20:25 - 2015-07-09 20:31 - 03597312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsRemoteEngine.exe
2015-11-24 20:25 - 2015-07-09 20:30 - 03680768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsDesktopEngine.exe
2015-11-24 20:25 - 2015-07-09 20:28 - 02439168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d12warp.dll
2015-11-24 20:25 - 2015-07-09 20:28 - 00916480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsExperiment.dll
2015-11-24 20:25 - 2015-07-09 20:28 - 00761856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXToolsOfflineAnalysis.dll
2015-11-24 20:25 - 2015-07-09 20:28 - 00647680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXCap.exe
2015-11-24 20:25 - 2015-07-09 20:28 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\perf_gputiming.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1debug3.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXToolsMonitor.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00119296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsCapture.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00108544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXToolsReporting.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VSD3DWARPDebug.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VSD3DWARP12Debug.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsProxyStub.dll
2015-11-24 20:25 - 2015-07-09 20:26 - 00346624 _____ (Windows (R) Win 7 DDK provider) C:\Windows\SysWOW64\DXCpl.exe
2015-11-24 20:25 - 2015-07-09 20:24 - 00233984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXGIDebug.dll
2015-11-24 20:25 - 2015-07-09 20:21 - 04656128 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsRemoteEngine.exe
2015-11-24 20:25 - 2015-07-09 20:20 - 04751872 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsDesktopEngine.exe
2015-11-24 20:25 - 2015-07-09 20:18 - 03257856 _____ (Microsoft Corporation) C:\Windows\system32\d3d12warp.dll
2015-11-24 20:25 - 2015-07-09 20:18 - 01069568 _____ (Microsoft Corporation) C:\Windows\system32\DXToolsOfflineAnalysis.dll
2015-11-24 20:25 - 2015-07-09 20:18 - 00877568 _____ (Microsoft Corporation) C:\Windows\system32\DXCap.exe
2015-11-24 20:25 - 2015-07-09 20:17 - 01203200 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsExperiment.dll
2015-11-24 20:25 - 2015-07-09 20:17 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\d2d1debug3.dll
2015-11-24 20:25 - 2015-07-09 20:17 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\DXToolsMonitor.dll
2015-11-24 20:25 - 2015-07-09 20:17 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\DXToolsReporting.dll
2015-11-24 20:25 - 2015-07-09 20:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsCapture.dll
2015-11-24 20:25 - 2015-07-09 20:17 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsProxyStub.dll
2015-11-24 20:25 - 2015-07-09 20:16 - 00366592 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\DXCpl.exe
2015-11-24 20:25 - 2015-07-09 20:16 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\VSD3DWARP12Debug.dll
2015-11-24 20:25 - 2015-07-09 20:16 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\VSD3DWARPDebug.dll
2015-11-24 20:25 - 2015-07-09 20:13 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\DXGIDebug.dll
2015-11-24 20:24 - 2015-11-24 20:48 - 00000000 ____D D:\Program Files\Microsoft SQL Server
2015-11-24 20:24 - 2015-11-24 20:24 - 00001321 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015.lnk
2015-11-24 20:22 - 2015-11-24 20:47 - 00000000 ____D D:\Program Files (x86)\Microsoft Visual Studio 14.0
2015-11-24 20:22 - 2015-11-24 20:25 - 00000000 ____D C:\Windows\system32\1033
2015-11-24 20:22 - 2015-11-24 20:22 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_SensorsSimulatorDriver_01_11_00.Wdf
2015-11-24 20:09 - 2015-11-24 20:54 - 00000000 ____D C:\ProgramData\VsTelemetry
2015-11-16 19:53 - 2015-11-22 19:53 - 00003344 _____ C:\Windows\System32\Tasks\Urla3
2015-11-16 19:53 - 2015-11-22 19:53 - 00003344 _____ C:\Windows\System32\Tasks\Urla2
2015-11-16 19:53 - 2015-11-22 19:53 - 00003344 _____ C:\Windows\System32\Tasks\Urla1
2015-11-14 15:53 - 2015-11-14 15:58 - 00000000 ____D C:\Users\Stefan\Documents\Dolphin Emulator
2015-11-14 15:52 - 2015-11-18 22:52 - 00000000 ____D D:\Program Files (x86)\Doplin
2015-11-11 22:23 - 2015-11-11 22:23 - 00000000 ____D C:\Users\Stefan\AppData\Local\Meltytech
2015-11-01 20:53 - 2015-11-01 20:53 - 00007597 _____ C:\Users\Stefan\AppData\Local\Resmon.ResmonCfg
2015-10-28 19:02 - 2015-10-28 19:14 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Teeworlds
2015-10-28 12:51 - 2015-10-28 12:51 - 00016148 _____ C:\Windows\system32\DESKTOP-GJJAVI2_Stefan_HistoryPrediction.bin
2015-10-28 11:59 - 2015-11-25 08:38 - 00000209 _____ C:\Users\Stefan\Desktop\WinUpdate.txt

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-11-26 21:47 - 2015-07-10 10:05 - 00000000 ____D C:\Windows
2015-11-26 21:44 - 2015-09-10 12:41 - 00000000 ____D C:\Users\Stefan
2015-11-26 19:28 - 2015-09-10 14:13 - 00000000 ____D D:\Program Files (x86)\Steam
2015-11-26 19:27 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\AppReadiness
2015-11-25 23:05 - 2015-09-15 19:11 - 00040972 __RSH C:\ProgramData\ntuser.pol
2015-11-25 23:02 - 2015-07-10 11:55 - 00000000 ____D C:\Windows\CbsTemp
2015-11-25 17:45 - 2015-09-10 12:41 - 01900026 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-25 17:45 - 2015-07-10 17:34 - 00815392 _____ C:\Windows\system32\perfh007.dat
2015-11-25 17:45 - 2015-07-10 17:34 - 00171896 _____ C:\Windows\system32\perfc007.dat
2015-11-25 17:45 - 2015-07-10 12:02 - 00000000 ____D C:\Windows\INF
2015-11-25 17:40 - 2015-09-19 12:08 - 00000000 ____D C:\ProgramData\ASUS Smart Gesture
2015-11-25 17:39 - 2015-09-10 12:44 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-11-25 17:39 - 2015-09-10 12:44 - 00000000 __SHD C:\Users\Stefan\IntelGraphicsProfiles
2015-11-25 17:38 - 2015-07-10 13:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-25 17:34 - 2015-09-10 16:49 - 00000000 ____D D:\Program Files (x86)\Google
2015-11-25 17:31 - 2015-07-10 10:05 - 00131072 ___SH C:\Windows\system32\config\BBI
2015-11-25 17:30 - 2015-07-10 12:04 - 00000000 ___SD C:\Windows\SysWOW64\F12
2015-11-25 17:30 - 2015-07-10 12:04 - 00000000 ___SD C:\Windows\system32\F12
2015-11-25 17:30 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\PurchaseDialog
2015-11-25 17:30 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2015-11-25 17:30 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\DevicesFlow
2015-11-25 17:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\SysWOW64\oobe
2015-11-25 17:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2015-11-25 17:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2015-11-25 17:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\oobe
2015-11-25 17:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\appraiser
2015-11-25 17:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\Provisioning
2015-11-25 17:30 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\L2Schemas
2015-11-25 17:30 - 2015-07-10 10:05 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-11-25 17:30 - 2015-07-10 10:05 - 00000000 ____D C:\Windows\system32\Dism
2015-11-25 17:29 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\schemas
2015-11-25 17:26 - 2015-09-29 19:15 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\dxdpeDwXMnf
2015-11-25 17:26 - 2015-09-25 18:15 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\1i1ZKsk
2015-11-25 17:26 - 2015-09-24 23:05 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\UFatv9yZFkK
2015-11-25 17:26 - 2015-09-24 18:38 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Fbjiy
2015-11-25 17:26 - 2015-09-16 18:38 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\PBkG
2015-11-25 17:26 - 2015-09-16 12:38 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\h0j4sZIrb
2015-11-25 17:26 - 2015-09-15 19:35 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\sezR8F7
2015-11-25 17:26 - 2015-09-15 19:11 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\JLIuMtOrwh
2015-11-25 13:53 - 2015-10-22 18:53 - 00000204 _____ C:\Windows\system32\gup.xml
2015-11-25 12:56 - 2015-09-10 18:42 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-11-25 12:54 - 2015-10-18 15:34 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\DVDVideoSoft
2015-11-25 12:23 - 2015-09-15 23:05 - 00000000 ____D C:\Users\Stefan\Documents\Atmel Studio
2015-11-25 12:12 - 2015-10-07 18:30 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\TeamViewer
2015-11-25 12:12 - 2015-07-10 05:19 - 00000000 ____D C:\Windows\Panther
2015-11-25 09:19 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\rescache
2015-11-25 08:41 - 2015-09-10 12:45 - 00000000 ____D C:\Users\Stefan\AppData\Local\Google
2015-11-25 07:49 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\NDF
2015-11-24 20:49 - 2015-09-10 13:00 - 00000000 ____D C:\ProgramData\Package Cache
2015-11-24 20:27 - 2015-09-15 22:58 - 00000000 ____D C:\Windows\SysWOW64\1033
2015-11-24 20:22 - 2015-09-10 19:22 - 00000000 ____D D:\Program Files\Common Files\Microsoft Shared
2015-11-24 20:21 - 2015-07-10 12:04 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2015-11-24 19:46 - 2015-09-27 17:32 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Notepad++
2015-11-24 06:32 - 2015-09-10 19:17 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Skype
2015-11-23 18:58 - 2015-09-14 19:16 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\vlc
2015-11-22 23:50 - 2015-10-19 18:26 - 00000000 ____D C:\Users\Stefan\AppData\Local\pr0-tairuteburu
2015-11-21 19:41 - 2015-09-10 19:16 - 00000000 ____D C:\ProgramData\Skype
2015-11-13 20:03 - 2015-09-11 17:11 - 00000000 ____D C:\Windows\system32\MRT
2015-11-13 19:59 - 2015-09-11 17:11 - 145617392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-11-13 00:09 - 2015-09-10 12:44 - 00002361 _____ C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-11-13 00:09 - 2015-09-10 12:44 - 00000000 ___RD C:\Users\Stefan\OneDrive
2015-11-03 19:20 - 2015-07-10 12:06 - 00810488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-11-03 19:20 - 2015-07-10 12:06 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-28 11:53 - 2015-09-15 23:03 - 00000000 ____D C:\Users\Stefan\Desktop\Games
2015-10-28 10:34 - 2015-09-10 19:39 - 00000000 ____D D:\Program Files\FTL - Advanced Edition

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-09-20 18:38 - 2015-09-20 18:38 - 0000078 _____ () C:\Users\Stefan\AppData\Roaming\sn.txt
2015-09-19 18:38 - 2015-09-19 18:38 - 0000368 _____ () C:\Users\Stefan\AppData\Local\6yZ0N0.vbs
2015-09-14 18:09 - 2015-09-14 18:09 - 0000402 _____ () C:\Users\Stefan\AppData\Local\8f1rI.vbs
2015-09-15 19:11 - 2015-09-15 19:11 - 3531374 _____ () C:\Users\Stefan\AppData\Local\curl.zip
2015-09-15 19:35 - 2015-09-15 19:35 - 0000368 _____ () C:\Users\Stefan\AppData\Local\LeW6A17.vbs
2015-09-19 00:38 - 2015-09-19 00:38 - 0000368 _____ () C:\Users\Stefan\AppData\Local\LjwdAlF.vbs
2015-09-20 18:38 - 2015-09-20 18:38 - 0000368 _____ () C:\Users\Stefan\AppData\Local\pMAC7q.vbs
2015-10-21 21:30 - 2015-10-21 21:30 - 0009569 _____ () C:\Users\Stefan\AppData\Local\recently-used.xbel
2015-11-01 20:53 - 2015-11-01 20:53 - 0007597 _____ () C:\Users\Stefan\AppData\Local\Resmon.ResmonCfg
2015-09-17 18:38 - 2015-09-17 18:38 - 0000368 _____ () C:\Users\Stefan\AppData\Local\rRoKnE.vbs
2015-09-24 20:05 - 2015-09-24 20:05 - 0000338 _____ () C:\Users\Stefan\AppData\Local\sSHGsk3.vbs
2015-09-27 13:20 - 2015-09-27 13:20 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\Stefan\AppData\Local\Temp\npp.6.8.6.Installer.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-11-24 21:54

==================== Ende von FRST.txt ============================

Addition.txt

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:26-11-2015
durchgeführt von Stefan (2015-11-26 21:48:46)
Gestartet von C:\Users\Stefan\Desktop
Windows 10 Pro (X64) (2015-09-10 11:37:05)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2479265680-2342477357-1201510650-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2479265680-2342477357-1201510650-503 - Limited - Disabled)
Gast (S-1-5-21-2479265680-2342477357-1201510650-501 - Limited - Disabled)
Stefan (S-1-5-21-2479265680-2342477357-1201510650-1001 - Administrator - Enabled) => C:\Users\Stefan

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Application Insights Tools for Visual Studio 2015 (x32 Version: 3.3 - Microsoft Corporation) Hidden
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.0.5 - ASUS)
Atmel ARM GNU Toolchain (HKLM-x32\...\{736745FA-6A66-4654-9397-1321B2B4D196}) (Version: 4.8.1443 - Atmel)
Atmel AVR (32 bit) GNU Toolchain (HKLM-x32\...\{C342B5D0-D95A-4B39-9262-2CC3CE3F39B2}) (Version: 3.4.1067 - Atmel)
Atmel AVR (8 bit) GNU Toolchain (HKLM-x32\...\{6E3D61B8-F3EC-462D-91F9-49D03A97053E}) (Version: 3.4.1061 - Atmel)
Atmel Driver Files (x32 Version: 7.0.928 - Atmel Corporation) Hidden
Atmel Jungo USB Driver (x32 Version: 7.0.120 - Atmel) Hidden
Atmel Kits (HKLM-x32\...\{3C85CFF3-91DE-4520-B836-5F4C2F247FF5}) (Version: 6.2.338 - Atmel)
Atmel LibUSB0 Driver (x32 Version: 7.0.73 - Atmel) Hidden
Atmel Segger USB Drivers (497f) (x32 Version: 7.0.140 - Atmel) Hidden
Atmel Studio 6.2 (HKLM-x32\...\{C179E170-07D6-4D8D-A34D-FDB3FCC79FEC}) (Version: 6.2.1563 - Atmel)
Atmel Studio Backend (HKLM-x32\...\{1B2C7C63-4659-49A1-8BC9-F845FE0F0D35}) (Version: 1.12.4144 - Atmel Corporation)
Atmel Studio Memory Logger (HKLM-x32\...\{053538A7-0B52-4CA9-9728-D506BFAA42BD}) (Version: 6.2.171 - Atmel)
Atmel USB Driver Package (HKLM-x32\...\{88a482c9-18e3-43d5-b426-3d1cdf85b391}) (Version: 7.0.666 - Atmel)
Atmel WinUSB (x32 Version: 6.2.30 - Atmel) Hidden
AtmelSoftwareFramework (HKLM-x32\...\{35BD89A1-47F3-4E42-B393-B8DB123F5215}) (Version: 3.21.0.1310 - Atmel)
AVR macro Assembler (HKLM-x32\...\{251D9F73-6297-4941-9016-EA787F708FDF}) (Version: 2.1.1175 - Atmel)
Azure AD Authentication Connected Service (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
AzureTools.Notifications (x32 Version: 2.7.30611.1601 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Block N Load (HKLM-x32\...\Steam App 299360) (Version:  - Jagex)
CCleaner (HKLM\...\CCleaner) (Version: 5.11 - Piriform)
Chrome Remote Desktop Host (HKLM-x32\...\{CDF9E1C8-4B97-4F8B-A848-7DD0E8BEB89F}) (Version: 47.0.2526.18 - Google Inc.)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
Dotfuscator and Analytics Community Edition 5.18.1 (x32 Version: 5.18.1.2898 - PreEmptive Solutions) Hidden
Entity Framework 6.1.3 Tools  for Visual Studio 2015 (HKLM-x32\...\{1A8A9739-BAD7-491F-B5B9-A79A2B965422}) (Version: 14.0.40302.0 - Microsoft Corporation)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.86 - Google Inc.)
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)
IIS 10.0 Express (HKLM\...\{5984D8DA-C1AF-4284-9C88-D7150425B315}) (Version: 10.0.1734 - Microsoft Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.1.1.7 - Intel(R) Corporation) Hidden
Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\...\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{B941AFB4-8851-33A1-9E72-0C33D463C41C}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (ENU) (HKLM-x32\...\{3D3CEBE6-40EA-4C48-97FD-73828281AB4A}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.23107 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{77F1F8AD-51B8-4490-AEEC-BF480073E0FC}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Transact-SQL ScriptDom  (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 T-SQL Language Service  (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (14.0.50616.0) (HKLM-x32\...\{58246C80-3941-4B69-AE31-264644E2ADB8}) (Version: 14.0.50616.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{877B76B2-F83F-4F5A-B28D-3F398641ADB6}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{68BA34E8-9B9D-4A74-83F0-7D366B532D75}) (Version: 12.0.2402.11 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{718FFB65-F6E4-4D62-861F-ED10ED32C936}) (Version: 12.0.2402.11 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Shell (Isolated) - ENU (HKLM-x32\...\{D64B6984-242F-32BC-B008-752806E5FC44}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Community 2015 (HKLM-x32\...\{50b32652-69d2-4b93-9316-edcd12067b8b}) (Version: 14.0.23107.10 - Microsoft Corporation)
Microsoft Web Deploy 3.6 (HKLM\...\{ED4CC1E5-043E-4157-8452-B5E533FE2BA1}) (Version: 3.1238.1955 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Multi-Device Hybrid Apps using C# - Templates - ENU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.6 - Notepad++ Team)
NVIDIA GeForce Experience 2.5.14.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.14.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 355.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 355.82 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
Prerequisites for SSDT  (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10125.31213 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7572 - Realtek Semiconductor Corp.)
Roslyn Language Services - x86 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.14.5 - NVIDIA Corporation) Hidden
Skype™ 7.14 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.14.106 - Skype Technologies S.A.)
SpywareBlaster 5.2 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.2.0 - BrightFort LLC)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Team Explorer for Microsoft Visual Studio 2015 (x32 Version: 14.0.23102 - Microsoft Corporation) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.17 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)
Test Tools for Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
TypeScript Power Tool (x32 Version: 1.6.3.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2015 (x32 Version: 1.6.3.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2015 1.6.3.0 (HKLM-x32\...\{da31aa25-410a-4c1b-9ec0-114dd8dff786}) (Version: 1.6.23313.0 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WCF Data Services 5.6.4 Runtime (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
Windows-Treiberpaket - ASUS (ATP) Mouse  (06/17/2015 6.0.0.66) (HKLM\...\1EFB54678773735560B565BE7FA6F2BCC557EE21) (Version: 06/17/2015 6.0.0.66 - ASUS)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: 3.3.5.12340 - Blizzard Entertainment)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Stefan\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileCoAuth.exe (Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

ACHTUNG: Systemwiederherstellung ist deaktiviert

==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-07-10 12:04 - 2015-10-21 23:36 - 00519915 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost
0.0.0.0 m.fr.a2dfp.net
0.0.0.0 mfr.a2dfp.net
0.0.0.0 ad.a8.net
0.0.0.0 asy.a8ww.net
0.0.0.0 static.a-ads.com
0.0.0.0 atlas.aamedia.ro
0.0.0.0 abcstats.com
0.0.0.0 ad4.abradio.cz
0.0.0.0 a.abv.bg
0.0.0.0 adserver.abv.bg
0.0.0.0 adv.abv.bg
0.0.0.0 bimg.abv.bg
0.0.0.0 ca.abv.bg
0.0.0.0 track.acclaimnetwork.com
0.0.0.0 accuserveadsystem.com
0.0.0.0 www.accuserveadsystem.com
0.0.0.0 achmedia.com
0.0.0.0 csh.actiondesk.com
0.0.0.0 ads.activepower.net
0.0.0.0 app.activetrail.com
0.0.0.0 stat.active24stats.nl #[Tracking.Cookie]
0.0.0.0 traffic.acwebconnecting.com
0.0.0.0 office.ad1.ru
0.0.0.0 cms.ad2click.nl
0.0.0.0 ad2games.com
0.0.0.0 ads.ad2games.com
0.0.0.0 content.ad20.net
0.0.0.0 core.ad20.net
0.0.0.0 banner.ad.nu

Da befinden sich 12387 zusätzliche Einträge.


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {1269968E-79AA-440E-AC2A-8C1245414705} - System32\Tasks\Urla1 => explorer
Task: {1FF830E5-D1A0-48D9-BE49-64958F107310} - System32\Tasks\Urla2 => explorer
Task: {27D9324A-7677-430E-B008-ED8449D0D746} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2015-08-23] (AsusTek)
Task: {2C1BC126-7719-45D6-BA5F-9693A75EE102} - \realtor -> Keine Datei <==== ACHTUNG
Task: {9D9ACDB7-773D-4CC3-B65F-BDACB97719BB} - System32\Tasks\Urla3 => explorer
Task: {AAD50685-1B39-4FF5-8387-F0F22B496B4F} - \DriverMgr -> Keine Datei <==== ACHTUNG
Task: {B69149FA-8182-4072-89A3-20268E48C0FD} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-11-13] (Microsoft Corporation)
Task: {C833D637-3D1B-450E-813A-07883D86AA09} - System32\Tasks\CCleanerSkipUAC => D:\Program Files\CCleaner\CCleaner.exe [2015-10-19] (Piriform Ltd)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-07-10 12:00 - 2015-07-10 12:00 - 00032768 _____ () C:\Windows\SYSTEM32\licensemanagerapi.dll
2015-09-10 12:49 - 2015-08-25 16:57 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-07-10 11:59 - 2015-07-10 11:59 - 00403968 _____ () C:\Windows\System32\diagtrack_wininternal.dll
2015-07-10 12:00 - 2015-07-10 12:00 - 02498296 _____ () C:\Windows\system32\CoreUIComponents.dll
2015-07-10 12:00 - 2015-07-10 12:00 - 02498296 _____ () C:\Windows\System32\CoreUIComponents.dll
2015-04-15 21:13 - 2015-04-15 21:13 - 00222720 _____ () D:\Program Files (x86)\Notepad++\NppShell_06.dll
2015-09-10 12:43 - 2015-09-10 12:43 - 00396688 _____ () C:\Windows\system32\igfxTray.exe
2015-07-10 12:00 - 2015-07-10 17:43 - 06579712 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-07-10 12:00 - 2015-07-10 17:43 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-07-10 12:00 - 2015-07-10 17:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-07-10 12:00 - 2015-07-10 17:43 - 00210432 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll
2015-07-10 11:59 - 2015-07-10 11:59 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-07-10 11:59 - 2015-07-10 11:59 - 00143360 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll
2015-07-10 11:59 - 2015-07-10 11:59 - 00642048 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\MtcUvc.dll
2015-10-19 21:00 - 2015-10-19 21:00 - 00057344 _____ () D:\Program Files\CCleaner\lang\lang-1031.dll
2015-11-21 14:31 - 2015-11-21 14:31 - 00012800 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1120.13270.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2015-11-21 14:31 - 2015-11-21 14:31 - 11526656 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1120.13270.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2015-11-19 18:10 - 2015-11-19 18:11 - 00258560 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1120.13270.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2015-09-10 13:57 - 2015-08-27 01:37 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-10-08 18:04 - 2015-10-05 17:18 - 00778752 _____ () D:\Program Files (x86)\Steam\SDL2.dll
2015-09-10 16:51 - 2015-07-03 17:12 - 04962816 _____ () D:\Program Files (x86)\Steam\v8.dll
2015-11-11 12:03 - 2015-11-10 03:44 - 02541648 _____ () D:\Program Files (x86)\Steam\video.dll
2015-10-08 18:04 - 2015-09-24 01:33 - 02549248 _____ () D:\Program Files (x86)\Steam\libavcodec-56.dll
2015-10-08 18:04 - 2015-09-24 01:33 - 00491008 _____ () D:\Program Files (x86)\Steam\libavformat-56.dll
2015-10-08 18:04 - 2015-09-24 01:33 - 00332800 _____ () D:\Program Files (x86)\Steam\libavresample-2.dll
2015-10-08 18:04 - 2015-09-24 01:33 - 00442880 _____ () D:\Program Files (x86)\Steam\libavutil-54.dll
2015-10-08 18:04 - 2015-09-24 01:33 - 00485888 _____ () D:\Program Files (x86)\Steam\libswscale-3.dll
2015-09-10 16:51 - 2015-07-03 17:12 - 01556992 _____ () D:\Program Files (x86)\Steam\icui18n.dll
2015-09-10 16:51 - 2015-07-03 17:12 - 01187840 _____ () D:\Program Files (x86)\Steam\icuuc.dll
2015-11-11 12:03 - 2015-11-10 03:44 - 00806992 _____ () D:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-11-10 20:13 - 2015-11-03 23:00 - 00201728 _____ () D:\Program Files (x86)\Steam\bin\openvr_api.dll
2015-10-09 22:18 - 2015-10-08 23:20 - 45010208 _____ () D:\Program Files (x86)\Steam\bin\libcef.dll
2015-10-08 18:04 - 2015-09-25 00:56 - 00119208 _____ () D:\Program Files (x86)\Steam\winh264.dll
2015-11-25 09:21 - 2015-11-07 05:36 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\libglesv2.dll
2015-11-25 09:21 - 2015-11-07 05:36 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\1001movie.com -> 1001movie.com

Da befinden sich 6091 mehr Seiten.


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.0.1 - 192.168.0.2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\StartupApproved\Run: => "OneDrive"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{7E1D3581-05E4-4668-A3BB-798120DE634B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{96E5653D-8A80-48B7-8AEF-2C9BECD24C66}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{1C8FE427-3EA3-452C-8F07-00CBB8743EF7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{BE5C3E2C-CA73-4361-8906-0CE93788FA41}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{2953E054-B0AB-45FA-A2BF-4935F2B49C86}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{2E4255E8-378C-4465-B507-0730EFD3AF10}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{AE9F0C74-84F5-41BE-88A8-39B962043DD8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7A12D0DC-CCC8-4BD2-9D5F-40DEAC1227AA}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{3019AC10-4F37-43E8-B6EF-348AB566C637}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{5ED1863C-82A6-4A6E-BF9B-FDC0C45EE5C6}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D0328CC7-C656-4B1B-A96E-F01091C89607}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{E7E93C13-B798-4900-9BB4-84FADA049888}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B475F6FF-D57E-4D45-8C48-579F68991FF2}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A507438E-B210-4DAD-BED5-358EAE448C54}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{59202860-B7EA-4FB3-AAD5-D92FF83739D7}D:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) D:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{4B5120AF-CE31-4C62-A812-4FF56D16C482}D:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) D:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{1F19DF3D-D956-4DDF-9A45-9AACBB172F48}] => (Allow) D:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{1D81759D-2A4B-4F1C-97FA-362BB8E24D4D}] => (Allow) D:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{FA986404-2BC2-45E3-BB37-506315F56E3C}] => (Allow) D:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{B1BB3C97-691F-4668-87AF-4694ACDC2EF9}] => (Allow) D:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [TCP Query User{982ECCB7-6DF7-4886-9033-DDCFBF5D8E6A}D:\program files (x86)\java\bin\javaw.exe] => (Allow) D:\program files (x86)\java\bin\javaw.exe
FirewallRules: [UDP Query User{C7524B3C-FC4B-485C-86C5-24B17E305CA3}D:\program files (x86)\java\bin\javaw.exe] => (Allow) D:\program files (x86)\java\bin\javaw.exe
FirewallRules: [TCP Query User{B306E4CC-F4AE-4794-A434-960244F59B39}D:\spiele\quake 3\quake3 [portable]\quake3.exe] => (Block) D:\spiele\quake 3\quake3 [portable]\quake3.exe
FirewallRules: [UDP Query User{859A8D5C-0855-4C08-8AEF-B94C8960B8BE}D:\spiele\quake 3\quake3 [portable]\quake3.exe] => (Block) D:\spiele\quake 3\quake3 [portable]\quake3.exe
FirewallRules: [{87E03336-A5AA-421A-B12F-79A2F2DA1B4A}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\47.0.2526.18\remoting_host.exe
FirewallRules: [{C170F574-67EB-4E96-A808-D6AD09B3A41D}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\BlockNLoad\Win64\BlockNLoad.exe
FirewallRules: [{AFB52720-5A5C-43E5-A4F3-62830571762D}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\BlockNLoad\Win64\BlockNLoad.exe
FirewallRules: [{BC07C1C6-EE43-4AE4-9CC6-D71C6921E942}] => (Allow) D:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
FirewallRules: [{545C743B-CF37-4291-96CB-060CD82695EE}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{25DD0196-81E0-4EE4-B3B6-8D688765D511}D:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe] => (Allow) D:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe
FirewallRules: [UDP Query User{704FE284-2C7F-42E8-9F14-B056B1D33B77}D:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe] => (Allow) D:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/25/2015 04:24:16 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SWALTER)
Description: Bei der Aktivierung der App „Microsoft.Windows.Photos_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/25/2015 07:10:57 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SWALTER)
Description: Bei der Aktivierung der App „Microsoft.Windows.Photos_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/21/2015 10:03:22 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SWALTER)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/19/2015 11:16:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SWALTER)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/19/2015 00:14:11 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: SWALTER)
Description: Das Paket „Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy+App“ wurde beendet, da das Anhalten zu lange dauerte.

Error: (11/19/2015 00:14:06 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SWALTER)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/18/2015 10:53:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Dolphin.exe, Version: 0.0.0.0, Zeitstempel: 0x5240867d
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.10240.16384, Zeitstempel: 0x559f38c3
Ausnahmecode: 0x80000003
Fehleroffset: 0x00000000000c0262
ID des fehlerhaften Prozesses: 0x3a0
Startzeit der fehlerhaften Anwendung: 0xDolphin.exe0
Pfad der fehlerhaften Anwendung: Dolphin.exe1
Pfad des fehlerhaften Moduls: Dolphin.exe2
Berichtskennung: Dolphin.exe3
Vollständiger Name des fehlerhaften Pakets: Dolphin.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Dolphin.exe5

Error: (11/17/2015 11:42:46 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SWALTER)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/16/2015 06:18:02 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SWALTER)
Description: Bei der Aktivierung der App „Microsoft.Windows.Photos_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/15/2015 03:30:11 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SWALTER)
Description: Bei der Aktivierung der App „Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe!Microsoft.MicrosoftOfficeHub“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


Systemfehler:
=============
Error: (11/25/2015 05:39:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Defender-Dienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (11/25/2015 05:39:44 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Defender-Dienst erreicht.

Error: (11/25/2015 05:38:51 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎25.‎11.‎2015 um 17:31:32 unerwartet heruntergefahren.

Error: (11/25/2015 05:34:49 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070011 fehlgeschlagen: Kumulatives Update für Windows 10 für x64-basierte Systeme (KB3105213)

Error: (11/25/2015 05:32:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Defender-Dienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (11/25/2015 05:32:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Defender-Dienst erreicht.

Error: (11/25/2015 05:31:01 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows Defender-Dienst" wurde mit folgendem Fehler beendet: 
%%2147943515

Error: (11/25/2015 05:28:57 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows Modules Installer" wurde mit folgendem Fehler beendet: 
%%17

Error: (11/25/2015 05:27:03 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Synchronisierungshost_Session1 erreicht.

Error: (11/25/2015 05:26:53 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===================================
  Date: 2015-11-25 23:02:19.243
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-25 01:41:50.719
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-18 22:13:09.702
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-17 03:49:27.572
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-11 13:16:29.992
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-02 00:50:19.790
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-10-28 22:18:36.809
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-10-26 20:41:11.574
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-10-25 14:57:03.265
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-10-24 18:24:09.793
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-5200U CPU @ 2.20GHz
Prozentuale Nutzung des RAM: 42%
Installierter physikalischer RAM: 8091.8 MB
Verfügbarer physikalischer RAM: 4659.91 MB
Summe virtueller Speicher: 9371.8 MB
Verfügbarer virtueller Speicher: 4787.59 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:38.51 GB) (Free:4.64 GB) NTFS
Drive d: () (Fixed) (Total:426.7 GB) (Free:341.09 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 2BFB4DC8)

Partition: GPT.

==================== Ende von Addition.txt ============================

Zudem hab ich noch einen Registrierungseinträge vor und nach dem großteil der Funde.
Diese hänge ich an, genau wie die Fehlermeldung die GMER-Fehlermeldung ausgespuckt hat, nachdem ich versucht habe es zu verwenden.

Vielen Dank für eure Hilfe,

Gruß
Stefan

schrauber · 26.11.2015, 23:43

hi,

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

SmurfThis. · 27.11.2015, 18:59

hallo,
beide tools haben nichts gefunden. Heute morgen hatte ich aber o.g. Problem wieder.

hier die Logs:

Mbar: (Anleitung ist hier btw nicht mehr ganz aktuell

)

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2015.11.27.03
  rootkit: v2015.11.26.01

Windows 10 x64 NTFS
Internet Explorer 11.0.10240.16384
Stefan :: SWALTER [administrator]

27.11.2015 18:17:15
mbar-log-2015-11-27 (18-17-15).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 377901
Time elapsed: 25 minute(s), 6 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

TBSSKiller: (ein bisschen lang)

Code:

ATTFilter

18:49:31.0372 0x21bc  TDSS rootkit removing tool 3.1.0.6 Nov 16 2015 12:17:23
18:49:31.0383 0x21bc  UEFI system
18:49:49.0830 0x21bc  ============================================================
18:49:49.0830 0x21bc  Current date / time: 2015/11/27 18:49:49.0830
18:49:49.0830 0x21bc  SystemInfo:
18:49:49.0831 0x21bc  
18:49:49.0831 0x21bc  OS Version: 10.0.10240 ServicePack: 0.0
18:49:49.0831 0x21bc  Product type: Workstation
18:49:49.0831 0x21bc  ComputerName: SWALTER
18:49:49.0831 0x21bc  UserName: Stefan
18:49:49.0831 0x21bc  Windows directory: C:\Windows
18:49:49.0831 0x21bc  System windows directory: C:\Windows
18:49:49.0831 0x21bc  Running under WOW64
18:49:49.0831 0x21bc  Processor architecture: Intel x64
18:49:49.0831 0x21bc  Number of processors: 4
18:49:49.0831 0x21bc  Page size: 0x1000
18:49:49.0831 0x21bc  Boot type: Normal boot
18:49:49.0831 0x21bc  ============================================================
18:49:50.0154 0x21bc  KLMD registered as C:\Windows\system32\drivers\15880922.sys
18:49:50.0928 0x21bc  System UUID: {77E55940-FC73-F4F7-C8B5-F9C8AFEC4FCD}
18:49:51.0468 0x21bc  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:49:51.0485 0x21bc  ============================================================
18:49:51.0485 0x21bc  \Device\Harddisk0\DR0:
18:49:51.0485 0x21bc  GPT partitions:
18:49:51.0485 0x21bc  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {2DE0092F-B21E-4F47-B3AC-BB68A564F741}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0xE1000
18:49:51.0485 0x21bc  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {72CF01E3-045D-4841-B30D-8C8E81C0F3C3}, Name: EFI system partition, StartLBA 0xE1800, BlocksNum 0x32000
18:49:51.0485 0x21bc  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {C7A599E4-1D48-49EC-82AA-7E8DE8430043}, Name: Microsoft reserved partition, StartLBA 0x113800, BlocksNum 0x8000
18:49:51.0486 0x21bc  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {32AE6E38-A542-4B6E-B2DB-507153F04560}, Name: Basic data partition, StartLBA 0x11B800, BlocksNum 0x4D05000
18:49:51.0486 0x21bc  \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {52E18AFB-56B8-4D9B-B286-2E2B5B3AF2D4}, Name: Basic data partition, StartLBA 0x4E20800, BlocksNum 0x35565800
18:49:51.0486 0x21bc  MBR partitions:
18:49:51.0486 0x21bc  ============================================================
18:49:51.0500 0x21bc  C: <-> \Device\Harddisk0\DR0\Partition4
18:49:51.0524 0x21bc  D: <-> \Device\Harddisk0\DR0\Partition5
18:49:51.0524 0x21bc  ============================================================
18:49:51.0524 0x21bc  Initialize success
18:49:51.0524 0x21bc  ============================================================
18:50:14.0939 0x13a0  ============================================================
18:50:14.0939 0x13a0  Scan started
18:50:14.0939 0x13a0  Mode: Manual; SigCheck; TDLFS; 
18:50:14.0939 0x13a0  ============================================================
18:50:14.0939 0x13a0  KSN ping started
18:50:17.0348 0x13a0  KSN ping finished: true
18:50:20.0165 0x13a0  ================ Scan system memory ========================
18:50:20.0165 0x13a0  System memory - ok
18:50:20.0166 0x13a0  ================ Scan services =============================
18:50:20.0317 0x13a0  [ 22CE801AD25C51E2553F41A076BB0CB2, 0520216417F1619FB642734EC937C59D5E79A24306C1E9B793C82FAE077851E6 ] 1394ohci        C:\Windows\System32\drivers\1394ohci.sys
18:50:20.0370 0x13a0  1394ohci - ok
18:50:20.0413 0x13a0  [ 2C49A2441EBB24C6ACFB524C1459115F, 0ABACB6F21C41C0297994E61F1BFABB3905AF6B569D0446FE8E174EB9225B8EF ] 3ware           C:\Windows\system32\drivers\3ware.sys
18:50:20.0424 0x13a0  3ware - ok
18:50:20.0452 0x13a0  [ 862C26ABD7140AF3963B3B9905EE6440, 1F63E934515F31B00F535782013428AF12FC158DFB85AE0E5681F0F41436CF29 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
18:50:20.0493 0x13a0  ACPI - ok
18:50:20.0512 0x13a0  [ 1E3C4EDBB7F3F668B7205E351010BB79, A3CA12F72836C4F77B671264828B370B9EBA9CD71110E2C0514994760B6B12FF ] acpiex          C:\Windows\system32\Drivers\acpiex.sys
18:50:20.0524 0x13a0  acpiex - ok
18:50:20.0540 0x13a0  [ 13B1C26AEDCB40082CDD97506F968129, 883442206B4C60AA493E84CC3037B6C1568441E1F43D2B1FCBFD8D87D135D511 ] acpipagr        C:\Windows\System32\drivers\acpipagr.sys
18:50:20.0551 0x13a0  acpipagr - ok
18:50:20.0563 0x13a0  [ B3D64FF927D611721DA73A61BF3A18B3, 96B51AFDC3078B5088AAF66F0CF3E07D2FCBBC84A19D309A25DF0A5C6CECB958 ] AcpiPmi         C:\Windows\System32\drivers\acpipmi.sys
18:50:20.0595 0x13a0  AcpiPmi - ok
18:50:20.0612 0x13a0  [ 19F793B2203D94AC1F8AEDB08B494E2E, DC98CCF9935E1F1C32FA88575A9A678B74916EFF48E39A64CF1FF92232F64A52 ] acpitime        C:\Windows\System32\drivers\acpitime.sys
18:50:20.0634 0x13a0  acpitime - ok
18:50:20.0691 0x13a0  [ 2A24E10C1A1DE0E0035E353EED494A1C, CBBFA86578BE74CAADDCA923D65E3BFFC57BC17B887936ADE5C6952530546A22 ] ADP80XX         C:\Windows\system32\drivers\ADP80XX.SYS
18:50:20.0737 0x13a0  ADP80XX - ok
18:50:20.0766 0x13a0  [ 6C12C7E01A4F64E0AA9C88AF66955CC9, 81A413702909341F8694823EC83FBA0089523D7EC927B80E55E0779BB83AD263 ] AFD             C:\Windows\system32\drivers\afd.sys
18:50:20.0790 0x13a0  AFD - ok
18:50:20.0802 0x13a0  [ EF09D07626820F7F89519514C17FE768, C3EC1DC163CD5946270ED876CD414889BBF2C586A8AF5DC7825FA5D77001E827 ] agp440          C:\Windows\system32\drivers\agp440.sys
18:50:20.0812 0x13a0  agp440 - ok
18:50:20.0830 0x13a0  [ 8A289EF0721F95267BF2404BABEE146D, E263D258F03DF3BB405D49AE7230C37E7EB8F392FDEE48059C7C1E3709520D35 ] ahcache         C:\Windows\system32\DRIVERS\ahcache.sys
18:50:20.0849 0x13a0  ahcache - ok
18:50:20.0864 0x13a0  [ C301499987AF909258774AE9DC5778BB, 3ED539C999847116AE9DB9C8C5A34AB09703BAE3018E1EAF6DBC779BB6736F32 ] AJRouter        C:\Windows\System32\AJRouter.dll
18:50:20.0884 0x13a0  AJRouter - ok
18:50:20.0894 0x13a0  [ DD69535D379F9E40AD0D6002887AAA99, 579DD18CE2B264B4058C6069B8AEE6FD9FE6A882B7DA19E300DFE40B37A4E5BE ] ALG             C:\Windows\System32\alg.exe
18:50:20.0918 0x13a0  ALG - ok
18:50:20.0935 0x13a0  [ 6763084E8322A4876D1613854640F914, 89EEEB47517A9964FA799821E5E45BDD6009EBDC628D6DADE6A7F03DE7CDA6CD ] AmdK8           C:\Windows\System32\drivers\amdk8.sys
18:50:20.0960 0x13a0  AmdK8 - ok
18:50:20.0979 0x13a0  [ DE29D8AB57AD67D4940CAB4A48B3E230, 4E92AFCD9107573DAB8E65AC6318E4B8851DCCBE17E135DFF8CF5733210B52E6 ] AmdPPM          C:\Windows\System32\drivers\amdppm.sys
18:50:20.0994 0x13a0  AmdPPM - ok
18:50:21.0013 0x13a0  [ 4C1F9BBAF5CCD76D4642F3B92B97B454, 514CCAA8B586B1019658BE101046386EB727AD48D7913AEF9A168763E91F0DE5 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
18:50:21.0025 0x13a0  amdsata - ok
18:50:21.0049 0x13a0  [ F8195C1A15955180DD663E7FF4C2F6DD, F3C0C6B38FB9478217EE25EBDBDF7A18F01B97655BC38373E70E71171705D5E9 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
18:50:21.0065 0x13a0  amdsbs - ok
18:50:21.0083 0x13a0  [ DD2F5BBCFAC4D8E48DB1A95A7EEBFF08, 619E3106072C6F785144D785C4AFB4C607CAF7ED29AAA4A1411BE262E62B7ADE ] amdxata         C:\Windows\system32\drivers\amdxata.sys
18:50:21.0093 0x13a0  amdxata - ok
18:50:21.0110 0x13a0  [ 46AAF119090573A80D603745582229ED, 8D7C4AED66DD32A104965DC23D17C0815CD1BE2E3D52375C1A63863664EE174F ] AppID           C:\Windows\system32\drivers\appid.sys
18:50:21.0122 0x13a0  AppID - ok
18:50:21.0144 0x13a0  [ 24315B385F515D6D5476757EAFD62633, CE645397BF43CC54B864A0E4FCB86F76C10B9C2D2482E85DBBE15EF7BF045F17 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
18:50:21.0174 0x13a0  AppIDSvc - ok
18:50:21.0189 0x13a0  [ 2CE396457D5C18F034D243EC7E159010, DDF588A568DF5EAE058DF315535BD746760363E2242EF8C705F8DCBA2D5DA4A7 ] Appinfo         C:\Windows\System32\appinfo.dll
18:50:21.0207 0x13a0  Appinfo - ok
18:50:21.0220 0x13a0  [ 68AF553066C4DAE7D8698322526BDA86, 806A5228D204B18B3B9F88AB87B5918046BE96D1B3AEFEC9331CA7A483547486 ] AppMgmt         C:\Windows\System32\appmgmts.dll
18:50:21.0237 0x13a0  AppMgmt - ok
18:50:21.0267 0x13a0  [ A8AC0B8ED134888731D1A1BCEF930FA1, 917D2C99CB28C5F20BA386148B6A93541AEF900A9A99D310D732B501322945E5 ] AppReadiness    C:\Windows\system32\AppReadiness.dll
18:50:21.0307 0x13a0  AppReadiness - ok
18:50:21.0376 0x13a0  [ 4112F439D0B3074070586C19816CBA54, ED1C7676FADA92E6EC26DC6EBF5427F44819E7E454CA5F4087E1F2C9DA9A54AC ] AppXSvc         C:\Windows\system32\appxdeploymentserver.dll
18:50:21.0482 0x13a0  AppXSvc - ok
18:50:21.0517 0x13a0  [ 0756EECAC010BE449D07502DF27E7701, 6A895CA80050D021DB5E130102F626027339A22673B7C15C51A375C0401F03D2 ] arcsas          C:\Windows\system32\drivers\arcsas.sys
18:50:21.0529 0x13a0  arcsas - ok
18:50:21.0611 0x13a0  [ BD63768F58666341BE007DAA21B3A063, 1D6112E97042E19E4D916AA22F8AEB7FCC2F36CA45F55049D77042DAF3B8847C ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
18:50:21.0634 0x13a0  aspnet_state - ok
18:50:21.0670 0x13a0  [ A5792F971EFE86B7F56EE7299ED1082B, 82DCD15E2C9D8A3EA663941C9CE73020FEEF2F91354D0BB51E8A142AA1E30217 ] AsyncMac        C:\Windows\System32\drivers\asyncmac.sys
18:50:21.0698 0x13a0  AsyncMac - ok
18:50:21.0718 0x13a0  [ 8921DF6060DB5C7700AA48CB12E9EA08, 8F18841B454CDE4926C50B23F818D00ECE0AE884DB198E396445CB44CB39B2C4 ] atapi           C:\Windows\system32\drivers\atapi.sys
18:50:21.0739 0x13a0  atapi - ok
18:50:21.0893 0x13a0  [ B9875A03DC4D9496CF84921E47BD9499, 41F9A9CD0894684A5473DD0C12BAD6F8322CA68127DDE948E31F515A521D6A53 ] athr            C:\Windows\System32\drivers\athw10x.sys
18:50:22.0093 0x13a0  athr - ok
18:50:22.0121 0x13a0  [ 3A1FE91589F942DC1A37AE662C342187, 9954D25F45D7F8FE3C9C103364D83F00874019158B058A07150826158BE7720E ] ATP             C:\Windows\System32\drivers\AsusTP.sys
18:50:22.0138 0x13a0  ATP - ok
18:50:22.0173 0x13a0  [ 55E25E0D0FB72757FC45131B421E555C, 40CE6D97A40FF819C283B22D05597F67CCDC7050646C339634515550D9BF7535 ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
18:50:22.0193 0x13a0  AudioEndpointBuilder - ok
18:50:22.0249 0x13a0  [ D3EBA1F4666345DE6338011C058EC565, B9602795D62DE69C79815E7B463FD4AEA811DBAA6B3BEED0A440EEA2D5C79001 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
18:50:22.0306 0x13a0  Audiosrv - ok
18:50:22.0322 0x13a0  [ 2F7F80543129210CA75995D0DCA488E8, 353E598FF26FA363C02A2B44BA8D7D1ED97B8AC8C69F1B5C5D521BD0D5D5AB94 ] AxInstSV        C:\Windows\System32\AxInstSV.dll
18:50:22.0339 0x13a0  AxInstSV - ok
18:50:22.0374 0x13a0  [ 00D64E82900E4EC9062805ED87C2D75A, 577110F9A7C6C2C4CF86FFF4F60E23F61623ED325FC950033900A5102754A677 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys
18:50:22.0398 0x13a0  b06bdrv - ok
18:50:22.0411 0x13a0  [ 5164A66EC1565711A7B4CF2F143B4979, DA29F0FB63F3EB2BF92D51FEB4BB7D2B964553D2F634556325953927464CB3A5 ] BasicDisplay    C:\Windows\System32\drivers\BasicDisplay.sys
18:50:22.0422 0x13a0  BasicDisplay - ok
18:50:22.0437 0x13a0  [ F4C58BBF2972BD84C73F6A14CA35AC4E, B7A226EB861B63ACF4BF9B5A331ACA6FFC9B787DCCAA7697EEFC4F634508A6D5 ] BasicRender     C:\Windows\System32\drivers\BasicRender.sys
18:50:22.0448 0x13a0  BasicRender - ok
18:50:22.0459 0x13a0  [ 25349D0B334E528667980948ED107D89, 70EF9D3B8DCAC6E9720C6F3EBC77392FADC182A6925F9024FE30A21321E0137F ] bcmfn2          C:\Windows\System32\drivers\bcmfn2.sys
18:50:22.0465 0x13a0  bcmfn2 - ok
18:50:22.0490 0x13a0  [ DF78B56EEE6004DEE8CE57763128075E, 5758CAF4B0182F3F2E2508B3BB58B0271F2689808D09675B2753FE373D1D77D2 ] BDESVC          C:\Windows\System32\bdesvc.dll
18:50:22.0522 0x13a0  BDESVC - ok
18:50:22.0533 0x13a0  [ 1E8A9267F8886803AAE02982FC1B5BC4, 655DF84E037BD6E582A6BA89737A4388956219171AF7253D126E54A23F16BE59 ] Beep            C:\Windows\system32\drivers\Beep.sys
18:50:22.0556 0x13a0  Beep - ok
18:50:22.0592 0x13a0  [ 7FAFFFC4C59F5010D6E7CEA152076B92, 945FD6C04E109D4E5A4164BAA9A8120EC85AB809555AAD83E61B9F179F976FD7 ] BFE             C:\Windows\System32\bfe.dll
18:50:22.0633 0x13a0  BFE - ok
18:50:22.0678 0x13a0  [ BD60F5633F6BD617D9ECCA3FFDC0D37E, 2F0DECAEB7096CD628387263381E123C883F483BD87F7F2BA6DEFBB5A184BAA3 ] BITS            C:\Windows\System32\qmgr.dll
18:50:22.0768 0x13a0  BITS - ok
18:50:22.0781 0x13a0  [ C9FD65687EF89715999C582D3E568812, 42BA59A78A47C510CB2AFDC6C6080B33F9F611F84FEE5262DFF16D7633C50EB1 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
18:50:22.0806 0x13a0  bowser - ok
18:50:22.0838 0x13a0  [ EB4F4B88DF20C7B134F33A64EFD56BED, 7C32485FDDEEA23760DF24FC9576FBA11330C5BBA9053869FDAA9AD8A16B1610 ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
18:50:22.0874 0x13a0  BrokerInfrastructure - ok
18:50:22.0889 0x13a0  [ 2AAD720B32904B97EDD8C3211344F79E, 41B1AEA5FAA48033B2581E18D68EFC986C3D65B383847E250C054CE3133A893C ] Browser         C:\Windows\System32\browser.dll
18:50:22.0916 0x13a0  Browser - ok
18:50:22.0927 0x13a0  [ F8DD3B0EAC1EF1D087AE47E5819540AC, 866C951B52E3202AC89552AEA72A45123367199335578F03815E2ED55DA2FDAE ] BthAvrcpTg      C:\Windows\System32\drivers\BthAvrcpTg.sys
18:50:22.0939 0x13a0  BthAvrcpTg - ok
18:50:22.0960 0x13a0  [ 2FEDE143C0314A42DEB594DA9EB523CB, 554557AFB8E35CA657751824D558478019930EADD883AC63403658C0383A5A46 ] BthHFEnum       C:\Windows\System32\drivers\bthhfenum.sys
18:50:22.0972 0x13a0  BthHFEnum - ok
18:50:22.0989 0x13a0  [ B95040CAD3434D9EE003065363A0FAFF, D441E0676EA1AE1ABC305732024311CA59715E6763B3D7ADB728DEEFC403E182 ] bthhfhid        C:\Windows\System32\drivers\BthHFHid.sys
18:50:23.0001 0x13a0  bthhfhid - ok
18:50:23.0024 0x13a0  [ F334BF7B0737CEB3B6822631EAD55A87, 4E5AEB1F8E109BA01A5D1CDE2E3C677FF07F2AFE8B195CB5F82AA28816D2060E ] BthHFSrv        C:\Windows\System32\BthHFSrv.dll
18:50:23.0058 0x13a0  BthHFSrv - ok
18:50:23.0074 0x13a0  [ 29AEE352AED4FCD2191436D263D75347, 3D21262EA26BF423BFA4A9146E53F8B036B2A1157DBE91A11C5603AF7A670B6F ] BTHMODEM        C:\Windows\System32\drivers\bthmodem.sys
18:50:23.0087 0x13a0  BTHMODEM - ok
18:50:23.0108 0x13a0  [ 26DD0127A05B333E36316E6EA9A6AAE2, A2DC4483FF5639EE8DD315AB2989865CA6A6992C578FD7F7D31698A015355941 ] bthserv         C:\Windows\system32\bthserv.dll
18:50:23.0125 0x13a0  bthserv - ok
18:50:23.0143 0x13a0  [ F34AD5A9F944D91BD285D1C29EEECB2B, 2EDA8C481B7F7F49AC8399485AE7C2D182568EE2E62394DC78C9A821ADAEA5EC ] buttonconverter C:\Windows\System32\drivers\buttonconverter.sys
18:50:23.0159 0x13a0  buttonconverter - ok
18:50:23.0174 0x13a0  [ A10A1E05A943B10ECE5D57D131B7404D, 71BB816B6841001A4305DF1814926B639265E91895CA5D06284B0970E40CE386 ] CapImg          C:\Windows\System32\drivers\capimg.sys
18:50:23.0189 0x13a0  CapImg - ok
18:50:23.0212 0x13a0  [ F2829DC6D292DCAC5029893BB2E9FEE3, AF2A25722D3BE37BABD1F6668786AAF39E9D6CA18CE8E845E63266E218C64526 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
18:50:23.0225 0x13a0  cdfs - ok
18:50:23.0246 0x13a0  [ F3A9E38AE23AD4015764AF89E4AE3519, 57ED6AC834177E128720FEC5B5793F35C7C36474E2D787F182B6730933222CC9 ] CDPSvc          C:\Windows\System32\CDPSvc.dll
18:50:23.0270 0x13a0  CDPSvc - ok
18:50:23.0287 0x13a0  [ CA160E02F35A61C6F5C681FB4669C519, E6BC66156EE226F16804C4FDC8A60EB15CE6212EAFB9FB841FAC899979E140E2 ] cdrom           C:\Windows\System32\drivers\cdrom.sys
18:50:23.0301 0x13a0  cdrom - ok
18:50:23.0321 0x13a0  [ 320E7A02D81A468E8C1FEEFDB856AFAE, E65127D3D6B628F9D19EA509FEBD9E4DC1BF20D0C62C3C9E1D7087DF972B2AA7 ] CertPropSvc     C:\Windows\System32\certprop.dll
18:50:23.0341 0x13a0  CertPropSvc - ok
18:50:23.0433 0x13a0  [ 2FA3A0FD81DA7F49867E7A37E68BDE1A, A41B6570985FDE487BA18EC0BCC2E4CD573BBC6FBB56B697D832017B1B0AC33B ] chromoting      C:\Program Files (x86)\Google\Chrome Remote Desktop\47.0.2526.18\remoting_host.exe
18:50:23.0450 0x13a0  chromoting - ok
18:50:23.0473 0x13a0  [ 60D7D304DF75DFF6A46CF633F583B592, 4141D8D1C6FE829C02053DA91AC6B0628BDEB3322CAAD4AD958190F9D173340E ] circlass        C:\Windows\System32\drivers\circlass.sys
18:50:23.0495 0x13a0  circlass - ok
18:50:23.0534 0x13a0  [ FF9D4BCE19E5D36CB3A845A3286DA6C3, A0E2C38D629359EEC6F8EEC6F92A3E571AEF018BAF259F395DC497ED4827460B ] CLFS            C:\Windows\system32\drivers\CLFS.sys
18:50:23.0568 0x13a0  CLFS - ok
18:50:23.0616 0x13a0  [ 823F5DD7E8920D5B38CC29C63C1A2A93, EDA5EA602D49AC04D70EAE90BBAADE69629A13ACA63E0A172C614B1665711426 ] ClipSVC         C:\Windows\System32\ClipSVC.dll
18:50:23.0642 0x13a0  ClipSVC - ok
18:50:23.0661 0x13a0  [ 8EBA63416EC166EBA6EF6D34A505D8C8, 5EB0236ABEA2277B71D9F009DA71934C618606B20BBEC07B8595195E40C12A2B ] CmBatt          C:\Windows\System32\drivers\CmBatt.sys
18:50:23.0676 0x13a0  CmBatt - ok
18:50:23.0706 0x13a0  [ 0CC7CA2AC602F8B6BC93B57F63889235, 271011B4CF6D5A39C1D463D1C1D531BFDD9F5084DE7D0354F6A6F22F72DD006A ] CNG             C:\Windows\system32\Drivers\cng.sys
18:50:23.0732 0x13a0  CNG - ok
18:50:23.0743 0x13a0  [ 5EEA0856000F81B3D709BC81B3AA1EF2, C04E4E31D3FC38102BA410D312F58AF848920EE37004A5C306D79229C9B6079A ] cnghwassist     C:\Windows\system32\DRIVERS\cnghwassist.sys
18:50:23.0753 0x13a0  cnghwassist - ok
18:50:23.0799 0x13a0  [ 74CD3BF688E2B408227FE012A2F2D8ED, CC01AC79CEB9DC94FA5675D66F048928C9968B8944E34F5482A73C14B70EE8A8 ] CompositeBus    C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys
18:50:23.0820 0x13a0  CompositeBus - ok
18:50:23.0825 0x13a0  COMSysApp - ok
18:50:23.0842 0x13a0  [ D38774D1D383A2CDB9A4F64B7206913B, 6CDDC46D1D431342F00CA537FC327B23B8AA4D513CEEEE61F3E19C77975DF9C8 ] condrv          C:\Windows\system32\drivers\condrv.sys
18:50:23.0858 0x13a0  condrv - ok
18:50:23.0907 0x13a0  [ 01F245DD79B42FF7D37F48EB00A642CB, B8ADE9AF9C50658482DA8C4241EB9945443F67B1EC8F3EC0317E4D22130F2586 ] CoreMessagingRegistrar C:\Windows\system32\coremessaging.dll
18:50:23.0937 0x13a0  CoreMessagingRegistrar - ok
18:50:23.0996 0x13a0  [ A6B9FD89353D6005DD74485F591F2A83, 1148FDAC0C4B01E9F7C925E22F0E13CA0ECA3DB8AE13F3303E99AB03D4E7B644 ] cphs            C:\Windows\SysWow64\IntelCpHeciSvc.exe
18:50:24.0020 0x13a0  cphs - ok
18:50:24.0046 0x13a0  [ 35DB06AACD8AD5999161DA71FF0E16F0, 22AD27811AAD14666ACEF4115447B0CFAA70D1E73923059FB2A9B4C3CBE500A6 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
18:50:24.0060 0x13a0  CryptSvc - ok
18:50:24.0088 0x13a0  [ 838755238B2BAE5A4802B038443B8A22, 1A89E413C6E5C3E8C2B64F8A1D41271D3FA39BC67291331FEC8DCFD4F8CCE994 ] CSC             C:\Windows\system32\drivers\csc.sys
18:50:24.0116 0x13a0  CSC - ok
18:50:24.0149 0x13a0  [ 7D64B14DAFEBBC19A87EC9D5B862F6AA, BE7510E618566FEA013E2E77CE4C7C160BADE105C493424595A15D0A7F1615CF ] CscService      C:\Windows\System32\cscsvc.dll
18:50:24.0195 0x13a0  CscService - ok
18:50:24.0221 0x13a0  [ 4FBDC124FDFE5B51522ECD077D016623, 5273589C56B8BA2BA056146FF3F364484F2E6C3A915FC6132C9EEF06BB95EB7D ] dam             C:\Windows\system32\drivers\dam.sys
18:50:24.0231 0x13a0  dam - ok
18:50:24.0277 0x13a0  [ 5E57B9FBB4E9C43EE5B69BEE01A1819F, A1F8D1E52AF446CEA2EB50064E3A24B713B19197D61C3EAECB81B3CCD80558E7 ] DcomLaunch      C:\Windows\system32\rpcss.dll
18:50:24.0330 0x13a0  DcomLaunch - ok
18:50:24.0349 0x13a0  [ 0605AB12BF1856DF21AB708F28EA91CF, 3A6A7F8F84044DC1EA490A007E6DBC52203BA237ECF1B845961D9BB95E9BF8C8 ] DcpSvc          C:\Windows\system32\dcpsvc.dll
18:50:24.0369 0x13a0  DcpSvc - ok
18:50:24.0389 0x13a0  [ BABB7BB5AD3CECFF466E6080F43CFC58, 1B8FF66557EC4C749156ED6DACC4D61D5DC4E25DD58F6DB3713C356214B80FDA ] defragsvc       C:\Windows\System32\defragsvc.dll
18:50:24.0419 0x13a0  defragsvc - ok
18:50:24.0439 0x13a0  [ 63C9464B165D31ACC46B6B089AB36B41, DE38DE4E6331D07630B63224F8014C27368C29791EDB58CC5DAE7CBACD37160A ] DeviceAssociationService C:\Windows\system32\das.dll
18:50:24.0467 0x13a0  DeviceAssociationService - ok
18:50:24.0496 0x13a0  [ 7B3DA16FAA498838BB457E0B7E380EDF, B73DCFFA60886F10765E4B76A58CFF18C08CAFEE620700361FC8FEC7E80B5958 ] DeviceInstall   C:\Windows\system32\umpnpmgr.dll
18:50:24.0515 0x13a0  DeviceInstall - ok
18:50:24.0525 0x13a0  [ CF3895DD260ADE05BC91D8FBE0A82907, D7D8A29E873BE5C3832C9264F0165F6CD50D42ED0E04B0FCF07F054793092334 ] DevQueryBroker  C:\Windows\system32\DevQueryBroker.dll
18:50:24.0550 0x13a0  DevQueryBroker - ok
18:50:24.0566 0x13a0  [ 25435407D97419627F4B10653433BF2B, 5429B0DB7C5302E9A6AF92C046637183D4147D4A206963ABEA3A611214D6AB04 ] Dfsc            C:\Windows\system32\Drivers\dfsc.sys
18:50:24.0581 0x13a0  Dfsc - ok
18:50:24.0600 0x13a0  [ E59C209F1F633C1AEAF151B2CA46BBAA, 6A4DA927418B56A228CC8D9DFA3351B2B53A9328F5C56C10F0C7B19974B2ED89 ] Dhcp            C:\Windows\system32\dhcpcore.dll
18:50:24.0628 0x13a0  Dhcp - ok
18:50:24.0662 0x13a0  [ 95AA7877FD4161BFBC8493F9279B1901, F6B7DF75D763A89901BD12454BEF92D161B392F721B8568505073929D9F419BD ] diagnosticshub.standardcollector.service C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
18:50:24.0672 0x13a0  diagnosticshub.standardcollector.service - ok
18:50:24.0797 0x13a0  [ 95860E3A2F310EA34219C9CF824EE246, B12E081542F27023FBB68D66D366E85E33C98625009E8462DB0A99125D3130E6 ] DiagTrack       C:\Windows\system32\diagtrack.dll
18:50:24.0888 0x13a0  DiagTrack - ok
18:50:24.0909 0x13a0  [ FDCD449AE9E75D7690593D16ADAF4DB4, 3366C4BDB031EB525F85850E903C46802A2AC762C0772C6F6E543DDA4AF1E9D5 ] disk            C:\Windows\system32\drivers\disk.sys
18:50:24.0920 0x13a0  disk - ok
18:50:24.0949 0x13a0  [ 8E481EDF066552D551613EC9FE7D179F, 96E955CA82B4CDEC00ED08003FDC8DD61E685F421912EDBF7B0DA740048416F9 ] DmEnrollmentSvc C:\Windows\system32\Windows.Internal.Management.dll
18:50:24.0987 0x13a0  DmEnrollmentSvc - ok
18:50:25.0017 0x13a0  [ F10A8F6D036CEDD14A5471782C52F041, E0DA3C4F76DBBEAED549375E57819F8825B33A118F7674D417D294054863F648 ] dmvsc           C:\Windows\System32\drivers\dmvsc.sys
18:50:25.0050 0x13a0  dmvsc - ok
18:50:25.0070 0x13a0  [ 7228733177F673B4D51BD1AA082D47C1, DBE155CDCFAA7C32407A207F637F252FA0CE30F1DE7E7DBEC42DB37FADB5BFA7 ] dmwappushservice C:\Windows\system32\dmwappushsvc.dll
18:50:25.0098 0x13a0  dmwappushservice - ok
18:50:25.0139 0x13a0  [ 592E41B3C11CA12203D3708AD8FC3D37, 6C69D5D603FBF038C069EDDCE29F7C6A60CAAE58B985AB218E1497F2BA934D42 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
18:50:25.0175 0x13a0  Dnscache - ok
18:50:25.0213 0x13a0  [ 6184C7A2F12625C108AEFD3A43429967, 689153F319BB1013FF60F71317E8380A6945EEE8141EDBDD6B185A966E23BB93 ] dot3svc         C:\Windows\System32\dot3svc.dll
18:50:25.0238 0x13a0  dot3svc - ok
18:50:25.0246 0x13a0  [ A616D8297C1BEA690BBC796736A7A78D, 9365470F4609606410AD79D98E1E77D815DC7C5AA924FB639FCF713EE8EDEA76 ] DPS             C:\Windows\system32\dps.dll
18:50:25.0263 0x13a0  DPS - ok
18:50:25.0292 0x13a0  [ C1283B0BEE35F9AF3511E0EBA71F311C, 542D560B654EA4E4708837231A4A967FB4DF5CDB190B7D763E92B1F6FCB255B4 ] dptf_cpu        C:\Windows\System32\drivers\dptf_cpu.sys
18:50:25.0345 0x13a0  dptf_cpu - ok
18:50:25.0372 0x13a0  [ 45771610FF181434073B5A0A00F20F8D, 6A17DB09AA6D021F000F7315317235E1FCF41FD58EA7DF81A7C9F5A6DE999984 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
18:50:25.0390 0x13a0  drmkaud - ok
18:50:25.0414 0x13a0  [ 00D9A948FB7344C62CEBED88E50EE39A, EF33FE7FB34DE571F3956C1F7AC8EFAA25BFD9F3AFA3ECD25DD34C5890873245 ] DsmSvc          C:\Windows\System32\DeviceSetupManager.dll
18:50:25.0438 0x13a0  DsmSvc - ok
18:50:25.0460 0x13a0  [ F2328181D289CE83E9979733EAB6742A, 73B1CDA6ED8C42B36126909F1335B72126A5DDC6FC7CE8BA2CA274A2B92E82FD ] DsSvc           C:\Windows\System32\DsSvc.dll
18:50:25.0481 0x13a0  DsSvc - ok
18:50:25.0560 0x13a0  [ 3AE126D2F420D9B8838D19F81B6F7337, 116B4DFD0A5C2EAD062ACDE0C727B1F5F94974CD3F415AD44BA6EC510B47C8DB ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
18:50:25.0643 0x13a0  DXGKrnl - ok
18:50:25.0681 0x13a0  [ 6E36BDBB46DF7F865D0DD30663AE3891, 98967B01EA450AD4D5FE8085F710359C022D783B839A51BD4A266718156B01EB ] Eaphost         C:\Windows\System32\eapsvc.dll
18:50:25.0697 0x13a0  Eaphost - ok
18:50:25.0841 0x13a0  [ 3070013B01EDA42C7EB67D731340C396, C083CA05650750876E70CB6AB51D5C047C06098C2ED86B083A74C97830247BFC ] ebdrv           C:\Windows\system32\drivers\evbda.sys
18:50:25.0964 0x13a0  ebdrv - ok
18:50:26.0003 0x13a0  [ 9A83FA0EC9B0DCED2CBC49DD05901920, 14D2F241235E2693C68BCCF05D83F2A1C9A7BE185C83E7C6C63EF0F654892F95 ] EFS             C:\Windows\System32\lsass.exe
18:50:26.0014 0x13a0  EFS - ok
18:50:26.0037 0x13a0  [ 59EE187E333EE9914DD9BEA5F4E0D85D, E34BB8075E38FC6AEC056323C6E3B5B4E7041EE6F4D51699B706DEEA18BDB911 ] EhStorClass     C:\Windows\system32\drivers\EhStorClass.sys
18:50:26.0048 0x13a0  EhStorClass - ok
18:50:26.0069 0x13a0  [ 9297F1CC486F24BDFD2874156AC5430F, 1AF8689ADE4E658FC9418F7886B6C19F7D005EAB2AEF9B0E14FC81C61A74CECF ] EhStorTcgDrv    C:\Windows\system32\drivers\EhStorTcgDrv.sys
18:50:26.0082 0x13a0  EhStorTcgDrv - ok
18:50:26.0100 0x13a0  [ 9E8FF6B95FD420FA9E40BE548E5C8D92, 8825B81418335D03CFAADB792C1466023C459BE489ACACBD6686FFB544F22D30 ] embeddedmode    C:\Windows\System32\embeddedmodesvc.dll
18:50:26.0127 0x13a0  embeddedmode - ok
18:50:26.0146 0x13a0  [ DC2F91EAE9A28FA8C6610A9B7701B70D, 480DB509BF944AAC3617594F1245B4603069DE39186BC1FA7EDB8E0536B05E79 ] EntAppSvc       C:\Windows\system32\EnterpriseAppMgmtSvc.dll
18:50:26.0176 0x13a0  EntAppSvc - ok
18:50:26.0193 0x13a0  [ F7FCCA6300485EF60CEA6D991D6C8C78, 24080D80CF1FD678DF4C9CAE70F65F8D9232F5F6A6F2B73A77B5E3C91E6505F3 ] ErrDev          C:\Windows\System32\drivers\errdev.sys
18:50:26.0203 0x13a0  ErrDev - ok
18:50:26.0263 0x13a0  [ 736A4D2C8CF4A1C27BBDBC187CD40297, 4C85CB86EE49B4834345ABB720FF84BC158967DAFE8DCE8E06693E46EBC16E52 ] esifsvc         C:\Windows\SysWOW64\esif_uf.exe
18:50:26.0314 0x13a0  esifsvc - ok
18:50:26.0332 0x13a0  [ 99984B5D3378F8236F3A85E51ACEDD16, 73EE5B93C27C09F15BBAEADC8A293CB14FDD1E3DC65DDC0C665549D71F307D33 ] esif_lf         C:\Windows\system32\DRIVERS\esif_lf.sys
18:50:26.0352 0x13a0  esif_lf - ok
18:50:26.0398 0x13a0  [ 2093F65AA84478E28C8E9D05BC413845, 086D4E0D4B993F4041AA8A9DCBEEDB53BD05B88E2BEFB218837FB10FACDF4233 ] EventSystem     C:\Windows\system32\es.dll
18:50:26.0429 0x13a0  EventSystem - ok
18:50:26.0455 0x13a0  [ DCCDC3F35F0618692117DF90800A4284, B636B2A39AE89A9C2CDE17EC52DA669DA8AA9E2B04CA5CA19926DA8009655244 ] exfat           C:\Windows\system32\drivers\exfat.sys
18:50:26.0488 0x13a0  exfat - ok
18:50:26.0509 0x13a0  [ 435FC0D25ADFD1A2FBA8C98BD4D79E23, F89D02518923D5AAB4A63686F26EE6118584AA9641D2C0B5B1AE4A728D5C06A4 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
18:50:26.0527 0x13a0  fastfat - ok
18:50:26.0560 0x13a0  [ 046FC9CF53A91E2FBA498CA7B0C3B028, BCFB06DF53065706DD6287E8C47BF5047F8A1E33981E1881E6ED7510337F5BC8 ] Fax             C:\Windows\system32\fxssvc.exe
18:50:26.0592 0x13a0  Fax - ok
18:50:26.0608 0x13a0  [ 4E4B7D935DBF522B2F23D3573596181D, 9D0EC9F65920EE0FFFB2D49C58E4D5151C8CEEB7AA82543D226E4B84EEE4B3F0 ] fcvsc           C:\Windows\System32\drivers\fcvsc.sys
18:50:26.0619 0x13a0  fcvsc - ok
18:50:26.0638 0x13a0  [ 583EB1C7690E361213BBD0472155128B, 5F5871490A6DAC4A824F4428941AC86FBFA9AA349B99B5D9544E5D62EB459FA8 ] fdc             C:\Windows\System32\drivers\fdc.sys
18:50:26.0651 0x13a0  fdc - ok
18:50:26.0662 0x13a0  [ 94B1A46EDD335F0C54C7BDAFC43348E6, 58073D58D0BE7389C2A4736AFE108835E5AE9C9950FF630644F585C99B964043 ] fdPHost         C:\Windows\system32\fdPHost.dll
18:50:26.0678 0x13a0  fdPHost - ok
18:50:26.0693 0x13a0  [ BC855BB7DFE06F27F78E0EB2A8CCB70D, D16C3DAB99C16B077BA5DA5E9E0646B0B9237B00ABAE867D9F81A2D072D583B1 ] FDResPub        C:\Windows\system32\fdrespub.dll
18:50:26.0710 0x13a0  FDResPub - ok
18:50:26.0730 0x13a0  [ F1125F20D56F28DDCD1A6F3E81EB4F5F, A6620ECCB15FAA70E4A43ADA4CE82CF97D708B6FA07F3FAED276359E7F92FD0F ] fhsvc           C:\Windows\system32\fhsvc.dll
18:50:26.0749 0x13a0  fhsvc - ok
18:50:26.0771 0x13a0  [ CDFD81CACE0E11596A3BB61EC4CF6467, 569FA86A215B054131AA9AFEECFEE7FD7143DCFFE275B84196004AEA538B2476 ] FileCrypt       C:\Windows\system32\drivers\filecrypt.sys
18:50:26.0784 0x13a0  FileCrypt - ok
18:50:26.0803 0x13a0  [ 3F02FEDAE894CBF4BAADDF8C8E1D53A8, DA32ABB1CDA867B8456C46F8581FA7F3A8D8B89D9F6E7422F51941D5FFA15B13 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
18:50:26.0814 0x13a0  FileInfo - ok
18:50:26.0830 0x13a0  [ 2824933386E30DE5BA089DF539CE19A3, 7B33E514576C68B444AE99CBA1360EBFAE8A46EEE5C01F4EE4CF471A712AB148 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
18:50:26.0846 0x13a0  Filetrace - ok
18:50:26.0860 0x13a0  [ 6A598249640F8BEDD79EC73917E1664F, A675238EA19E6632CDEB4EEFF7CF509EAAEF76AD8DFD247664E5607555D9CEE1 ] flpydisk        C:\Windows\System32\drivers\flpydisk.sys
18:50:26.0872 0x13a0  flpydisk - ok
18:50:26.0901 0x13a0  [ 44B6A6832134DF651E887E941478CA35, FCF4EB726D00F5A17DD66C81CFDA49427281C94CF9CA2008397D591AEA61AE05 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
18:50:26.0920 0x13a0  FltMgr - ok
18:50:26.0975 0x13a0  [ 2197F27116ACAF292B22E6EF786B5D8C, 1D464C45EAECDEA29EB3A8B9720F41B420C210D0EE65B0DC0B71414078264D6D ] FontCache       C:\Windows\system32\FntCache.dll
18:50:27.0121 0x13a0  FontCache - ok
18:50:27.0224 0x13a0  [ 109AACC7FB0170535F71491F673AFD38, 212B6761ABBAC29993DA0A47C3DDE8074EA9E5A8FFA8FF6EAB95AC69D8FDD5A0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
18:50:27.0240 0x13a0  FontCache3.0.0.0 - ok
18:50:27.0260 0x13a0  [ 3F3B9E8CECD5604BC7746EF3A852EB67, 51AF62A9563379266C0C873E82F55427900032DFD7AC3EBDCDF77F8F8DE91A5D ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
18:50:27.0279 0x13a0  FsDepends - ok
18:50:27.0288 0x13a0  [ A60583221C7BB7CEC35C63285A297BE1, 3C842FBEAD1FA2BD8D37B2B0E8EDF77F4F50508C56FB25DFA81DE9679090D51D ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
18:50:27.0301 0x13a0  Fs_Rec - ok
18:50:27.0330 0x13a0  [ 58013A50225174EEF1410E37795D7908, F8E557CA4110ABB203192DEAF59D91A5FEF2A5EA394637276DAB7F4D2E7BFA39 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
18:50:27.0355 0x13a0  fvevol - ok
18:50:27.0376 0x13a0  [ 0DAAE3EFCE00133AB3E383A36C47CDAF, 9145665F4F0575F951803AAFAA1A7DC0FAA35430CAE7D90E902074D60D6F4C62 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
18:50:27.0387 0x13a0  gagp30kx - ok
18:50:27.0400 0x13a0  [ F59155B95D01C08F9ED774B626B504A1, EF0FCF35AD9CD5E5D695F0C064244D2B327E7FB10FD7CBB0586253EC75562918 ] gencounter      C:\Windows\System32\drivers\vmgencounter.sys
18:50:27.0410 0x13a0  gencounter - ok
18:50:27.0424 0x13a0  [ AE24452F55C6F1784CBD7489D0CDDB02, 4E13C51CBF30A8662B1180AC74E968CFC428B6EA7931F09357E7D120063D4823 ] genericusbfn    C:\Windows\System32\drivers\genericusbfn.sys
18:50:27.0441 0x13a0  genericusbfn - ok
18:50:27.0521 0x13a0  [ 21931B9C5FDE6087F47F710AC1BE16E9, A727A8922A9769AAC77F5D85ED3475853655E9483C8DA091653D0B1F3D479398 ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
18:50:27.0547 0x13a0  GfExperienceService - ok
18:50:27.0567 0x13a0  [ 96F0D3A583A91B634EE2AC2507356EDC, 43D2575F33D28F61C13D2DCF358BFA9DCEAE276C83152DBE7AE2020A66929CD9 ] GPIOClx0101     C:\Windows\system32\Drivers\msgpioclx.sys
18:50:27.0580 0x13a0  GPIOClx0101 - ok
18:50:27.0641 0x13a0  [ E50CE978F571B900D9A7E2F1C5BCC070, EA14873A5F1B700D7CDBE55B9D214DC457262866A90D80B3E8325A8EB7932CE7 ] gpsvc           C:\Windows\System32\gpsvc.dll
18:50:27.0726 0x13a0  gpsvc - ok
18:50:27.0742 0x13a0  [ BA2455D93BD57989A04FE4094AA6F941, B579FB367C063EA30C034381148410D49D38E183A5A4D51D2334A81DAEE95CEC ] GpuEnergyDrv    C:\Windows\system32\drivers\gpuenergydrv.sys
18:50:27.0757 0x13a0  GpuEnergyDrv - ok
18:50:27.0848 0x13a0  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:50:27.0855 0x13a0  gupdate - ok
18:50:27.0860 0x13a0  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:50:27.0867 0x13a0  gupdatem - ok
18:50:27.0903 0x13a0  [ FE85E924C86D6D313D61C28A451EA4DE, 22422CECDAB8EBAED6120E6CFDD57BAFC61EA12B1E3563E8605B9700DFE71EBC ] HdAudAddService C:\Windows\system32\DRIVERS\HdAudio.sys
18:50:27.0926 0x13a0  HdAudAddService - ok
18:50:27.0955 0x13a0  [ C277A49F8A8295840DEBC9240B75A282, 8B2BA0E6A8300323765D95ECD843105B0FC4B80B85EE2220E677C4E9A760C9D8 ] HDAudBus        C:\Windows\System32\drivers\HDAudBus.sys
18:50:27.0968 0x13a0  HDAudBus - ok
18:50:27.0986 0x13a0  [ D5A57EF4822A0388352FFF9F5CD53495, 509F365386859157E9078821FAA56D2A3C0BA296CA129E0D42453428A14687A5 ] HidBatt         C:\Windows\System32\drivers\HidBatt.sys
18:50:27.0997 0x13a0  HidBatt - ok
18:50:28.0014 0x13a0  [ 39575B53EB80C77FF2A3F1449D00B7F5, 37E66B38BACE00AFEF7093F990A234399D8451A9D2C2C8CBECAB69C664E63EA6 ] HidBth          C:\Windows\System32\drivers\hidbth.sys
18:50:28.0029 0x13a0  HidBth - ok
18:50:28.0047 0x13a0  [ 35C3B602664116E737FF729F9A7156AD, 7A3C5CAD716E819CC53405971F3ACD135BCF023EC2228C1095E2116BCC384E62 ] hidi2c          C:\Windows\System32\drivers\hidi2c.sys
18:50:28.0058 0x13a0  hidi2c - ok
18:50:28.0076 0x13a0  [ C4ABE526BBF2A18E8AF70177FBAD9C6E, 4DA06B563A08AC15D949F4599F73F172B3BFCB5D23B34240D1E2114438A11929 ] hidinterrupt    C:\Windows\System32\drivers\hidinterrupt.sys
18:50:28.0087 0x13a0  hidinterrupt - ok
18:50:28.0101 0x13a0  [ 348416C7D7EB05BC3099FE2F2B27985C, F30E8682E9DD731A1AD7328FB8A48A2BB7D6E52780AE1FDE839D26E84B4FA7B5 ] HidIr           C:\Windows\System32\drivers\hidir.sys
18:50:28.0113 0x13a0  HidIr - ok
18:50:28.0136 0x13a0  [ 5576DF399CF2D3B63608F7F282151249, 04939E79B8B8035547CE6FFE9001252CA810BAD46D8DB75FF5C13EB10EEB5C57 ] hidserv         C:\Windows\system32\hidserv.dll
18:50:28.0160 0x13a0  hidserv - ok
18:50:28.0185 0x13a0  [ 38DA94B6DD8022DA43810E4328608E54, ACE0A36143FF37BC42F136DB7317028540D1C0F21A5FD13F67E1A3DB2426A5EA ] HIDSwitch       C:\Windows\System32\drivers\AsHIDSwitch64.sys
18:50:28.0215 0x13a0  HIDSwitch - ok
18:50:28.0238 0x13a0  [ 01F732724AF6EFE69886DA95A4E51820, E048A480F9396418BDE9659596E7EDA5FF97D3CE029D186048609B47575BEAE1 ] HidUsb          C:\Windows\System32\drivers\hidusb.sys
18:50:28.0265 0x13a0  HidUsb - ok
18:50:28.0293 0x13a0  [ 7433A8D28EE11A661C7A45AF28BA7987, 8A73DB423924E84CD3629BF6C7298CD093D2437B73B3F4520D39330923DDA2D6 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
18:50:28.0328 0x13a0  HomeGroupListener - ok
18:50:28.0363 0x13a0  [ 3FDBFBE5AE639996EB8D482C16BA7EA9, 7E48304818AABB4C5B0CB7FD32D96D6F90F4180AB0F668A2FE653A7097A40673 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
18:50:28.0399 0x13a0  HomeGroupProvider - ok
18:50:28.0431 0x13a0  [ 3844CE7DD23530CAD59D8CABA57CCB05, A44BB60686A0E98FF370D9DED5B32C3F34F0352ACFA3B3052BA4023922B53DB7 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
18:50:28.0448 0x13a0  HpSAMD - ok
18:50:28.0497 0x13a0  [ CA6EADBB8731CA27BDA4037BF290AC14, 31EC9397D55D4EEC416AD722134E2D6B5D14E46D2150CB94889C4BFDAACBF421 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
18:50:28.0532 0x13a0  HTTP - ok
18:50:28.0543 0x13a0  [ 8841D927EB1F7FFC8B1805BC0CF190ED, B063E686380EEF582CF736E33751812F0041C593C7F30EE97D13DEDC9B246AB5 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
18:50:28.0553 0x13a0  hwpolicy - ok
18:50:28.0568 0x13a0  [ 53436C3835E80F4421652A67F44D6313, 8731091945A839713348DF3060A4C96033874E2B3DC7E099BEEC8C65B07F98CF ] hyperkbd        C:\Windows\System32\drivers\hyperkbd.sys
18:50:28.0579 0x13a0  hyperkbd - ok
18:50:28.0596 0x13a0  [ B2DC6C2F313EBB967B556B4E73A75451, B1816A0AE15705F0325F167EA76166779607D6086EC36A4A960E3BA47B4EBC4B ] HyperVideo      C:\Windows\system32\DRIVERS\HyperVideo.sys
18:50:28.0607 0x13a0  HyperVideo - ok
18:50:28.0629 0x13a0  [ D4CDEE4A62BDFFF6E8558A9552148EA7, 55306786CB45082AE374937EBA256FF9CD640BB2E8C19DC6C704489D4743F5CC ] i8042prt        C:\Windows\System32\drivers\i8042prt.sys
18:50:28.0660 0x13a0  i8042prt - ok
18:50:28.0679 0x13a0  [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO    C:\Windows\System32\drivers\iaLPSSi_GPIO.sys
18:50:28.0687 0x13a0  iaLPSSi_GPIO - ok
18:50:28.0696 0x13a0  [ F1DF87463AC308047B089E9F0456B4C8, DFFF3C63D3124C2B879B888104042406FE326D4E7C8C1881A269BD4287B9CD33 ] iaLPSSi_I2C     C:\Windows\System32\drivers\iaLPSSi_I2C.sys
18:50:28.0705 0x13a0  iaLPSSi_I2C - ok
18:50:28.0734 0x13a0  [ 9FDD4763A115D04F565C38183DE4646F, A8B0653E7C5F5B3CB2A1B642F502269FB1BB1E35DBB1CBABDBDADF92C9815727 ] iaStorAV        C:\Windows\system32\drivers\iaStorAV.sys
18:50:28.0761 0x13a0  iaStorAV - ok
18:50:28.0781 0x13a0  [ 4E69EE8F8E5DA036535D433C544AF9E2, 2ADE9B97CE1C19FF984D8BB99CF31415872C2D9628864BD78C0E44D21CC94EE3 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
18:50:28.0801 0x13a0  iaStorV - ok
18:50:28.0827 0x13a0  [ 15C59DF20F74A0C2C764B991FED7F4A5, 6E9804775E815F32A4D73C346E627D64A3096525E78FAE3B6E43CFECAE270428 ] ibbus           C:\Windows\System32\drivers\ibbus.sys
18:50:28.0846 0x13a0  ibbus - ok
18:50:28.0871 0x13a0  [ 75F173DDC7234755CB13311CFC152842, 87F35D11FF171A375BE5877BE708518647C31E880E13685E03E4E271C30EB6D7 ] icssvc          C:\Windows\System32\tetheringservice.dll
18:50:28.0901 0x13a0  icssvc - ok
18:50:28.0904 0x13a0  IEEtwCollectorService - ok
18:50:29.0082 0x13a0  [ 6FFC445E0D38C3C880125F2C201C9BC6, 488A427239B55394359751FCB8CBAEA8E2AE1CB2AE03C04590E7B8C80EF3F709 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
18:50:29.0309 0x13a0  igfx - ok
18:50:29.0338 0x13a0  [ AC4F72ABB5ED596A0F3D9D1EDDC4B27C, F48BFF192B523709DEF64578EA7217EED59E2C1D2627E7BD54E59DABC25B8C36 ] igfxCUIService2.0.0.0 C:\Windows\system32\igfxCUIService.exe
18:50:29.0354 0x13a0  igfxCUIService2.0.0.0 - ok
18:50:29.0414 0x13a0  [ 6F9C31435DD3E3D3BC247212EA144EBF, 05C4A0BD4BABD27783CEFEE6108C1A05911A212189233F09AF1A56BDC60F60F8 ] IKEEXT          C:\Windows\System32\ikeext.dll
18:50:29.0498 0x13a0  IKEEXT - ok
18:50:29.0660 0x13a0  [ CFF7673A716876C03AED20B2000EF0A6, 4FCE213852801DB1E5C43BD165D591A0F69DB1DFB320F8BBE7C1FF04CAEE4111 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
18:50:29.0845 0x13a0  IntcAzAudAddService - ok
18:50:29.0889 0x13a0  [ 42777B7BE4946135578E5C3BC1D2E4AD, CE4FF334238D0A98139676420E770A42DC0F5567F49D618B56CD55417F556D05 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
18:50:29.0925 0x13a0  IntcDAud - ok
18:50:29.0942 0x13a0  [ 72586E6D6DD4144D0C4CBD9D2653BBED, 3EE3CBB98D7A2CEEC92A86D5D2F49733BB1FD42F45CDE8973B71022E57093BBA ] IntelHSWPcc     C:\Windows\system32\drivers\IntelPcc.sys
18:50:29.0978 0x13a0  IntelHSWPcc - ok
18:50:29.0996 0x13a0  [ 498759139F71142888CF7EFA1ABE18C8, 9CD0CD748B143F947B4DEDE39344A8C284717CC8AC97E25827EB73CF10831419 ] intelide        C:\Windows\system32\drivers\intelide.sys
18:50:30.0005 0x13a0  intelide - ok
18:50:30.0032 0x13a0  [ DC270DDCDDC2EF65D484A65CC5166222, A88BEAD819ABEFE28B6F9A10586ADCB0EE2A5ED9273F176E9313750609C7892F ] intelpep        C:\Windows\system32\drivers\intelpep.sys
18:50:30.0043 0x13a0  intelpep - ok
18:50:30.0065 0x13a0  [ B4D9C777762B1F7356958B9C0AA93BEB, F11B07FE939A107AB4EED4857854DF269C2D86A80C8507C8B1E95F7805975EDB ] intelppm        C:\Windows\System32\drivers\intelppm.sys
18:50:30.0101 0x13a0  intelppm - ok
18:50:30.0119 0x13a0  [ 22BD83268B80A8C89AAC0BDF46E4EB5D, E7DC0C2E4104B51EA545BA8D0CFF11FD6A15BFD8EE16E546E8FC220853402CB3 ] IoQos           C:\Windows\system32\drivers\ioqos.sys
18:50:30.0138 0x13a0  IoQos - ok
18:50:30.0159 0x13a0  [ A49E47A6E1429123F46A7CA9C05AEFC1, FFD68CA46DFAA4954FD76145808E2C74BDC34FFD6979BB3FB6A3EE4DC33CDC78 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:50:30.0179 0x13a0  IpFilterDriver - ok
18:50:30.0238 0x13a0  [ 8FBA61B7CB44F136226BE3B346FC6D19, 2190A523AC948B18C2C7B6DC96ABB654DAB471AD5E5E13F79899416E91777AED ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
18:50:30.0282 0x13a0  iphlpsvc - ok
18:50:30.0302 0x13a0  [ E0C276985AF968CE295B8E09C121321F, 07B54165E80D4254C29A6CF00CC634E70F190EF0EB8EEF73EC14F38B841087A5 ] IPMIDRV         C:\Windows\System32\drivers\IPMIDrv.sys
18:50:30.0323 0x13a0  IPMIDRV - ok
18:50:30.0334 0x13a0  [ 5D3744E6FDEC1A6FB3FA9B1DD4AF0694, 209BE9FC25C8BF8CE058B7E993B6A902B881380DADC69F5208733077DA7F4382 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
18:50:30.0349 0x13a0  IPNAT - ok
18:50:30.0367 0x13a0  [ B18202D72C0EF4B53CEC6F59E3E1B955, 6DA244E6485372C16CF0B38838DC90B48079A85F5D22B0F2F197C8DA37F0A293 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
18:50:30.0380 0x13a0  IRENUM - ok
18:50:30.0398 0x13a0  [ CD04CBCCCB4C0E4BB06B98E0F45C888A, 106B3E823C188BD14328F2BEA28559D2F637C270064B2FD214522FAC4E616F4C ] isapnp          C:\Windows\system32\drivers\isapnp.sys
18:50:30.0407 0x13a0  isapnp - ok
18:50:30.0430 0x13a0  [ 5D90E942C94B20E0F321015C0ABF3EEA, 4110551B172D4A5524DD857D7CB65FAF2594310BE7883D5641BC0DF5EF49C82C ] iScsiPrt        C:\Windows\System32\drivers\msiscsi.sys
18:50:30.0446 0x13a0  iScsiPrt - ok
18:50:30.0456 0x13a0  [ 4192DFE6CA143C0AD8AF42C51A82BECA, 31FB3A261D0D5241CC87EF7DFF8BFC1A1EACE8CEC42138918EC5958DAEE100CD ] kbdclass        C:\Windows\System32\drivers\kbdclass.sys
18:50:30.0467 0x13a0  kbdclass - ok
18:50:30.0478 0x13a0  [ B63C0DB341DCB46CF7AA259333A737DD, F1B43BA68707F3F99CD31AB2035F5E86CD967AE4E5393928C69861785E960872 ] kbdhid          C:\Windows\System32\drivers\kbdhid.sys
18:50:30.0489 0x13a0  kbdhid - ok
18:50:30.0497 0x13a0  [ 53C79A7FABDAAFD11EAB31963FB2CED7, 357418645DDCEFA5546AE78EDCAE86D50928710CA7A3F65F01CF721AADA36623 ] kdnic           C:\Windows\System32\drivers\kdnic.sys
18:50:30.0517 0x13a0  kdnic - ok
18:50:30.0542 0x13a0  [ 9A83FA0EC9B0DCED2CBC49DD05901920, 14D2F241235E2693C68BCCF05D83F2A1C9A7BE185C83E7C6C63EF0F654892F95 ] KeyIso          C:\Windows\system32\lsass.exe
18:50:30.0552 0x13a0  KeyIso - ok
18:50:30.0580 0x13a0  [ 1E99B26BDB9B9C9BC775ED4543558560, 890870A6737B4910735D1B23F714AA73FCCD1C131D135FACBA6909F06D31B3FF ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
18:50:30.0592 0x13a0  KSecDD - ok
18:50:30.0606 0x13a0  [ 6198A79011C67497B324798B3D4272CE, C587F7D86837550D07918F6AACF26BF65EBAF7FF57475DC9196B4D011E83AE47 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
18:50:30.0619 0x13a0  KSecPkg - ok
18:50:30.0633 0x13a0  [ 503597D9B72DBD9998F722F12A51ACFC, 9B3585282191163AA70243BAD921ED8725A98454E0D3879E0F671E0E4F56AB4F ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
18:50:30.0645 0x13a0  ksthunk - ok
18:50:30.0673 0x13a0  [ ED5AE20C27F27F293C6C61AEC9881054, 4D5BE394D129BD559B0A9D237F3F59CB3D24C15ABDD97AE2E64931D6B9D14FF1 ] KtmRm           C:\Windows\system32\msdtckrm.dll
18:50:30.0711 0x13a0  KtmRm - ok
18:50:30.0737 0x13a0  [ C529DA0AD5A21878E318801B024AF8E7, A14E8ADCA33C37B1D256CB4926A19F56D2D19B94EDF314A4ED34A8B5AB62CA5A ] LanmanServer    C:\Windows\system32\srvsvc.dll
18:50:30.0760 0x13a0  LanmanServer - ok
18:50:30.0784 0x13a0  [ D6D9F4CAFD3F1A7E30AD02E508552CD2, F0D225E5951CFE1D8349F634CC91BDD5B3F9DCF6233CCB965E99BFEAFE642265 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
18:50:30.0807 0x13a0  LanmanWorkstation - ok
18:50:30.0840 0x13a0  [ 24881F16D2829764681F5FAE7B86D7D3, 290348CFAF3165847E4B53965D22E9D417EE20FFD23293B5C1855C57E6328599 ] lfsvc           C:\Windows\System32\lfsvc.dll
18:50:30.0875 0x13a0  lfsvc - ok
18:50:30.0883 0x13a0  [ 6ED675774BDC3735AB6DA12D29F825CF, 4317C7CF491F4E806975E7A973CFF11CFEE9E94730DDABCC67C3D693691DDDE5 ] LicenseManager  C:\Windows\system32\LicenseManagerSvc.dll
18:50:30.0933 0x13a0  LicenseManager - ok
18:50:30.0957 0x13a0  [ DB789F57CE94C827FBFF709CA5ABD29E, 4CA4DD079A63649C36F76A31C4081F11F5CF6574AC573B63EF930DB19B1D1C95 ] lltdio          C:\Windows\system32\drivers\lltdio.sys
18:50:30.0989 0x13a0  lltdio - ok
18:50:31.0014 0x13a0  [ FECBC6C4981772E5D0F517B34A5496EE, 15DB097BFB221B91E580E5CD1DD6B34A9A2C78A1A6FCE4162A855BB4AFE673E9 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
18:50:31.0043 0x13a0  lltdsvc - ok
18:50:31.0047 0x13a0  [ 24C87BDC66AB192FEB273BEE5FD5AA38, BFAAE1F2450DEBD1A14877C046C6EBA91014DB0B5D0FB95EC14CB714B773B3C0 ] lmhosts         C:\Windows\System32\lmhsvc.dll
18:50:31.0074 0x13a0  lmhosts - ok
18:50:31.0104 0x13a0  [ 3BB39166E446D456C277C17DFEA3DAC6, 1A08E1D017BBCE91E508D876835FA7AD2DA0859A8CFE8F8F31B4F12B48E2573D ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
18:50:31.0116 0x13a0  LSI_SAS - ok
18:50:31.0136 0x13a0  [ 25CF625E46307A5D6674C8DFA1A289AA, 1D00EB70B6B0157013A7C15EF194F51B8596612066EF31B337D8134D6BD0BBBE ] LSI_SAS2i       C:\Windows\system32\drivers\lsi_sas2i.sys
18:50:31.0148 0x13a0  LSI_SAS2i - ok
18:50:31.0162 0x13a0  [ 722C52B12EA4C198D56994934C9DDAB6, 5F4AB818251C770821BAF41C19B1C483A31CCC28EB96F2084D4092E33EAF906B ] LSI_SAS3i       C:\Windows\system32\drivers\lsi_sas3i.sys
18:50:31.0180 0x13a0  LSI_SAS3i - ok
18:50:31.0200 0x13a0  [ 3371FF1D5D745C3306C6A2C4E99C25A9, DD6F0099001501BAEDDF8411FBCD930BD6472662D209199249203CB2FDAA23FB ] LSI_SSS         C:\Windows\system32\drivers\lsi_sss.sys
18:50:31.0213 0x13a0  LSI_SSS - ok
18:50:31.0254 0x13a0  [ E2EEF074F5260378F9AAFBCD592319A3, DC56674A08FA03FA7AF7DD8B3CC55D8324D1CB51546092A990A935FF9AB48A3C ] LSM             C:\Windows\System32\lsm.dll
18:50:31.0292 0x13a0  LSM - ok
18:50:31.0320 0x13a0  [ C692B9C0352315417CF49FFA664957A3, C2D4F9A936B809889F7C51FE48214A1923175913A6C5D0B72D3BA469214B5174 ] luafv           C:\Windows\system32\drivers\luafv.sys
18:50:31.0341 0x13a0  luafv - ok
18:50:31.0360 0x13a0  [ 6A4C75FD28F60062FEA3DF3B15D956C0, 4FC58F3320D33BDACCF759A50C623A3E58E4320749E6691B397DF0C8EAAA8A6F ] MapsBroker      C:\Windows\System32\moshost.dll
18:50:31.0396 0x13a0  MapsBroker - ok
18:50:31.0448 0x13a0  [ CFBC6C6D8A492697CABD1D353EE64933, DDAA844908324740C891EB8F08E2A8BB00457063B31C4A762745C1C2415FC12D ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys
18:50:31.0454 0x13a0  MBAMProtector - ok
18:50:31.0566 0x13a0  [ 40C126CB15FAB7D6C66490DCA9C1AED2, B32CEE2D2409232C245427D5E9647FDF59AF1D8AB5E8A98EE2D1F1314599FD14 ] MBAMService     D:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
18:50:31.0640 0x13a0  MBAMService - ok
18:50:31.0692 0x13a0  [ 08DECFCB9BA97786165A69AB1015BC30, EDC8C8447B57BD412E2DEBCA9B5B1B58C19D40105DC7CE9520DE214081696B05 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
18:50:31.0700 0x13a0  MBAMWebAccessControl - ok
18:50:31.0713 0x13a0  [ B2ED9A7A5587A128A0EFD0DBE7662E95, 63070AAFD44E3CD2A4B262DF27222B103455A4D8C2E45914502BFA03D84D32C9 ] megasas         C:\Windows\system32\drivers\megasas.sys
18:50:31.0726 0x13a0  megasas - ok
18:50:31.0761 0x13a0  [ 083F71488E6780A67290273180256EA5, 5F43CE66F5A48850BABB70F4D219FDD002F9BC2B2F0E58E66FE2C492AA335E50 ] megasr          C:\Windows\system32\drivers\megasr.sys
18:50:31.0788 0x13a0  megasr - ok
18:50:31.0812 0x13a0  [ E7C9F74D8CAAB1FF7964C27C070FB16C, 76CCD9109E1031A336B7E275368520FFB60D500E24444B04066F205D1ED5BA2B ] MEIx64          C:\Windows\System32\drivers\TeeDriverW8x64.sys
18:50:31.0832 0x13a0  MEIx64 - ok
18:50:31.0864 0x13a0  [ 5907A10D46747A2B6DBFD6A198254DC2, 6C283E9DC75C7ABFD270D6FABBF4F54628A1786E7CE2F603BF664CBB9E4FE583 ] mlx4_bus        C:\Windows\System32\drivers\mlx4_bus.sys
18:50:31.0892 0x13a0  mlx4_bus - ok
18:50:31.0911 0x13a0  [ 91ED6F0EDF4158D63C52194F17D4F42E, ACF543978E253650C167C6C370699AEA7340EBCECF7CAB904CBDD334D1BD6928 ] MMCSS           C:\Windows\system32\drivers\mmcss.sys
18:50:31.0927 0x13a0  MMCSS - ok
18:50:31.0944 0x13a0  [ 2C4CC9F6ADBED5A6D131FDB97A78FF68, 04DC76E3F0959C0A9B00DF2133B075194FB7DCBD76832B9D25B0E37223D300DC ] Modem           C:\Windows\system32\drivers\modem.sys
18:50:31.0956 0x13a0  Modem - ok
18:50:31.0977 0x13a0  [ D8DB13529C8AD6FBAF8E2F382024374F, 13025035C479E2EF76EDCB90D83BE65B4ADD9F7000AD31FEAD628D5DDFE69158 ] monitor         C:\Windows\System32\drivers\monitor.sys
18:50:31.0998 0x13a0  monitor - ok
18:50:32.0016 0x13a0  [ 2DAAF1EE1C30F2FCF59851A64ADA0422, 08CD801E63E2862DE058CD732C3DB3D87B1A2898732365440E3F8919932E96FC ] mouclass        C:\Windows\System32\drivers\mouclass.sys
18:50:32.0026 0x13a0  mouclass - ok
18:50:32.0042 0x13a0  [ D30FE074503283829ED194BCAE6239C3, A3A127381ECC798417D01F6B8A1894EED7D71989047BC4D1D74D0E7C8394AD65 ] mouhid          C:\Windows\System32\drivers\mouhid.sys
18:50:32.0067 0x13a0  mouhid - ok
18:50:32.0089 0x13a0  [ 828BD02B24D0DEAA985C4E040F1AB21D, 798B2F2C5CA163E3099148A6A97C061C02BC33A1822D4F28C0701A3CCA2C76F2 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
18:50:32.0099 0x13a0  mountmgr - ok
18:50:32.0111 0x13a0  [ 989A1BBD9C49B107B4A47D06E6827A69, 62D90B22AE13AC84324DFD5FEBA595813AD07469B7FEC41380CE223D93020CCA ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
18:50:32.0124 0x13a0  mpsdrv - ok
18:50:32.0168 0x13a0  [ 51D4584BC245AF1B679CAF01669ACE23, AA0BE0D216A00113F5C07DD95CBC15C4448BF2CBD4954CF16D1E9689455447DB ] MpsSvc          C:\Windows\system32\mpssvc.dll
18:50:32.0219 0x13a0  MpsSvc - ok
18:50:32.0241 0x13a0  [ C1E74DD1D84861D8F12FF8BC0BA11975, 5912A0455C840F5C8AD6383823C9C7DE6FF8B5CAF1B72EA181864999891EAF30 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
18:50:32.0260 0x13a0  MRxDAV - ok
18:50:32.0285 0x13a0  [ 1DF2C5FD2710A13B07E663A12F0E0EEA, 8EBCA9269F52A5CF602F5DE2B0C2AB2BFD82F415465DBB74C73D43F321D9FD46 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
18:50:32.0309 0x13a0  mrxsmb - ok
18:50:32.0324 0x13a0  [ 185932B1149BD707F8A13174CDAB365B, BC26CB10DD6E81A94477564444E91F76D47E685E897BD77B9C1393F0D31AB718 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:50:32.0351 0x13a0  mrxsmb10 - ok
18:50:32.0368 0x13a0  [ 99E24D4DBACBC569833B9A67710D65E7, 93BC765E7B6E19E83AFF783DE8080A80A1D69A406B496F1E36C47AE6E86AFB76 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:50:32.0385 0x13a0  mrxsmb20 - ok
18:50:32.0397 0x13a0  [ 6F8BE4FB6262012E61BBADB5444628DC, E87489207AA48106C08E4BADDD8D66D14BC9DD6AD2A4CDD880BA655932CDDE60 ] MsBridge        C:\Windows\system32\drivers\bridge.sys
18:50:32.0412 0x13a0  MsBridge - ok
18:50:32.0437 0x13a0  [ 283BDF3602F442336DAF242BDD07FB98, 185F046B6AA24FFD1567F00AA70357C82002FF627E329CEF9B926645A6DDB172 ] MSDTC           C:\Windows\System32\msdtc.exe
18:50:32.0452 0x13a0  MSDTC - ok
18:50:32.0466 0x13a0  [ 7C55F1751CAC199680D4489D1EE46544, 967EC8137D321F6139C3382D19A338FD97A3023EB654747AC57C2008BE4AF677 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
18:50:32.0479 0x13a0  Msfs - ok
18:50:32.0499 0x13a0  [ 7395DF6A6C67033E6B3AE97CC838A10F, 143200301419C5920070ABB6E75EF13D218CD21A903CF8BFC431D0695252D7C9 ] msgpiowin32     C:\Windows\System32\drivers\msgpiowin32.sys
18:50:32.0509 0x13a0  msgpiowin32 - ok
18:50:32.0527 0x13a0  [ 09622DBC24D0178F15DB8461BB6970DF, C0B3F9B2219AAF87E417EE9FF54C64B8AD9944E101EA79B5DC81D99E8C2ECF30 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
18:50:32.0537 0x13a0  mshidkmdf - ok
18:50:32.0540 0x13a0  [ 34BB07495C0159BE4189841E16F3BC2F, 264B5735D9A68C85BEDE363D4C0AE1FCC381B39EA884B4BAEE185EB8A873184A ] mshidumdf       C:\Windows\System32\drivers\mshidumdf.sys
18:50:32.0551 0x13a0  mshidumdf - ok
18:50:32.0564 0x13a0  [ 7BF3F0DA362C053918F5F2EC43CE39E2, AA773FA3F83C0C572160D3D0286A697DC628FF4F3655EF21D01C6D1B7BE5DF1C ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
18:50:32.0603 0x13a0  msisadrv - ok
18:50:32.0619 0x13a0  [ 669DA2006C0B9D882D2014617E1E88F5, 090F558818806CAEF6C81D369F8BFFE4A8240295EF37CAA7102A18F4CD20D868 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
18:50:32.0638 0x13a0  MSiSCSI - ok
18:50:32.0641 0x13a0  msiserver - ok
18:50:32.0656 0x13a0  [ B2D0FD21FE67D6434769CC6F7A7883CA, B2368BD72952C6EE6DAF1AA006DF575A3019E4721BEFB108D3DF1B9E07B2BC5D ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
18:50:32.0670 0x13a0  MSKSSRV - ok
18:50:32.0686 0x13a0  [ FB3801F176376286A3F8F20FFB8CDC53, EEF89081665B9BBA93AE9F5912C40C1698E8BA8DBBCCC3BBE0BAB5A86B7E05D4 ] MsLldp          C:\Windows\system32\drivers\mslldp.sys
18:50:32.0700 0x13a0  MsLldp - ok
18:50:32.0712 0x13a0  [ 8CBDF0E7A6CD824352F37A682A33DF7E, 4567FF4C73648FF26EA68EAE2B524B767099789086C158875C97768C77B81359 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
18:50:32.0724 0x13a0  MSPCLOCK - ok
18:50:32.0841 0x13a0  [ 33E5B6261D69ACD4948A5C64B9D8F29F, 1D32340640312372E52E59AFB5DB872E6F9DFE3AC16B56F9D928AE230DA02B8A ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
18:50:32.0866 0x13a0  MSPQM - ok
18:50:32.0909 0x13a0  [ 557DF8C0DBBBF518AC395C6EB1B179AE, B294B5A7882C0C60D91FB853FC87505B6E7638D25E360FDAE002AEBB714ED471 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
18:50:32.0946 0x13a0  MsRPC - ok
18:50:32.0965 0x13a0  [ 0A29AFA668F5DD50482A98ECE70C77A7, 4C1F23B062361D97B1C8D864AB227E5F398F774A99B5E60A1149A4F78D5BEC20 ] mssmbios        C:\Windows\System32\drivers\mssmbios.sys
18:50:32.0975 0x13a0  mssmbios - ok
18:50:32.0992 0x13a0  [ 30CE30877FD5BFADE74FA27D7829BF89, B5EA1F8C91E75722DB1E3E2172C8607FEDBF35BDC4141258A3E6D29D8B0E193B ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
18:50:33.0002 0x13a0  MSTEE - ok
18:50:33.0010 0x13a0  [ 13D88C0B8A2FA001CD72D454955A6974, 19DD5C8BBD07B64F355737436BF702FFC209D84A8855D2224D3377E233D4BB34 ] MTConfig        C:\Windows\System32\drivers\MTConfig.sys
18:50:33.0021 0x13a0  MTConfig - ok
18:50:33.0036 0x13a0  [ 00C7F0F06A0A48B9CDB6B3AC3BE288F0, BF469A2DDF495ACB9FEE9063C6680C95BCC8686682C9EDAE6D1893D4058E8AA6 ] Mup             C:\Windows\system32\Drivers\mup.sys
18:50:33.0048 0x13a0  Mup - ok
18:50:33.0067 0x13a0  [ 8E237527CA260C71D39ED4081BDF3419, CA52DD174C756A404B1FAD3F2A70E50085C2820BF12369259F61DA649101A179 ] mvumis          C:\Windows\system32\drivers\mvumis.sys
18:50:33.0078 0x13a0  mvumis - ok
18:50:33.0107 0x13a0  [ 48D0587A8302FD3302CFE6F59F7345B0, 26D48AF3F7FF4867E179347CD635055DEA9A751C6C61CE2C391A7F74FC0DC1DE ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
18:50:33.0139 0x13a0  NativeWifiP - ok
18:50:33.0161 0x13a0  [ 11BE8117653C542D264788A700AC5BFE, 87EAAC2DF62BB26619DA72950F5EE41DCA1DBDF93F098647F9D200D588F14003 ] NcaSvc          C:\Windows\System32\ncasvc.dll
18:50:33.0190 0x13a0  NcaSvc - ok
18:50:33.0210 0x13a0  [ 286C6276B2BA86F29A0F687D05466277, AC8551536F37717A0ACE4A260F5696D1276F7AC62F669E8F12AA158DD86F71A5 ] NcbService      C:\Windows\System32\ncbservice.dll
18:50:33.0239 0x13a0  NcbService - ok
18:50:33.0259 0x13a0  [ C55DA734ED2A831E0BACAAFA01CEB7FF, 9D989B03D07BBAD287B317D238691664B0694331D6A69B7A1AA3D8AB7D1323FC ] NcdAutoSetup    C:\Windows\System32\NcdAutoSetup.dll
18:50:33.0290 0x13a0  NcdAutoSetup - ok
18:50:33.0307 0x13a0  [ CF8296427834CF8BBB3EE1444C17362D, 6EFBE1F015DFFA0704C66DF5C88089DD5771E1542018E4AE98389CFF3D0B2309 ] ndfltr          C:\Windows\System32\drivers\ndfltr.sys
18:50:33.0320 0x13a0  ndfltr - ok
18:50:33.0370 0x13a0  [ C055015D9B573A7EDAF2B2948E687F36, 0D001E8A0FA6039189A6C10122E42672B841BE7398942D7AB963176F02EFE300 ] NDIS            C:\Windows\system32\drivers\ndis.sys
18:50:33.0422 0x13a0  NDIS - ok
18:50:33.0436 0x13a0  [ A0719D1EBA971DFC5DF5F7CC010385F8, A982487D3A74E66F3C29AAA5B46CE9A0969F07F267DDEFE58C58573573AB0024 ] NdisCap         C:\Windows\system32\drivers\ndiscap.sys
18:50:33.0448 0x13a0  NdisCap - ok
18:50:33.0468 0x13a0  [ 0C557932CCCC65AEB37326DD36504527, C0AF3066DEE4BCC32DB30CCC16B7A91442A8383BB36C7C4E3CC0A5EFE0FAAA9B ] NdisImPlatform  C:\Windows\system32\drivers\NdisImPlatform.sys
18:50:33.0488 0x13a0  NdisImPlatform - ok
18:50:33.0502 0x13a0  [ 56F9345D1945826135FBAB7589592B1F, 6BC2A5900076B917823C7392C582A2648D0C8000F2F65D309D5B48E36D4FB4D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
18:50:33.0515 0x13a0  NdisTapi - ok
18:50:33.0532 0x13a0  [ AADFC340939D99E5D756E713E1D452EB, EFEFDBB2188DE82C2C5E67929861B269FD4C127D34D1DE6D0596ABC33E2C2B51 ] Ndisuio         C:\Windows\system32\drivers\ndisuio.sys
18:50:33.0544 0x13a0  Ndisuio - ok
18:50:33.0561 0x13a0  [ 312DFD787D99D3BF1427B0388BC04F71, C082CA1F332AD57FF2100748518D3D7B3D0F1B042F69BD7401C44B77AFE97462 ] NdisVirtualBus  C:\Windows\System32\drivers\NdisVirtualBus.sys
18:50:33.0573 0x13a0  NdisVirtualBus - ok
18:50:33.0588 0x13a0  [ 2103F43E0A1ECFB14B7E1B889F5F24D7, 6A86E854C89E132DBC9183DE2B9464DC592E7492BE267BA02FE4DAFE6FA87528 ] NdisWan         C:\Windows\System32\drivers\ndiswan.sys
18:50:33.0606 0x13a0  NdisWan - ok
18:50:33.0614 0x13a0  [ 2103F43E0A1ECFB14B7E1B889F5F24D7, 6A86E854C89E132DBC9183DE2B9464DC592E7492BE267BA02FE4DAFE6FA87528 ] ndiswanlegacy   C:\Windows\system32\DRIVERS\ndiswan.sys
18:50:33.0632 0x13a0  ndiswanlegacy - ok
18:50:33.0648 0x13a0  [ 6E98F16983C4AE8703FF9F90AB4B31DD, BB8BD5DB4B5FB31F3A257747C27CBEFA4B7837EC5C0CF3D4F408E626E4003F4C ] ndproxy         C:\Windows\system32\DRIVERS\NDProxy.sys
18:50:33.0663 0x13a0  ndproxy - ok
18:50:33.0683 0x13a0  [ F1B7CC77F412C8D45B2DDCF76EDA4F9D, 25F2AA76E675D9BCC0B1FD47AFEC6DF2D0B47E7B1C8AF6FB27C1ED2FB902961A ] Ndu             C:\Windows\system32\drivers\Ndu.sys
18:50:33.0708 0x13a0  Ndu - ok
18:50:33.0723 0x13a0  [ 824FDC990A3F79069BE468A132EB6888, D09F7A9EC04E37DA504CE54EEC25C312B407B6A8B214CBB074BEB50DE420F52A ] NetBIOS         C:\Windows\system32\drivers\netbios.sys
18:50:33.0735 0x13a0  NetBIOS - ok
18:50:33.0759 0x13a0  [ F0D791348AD254360CC3C3E501CCB745, E4CAB4D3C2CD3169731283B00DEBFE26438BB66A3F0D78BDB68E876A14FC7070 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
18:50:33.0790 0x13a0  NetBT - ok
18:50:33.0803 0x13a0  [ 9A83FA0EC9B0DCED2CBC49DD05901920, 14D2F241235E2693C68BCCF05D83F2A1C9A7BE185C83E7C6C63EF0F654892F95 ] Netlogon        C:\Windows\system32\lsass.exe
18:50:33.0814 0x13a0  Netlogon - ok
18:50:33.0835 0x13a0  [ 7C8A7380CBE45DFD3DF118D8601499A7, C137280B7696F8CF4258BDC8B241C66BB3AA5708C5410D85255E46C7E8284826 ] Netman          C:\Windows\System32\netman.dll
18:50:33.0857 0x13a0  Netman - ok
18:50:33.0881 0x13a0  [ BBE9D72EFC7BD66B28309C3607683DBA, FC372EFBC650CE0BDB117858D840A1FB361947B1C67D1DD16BABA95D0286856A ] netprofm        C:\Windows\System32\netprofmsvc.dll
18:50:33.0912 0x13a0  netprofm - ok
18:50:33.0933 0x13a0  [ 24B38B871128BB08849701CEA722DA1B, 7E62AE8570E7DE83F79012B4D1492DD03496C0678F0BD98DC9C0EFF66D1B8D13 ] NetSetupSvc     C:\Windows\System32\NetSetupSvc.dll
18:50:33.0956 0x13a0  NetSetupSvc - ok
18:50:33.0988 0x13a0  [ FBF2ACE9B10DDE0B4108930D78370E86, 2A4910F071747B786EA49A638B3AAB698DCD0AD7FE702078BA83F85C533A227E ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
18:50:33.0998 0x13a0  NetTcpPortSharing - ok
18:50:34.0010 0x13a0  [ 46E862DA2CF8F351375EF537276B69B5, AC0FE0977E56380849DCE668AC0F5AF183AAB115ED84ADD964E390CC0BEDF6D3 ] netvsc          C:\Windows\System32\drivers\netvsc.sys
18:50:34.0023 0x13a0  netvsc - ok
18:50:34.0054 0x13a0  [ 88CE4AC85F36B6347C1D820FA373B998, E10B5DF8883928A2062FC6180DE4CF0DE33C68622C2E3E4E1AFC56A0682F8E75 ] NgcCtnrSvc      C:\Windows\System32\NgcCtnrSvc.dll
18:50:34.0089 0x13a0  NgcCtnrSvc - ok
18:50:34.0104 0x13a0  [ 9A83FA0EC9B0DCED2CBC49DD05901920, 14D2F241235E2693C68BCCF05D83F2A1C9A7BE185C83E7C6C63EF0F654892F95 ] NgcSvc          C:\Windows\system32\lsass.exe
18:50:34.0114 0x13a0  NgcSvc - ok
18:50:34.0138 0x13a0  [ D5B50FCE0B749FC82BD8FD3A79FF623E, DB5E21011E020C08A5BE2B250BDEF9ACEA9891D6B7022BB9AAA5C6B92A4C87F8 ] NlaSvc          C:\Windows\System32\nlasvc.dll
18:50:34.0168 0x13a0  NlaSvc - ok
18:50:34.0184 0x13a0  [ 41557BE174E9EC6AC703A8A4ADBC6650, 8CF6DF3FDC3C7C44B32851538A67BF86A54AB6444A424D7A20B7A9A94B4158D8 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
18:50:34.0197 0x13a0  Npfs - ok
18:50:34.0206 0x13a0  [ AC3F70FCFBCE97AA2F12BA43EE13B86E, D0AC50FB022C0F3031531CEE210D47FC3244C6FB55FAAD4AAB04081F0A21DAE4 ] npsvctrig       C:\Windows\System32\drivers\npsvctrig.sys
18:50:34.0224 0x13a0  npsvctrig - ok
18:50:34.0234 0x13a0  [ 0AF4872D3D6FD3A030E836DAC2B3EF2D, 03EE7B6FAFC0BB5C26793BC5FF8BD1019AC96B3104688009C1E062C3F4F34D6D ] nsi             C:\Windows\system32\nsisvc.dll
18:50:34.0246 0x13a0  nsi - ok
18:50:34.0254 0x13a0  [ 66A98C407085B8920DF1E6D722F1ADB8, 3FE307E4A9E41B08E0453507E50D6D0C67FA6F4245A863D90181463C749C83B5 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
18:50:34.0265 0x13a0  nsiproxy - ok
18:50:34.0340 0x13a0  [ 5B3D91EB07785D0EDB19449D5C35E30A, 2BA0A72F34B8BE749D99D5EE2CF34CD66803144A9C0751E517AE8A3E44588B07 ] NTFS            C:\Windows\system32\drivers\NTFS.sys
18:50:34.0449 0x13a0  NTFS - ok
18:50:34.0468 0x13a0  [ 383E546EF4982262A0EF6CC2B6E9D525, 3C6C90B62E8EB094E6928C388E5081A3F73DF87B0F34F716B72EA7B6EF71FBB7 ] Null            C:\Windows\system32\drivers\Null.sys
18:50:34.0480 0x13a0  Null - ok
18:50:34.0868 0x13a0  [ A5EE0530F8B4AEF6B319AC4E7190D766, 0BA1A8CF3537C547EC3DC8E323340CE018A36A24975CB8BDB5B5F68A3FEF42C6 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
18:50:35.0210 0x13a0  nvlddmkm - ok
18:50:35.0308 0x13a0  [ 72DD6225BA6055472522195F96473639, 27C8F847B247645061C0CD6DFCC986DA27638A9DFE686040160DFDCF7B3A6E72 ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
18:50:35.0348 0x13a0  NvNetworkService - ok
18:50:35.0369 0x13a0  [ 466F875F1D4C6ABB46AF28007009237C, 26F5A5579737A7CF2267F79DDE5A551149C682D5FD24663B53FCEC5AA6B448CE ] nvraid          C:\Windows\system32\drivers\nvraid.sys
18:50:35.0382 0x13a0  nvraid - ok
18:50:35.0403 0x13a0  [ 76F19EAE7A52CBAF7B8EC428BE6E0DA0, CF1E55D92FA32744A20AB75D466A3E05E6FACF4694F9265C41F5C27C1E7243DC ] nvstor          C:\Windows\system32\drivers\nvstor.sys
18:50:35.0416 0x13a0  nvstor - ok
18:50:35.0471 0x13a0  [ 4680DDDDDBA1CB1D56D49B4A6134155C, BF6E538BC10B23F6D93143F5C48155245852798D4846F401E0DA70A5BCFC74E1 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
18:50:35.0488 0x13a0  NvStreamKms - ok
18:50:35.0648 0x13a0  [ E14F52B60581EE71849CD45186892046, 72B3E92CD34489306AB7D794C4C1F67513DE80C72A847DCF7A3EEFE2254762D0 ] NvStreamSvc     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
18:50:35.0774 0x13a0  NvStreamSvc - ok
18:50:35.0904 0x13a0  [ A26CFCA56DD4557FC8D3274D67ACD2AE, 441B84E045AC7D08FD53427CDB4B6EE3BB9F3D9722AA2428726DC4F3E2DC8331 ] nvsvc           C:\Windows\system32\nvvsvc.exe
18:50:35.0932 0x13a0  nvsvc - ok
18:50:35.0950 0x13a0  [ 35DFC12FD7E44B7CB8CCD7E5A2B3975A, 36E0E39646636F6E027691E5C3903C51479B3F707BDEA40F460FD27E357DA14E ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
18:50:35.0971 0x13a0  nvvad_WaveExtensible - ok
18:50:36.0001 0x13a0  [ 0D0CB77D74B38E0EC62341C19E469D8D, A05D3CC67FEEB2FD219BFAA34BF98CB3F3718042124AF28F0E9FDFB9F132DD76 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
18:50:36.0014 0x13a0  nv_agp - ok
18:50:36.0042 0x13a0  [ EA3FFE8617B9FCA1620AD9876E92F4F1, 68D5143CA71D10A2BB44E29B3C76580596669D0624076BCF6CCBA7AF3140538E ] OneSyncSvc      C:\Windows\System32\APHostService.dll
18:50:36.0067 0x13a0  OneSyncSvc - ok
18:50:36.0104 0x13a0  [ CAFB5A95883158A0579DED2ED5CB0627, B23F7D19142DD3544F96ADB36F152F4EA7F6C524A1281EC26A2B95D7D044822C ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
18:50:36.0135 0x13a0  p2pimsvc - ok

Vielen Danke für deine Mühen.

SmurfThis. · 27.11.2015, 19:01

Code:

ATTFilter

18:50:36.0155 0x13a0  [ 3612CE3432E0A2BE0081E6B488ACF84C, F1A641735FD374CA293FB98FADA2C41E2033B17FECCA3B6D225D0E591AFFF413 ] p2psvc          C:\Windows\system32\p2psvc.dll
18:50:36.0183 0x13a0  p2psvc - ok
18:50:36.0197 0x13a0  [ 38F1AE32339731F6E5A7281AE8042545, 308954518C45D29FC199525F0CC7FE4EA805322EC0B871DDDCBEEC15355514C8 ] Parport         C:\Windows\System32\drivers\parport.sys
18:50:36.0212 0x13a0  Parport - ok
18:50:36.0225 0x13a0  [ 707889D2F95AAE8C9DD254D8767AD908, BE7BD94728D7629F8B7567523FFB42B8979941CEA2EA03E11BFCD51CF119FC27 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
18:50:36.0239 0x13a0  partmgr - ok
18:50:36.0269 0x13a0  [ A09B0D8F9F0FC17EBCE6481AC9FD5CDF, 8E8D68992D98CF3DBC4B70C7902B3EC28A1E2DA8D4DB38F0AD9D52B1A5A1D40F ] PcaSvc          C:\Windows\System32\pcasvc.dll
18:50:36.0295 0x13a0  PcaSvc - ok
18:50:36.0332 0x13a0  [ 2D28307BF258572FA46E643A594CD0EA, 82777308FC355B732BAEAE8D440EA6DE8CBEBAB37A6EAE623202F488B4DDB378 ] pci             C:\Windows\system32\drivers\pci.sys
18:50:36.0349 0x13a0  pci - ok
18:50:36.0362 0x13a0  [ 3D587E4295B11B8480F7ACB09A89D718, 8C3BD62B3451E1B2E7197EDAE381785406DF86C03BEEC486602C642FDD37DBC1 ] pciide          C:\Windows\system32\drivers\pciide.sys
18:50:36.0371 0x13a0  pciide - ok
18:50:36.0391 0x13a0  [ B8F07002B5F1DA23CFF979C2806B09F3, AD5C589A02BB8185AA070420BF30E78BC8BE3C6F9B0F66319A8CA05B70A5ED32 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
18:50:36.0403 0x13a0  pcmcia - ok
18:50:36.0414 0x13a0  [ FF588077D0C6AC2EA3FCBF1903CE08D0, 64BE1646FB6D8CC902B6F386255F7C0420E3C334E14DECD527DD541B43A1DCD6 ] pcw             C:\Windows\system32\drivers\pcw.sys
18:50:36.0425 0x13a0  pcw - ok
18:50:36.0437 0x13a0  [ 5A4426450501534666F9E6157E258A0B, 2735EE7C5581D2FF5454662623BE94D08043C894580D540F0E5D3E21C7D7EC45 ] pdc             C:\Windows\system32\drivers\pdc.sys
18:50:36.0449 0x13a0  pdc - ok
18:50:36.0483 0x13a0  [ 688F47C342E1BBC87A48AB71D316233E, CE99AB67C7E7A11AC69C2F4513AEBDACA385BA7F8CC49BE6313CE04ED404A0E7 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
18:50:36.0520 0x13a0  PEAUTH - ok
18:50:36.0606 0x13a0  [ 303D2C90139ABFC1D12E279F0F101710, CE02E335A72011004395DC635EB819B3ED8D00041B9C59024DE246366AF00559 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
18:50:36.0704 0x13a0  PeerDistSvc - ok
18:50:36.0719 0x13a0  [ 189265498945593D5256CFF7FEBB9665, 9CB88CC3C726BFE6EDCE8D9E4544306AACD3FB9E969E3A438D9FD533F25C1281 ] percsas2i       C:\Windows\system32\drivers\percsas2i.sys
18:50:36.0729 0x13a0  percsas2i - ok
18:50:36.0741 0x13a0  [ 9B86965114F6831A5130EFE6657B17D9, 4C5B657DB9A9F96BFD3EAFA756ED60D911EB58857C439F5FA6E495A473ED1145 ] percsas3i       C:\Windows\system32\drivers\percsas3i.sys
18:50:36.0753 0x13a0  percsas3i - ok
18:50:36.0810 0x13a0  [ 8A5A52C855FB5BFEF019AE9938AEA8AE, 77CB8A09B209DB5895319BA9D073A67148926E22C47836343050DFC178AFAEEE ] PerfHost        C:\Windows\SysWow64\perfhost.exe
18:50:36.0842 0x13a0  PerfHost - ok
18:50:36.0879 0x13a0  [ 42172DDE99D9F2AB3B0739506699A566, 6B0FAD656A24787E9429EA89F7DC03CC535D8E5D093378F93164ECADCEE5CFDF ] PimIndexMaintenanceSvc C:\Windows\System32\PimIndexMaintenance.dll
18:50:36.0913 0x13a0  PimIndexMaintenanceSvc - ok
18:50:36.0988 0x13a0  [ 82FDEC2A262728F62F2111A84CC04B16, A1FCE38D4F55F10BB9B3BFB7D9E3EF7C27D499D9C8882218C8A9A73487798188 ] pla             C:\Windows\system32\pla.dll
18:50:37.0073 0x13a0  pla - ok
18:50:37.0100 0x13a0  [ 7B3DA16FAA498838BB457E0B7E380EDF, B73DCFFA60886F10765E4B76A58CFF18C08CAFEE620700361FC8FEC7E80B5958 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
18:50:37.0118 0x13a0  PlugPlay - ok
18:50:37.0128 0x13a0  [ F1E9C35A8DFD4D64382CFB9019A950F9, 24E0381C6909F9876D6DC4697DC6405FE18DF91531891B2CCA6DB0191B9C6DF4 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
18:50:37.0139 0x13a0  PNRPAutoReg - ok
18:50:37.0158 0x13a0  [ CAFB5A95883158A0579DED2ED5CB0627, B23F7D19142DD3544F96ADB36F152F4EA7F6C524A1281EC26A2B95D7D044822C ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
18:50:37.0180 0x13a0  PNRPsvc - ok
18:50:37.0212 0x13a0  [ 62C0BD179961132EF2C5B952210C11F5, 2473FBB3619D0DDA229D4BEC30CEFE7497C27ED3844A5B7655F6F2D328FEAF61 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
18:50:37.0239 0x13a0  PolicyAgent - ok
18:50:37.0254 0x13a0  [ 6390391EDFC43DD11CE9E6AADCAC20EA, C8BC222FFBB9E47489D16BB5248E0E2E594011C46CFF71F5DBCC4D5CC6788098 ] Power           C:\Windows\system32\umpo.dll
18:50:37.0269 0x13a0  Power - ok
18:50:37.0297 0x13a0  [ 1433EB7908E5E1E20FFD50E4126C3484, 34D81680C8F2F2C5892FC0E0A6DFCBB241AFF493267A1FE182ED28AE9F712456 ] PptpMiniport    C:\Windows\System32\drivers\raspptp.sys
18:50:37.0314 0x13a0  PptpMiniport - ok
18:50:37.0459 0x13a0  [ 12E2582F69ACA40A6BAE91DA578CBF34, 648C6394763906AA4163976DA2C3308F8B706486D9D8F16258CB1D61C2929930 ] PrintNotify     C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll
18:50:37.0610 0x13a0  PrintNotify - ok
18:50:37.0639 0x13a0  [ 22DE54C3974E4FD98F61D095C22C59B7, 64E78D6DEC4A28ABB0A23F2CF078459D81796EC79235AE45976ABB4F72B1D1E6 ] Processor       C:\Windows\System32\drivers\processr.sys
18:50:37.0653 0x13a0  Processor - ok
18:50:37.0692 0x13a0  [ 27D0B024BB356C6BEB1214B61E47DE02, 8CBDD62E243CC652F2197AE83DEDD21D91D2792558A6D7D1CC680B37607DEF4B ] ProfSvc         C:\Windows\system32\profsvc.dll
18:50:37.0729 0x13a0  ProfSvc - ok
18:50:37.0748 0x13a0  [ EDD52C352CBAAAD13FD7BD5DCEA309B3, EC7D294B23FD5C309E5C4C455896937B85DC615E1B36C9F8F3BDC90E75EBF9CF ] Psched          C:\Windows\system32\drivers\pacer.sys
18:50:37.0764 0x13a0  Psched - ok
18:50:37.0798 0x13a0  [ DD3FF2053356D11C785999BBC633F3E0, E9A5B7C657F4523E5DEF7AEE7ECFCC94E911FC65F1D491BEF01239F357B8D8E0 ] QWAVE           C:\Windows\system32\qwave.dll
18:50:37.0842 0x13a0  QWAVE - ok
18:50:37.0858 0x13a0  [ 51590F442C6E5D43244BA30DDB0CE79D, 9C7FD0A19753C13FD4A27EBFD60703A2414D5A2F6F451F0B32769C8D7C953980 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
18:50:37.0870 0x13a0  QWAVEdrv - ok
18:50:37.0888 0x13a0  [ E951E70019865B06126AF850BCCA2026, C590DE38C7603149AFA0271D57EEBAF956F18F50584FCF04BC2C8D8CEC5C5932 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
18:50:37.0902 0x13a0  RasAcd - ok
18:50:37.0932 0x13a0  [ 0BF8607133AE264BC3C41A5BAA5FFB7B, 9A4F6AC6013AB5C2A99BCFC2CCF161DD225DE8D85D61579655ADBF04A4383A61 ] RasAgileVpn     C:\Windows\System32\drivers\AgileVpn.sys
18:50:37.0949 0x13a0  RasAgileVpn - ok
18:50:37.0956 0x13a0  [ FE0976379F9E7DB6F7945FCEB88C7E29, BA331CE55C02E86478714DA87FAC547B50D53BC7D02BCA5A64D484DED44BFAA5 ] RasAuto         C:\Windows\System32\rasauto.dll
18:50:37.0976 0x13a0  RasAuto - ok
18:50:37.0999 0x13a0  [ CA60F6C03611AF1710BC903ED9F566FB, B5C9E8BAC631738761E11168AB68EB1ECC5EC96BF9A8248B9127DCF744CA4691 ] Rasl2tp         C:\Windows\System32\drivers\rasl2tp.sys
18:50:38.0019 0x13a0  Rasl2tp - ok
18:50:38.0045 0x13a0  [ 586A17C10D417D889F1FF7D8636E2F34, EEDA4EE8D2BC5C8C7756AB79F1F19AF8B1C4057996748FAE4E3F37844DB0EB33 ] RasMan          C:\Windows\System32\rasmans.dll
18:50:38.0105 0x13a0  RasMan - ok
18:50:38.0127 0x13a0  [ E5FA41160F5A3D78D8F7765E5C5F6BB0, 31BA423FFFC3206717DC34B482149421EE28B27A4A3BA2DC78C3B3A9EE0C1365 ] RasPppoe        C:\Windows\System32\drivers\raspppoe.sys
18:50:38.0147 0x13a0  RasPppoe - ok
18:50:38.0165 0x13a0  [ DF0834AE921E633E05D1FDC55C318957, 851A00961224DACBEF9DA427122F6B4B73BB99849D5ECB55DBBD311B2EA84C33 ] RasSstp         C:\Windows\System32\drivers\rassstp.sys
18:50:38.0182 0x13a0  RasSstp - ok
18:50:38.0218 0x13a0  [ FC9B7AC6E2B837EF7CD6C64F7068D41D, 9B0DD842033E82BC7EE80416A62B084BF5200923EB7A6C80415BB28004E9B5E3 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
18:50:38.0252 0x13a0  rdbss - ok
18:50:38.0291 0x13a0  [ FB7375657F8A5932C35EAA45E9B4B416, 99594708BFD6DC9F8CECBF092058D4D0D4F1BC3204E86F9FDAD5207ED5ECF194 ] rdpbus          C:\Windows\System32\drivers\rdpbus.sys
18:50:38.0315 0x13a0  rdpbus - ok
18:50:38.0333 0x13a0  [ A32AED8C644734B283A7C9D08D76064D, A12F67C57E43B6A2FE6449EA3822B1108FE70C66AF9911798777F85D760E384C ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
18:50:38.0355 0x13a0  RDPDR - ok
18:50:38.0380 0x13a0  [ 37CC7E41243EFBB4FBC0510E5CA32A02, 634E2F81D61F937F30E5ECE01FB581E090C6DA073EF7B1A3F6083ECAF363CB46 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
18:50:38.0390 0x13a0  RdpVideoMiniport - ok
18:50:38.0409 0x13a0  [ 9C5002D1DC437DCE6D11FA4448D994D7, D86F36DCCB609A04FC5EA18E5AC35AD15B97831D159D6E1E73CE36CEB62D2D35 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
18:50:38.0423 0x13a0  rdyboost - ok
18:50:38.0457 0x13a0  [ E726FE08AFAFAC6F8E75E5DCC3BF8177, DF60BD3CBDC6CA286AD9FDCA7ED823CC418AC5D0E054FA813E83B5CC3A639737 ] ReFSv1          C:\Windows\system32\drivers\ReFSv1.sys
18:50:38.0495 0x13a0  ReFSv1 - ok
18:50:38.0561 0x13a0  [ BABEE4A896D005BD0D205F1C932DA25E, 269FDF65BE3A226FA2A5CA25085366E32ADAD30A020484FE844962E8C61CB1D2 ] RemoteAccess    C:\Windows\System32\mprdim.dll
18:50:38.0600 0x13a0  RemoteAccess - ok
18:50:38.0622 0x13a0  [ 066062967A77867BDCF665960EFDAD32, 68143DBDFA7C68786C22F5CC4E80200255C663A844069C080E7816F423ABB1F4 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
18:50:38.0650 0x13a0  RemoteRegistry - ok
18:50:38.0705 0x13a0  [ FF4AC9FCFB2DD0E1D2F24E59D8A7682D, 4866141497BC0256D47A1AF05E49A40555C37291EA0C6F8DEC361A8EF55F3331 ] RetailDemo      C:\Windows\system32\RDXService.dll
18:50:38.0777 0x13a0  RetailDemo - ok
18:50:38.0805 0x13a0  [ 6451FE42C35FDE3862D99579444F4A8F, BD56A1120AACF6143E6EB739E12BEE86DF142F1159865608BDF1BBE54B66AFCE ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
18:50:38.0819 0x13a0  RpcEptMapper - ok
18:50:38.0843 0x13a0  [ F24131EAD1D0B73463052BB042A37B6C, 43B5772310B200DF1914C8E4D10401A0BCE9082BDEAC34736AFB2920B39D7956 ] RpcLocator      C:\Windows\system32\locator.exe
18:50:38.0855 0x13a0  RpcLocator - ok
18:50:38.0895 0x13a0  [ 5E57B9FBB4E9C43EE5B69BEE01A1819F, A1F8D1E52AF446CEA2EB50064E3A24B713B19197D61C3EAECB81B3CCD80558E7 ] RpcSs           C:\Windows\system32\rpcss.dll
18:50:38.0932 0x13a0  RpcSs - ok
18:50:38.0953 0x13a0  [ DC66C1D262D64E30A30B68E9F21AC74B, A5ED3D31BCD68DBC00A956787517ACA167C86F5FFDAF7C9A85505FA2B705C6CB ] rspndr          C:\Windows\system32\drivers\rspndr.sys
18:50:38.0968 0x13a0  rspndr - ok
18:50:39.0012 0x13a0  [ DFE1602D6A08A0C27C48DD8C4EFB11CA, 18368C921075780ABAFCC489BB69C5CBCE788A8C29B5CEAFB23C8EAB42CD1129 ] rt640x64        C:\Windows\System32\drivers\rt640x64.sys
18:50:39.0040 0x13a0  rt640x64 - ok
18:50:39.0069 0x13a0  [ 6810EC2EB8167C914F2AC47F4696F9A9, 2AFA140E66CBAE9EAB11DF41DE1B7396778D749FEBDF21EDF3EE0C84201091C4 ] RTSUER          C:\Windows\system32\Drivers\RtsUer.sys
18:50:39.0085 0x13a0  RTSUER - ok
18:50:39.0109 0x13a0  [ 88F7703F2A4677C828124AE2110D3EBC, 529F6A5815806F2EA2235802BD28AF8D7A40E7799356BD3EC337C9E71B6B53E6 ] s3cap           C:\Windows\System32\drivers\vms3cap.sys
18:50:39.0121 0x13a0  s3cap - ok
18:50:39.0152 0x13a0  [ 9A83FA0EC9B0DCED2CBC49DD05901920, 14D2F241235E2693C68BCCF05D83F2A1C9A7BE185C83E7C6C63EF0F654892F95 ] SamSs           C:\Windows\system32\lsass.exe
18:50:39.0165 0x13a0  SamSs - ok
18:50:39.0180 0x13a0  [ B467E932FE4E16E201DC7E56870CB559, 6FCE9A2DFC5D222BBEA4AA271A17B830FCF8EAE44B07BEE5FF34AE50CABCBB6A ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
18:50:39.0195 0x13a0  sbp2port - ok
18:50:39.0225 0x13a0  [ 3E115C63649402D321D396F8D606C9B0, F4BA7FE0E89D563A57B6865E4CF1334998987D11A0D70FF7491726A507B40DF4 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
18:50:39.0255 0x13a0  SCardSvr - ok
18:50:39.0262 0x13a0  [ 67EFFD3D1BB6D2B67DF7F8FDCB1A51FC, DE41539FAC730F5CFF6C8754ECFF1253AFDC1C86743AE71B61D716B7A84E85FD ] ScDeviceEnum    C:\Windows\System32\ScDeviceEnum.dll
18:50:39.0283 0x13a0  ScDeviceEnum - ok
18:50:39.0303 0x13a0  [ 31DDA0716EC265CA57DAF9D2295FD76F, E6F39C1B3CF81918277DB8C6E3DF9A82812E1C9063DEB1FB85FE433DC9A16CBA ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
18:50:39.0318 0x13a0  scfilter - ok
18:50:39.0353 0x13a0  [ 38CCB522278850EB76022849D7A55B13, EF125C4032AA5B304BCFE7233D8109665162B497EE0D2F55EEE7834C10CB9F09 ] Schedule        C:\Windows\system32\schedsvc.dll
18:50:39.0403 0x13a0  Schedule - ok
18:50:39.0432 0x13a0  [ 320E7A02D81A468E8C1FEEFDB856AFAE, E65127D3D6B628F9D19EA509FEBD9E4DC1BF20D0C62C3C9E1D7087DF972B2AA7 ] SCPolicySvc     C:\Windows\System32\certprop.dll
18:50:39.0450 0x13a0  SCPolicySvc - ok
18:50:39.0472 0x13a0  [ CC41D16FB823F9BE167BE773F225CD1F, 97020D419CFC161A4EEF238F8580ADC2D026221217BF41728C54F52ACDBB9FCB ] sdbus           C:\Windows\System32\drivers\sdbus.sys
18:50:39.0493 0x13a0  sdbus - ok
18:50:39.0512 0x13a0  [ A906C527B838A4922611C63EBD250F91, 6BB0054A9C2408138BDF49D834FF99B5B9764E7747ABC15016F54FBA1D28394F ] SDRSVC          C:\Windows\System32\SDRSVC.dll
18:50:39.0542 0x13a0  SDRSVC - ok
18:50:39.0558 0x13a0  [ F4BF50A7D16A97A887BFA0F193693C42, EEBF5AAC149C72F490BAC954B25BB6882B10FC38F93CA4F4829A06702B1ECEF9 ] sdstor          C:\Windows\System32\drivers\sdstor.sys
18:50:39.0573 0x13a0  sdstor - ok
18:50:39.0591 0x13a0  [ 648A299839E8F48A946C41DE270D28F5, EEC9A5FCBE3FF78FB5E0452FF1932A8B0C7399688041E22555703CB1977A4428 ] seclogon        C:\Windows\system32\seclogon.dll
18:50:39.0615 0x13a0  seclogon - ok
18:50:39.0630 0x13a0  [ 29452A9DA3E3482F0C2963312F979053, E1782D36C336C4B4C261AD665C1E9051905AA86020E08FC94069972AF4C4DB4B ] SENS            C:\Windows\System32\sens.dll
18:50:39.0659 0x13a0  SENS - ok
18:50:39.0707 0x13a0  [ 756B5D3A1E2747DC1C93914CE512FA65, 0A3E605DAA5AD93DC313CEE8AF143D514FD18DA819DE6BCB45C193684D50DCB8 ] SensorDataService C:\Windows\System32\SensorDataService.exe
18:50:39.0789 0x13a0  SensorDataService - ok
18:50:39.0806 0x13a0  [ 99CED7670E8B3908C01398AAF1A3DF63, 8D36C6A8A2B453968D7025AB934675374821D315E6AD18F2A5972C1FCC9067C1 ] SensorService   C:\Windows\system32\SensorService.dll
18:50:39.0840 0x13a0  SensorService - ok
18:50:39.0858 0x13a0  [ 4E848DE29E4279C7F25EF5B34ED94FDD, FD7B0673F4CFA6EB66D7212288223419BFFA02EBF1F1D85F155B5397C6FB21E9 ] SensorsSimulatorDriver C:\Windows\system32\DRIVERS\WUDFRd.sys
18:50:39.0878 0x13a0  SensorsSimulatorDriver - ok
18:50:39.0900 0x13a0  [ D2FEE824B4AA0BE377F1353E5F915BF4, 00D754C62F3482BBD0EA72C896139C39D15192B2D9FCC7B755D1FB9DF9FCFD9B ] SensrSvc        C:\Windows\system32\sensrsvc.dll
18:50:39.0918 0x13a0  SensrSvc - ok
18:50:39.0934 0x13a0  [ 9DB0BBE3ABE1F49651AE51EC5BCABE58, 0B46C1F231F41766AB73EE7E9834D3CDACA602D12E702D9277E28B47417D9CA4 ] SerCx           C:\Windows\system32\drivers\SerCx.sys
18:50:39.0946 0x13a0  SerCx - ok
18:50:39.0970 0x13a0  [ C4AF79C37334D995D95C22C14FDBF7FD, 4D4985921261909F2123467A22EDB102B490710F60AB935624435E5BB808A0E9 ] SerCx2          C:\Windows\system32\drivers\SerCx2.sys
18:50:39.0995 0x13a0  SerCx2 - ok
18:50:40.0015 0x13a0  [ FC541A272F47BE03E67A9FCB87FA8C3E, 730A3616FD67E9F2832442144B2655A8EF78B9AFCB204113E73E257256491354 ] Serenum         C:\Windows\System32\drivers\serenum.sys
18:50:40.0039 0x13a0  Serenum - ok
18:50:40.0052 0x13a0  [ 2A5F5F95FCA123DCBF53B5F603B64789, DE5C9E1D88B2C180B137DA7839F3EF6C936A171ABA49F89C10EE9C73A2226F3F ] Serial          C:\Windows\System32\drivers\serial.sys
18:50:40.0081 0x13a0  Serial - ok
18:50:40.0099 0x13a0  [ C8738887228B7BFA3B1A906816A8BB12, 328283569201791891D5E9FB3028DB5B9FD93A7BEFC00C7DEBC2CC5731DE64D5 ] sermouse        C:\Windows\System32\drivers\sermouse.sys
18:50:40.0119 0x13a0  sermouse - ok
18:50:40.0156 0x13a0  [ B1CB58853153397DFFA2D13A81451D09, CC9B3B064711E9B5CB38DC1C84DC410033939848BD31BB0D12F990E8154F357E ] SessionEnv      C:\Windows\system32\sessenv.dll
18:50:40.0190 0x13a0  SessionEnv - ok
18:50:40.0210 0x13a0  [ 67832B68752CDF7FDE56949E4A2E70BF, A72320EA8575A751DF86A1EE7969AD9D548D6185F2520197262E11B79FF8222B ] sfloppy         C:\Windows\System32\drivers\sfloppy.sys
18:50:40.0221 0x13a0  sfloppy - ok
18:50:40.0256 0x13a0  [ F10E5536E1C753E01CF19FA4F466CE90, C9897F22B176D84CA233F864078895E3DAD4DAD090FACBB01BD6E59EE337B47C ] SharedAccess    C:\Windows\System32\ipnathlp.dll
18:50:40.0285 0x13a0  SharedAccess - ok
18:50:40.0327 0x13a0  [ 4AC12D495B3CB4275F74C68A7A017561, DC53EBD606ECCD8BCF6D618C0EB58B03F5C20F09E0F0AEDE9B8082D6B208B19A ] ShellHWDetection C:\Windows\System32\shsvcs.dll
18:50:40.0370 0x13a0  ShellHWDetection - ok
18:50:40.0386 0x13a0  [ ED058030296CF9B79C8D48BF43724323, 01DC7C2590DF48116CD1A126F207FE5DE439A53286BAE3736E22EE3D1CA80BE3 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
18:50:40.0397 0x13a0  SiSRaid2 - ok
18:50:40.0418 0x13a0  [ 633D3D1581E9DCCD5A2D8F039104C9A5, C44B5097016C2AEC8B41F77425FE44413562F9DCF0C0C11CA69D8178970B4706 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
18:50:40.0431 0x13a0  SiSRaid4 - ok
18:50:40.0482 0x13a0  [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
18:50:40.0497 0x13a0  SkypeUpdate - ok
18:50:40.0524 0x13a0  [ 35B8FC714C2E7F07F7DC7C64452153F8, 6D45EB01B5F972ED0E5520E771F007FFEE892054FABDB3DD00D3E9915D3A0A31 ] smphost         C:\Windows\System32\smphost.dll
18:50:40.0543 0x13a0  smphost - ok
18:50:40.0568 0x13a0  [ DE3A5C27EC842A113F68A2705FF63B00, B134EF63708A892B673B539F544F7980FF72838D822E8E4CCDDB359B22CB8805 ] SmsRouter       C:\Windows\system32\SmsRouterSvc.dll
18:50:40.0604 0x13a0  SmsRouter - ok
18:50:40.0636 0x13a0  [ CD1056818A6FCEF4D32BD1D6E34070D5, F5BFB61ACB220A73B0DC4487B049F52E9F9FA2D4188C001E7A5838D47CEA6343 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
18:50:40.0652 0x13a0  SNMPTRAP - ok
18:50:40.0693 0x13a0  [ 187B4AD4446C59F8FCC4A10F473EE3D1, 0AAD961B3D7B3484DC89CB86F3EC96CEBFABB7224A5BFB48083DE8F1805EA7B4 ] spaceport       C:\Windows\system32\drivers\spaceport.sys
18:50:40.0715 0x13a0  spaceport - ok
18:50:40.0728 0x13a0  [ 2799FCA215919FDC9A87C5FCAB530828, BDE968BF26693AA4D70AB669896BCA49C6F533EA226386B35B0EA589A55227B5 ] SpbCx           C:\Windows\system32\drivers\SpbCx.sys
18:50:40.0738 0x13a0  SpbCx - ok
18:50:40.0797 0x13a0  [ 58C17D92AD61EC7A98B05F4FAD0D205A, B881134A1BD9194145A9D18BDB34D57E2C167F06C2A9368459D0C33E6E0D6501 ] Spooler         C:\Windows\System32\spoolsv.exe
18:50:40.0835 0x13a0  Spooler - ok
18:50:41.0001 0x13a0  [ 5C31E109943E67CFC801810C00AB63EE, 9A80D7CDA1135EBCE10E753986A59CFA3D8D49F9B0BE38FDF99880B1DD88C41D ] sppsvc          C:\Windows\system32\sppsvc.exe
18:50:41.0261 0x13a0  sppsvc - ok
18:50:41.0295 0x13a0  [ AA1F23501511EFE9CF9771F6B20E8D45, E786852D9877CCFD35444F8FC694467132F868D87A8C344FD1016FFDE74695A5 ] srv             C:\Windows\system32\DRIVERS\srv.sys
18:50:41.0326 0x13a0  srv - ok
18:50:41.0361 0x13a0  [ F5B169EDF9D5E3C7200D89D30E065D13, 12BAF3A3CB76F0900FA53681C9AD16F40308F493BA22C0F60E1E268D0D6AF825 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
18:50:41.0409 0x13a0  srv2 - ok
18:50:41.0435 0x13a0  [ 2E142E027F0AA698BA4DCE49CBDB43CD, A21027BBBC75A55A8B302D028113A0683016E4C72790A8C561DDB1AE7FDB4289 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
18:50:41.0458 0x13a0  srvnet - ok
18:50:41.0492 0x13a0  [ BF71B3FB5B7557CB740CDB09C5FB50D9, D6F9E65FDC9C4ADAFE82D94F71A1F5960DB3BEEBF4FE5B2D087515C4FAA5F287 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
18:50:41.0525 0x13a0  SSDPSRV - ok
18:50:41.0563 0x13a0  [ EF1BC04215C201ADA3F7F5A2F034EA21, E1A7A0FA2032B9E7D3951100E74C04D93CD848C88D23D57FBA0BFA2816B29C61 ] SstpSvc         C:\Windows\system32\sstpsvc.dll
18:50:41.0586 0x13a0  SstpSvc - ok
18:50:41.0659 0x13a0  [ C26E2C89EFB4BB39CD135B5DED804B78, 99288C6023DC6AC6554521EA671AB387ACE2AE2BCDE145C7012202842FF40841 ] StateRepository C:\Windows\system32\windows.staterepository.dll
18:50:41.0811 0x13a0  StateRepository - ok
18:50:41.0878 0x13a0  [ 5852D5FADD589643B6C1B5BE9D257A50, 38DC6CEB0AA6AF4FD046A9CF7571E345E52D30471E248E2B99FC6D5622257145 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
18:50:42.0169 0x13a0  Steam Client Service - ok
18:50:42.0182 0x13a0  [ DDE064A4298FD1FBF804D3ED691E7EDB, B0D117B1FC0DA2CB76F5F63699E2F108930B6C6721AC443111D48215ED624278 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
18:50:42.0192 0x13a0  stexstor - ok
18:50:42.0236 0x13a0  [ 60F04DF1AB55D6D4BDA02052DD20537E, 52996EDF2C06968DADC9BDF24E4039929B81643493C7193B8CC4A6BD1A3AE761 ] stisvc          C:\Windows\System32\wiaservc.dll
18:50:42.0269 0x13a0  stisvc - ok
18:50:42.0293 0x13a0  [ 32C95F44108C3E7DB58F773346E3C9D0, F852D8ECA06080EA6DE1A90509071965A750D9CFC9627F0D4DB8ECC57133B0B5 ] storahci        C:\Windows\system32\drivers\storahci.sys
18:50:42.0304 0x13a0  storahci - ok
18:50:42.0319 0x13a0  [ 8883C8CE4942A99B84E1CC6EFA19738E, 60C1CDA4382F8EE70D810DBB1BCAF5F389433563FF23EEB84859612F396D8CE6 ] storflt         C:\Windows\system32\drivers\vmstorfl.sys
18:50:42.0330 0x13a0  storflt - ok
18:50:42.0350 0x13a0  [ 7042792AC7045D1EE8CC9FE743FD5194, F0CF2E542A51C887B476FAAFFA35504A85C3D127CCBD03C13C24984AEDCF506D ] stornvme        C:\Windows\system32\drivers\stornvme.sys
18:50:42.0363 0x13a0  stornvme - ok
18:50:42.0374 0x13a0  [ 63513EF3121689B3A59BD217618A2E42, DE9B89732801DEC60BD116D58CFB427F7E37F093BE8A9F6E0CAC729B5346B314 ] storqosflt      C:\Windows\system32\drivers\storqosflt.sys
18:50:42.0402 0x13a0  storqosflt - ok
18:50:42.0447 0x13a0  [ CC96FF061C772340F2ED89ABBA567ADC, 028CD44405B7FAFC7BF331DD729E44E0594A63386F48CF39D7725A58B3DE22D6 ] StorSvc         C:\Windows\system32\storsvc.dll
18:50:42.0497 0x13a0  StorSvc - ok
18:50:42.0533 0x13a0  [ 000F5CFCEF0F06DC8FD1D2F568E48AE4, C1FE485E57A1B912CE79556E0EFF03CC11362E7966D250E3AA4962DCCB8F8EE6 ] storufs         C:\Windows\system32\drivers\storufs.sys
18:50:42.0546 0x13a0  storufs - ok
18:50:42.0559 0x13a0  [ 7415087F9006D6818F85F3CBD79B1A50, C768EBB2263375D285D689FEEF546147D42D7376977424A4D6FD655CC78EA7CD ] storvsc         C:\Windows\system32\drivers\storvsc.sys
18:50:42.0572 0x13a0  storvsc - ok
18:50:42.0591 0x13a0  [ E49858EA5865A015EB78B7F7C1C07DE2, 1ADBBAC2D2E2E3C40AB0BDDE068001E76A8DAB79C54F06479F7A4567DAD7A7A8 ] svsvc           C:\Windows\system32\svsvc.dll
18:50:42.0611 0x13a0  svsvc - ok
18:50:42.0668 0x13a0  [ 802278EE4ACCE9EA1F1481DF20EB1667, E78F0DA2CA0B2C2DF3B7E3B2A22C03380FE649813EE6EB31067C5FB6727DB7BD ] swenum          C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys
18:50:42.0678 0x13a0  swenum - ok
18:50:42.0701 0x13a0  [ 313D2C0DBA0B23A8302254FD317D2EC8, 20B98D6F33FEC7ACBCEED9757A3FEAD837FA7BA378BA25575A33EA45E076FC6B ] swprv           C:\Windows\System32\swprv.dll
18:50:42.0731 0x13a0  swprv - ok
18:50:42.0745 0x13a0  [ 12D0CB1DCAE6725B6CA54CC2038C4C8C, 7D224298E440B8C5FDD99A52485A6245DE5109C9A02E65AD38F1EC6DBF4AEEF2 ] Synth3dVsc      C:\Windows\System32\drivers\Synth3dVsc.sys
18:50:42.0758 0x13a0  Synth3dVsc - ok
18:50:42.0794 0x13a0  [ 96C0C843A82CD8C2E8CD16F37FD4017A, C8D25D43D6D17903FE71482FCD108CE5A53FB3BDCF11D7CA5300E8277A0CA724 ] SysMain         C:\Windows\system32\sysmain.dll
18:50:42.0857 0x13a0  SysMain - ok
18:50:42.0898 0x13a0  [ 8863F06F520C1C76254B7DB45057BADA, EE8DA20185FBE37F64E8FE2A6FB477D602159AD6B63FFDD807981E6D28629888 ] SystemEventsBroker C:\Windows\System32\SystemEventsBrokerServer.dll
18:50:42.0923 0x13a0  SystemEventsBroker - ok
18:50:42.0938 0x13a0  [ E5D6E551EB3233E71956FF4755B9C35D, 05690916058D98EEAE785DE9DF19A42A9490B130E68FA5E2F3781D87425998F8 ] TabletInputService C:\Windows\System32\TabSvc.dll
18:50:42.0956 0x13a0  TabletInputService - ok
18:50:42.0975 0x13a0  [ FE33F417DFD9847CB571D3C7EE5FA7E3, B3C7BE7998B9B093DD969A2588EE8CEBD9771331A63D4B1D86A188317B5EE71C ] TapiSrv         C:\Windows\System32\tapisrv.dll
18:50:42.0998 0x13a0  TapiSrv - ok
18:50:43.0076 0x13a0  [ BA8CDF0FC9469005A84453A128EEB6AE, 5E037452DAB8B9004BCB761FD2161477E1D22D6F398CE97665F95FD0D6DD26B5 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
18:50:43.0168 0x13a0  Tcpip - ok
18:50:43.0242 0x13a0  [ BA8CDF0FC9469005A84453A128EEB6AE, 5E037452DAB8B9004BCB761FD2161477E1D22D6F398CE97665F95FD0D6DD26B5 ] Tcpip6          C:\Windows\system32\drivers\tcpip.sys
18:50:43.0307 0x13a0  Tcpip6 - ok
18:50:43.0341 0x13a0  [ D378A1AF58AFA84BB6AC753F2C1BE9F4, 8BBA623193D51E6A8DD0627FA08C93B918EF1BA2EEBA46CDBB86FE6A1007FDEE ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
18:50:43.0355 0x13a0  tcpipreg - ok
18:50:43.0375 0x13a0  [ 28E1E63A1AC65E17B3194238FA2CF3BF, 9A52D6DD14BEBB7B407B2703A111D1B302F1B84AA40A14D21FCA554F395E935D ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
18:50:43.0388 0x13a0  tdx - ok
18:50:43.0605 0x13a0  [ 2AA61246A5B813C1B12BCCFAA6F23DD8, 74EE3DB839A0F4BC781294803281DB2248D013B8808FF05F2EE9597C14C6FEED ] TeamViewer      D:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
18:50:43.0721 0x13a0  TeamViewer - ok
18:50:43.0747 0x13a0  [ CCDBD2817C10A4F631280CBB3AE44FFB, A022DEF4D3CF75F41FA26275347F4BA38A513AD32FF18385C2E756DECB61D404 ] terminpt        C:\Windows\System32\drivers\terminpt.sys
18:50:43.0758 0x13a0  terminpt - ok
18:50:43.0804 0x13a0  [ A0608264209A836821D6AB8C67B108AB, 7912C75F72BCAB7426A2E00C597C8D94C185B5DD31BD6C4BE5D56FECD5B0D9EA ] TermService     C:\Windows\System32\termsrv.dll
18:50:43.0871 0x13a0  TermService - ok
18:50:43.0885 0x13a0  [ 261830B1E3650E4471E1F98850B929B7, D281B8A93315E64C7AF5002E5BFBE6AFF8B35FD6AA747AE07D7AA96F4AFAA613 ] Themes          C:\Windows\system32\themeservice.dll
18:50:43.0906 0x13a0  Themes - ok
18:50:43.0927 0x13a0  [ 9E214AB0D3B5D01BEFE98E39DF25A630, 14E410F7ADD39D17A986E25D7DEC070BEDDB50D2F2C589232CE5FCD48C95AE70 ] tiledatamodelsvc C:\Windows\system32\tileobjserver.dll
18:50:43.0960 0x13a0  tiledatamodelsvc - ok
18:50:43.0982 0x13a0  [ 354DAA630928CD4DA2BC84A0DA4ADA9D, AFAE4948EA4F899267DC52DF9A06450FC3E77083B563E541581DA90685C7E98C ] TimeBroker      C:\Windows\System32\TimeBrokerServer.dll
18:50:43.0999 0x13a0  TimeBroker - ok
18:50:44.0029 0x13a0  [ F4AEDABC8F3A9D632F8206D0C7F8CA09, 6E76749CD4B857B4D930267E3CF448AF4D14FAC851873C5E71572E62CAD2FA36 ] TPM             C:\Windows\system32\drivers\tpm.sys
18:50:44.0042 0x13a0  TPM - ok
18:50:44.0059 0x13a0  [ 2D0338A3009075FCCB119CB7F3280F82, F42F3B8DA0F8B2C99892E66CDEF471A1CD30A30CF437ADFF464A2C786A6B87A6 ] TrkWks          C:\Windows\System32\trkwks.dll
18:50:44.0074 0x13a0  TrkWks - ok
18:50:44.0116 0x13a0  [ 62D6A900C5DFF2ECF131384E5A5C85AB, 1AF1FB868C59DFF452E3351EE5070B2C746DE606B9E2F1834CE2256F41ABE7A9 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
18:50:44.0137 0x13a0  TrustedInstaller - ok
18:50:44.0151 0x13a0  [ 676C801CAA61AADD0C918CC536A74B78, DB5DEC9445272E46D32DC2A9A99A9AE45729E424E61C679ECFD973AA88457BE6 ] TsUsbFlt        C:\Windows\system32\drivers\TsUsbFlt.sys
18:50:44.0171 0x13a0  TsUsbFlt - ok
18:50:44.0186 0x13a0  [ 2BB6CC0DD1CEE86330743B56FA9FE91F, EE71E3DEECA7599947AB09E8967FE8066348D82B4C17D8CBE800FCDE9CF4989D ] TsUsbGD         C:\Windows\System32\drivers\TsUsbGD.sys
18:50:44.0196 0x13a0  TsUsbGD - ok
18:50:44.0216 0x13a0  [ 20FFDE9DE8B57B51262EC54940DE4C82, 23C058D94B8565BB6B8455CF9385724A8A28616C0EC4DA95C323260D643A4326 ] tunnel          C:\Windows\System32\drivers\tunnel.sys
18:50:44.0233 0x13a0  tunnel - ok
18:50:44.0250 0x13a0  [ D0BE5EA1652D55029C9A898FB8ACFCE0, 80C4BC30B967C79B3457F43EB9B530CA2571C6158958879AC55E5A81F71CFF15 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
18:50:44.0261 0x13a0  uagp35 - ok
18:50:44.0274 0x13a0  [ 13C15E4B238895FE4731DB1D612EEB5F, 211E4B05AA09F7FBE2487C3241A98D1F970FEE5B9B1BAED2788B57233BFC4104 ] UASPStor        C:\Windows\System32\drivers\uaspstor.sys
18:50:44.0285 0x13a0  UASPStor - ok
18:50:44.0298 0x13a0  [ BEBB8B55C5F99B69EEE39A9D7BADB21E, 08A094EA38AB58CC70108A3BDFDD3251897DC4B13FDDAD54C1B063137836EF34 ] UcmCx0101       C:\Windows\system32\Drivers\UcmCx.sys
18:50:44.0408 0x13a0  UcmCx0101 - ok
18:50:44.0446 0x13a0  [ C4F7D38D959CF6297747CCEEEF021726, B0CFB947AD2FA9957205EAD1943E92AC310E50F9B8B694EF9B9EA6B581607B41 ] UcmUcsi         C:\Windows\System32\drivers\UcmUcsi.sys
18:50:44.0493 0x13a0  UcmUcsi - ok
18:50:44.0522 0x13a0  [ FB1C1D8B96A482F3581338D6752E1D6C, 0FFAEE3E088614B3483C459513BB9D78EB76B574696FD877A3CDF6A11378F46C ] Ucx01000        C:\Windows\system32\drivers\ucx01000.sys
18:50:44.0547 0x13a0  Ucx01000 - ok
18:50:44.0561 0x13a0  [ 4E1543ACE2F6E2846713E5123D9D4159, 1A6AFC525A80D1F19B14CDAD38790DF7293911C4D0E8301161D92201B934C3D4 ] UdeCx           C:\Windows\system32\drivers\udecx.sys
18:50:44.0573 0x13a0  UdeCx - ok
18:50:44.0594 0x13a0  [ CDCA9CC1D8293E75218D8FF85F2337A4, 173086C08DDC7625E026E425F1E2B5D6C795771BEAE9BFF6093E3592FBEBD323 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
18:50:44.0618 0x13a0  udfs - ok
18:50:44.0626 0x13a0  [ BC683E19307C533C7161DB7A58051347, 5553BE3421986FDD9992EBFD883CDA151F7166C01BBFA3E9183A3C93E41D79B6 ] UEFI            C:\Windows\System32\drivers\UEFI.sys
18:50:44.0635 0x13a0  UEFI - ok
18:50:44.0652 0x13a0  [ D14B42C26DE402F316D49667D15446F0, 61CC9FF03EF78631C800EFD8D587975CB94D53DB80E6F60BD13BA52EC5690D3D ] Ufx01000        C:\Windows\system32\drivers\ufx01000.sys
18:50:44.0667 0x13a0  Ufx01000 - ok
18:50:44.0684 0x13a0  [ 192470BE4321791FBB25F379D0141D6F, AD120F8F98BD99014471CE60630B5FEE7555AB261C98B7D9819FE23C386655F7 ] UfxChipidea     C:\Windows\System32\drivers\UfxChipidea.sys
18:50:44.0695 0x13a0  UfxChipidea - ok
18:50:44.0711 0x13a0  [ F7BD838E84E6B286DBCE068EFB8C0800, A55188C8F8BDC739A7ED7D29CDCB2A17468BBB158E13D804963B31ED73449520 ] ufxsynopsys     C:\Windows\System32\drivers\ufxsynopsys.sys
18:50:44.0725 0x13a0  ufxsynopsys - ok
18:50:44.0755 0x13a0  [ C844E39B900FFA46CA8DD2BBA670A077, 0CB6232BCE47C59821DF25D6ED33E85C3E32DDAB101AA8A2C22B5401E73F5D5B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
18:50:44.0772 0x13a0  UI0Detect - ok
18:50:44.0786 0x13a0  [ A25842AC180F0E8B02380ECB8ADA1AF5, AF22E7559C5EF8DC22A2B9E27FFFFF075B1D1B68A8307266BD9473E0FAF36BEF ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
18:50:44.0797 0x13a0  uliagpkx - ok
18:50:44.0809 0x13a0  [ 21088F43172525C7E02D335A3327F46C, B04AD471A7DFE83AB557DB4540616B7DF4A1904F8BDDCB920D449FCEE6F36FD5 ] umbus           C:\Windows\System32\drivers\umbus.sys
18:50:44.0822 0x13a0  umbus - ok
18:50:44.0842 0x13a0  [ 294A291B5D48FE8F38DD94B7272442C5, 66C9139636760C92C1E04FCF440C432FF6C5A94E1577CAFE1D61FCF2D30472ED ] UmPass          C:\Windows\System32\drivers\umpass.sys
18:50:44.0852 0x13a0  UmPass - ok
18:50:44.0877 0x13a0  [ 3427889AECC3B6912A0A01D095E32B98, 322AE14B74295ACFC124719BBEF8809201150A184E262EC55E26D2B45787BF9D ] UmRdpService    C:\Windows\System32\umrdp.dll
18:50:44.0897 0x13a0  UmRdpService - ok
18:50:44.0940 0x13a0  [ F36871BFDB69C76D71D0BD98D4392BE2, 2C884E7440035AF292DFF121ECBD8FDD671A50B3468EE06ACA0D2DD244EA5BC0 ] UnistoreSvc     C:\Windows\System32\unistore.dll
18:50:45.0002 0x13a0  UnistoreSvc - ok
18:50:45.0038 0x13a0  [ BD693208673F40BA21AA70B69F1D439C, E324947C2DD34386A83B09E73668F1CCED127AC91194B8BF7EC4C8E36CF8203E ] upnphost        C:\Windows\System32\upnphost.dll
18:50:45.0066 0x13a0  upnphost - ok
18:50:45.0083 0x13a0  [ A7A52EDDC3FAF183D6AC4774690ADF13, 630A0331F2EFA2DC7EFDACD08D8DF5C85BFDA30FF1525050FF54E069AFA45F6C ] UrsChipidea     C:\Windows\System32\drivers\urschipidea.sys
18:50:45.0093 0x13a0  UrsChipidea - ok
18:50:45.0114 0x13a0  [ 2EEA0897DD9E30E958B508D557F0B5E4, BE051A3AA5DFF56310FAB67AD19AC0443A3580542886EF3554EBE18F1323596F ] UrsCx01000      C:\Windows\system32\drivers\urscx01000.sys
18:50:45.0125 0x13a0  UrsCx01000 - ok
18:50:45.0140 0x13a0  [ DC54D775A3A61E4CDE871B4E38A1459A, CC996A9D293201BBD285E7B629B12EE88574702B8AC7BB4149439D6A25A07F7E ] UrsSynopsys     C:\Windows\System32\drivers\urssynopsys.sys
18:50:45.0153 0x13a0  UrsSynopsys - ok
18:50:45.0172 0x13a0  [ 18B63A0980F4AA1E6D7879B253980E37, 05F96DBE0A3DE2A685DEEBA8B6838A47AEB7CE2EBE8EB6BAD67B36DCF7E73589 ] usbccgp         C:\Windows\System32\drivers\usbccgp.sys
18:50:45.0185 0x13a0  usbccgp - ok
18:50:45.0195 0x13a0  [ 1C60A1A3C8E1E819E16F12BAEB1C83F8, E255BD173DBF091C5EA07381862E23C1FD761489EC396E312974FBC124E1F33A ] usbcir          C:\Windows\System32\drivers\usbcir.sys
18:50:45.0208 0x13a0  usbcir - ok
18:50:45.0239 0x13a0  [ 9A3E39F85DC6E3B9F792F1095ACFF788, 66B8E137A5232E9F717907CFD49FE624AE101F4DE14E2960849DABF7A877E87A ] usbehci         C:\Windows\System32\drivers\usbehci.sys
18:50:45.0251 0x13a0  usbehci - ok
18:50:45.0289 0x13a0  [ 758B05374B34D13ADCDFE27B741E42D4, 61871D880289B94FBBD821B88882F9BEE10E51D2009FEA64DE7FF40DD2EF885A ] usbhub          C:\Windows\System32\drivers\usbhub.sys
18:50:45.0311 0x13a0  usbhub - ok
18:50:45.0342 0x13a0  [ 69EB556E0A693ADCCFC83A380C44BD8A, D5D64B98A364E1719CC3B09693EABD3B706543930D23F49BCB0903D58C510512 ] USBHUB3         C:\Windows\System32\drivers\UsbHub3.sys
18:50:45.0388 0x13a0  USBHUB3 - ok
18:50:45.0408 0x13a0  [ 72EA850B59F40C25A4FEDDA5FE84EFEB, FB4801AA1FB72FC1C41024916368823E88D53E338640E3BEA865B0F0E7B8EE91 ] usbohci         C:\Windows\System32\drivers\usbohci.sys
18:50:45.0434 0x13a0  usbohci - ok
18:50:45.0447 0x13a0  [ 47B2B2DE152E25546944049CA1170BB1, DDA0A806D3108B2475AB13F584EA8CE6F0932C5E394C2C3FA691DFAB8A2BCAC0 ] usbprint        C:\Windows\System32\drivers\usbprint.sys
18:50:45.0459 0x13a0  usbprint - ok
18:50:45.0476 0x13a0  [ 40B2D0D9BEB100F882AED916775EB656, 82E3D4EA1EB8EC363263103AE719091D5F45E3D23B35875BD354B6E2EBCE37F5 ] usbser          C:\Windows\System32\drivers\usbser.sys
18:50:45.0489 0x13a0  usbser - ok
18:50:45.0511 0x13a0  [ CD35467670DF1E6FBF36DA308F0C872B, E1F4F9B1EBD476394CBD0C934842AEE2502B030D97351B0A1E751FF23B011B57 ] USBSTOR         C:\Windows\System32\drivers\USBSTOR.SYS
18:50:45.0524 0x13a0  USBSTOR - ok
18:50:45.0544 0x13a0  [ DFA92EA105DD1073B43FB210EEB03DD4, D940432458F0A04F5013B48197CEA0412C8A909C50605AA21DD08271C90E2FE3 ] usbuhci         C:\Windows\System32\drivers\usbuhci.sys
18:50:45.0562 0x13a0  usbuhci - ok
18:50:45.0591 0x13a0  [ B1484D4BBC6B7B424F1CD1554B0AFB84, C9432978603360182AAA983248FFA97576B3C59BE5DA45473DFA17E2940479C8 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
18:50:45.0609 0x13a0  usbvideo - ok
18:50:45.0629 0x13a0  [ 0728504F9863774E56A54AE66C3F1E6B, 5BA3CC6D98A573AF10B56AF1748B39C83C92FC13E9D5CBF5B344C404A67D52DC ] USBXHCI         C:\Windows\System32\drivers\USBXHCI.SYS
18:50:45.0650 0x13a0  USBXHCI - ok
18:50:45.0798 0x13a0  [ D112261CFA5ECFB64517C44906C7A3A1, 3286844EAB2454618D1DBC256A9FC6B90E17F74D5037CE88D2269262EB8B7131 ] UserDataSvc     C:\Windows\System32\userdataservice.dll
18:50:45.0859 0x13a0  UserDataSvc - ok
18:50:45.0907 0x13a0  [ E9E2B5FFBEFC2CDF14A6E55DD94CC823, A10C011835A65601B8FE3A30F361C224C60084A78085842ADCDA248047530CD1 ] UserManager     C:\Windows\System32\usermgr.dll
18:50:45.0948 0x13a0  UserManager - ok
18:50:45.0981 0x13a0  [ BB8F497F42945BF31FC205AA630B7F9C, F6458E6B16DDAD99E0298EAF01554B441361099731C5C89A142920543B4E6496 ] UsoSvc          C:\Windows\system32\usocore.dll
18:50:46.0005 0x13a0  UsoSvc - ok
18:50:46.0020 0x13a0  [ 9A83FA0EC9B0DCED2CBC49DD05901920, 14D2F241235E2693C68BCCF05D83F2A1C9A7BE185C83E7C6C63EF0F654892F95 ] VaultSvc        C:\Windows\system32\lsass.exe
18:50:46.0031 0x13a0  VaultSvc - ok
18:50:46.0044 0x13a0  [ 26223003DDFB347B5CF3EC0B56DB066B, 78848BE1334C05F28FA431B08225EAE8345B2C66E7D677F9936892FC941EA961 ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
18:50:46.0057 0x13a0  vdrvroot - ok
18:50:46.0109 0x13a0  [ 0C3F4E7684C1D72E85A98689E65A98A1, F7928D3EFC1A83125887ADA5F8E008022B58F0DBA8A711B4D60975D8CE82B595 ] vds             C:\Windows\System32\vds.exe
18:50:46.0145 0x13a0  vds - ok
18:50:46.0176 0x13a0  [ A417284BC6B5C2EEF63F2C5154473530, 55146660CDDD829630C216038E6500CFAC906E67C82881047B665BFEEB286D10 ] VerifierExt     C:\Windows\system32\drivers\VerifierExt.sys
18:50:46.0191 0x13a0  VerifierExt - ok
18:50:46.0219 0x13a0  [ 4C39C05A72EB14C0567501C7E087E564, D3DC122B7E4A5BD345517FE3A9E9E58CD3C78887F9F327AB782BADCAD0F8F2EB ] vhdmp           C:\Windows\System32\drivers\vhdmp.sys
18:50:46.0246 0x13a0  vhdmp - ok
18:50:46.0266 0x13a0  [ C42206A15078596FDE8E89BB629DE342, B95F9EC2413ADE658A7CE4A9BB57A0E125C29205C24BBB120153DACAF4CF9482 ] vhf             C:\Windows\System32\drivers\vhf.sys
18:50:46.0276 0x13a0  vhf - ok
18:50:46.0288 0x13a0  [ 248D9F911A5C94CF8477125DD0C3A291, 418C7285184BCC9DE4E56175960585867A5DB21FEF761C49FF6F1AF1C07D8088 ] vmbus           C:\Windows\system32\drivers\vmbus.sys
18:50:46.0300 0x13a0  vmbus - ok
18:50:46.0310 0x13a0  [ 3E98DD4E0CBD6B4F9CBD0E9E0EDF541E, 2B5CF364F4D1D3359FBEA8BB2E72A1FCE1277E8D893977B751D9AC10A27DF018 ] VMBusHID        C:\Windows\System32\drivers\VMBusHID.sys
18:50:46.0320 0x13a0  VMBusHID - ok
18:50:46.0356 0x13a0  [ 977603C51C997435D59ECFE7E24E0653, 32AB9BBFFEB73F5282848748B46584238BD1B812A1435F7759180D36B33FE806 ] vmicguestinterface C:\Windows\System32\ICSvc.dll
18:50:46.0384 0x13a0  vmicguestinterface - ok
18:50:46.0397 0x13a0  [ 977603C51C997435D59ECFE7E24E0653, 32AB9BBFFEB73F5282848748B46584238BD1B812A1435F7759180D36B33FE806 ] vmicheartbeat   C:\Windows\System32\ICSvc.dll
18:50:46.0420 0x13a0  vmicheartbeat - ok
18:50:46.0434 0x13a0  [ 977603C51C997435D59ECFE7E24E0653, 32AB9BBFFEB73F5282848748B46584238BD1B812A1435F7759180D36B33FE806 ] vmickvpexchange C:\Windows\System32\ICSvc.dll
18:50:46.0458 0x13a0  vmickvpexchange - ok
18:50:46.0472 0x13a0  [ 977603C51C997435D59ECFE7E24E0653, 32AB9BBFFEB73F5282848748B46584238BD1B812A1435F7759180D36B33FE806 ] vmicrdv         C:\Windows\System32\ICSvc.dll
18:50:46.0496 0x13a0  vmicrdv - ok
18:50:46.0507 0x13a0  [ 977603C51C997435D59ECFE7E24E0653, 32AB9BBFFEB73F5282848748B46584238BD1B812A1435F7759180D36B33FE806 ] vmicshutdown    C:\Windows\System32\ICSvc.dll
18:50:46.0532 0x13a0  vmicshutdown - ok
18:50:46.0544 0x13a0  [ 977603C51C997435D59ECFE7E24E0653, 32AB9BBFFEB73F5282848748B46584238BD1B812A1435F7759180D36B33FE806 ] vmictimesync    C:\Windows\System32\ICSvc.dll
18:50:46.0569 0x13a0  vmictimesync - ok
18:50:46.0581 0x13a0  [ 977603C51C997435D59ECFE7E24E0653, 32AB9BBFFEB73F5282848748B46584238BD1B812A1435F7759180D36B33FE806 ] vmicvmsession   C:\Windows\System32\ICSvc.dll
18:50:46.0605 0x13a0  vmicvmsession - ok
18:50:46.0632 0x13a0  [ 977603C51C997435D59ECFE7E24E0653, 32AB9BBFFEB73F5282848748B46584238BD1B812A1435F7759180D36B33FE806 ] vmicvss         C:\Windows\System32\ICSvc.dll
18:50:46.0656 0x13a0  vmicvss - ok
18:50:46.0667 0x13a0  [ 91F165C5D71D9DCB18D4661CF10D1084, 1D55C1FF0F5D860E6DB60EEFE303C0797C98BB0B053ECC255F9B316872288818 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
18:50:46.0678 0x13a0  volmgr - ok
18:50:46.0715 0x13a0  [ 17042748AC05862A0283D32575220080, A85B480CB969CB7678545D2A9EE99CBD2ADFF210FA016A43E092D0711FBB633D ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
18:50:46.0734 0x13a0  volmgrx - ok
18:50:46.0760 0x13a0  [ 823A237D871CD652C6BFD47BECB6810A, 99310521451CB54C29A5DEA54C3A666F95E2A1FF0979D5F9792885A161E90C65 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
18:50:46.0779 0x13a0  volsnap - ok
18:50:46.0799 0x13a0  [ 78727FA284C2095EED660D71CD3C9AEF, 323F0BD5A624DF77973F28C7CF31EC6B3A525496EBF063666623A62B1DB0EA65 ] vpci            C:\Windows\System32\drivers\vpci.sys
18:50:46.0810 0x13a0  vpci - ok
18:50:46.0821 0x13a0  [ 2415961D561E02F5E46B7C1C687A6788, 68A54B9595A0D15D410D5F1656B6EBE3B913A4BA5F71C658C9B99420E6ED327A ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
18:50:46.0834 0x13a0  vsmraid - ok
18:50:46.0898 0x13a0  [ 16419CBDB04DB9FF298169AA93413822, 743AD26F08AF5EFF5DD353E75C3D659B10C3FEC2FEDABB76387B87721B5B98F8 ] VSS             C:\Windows\system32\vssvc.exe
18:50:46.0974 0x13a0  VSS - ok
18:50:47.0070 0x13a0  [ 19D2D8B9F506193A191A8CFD14435ED1, 3359D167B314E14D6E99CA5C79BB5A1C2CEE88823346DD96C4F1B7CD4A2A5D2E ] VSStandardCollectorService140 D:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe
18:50:47.0088 0x13a0  VSStandardCollectorService140 - ok
18:50:47.0115 0x13a0  [ 6AE9A843AE979F2DCCA5A25C07C7A5F8, 3CEC26DE2EEC97929A0FBBD87FF75F8DC387C0988B2047074C8F069ACBEF2587 ] VSTXRAID        C:\Windows\system32\drivers\vstxraid.sys
18:50:47.0132 0x13a0  VSTXRAID - ok
18:50:47.0160 0x13a0  [ BD232C761C59FA8D8EF626CA630E2D2E, E494EFDCE8F6343F49F33F1F03DCD5DEC9CB6F349B1AD302B4D3333B5F6BD8E5 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys
18:50:47.0170 0x13a0  vwifibus - ok
18:50:47.0179 0x13a0  [ 3039687AB65CEE26CF478C1F42FFCD7D, 40E140C6F94B6203767A1493DF8CAE6BA1FB67FBD0C13789444F72410D0E6FF1 ] vwififlt        C:\Windows\system32\drivers\vwififlt.sys
18:50:47.0194 0x13a0  vwififlt - ok
18:50:47.0215 0x13a0  [ 37C868DDE3103130B00AD1313DAB5ACB, BF9C30817A3502F5C0673FD462B18FE1BF37963B29DF09D84B66BDCBF8ECBA81 ] vwifimp         C:\Windows\System32\drivers\vwifimp.sys
18:50:47.0231 0x13a0  vwifimp - ok
18:50:47.0269 0x13a0  [ EC9B6544C569E8D7FAB91772BD7D23F2, 06CC5F21E9A9DD35099CB3E44C3E2BF2F944CE5B71284E6A85E1B681F12BD31B ] W32Time         C:\Windows\system32\w32time.dll
18:50:47.0302 0x13a0  W32Time - ok
18:50:47.0320 0x13a0  [ FC40A7527D39F06D032A6553D22E4BF6, F572FCB5EB3DE16FD6222A5B6A43C81E3A1F838890667D9F0453F82FFCA772FF ] WacomPen        C:\Windows\System32\drivers\wacompen.sys
18:50:47.0332 0x13a0  WacomPen - ok
18:50:47.0360 0x13a0  [ 2CFE8CBE358CC4D5715E010E3B13559F, 54E9BFCE202FA123EB261C226094054950429AAFA304AA714F461B003E070BD9 ] WalletService   C:\Windows\system32\WalletService.dll
18:50:47.0400 0x13a0  WalletService - ok
18:50:47.0420 0x13a0  [ E9E22E116F810DAC98C5EC207F24C916, C518DC57CECA5174E7695F5632555FA08571D5F3A7D6B0C295BA4221AEA67C04 ] wanarp          C:\Windows\system32\DRIVERS\wanarp.sys
18:50:47.0435 0x13a0  wanarp - ok
18:50:47.0438 0x13a0  [ E9E22E116F810DAC98C5EC207F24C916, C518DC57CECA5174E7695F5632555FA08571D5F3A7D6B0C295BA4221AEA67C04 ] wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
18:50:47.0452 0x13a0  wanarpv6 - ok
18:50:47.0512 0x13a0  [ CF9EF65FA66B0F4982FD1FACAB3009B6, 681C1CD5DCAF87EF436B907534E98B0AB4F66BD62E46B8977A7880B854766A27 ] wbengine        C:\Windows\system32\wbengine.exe
18:50:47.0616 0x13a0  wbengine - ok
18:50:47.0648 0x13a0  [ 8F2B0ED6FCA72B34BEEA37E32D0EE106, A86C641A13FDF056B7BA13641551582199DDB08E9490003C74D999518B097C00 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
18:50:47.0693 0x13a0  WbioSrvc - ok
18:50:47.0724 0x13a0  [ C7C1BFA9D6E26F84F1145EBB6F039E89, 0F4761D98AB500BA7A789C73BAB1827F3657515AA3B7915EF979E49E0941971D ] Wcmsvc          C:\Windows\System32\wcmsvc.dll
18:50:47.0762 0x13a0  Wcmsvc - ok
18:50:47.0799 0x13a0  [ 8E7FD07D2C82ACBCA52C4100C20F6542, FB2CD88557ABB5EBE6555CD4E41BF4BDC6FE6BCF26288338F2FB034B966FCBD3 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
18:50:47.0839 0x13a0  wcncsvc - ok
18:50:47.0856 0x13a0  [ 9C776ED423CD03F8ABD54C2557E34416, 282C1208977070EC0280D5ABA0E03A847AEAEE31F35CDAA3C7A02D8477614EB1 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
18:50:47.0877 0x13a0  WcsPlugInService - ok
18:50:47.0899 0x13a0  [ C8BA574B3BA6AE88741AC86B1FE3C1DC, B2422CDE3A6A27B52D270D24298FF69D91D389C68456EC1805BA30AA59BAB839 ] WdBoot          C:\Windows\system32\drivers\WdBoot.sys
18:50:47.0910 0x13a0  WdBoot - ok
18:50:47.0958 0x13a0  [ 796D1C95894BC15B3FEF090C107CBA31, 97917C543CBC13288F2194CB09C3A2759012B74F0D72DDB0896EF42C87348C6D ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
18:50:47.0986 0x13a0  Wdf01000 - ok
18:50:48.0004 0x13a0  [ C5BB7C612B4C852836BEA39593BA5F46, 1E2B123F34500C2A8E983AAAF7F14E409B88DC396A655F19F3E7F15D0C51A762 ] WdFilter        C:\Windows\system32\drivers\WdFilter.sys
18:50:48.0022 0x13a0  WdFilter - ok
18:50:48.0032 0x13a0  [ 9E0442D3880438D006D95C6F63C27274, DB1ED2BCF9986495EFA8A0B3B0156119F2E4F77AE9BDC6377ADF3A6B53C658F6 ] WdiServiceHost  C:\Windows\system32\wdi.dll
18:50:48.0050 0x13a0  WdiServiceHost - ok
18:50:48.0054 0x13a0  [ 9E0442D3880438D006D95C6F63C27274, DB1ED2BCF9986495EFA8A0B3B0156119F2E4F77AE9BDC6377ADF3A6B53C658F6 ] WdiSystemHost   C:\Windows\system32\wdi.dll
18:50:48.0071 0x13a0  WdiSystemHost - ok
18:50:48.0099 0x13a0  [ A9B6536FC0EA0E533B97A4F31F985D56, 5D5ED7DF12A65E1A43674DAAAFB57EE0F625D3BFB6CC24375FEB5E90E7496A9E ] wdiwifi         C:\Windows\system32\DRIVERS\wdiwifi.sys
18:50:48.0134 0x13a0  wdiwifi - ok
18:50:48.0160 0x13a0  [ BD193A7BD34B2E829FAF56306FEE3B09, ADD746D198E21242CEFA01840952B792074EFC473113CD3E7F1ABBA6A4E26AF6 ] WdNisDrv        C:\Windows\system32\Drivers\WdNisDrv.sys
18:50:48.0172 0x13a0  WdNisDrv - ok
18:50:48.0203 0x13a0  WdNisSvc - ok
18:50:48.0250 0x13a0  [ 6A3B5013D5C7840E8CABD63DD021C112, 371CCEEAC7816CFE79ACA8A218CDA16469D9567CB63CC9D18C55FF047011EF25 ] WebClient       C:\Windows\System32\webclnt.dll
18:50:48.0292 0x13a0  WebClient - ok
18:50:48.0312 0x13a0  [ EED4043BC3C2D00067411730EE118354, 5E268DA4DB78C06D8F181E9408B4769F8A12C38DA52C1E986EE0CEE1101E9485 ] Wecsvc          C:\Windows\system32\wecsvc.dll
18:50:48.0333 0x13a0  Wecsvc - ok
18:50:48.0347 0x13a0  [ 6ECD7A49AFC6533821BEEA1876CEB21D, 2E972245F56F589EF1AB9DABB9214B9DE6E290878735476323A3357D8CDFC71F ] WEPHOSTSVC      C:\Windows\system32\wephostsvc.dll
18:50:48.0363 0x13a0  WEPHOSTSVC - ok
18:50:48.0377 0x13a0  [ 09B434867028AF4895A87959EA668686, 26A7DB82E42DCBF3A77092D58AC6392754FD7C538B9EAAEFA88E9AF81DFE8E96 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
18:50:48.0396 0x13a0  wercplsupport - ok
18:50:48.0417 0x13a0  [ DE4E417B867841EE55114E588098B8D5, 878708C93FC1D919E2B9E1C5F94A0EAFC5F28BDAA58D3F29DEEDC8EC3F72D9ED ] WerSvc          C:\Windows\System32\WerSvc.dll
18:50:48.0437 0x13a0  WerSvc - ok
18:50:48.0441 0x13a0  wfpcapture - ok
18:50:48.0465 0x13a0  [ DBF5255B759212E5217A2748567A0B5C, 5E81A9289EC39702179038B686A35FADF9974651E74222F3354B4CBE919887B0 ] WFPLWFS         C:\Windows\system32\drivers\wfplwfs.sys
18:50:48.0479 0x13a0  WFPLWFS - ok
18:50:48.0490 0x13a0  [ 4CD8826BB8320741842A9E53E48AF2BC, 97B22D9DCD0FD31D3A801946173369B0E70B1850576682C8A8180874A61CAD1A ] WiaRpc          C:\Windows\System32\wiarpc.dll
18:50:48.0505 0x13a0  WiaRpc - ok
18:50:48.0518 0x13a0  [ 4375BCBA419D19695CF566082CEF27D3, 6F86FA14B41A03F2BA51B8702F3D59B85FD488405601FA177495E4B7C576850D ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
18:50:48.0529 0x13a0  WIMMount - ok
18:50:48.0531 0x13a0  WinDefend - ok
18:50:48.0559 0x13a0  [ 037BC6DE5F58D4A74A5BB0C12DCECDCA, 92921A2615A41C434BADEB33594DABC166FC9418FBD311A3B2022410B14BFDAC ] WindowsTrustedRT C:\Windows\system32\drivers\WindowsTrustedRT.sys
18:50:48.0571 0x13a0  WindowsTrustedRT - ok
18:50:48.0580 0x13a0  [ 70BCD70BD53F2FE660ED94B025A043EB, B23B96DCAB30C62CB1651B3A2292155AEE8217CE3120574F5158D5E7DA09DE56 ] WindowsTrustedRTProxy C:\Windows\system32\drivers\WindowsTrustedRTProxy.sys
18:50:48.0589 0x13a0  WindowsTrustedRTProxy - ok
18:50:48.0626 0x13a0  [ 82597A56652EB73A95484ADA65EB532B, 8DAFA715B9192CB37422DD6DDAC9B358B12CFE6B52A53240BF980C7559FE9371 ] WinDriver6      C:\Windows\system32\drivers\windrvr6.sys
18:50:48.0668 0x13a0  WinDriver6 - ok
18:50:48.0715 0x13a0  [ D365976E9B065B83BE2BA15A306A5412, 205C630AEB122E5A1A4B401C551E9A6AC282BA6E53FC35E66D8BE9309512E4A5 ] WinHttpAutoProxySvc C:\Windows\system32\winhttp.dll
18:50:48.0757 0x13a0  WinHttpAutoProxySvc - ok
18:50:48.0787 0x13a0  [ 7792AE5403BF8975B6460DFC3428D129, D88F77E973D58C2CA629CC9249877A34ABF31CA1DC2A570666921A8A0DC8DEC7 ] WinMad          C:\Windows\System32\drivers\winmad.sys
18:50:48.0797 0x13a0  WinMad - ok
18:50:48.0839 0x13a0  [ 73B5230F03DC7002A70F11EA1B0BAA37, DFE8BBE52B58589686E402ACED51021E298A491F907EBA5689DF9DAFC3002BA5 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
18:50:48.0865 0x13a0  Winmgmt - ok
18:50:48.0994 0x13a0  [ 2FE85D6AFF90F56A78743CC93B9CA684, B515765C4EE64E7EC16BD6AF037C084CCA6E81180AEF59E18F260406ABE6DF58 ] WinRM           C:\Windows\system32\WsmSvc.dll
18:50:49.0185 0x13a0  WinRM - ok
18:50:49.0222 0x13a0  [ 811F30EB6EE8318C4171CB95AE30B9BD, 765F6BEA3D35D523B5D7ED7356EC0C97A48066A5C4D77C1E6EDAC6F220153385 ] WINUSB          C:\Windows\System32\drivers\WinUSB.SYS
18:50:49.0243 0x13a0  WINUSB - ok
18:50:49.0263 0x13a0  [ DF00381AB8665D48DE3FF794BC6760AB, 749AC7048601061A34BFF507B574AF028FC662C0A98692E7331E667D105EC09D ] WinVerbs        C:\Windows\System32\drivers\winverbs.sys
18:50:49.0273 0x13a0  WinVerbs - ok
18:50:49.0347 0x13a0  [ 11F106F92BCE6521878066C8D374BE4E, 4D72D686B3D8EECCDA13F318CA84D8747337B1A3612E17B0A2D5F422AE7C05AA ] WlanSvc         C:\Windows\System32\wlansvc.dll
18:50:49.0460 0x13a0  WlanSvc - ok
18:50:49.0551 0x13a0  [ 043048A604EC6642B30676AE27E728FA, 82A095873CFB9DAFE985EFBEAD74C46090A2B6BE5B380EAA194A036AD8D292A8 ] wlidsvc         C:\Windows\system32\wlidsvc.dll
18:50:49.0654 0x13a0  wlidsvc - ok
18:50:49.0666 0x13a0  [ 623ED8E10DFEEAB7AE2CD11A0451DB79, 7DDE15F22FD24556D4765F6CFD0F8E2F27370A89A962919646DE2613B33D43D6 ] WmiAcpi         C:\Windows\System32\drivers\wmiacpi.sys
18:50:49.0676 0x13a0  WmiAcpi - ok
18:50:49.0710 0x13a0  [ B2BB87531C4127ED4120E9BF5566827F, 1DDC0F00F215D77D3698F81B56D4488F384E9D017267840EDFA4846742B99B6A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
18:50:49.0746 0x13a0  wmiApSrv - ok
18:50:49.0766 0x13a0  WMPNetworkSvc - ok
18:50:49.0785 0x13a0  [ 8F5140800751CFDAB57AEC1F59E7C7AA, FFE8EE278CE63ED7C0D116563760191102060061948FAA73769A67419E36FE0B ] Wof             C:\Windows\system32\drivers\Wof.sys
18:50:49.0805 0x13a0  Wof - ok
18:50:49.0879 0x13a0  [ B2D8EDBBC339D903BF4073FF7A8D251E, 989F3B94F084720A094C89FD5AF02B5D5BCE5FB127F323E1ADA2890B6AAB3535 ] workfolderssvc  C:\Windows\system32\workfolderssvc.dll
18:50:49.0989 0x13a0  workfolderssvc - ok
18:50:50.0011 0x13a0  [ D1D0BEA5CD87754D276656013F0D8341, 5CDAEF549065BB8DE814C37702BDF5D5C484E29B5B8AEEB94D39EBAE8A4195EB ] wpcfltr         C:\Windows\system32\DRIVERS\wpcfltr.sys
18:50:50.0031 0x13a0  wpcfltr - ok
18:50:50.0044 0x13a0  [ A6FCFE1F691B4A4D266F5D487FADB9FE, 2135D0C13C1295A2F76885E380CD72CB71CEB8E0D9F1C183A35935B27737D423 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
18:50:50.0067 0x13a0  WPDBusEnum - ok
18:50:50.0080 0x13a0  [ 37DCE976B3935380F2F6E39ABB6BF40D, B14E875F6D6503DF0DB6D9D2363316073AEEF394D830EA2270A0DCDA56E1CEC4 ] WpdUpFltr       C:\Windows\system32\drivers\WpdUpFltr.sys
18:50:50.0091 0x13a0  WpdUpFltr - ok
18:50:50.0107 0x13a0  [ 80F0154FD4293E562D54E97811E03499, EDE920F7F95EFBE542FE3CE066B6F7CDE3B9A37DDF3411DC86EACE9EEF294C1D ] WpnService      C:\Windows\system32\WpnService.dll
18:50:50.0128 0x13a0  WpnService - ok
18:50:50.0145 0x13a0  [ 3CD22DD5A790CF7C24D65455E565EA83, 49DB06DF6F38940E7F8691C16586A78BB20E702FD48A34E50987C06B08BDF4DB ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
18:50:50.0163 0x13a0  ws2ifsl - ok
18:50:50.0177 0x13a0  [ EBA916109A176714E6A7BD152387F13C, 7B38B1708B83271ADA8D1CEC7F5F0A75C7F2572185C0961EFC749D5DF16A03F0 ] wscsvc          C:\Windows\System32\wscsvc.dll
18:50:50.0197 0x13a0  wscsvc - ok
18:50:50.0200 0x13a0  WSearch - ok
18:50:50.0297 0x13a0  [ 9EB85802AB625970E05879D15DE56335, B7DCE5E1924A5CEE76CC07FF3B8CEDBBD0DDBB4C4ED0A3BFB8D1ABCAD7C0AA23 ] WSService       C:\Windows\System32\WSService.dll
18:50:50.0422 0x13a0  WSService - ok
18:50:50.0493 0x13a0  [ 24B9E8FDBA1F1B1273C8295173658212, 9E97F829A2DFC7F0E5383B348A037486BDCE5CF0600A24D8A80329268E492570 ] wuauserv        C:\Windows\system32\wuaueng.dll
18:50:50.0616 0x13a0  wuauserv - ok
18:50:50.0646 0x13a0  [ 835F60262E7E310080EA05F6752BF248, 3010B731DF3D52B56EA16FD29B66F5D3AB9412E49CA4C547BAAECA3225C5DC40 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
18:50:50.0660 0x13a0  WudfPf - ok
18:50:50.0677 0x13a0  [ 4E848DE29E4279C7F25EF5B34ED94FDD, FD7B0673F4CFA6EB66D7212288223419BFFA02EBF1F1D85F155B5397C6FB21E9 ] WUDFRd          C:\Windows\System32\drivers\WUDFRd.sys
18:50:50.0693 0x13a0  WUDFRd - ok
18:50:50.0719 0x13a0  [ 44CF3130AEC8914705487C4AEF756A19, 30B09E32DEC02141F9B99ED012E441056C1663A72E4130EF4221ECC0ED87BF4B ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
18:50:50.0735 0x13a0  wudfsvc - ok
18:50:50.0742 0x13a0  [ 4E848DE29E4279C7F25EF5B34ED94FDD, FD7B0673F4CFA6EB66D7212288223419BFFA02EBF1F1D85F155B5397C6FB21E9 ] WUDFWpdFs       C:\Windows\system32\DRIVERS\WUDFRd.sys
18:50:50.0759 0x13a0  WUDFWpdFs - ok
18:50:50.0765 0x13a0  [ 4E848DE29E4279C7F25EF5B34ED94FDD, FD7B0673F4CFA6EB66D7212288223419BFFA02EBF1F1D85F155B5397C6FB21E9 ] WUDFWpdMtp      C:\Windows\system32\DRIVERS\WUDFRd.sys
18:50:50.0782 0x13a0  WUDFWpdMtp - ok
18:50:50.0825 0x13a0  [ C552BC76B8B13EAC59988AC9C6CEFC82, 1739BE487B50CBD21737E1C6EBF1B75CEA6962AF24B026A40DCD3CE7656771D4 ] WwanSvc         C:\Windows\System32\wwansvc.dll
18:50:50.0889 0x13a0  WwanSvc - ok
18:50:50.0929 0x13a0  [ 9BDC2AFCEF4CF1C630D728DE1DBD495A, 5CE19974380CCEC46C181315B349E9A7CE757E19118EC5978A2293D63268BA66 ] XblAuthManager  C:\Windows\System32\XblAuthManager.dll
18:50:50.0973 0x13a0  XblAuthManager - ok
18:50:51.0013 0x13a0  [ 3EDB6162310EA223890C2DF44C68358B, 12053291809CA9C38A30EA4B2DE7115F535531F0925220C63B0312979F9CC707 ] XblGameSave     C:\Windows\System32\XblGameSave.dll
18:50:51.0082 0x13a0  XblGameSave - ok
18:50:51.0101 0x13a0  [ 30021D1E0407B71E8D5D4F8DAE4E656A, EE2E366A1CC033C068176C7E9F876FFA0EF86A15A482B6964E170DE863CFF542 ] xboxgip         C:\Windows\System32\drivers\xboxgip.sys
18:50:51.0127 0x13a0  xboxgip - ok
18:50:51.0163 0x13a0  [ 729B70C81F207541BC6A4ABAE3A8D594, 31F9BC41169D28B397C0D988C367C32FA9A95289E68AB8F38061DA478752A765 ] XboxNetApiSvc   C:\Windows\system32\XboxNetApiSvc.dll
18:50:51.0217 0x13a0  XboxNetApiSvc - ok
18:50:51.0236 0x13a0  [ 6851673B90D8CB332439E0339F81A6B6, 4E95F1A63E6DD58BB5BD6FC1D9784837D5E6F5BCF870C7ECC92DCA1AF20B6A4C ] xinputhid       C:\Windows\System32\drivers\xinputhid.sys
18:50:51.0247 0x13a0  xinputhid - ok
18:50:51.0285 0x13a0  [ 1E80EDF59994925D6AF76D87564588E1, 40D02073F3A17B6C10F496341598D39F55CE70AD626BADE1BBD2021AB1A018F9 ] xusb22          C:\Windows\System32\drivers\xusb22.sys
18:50:51.0310 0x13a0  xusb22 - ok
18:50:51.0311 0x13a0  ================ Scan global ===============================
18:50:51.0344 0x13a0  [ C6BC6E49A7F76AA2BBA58CD08196755F, D02B6B285899E966D19323566A4780D51303D00E66674D7FF4B61991430A69A6 ] C:\Windows\system32\basesrv.dll
18:50:51.0368 0x13a0  [ 70EC9717DC3A1CDF79C703A145E0E5B7, D5ABF42063DFF799FD4099D8A347256CC79B89582B987B3DEE240AFA5BA421BE ] C:\Windows\system32\winsrv.dll
18:50:51.0389 0x13a0  [ F435AFA375ACBAEE44324DD464EDCC11, 815DE470439AE5D96348BEBF971A14FBDCA1D36F31CA0D25F69E5F41817D43D5 ] C:\Windows\system32\sxssrv.dll
18:50:51.0431 0x13a0  [ BB3D8E1C108F7244613FF3993291A922, 1642AF23F200D46F54239C3BA743F1D5ADDC6A32D5F6481264D0C1D7F3E9D533 ] C:\Windows\system32\services.exe
18:50:51.0439 0x13a0  [ Global ] - ok
18:50:51.0439 0x13a0  ================ Scan MBR ==================================
18:50:51.0451 0x13a0  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
18:50:51.0546 0x13a0  \Device\Harddisk0\DR0 - ok
18:50:51.0547 0x13a0  ================ Scan VBR ==================================
18:50:51.0581 0x13a0  [ 2198CC4F31AF06F5D2C63F589E91BE31 ] \Device\Harddisk0\DR0\Partition1
18:50:51.0594 0x13a0  \Device\Harddisk0\DR0\Partition1 - ok
18:50:51.0609 0x13a0  [ 4AB9370945641EB6FCFA30E60205E9B8 ] \Device\Harddisk0\DR0\Partition2
18:50:51.0623 0x13a0  \Device\Harddisk0\DR0\Partition2 - ok
18:50:51.0645 0x13a0  [ 4F62B44C6B959F3E12F1D76C30A67790 ] \Device\Harddisk0\DR0\Partition3
18:50:51.0645 0x13a0  \Device\Harddisk0\DR0\Partition3 - ok
18:50:51.0661 0x13a0  [ 4F100A7200762A45FBE0FF9C7B2C784C ] \Device\Harddisk0\DR0\Partition4
18:50:51.0672 0x13a0  \Device\Harddisk0\DR0\Partition4 - ok
18:50:51.0684 0x13a0  [ B88F9510A4BFE2172DBA1D34232B292A ] \Device\Harddisk0\DR0\Partition5
18:50:51.0695 0x13a0  \Device\Harddisk0\DR0\Partition5 - ok
18:50:51.0696 0x13a0  ================ Scan generic autorun ======================
18:50:51.0825 0x13a0  [ 463C40BFC0FB8FF59049E2CA78695A40, 8D693A061A19E47CCADEEC844D4ACF59B5CD3CE97452018807884D2ACBEDA7FF ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
18:50:51.0883 0x13a0  NvBackend - ok
18:50:51.0914 0x13a0  [ 5DED2A3F11AE916C8F2724947E736261, 35402466FE6D02CC85A27171F55D9F7FD0AAF018D3CC410E46F0B43DCE7EA080 ] C:\Windows\system32\rundll32.exe
18:50:51.0942 0x13a0  ShadowPlay - ok
18:50:51.0981 0x13a0  [ FCEC6F664FA7E5FE323165FBC9314470, 4E5AB1E6C3D2881D95E74F2F28649A7DBC4919CA249829A0E4CD9804E401A025 ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
18:50:51.0997 0x13a0  SunJavaUpdateSched - ok
18:50:52.0260 0x13a0  [ 88F8A731DEA7F49D92F84A0A77C5CC67, 030458922DA43AAF6C95EC430860A73032616851E03E58170F71E918720717CB ] C:\Windows\SysWOW64\OneDriveSetup.exe
18:50:52.0521 0x13a0  OneDriveSetup - ok
18:50:52.0760 0x13a0  [ 88F8A731DEA7F49D92F84A0A77C5CC67, 030458922DA43AAF6C95EC430860A73032616851E03E58170F71E918720717CB ] C:\Windows\SysWOW64\OneDriveSetup.exe
18:50:52.0919 0x13a0  OneDriveSetup - ok
18:50:53.0037 0x13a0  [ 9F2ECA252720B25E8FEC1CAB2984B98D, 476EE2929901CD43F15869B763376393AA0942A3B934532055E037C6DCE3CD2D ] C:\Users\Stefan\AppData\Local\Microsoft\OneDrive\OneDrive.exe
18:50:53.0057 0x13a0  OneDrive - ok
18:50:53.0227 0x13a0  [ 5353A34090BABE3CD48B70569AF0DD12, A211D0B06DC05BFCBD13EBC71275C644B7616E95485ED8336DEFF257B7AE7E80 ] D:\Program Files (x86)\Steam\steam.exe
18:50:53.0646 0x13a0  Steam - ok
18:50:53.0922 0x13a0  [ B05E1CE24CC555E189FCEB1AD07DFCED, 074E7F84C64B6BB54EE3F1BA4EF1804FA33A21ADB1E80904BF56706AA5EB457D ] D:\Program Files\CCleaner\CCleaner64.exe
18:50:54.0096 0x13a0  CCleaner Monitoring - ok
18:50:54.0104 0x13a0  Waiting for KSN requests completion. In queue: 165
18:50:55.0105 0x13a0  Waiting for KSN requests completion. In queue: 165
18:50:56.0106 0x13a0  Waiting for KSN requests completion. In queue: 165
18:50:56.0474 0x1d3c  Object required for P2P: [ 5353A34090BABE3CD48B70569AF0DD12 ] D:\Program Files (x86)\Steam\steam.exe
18:50:57.0106 0x13a0  Waiting for KSN requests completion. In queue: 2
18:50:58.0107 0x13a0  Waiting for KSN requests completion. In queue: 2
18:50:58.0925 0x1d3c  Object send P2P result: true
18:50:59.0132 0x13a0  AV detected via SS2: Windows Defender, D:\Program Files\Windows Defender\MSASCui.exe ( 4.8.10240.16384 ), 0x61100 ( enabled : updated )
18:50:59.0213 0x13a0  Win FW state via NFP2: enabled ( trusted )
18:51:01.0571 0x13a0  ============================================================
18:51:01.0572 0x13a0  Scan finished
18:51:01.0572 0x13a0  ============================================================
18:51:01.0602 0x228c  Detected object count: 
18:51:01.0602 0x228c  Actual detected object count: 0

schrauber · 29.11.2015, 07:00

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

SmurfThis. · 29.11.2015, 13:30

und hier nochmal ein Haufen logs für dich:

JRT:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.1 (11.24.2015)
Operating System: Windows 10 Pro x64 
Ran by Stefan (Administrator) on 29.11.2015 at 13:23:14,73
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 0 




Registry: 0 





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 29.11.2015 at 13:24:54,16
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

AdwCleaner:

Code:

ATTFilter

# AdwCleaner v5.022 - Bericht erstellt am 29/11/2015 um 13:18:12
# Aktualisiert am 22/11/2015 von Xplode
# Datenbank : 2015-11-22.2 [Server]
# Betriebssystem : Windows 10 Pro  (x64)
# Benutzername : Stefan - SWALTER
# Gestartet von : C:\Users\Stefan\Desktop\AdwCleaner_5.022.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****

[-] Ordner Gelöscht : C:\Program Files (x86)\winsta
[!] Ordner Nicht Gelöscht : C:\Program Files (x86)\Winsta

***** [ Dateien ] *****


***** [ DLLs ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****


***** [ Registrierungsdatenbank ] *****

[-] Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Internetbrowser ] *****

[-] [C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Gelöscht : hxxp://www.mystartsearch.com/?type=hp&ts=1426191596&from=cor&uid=WDCXWD5000BEKT-75KA9T0_WD-WXR1AC0Y3001Y3001
[-] [C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Gelöscht : hxxp://www.mystartsearch.com/?type=hp&ts=1426191596&from=cor&uid=WDCXWD5000BEKT-75KA9T0_WD-WXR1AC0Y3001Y3001

*************************

:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Chrome Richtlinien gelöscht

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1402 Bytes] ##########

FRST:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:26-11-2015
durchgeführt von Stefan (Administrator) auf SWALTER (29-11-2015 13:26:56)
Gestartet von C:\Users\Stefan\Desktop
Geladene Profile: Stefan (Verfügbare Profile: Stefan)
Platform: Windows 10 Pro (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\47.0.2526.18\remoting_host.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(TeamViewer GmbH) D:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) D:\Program Files\Windows Defender\MsMpEng.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\47.0.2526.18\remoting_host.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) D:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) D:\Program Files\Windows Defender\MpCmdRun.exe
(Piriform Ltd) D:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation) D:\Program Files\Windows Defender\MSASCui.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [3011152 2015-11-10] (Valve Corporation)
HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\Run: [CCleaner Monitoring] => D:\Program Files\CCleaner\CCleaner64.exe [8551848 2015-10-19] (Piriform Ltd)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  Keine Datei

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2
Tcpip\..\Interfaces\{51014fcf-d4c4-462c-80d2-ac5c0866d9f2}: [DhcpNameServer] 192.168.0.1 192.168.0.2

Internet Explorer:
==================
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> D:\Program Files (x86)\Java\bin\ssv.dll [2015-10-24] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> D:\Program Files (x86)\Java\bin\jp2ssv.dll [2015-10-24] (Oracle Corporation)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe

FireFox:
========
FF Plugin: @videolan.org/vlc,version=2.2.1 -> D:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> D:\Program Files (x86)\Java\bin\dtplugin\npDeployJava1.dll [2015-10-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> D:\Program Files (x86)\Java\bin\plugin2\npjp2.dll [2015-10-24] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&ts=1426191596&from=cor&uid=WDCXWD5000BEKT-75KA9T0_WD-WXR1AC0Y3001Y3001
CHR StartupUrls: Default -> "hxxp://www.mystartsearch.com/?type=hp&ts=1426191596&from=cor&uid=WDCXWD5000BEKT-75KA9T0_WD-WXR1AC0Y3001Y3001"
CHR Session Restore: Default -> ist aktiviert.
CHR Profile: C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-25]
CHR Extension: (Google Docs) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-25]
CHR Extension: (Google Drive) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-25]
CHR Extension: (YouTube) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-25]
CHR Extension: (Adblock Plus) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-11-25]
CHR Extension: (Google-Suche) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-25]
CHR Extension: (Google Tabellen) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-25]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2015-11-25]
CHR Extension: (Google Docs Offline) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-25]
CHR Extension: (ScriptSafe) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf [2015-11-25]
CHR Extension: (Google Mail) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-25]
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\47.0.2526.18\remoting_host.exe [69448 2015-10-14] (Google Inc.)
R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1394360 2015-10-24] (Intel Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [351120 2015-09-10] (Intel Corporation)
S2 MBAMService; D:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation)
R2 TeamViewer; D:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
S3 VSStandardCollectorService140; D:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [52968 2015-07-07] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R3 WdNisSvc; D:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
R2 WinDefend; D:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
S3 WMPNetworkSvc; D:\Program Files\Windows Media Player\wmpnetwk.exe [1473536 2015-07-10] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 athr; C:\Windows\System32\drivers\athw10x.sys [4325544 2015-09-10] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [97680 2015-08-23] (ASUS Corporation)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [53752 2015-10-24] (Intel Corporation)
R3 esif_lf; C:\Windows\system32\DRIVERS\esif_lf.sys [261624 2015-10-24] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [88256 2015-09-10] (Intel Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [193336 2015-09-10] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2015-09-10] (Realtek                                            )
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [410880 2015-09-11] (Realsil Semiconductor Corporation)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [214016 2015-07-10] (Microsoft Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
R3 WinDriver6; C:\Windows\system32\drivers\windrvr6.sys [268800 2014-01-28] (Jungo Connectivity)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-11-29 13:26 - 2015-11-29 13:26 - 00012303 _____ C:\Users\Stefan\Desktop\FRST.txt
2015-11-29 13:24 - 2015-11-29 13:24 - 00000547 _____ C:\Users\Stefan\Desktop\JRT.txt
2015-11-29 13:20 - 2015-11-29 13:20 - 00016148 _____ C:\Windows\system32\SWALTER_Stefan_HistoryPrediction.bin
2015-11-29 13:16 - 2015-11-29 13:18 - 00000000 ____D C:\AdwCleaner
2015-11-29 13:15 - 2015-11-29 13:15 - 00300252 _____ C:\Users\Stefan\Desktop\Windows 10_ Chrome öffnet websiten..html
2015-11-29 13:15 - 2015-11-29 13:15 - 00000000 ____D C:\Users\Stefan\Desktop\Windows 10_ Chrome öffnet websiten._files
2015-11-29 13:14 - 2015-11-29 13:22 - 01599336 _____ (Malwarebytes) C:\Users\Stefan\Desktop\JRT.exe
2015-11-29 13:14 - 2015-11-29 13:15 - 01733632 _____ C:\Users\Stefan\Desktop\AdwCleaner_5.022.exe
2015-11-29 03:37 - 2015-11-29 03:37 - 00000000 ____D D:\Program Files (x86)\Google
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-11-28 19:59 - 2015-09-10 12:45 - 00929360 _____ (Google Inc.) C:\Users\Stefan\Desktop\ChromeSetup.exe
2015-11-28 19:49 - 2015-11-28 19:49 - 00029482 _____ C:\Users\Stefan\Documents\bookmarks_28.11.15.html
2015-11-27 18:49 - 2015-11-27 18:51 - 00245700 _____ C:\TDSSKiller.3.1.0.6_27.11.2015_18.49.31_log.txt
2015-11-27 18:49 - 2015-11-27 18:49 - 04397752 _____ (Kaspersky Lab ZAO) C:\Users\Stefan\Desktop\tdsskiller.exe
2015-11-27 18:17 - 2015-11-27 18:48 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-11-27 18:16 - 2015-11-27 18:48 - 00000000 ____D C:\Users\Stefan\Desktop\mbar
2015-11-27 18:14 - 2015-11-27 18:15 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Stefan\Desktop\mbar-1.09.3.1001.exe
2015-11-26 22:17 - 2015-11-26 22:17 - 00054780 _____ C:\Users\Stefan\Documents\GMER Fehlermeldung + Reg Einträge.rar
2015-11-26 21:52 - 2015-11-27 18:51 - 00122805 _____ C:\Users\Stefan\Desktop\Neues Textdokument.txt
2015-11-26 21:51 - 2015-11-26 21:52 - 00380416 _____ C:\Users\Stefan\Desktop\37cdgt21.exe
2015-11-26 21:47 - 2015-11-29 13:26 - 00000000 ____D C:\FRST
2015-11-26 21:46 - 2015-11-26 21:46 - 02348544 _____ (Farbar) C:\Users\Stefan\Desktop\FRST64.exe
2015-11-26 21:44 - 2015-11-26 21:44 - 00050477 _____ C:\Users\Stefan\Desktop\Defogger.exe
2015-11-26 21:44 - 2015-11-26 21:44 - 00000000 _____ C:\Users\Stefan\defogger_reenable
2015-11-25 17:41 - 2015-11-25 17:41 - 00001243 _____ C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware .lnk
2015-11-25 17:01 - 2015-11-27 18:17 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-11-25 17:00 - 2015-11-27 18:16 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-11-25 17:00 - 2015-11-25 17:00 - 00000000 ____D D:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-11-25 17:00 - 2015-11-25 17:00 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-11-25 17:00 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-11-25 17:00 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-11-25 16:42 - 2015-11-26 22:18 - 00000000 ____D C:\ProgramData\TEMP
2015-11-25 16:42 - 2015-11-26 22:07 - 00000000 ____D D:\Program Files (x86)\SpywareBlaster
2015-11-25 16:42 - 2015-11-25 16:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
2015-11-25 16:42 - 2012-05-02 12:17 - 01070152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2015-11-25 16:42 - 2009-03-24 13:52 - 00129872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSSTDFMT.DLL
2015-11-25 13:00 - 2015-11-25 13:00 - 00009702 _____ C:\Users\Stefan\Documents\cc_20151125_130009.reg
2015-11-25 12:22 - 2015-11-25 12:22 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\VisualAssistAtmel
2015-11-25 12:22 - 2015-11-25 12:22 - 00000000 ____D C:\Users\Stefan\AppData\Local\VisualAssistAtmel
2015-11-25 12:22 - 2015-11-25 12:22 - 00000000 ____D C:\Users\Stefan\AppData\Local\IsolatedStorage
2015-11-25 12:13 - 2015-11-25 12:13 - 00125848 _____ C:\Users\Stefan\Documents\cc_20151125_121327.reg
2015-11-25 12:05 - 2015-11-25 12:05 - 00002856 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-11-25 12:05 - 2015-11-25 12:05 - 00000000 ____D D:\Program Files\CCleaner
2015-11-25 12:05 - 2015-11-25 12:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-11-25 08:13 - 2015-11-25 08:13 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\NuGet
2015-11-25 08:13 - 2015-11-25 08:13 - 00000000 ____D C:\Users\Stefan\AppData\LocalLow\Temp
2015-11-24 20:50 - 2015-11-25 08:11 - 00000000 ____D C:\Users\Stefan\Documents\Visual Studio 2015
2015-11-24 20:47 - 2015-11-24 20:48 - 00000000 ____D D:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-11-24 20:47 - 2015-11-24 20:47 - 00000000 ____D D:\Program Files\Microsoft SQL Server Compact Edition
2015-11-24 20:47 - 2015-11-24 20:47 - 00000000 ____D C:\ProgramData\PreEmptive Solutions
2015-11-24 20:41 - 2015-11-24 20:41 - 00000000 ____D D:\Program Files\Microsoft DNX
2015-11-24 20:41 - 2015-11-24 20:41 - 00000000 ____D C:\ProgramData\Microsoft DNX
2015-11-24 20:38 - 2015-11-24 20:39 - 00000000 ____D D:\Program Files\IIS Express
2015-11-24 20:31 - 2015-11-24 20:31 - 00000000 ____D C:\ProgramData\NuGet
2015-11-24 20:30 - 2015-11-24 20:30 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2015.lnk
2015-11-24 20:30 - 2015-11-24 20:30 - 00000000 ____D D:\Program Files\IIS
2015-11-24 20:30 - 2015-11-24 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Expression
2015-11-24 20:27 - 2015-11-24 20:27 - 00000000 ____D D:\Program Files\Microsoft Visual Studio 12.0
2015-11-24 20:26 - 2015-11-24 20:26 - 00000000 ____D C:\Windows\symbols
2015-11-24 20:26 - 2015-11-24 20:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015
2015-11-24 20:25 - 2015-07-09 21:53 - 00097280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DxToolsReportGenerator.dll
2015-11-24 20:25 - 2015-07-09 21:36 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\DxToolsReportGenerator.dll
2015-11-24 20:25 - 2015-07-09 20:49 - 01133056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11_3SDKLayers.dll
2015-11-24 20:25 - 2015-07-09 20:49 - 00644608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d12SDKLayers.dll
2015-11-24 20:25 - 2015-07-09 20:48 - 06365696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXCaptureReplay.dll
2015-11-24 20:25 - 2015-07-09 20:40 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\d3d11_3SDKLayers.dll
2015-11-24 20:25 - 2015-07-09 20:40 - 00875008 _____ (Microsoft Corporation) C:\Windows\system32\d3d12SDKLayers.dll
2015-11-24 20:25 - 2015-07-09 20:39 - 00236544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf_gputiming.dll
2015-11-24 20:25 - 2015-07-09 20:38 - 08244736 _____ (Microsoft Corporation) C:\Windows\system32\DXCaptureReplay.dll
2015-11-24 20:25 - 2015-07-09 20:31 - 03597312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsRemoteEngine.exe
2015-11-24 20:25 - 2015-07-09 20:30 - 03680768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsDesktopEngine.exe
2015-11-24 20:25 - 2015-07-09 20:28 - 02439168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d12warp.dll
2015-11-24 20:25 - 2015-07-09 20:28 - 00916480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsExperiment.dll
2015-11-24 20:25 - 2015-07-09 20:28 - 00761856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXToolsOfflineAnalysis.dll
2015-11-24 20:25 - 2015-07-09 20:28 - 00647680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXCap.exe
2015-11-24 20:25 - 2015-07-09 20:28 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\perf_gputiming.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1debug3.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXToolsMonitor.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00119296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsCapture.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00108544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXToolsReporting.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VSD3DWARPDebug.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VSD3DWARP12Debug.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsProxyStub.dll
2015-11-24 20:25 - 2015-07-09 20:26 - 00346624 _____ (Windows (R) Win 7 DDK provider) C:\Windows\SysWOW64\DXCpl.exe
2015-11-24 20:25 - 2015-07-09 20:24 - 00233984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXGIDebug.dll
2015-11-24 20:25 - 2015-07-09 20:21 - 04656128 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsRemoteEngine.exe
2015-11-24 20:25 - 2015-07-09 20:20 - 04751872 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsDesktopEngine.exe
2015-11-24 20:25 - 2015-07-09 20:18 - 03257856 _____ (Microsoft Corporation) C:\Windows\system32\d3d12warp.dll
2015-11-24 20:25 - 2015-07-09 20:18 - 01069568 _____ (Microsoft Corporation) C:\Windows\system32\DXToolsOfflineAnalysis.dll
2015-11-24 20:25 - 2015-07-09 20:18 - 00877568 _____ (Microsoft Corporation) C:\Windows\system32\DXCap.exe
2015-11-24 20:25 - 2015-07-09 20:17 - 01203200 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsExperiment.dll
2015-11-24 20:25 - 2015-07-09 20:17 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\d2d1debug3.dll
2015-11-24 20:25 - 2015-07-09 20:17 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\DXToolsMonitor.dll
2015-11-24 20:25 - 2015-07-09 20:17 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\DXToolsReporting.dll
2015-11-24 20:25 - 2015-07-09 20:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsCapture.dll
2015-11-24 20:25 - 2015-07-09 20:17 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsProxyStub.dll
2015-11-24 20:25 - 2015-07-09 20:16 - 00366592 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\DXCpl.exe
2015-11-24 20:25 - 2015-07-09 20:16 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\VSD3DWARP12Debug.dll
2015-11-24 20:25 - 2015-07-09 20:16 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\VSD3DWARPDebug.dll
2015-11-24 20:25 - 2015-07-09 20:13 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\DXGIDebug.dll
2015-11-24 20:24 - 2015-11-24 20:48 - 00000000 ____D D:\Program Files\Microsoft SQL Server
2015-11-24 20:24 - 2015-11-24 20:24 - 00001321 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015.lnk
2015-11-24 20:22 - 2015-11-24 20:47 - 00000000 ____D D:\Program Files (x86)\Microsoft Visual Studio 14.0
2015-11-24 20:22 - 2015-11-24 20:25 - 00000000 ____D C:\Windows\system32\1033
2015-11-24 20:22 - 2015-11-24 20:22 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_SensorsSimulatorDriver_01_11_00.Wdf
2015-11-24 20:09 - 2015-11-24 20:54 - 00000000 ____D C:\ProgramData\VsTelemetry
2015-11-16 19:53 - 2015-11-22 19:53 - 00003344 _____ C:\Windows\System32\Tasks\Urla3
2015-11-16 19:53 - 2015-11-22 19:53 - 00003344 _____ C:\Windows\System32\Tasks\Urla2
2015-11-16 19:53 - 2015-11-22 19:53 - 00003344 _____ C:\Windows\System32\Tasks\Urla1
2015-11-14 15:53 - 2015-11-14 15:58 - 00000000 ____D C:\Users\Stefan\Documents\Dolphin Emulator
2015-11-14 15:52 - 2015-11-18 22:52 - 00000000 ____D D:\Program Files (x86)\Doplin
2015-11-11 22:23 - 2015-11-11 22:23 - 00000000 ____D C:\Users\Stefan\AppData\Local\Meltytech
2015-11-01 20:53 - 2015-11-01 20:53 - 00007597 _____ C:\Users\Stefan\AppData\Local\Resmon.ResmonCfg

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-11-29 13:21 - 2015-09-19 12:08 - 00000000 ____D C:\ProgramData\ASUS Smart Gesture
2015-11-29 13:21 - 2015-09-10 14:13 - 00000000 ____D D:\Program Files (x86)\Steam
2015-11-29 13:20 - 2015-09-10 12:44 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-11-29 13:20 - 2015-09-10 12:44 - 00000000 __SHD C:\Users\Stefan\IntelGraphicsProfiles
2015-11-29 13:19 - 2015-07-10 13:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-29 13:19 - 2015-07-10 10:05 - 00131072 ___SH C:\Windows\system32\config\BBI
2015-11-29 13:18 - 2015-09-15 19:11 - 00000008 __RSH C:\ProgramData\ntuser.pol
2015-11-29 13:04 - 2015-07-10 12:04 - 00000000 ___SD C:\Windows\SysWOW64\F12
2015-11-29 13:04 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\SysWOW64\oobe
2015-11-29 13:04 - 2015-07-10 10:05 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ___SD C:\Windows\system32\F12
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\PurchaseDialog
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\DevicesFlow
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\oobe
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\appraiser
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\Provisioning
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\L2Schemas
2015-11-29 13:03 - 2015-07-10 12:02 - 00000000 ____D C:\Windows\INF
2015-11-29 13:03 - 2015-07-10 10:05 - 00000000 ____D C:\Windows\system32\Dism
2015-11-29 13:03 - 2015-07-10 10:05 - 00000000 ____D C:\Windows
2015-11-29 03:46 - 2015-07-10 11:55 - 00000000 ____D C:\Windows\CbsTemp
2015-11-29 03:24 - 2015-09-10 19:17 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Skype
2015-11-28 19:27 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\AppReadiness
2015-11-26 21:44 - 2015-09-10 12:41 - 00000000 ____D C:\Users\Stefan
2015-11-25 17:45 - 2015-09-10 12:41 - 01900026 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-25 17:45 - 2015-07-10 17:34 - 00815392 _____ C:\Windows\system32\perfh007.dat
2015-11-25 17:45 - 2015-07-10 17:34 - 00171896 _____ C:\Windows\system32\perfc007.dat
2015-11-25 17:29 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\schemas
2015-11-25 17:26 - 2015-09-29 19:15 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\dxdpeDwXMnf
2015-11-25 17:26 - 2015-09-25 18:15 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\1i1ZKsk
2015-11-25 17:26 - 2015-09-24 23:05 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\UFatv9yZFkK
2015-11-25 17:26 - 2015-09-24 18:38 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Fbjiy
2015-11-25 17:26 - 2015-09-16 18:38 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\PBkG
2015-11-25 17:26 - 2015-09-16 12:38 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\h0j4sZIrb
2015-11-25 17:26 - 2015-09-15 19:35 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\sezR8F7
2015-11-25 17:26 - 2015-09-15 19:11 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\JLIuMtOrwh
2015-11-25 13:53 - 2015-10-22 18:53 - 00000204 _____ C:\Windows\system32\gup.xml
2015-11-25 12:56 - 2015-09-10 18:42 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-11-25 12:54 - 2015-10-18 15:34 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\DVDVideoSoft
2015-11-25 12:23 - 2015-09-15 23:05 - 00000000 ____D C:\Users\Stefan\Documents\Atmel Studio
2015-11-25 12:12 - 2015-10-07 18:30 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\TeamViewer
2015-11-25 12:12 - 2015-07-10 05:19 - 00000000 ____D C:\Windows\Panther
2015-11-25 09:19 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\rescache
2015-11-25 08:41 - 2015-09-10 12:45 - 00000000 ____D C:\Users\Stefan\AppData\Local\Google
2015-11-25 08:38 - 2015-10-28 11:59 - 00000209 _____ C:\Users\Stefan\Desktop\WinUpdate.txt
2015-11-25 07:49 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\NDF
2015-11-24 20:49 - 2015-09-10 13:00 - 00000000 ____D C:\ProgramData\Package Cache
2015-11-24 20:27 - 2015-09-15 22:58 - 00000000 ____D C:\Windows\SysWOW64\1033
2015-11-24 20:22 - 2015-09-10 19:22 - 00000000 ____D D:\Program Files\Common Files\Microsoft Shared
2015-11-24 20:21 - 2015-07-10 12:04 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2015-11-24 19:46 - 2015-09-27 17:32 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Notepad++
2015-11-23 18:58 - 2015-09-14 19:16 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\vlc
2015-11-22 23:50 - 2015-10-19 18:26 - 00000000 ____D C:\Users\Stefan\AppData\Local\pr0-tairuteburu
2015-11-21 19:41 - 2015-09-10 19:16 - 00000000 ____D C:\ProgramData\Skype
2015-11-13 20:03 - 2015-09-11 17:11 - 00000000 ____D C:\Windows\system32\MRT
2015-11-13 19:59 - 2015-09-11 17:11 - 145617392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-11-13 00:09 - 2015-09-10 12:44 - 00002361 _____ C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-11-13 00:09 - 2015-09-10 12:44 - 00000000 ___RD C:\Users\Stefan\OneDrive
2015-11-03 19:20 - 2015-07-10 12:06 - 00810488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-11-03 19:20 - 2015-07-10 12:06 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-09-20 18:38 - 2015-09-20 18:38 - 0000078 _____ () C:\Users\Stefan\AppData\Roaming\sn.txt
2015-09-19 18:38 - 2015-09-19 18:38 - 0000368 _____ () C:\Users\Stefan\AppData\Local\6yZ0N0.vbs
2015-09-14 18:09 - 2015-09-14 18:09 - 0000402 _____ () C:\Users\Stefan\AppData\Local\8f1rI.vbs
2015-09-15 19:11 - 2015-09-15 19:11 - 3531374 _____ () C:\Users\Stefan\AppData\Local\curl.zip
2015-09-15 19:35 - 2015-09-15 19:35 - 0000368 _____ () C:\Users\Stefan\AppData\Local\LeW6A17.vbs
2015-09-19 00:38 - 2015-09-19 00:38 - 0000368 _____ () C:\Users\Stefan\AppData\Local\LjwdAlF.vbs
2015-09-20 18:38 - 2015-09-20 18:38 - 0000368 _____ () C:\Users\Stefan\AppData\Local\pMAC7q.vbs
2015-10-21 21:30 - 2015-10-21 21:30 - 0009569 _____ () C:\Users\Stefan\AppData\Local\recently-used.xbel
2015-11-01 20:53 - 2015-11-01 20:53 - 0007597 _____ () C:\Users\Stefan\AppData\Local\Resmon.ResmonCfg
2015-09-17 18:38 - 2015-09-17 18:38 - 0000368 _____ () C:\Users\Stefan\AppData\Local\rRoKnE.vbs
2015-09-24 20:05 - 2015-09-24 20:05 - 0000338 _____ () C:\Users\Stefan\AppData\Local\sSHGsk3.vbs
2015-09-27 13:20 - 2015-09-27 13:20 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\Stefan\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-11-24 21:54

==================== Ende von FRST.txt ============================

schrauber · 30.11.2015, 07:48

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

SmurfThis. · 30.11.2015, 17:54

FRST:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:29-11-2015
durchgeführt von Stefan (Administrator) auf SWALTER (30-11-2015 17:40:59)
Gestartet von C:\Users\Stefan\Desktop
Geladene Profile: Stefan (Verfügbare Profile: Stefan)
Platform: Windows 10 Pro (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\47.0.2526.18\remoting_host.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(TeamViewer GmbH) D:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) D:\Program Files\Windows Defender\MsMpEng.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\47.0.2526.18\remoting_host.exe
(Microsoft Corporation) D:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Piriform Ltd) D:\Program Files\CCleaner\CCleaner64.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Microsoft Corporation) D:\Program Files\Windows Defender\MSASCui.exe
(Valve Corporation) D:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1120.13270.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Valve Corporation) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(TeamSpeak Systems GmbH) D:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) D:\Program Files\Windows Defender\MpCmdRun.exe
(Don HO don.h@free.fr) D:\Program Files (x86)\Notepad++\notepad++.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [3011152 2015-11-10] (Valve Corporation)
HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\Run: [CCleaner Monitoring] => D:\Program Files\CCleaner\CCleaner64.exe [8551848 2015-10-19] (Piriform Ltd)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  Keine Datei

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2
Tcpip\..\Interfaces\{51014fcf-d4c4-462c-80d2-ac5c0866d9f2}: [DhcpNameServer] 192.168.0.1 192.168.0.2

Internet Explorer:
==================
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> D:\Program Files (x86)\Java\bin\ssv.dll [2015-10-24] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> D:\Program Files (x86)\Java\bin\jp2ssv.dll [2015-10-24] (Oracle Corporation)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe

FireFox:
========
FF Plugin: @videolan.org/vlc,version=2.2.1 -> D:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> D:\Program Files (x86)\Java\bin\dtplugin\npDeployJava1.dll [2015-10-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> D:\Program Files (x86)\Java\bin\plugin2\npjp2.dll [2015-10-24] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&ts=1426191596&from=cor&uid=WDCXWD5000BEKT-75KA9T0_WD-WXR1AC0Y3001Y3001
CHR StartupUrls: Default -> "hxxp://www.mystartsearch.com/?type=hp&ts=1426191596&from=cor&uid=WDCXWD5000BEKT-75KA9T0_WD-WXR1AC0Y3001Y3001"
CHR Session Restore: Default -> ist aktiviert.
CHR Profile: C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-25]
CHR Extension: (Google Docs) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-25]
CHR Extension: (Google Drive) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-25]
CHR Extension: (YouTube) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-25]
CHR Extension: (Adblock Plus) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-11-25]
CHR Extension: (Google-Suche) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-25]
CHR Extension: (Google Tabellen) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-25]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2015-11-25]
CHR Extension: (Google Docs Offline) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-25]
CHR Extension: (ScriptSafe) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf [2015-11-25]
CHR Extension: (Google Mail) - C:\Users\Stefan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-25]
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\47.0.2526.18\remoting_host.exe [69448 2015-10-14] (Google Inc.)
R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1394360 2015-10-24] (Intel Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [351120 2015-09-10] (Intel Corporation)
S2 MBAMService; D:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation)
R2 TeamViewer; D:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
S3 VSStandardCollectorService140; D:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [52968 2015-07-07] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R3 WdNisSvc; D:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
R2 WinDefend; D:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
S3 WMPNetworkSvc; D:\Program Files\Windows Media Player\wmpnetwk.exe [1473536 2015-07-10] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 athr; C:\Windows\System32\drivers\athw10x.sys [4325544 2015-09-10] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [97680 2015-08-23] (ASUS Corporation)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [53752 2015-10-24] (Intel Corporation)
R3 esif_lf; C:\Windows\system32\DRIVERS\esif_lf.sys [261624 2015-10-24] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [88256 2015-09-10] (Intel Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [193336 2015-09-10] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2015-09-10] (Realtek                                            )
R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [410880 2015-09-11] (Realsil Semiconductor Corporation)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [214016 2015-07-10] (Microsoft Corporation)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
R3 WinDriver6; C:\Windows\system32\drivers\windrvr6.sys [268800 2014-01-28] (Jungo Connectivity)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-11-30 17:40 - 2015-11-30 17:41 - 00013904 _____ C:\Users\Stefan\Desktop\FRST.txt
2015-11-30 17:40 - 2015-11-30 17:40 - 00000000 ____D C:\Users\Stefan\Desktop\FRST-OlderVersion
2015-11-30 17:39 - 2015-11-30 17:39 - 00852720 _____ C:\Users\Stefan\Desktop\SecurityCheck.exe
2015-11-30 17:36 - 2015-11-30 17:36 - 00000340 _____ C:\Users\Stefan\Desktop\ghjkl.txt
2015-11-30 16:15 - 2015-11-30 16:15 - 00016148 _____ C:\Windows\system32\SWALTER_Stefan_HistoryPrediction.bin
2015-11-30 15:59 - 2015-11-30 15:59 - 02870984 _____ (ESET) C:\Users\Stefan\Desktop\esetsmartinstaller_deu.exe
2015-11-29 13:24 - 2015-11-29 13:24 - 00000547 _____ C:\Users\Stefan\Desktop\JRT.txt
2015-11-29 13:16 - 2015-11-29 13:18 - 00000000 ____D C:\AdwCleaner
2015-11-29 13:14 - 2015-11-29 13:22 - 01599336 _____ (Malwarebytes) C:\Users\Stefan\Desktop\JRT.exe
2015-11-29 13:14 - 2015-11-29 13:15 - 01733632 _____ C:\Users\Stefan\Desktop\AdwCleaner_5.022.exe
2015-11-29 03:37 - 2015-11-29 03:37 - 00000000 ____D D:\Program Files (x86)\Google
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-11-28 19:59 - 2015-09-10 12:45 - 00929360 _____ (Google Inc.) C:\Users\Stefan\Desktop\ChromeSetup.exe
2015-11-28 19:49 - 2015-11-28 19:49 - 00029482 _____ C:\Users\Stefan\Documents\bookmarks_28.11.15.html
2015-11-27 18:49 - 2015-11-27 18:51 - 00245700 _____ C:\TDSSKiller.3.1.0.6_27.11.2015_18.49.31_log.txt
2015-11-27 18:49 - 2015-11-27 18:49 - 04397752 _____ (Kaspersky Lab ZAO) C:\Users\Stefan\Desktop\tdsskiller.exe
2015-11-27 18:17 - 2015-11-27 18:48 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-11-27 18:16 - 2015-11-27 18:48 - 00000000 ____D C:\Users\Stefan\Desktop\mbar
2015-11-27 18:14 - 2015-11-27 18:15 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Stefan\Desktop\mbar-1.09.3.1001.exe
2015-11-26 22:17 - 2015-11-26 22:17 - 00054780 _____ C:\Users\Stefan\Documents\GMER Fehlermeldung + Reg Einträge.rar
2015-11-26 21:52 - 2015-11-27 18:51 - 00122805 _____ C:\Users\Stefan\Desktop\Neues Textdokument.txt
2015-11-26 21:51 - 2015-11-26 21:52 - 00380416 _____ C:\Users\Stefan\Desktop\37cdgt21.exe
2015-11-26 21:47 - 2015-11-30 17:40 - 00000000 ____D C:\FRST
2015-11-26 21:46 - 2015-11-30 17:40 - 02350080 _____ (Farbar) C:\Users\Stefan\Desktop\FRST64.exe
2015-11-26 21:44 - 2015-11-26 21:44 - 00050477 _____ C:\Users\Stefan\Desktop\Defogger.exe
2015-11-26 21:44 - 2015-11-26 21:44 - 00000000 _____ C:\Users\Stefan\defogger_reenable
2015-11-25 17:41 - 2015-11-25 17:41 - 00001243 _____ C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware .lnk
2015-11-25 17:01 - 2015-11-27 18:17 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-11-25 17:00 - 2015-11-27 18:16 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-11-25 17:00 - 2015-11-25 17:00 - 00000000 ____D D:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-11-25 17:00 - 2015-11-25 17:00 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-11-25 17:00 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-11-25 17:00 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-11-25 16:42 - 2015-11-26 22:18 - 00000000 ____D C:\ProgramData\TEMP
2015-11-25 16:42 - 2015-11-26 22:07 - 00000000 ____D D:\Program Files (x86)\SpywareBlaster
2015-11-25 16:42 - 2015-11-25 16:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
2015-11-25 16:42 - 2012-05-02 12:17 - 01070152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2015-11-25 16:42 - 2009-03-24 13:52 - 00129872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSSTDFMT.DLL
2015-11-25 13:00 - 2015-11-25 13:00 - 00009702 _____ C:\Users\Stefan\Documents\cc_20151125_130009.reg
2015-11-25 12:22 - 2015-11-25 12:22 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\VisualAssistAtmel
2015-11-25 12:22 - 2015-11-25 12:22 - 00000000 ____D C:\Users\Stefan\AppData\Local\VisualAssistAtmel
2015-11-25 12:22 - 2015-11-25 12:22 - 00000000 ____D C:\Users\Stefan\AppData\Local\IsolatedStorage
2015-11-25 12:13 - 2015-11-25 12:13 - 00125848 _____ C:\Users\Stefan\Documents\cc_20151125_121327.reg
2015-11-25 12:05 - 2015-11-25 12:05 - 00002856 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-11-25 12:05 - 2015-11-25 12:05 - 00000000 ____D D:\Program Files\CCleaner
2015-11-25 12:05 - 2015-11-25 12:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-11-25 08:13 - 2015-11-25 08:13 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\NuGet
2015-11-25 08:13 - 2015-11-25 08:13 - 00000000 ____D C:\Users\Stefan\AppData\LocalLow\Temp
2015-11-24 20:50 - 2015-11-25 08:11 - 00000000 ____D C:\Users\Stefan\Documents\Visual Studio 2015
2015-11-24 20:47 - 2015-11-24 20:48 - 00000000 ____D D:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-11-24 20:47 - 2015-11-24 20:47 - 00000000 ____D D:\Program Files\Microsoft SQL Server Compact Edition
2015-11-24 20:47 - 2015-11-24 20:47 - 00000000 ____D C:\ProgramData\PreEmptive Solutions
2015-11-24 20:41 - 2015-11-24 20:41 - 00000000 ____D D:\Program Files\Microsoft DNX
2015-11-24 20:41 - 2015-11-24 20:41 - 00000000 ____D C:\ProgramData\Microsoft DNX
2015-11-24 20:38 - 2015-11-24 20:39 - 00000000 ____D D:\Program Files\IIS Express
2015-11-24 20:31 - 2015-11-24 20:31 - 00000000 ____D C:\ProgramData\NuGet
2015-11-24 20:30 - 2015-11-24 20:30 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2015.lnk
2015-11-24 20:30 - 2015-11-24 20:30 - 00000000 ____D D:\Program Files\IIS
2015-11-24 20:30 - 2015-11-24 20:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Expression
2015-11-24 20:27 - 2015-11-24 20:27 - 00000000 ____D D:\Program Files\Microsoft Visual Studio 12.0
2015-11-24 20:26 - 2015-11-24 20:26 - 00000000 ____D C:\Windows\symbols
2015-11-24 20:26 - 2015-11-24 20:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015
2015-11-24 20:25 - 2015-07-09 21:53 - 00097280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DxToolsReportGenerator.dll
2015-11-24 20:25 - 2015-07-09 21:36 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\DxToolsReportGenerator.dll
2015-11-24 20:25 - 2015-07-09 20:49 - 01133056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11_3SDKLayers.dll
2015-11-24 20:25 - 2015-07-09 20:49 - 00644608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d12SDKLayers.dll
2015-11-24 20:25 - 2015-07-09 20:48 - 06365696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXCaptureReplay.dll
2015-11-24 20:25 - 2015-07-09 20:40 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\d3d11_3SDKLayers.dll
2015-11-24 20:25 - 2015-07-09 20:40 - 00875008 _____ (Microsoft Corporation) C:\Windows\system32\d3d12SDKLayers.dll
2015-11-24 20:25 - 2015-07-09 20:39 - 00236544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf_gputiming.dll
2015-11-24 20:25 - 2015-07-09 20:38 - 08244736 _____ (Microsoft Corporation) C:\Windows\system32\DXCaptureReplay.dll
2015-11-24 20:25 - 2015-07-09 20:31 - 03597312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsRemoteEngine.exe
2015-11-24 20:25 - 2015-07-09 20:30 - 03680768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsDesktopEngine.exe
2015-11-24 20:25 - 2015-07-09 20:28 - 02439168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d12warp.dll
2015-11-24 20:25 - 2015-07-09 20:28 - 00916480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsExperiment.dll
2015-11-24 20:25 - 2015-07-09 20:28 - 00761856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXToolsOfflineAnalysis.dll
2015-11-24 20:25 - 2015-07-09 20:28 - 00647680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXCap.exe
2015-11-24 20:25 - 2015-07-09 20:28 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\perf_gputiming.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1debug3.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXToolsMonitor.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00119296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsCapture.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00108544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXToolsReporting.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VSD3DWARPDebug.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VSD3DWARP12Debug.dll
2015-11-24 20:25 - 2015-07-09 20:27 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VsGraphicsProxyStub.dll
2015-11-24 20:25 - 2015-07-09 20:26 - 00346624 _____ (Windows (R) Win 7 DDK provider) C:\Windows\SysWOW64\DXCpl.exe
2015-11-24 20:25 - 2015-07-09 20:24 - 00233984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXGIDebug.dll
2015-11-24 20:25 - 2015-07-09 20:21 - 04656128 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsRemoteEngine.exe
2015-11-24 20:25 - 2015-07-09 20:20 - 04751872 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsDesktopEngine.exe
2015-11-24 20:25 - 2015-07-09 20:18 - 03257856 _____ (Microsoft Corporation) C:\Windows\system32\d3d12warp.dll
2015-11-24 20:25 - 2015-07-09 20:18 - 01069568 _____ (Microsoft Corporation) C:\Windows\system32\DXToolsOfflineAnalysis.dll
2015-11-24 20:25 - 2015-07-09 20:18 - 00877568 _____ (Microsoft Corporation) C:\Windows\system32\DXCap.exe
2015-11-24 20:25 - 2015-07-09 20:17 - 01203200 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsExperiment.dll
2015-11-24 20:25 - 2015-07-09 20:17 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\d2d1debug3.dll
2015-11-24 20:25 - 2015-07-09 20:17 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\DXToolsMonitor.dll
2015-11-24 20:25 - 2015-07-09 20:17 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\DXToolsReporting.dll
2015-11-24 20:25 - 2015-07-09 20:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsCapture.dll
2015-11-24 20:25 - 2015-07-09 20:17 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\VsGraphicsProxyStub.dll
2015-11-24 20:25 - 2015-07-09 20:16 - 00366592 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\DXCpl.exe
2015-11-24 20:25 - 2015-07-09 20:16 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\VSD3DWARP12Debug.dll
2015-11-24 20:25 - 2015-07-09 20:16 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\VSD3DWARPDebug.dll
2015-11-24 20:25 - 2015-07-09 20:13 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\DXGIDebug.dll
2015-11-24 20:24 - 2015-11-24 20:48 - 00000000 ____D D:\Program Files\Microsoft SQL Server
2015-11-24 20:24 - 2015-11-24 20:24 - 00001321 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015.lnk
2015-11-24 20:22 - 2015-11-24 20:47 - 00000000 ____D D:\Program Files (x86)\Microsoft Visual Studio 14.0
2015-11-24 20:22 - 2015-11-24 20:25 - 00000000 ____D C:\Windows\system32\1033
2015-11-24 20:22 - 2015-11-24 20:22 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_SensorsSimulatorDriver_01_11_00.Wdf
2015-11-24 20:09 - 2015-11-24 20:54 - 00000000 ____D C:\ProgramData\VsTelemetry
2015-11-16 19:53 - 2015-11-22 19:53 - 00003344 _____ C:\Windows\System32\Tasks\Urla3
2015-11-16 19:53 - 2015-11-22 19:53 - 00003344 _____ C:\Windows\System32\Tasks\Urla2
2015-11-16 19:53 - 2015-11-22 19:53 - 00003344 _____ C:\Windows\System32\Tasks\Urla1
2015-11-14 15:53 - 2015-11-14 15:58 - 00000000 ____D C:\Users\Stefan\Documents\Dolphin Emulator
2015-11-14 15:52 - 2015-11-18 22:52 - 00000000 ____D D:\Program Files (x86)\Doplin
2015-11-11 22:23 - 2015-11-11 22:23 - 00000000 ____D C:\Users\Stefan\AppData\Local\Meltytech
2015-11-01 20:53 - 2015-11-01 20:53 - 00007597 _____ C:\Users\Stefan\AppData\Local\Resmon.ResmonCfg

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-11-30 16:27 - 2015-09-10 14:13 - 00000000 ____D D:\Program Files (x86)\Steam
2015-11-29 16:57 - 2015-07-10 11:55 - 00000000 ____D C:\Windows\CbsTemp
2015-11-29 13:21 - 2015-09-19 12:08 - 00000000 ____D C:\ProgramData\ASUS Smart Gesture
2015-11-29 13:20 - 2015-09-10 12:44 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-11-29 13:20 - 2015-09-10 12:44 - 00000000 __SHD C:\Users\Stefan\IntelGraphicsProfiles
2015-11-29 13:19 - 2015-07-10 13:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-29 13:19 - 2015-07-10 10:05 - 00131072 ___SH C:\Windows\system32\config\BBI
2015-11-29 13:18 - 2015-09-15 19:11 - 00000008 __RSH C:\ProgramData\ntuser.pol
2015-11-29 13:04 - 2015-07-10 12:04 - 00000000 ___SD C:\Windows\SysWOW64\F12
2015-11-29 13:04 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\SysWOW64\oobe
2015-11-29 13:04 - 2015-07-10 10:05 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ___SD C:\Windows\system32\F12
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\PurchaseDialog
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ___RD C:\Windows\DevicesFlow
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\oobe
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\appraiser
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\Provisioning
2015-11-29 13:03 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\L2Schemas
2015-11-29 13:03 - 2015-07-10 12:02 - 00000000 ____D C:\Windows\INF
2015-11-29 13:03 - 2015-07-10 10:05 - 00000000 ____D C:\Windows\system32\Dism
2015-11-29 13:03 - 2015-07-10 10:05 - 00000000 ____D C:\Windows
2015-11-29 03:24 - 2015-09-10 19:17 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Skype
2015-11-28 19:27 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\AppReadiness
2015-11-26 21:44 - 2015-09-10 12:41 - 00000000 ____D C:\Users\Stefan
2015-11-25 17:45 - 2015-09-10 12:41 - 01900026 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-25 17:45 - 2015-07-10 17:34 - 00815392 _____ C:\Windows\system32\perfh007.dat
2015-11-25 17:45 - 2015-07-10 17:34 - 00171896 _____ C:\Windows\system32\perfc007.dat
2015-11-25 17:29 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\schemas
2015-11-25 17:26 - 2015-09-29 19:15 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\dxdpeDwXMnf
2015-11-25 17:26 - 2015-09-25 18:15 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\1i1ZKsk
2015-11-25 17:26 - 2015-09-24 23:05 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\UFatv9yZFkK
2015-11-25 17:26 - 2015-09-24 18:38 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Fbjiy
2015-11-25 17:26 - 2015-09-16 18:38 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\PBkG
2015-11-25 17:26 - 2015-09-16 12:38 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\h0j4sZIrb
2015-11-25 17:26 - 2015-09-15 19:35 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\sezR8F7
2015-11-25 17:26 - 2015-09-15 19:11 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\JLIuMtOrwh
2015-11-25 13:53 - 2015-10-22 18:53 - 00000204 _____ C:\Windows\system32\gup.xml
2015-11-25 12:56 - 2015-09-10 18:42 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-11-25 12:54 - 2015-10-18 15:34 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\DVDVideoSoft
2015-11-25 12:23 - 2015-09-15 23:05 - 00000000 ____D C:\Users\Stefan\Documents\Atmel Studio
2015-11-25 12:12 - 2015-10-07 18:30 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\TeamViewer
2015-11-25 12:12 - 2015-07-10 05:19 - 00000000 ____D C:\Windows\Panther
2015-11-25 09:19 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\rescache
2015-11-25 08:41 - 2015-09-10 12:45 - 00000000 ____D C:\Users\Stefan\AppData\Local\Google
2015-11-25 08:38 - 2015-10-28 11:59 - 00000209 _____ C:\Users\Stefan\Desktop\WinUpdate.txt
2015-11-25 07:49 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\system32\NDF
2015-11-24 20:49 - 2015-09-10 13:00 - 00000000 ____D C:\ProgramData\Package Cache
2015-11-24 20:27 - 2015-09-15 22:58 - 00000000 ____D C:\Windows\SysWOW64\1033
2015-11-24 20:22 - 2015-09-10 19:22 - 00000000 ____D D:\Program Files\Common Files\Microsoft Shared
2015-11-24 20:21 - 2015-07-10 12:04 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2015-11-24 19:46 - 2015-09-27 17:32 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Notepad++
2015-11-23 18:58 - 2015-09-14 19:16 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\vlc
2015-11-22 23:50 - 2015-10-19 18:26 - 00000000 ____D C:\Users\Stefan\AppData\Local\pr0-tairuteburu
2015-11-21 19:41 - 2015-09-10 19:16 - 00000000 ____D C:\ProgramData\Skype
2015-11-13 20:03 - 2015-09-11 17:11 - 00000000 ____D C:\Windows\system32\MRT
2015-11-13 19:59 - 2015-09-11 17:11 - 145617392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-11-13 00:09 - 2015-09-10 12:44 - 00002361 _____ C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-11-13 00:09 - 2015-09-10 12:44 - 00000000 ___RD C:\Users\Stefan\OneDrive
2015-11-03 19:20 - 2015-07-10 12:06 - 00810488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-11-03 19:20 - 2015-07-10 12:06 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-09-20 18:38 - 2015-09-20 18:38 - 0000078 _____ () C:\Users\Stefan\AppData\Roaming\sn.txt
2015-09-19 18:38 - 2015-09-19 18:38 - 0000368 _____ () C:\Users\Stefan\AppData\Local\6yZ0N0.vbs
2015-09-14 18:09 - 2015-09-14 18:09 - 0000402 _____ () C:\Users\Stefan\AppData\Local\8f1rI.vbs
2015-09-15 19:11 - 2015-09-15 19:11 - 3531374 _____ () C:\Users\Stefan\AppData\Local\curl.zip
2015-09-15 19:35 - 2015-09-15 19:35 - 0000368 _____ () C:\Users\Stefan\AppData\Local\LeW6A17.vbs
2015-09-19 00:38 - 2015-09-19 00:38 - 0000368 _____ () C:\Users\Stefan\AppData\Local\LjwdAlF.vbs
2015-09-20 18:38 - 2015-09-20 18:38 - 0000368 _____ () C:\Users\Stefan\AppData\Local\pMAC7q.vbs
2015-10-21 21:30 - 2015-10-21 21:30 - 0009569 _____ () C:\Users\Stefan\AppData\Local\recently-used.xbel
2015-11-01 20:53 - 2015-11-01 20:53 - 0007597 _____ () C:\Users\Stefan\AppData\Local\Resmon.ResmonCfg
2015-09-17 18:38 - 2015-09-17 18:38 - 0000368 _____ () C:\Users\Stefan\AppData\Local\rRoKnE.vbs
2015-09-24 20:05 - 2015-09-24 20:05 - 0000338 _____ () C:\Users\Stefan\AppData\Local\sSHGsk3.vbs
2015-09-27 13:20 - 2015-09-27 13:20 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\Stefan\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-11-24 21:54

==================== Ende von FRST.txt ============================

addition:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:29-11-2015
durchgeführt von Stefan (2015-11-30 17:41:52)
Gestartet von C:\Users\Stefan\Desktop
Windows 10 Pro (X64) (2015-09-10 11:37:05)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2479265680-2342477357-1201510650-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2479265680-2342477357-1201510650-503 - Limited - Disabled)
Gast (S-1-5-21-2479265680-2342477357-1201510650-501 - Limited - Disabled)
Stefan (S-1-5-21-2479265680-2342477357-1201510650-1001 - Administrator - Enabled) => C:\Users\Stefan

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Application Insights Tools for Visual Studio 2015 (x32 Version: 3.3 - Microsoft Corporation) Hidden
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.0.5 - ASUS)
Atmel ARM GNU Toolchain (HKLM-x32\...\{736745FA-6A66-4654-9397-1321B2B4D196}) (Version: 4.8.1443 - Atmel)
Atmel AVR (32 bit) GNU Toolchain (HKLM-x32\...\{C342B5D0-D95A-4B39-9262-2CC3CE3F39B2}) (Version: 3.4.1067 - Atmel)
Atmel AVR (8 bit) GNU Toolchain (HKLM-x32\...\{6E3D61B8-F3EC-462D-91F9-49D03A97053E}) (Version: 3.4.1061 - Atmel)
Atmel Driver Files (x32 Version: 7.0.928 - Atmel Corporation) Hidden
Atmel Jungo USB Driver (x32 Version: 7.0.120 - Atmel) Hidden
Atmel Kits (HKLM-x32\...\{3C85CFF3-91DE-4520-B836-5F4C2F247FF5}) (Version: 6.2.338 - Atmel)
Atmel LibUSB0 Driver (x32 Version: 7.0.73 - Atmel) Hidden
Atmel Segger USB Drivers (497f) (x32 Version: 7.0.140 - Atmel) Hidden
Atmel Studio 6.2 (HKLM-x32\...\{C179E170-07D6-4D8D-A34D-FDB3FCC79FEC}) (Version: 6.2.1563 - Atmel)
Atmel Studio Backend (HKLM-x32\...\{1B2C7C63-4659-49A1-8BC9-F845FE0F0D35}) (Version: 1.12.4144 - Atmel Corporation)
Atmel Studio Memory Logger (HKLM-x32\...\{053538A7-0B52-4CA9-9728-D506BFAA42BD}) (Version: 6.2.171 - Atmel)
Atmel USB Driver Package (HKLM-x32\...\{88a482c9-18e3-43d5-b426-3d1cdf85b391}) (Version: 7.0.666 - Atmel)
Atmel WinUSB (x32 Version: 6.2.30 - Atmel) Hidden
AtmelSoftwareFramework (HKLM-x32\...\{35BD89A1-47F3-4E42-B393-B8DB123F5215}) (Version: 3.21.0.1310 - Atmel)
AVR macro Assembler (HKLM-x32\...\{251D9F73-6297-4941-9016-EA787F708FDF}) (Version: 2.1.1175 - Atmel)
Azure AD Authentication Connected Service (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
AzureTools.Notifications (x32 Version: 2.7.30611.1601 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Block N Load (HKLM-x32\...\Steam App 299360) (Version:  - Jagex)
CCleaner (HKLM\...\CCleaner) (Version: 5.11 - Piriform)
Chrome Remote Desktop Host (HKLM-x32\...\{CDF9E1C8-4B97-4F8B-A848-7DD0E8BEB89F}) (Version: 47.0.2526.18 - Google Inc.)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
Dotfuscator and Analytics Community Edition 5.18.1 (x32 Version: 5.18.1.2898 - PreEmptive Solutions) Hidden
Entity Framework 6.1.3 Tools  for Visual Studio 2015 (HKLM-x32\...\{1A8A9739-BAD7-491F-B5B9-A79A2B965422}) (Version: 14.0.40302.0 - Microsoft Corporation)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.86 - Google Inc.)
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)
IIS 10.0 Express (HKLM\...\{5984D8DA-C1AF-4284-9C88-D7150425B315}) (Version: 10.0.1734 - Microsoft Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.1.1.7 - Intel(R) Corporation) Hidden
Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\...\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{B941AFB4-8851-33A1-9E72-0C33D463C41C}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (ENU) (HKLM-x32\...\{3D3CEBE6-40EA-4C48-97FD-73828281AB4A}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.23107 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{77F1F8AD-51B8-4490-AEEC-BF480073E0FC}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Transact-SQL ScriptDom  (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 T-SQL Language Service  (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (14.0.50616.0) (HKLM-x32\...\{58246C80-3941-4B69-AE31-264644E2ADB8}) (Version: 14.0.50616.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{877B76B2-F83F-4F5A-B28D-3F398641ADB6}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{68BA34E8-9B9D-4A74-83F0-7D366B532D75}) (Version: 12.0.2402.11 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{718FFB65-F6E4-4D62-861F-ED10ED32C936}) (Version: 12.0.2402.11 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Shell (Isolated) - ENU (HKLM-x32\...\{D64B6984-242F-32BC-B008-752806E5FC44}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Community 2015 (HKLM-x32\...\{50b32652-69d2-4b93-9316-edcd12067b8b}) (Version: 14.0.23107.10 - Microsoft Corporation)
Microsoft Web Deploy 3.6 (HKLM\...\{ED4CC1E5-043E-4157-8452-B5E533FE2BA1}) (Version: 3.1238.1955 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Multi-Device Hybrid Apps using C# - Templates - ENU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.6 - Notepad++ Team)
NVIDIA GeForce Experience 2.5.14.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.14.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 355.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 355.82 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
Prerequisites for SSDT  (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10125.31213 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7572 - Realtek Semiconductor Corp.)
Roslyn Language Services - x86 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.14.5 - NVIDIA Corporation) Hidden
Skype™ 7.14 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.14.106 - Skype Technologies S.A.)
SpywareBlaster 5.2 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.2.0 - BrightFort LLC)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Team Explorer for Microsoft Visual Studio 2015 (x32 Version: 14.0.23102 - Microsoft Corporation) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.17 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)
Test Tools for Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
TypeScript Power Tool (x32 Version: 1.6.3.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2015 (x32 Version: 1.6.3.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2015 1.6.3.0 (HKLM-x32\...\{da31aa25-410a-4c1b-9ec0-114dd8dff786}) (Version: 1.6.23313.0 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WCF Data Services 5.6.4 Runtime (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
Windows-Treiberpaket - ASUS (ATP) Mouse  (06/17/2015 6.0.0.66) (HKLM\...\1EFB54678773735560B565BE7FA6F2BCC557EE21) (Version: 06/17/2015 6.0.0.66 - ASUS)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: 3.3.5.12340 - Blizzard Entertainment)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Stefan\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileCoAuth.exe (Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

ACHTUNG: Systemwiederherstellung ist deaktiviert

==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-07-10 12:04 - 2015-10-21 23:36 - 00519915 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost
0.0.0.0 m.fr.a2dfp.net
0.0.0.0 mfr.a2dfp.net
0.0.0.0 ad.a8.net
0.0.0.0 asy.a8ww.net
0.0.0.0 static.a-ads.com
0.0.0.0 atlas.aamedia.ro
0.0.0.0 abcstats.com
0.0.0.0 ad4.abradio.cz
0.0.0.0 a.abv.bg
0.0.0.0 adserver.abv.bg
0.0.0.0 adv.abv.bg
0.0.0.0 bimg.abv.bg
0.0.0.0 ca.abv.bg
0.0.0.0 track.acclaimnetwork.com
0.0.0.0 accuserveadsystem.com
0.0.0.0 www.accuserveadsystem.com
0.0.0.0 achmedia.com
0.0.0.0 csh.actiondesk.com
0.0.0.0 ads.activepower.net
0.0.0.0 app.activetrail.com
0.0.0.0 stat.active24stats.nl #[Tracking.Cookie]
0.0.0.0 traffic.acwebconnecting.com
0.0.0.0 office.ad1.ru
0.0.0.0 cms.ad2click.nl
0.0.0.0 ad2games.com
0.0.0.0 ads.ad2games.com
0.0.0.0 content.ad20.net
0.0.0.0 core.ad20.net
0.0.0.0 banner.ad.nu

Da befinden sich 12387 zusätzliche Einträge.


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {1269968E-79AA-440E-AC2A-8C1245414705} - System32\Tasks\Urla1 => explorer
Task: {1FF830E5-D1A0-48D9-BE49-64958F107310} - System32\Tasks\Urla2 => explorer
Task: {27D9324A-7677-430E-B008-ED8449D0D746} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2015-08-23] (AsusTek)
Task: {2C1BC126-7719-45D6-BA5F-9693A75EE102} - \realtor -> Keine Datei <==== ACHTUNG
Task: {9D9ACDB7-773D-4CC3-B65F-BDACB97719BB} - System32\Tasks\Urla3 => explorer
Task: {AAD50685-1B39-4FF5-8387-F0F22B496B4F} - \DriverMgr -> Keine Datei <==== ACHTUNG
Task: {C833D637-3D1B-450E-813A-07883D86AA09} - System32\Tasks\CCleanerSkipUAC => D:\Program Files\CCleaner\CCleaner.exe [2015-10-19] (Piriform Ltd)
Task: {E12E21A1-9CB7-4332-8518-E023967A28E9} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-11-13] (Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-07-10 12:00 - 2015-07-10 12:00 - 00032768 _____ () C:\Windows\SYSTEM32\licensemanagerapi.dll
2015-07-10 11:59 - 2015-07-10 11:59 - 00403968 _____ () C:\Windows\System32\diagtrack_wininternal.dll
2015-07-10 12:00 - 2015-07-10 12:00 - 02498296 _____ () C:\Windows\system32\CoreUIComponents.dll
2015-07-10 12:00 - 2015-07-10 12:00 - 02498296 _____ () C:\Windows\System32\CoreUIComponents.dll
2015-04-15 21:13 - 2015-04-15 21:13 - 00222720 _____ () D:\Program Files (x86)\Notepad++\NppShell_06.dll
2015-10-19 21:00 - 2015-10-19 21:00 - 00057344 _____ () D:\Program Files\CCleaner\lang\lang-1031.dll
2015-07-10 11:59 - 2015-07-10 11:59 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-07-10 11:59 - 2015-07-10 11:59 - 00143360 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll
2015-07-10 12:00 - 2015-07-10 17:43 - 06579712 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-07-10 12:00 - 2015-07-10 17:43 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-07-10 12:00 - 2015-07-10 17:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-07-10 12:00 - 2015-07-10 17:43 - 00210432 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll
2015-11-21 14:31 - 2015-11-21 14:31 - 00012800 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1120.13270.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2015-11-21 14:31 - 2015-11-21 14:31 - 11526656 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1120.13270.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2015-11-19 18:10 - 2015-11-19 18:11 - 00258560 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1120.13270.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2015-08-04 08:54 - 2015-10-22 18:29 - 00175080 _____ () D:\Program Files\TeamSpeak 3 Client\quazip.dll
2015-08-04 08:53 - 2015-10-22 18:29 - 00103400 _____ () D:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2015-08-04 08:54 - 2015-10-22 18:29 - 00108008 _____ () D:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2015-08-04 08:54 - 2015-10-22 18:29 - 00312296 _____ () D:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2015-08-04 08:54 - 2015-10-22 18:29 - 00483816 _____ () D:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2015-07-17 14:10 - 2015-09-24 18:18 - 00317440 _____ () D:\Program Files\TeamSpeak 3 Client\ssleay32.dll
2015-07-17 14:10 - 2015-09-24 18:18 - 01709056 _____ () D:\Program Files\TeamSpeak 3 Client\LIBEAY32.dll
2015-10-08 18:04 - 2015-10-05 17:18 - 00778752 _____ () D:\Program Files (x86)\Steam\SDL2.dll
2015-09-10 16:51 - 2015-07-03 17:12 - 04962816 _____ () D:\Program Files (x86)\Steam\v8.dll
2015-11-11 12:03 - 2015-11-10 03:44 - 02541648 _____ () D:\Program Files (x86)\Steam\video.dll
2015-10-08 18:04 - 2015-09-24 01:33 - 02549248 _____ () D:\Program Files (x86)\Steam\libavcodec-56.dll
2015-10-08 18:04 - 2015-09-24 01:33 - 00491008 _____ () D:\Program Files (x86)\Steam\libavformat-56.dll
2015-10-08 18:04 - 2015-09-24 01:33 - 00332800 _____ () D:\Program Files (x86)\Steam\libavresample-2.dll
2015-10-08 18:04 - 2015-09-24 01:33 - 00442880 _____ () D:\Program Files (x86)\Steam\libavutil-54.dll
2015-10-08 18:04 - 2015-09-24 01:33 - 00485888 _____ () D:\Program Files (x86)\Steam\libswscale-3.dll
2015-09-10 16:51 - 2015-07-03 17:12 - 01556992 _____ () D:\Program Files (x86)\Steam\icui18n.dll
2015-09-10 16:51 - 2015-07-03 17:12 - 01187840 _____ () D:\Program Files (x86)\Steam\icuuc.dll
2015-11-11 12:03 - 2015-11-10 03:44 - 00806992 _____ () D:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-11-10 20:13 - 2015-11-03 23:00 - 00201728 _____ () D:\Program Files (x86)\Steam\bin\openvr_api.dll
2015-10-09 22:18 - 2015-10-08 23:20 - 45010208 _____ () D:\Program Files (x86)\Steam\bin\libcef.dll
2015-10-08 18:04 - 2015-09-25 00:56 - 00119208 _____ () D:\Program Files (x86)\Steam\winh264.dll
2015-11-28 19:59 - 2015-11-07 05:36 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\libglesv2.dll
2015-11-28 19:59 - 2015-11-07 05:36 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\libegl.dll
2015-11-28 19:59 - 2015-11-07 05:36 - 16496456 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\PepperFlash\pepflashplayer.dll
2015-06-08 20:06 - 2015-06-08 20:06 - 00014336 _____ () D:\Program Files (x86)\Notepad++\plugins\NppExport.dll
2015-05-15 15:24 - 2015-05-15 15:24 - 02873856 _____ () D:\Program Files (x86)\Notepad++\plugins\NppFTP.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\1001movie.com -> 1001movie.com

Da befinden sich 6091 mehr Seiten.


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.0.1 - 192.168.0.2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2479265680-2342477357-1201510650-1001\...\StartupApproved\Run: => "OneDrive"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{7E1D3581-05E4-4668-A3BB-798120DE634B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{96E5653D-8A80-48B7-8AEF-2C9BECD24C66}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{1C8FE427-3EA3-452C-8F07-00CBB8743EF7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{BE5C3E2C-CA73-4361-8906-0CE93788FA41}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{2953E054-B0AB-45FA-A2BF-4935F2B49C86}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{2E4255E8-378C-4465-B507-0730EFD3AF10}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{AE9F0C74-84F5-41BE-88A8-39B962043DD8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7A12D0DC-CCC8-4BD2-9D5F-40DEAC1227AA}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{3019AC10-4F37-43E8-B6EF-348AB566C637}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{5ED1863C-82A6-4A6E-BF9B-FDC0C45EE5C6}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D0328CC7-C656-4B1B-A96E-F01091C89607}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{E7E93C13-B798-4900-9BB4-84FADA049888}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B475F6FF-D57E-4D45-8C48-579F68991FF2}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A507438E-B210-4DAD-BED5-358EAE448C54}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{59202860-B7EA-4FB3-AAD5-D92FF83739D7}D:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) D:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{4B5120AF-CE31-4C62-A812-4FF56D16C482}D:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) D:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{1F19DF3D-D956-4DDF-9A45-9AACBB172F48}] => (Allow) D:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{1D81759D-2A4B-4F1C-97FA-362BB8E24D4D}] => (Allow) D:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{FA986404-2BC2-45E3-BB37-506315F56E3C}] => (Allow) D:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{B1BB3C97-691F-4668-87AF-4694ACDC2EF9}] => (Allow) D:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [TCP Query User{982ECCB7-6DF7-4886-9033-DDCFBF5D8E6A}D:\program files (x86)\java\bin\javaw.exe] => (Allow) D:\program files (x86)\java\bin\javaw.exe
FirewallRules: [UDP Query User{C7524B3C-FC4B-485C-86C5-24B17E305CA3}D:\program files (x86)\java\bin\javaw.exe] => (Allow) D:\program files (x86)\java\bin\javaw.exe
FirewallRules: [TCP Query User{B306E4CC-F4AE-4794-A434-960244F59B39}D:\spiele\quake 3\quake3 [portable]\quake3.exe] => (Block) D:\spiele\quake 3\quake3 [portable]\quake3.exe
FirewallRules: [UDP Query User{859A8D5C-0855-4C08-8AEF-B94C8960B8BE}D:\spiele\quake 3\quake3 [portable]\quake3.exe] => (Block) D:\spiele\quake 3\quake3 [portable]\quake3.exe
FirewallRules: [{87E03336-A5AA-421A-B12F-79A2F2DA1B4A}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\47.0.2526.18\remoting_host.exe
FirewallRules: [{C170F574-67EB-4E96-A808-D6AD09B3A41D}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\BlockNLoad\Win64\BlockNLoad.exe
FirewallRules: [{AFB52720-5A5C-43E5-A4F3-62830571762D}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\BlockNLoad\Win64\BlockNLoad.exe
FirewallRules: [{BC07C1C6-EE43-4AE4-9CC6-D71C6921E942}] => (Allow) D:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
FirewallRules: [TCP Query User{25DD0196-81E0-4EE4-B3B6-8D688765D511}D:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe] => (Allow) D:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe
FirewallRules: [UDP Query User{704FE284-2C7F-42E8-9F14-B056B1D33B77}D:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe] => (Allow) D:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe
FirewallRules: [{7EB6BDEE-6C10-41B7-B036-ADF556834D34}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/30/2015 05:37:21 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.

Error: (11/30/2015 03:59:59 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.

Error: (11/30/2015 03:59:57 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.

Error: (11/30/2015 03:59:57 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.

Error: (11/30/2015 03:59:56 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.

Error: (11/30/2015 03:59:49 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.

Error: (11/30/2015 03:59:47 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.

Error: (11/26/2015 09:56:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: 37cdgt21.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Name des fehlerhaften Moduls: 37cdgt21.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000011aa
ID des fehlerhaften Prozesses: 0x584
Startzeit der fehlerhaften Anwendung: 0x37cdgt21.exe0
Pfad der fehlerhaften Anwendung: 37cdgt21.exe1
Pfad des fehlerhaften Moduls: 37cdgt21.exe2
Berichtskennung: 37cdgt21.exe3
Vollständiger Name des fehlerhaften Pakets: 37cdgt21.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: 37cdgt21.exe5

Error: (11/26/2015 09:55:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: 37cdgt21.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Name des fehlerhaften Moduls: 37cdgt21.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000011aa
ID des fehlerhaften Prozesses: 0xc90
Startzeit der fehlerhaften Anwendung: 0x37cdgt21.exe0
Pfad der fehlerhaften Anwendung: 37cdgt21.exe1
Pfad des fehlerhaften Moduls: 37cdgt21.exe2
Berichtskennung: 37cdgt21.exe3
Vollständiger Name des fehlerhaften Pakets: 37cdgt21.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: 37cdgt21.exe5

Error: (11/26/2015 09:54:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: 37cdgt21.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Name des fehlerhaften Moduls: 37cdgt21.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000011aa
ID des fehlerhaften Prozesses: 0x9d4
Startzeit der fehlerhaften Anwendung: 0x37cdgt21.exe0
Pfad der fehlerhaften Anwendung: 37cdgt21.exe1
Pfad des fehlerhaften Moduls: 37cdgt21.exe2
Berichtskennung: 37cdgt21.exe3
Vollständiger Name des fehlerhaften Pakets: 37cdgt21.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: 37cdgt21.exe5


Systemfehler:
=============
Error: (11/30/2015 05:36:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (11/30/2015 05:36:01 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Stefan\AppData\Local\Temp\ehdrv.sys

Error: (11/30/2015 05:36:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (11/30/2015 05:36:00 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Stefan\AppData\Local\Temp\ehdrv.sys

Error: (11/30/2015 05:36:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (11/30/2015 05:36:00 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Stefan\AppData\Local\Temp\ehdrv.sys

Error: (11/30/2015 05:36:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (11/30/2015 05:36:00 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Stefan\AppData\Local\Temp\ehdrv.sys

Error: (11/30/2015 05:35:59 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (11/30/2015 05:35:59 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Stefan\AppData\Local\Temp\ehdrv.sys


CodeIntegrity:
===================================
  Date: 2015-11-29 16:57:09.218
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-25 23:02:19.243
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-25 01:41:50.719
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-18 22:13:09.702
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-17 03:49:27.572
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-11 13:16:29.992
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-02 00:50:19.790
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-10-28 22:18:36.809
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-10-26 20:41:11.574
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-10-25 14:57:03.265
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-5200U CPU @ 2.20GHz
Prozentuale Nutzung des RAM: 45%
Installierter physikalischer RAM: 8091.8 MB
Verfügbarer physikalischer RAM: 4443.75 MB
Summe virtueller Speicher: 9371.8 MB
Verfügbarer virtueller Speicher: 4574.65 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:38.51 GB) (Free:4.3 GB) NTFS
Drive d: () (Fixed) (Total:426.7 GB) (Free:341.07 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 2BFB4DC8)

Partition: GPT.

==================== Ende von Addition.txt ============================

securitycheck:

Code:

ATTFilter

 Results of screen317's Security Check version 1.009  
   x86 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Windows Defender   
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 MVPS Hosts File  
 SpywareBlaster 5.2    
 Microsoft VisualStudio JavaScript Project System 
 Java 8 Update 65  
 Microsoft VisualStudio JavaScript Language Service 
 Java version 32-bit out of Date! 
 Google Chrome (46.0.2490.86) 
````````Process Check: objlist.exe by Laurent````````  
 Windows Defender MSMpEng.exe 
 Windows Defender MSASCui.exe 
 Windows Defender MSASCui.exe   
 Windows Defender MpCmdRun.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````

ESET:

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=3a376b1859534b40823804edca38a65a
# end=init
# utc_time=2015-11-30 03:00:07
# local_time=2015-11-30 04:00:07 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
Update Init
Update Download
Update Finalize
Updated modules version: 26972
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=3a376b1859534b40823804edca38a65a
# end=updated
# utc_time=2015-11-30 03:03:33
# local_time=2015-11-30 04:03:33 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=3a376b1859534b40823804edca38a65a
# engine=26972
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-11-30 04:35:59
# local_time=2015-11-30 05:35:59 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 12715 12375371 0 0
# scanned=288145
# found=1
# cleaned=1
# scan_time=5546
sh=09E369F9EA069BC141F0D34DC18AEC3ABBA77F6B ft=1 fh=241f3ea108f7cde2 vn="Variante von Win32/Adware.Vonteera.L Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\winsta\bin\Winsta.exe.vir"

Noch immer das gleiche Problem, allerdings öffnen sich nun nur noch 3 leere Tabs in separaten Fenstern. Zudem kann ich komischer Weise meinen Chrome nicht mehr in der Startleiste anklicken, der Fehlermeldung nach denkt der PC Chrome wäre auf D gespeichert und nicht auf C. Vielleicht auch deswegen die leeren Tabs? das schädliche Programm weiß nicht mehr seine anwendung zu öffnen? ähnlich wie das System selbst?

Edit: Wenn ich Links anklicke öffnen sich auch nur noch leere Tabs in neuen Fenstern... irgendwas ist an der Registry von Chrome falsch?!?!

Edit 2: Automatische Windowsupdates schlagen fehl. Bei neustart installieren sie sich. kurz vorm vollendeten Hochfahren: "Updates konnte nicht übernommen werden, setze Computerstand zurück" ...jetzt ist irgendwas ganz komisch...

schrauber · 01.12.2015, 20:14

Revo Uninstaller - Download - Filepony
damit Chrome deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.google.com/chrome/answer/3296214?hl=de

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

Task: {2C1BC126-7719-45D6-BA5F-9693A75EE102} - \realtor -> Keine Datei <==== ACHTUNG

Task: {AAD50685-1B39-4FF5-8387-F0F22B496B4F} - \DriverMgr -> Keine Datei <==== ACHTUNG
Emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Bitte Windows Repair laufen lassen:
Windows reparieren - so geht's - Anleitungen

SmurfThis. · 03.12.2015, 00:27

Guten Abend,

habe alles so ausgeführt wie oben beschrieben.

Nach dem Updates bekomme ich weiterhin folgende Meldung: "Die Updates konnten nicht eingerichtet werden. Änderungen werden rückgängig gemacht. Schalten Sie den Rechner nicht aus."
In der UpdateQueue sind dann auch wieder die gleichen Windoof updates und mehr.

Auch nachdem ich Chrome neu installiert habe kommt weiterhin: "D:\Program Files (x86)\Google\Chrome\Application\chrome.exe. Der angegebene Pfad ist nicht vorhanden. Überprüfen Sie die Pfadangabe, und wiederholen Sie den Vorgang."
Dafür funktionieren wieder externe Links.

Evtl. Problem: Mein Standardpfad bei Installationen ist D. Und Chrome mag ein anderes Laufwerk als C kaum bis gar nicht. Es lässt sich ja nicht mal wo anders installieren.

Weiterhin anbei die geforderten Logs.

Dickes Danke für deine Mühe!!

Code:

ATTFilter

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:29-11-2015
durchgeführt von Stefan (2015-12-02 19:50:29) Run:1
Gestartet von C:\Users\Stefan\Desktop
Geladene Profile: Stefan (Verfügbare Profile: Stefan)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
Task: {2C1BC126-7719-45D6-BA5F-9693A75EE102} - \realtor -> Keine Datei <==== ACHTUNG

Task: {AAD50685-1B39-4FF5-8387-F0F22B496B4F} - \DriverMgr -> Keine Datei <==== ACHTUNG
Emptytemp:
*****************

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2C1BC126-7719-45D6-BA5F-9693A75EE102}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2C1BC126-7719-45D6-BA5F-9693A75EE102}" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\realtor => Schlüssel nicht gefunden. 
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{AAD50685-1B39-4FF5-8387-F0F22B496B4F}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AAD50685-1B39-4FF5-8387-F0F22B496B4F}" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DriverMgr => Schlüssel nicht gefunden. 
EmptyTemp: => 113.4 MB temporäre Dateien entfernt.


Das System musste neu gestartet werden.

==== Ende von Fixlog 19:50:37 ====

Grüße
Stefan

Ich dachte das eigentliche Problem sein gelöst, leider tritt der Fehler weiterhin auf. Jetzt wieder in seiner Ursprungsform.

schrauber · 03.12.2015, 22:02

Das Repair Tool wurde auch genutzt?

SmurfThis. · 03.12.2015, 22:04

Ja natürlich.
Lief auch fast eine Stunde und hat 43x repariert. Großteil davon erfolgreich,allerdings nicht alles.

schrauber · 04.12.2015, 16:28

Dann bleibt nur noch ein Inplace Upgrade:

Inplace Upgrade Anleitung:
Inplace Upgrade - Windows reparieren - Anleitungen

SmurfThis. · 10.12.2015, 14:55

Mittlerweile bin ich mir sicher das zumindest die Websiten nicht mehr aufgerufen werden.
Probleme mit dem starten von Chrome und den Windows updates bestehen weiterhin.
Besten Dank für deine Mühen.
Ich werde schauen das ich die Fehler selbst behebe, sollte mir das nicht möglich sein eröffne ich einen neuen Thread im passenden Bereich des Forums.
Vielen Dank!!!

cosinus · 10.12.2015, 15:37

schrauber ist verhindert, deswegen übernehme ich mal.

Bei klemmenden Windows Updates hilft oft nur das inplace upgrade oder ne komplette Neuinstallation wenn schon das repairtool nichts gebracht hat....da wird dir ein neuer Thread leider auch nicht viel bringen um das zu ändern.

03.12.2015, 22:02	#11
schrauber /// the machine /// TB-Ausbilder	Windows 10: Chrome öffnet websiten. Das Repair Tool wurde auch genutzt? __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

04.12.2015, 16:28	#13
schrauber /// the machine /// TB-Ausbilder	Windows 10: Chrome öffnet websiten. Dann bleibt nur noch ein Inplace Upgrade: Inplace Upgrade Anleitung: Inplace Upgrade - Windows reparieren - Anleitungen __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

10.12.2015, 15:37	#15
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Windows 10: Chrome öffnet websiten. schrauber ist verhindert, deswegen übernehme ich mal. Bei klemmenden Windows Updates hilft oft nur das inplace upgrade oder ne komplette Neuinstallation wenn schon das repairtool nichts gebracht hat....da wird dir ein neuer Thread leider auch nicht viel bringen um das zu ändern. __________________ Logfiles bitte immer in CODE-Tags posten

Windows 10: Chrome öffnet websiten.

Log-Analyse und Auswertung: Windows 10: Chrome öffnet websiten.