Wallpapers.exe in AppData

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 21-08-2016 01
durchgeführt von Tygan (Administrator) auf COMPUTER-128234 (22-08-2016 13:04:25)
Gestartet von C:\Users\Tygan\Desktop
Geladene Profile: Tygan (Verfügbare Profile: Tygan & shady & Administrator & DefaultAppPool)
Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
() C:\Program Files (x86)\NETGEAR\WNA3100M\WifiSvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
() C:\Program Files\Core Temp\Core Temp.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.7.102.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\puush\puush.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\NETGEAR\WNA3100M\WNA3100M.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSYNC.EXE
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
() C:\Program Files\WindowsApps\9E2F88E3.Twitter_5.2.0.0_x86__wgeqdkkx372wm\Twitter.Windows.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft) C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.7.102.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6965.41051.0_x64__8wekyb3d8bbwe\HxMail.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6965.41051.0_x64__8wekyb3d8bbwe\HxTsr.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1605.1582.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11607.1001.32.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.7031.23501.0_x64__8wekyb3d8bbwe\OHub.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
(Microsoft Corporation) C:\Users\Tygan\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\FileCoAuth.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Dominik Reichl) C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [NetSpeedMonitor] => C:\Program Files\NetSpeedMonitor\nsmc.exe [71680 2010-04-04] (Florian Gilles)
HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2004-06-14] (InstallShield Software Corporation)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2779136 2016-06-11] (Dominik Reichl)
HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [104128 2016-04-14] (VMware, Inc.)
HKU\S-1-5-21-624198674-977653023-2037852723-1021\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [568904 2015-05-30] ()
HKU\S-1-5-21-624198674-977653023-2037852723-1021\...\Run: [ISUSPM Startup] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2004-06-14] (InstallShield Software Corporation)
HKU\S-1-5-21-624198674-977653023-2037852723-1021\...\Run: [Discord] => C:\Users\Tygan\AppData\Local\Discord\app-0.0.294\Discord.exe
HKU\S-1-5-21-624198674-977653023-2037852723-1021\...\Run: [GoogleDriveSync] => "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
HKU\S-1-5-21-624198674-977653023-2037852723-1021\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2857248 2016-08-16] (Valve Corporation)
HKU\S-1-5-21-624198674-977653023-2037852723-1021\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29494400 2016-07-13] (Skype Technologies S.A.)
HKU\S-1-5-21-624198674-977653023-2037852723-1021\...\Run: [pCloud] => C:\Program Files (x86)\pCloud Drive\pCloud.exe
SSODL: EldosMountNotificator-cbfs6 - {73F8D53A-4E1F-4434-A7D0-7C1E3B50BB78} - C:\WINDOWS\system32\cbfsMntNtf6.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator-cbfs6 - {73F8D53A-4E1F-4434-A7D0-7C1E3B50BB78} - C:\WINDOWS\SysWOW64\cbfsMntNtf6.dll (EldoS Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei
ShellIconOverlayIdentifiers: [1MediaFireIconError] -> {5EE8C634-CDC0-453D-9731-DF0B19F4E807} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon3_d1739.dll Keine Datei
ShellIconOverlayIdentifiers: [1MediaFireIconReadOnly] -> {7995D0FC-769B-4197-AEC0-991921CB99E1} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon5_d1739.dll Keine Datei
ShellIconOverlayIdentifiers: [1MediaFireIconSynched] -> {9A3B79CB-D899-40B5-8DBC-20447F1ADC8F} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon_d1739.dll Keine Datei
ShellIconOverlayIdentifiers: [1MediaFireIconSyncing] -> {C4D81971-6B13-4173-AB21-F83AD20CCC04} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon2_d1739.dll Keine Datei
ShellIconOverlayIdentifiers: [EldosIconOverlay-cbfs6] -> {36A9E202-9EBD-4037-9EC8-9403A1FE827B} => C:\WINDOWS\system32\cbfsMntNtf6.dll [2016-06-13] (EldoS Corporation)
ShellIconOverlayIdentifiers: [MediaFireIconLock] -> {759F3E92-F4E8-4953-8315-238B8B17E0F3} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon4_d1739.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay-cbfs6] -> {36A9E202-9EBD-4037-9EC8-9403A1FE827B} => C:\WINDOWS\SysWOW64\cbfsMntNtf6.dll [2016-06-13] (EldoS Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WNA3100M Genie.lnk [2016-07-10]
ShortcutTarget: NETGEAR WNA3100M Genie.lnk -> C:\Program Files (x86)\NETGEAR\WNA3100M\WNA3100M.exe ()
GroupPolicyScripts: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\..\Interfaces\{f2c76c85-8df8-4ee3-a794-c760b75c17ca}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-624198674-977653023-2037852723-1021 -> DefaultScope {CD28C5AB-6B7C-4A80-B791-6F9099DE1CEE} URL = hxxps://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKU\S-1-5-21-624198674-977653023-2037852723-1021 -> {CD28C5AB-6B7C-4A80-B791-6F9099DE1CEE} URL = hxxps://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-08-21] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-08-21] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-21] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-21] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-21] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-21] (Microsoft Corporation)

Edge: 
======
Edge Extension: AdBlock -> EdgeExtension_BetaFishAdBlock_c1wakc4j0nefm => C:\Program Files\WindowsApps\BetaFish.AdBlock_1.0.5.0_neutral__c1wakc4j0nefm [2016-08-19]

FireFox:
========
FF ProfilePath: C:\Users\Tygan\AppData\Roaming\Mozilla\Firefox\Profiles\3am39cb5.default
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2015-01-09] (Adobe Systems, Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-08-21] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Extension: uBlock Origin - C:\Users\Tygan\AppData\Roaming\Mozilla\Firefox\Profiles\3am39cb5.default\Extensions\uBlock0@raymondhill.net.xpi [2016-08-07]
FF Extension: O2 Service Suite - C:\Users\Tygan\AppData\Roaming\Mozilla\Firefox\Profiles\3am39cb5.default\Extensions\{} [2016-08-19] [ist nicht signiert]

Chrome: 
=======
CHR StartupUrls: Profile 1 -> "hxxp://www.youtube.com/"
CHR Profile: C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-08-19]
CHR Extension: (Google Docs) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-08-19]
CHR Extension: (Google Drive) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-04]
CHR Extension: (YouTube) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-04]
CHR Extension: (Google Tabellen) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-08-19]
CHR Extension: (Google Docs Offline) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-08-19]
CHR Extension: (Blue Space) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgafflokkagpjiofcoodepkehnpldbge [2016-04-04]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-08-19]
CHR Extension: (Google Mail) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-04]
CHR Profile: C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Präsentationen) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-08-19]
CHR Extension: (Google Docs) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2016-08-19]
CHR Extension: (Google Drive) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-05]
CHR Extension: (YouTube) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-05]
CHR Extension: (uBlock Origin) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-08-19]
CHR Extension: (ZenMate VPN - Top Internet Security & Unblock) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fdcgdnkidjaadafnichfpabhfomcebme [2016-08-19]
CHR Extension: (Google Tabellen) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-08-19]
CHR Extension: (Google Docs Offline) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-08-19]
CHR Extension: (Black blue shards) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hgoflmajhinnohnhkfeggflmmppiilck [2016-07-25]
CHR Extension: (SoundCloud Downloader Free) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\libedajeiljdoodmokbppgapcfbignci [2016-08-19]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-08-19]
CHR Extension: (Google Mail) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-05]
CHR Extension: (Chrome Media Router) - C:\Users\Tygan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-19]
CHR HKU\S-1-5-21-624198674-977653023-2037852723-1021\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2159832 2016-08-12] (Adobe Systems, Incorporated)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2950856 2016-07-25] (Microsoft Corporation)
R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [216576 2016-04-05] () [Datei ist nicht signiert]
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2779136 2016-08-21] (ESET)
S3 ose; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [200240 2016-07-23] (Microsoft Corporation) [Datei ist nicht signiert]
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [303360 2015-06-24] (Realtek Semiconductor)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-07-17] (Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7248144 2016-08-08] (TeamViewer GmbH)
S3 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [12471368 2016-04-14] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 WSWNA3100M; C:\Program Files (x86)\NETGEAR\WNA3100M\WifiSvc.exe [316120 2014-08-18] ()

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 ALSysIO; C:\Users\Tygan\AppData\Local\Temp\ALSysIO64.sys [35320 2016-08-22] (Arthur Liberman)
R1 cbfs6; C:\WINDOWS\system32\drivers\cbfs6.sys [460992 2016-06-13] (EldoS Corporation)
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30352 2015-05-12] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [263296 2016-08-21] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [199328 2016-06-23] (ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [15488 2016-06-23] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [197288 2016-06-23] (ESET)
R2 epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [181416 2016-06-23] (ESET)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek                                            )
R3 RtlWlanu; C:\Windows\System32\drivers\rtwlanu.sys [3859704 2015-10-16] (Realtek Semiconductor Corporation                           )
S3 taphss6; C:\Windows\System32\drivers\taphss6.sys [42064 2016-05-27] (Anchorfree Inc.)
S1 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [117768 2015-11-10] (Oracle Corporation)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [125008 2015-11-10] (Oracle Corporation)
R1 veracrypt; C:\Windows\System32\drivers\veracrypt.sys [198248 2016-08-02] (IDRIX)
R3 vpnpbus; C:\Windows\System32\drivers\vpnpbus.sys [18624 2016-06-13] (EldoS Corporation)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [75512 2015-11-05] (VMware, Inc.)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [34520 2015-07-09] (VMware, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-08-22 13:04 - 2016-08-22 13:05 - 00020851 _____ C:\Users\Tygan\Desktop\FRST.txt
2016-08-22 12:14 - 2016-08-22 12:30 - 04749395 _____ C:\Users\Tygan\AppData\Roaming\wallpapers.exe
2016-08-22 12:13 - 2016-08-22 13:04 - 00000000 ____D C:\FRST
2016-08-22 12:11 - 2016-08-22 12:13 - 02396672 _____ (Farbar) C:\Users\Tygan\Desktop\FRST64.exe
2016-08-22 11:21 - 2016-08-22 11:21 - 00000022 _____ C:\WINDOWS\S.dirmngr
2016-08-22 00:36 - 2016-08-22 00:36 - 00000000 ____D C:\Users\Tygan\Documents\Benutzerdefinierte Office-Vorlagen
2016-08-21 17:57 - 2016-08-21 17:57 - 00000000 ____D C:\Users\Tygan\AppData\Local\ESET
2016-08-21 17:09 - 2016-08-21 17:09 - 00002150 _____ C:\Users\Tygan\Desktop\ESET NOD32 Antivirus.lnk
2016-08-21 17:03 - 2016-08-22 12:23 - 00000000 ___RD C:\Users\Tygan\OneDrive
2016-08-21 17:02 - 2016-08-21 17:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2016-08-21 17:02 - 2016-08-21 17:02 - 00000000 ____D C:\ProgramData\ESET
2016-08-21 17:02 - 2016-08-21 17:02 - 00000000 ____D C:\Program Files\ESET
2016-08-21 16:29 - 2016-08-21 16:29 - 00002583 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2016-08-21 16:29 - 2016-08-21 16:29 - 00002579 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2016-08-21 16:29 - 2016-08-21 16:29 - 00002558 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2016-08-21 16:29 - 2016-08-21 16:29 - 00002533 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2016-08-21 16:29 - 2016-08-21 16:29 - 00002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2016-08-21 16:29 - 2016-08-21 16:29 - 00002497 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2016-08-21 16:29 - 2016-08-21 16:29 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2016-08-21 16:29 - 2016-08-21 16:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools
2016-08-21 16:17 - 2016-08-21 19:12 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-08-21 16:17 - 2016-08-21 16:17 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-08-19 22:00 - 2016-08-19 22:00 - 00000788 _____ C:\Users\Tygan\Documents\Bilder - Verknüpfung.lnk
2016-08-19 18:24 - 2016-08-19 18:24 - 00000000 ____D C:\Users\shady\AppData\Local\Mozilla
2016-08-19 18:10 - 2016-08-19 18:25 - 00000000 ____D C:\Users\shady\AppData\Roaming\NetSpeedMonitor
2016-08-19 18:10 - 2016-08-19 18:10 - 00000000 ____D C:\Users\shady\AppData\Local\MicrosoftEdge
2016-08-19 18:09 - 2016-08-19 18:10 - 00000000 ____D C:\Users\shady\AppData\Local\ConnectedDevicesPlatform
2016-08-19 18:09 - 2016-08-19 18:09 - 00000000 ____D C:\Users\shady\AppData\Local\VirtualStore
2016-08-19 18:09 - 2016-08-19 18:09 - 00000000 ____D C:\Users\shady\AppData\Local\Publishers
2016-08-19 18:09 - 2016-08-19 18:09 - 00000000 ____D C:\Users\shady\AppData\Local\Comms
2016-08-19 17:40 - 2016-08-19 17:40 - 00000000 ____D C:\Users\Tygan\Documents\HDClone Images
2016-08-19 16:15 - 2016-04-14 17:17 - 00066752 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vmx86.sys
2016-08-19 16:15 - 2015-11-05 19:25 - 00075512 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vsock.sys
2016-08-19 16:15 - 2015-11-05 19:25 - 00068288 _____ (VMware, Inc.) C:\WINDOWS\system32\vsocklib.dll
2016-08-19 16:15 - 2015-11-05 19:25 - 00064192 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vsocklib.dll
2016-08-19 16:14 - 2016-04-14 17:17 - 00934080 _____ (VMware, Inc.) C:\WINDOWS\system32\vnetlib64.dll
2016-08-19 16:14 - 2016-04-14 17:17 - 00392896 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vmnat.exe
2016-08-19 16:14 - 2016-04-14 17:17 - 00358080 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vmnetdhcp.exe
2016-08-19 16:14 - 2016-04-14 16:53 - 00026816 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vmnetuserif.sys
2016-08-19 16:14 - 2016-03-10 08:03 - 00057536 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\hcmon.sys
2016-08-19 16:13 - 2016-08-19 16:13 - 00001276 _____ C:\Users\Public\Desktop\VMware Workstation Pro.lnk
2016-08-19 16:13 - 2016-08-19 16:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware
2016-08-19 16:13 - 2016-08-19 16:13 - 00000000 ____D C:\Program Files\Common Files\VMware
2016-08-19 01:17 - 2016-08-19 01:17 - 00000037 _____ C:\Users\Tygan\Desktop\heiseshow.txt
2016-08-18 00:23 - 2016-08-18 00:23 - 00069632 _____ C:\Users\Tygan\Documents\All-User-Install-Agent.evtx
2016-08-17 22:29 - 2016-08-17 22:30 - 00000000 ____D C:\Users\Maxson\AppData\Roaming\NetSpeedMonitor
2016-08-17 22:29 - 2016-08-17 22:29 - 00000000 ___RD C:\Users\Maxson\OneDrive
2016-08-17 22:28 - 2016-08-17 22:28 - 00000000 ____D C:\Users\Maxson\AppData\Local\VirtualStore
2016-08-17 22:28 - 2016-08-17 22:28 - 00000000 ____D C:\Users\Maxson\AppData\Local\Comms
2016-08-17 22:27 - 2016-08-19 13:48 - 00000000 ____D C:\Users\Maxson
2016-08-17 22:27 - 2016-08-17 22:28 - 00000000 ____D C:\Users\Maxson\AppData\Local\Packages
2016-08-17 22:27 - 2016-08-17 22:28 - 00000000 ____D C:\Users\Maxson\AppData\Local\ConnectedDevicesPlatform
2016-08-17 22:27 - 2016-08-17 22:27 - 00000000 _SHDL C:\Users\Maxson\Vorlagen
2016-08-17 22:27 - 2016-08-17 22:27 - 00000000 _SHDL C:\Users\Maxson\Startmenü
2016-08-17 22:27 - 2016-08-17 22:27 - 00000000 _SHDL C:\Users\Maxson\Netzwerkumgebung
2016-08-17 22:27 - 2016-08-17 22:27 - 00000000 _SHDL C:\Users\Maxson\Lokale Einstellungen
2016-08-17 22:27 - 2016-08-17 22:27 - 00000000 _SHDL C:\Users\Maxson\Eigene Dateien
2016-08-17 22:27 - 2016-08-17 22:27 - 00000000 _SHDL C:\Users\Maxson\Druckumgebung
2016-08-17 22:27 - 2016-08-17 22:27 - 00000000 _SHDL C:\Users\Maxson\Documents\Eigene Videos
2016-08-17 22:27 - 2016-08-17 22:27 - 00000000 _SHDL C:\Users\Maxson\Documents\Eigene Musik
2016-08-17 22:27 - 2016-08-17 22:27 - 00000000 _SHDL C:\Users\Maxson\Documents\Eigene Bilder
2016-08-17 22:27 - 2016-08-17 22:27 - 00000000 _SHDL C:\Users\Maxson\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-08-17 22:27 - 2016-08-17 22:27 - 00000000 _SHDL C:\Users\Maxson\AppData\Local\Verlauf
2016-08-17 22:27 - 2016-08-17 22:27 - 00000000 _SHDL C:\Users\Maxson\AppData\Local\Anwendungsdaten
2016-08-17 22:27 - 2016-08-17 22:27 - 00000000 _SHDL C:\Users\Maxson\Anwendungsdaten
2016-08-17 22:27 - 2016-08-17 22:27 - 00000000 ____D C:\Users\Maxson\AppData\Roaming\Adobe
2016-08-17 22:27 - 2016-08-17 22:27 - 00000000 ____D C:\Users\Maxson\AppData\Local\Google
2016-08-17 22:27 - 2016-08-03 17:17 - 00000000 ____D C:\Users\Maxson\AppData\Roaming\Media Center Programs
2016-08-17 22:24 - 2016-08-17 22:32 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\NetSpeedMonitor
2016-08-17 22:23 - 2016-08-17 22:23 - 00000000 ____D C:\Users\Administrator\AppData\Local\ConnectedDevicesPlatform
2016-08-17 21:58 - 2016-08-17 21:58 - 00000000 ____D C:\Users\Lem0th\AppData\Local\Comms
2016-08-17 20:27 - 2016-08-17 20:27 - 00000000 ____D C:\Users\Lem0th\AppData\Local\NetworkTiles
2016-08-17 20:19 - 2016-08-17 20:19 - 00000000 ____D C:\Users\Lem0th\AppData\Local\PeerDistRepub
2016-08-17 19:31 - 2016-08-17 19:31 - 00000000 ____D C:\Users\Lem0th\AppData\Local\Steam
2016-08-17 19:31 - 2016-08-17 19:31 - 00000000 ____D C:\Users\Lem0th\AppData\Local\CEF
2016-08-17 19:22 - 2016-08-17 19:23 - 31371264 _____ C:\Users\Lem0th\Downloads\main.db
2016-08-17 19:17 - 2016-08-19 13:48 - 00000000 ____D C:\Users\Lem0th\AppData\Roaming\Skype
2016-08-17 19:17 - 2016-08-17 19:17 - 00000000 ____D C:\Users\Lem0th\Tracing
2016-08-17 19:06 - 2016-08-17 22:41 - 00000000 ____D C:\Users\Lem0th\AppData\Roaming\KeePass
2016-08-17 19:04 - 2016-08-19 13:48 - 00000000 ____D C:\Users\Lem0th\AppData\Roaming\Thunderbird
2016-08-17 19:04 - 2016-08-17 19:04 - 00000000 ____D C:\Users\Lem0th\AppData\Local\Thunderbird
2016-08-17 18:59 - 2016-08-17 18:59 - 00000000 ____D C:\Users\Lem0th\Documents\My Safes
2016-08-17 18:55 - 2016-08-17 19:07 - 00000000 ____D C:\Users\Lem0th\AppData\Local\Mozilla
2016-08-17 18:55 - 2016-08-17 18:55 - 00000000 ____D C:\Users\Lem0th\AppData\Roaming\Mozilla
2016-08-17 18:49 - 2016-08-17 18:50 - 00000000 ___RD C:\Users\Lem0th\OneDrive
2016-08-17 18:48 - 2016-08-19 13:48 - 00000000 ____D C:\Users\Lem0th\AppData\Local\TileDataLayer
2016-08-17 18:48 - 2016-08-19 13:48 - 00000000 ____D C:\Users\Lem0th
2016-08-17 18:48 - 2016-08-17 19:00 - 00000000 ____D C:\Users\Lem0th\AppData\Local\ConnectedDevicesPlatform
2016-08-17 18:48 - 2016-08-17 18:50 - 00000000 ____D C:\Users\Lem0th\AppData\Local\Packages
2016-08-17 18:48 - 2016-08-17 18:48 - 00000000 _SHDL C:\Users\Lem0th\Vorlagen
2016-08-17 18:48 - 2016-08-17 18:48 - 00000000 _SHDL C:\Users\Lem0th\Startmenü
2016-08-17 18:48 - 2016-08-17 18:48 - 00000000 _SHDL C:\Users\Lem0th\Netzwerkumgebung
2016-08-17 18:48 - 2016-08-17 18:48 - 00000000 _SHDL C:\Users\Lem0th\Lokale Einstellungen
2016-08-17 18:48 - 2016-08-17 18:48 - 00000000 _SHDL C:\Users\Lem0th\Eigene Dateien
2016-08-17 18:48 - 2016-08-17 18:48 - 00000000 _SHDL C:\Users\Lem0th\Druckumgebung
2016-08-17 18:48 - 2016-08-17 18:48 - 00000000 _SHDL C:\Users\Lem0th\Documents\Eigene Videos
2016-08-17 18:48 - 2016-08-17 18:48 - 00000000 _SHDL C:\Users\Lem0th\Documents\Eigene Musik
2016-08-17 18:48 - 2016-08-17 18:48 - 00000000 _SHDL C:\Users\Lem0th\Documents\Eigene Bilder
2016-08-17 18:48 - 2016-08-17 18:48 - 00000000 _SHDL C:\Users\Lem0th\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-08-17 18:48 - 2016-08-17 18:48 - 00000000 _SHDL C:\Users\Lem0th\AppData\Local\Verlauf
2016-08-17 18:48 - 2016-08-17 18:48 - 00000000 _SHDL C:\Users\Lem0th\AppData\Local\Anwendungsdaten
2016-08-17 18:48 - 2016-08-17 18:48 - 00000000 _SHDL C:\Users\Lem0th\Anwendungsdaten
2016-08-17 18:48 - 2016-08-17 18:48 - 00000000 ____D C:\Users\Lem0th\AppData\Roaming\Adobe
2016-08-17 18:48 - 2016-08-17 18:48 - 00000000 ____D C:\Users\Lem0th\AppData\Local\VirtualStore
2016-08-17 18:48 - 2016-08-17 18:48 - 00000000 ____D C:\Users\Lem0th\AppData\Local\Google
2016-08-17 18:48 - 2016-08-03 17:17 - 00000000 ____D C:\Users\Lem0th\AppData\Roaming\Media Center Programs
2016-08-17 13:17 - 2016-08-17 13:17 - 00000000 ____D C:\Users\Public\Documents\Shared Virtual Machines
2016-08-17 10:46 - 2016-08-17 10:46 - 00003898 _____ C:\WINDOWS\System32\Tasks\Sperrbildschirm
2016-08-15 17:43 - 2016-08-15 17:43 - 00000000 ____D C:\Users\Tygan\Documents\pCloud Sync
2016-08-15 17:42 - 2016-08-16 00:27 - 00000000 ____D C:\Users\Tygan\AppData\Local\pCloud
2016-08-15 17:41 - 2016-06-13 05:14 - 00235424 _____ (EldoS Corporation) C:\WINDOWS\SysWOW64\cbfsNetRdr6.dll
2016-08-15 17:41 - 2016-06-13 05:14 - 00134560 _____ (EldoS Corporation) C:\WINDOWS\system32\cbfsNetRdr6.dll
2016-08-15 17:41 - 2016-06-13 05:13 - 00196000 _____ (EldoS Corporation) C:\WINDOWS\system32\cbfsMntNtf6.dll
2016-08-15 17:41 - 2016-06-13 05:13 - 00170400 _____ (EldoS Corporation) C:\WINDOWS\SysWOW64\cbfsMntNtf6.dll
2016-08-15 17:41 - 2016-06-13 05:07 - 00018624 _____ (EldoS Corporation) C:\WINDOWS\system32\Drivers\vpnpbus.sys
2016-08-15 17:41 - 2016-06-13 05:06 - 00460992 _____ (EldoS Corporation) C:\WINDOWS\system32\Drivers\cbfs6.sys
2016-08-15 17:40 - 2016-06-13 05:14 - 00018848 _____ (EldoS Corporation) C:\WINDOWS\system32\elevtmsg.dll
2016-08-15 17:37 - 2016-08-15 17:38 - 08526704 _____ (pCloud AG) C:\Users\Tygan\Downloads\pCloud_Windows_3.3.1.exe
2016-08-15 10:21 - 2016-08-15 10:21 - 00000989 _____ C:\Users\Tygan\Desktop\Core Temp.lnk
2016-08-15 10:17 - 2016-08-15 10:20 - 01190712 _____ (Alcpu ) C:\Users\Tygan\Downloads\Core-Temp-setup.exe
2016-08-13 03:23 - 2016-08-19 13:52 - 00000000 ____D C:\Users\Tygan\AppData\Local\fabi.me
2016-08-13 02:34 - 2016-08-13 02:34 - 00000206 _____ C:\Users\Tygan\Desktop\Fallout Shelter.url
2016-08-13 02:34 - 2016-08-13 02:34 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bethesda.net Launcher
2016-08-13 02:28 - 2016-08-20 01:05 - 00000000 ____D C:\Program Files (x86)\Bethesda.net Launcher
2016-08-13 02:28 - 2016-08-19 13:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda.net Launcher
2016-08-13 02:28 - 2016-08-13 02:31 - 00000000 ____D C:\Users\Tygan\AppData\Local\Bethesda.net Launcher
2016-08-13 02:28 - 2016-08-13 02:28 - 00001221 _____ C:\Users\Public\Desktop\Bethesda.net Launcher.lnk
2016-08-13 02:27 - 2016-08-13 02:28 - 07493336 _____ (Bethesda Softworks ) C:\Users\Tygan\Downloads\BethesdaNetLauncher_Setup.exe
2016-08-11 22:07 - 2016-08-19 13:52 - 00000000 ___RD C:\Users\Tygan\3D Objects
2016-08-10 21:07 - 2016-08-19 13:52 - 00000000 ____D C:\Users\shady\AppData\Roaming\Skype
2016-08-10 20:01 - 2016-08-19 18:24 - 00000000 ____D C:\Users\shady\AppData\Roaming\Mozilla
2016-08-10 19:26 - 2016-08-02 10:48 - 22219328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-08-10 19:26 - 2016-08-02 10:44 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2016-08-10 19:26 - 2016-08-02 10:20 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-08-10 19:26 - 2016-08-02 09:55 - 03617280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-08-10 19:26 - 2016-08-02 06:51 - 20965240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-08-10 19:26 - 2016-08-02 06:25 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2016-08-10 19:25 - 2016-08-02 10:58 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-08-10 19:25 - 2016-08-02 10:53 - 02745224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-08-10 19:25 - 2016-08-02 10:52 - 00619368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-08-10 19:25 - 2016-08-02 10:48 - 00241496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2016-08-10 19:25 - 2016-08-02 10:44 - 00151232 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-08-10 19:25 - 2016-08-02 10:23 - 22572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-08-10 19:25 - 2016-08-02 10:21 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2016-08-10 19:25 - 2016-08-02 10:21 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2016-08-10 19:25 - 2016-08-02 10:20 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-08-10 19:25 - 2016-08-02 10:15 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2016-08-10 19:25 - 2016-08-02 10:15 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-08-10 19:25 - 2016-08-02 10:14 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2016-08-10 19:25 - 2016-08-02 10:13 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-08-10 19:25 - 2016-08-02 10:12 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-08-10 19:25 - 2016-08-02 10:11 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-08-10 19:25 - 2016-08-02 10:11 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-08-10 19:25 - 2016-08-02 10:10 - 00509952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-08-10 19:25 - 2016-08-02 10:09 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-08-10 19:25 - 2016-08-02 10:07 - 23682048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-08-10 19:25 - 2016-08-02 10:07 - 09125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-08-10 19:25 - 2016-08-02 10:03 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-08-10 19:25 - 2016-08-02 10:00 - 05511168 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2016-08-10 19:25 - 2016-08-02 09:59 - 08124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-08-10 19:25 - 2016-08-02 09:58 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-08-10 19:25 - 2016-08-02 09:57 - 01491456 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-08-10 19:25 - 2016-08-02 09:56 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2016-08-10 19:25 - 2016-08-02 09:56 - 01785856 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-08-10 19:25 - 2016-08-02 09:56 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2016-08-10 19:25 - 2016-08-02 09:55 - 01508864 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-08-10 19:25 - 2016-08-02 09:52 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2016-08-10 19:25 - 2016-08-02 06:56 - 02251440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-08-10 19:25 - 2016-08-02 06:47 - 00079536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2016-08-10 19:25 - 2016-08-02 06:39 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2016-08-10 19:25 - 2016-08-02 06:37 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2016-08-10 19:25 - 2016-08-02 06:37 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-08-10 19:25 - 2016-08-02 06:36 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2016-08-10 19:25 - 2016-08-02 06:33 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-08-10 19:25 - 2016-08-02 06:30 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-08-10 19:25 - 2016-08-02 06:28 - 19423232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-08-10 19:25 - 2016-08-02 06:27 - 07623168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-08-10 19:25 - 2016-08-02 06:26 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-08-10 19:25 - 2016-08-02 06:26 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-08-10 19:25 - 2016-08-02 06:25 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-08-10 19:25 - 2016-08-02 06:23 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2016-08-10 19:25 - 2016-08-02 06:16 - 06044672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-08-10 19:25 - 2016-08-02 06:13 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-08-10 19:25 - 2016-08-02 06:13 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-08-10 19:25 - 2016-08-02 06:12 - 02999296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2016-08-10 19:25 - 2016-08-02 06:09 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2016-08-09 23:38 - 2016-08-22 11:22 - 00000000 ___HD C:\OneDriveTemp
2016-08-09 23:37 - 2016-08-09 23:38 - 00002428 _____ C:\Users\shady\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-08-09 23:33 - 2016-08-19 18:11 - 00000000 ____D C:\Users\shady\AppData\Local\Packages
2016-08-09 23:33 - 2016-08-19 13:52 - 00000000 ____D C:\Users\shady\AppData\Local\TileDataLayer
2016-08-09 23:33 - 2016-08-19 13:50 - 00000000 ____D C:\Users\shady\AppData\Local\Google
2016-08-09 23:32 - 2016-08-19 14:35 - 00000000 ____D C:\Users\shady
2016-08-09 23:32 - 2016-08-09 23:32 - 00000020 ___SH C:\Users\shady\ntuser.ini
2016-08-09 12:33 - 2016-08-17 17:21 - 00000037 _____ C:\Users\Tygan\Desktop\STARBOUND.txt
2016-08-08 18:06 - 2016-08-22 12:59 - 00000000 ____D C:\Users\Tygan\Desktop\Compressed Data
2016-08-08 16:41 - 2016-08-08 16:41 - 00000335 _____ C:\Users\Tygan\Desktop\Computer.lnk
2016-08-08 16:27 - 2016-08-19 13:54 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\PhotoScape
2016-08-08 16:26 - 2016-08-19 13:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape
2016-08-08 16:26 - 2016-08-08 16:27 - 00000000 ____D C:\Program Files (x86)\PhotoScape
2016-08-08 16:26 - 2016-08-08 16:26 - 00001100 _____ C:\Users\Tygan\Desktop\PhotoScape.lnk
2016-08-08 16:23 - 2016-08-19 13:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2016-08-08 16:23 - 2016-08-19 13:50 - 00000000 ____D C:\Program Files\VS Revo Group
2016-08-08 16:23 - 2016-08-08 16:23 - 00001079 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2016-08-08 16:08 - 2016-08-08 16:08 - 00000000 ____D C:\ProgramData\H&M System Software
2016-08-07 01:00 - 2016-08-07 01:01 - 38494576 _____ (Apple Inc.) C:\Users\Tygan\Documents\SafariSetup-5.1.7.exe
2016-08-04 15:50 - 2016-08-04 15:51 - 02668480 _____ (Resplendence Software Projects Sp. ) C:\Users\Tygan\Documents\whocrashedSetup.exe
2016-08-04 02:21 - 2016-08-19 13:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-08-04 02:21 - 2016-08-04 02:21 - 00002642 _____ C:\Users\Public\Desktop\Skype.lnk
2016-08-04 02:21 - 2016-08-04 02:21 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-08-04 02:19 - 2016-08-04 02:19 - 01463424 _____ (Skype Technologies S.A.) C:\Users\Tygan\Documents\SkypeSetup.exe
2016-08-04 01:17 - 2016-08-04 01:17 - 00001213 _____ C:\Users\Tygan\Desktop\Grand Theft Auto San Andreas.lnk
2016-08-03 19:45 - 2016-08-22 11:29 - 00000000 ____D C:\Program Files (x86)\Steam
2016-08-03 19:45 - 2016-08-19 13:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-08-03 19:45 - 2016-08-03 19:45 - 00001032 _____ C:\Users\Public\Desktop\Steam.lnk
2016-08-03 19:06 - 2016-08-19 13:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2016-08-03 19:06 - 2016-08-03 19:06 - 00001255 _____ C:\Users\Tygan\Desktop\CrystalDiskInfo.lnk
2016-08-03 19:06 - 2016-08-03 19:06 - 00000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2016-08-03 17:55 - 2016-08-03 17:38 - 00000000 ___DC C:\WINDOWS\Panther
2016-08-03 17:52 - 2016-08-03 17:52 - 02190688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-08-03 17:52 - 2016-08-03 17:52 - 01708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2016-08-03 17:52 - 2016-08-03 17:52 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-08-03 17:52 - 2016-08-03 17:52 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-08-03 17:52 - 2016-08-03 17:52 - 01418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-08-03 17:52 - 2016-08-03 17:52 - 01265424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-08-03 17:52 - 2016-08-03 17:52 - 01260384 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-08-03 17:52 - 2016-08-03 17:52 - 00843104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-08-03 17:52 - 2016-08-03 17:52 - 00770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-08-03 17:52 - 2016-08-03 17:52 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-08-03 17:52 - 2016-08-03 17:52 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-08-03 17:52 - 2016-08-03 17:52 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2016-08-03 17:52 - 2016-08-03 17:52 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2016-08-03 17:52 - 2016-08-03 17:52 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-08-03 17:52 - 2016-08-03 17:52 - 00062816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2016-08-03 17:52 - 2016-08-03 17:52 - 00000000 ____D C:\Program Files\CMAK
2016-08-03 17:52 - 2016-08-03 17:52 - 00000000 ____D C:\Program Files (x86)\CMAK
2016-08-03 17:50 - 2016-07-15 20:29 - 05739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2016-08-03 17:50 - 2016-07-15 20:29 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2016-08-03 17:50 - 2016-07-15 20:14 - 06354944 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2016-08-03 17:50 - 2016-07-15 19:45 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2016-08-03 17:50 - 2016-07-15 19:29 - 05489664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2016-08-03 17:42 - 2016-08-03 17:42 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-08-03 17:38 - 2016-08-03 19:02 - 00000000 ____D C:\Users\Tygan\AppData\Local\ConnectedDevicesPlatform
2016-08-03 17:38 - 2016-08-03 17:38 - 00000020 ___SH C:\Users\Tygan\ntuser.ini
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-08-03 17:37 - 2016-08-03 17:37 - 00000000 ____D C:\ProgramData\USOShared
2016-08-03 17:34 - 2016-08-03 17:36 - 00015243 _____ C:\WINDOWS\diagwrn.xml
2016-08-03 17:34 - 2016-08-03 17:36 - 00015243 _____ C:\WINDOWS\diagerr.xml
2016-08-03 17:33 - 2016-08-03 17:33 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-08-03 17:33 - 2016-08-03 16:57 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2016-08-03 17:29 - 2016-08-22 11:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-08-03 17:29 - 2016-08-19 18:47 - 00002454 _____ C:\WINDOWS\System32\Tasks\{8E2B0D8E-A7C2-41AB-A0CC-6F1051CCC161}
2016-08-03 17:29 - 2016-08-19 18:47 - 00002272 _____ C:\WINDOWS\System32\Tasks\{197B8FA4-1324-4E58-977E-3387813919D4}
2016-08-03 17:29 - 2016-08-19 18:47 - 00002242 _____ C:\WINDOWS\System32\Tasks\{D5006F34-817C-4DE0-877C-FFF62AEC3502}
2016-08-03 17:29 - 2016-08-19 18:47 - 00002238 _____ C:\WINDOWS\System32\Tasks\{9C213DAE-C246-4484-90F4-704E34947FA1}
2016-08-03 17:29 - 2016-08-03 17:29 - 00003550 _____ C:\WINDOWS\System32\Tasks\Open URL by RoboForm
2016-08-03 17:29 - 2016-08-03 17:29 - 00003312 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{0AB5F16D-2A55-4AC5-B647-F4960534A94A}
2016-08-03 17:29 - 2016-08-03 17:29 - 00003310 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A3A3CAB4-91B6-4CA4-B275-7159135E0FFF}
2016-08-03 17:29 - 2016-08-03 17:29 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2016-08-03 17:29 - 2015-04-11 21:21 - 00003188 _____ C:\WINDOWS\System32\Tasks\{1A673BBD-E760-48DE-8182-982ABA1E0CD0}
2016-08-03 17:29 - 2015-04-03 20:22 - 00003268 _____ C:\WINDOWS\System32\Tasks\{A1C0E21F-C04B-4D7F-A3C7-F4A887B38845}
2016-08-03 17:29 - 2015-03-29 13:25 - 00003192 _____ C:\WINDOWS\System32\Tasks\{104B9CA5-EF7D-4A10-ADB6-70F6F3EB62CE}
2016-08-03 17:29 - 2015-01-17 17:03 - 00003134 _____ C:\WINDOWS\System32\Tasks\{A4058700-9B97-4117-8851-8B6C3C211F42}
2016-08-03 17:28 - 2016-08-03 17:29 - 00003662 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-08-03 17:28 - 2016-08-03 17:29 - 00003438 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-08-03 17:28 - 2016-08-03 17:29 - 00002586 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2016-08-03 17:28 - 2016-08-03 17:29 - 00002210 _____ C:\WINDOWS\System32\Tasks\Core Temp Autostart Tygan
2016-08-03 17:28 - 2016-08-03 17:28 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2016-08-03 17:28 - 2016-08-03 17:28 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2016-08-03 17:28 - 2016-08-03 17:28 - 00000000 ____D C:\WINDOWS\system32\msmq
2016-08-03 17:28 - 2016-08-03 17:28 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2016-08-03 17:28 - 2016-08-03 17:28 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-08-03 17:28 - 2016-08-03 17:28 - 00000000 ____D C:\Program Files\MSBuild
2016-08-03 17:28 - 2016-08-03 17:28 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-08-03 17:28 - 2016-08-03 17:28 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-08-03 17:28 - 2016-08-03 17:28 - 00000000 ____D C:\inetpub
2016-08-03 17:28 - 2015-01-28 13:12 - 00003252 _____ C:\WINDOWS\System32\Tasks\avastBCLRestartS-1-5-21-624198674-977653023-2037852723-1003
2016-08-03 17:28 - 2014-01-23 22:36 - 00003540 _____ C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2016-08-03 17:27 - 2016-05-25 15:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-08-03 17:27 - 2016-05-25 15:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-08-03 17:27 - 2016-05-25 15:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2016-08-03 17:27 - 2016-05-25 12:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2016-08-03 17:27 - 2016-05-25 12:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-08-03 17:27 - 2016-05-25 12:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2016-08-03 17:17 - 2016-08-03 17:17 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-08-03 17:17 - 2016-08-03 17:17 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
2016-08-03 17:17 - 2016-08-03 17:17 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
2016-08-03 17:11 - 2016-08-03 17:20 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2016-08-03 17:11 - 2016-08-03 17:11 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2016-08-03 17:08 - 2016-08-22 11:28 - 00000000 ____D C:\Users\Tygan
2016-08-03 17:08 - 2016-08-19 13:55 - 00000000 ____D C:\Users\DefaultAppPool
2016-08-03 17:08 - 2016-08-19 13:55 - 00000000 ____D C:\Users\Administrator
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Tygan\Vorlagen
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Tygan\Startmenü
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Tygan\Netzwerkumgebung
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Tygan\Lokale Einstellungen
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Tygan\Eigene Dateien
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Tygan\Druckumgebung
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Tygan\Documents\Eigene Videos
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Tygan\Documents\Eigene Musik
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Tygan\Documents\Eigene Bilder
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Tygan\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Tygan\AppData\Local\Verlauf
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Tygan\AppData\Local\Anwendungsdaten
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Tygan\Anwendungsdaten
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Videos
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Administrator\Vorlagen
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Administrator\Startmenü
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Administrator\Lokale Einstellungen
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Administrator\Eigene Dateien
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Videos
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Anwendungsdaten
2016-08-03 17:08 - 2016-08-03 17:08 - 00000000 _SHDL C:\Users\Administrator\Anwendungsdaten
2016-08-03 17:05 - 2016-08-19 16:13 - 01931836 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2016-08-03 17:05 - 2016-08-19 13:03 - 01910734 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-08-03 17:02 - 2016-08-03 17:02 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2016-08-03 17:02 - 2016-08-03 17:02 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2016-08-03 17:02 - 2016-08-03 17:02 - 00000000 ____D C:\Program Files\Realtek
2016-08-03 17:02 - 2016-08-03 17:02 - 00000000 _____ C:\WINDOWS\ativpsrm.bin
2016-08-03 17:00 - 2016-07-16 13:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2016-08-03 16:57 - 2016-08-22 01:19 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-08-03 16:56 - 2016-08-21 18:26 - 00634688 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-08-03 01:25 - 2016-08-03 01:25 - 00000470 _____ C:\Users\Tygan\Documents\listen-dsl.asx
2016-08-02 19:25 - 2016-08-19 13:32 - 00000000 ____D C:\Users\Tygan\Documents\windows-10-product-key-viewer-1-5-1
2016-08-02 19:25 - 2016-08-02 19:25 - 00062019 _____ C:\Users\Tygan\Documents\windows-10-product-key-viewer-1-5-1.zip
2016-08-02 18:39 - 2016-08-02 19:06 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\Wireshark
2016-08-02 18:20 - 2016-08-19 13:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
2016-08-02 18:20 - 2016-08-02 18:20 - 00001827 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk
2016-08-02 18:20 - 2016-08-02 18:20 - 00001569 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark Legacy.lnk
2016-08-02 18:20 - 2016-08-02 18:20 - 00000000 ____D C:\Program Files\Wireshark
2016-08-02 18:20 - 2016-08-02 18:20 - 00000000 ____D C:\Program Files (x86)\WinPcap
2016-08-02 02:26 - 2016-08-02 02:26 - 00001900 _____ C:\Users\Tygan\Documents\Google Drive.lnk
2016-08-02 02:22 - 2016-08-02 02:23 - 00987728 _____ (Google Inc.) C:\Users\Tygan\Documents\googledrivesync.exe
2016-08-02 02:19 - 2016-08-02 02:20 - 528482304 _____ C:\Users\Tygan\Desktop\random stuff
2016-08-02 00:57 - 2016-08-02 00:59 - 33556567 _____ C:\Users\Tygan\Documents\Don Omar - Virtual Diva.mp4
2016-08-02 00:42 - 2016-08-02 00:54 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\VeraCrypt
2016-08-02 00:41 - 2016-08-19 13:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VeraCrypt
2016-08-02 00:41 - 2016-08-02 00:41 - 00198248 _____ (IDRIX) C:\WINDOWS\system32\Drivers\veracrypt.sys
2016-08-02 00:41 - 2016-08-02 00:41 - 00000888 _____ C:\Users\Tygan\Documents\VeraCrypt.lnk
2016-08-02 00:41 - 2016-08-02 00:41 - 00000000 ____D C:\Program Files\VeraCrypt
2016-08-02 00:39 - 2016-08-02 00:41 - 13954552 _____ (IDRIX) C:\Users\Tygan\Documents\veracrypt_setup_1.17.exe
2016-08-02 00:36 - 2016-08-02 00:37 - 00000000 ____D C:\Users\Tygan\Documents\Camera
2016-08-01 21:35 - 2016-08-01 21:36 - 05466520 _____ C:\Users\Tygan\Documents\AcronisTrueImage2016_web.exe
2016-08-01 21:33 - 2016-08-19 13:55 - 00000000 ____D C:\Users\Tygan\Documents\Whatsapp_Xtract_V2.2_2012-11-17
2016-08-01 21:32 - 2016-08-01 21:32 - 01876725 _____ C:\Users\Tygan\Documents\Whatsapp_Xtract_V2.2_2012-11-17.zip
2016-08-01 21:31 - 2016-08-01 21:28 - 00086458 _____ C:\Users\Tygan\Documents\wallpaper.bkup
2016-08-01 19:38 - 2016-08-01 19:38 - 01102663 _____ C:\Users\Tygan\Documents\AESCrypt_v310_x64.zip
2016-08-01 02:23 - 2016-08-01 03:02 - 1531445248 _____ C:\Users\Tygan\Documents\ubuntu-16.04.1-desktop-i386.iso
2016-08-01 01:30 - 2016-08-01 02:18 - 1513308160 _____ C:\Users\Tygan\Documents\ubuntu-16.04.1-desktop-amd64.iso
2016-07-30 20:52 - 2016-08-19 13:54 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\Audacity
2016-07-30 20:52 - 2016-07-30 20:52 - 00001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2016-07-30 20:52 - 2016-07-30 20:52 - 00001076 _____ C:\Users\Public\Desktop\Audacity.lnk
2016-07-30 20:52 - 2016-07-30 20:52 - 00000000 ____D C:\Users\Tygan\AppData\Local\Audacity
2016-07-30 20:52 - 2016-07-30 20:52 - 00000000 ____D C:\Program Files (x86)\Audacity
2016-07-30 20:50 - 2016-07-30 20:51 - 26496761 _____ (Audacity Team ) C:\Users\Tygan\Downloads\audacity-win-2.1.2.exe
2016-07-30 20:42 - 2016-07-30 20:43 - 37941248 _____ C:\Users\Tygan\Downloads\install_virtualdj_pc_v8.2.3324.msi
2016-07-30 00:39 - 2016-07-30 00:43 - 00450560 _____ (Tiger-IT.de) C:\Users\Tygan\Desktop\xp-AntiSpy-beta.exe
2016-07-29 16:52 - 2016-07-29 16:58 - 47611856 _____ (Wireshark development team) C:\Users\Tygan\Downloads\Wireshark-win64-2.0.5.exe
2016-07-29 16:28 - 2016-08-19 13:54 - 00000000 ____D C:\Users\Tygan\AppData\Local\WhatsApp
2016-07-29 16:28 - 2016-08-19 13:31 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\WhatsApp
2016-07-29 16:28 - 2016-07-30 00:12 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2016-07-26 22:59 - 2016-07-26 23:32 - 2216096549 _____ C:\Users\Tygan\Documents\Windows 7 Professional 32-bit.7z
2016-07-25 18:12 - 2016-07-26 15:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2016-07-25 16:05 - 2016-07-25 16:05 - 00000000 ____D C:\Users\Tygan\AppData\Local\TeamViewer
2016-07-25 15:47 - 2016-07-25 15:47 - 00000000 ____D C:\Users\Tygan\AppData\Local\CrashRpt
2016-07-25 15:39 - 2016-08-13 13:43 - 00001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
2016-07-25 15:39 - 2016-08-13 13:43 - 00001028 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
2016-07-25 15:39 - 2016-08-13 13:43 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-07-24 00:54 - 2016-07-25 19:54 - 00023119 _____ C:\Users\Tygan\Documents\Inhaltsverzeichnis Users Tygan Erinnerungen (Old).ods
2016-07-23 18:14 - 2016-07-23 20:39 - 00001679 _____ C:\Users\Tygan\Desktop\LibreOffice 5.1.lnk
2016-07-23 18:13 - 2016-08-19 13:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.1
2016-07-23 18:12 - 2016-07-23 18:13 - 00000000 ____D C:\Program Files (x86)\LibreOffice 5
2016-07-23 18:08 - 2016-07-23 18:08 - 00001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-07-23 18:08 - 2016-07-23 18:08 - 00001216 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-07-23 18:08 - 2016-07-23 18:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-08-22 13:05 - 2016-07-14 14:55 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\NetSpeedMonitor
2016-08-22 13:02 - 2016-04-04 23:35 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\Skype
2016-08-22 11:21 - 2016-07-22 12:30 - 00000000 ____D C:\ProgramData\VMware
2016-08-22 11:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-08-22 11:20 - 2016-07-16 08:04 - 01048576 _____ C:\WINDOWS\system32\config\BBI
2016-08-21 21:41 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\INF
2016-08-21 21:40 - 2016-06-23 14:31 - 00263296 _____ (ESET) C:\WINDOWS\system32\Drivers\eamonm.sys
2016-08-21 17:03 - 2016-07-16 13:47 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-08-21 16:53 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-08-21 16:17 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-08-21 14:09 - 2016-04-17 19:45 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\VMware
2016-08-21 14:09 - 2016-04-17 19:45 - 00000000 ____D C:\Users\Tygan\AppData\Local\VMware
2016-08-21 01:18 - 2016-04-04 22:47 - 00000000 ____D C:\Users\Tygan\AppData\Local\Packages
2016-08-20 01:25 - 2016-07-05 22:02 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\KeePass
2016-08-19 18:16 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-08-19 18:09 - 2015-07-29 18:28 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-08-19 16:13 - 2016-07-17 00:51 - 00685066 _____ C:\WINDOWS\system32\perfh007.dat
2016-08-19 16:13 - 2016-07-17 00:51 - 00155106 _____ C:\WINDOWS\system32\perfc007.dat
2016-08-19 13:56 - 2016-01-22 15:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-08-19 13:56 - 2015-07-02 14:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-08-19 13:55 - 2016-07-22 15:21 - 00000000 ____D C:\Users\Tygan\Documents\Windows 7
2016-08-19 13:55 - 2016-07-20 19:10 - 00000000 ____D C:\Users\Tygan\Documents\Tor Browser
2016-08-19 13:55 - 2016-07-16 13:47 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2016-08-19 13:55 - 2016-05-31 13:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steuer 2015
2016-08-19 13:55 - 2015-05-30 18:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\puush
2016-08-19 13:55 - 2014-12-02 19:36 - 00000000 ____D C:\WINDOWS\pss
2016-08-19 13:54 - 2016-07-14 17:49 - 00000000 ____D C:\Users\Tygan\AppData\Local\Stardock
2016-08-19 13:54 - 2016-07-05 21:57 - 00000000 ____D C:\Users\Tygan\AppData\Local\PasswordSafe
2016-08-19 13:54 - 2016-06-12 14:03 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\Factorio
2016-08-19 13:54 - 2016-05-31 13:22 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\Buhl Data Service
2016-08-19 13:54 - 2016-05-29 23:25 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Codemasters
2016-08-19 13:54 - 2016-04-18 16:49 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\Thunderbird
2016-08-19 13:54 - 2016-04-16 17:34 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\vlc
2016-08-19 13:54 - 2016-04-05 14:15 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\puush
2016-08-19 13:54 - 2016-04-04 22:47 - 00000000 ____D C:\Users\Tygan\AppData\Local\VirtualStore
2016-08-19 13:54 - 2016-01-30 20:49 - 00000000 __RDC C:\Users\Tygan\Documents\MAGIX
2016-08-19 13:52 - 2016-06-22 19:50 - 00000000 ____D C:\Users\Tygan\AppData\Local\Downloaded Installations
2016-08-19 13:50 - 2016-06-22 14:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gpg4win
2016-08-19 13:50 - 2016-04-17 15:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Core Temp
2016-08-19 13:50 - 2016-04-05 14:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-08-19 13:50 - 2016-01-30 20:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2016-08-19 13:50 - 2014-11-03 19:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR WNA3100M Genie
2016-08-19 13:33 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\registration
2016-08-19 13:32 - 2016-06-26 23:34 - 00000000 ____D C:\Users\Tygan\Documents\Factorio.v0.12.3
2016-08-19 13:32 - 2016-05-29 10:58 - 00000000 ____D C:\Users\Tygan\Downloads\Grand Theft Auto San Andreas.part06
2016-08-19 13:32 - 2015-06-10 15:31 - 00000000 ___DC C:\Users\Tygan\Documents\My Games
2016-08-19 13:31 - 2016-06-25 23:13 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\MAGIX
2016-08-19 13:31 - 2016-06-25 22:41 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\discord
2016-08-19 13:31 - 2016-04-20 13:03 - 00000000 ____D C:\Users\Tygan\AppData\LocalLow\Sun
2016-08-19 13:31 - 2016-04-09 13:47 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\LibreOffice
2016-08-19 13:31 - 2016-04-07 23:34 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\Mozilla
2016-08-19 13:31 - 2016-04-04 23:57 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\.minecraft
2016-08-19 13:31 - 2016-04-04 22:47 - 00000000 ____D C:\Users\Tygan\AppData\Roaming\Adobe
2016-08-19 13:31 - 2016-04-04 22:47 - 00000000 ____D C:\Users\Tygan\AppData\Local\TileDataLayer
2016-08-19 13:29 - 2016-04-07 23:34 - 00000000 ____D C:\Users\Tygan\AppData\Local\Mozilla
2016-08-19 13:28 - 2016-07-07 18:34 - 00000000 ____D C:\Users\Tygan\AppData\Local\MAGIX
2016-08-19 13:28 - 2016-06-22 19:52 - 00000000 ____D C:\Users\Tygan\AppData\Local\Machinecode_Technologies
2016-08-19 13:28 - 2016-04-04 23:33 - 00000000 ____D C:\Users\Tygan\AppData\Local\CEF
2016-08-19 13:28 - 2016-04-04 22:47 - 00000000 ____D C:\Users\Tygan\AppData\Local\Google
2016-08-19 13:27 - 2015-11-19 16:54 - 00000000 ____D C:\Users\Administrator\AppData\Local\Packages
2016-08-19 13:26 - 2016-07-22 12:30 - 00000000 ____D C:\Program Files (x86)\VMware
2016-08-19 13:26 - 2015-09-22 17:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2016-08-19 13:16 - 2015-01-24 16:32 - 00000000 ____D C:\ProgramData\Package Cache
2016-08-17 22:25 - 2015-11-19 17:02 - 00000000 ___RD C:\Users\Administrator\OneDrive
2016-08-15 10:21 - 2016-04-17 15:46 - 00000000 ____D C:\Program Files\Core Temp
2016-08-13 21:21 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-08-12 16:19 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\rescache
2016-08-11 22:17 - 2016-07-08 14:00 - 00000000 ____D C:\Users\Tygan\AppData\LocalLow\Temp
2016-08-11 22:12 - 2016-07-05 21:57 - 00000000 ____D C:\Users\Tygan\Documents\My Safes
2016-08-11 02:13 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-08-11 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2016-08-11 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2016-08-11 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2016-08-11 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\et-EE
2016-08-11 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\es-MX
2016-08-11 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\en-GB
2016-08-11 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-08-11 02:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2016-08-10 20:40 - 2016-07-16 13:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-08-10 20:35 - 2014-01-23 20:41 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-08-10 20:20 - 2014-01-23 20:41 - 147640136 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-08-08 22:55 - 2016-01-23 00:25 - 00002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-08-08 22:55 - 2016-01-23 00:25 - 00002252 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-08-05 15:33 - 2016-04-04 23:51 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-08-04 19:06 - 2016-01-22 15:31 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-08-04 03:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\appcompat
2016-08-04 02:22 - 2015-04-07 11:25 - 00000000 ____D C:\ProgramData\Skype
2016-08-03 19:09 - 2016-01-23 00:23 - 00000000 ____D C:\Program Files (x86)\Google
2016-08-03 18:54 - 2016-04-24 20:02 - 00000000 ____D C:\Users\Tygan\AppData\Local\Unity
2016-08-03 17:55 - 2016-07-16 13:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-08-03 17:49 - 2016-07-17 00:56 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2016-08-03 17:49 - 2016-07-17 00:50 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2016-08-03 17:49 - 2016-07-17 00:50 - 00000000 ____D C:\WINDOWS\system32\WCN
2016-08-03 17:49 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2016-08-03 17:49 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-08-03 17:49 - 2016-07-16 13:47 - 00000000 ___RD C:\Program Files\Windows Defender
2016-08-03 17:49 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2016-08-03 17:49 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-08-03 17:49 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-08-03 17:49 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\migwiz
2016-08-03 17:49 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\IME
2016-08-03 17:49 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Help
2016-08-03 17:49 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-08-03 17:49 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\System
2016-08-03 17:49 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-08-03 17:49 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-08-03 17:49 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\servicing
2016-08-03 17:49 - 2016-04-04 22:53 - 00002428 _____ C:\Users\Tygan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-08-03 17:43 - 2016-07-17 00:50 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2016-08-03 17:43 - 2016-07-17 00:50 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2016-08-03 17:43 - 2016-07-17 00:50 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2016-08-03 17:43 - 2016-07-17 00:50 - 00000000 ____D C:\WINDOWS\system32\winrm
2016-08-03 17:43 - 2016-07-17 00:50 - 00000000 ____D C:\WINDOWS\system32\slmgr
2016-08-03 17:43 - 2016-07-17 00:50 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2016-08-03 17:43 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2016-08-03 17:43 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\dsc
2016-08-03 17:43 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2016-08-03 17:37 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\USOPrivate
2016-08-03 17:37 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows NT
2016-08-03 17:37 - 2016-07-16 08:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2016-08-03 17:34 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-08-03 17:34 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2016-08-03 17:29 - 2015-07-29 18:19 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-08-03 17:28 - 2016-07-16 13:47 - 00000000 __RSD C:\WINDOWS\Media
2016-08-03 17:28 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2016-08-03 17:28 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2016-08-03 17:28 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\MUI
2016-08-03 17:28 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2016-08-03 17:28 - 2016-07-16 13:44 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2016-08-03 17:28 - 2016-07-16 13:44 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2016-08-03 17:28 - 2016-07-16 13:44 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2016-08-03 17:28 - 2016-07-16 13:44 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2016-08-03 17:28 - 2016-07-16 13:44 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2016-08-03 17:28 - 2016-07-16 13:44 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2016-08-03 17:28 - 2016-07-16 13:43 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2016-08-03 17:28 - 2016-07-16 13:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2016-08-03 17:28 - 2016-07-16 13:43 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2016-08-03 17:28 - 2016-07-16 13:43 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2016-08-03 17:28 - 2016-07-16 13:43 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2016-08-03 17:28 - 2016-07-16 13:43 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2016-08-03 17:28 - 2016-07-16 13:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll
2016-08-03 17:27 - 2016-07-16 13:47 - 00000000 __RHD C:\Users\Public\Libraries
2016-08-03 17:27 - 2016-07-16 13:44 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2016-08-03 17:27 - 2016-07-16 13:44 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2016-08-03 17:27 - 2016-07-16 13:44 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2016-08-03 17:27 - 2016-07-16 13:44 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2016-08-03 17:27 - 2016-07-16 13:44 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2016-08-03 17:27 - 2016-07-16 13:44 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2016-08-03 17:27 - 2016-07-16 13:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2016-08-03 17:27 - 2016-07-16 13:44 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2016-08-03 17:27 - 2016-07-16 13:44 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2016-08-03 17:27 - 2016-07-16 13:44 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll
2016-08-03 17:27 - 2016-07-16 13:44 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2016-08-03 17:27 - 2016-07-16 13:43 - 01414144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2016-08-03 17:27 - 2016-07-16 13:43 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2016-08-03 17:27 - 2016-07-16 13:43 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2016-08-03 17:27 - 2016-07-16 13:43 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2016-08-03 17:27 - 2016-07-16 13:43 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2016-08-03 17:27 - 2016-07-16 13:43 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2016-08-03 17:27 - 2016-07-16 13:43 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2016-08-03 17:27 - 2016-07-16 13:43 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2016-08-03 17:27 - 2016-07-16 13:43 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2016-08-03 17:27 - 2016-07-16 13:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2016-08-03 17:27 - 2016-07-16 13:43 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2016-08-03 17:27 - 2016-07-16 13:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll
2016-08-03 17:27 - 2016-07-16 13:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll
2016-08-03 17:20 - 2015-10-27 02:05 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-08-03 17:17 - 2015-10-30 08:28 - 00000000 ____D C:\Users\Default.migrated
2016-08-03 17:13 - 2016-07-17 00:50 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2016-08-03 17:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-08-03 17:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2016-08-03 17:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-08-03 17:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\spool
2016-08-03 17:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\IME
2016-08-03 17:13 - 2015-02-22 00:13 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe
2016-08-03 17:12 - 2014-11-22 16:04 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2016-08-03 17:11 - 2016-07-17 00:52 - 00000000 ____D C:\WINDOWS\OCR
2016-08-03 17:11 - 2016-07-16 13:47 - 00000000 __SHD C:\Program Files\Windows Sidebar
2016-08-03 17:11 - 2016-07-16 13:47 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2016-08-03 17:11 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2016-08-03 17:11 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\schemas
2016-08-03 17:11 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Resources
2016-08-03 17:11 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2016-08-03 17:11 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-08-03 17:11 - 2015-09-01 21:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\www.GameModding.net
2016-08-03 17:11 - 2011-04-12 09:54 - 00000000 ___RD C:\Users\Public\Recorded TV
2016-08-03 17:05 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-08-03 17:02 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\PrintDialog
2016-08-03 17:02 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\MiracastView
2016-08-03 16:06 - 2016-07-02 03:06 - 00211638 _____ C:\WINDOWS\ntbtlog.txt
2016-08-03 15:53 - 2016-01-23 00:23 - 00001150 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-08-03 14:23 - 2016-05-18 23:11 - 00000000 ____D C:\Users\Tygan\AppData\Local\CrashDumps
2016-08-03 14:08 - 2016-01-23 00:23 - 00001146 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-08-02 19:54 - 2016-04-30 20:14 - 00000000 ___DC C:\Users\Tygan\Documents\stuff
2016-08-01 11:38 - 2016-07-22 12:35 - 00000000 ____D C:\Users\Tygan\Documents\Virtual Machines
2016-07-31 14:43 - 1970-01-01 02:00 - 00000000 ____D C:\Users\Tygan\Documents\WhatsApp
2016-07-30 22:46 - 2015-10-31 03:56 - 00000000 ____D C:\Program Files\Sandboxie
2016-07-30 22:45 - 2015-08-16 13:10 - 00000000 ____D C:\Program Files (x86)\Fraps
2016-07-29 16:28 - 2016-06-25 22:40 - 00000000 ____D C:\Users\Tygan\AppData\Local\SquirrelTemp
2016-07-28 23:02 - 2014-11-05 17:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-07-27 21:25 - 2010-11-21 05:27 - 00504488 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-07-26 23:18 - 2016-01-20 13:47 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2016-07-26 16:35 - 2016-04-08 12:42 - 00000000 ___DC C:\Users\Tygan\Documents\GTA Vice City User Files
2016-07-26 11:29 - 2016-07-13 19:08 - 00000000 ____D C:\Users\Tygan\AppData\Local\Ubisoft Game Launcher
2016-07-25 14:50 - 2015-11-19 17:55 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-07-25 13:54 - 2016-01-22 15:31 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-08-22 12:14 - 2016-08-22 12:30 - 4749395 _____ () C:\Users\Tygan\AppData\Roaming\wallpapers.exe
2016-07-17 23:18 - 2016-07-17 23:18 - 0007656 _____ () C:\Users\Tygan\AppData\Local\Resmon.ResmonCfg

Einige Dateien in TEMP:
====================
C:\Users\Tygan\AppData\Local\Temp\Uninstall.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-08-21 20:01

==================== Ende von FRST.txt ============================