Fraud.Foxit.daws-wird ständig von spybot gefunden

cosinus · 06.09.2016, 14:20

Meine Güte, wir sind hier in einer Bereinigung. Dein tolles Avast wird dafürnicht benötigt. Und es stört sogar wenn es noch aktiv ist und Malware entfernt werden muss.

Und mal ganz ehrlich, du machst dir Gedanken darüber, dass dein toller "Schutz" nach der Deinstallation weg sei, obwohl der supertolle Schutz die Infektion nicht verhindern konnte? Echt jetzt?

ascard · 06.09.2016, 15:04

der"supertolle schutz" wie du ihn nennst, wurde erst nach der infektion aufgespielt.

wollen wir uns nun wieder auf das wesentliche konzentrieren ? die "bereinigung" :-D

cosinus · 06.09.2016, 20:35

Du reitest auf solchen Dingen herum verlangst aber von anderen sich auf das Wesentliche zu konzentrieren? Du solltest mal überlegen wer hier was ausgelöst hat bevor du solche Sprüche ablässt!

Und der supertolle Schutz hätte btw auch nicht zum ersten Mal versagt...aber das ist ein anderes Thema

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

ascard · 06.09.2016, 21:32

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 06.09.2016
Suchlaufzeit: 22:13
Protokolldatei: test.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.09.06.08
Rootkit-Datenbank: v2016.08.15.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: ascard

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 436967
Abgelaufene Zeit: 13 Min., 57 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

cosinus · 06.09.2016, 21:39

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

ascard · 06.09.2016, 21:59

Code:

ATTFilter

# AdwCleaner v6.010 - Bericht erstellt am 06/09/2016 um 22:51:47
# Aktualisiert am 12/08/2016 von ToolsLib
# Datenbank : 2016-09-06.1 [Server]
# Betriebssystem : Windows 10 Home  (X64)
# Benutzername : ascard - ASCARD-PC
# Gestartet von : C:\Users\ascard\Desktop\AdwCleaner_6.010(1).exe
# Modus: Löschen
# Unterstützung : https://toolslib.net/forum



***** [ Dienste ] *****

[-] Dienst gelöscht: scan


***** [ Ordner ] *****

[-] Ordner gelöscht: C:\Users\ascard\AppData\Roaming\ParetoLogic
[-] Ordner gelöscht: C:\ProgramData\ParetoLogic
[-] Ordner gelöscht: C:\Program Files (x86)\ParetoLogic
[-] Ordner gelöscht: C:\Program Files (x86)\Common Files\ParetoLogic


***** [ Dateien ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\uus3url-pl
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{65416821-217D-44BD-9C61-F53398FB1B46}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{6DFC0DC7-FDC5-44C2-8B80-5977BA8F8ACC}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{E5AFF088-92F8-41a9-8CAB-E9CDCCE967AC}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{4ABDD67C-44E3-42E0-816D-D7F0E54761DF}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{94915A56-4D71-4F85-B59C-CC040F5AC6F0}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\Interface\{65416821-217D-44BD-9C61-F53398FB1B46}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\Interface\{4ABDD67C-44E3-42E0-816D-D7F0E54761DF}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{65416821-217D-44BD-9C61-F53398FB1B46}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{4ABDD67C-44E3-42E0-816D-D7F0E54761DF}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{34F4FEAF-4921-4B5D-8BE5-CA384BFFC2CE}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{39A37965-0A96-43A3-870E-821FE5C84B0B}
[-] Schlüssel gelöscht: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\Software\ParetoLogic
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\ParetoLogic
[-] Schlüssel gelöscht: HKLM\SOFTWARE\ParetoLogic


***** [ Browser ] *****



*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: "Image File Execution Options" Schlüssel gelöscht
:: "Prefetch" Dateien gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [2631 Bytes] - [01/04/2016 09:05:52]
C:\AdwCleaner\AdwCleaner[C2].txt - [1602 Bytes] - [20/07/2016 22:23:04]
C:\AdwCleaner\AdwCleaner[C3].txt - [2366 Bytes] - [13/08/2016 10:06:07]
C:\AdwCleaner\AdwCleaner[C4].txt - [2277 Bytes] - [13/08/2016 12:59:58]
C:\AdwCleaner\AdwCleaner[C5].txt - [5564 Bytes] - [02/09/2016 21:38:35]
C:\AdwCleaner\AdwCleaner[C6].txt - [2416 Bytes] - [04/09/2016 13:55:53]
C:\AdwCleaner\AdwCleaner[C7].txt - [2729 Bytes] - [04/09/2016 14:08:13]
C:\AdwCleaner\AdwCleaner[C8].txt - [3137 Bytes] - [06/09/2016 22:51:47]
C:\AdwCleaner\AdwCleaner[R0].txt - [3965 Bytes] - [25/04/2015 08:57:44]
C:\AdwCleaner\AdwCleaner[R1].txt - [1234 Bytes] - [25/04/2015 09:06:25]
C:\AdwCleaner\AdwCleaner[S0].txt - [3897 Bytes] - [25/04/2015 08:59:16]
C:\AdwCleaner\AdwCleaner[S10].txt - [2573 Bytes] - [02/09/2016 22:27:19]
C:\AdwCleaner\AdwCleaner[S11].txt - [2647 Bytes] - [03/09/2016 08:56:07]
C:\AdwCleaner\AdwCleaner[S12].txt - [2721 Bytes] - [04/09/2016 13:55:36]
C:\AdwCleaner\AdwCleaner[S13].txt - [2868 Bytes] - [04/09/2016 14:06:58]
C:\AdwCleaner\AdwCleaner[S14].txt - [3015 Bytes] - [04/09/2016 23:40:13]
C:\AdwCleaner\AdwCleaner[S15].txt - [4479 Bytes] - [06/09/2016 22:51:17]
C:\AdwCleaner\AdwCleaner[S1].txt - [4036 Bytes] - [25/04/2015 09:07:35]
C:\AdwCleaner\AdwCleaner[S2].txt - [1192 Bytes] - [01/04/2016 09:09:11]
C:\AdwCleaner\AdwCleaner[S3].txt - [1630 Bytes] - [20/07/2016 22:21:00]
C:\AdwCleaner\AdwCleaner[S4].txt - [1418 Bytes] - [20/07/2016 22:27:07]
C:\AdwCleaner\AdwCleaner[S5].txt - [2415 Bytes] - [13/08/2016 10:05:49]
C:\AdwCleaner\AdwCleaner[S6].txt - [1936 Bytes] - [13/08/2016 10:09:53]
C:\AdwCleaner\AdwCleaner[S7].txt - [2356 Bytes] - [13/08/2016 12:57:56]
C:\AdwCleaner\AdwCleaner[S8].txt - [5498 Bytes] - [02/09/2016 21:37:23]
C:\AdwCleaner\AdwCleaner[S9].txt - [2498 Bytes] - [02/09/2016 21:53:53]

########## EOF - C:\AdwCleaner\AdwCleaner[C8].txt - [4530 Bytes] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.7 (07.03.2016)
Operating System: Windows 10 Home x64 
Ran by ascard (Administrator) on 06.09.2016 at 22:56:10,06
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 0 




Registry: 0 





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.09.2016 at 22:58:01,18
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

cosinus · 06.09.2016, 22:01

Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

ascard · 06.09.2016, 22:10

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 31-08-2016
durchgeführt von ascard (06-09-2016 23:06:39)
Gestartet von C:\Users\ascard\Desktop
Windows 10 Home Version 1607 (X64) (2016-08-10 13:13:25)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-767237098-4183446396-2625044690-500 - Administrator - Disabled)
ascard (S-1-5-21-767237098-4183446396-2625044690-1002 - Administrator - Enabled) => C:\Users\ascard
DefaultAccount (S-1-5-21-767237098-4183446396-2625044690-503 - Limited - Disabled)
Gast (S-1-5-21-767237098-4183446396-2625044690-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-767237098-4183446396-2625044690-1003 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Spybot - Search and Destroy (Enabled - Up to date) {A16C3F68-9280-E053-1818-342707FECF4D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.100 - NTI Corporation)
Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193}) (Version: 1.5.3501.00 - CyberLink Corp.)
Acer Crystal Eye Webcam (x32 Version: 1.5.3501.00 - CyberLink Corp.) Hidden
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3010 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3508 - Acer Incorporated)
Acer Instant Update Service (HKLM\...\{682EC6E8-A300-45FD-8F09-0F3A6EA334D6}) (Version: 1.00.3004 - Acer Incorporated)
Adobe Acrobat 7.0 Professional - English, Français, Deutsch (HKLM-x32\...\Adobe Acrobat 7.0 Professional - English, Français, Deutsch - V) (Version: 7.0.0 - Adobe Systems)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.017.20053 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 22.0.0.153 - Adobe Systems Incorporated)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Adobe Illustrator CS2 (HKLM-x32\...\Adobe Illustrator CS2) (Version: 12.000.000 - Adobe Systems Inc.)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.100.2020.212 - Alps Electric)
Amazon Cloud Drive (HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\Amazon Cloud Drive) (Version: 2.4.2.25 - Amazon Digital Services, LLC.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Bluetooth Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.4.0.126 - Atheros)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.8.8 - Atheros Communications Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
Backup Manager V3 (x32 Version: 3.0.0.100 - NTI Corporation) Hidden
Boris Graffiti 6 for Corel VideoStudio Pro X8 64-Bit (HKLM\...\{C0AC7ED4-3714-499D-849B-77396A04591C}) (Version: 6.1.0010 - Boris FX, Inc.)
calibre 64bit (HKLM\...\{872CC218-5C6E-4598-B9C1-3B72BDB2BE44}) (Version: 2.40.0 - Kovid Goyal)
Camtasia Studio 8 (HKLM-x32\...\{A2A41B60-D51F-4C04-BC94-B4C94F7B6DC0}) (Version: 8.6.0.2054 - TechSmith Corporation)
Capture NX-D (HKLM\...\{794529D3-D489-4CF2-B2ED-CF241809E5EC}) (Version: 1.3.0 - Nikon Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.21 - Piriform)
Classic Shell (HKLM\...\{383BB30A-B4A7-4666-9A83-22CFA8640097}) (Version: 4.3.0 - IvoSoft)
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.00.3004 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.00.3004 - Acer Incorporated)
clear.fi SDK - MVP 2 (x32 Version: 2.0.1505 - CyberLink Corp.) Hidden
clear.fi SDK- Movie 2 (x32 Version: 2.0.1502 - CyberLink Corp.) Hidden
Comic Life 3 (HKLM-x32\...\{F028B2F8-42B1-4C82-9978-6251E11D475C}) (Version: 3.1.2.32215 - plasq LLC)
Contents64 (Version: 18.0.0.181 - Corel Corporation) Hidden
Corel VideoStudio Ultimate X8 (HKLM-x32\...\_{A22A80C4-F237-4B5A-825F-0731971ECBE6}) (Version: 18.6.0.6 - Corel Corporation)
CrazyTalk v6.21 SE (HKLM-x32\...\{60CE924D-12CB-4A96-8B75-18F92CE1D585}) (Version: 6.21.2325.1 - Reallusion)
CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.3318_45364 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\Dropbox) (Version: 8.4.21 - Dropbox, Inc.)
EPSON BX630FW Series Printer Uninstall (HKLM\...\EPSON BX630FW Series) (Version:  - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
Evernote v. 4.5.2 (HKLM-x32\...\{F77EF646-19EB-11E1-9A9E-984BE15F174E}) (Version: 4.5.2.5866 - Evernote Corp.)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
ICA (x32 Version: 18.0.0.181 - Corel Corporation) Hidden
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3304 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{6E8699D5-6A81-4339-A21A-1FE8D33D293B}) (Version: 3.2.1289 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.9.254 - Intel Corporation)
Intel® SSD Toolbox (HKLM-x32\...\{06D085C8-1F00-11B2-96A7-8f0CE39193ED}) (Version: 3.3.6.400 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation)
Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version:  - Intel Corporation)
IPM_VS_Pro64 (Version: 18.0 - Corel Corporation) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.15 - Acer Inc.)
Logitech Alert Commander (HKLM-x32\...\{9C815CCE-8A56-4C1E-A3CA-D1BA519882BC}) (Version: 3.5.97 - Ihr Firmenname)
MAGIX Fonts Package 1 (x32 Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{F069033B-2F1F-495C-B641-660DC012CAF2}) (Version: 7.0.2.6 - MAGIX Software GmbH)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX Software GmbH) Hidden
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
ManyCam 3.0.80 (remove only) (HKLM-x32\...\ManyCam) (Version: 3.0.80 - ManyCam LLC)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 48.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 48.0.2 (x86 de)) (Version: 48.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 48.0.2.6079 - Mozilla)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) Hidden
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.2.0 - Nikon Corporation)
NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)
NVIDIA Grafiktreiber 364.72 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 364.72 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Picture Control Utility 2 (HKLM\...\{D4893C47-704F-4B84-8486-9DE4974ACA6F}) (Version: 2.1.1 - Nikon Corporation)
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
proDAD Adorage 3.0 (64bit) (Version: 3.0.110.2 - proDAD GmbH) Hidden
proDAD Mercalli 2.0 (64bit) (Version: 2.0.120 - proDAD GmbH) Hidden
proDAD Route 4.0 (64bit) (Version: 4.0.233.1 - proDAD GmbH) Hidden
proDAD Script 4.0 (64bit) (Version: 4.0.233.1 - proDAD GmbH) Hidden
proDAD Vitascene 2.0 (64bit) (Version: 2.0.233 - proDAD GmbH) Hidden
Qualcomm Atheros Direct Connect (x32 Version: 3.1 - Qualcomm Atheros) Hidden
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 3.1 - Qualcomm Atheros)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7592 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.85 - Realtek Semiconductor Corp.)
Red Giant Complete Suite (HKLM\...\{DAFB22DD-9F96-4F76-AFCC-86A0980CA737}) (Version: 11 - Red Giant Software)
Revo Uninstaller 2.0.0 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.0 - VS Revo Group, Ltd.)
SafeZone Stable 1.51.2220.53 (x32 Version: 1.51.2220.53 - Avast Software) Hidden
SageThumbs 2.0.0.22 (HKLM\...\SageThumbs) (Version: 2.0.0.22 - Cherubic Software)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.59.0 - Samsung Electronics Co., Ltd.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Setup (x32 Version: 18.0.0.181 - Corel Corporation) Hidden
Share64 (Version: 18.0.0.181 - Corel Corporation) Hidden
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skype™ 7.27 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.27.101 - Skype Technologies S.A.)
Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.16052.2 - Samsung Electronics Co., Ltd.)
Smart Switch (x32 Version: 4.1.16052.2 - Samsung Electronics Co., Ltd.) Hidden
Topaz Adjust 4 (64-bit) (Version: 4.1.0 - Topaz Labs) Hidden
Topaz Clean 3 (64-bit) (Version: 3.0.2 - Topaz Labs) Hidden
Topaz DeJpeg 4 (64-bit) (Version: 4.0.2 - Topaz Labs) Hidden
Topaz DeNoise 5 (64-bit) (Version: 5.0.1 - Topaz Labs) Hidden
Topaz Detail 2 (64-bit) (Version: 2.0.5 - Topaz Labs) Hidden
Topaz Fusion Express 2 (64-bit) (Version: 2.0.2 - Topaz Labs) Hidden
Topaz InFocus (64-bit) (Version: 1.0.0 - Topaz Labs) Hidden
Topaz Lens Effects (64-bit) (Version: 1.0.0 - Topaz Labs) Hidden
Topaz ReMask 3 (64-bit) (Version: 3.1.0 - Topaz Labs) Hidden
Topaz Simplify 3 (64-bit) (Version: 3.0.2 - Topaz Labs) Hidden
Überwachungstool für die Intel® Turbo-Boost-Technik 2.5 (HKLM\...\{6C9365EB-1F9E-4893-9196-3EC77C88D0C5}) (Version: 2.5.1.0 - Intel)
Ulead COOL 3D Production Studio (HKLM-x32\...\{BFDC2A9E-70DB-4A33-BAAF-1F995CE33902}) (Version: 1.0 - Ulead Systems)
Ultimate EPubsoft DRM Removal 8.9.1 (HKLM-x32\...\{49617AB8-5A31-44A7-95A6-BE6CE251A6F1}) (Version: 8.9.1 - EPUBSOFT)
VideoStudio MyDVD (HKLM-x32\...\{49D8422A-D54E-425F-8A38-54167B1174A1}) (Version: 1.0 - Corel)
VideoStudio MyDVD (x32 Version: 1.0.112 - Ihr Firmenname) Hidden
ViewNX-i (HKLM\...\{C67A5551-26C1-4C7B-A9DF-AD148549D482}) (Version: 1.1.0 - Nikon Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VLC Updater (HKLM-x32\...\VLC Updater) (Version: 1.0 - VLC Updater)
VSClassic64 (Version: 18.0.0.181 - Corel Corporation) Hidden
VSUltimate64 (Version: 18.0.0.181 - Corel Corporation) Hidden
Vulkan Run Time Libraries 1.0.5.1 (HKLM\...\VulkanRT1.0.5.1) (Version: 1.0.5.1 - LunarG, Inc.)
WEB.DE MailCheck für Mozilla Firefox (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar FF) (Version: 3.0.2.1739 - 1&1 Mail & Media GmbH)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3507 - Acer Incorporated)
WhatsApp (HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\WhatsApp) (Version: 0.2.1455 - WhatsApp)
Windows 10-Upgrade-Assistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17349 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
WinISO (HKLM-x32\...\WinISO) (Version: 6.4.0.5170 - WinISO Computing Inc.)
WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\ascard\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-767237098-4183446396-2625044690-1002_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {01BFFD1C-206F-46BC-8309-DE4D8C7BF69A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {025F302D-48D5-4291-AEBC-5F19D1872393} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {090990C0-D8DC-4D67-926F-25AD96B5D1E9} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {091B7D86-BB47-4474-989C-480977BCC639} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2011-03-29] (Egis Technology Inc.)
Task: {0A806A92-9173-4FD5-9232-D81FD6674663} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {17F65761-CE87-485E-8062-C27A366FF3E6} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {1F3986CF-19AB-41D0-85B2-622A314F64EC} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {23A21ADB-624C-4A33-996A-211F69D6BEF0} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {259CD72B-99E0-47DC-8B65-316A51C227A6} - System32\Tasks\{EBA32A8E-79E8-4E20-89BD-5FA973AF7B4D} => C:\Program Files\Corel\Corel VideoStudio Ultimate X8\vstudio.exe [2015-11-25] (Corel TW Corp.)
Task: {25C55B8E-51C3-452A-B45B-E71DE03EF8E5} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {28E225A6-93EC-4F71-81D8-BE2F4F89B74D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {2912901C-A861-4D02-BCD1-1C02F7F5506B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2015-06-16] (Safer-Networking Ltd.)
Task: {2FC085B8-24EA-4D42-9C2C-2F4037BF6958} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-08-05] (Piriform Ltd)
Task: {37BBBAEC-669D-4C05-9ED1-55F89361A720} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-08-13] (Adobe Systems Incorporated)
Task: {387A3A37-5DE6-449A-978D-879ACCFAC4A9} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-05] (AVAST Software)
Task: {3EA1AE87-5BDD-4A6A-ACF3-80C825BDFE21} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {4368ABD5-7028-4899-AC16-21F8E63B98E6} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {4522CA81-ACC7-4F7B-8A87-071ACEA747E0} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-767237098-4183446396-2625044690-1002UA => C:\Users\ascard\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-07] (Dropbox, Inc.)
Task: {462BBEB7-223B-42B8-9137-3B5C96273ED1} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {49E69CFD-F091-4064-B274-634729C28D73} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2012-09-18] (CyberLink)
Task: {4A0C4EDA-EB4B-48FA-81EB-90042B1B6F9D} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2012-02-07] (Acer Incorporated)
Task: {4A6C6DD9-79C2-4FBF-AF5C-17517F74C9FF} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {4ED6B046-5ED5-43BA-B8AA-124D467D5CE7} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {55898F5B-67FB-4983-9EEC-81F773DAECE4} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-767237098-4183446396-2625044690-1002Core => C:\Users\ascard\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-07] (Dropbox, Inc.)
Task: {598F0CF7-4F6A-47E4-BAD8-BB036AC74FB0} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {5DD006F9-5955-47EC-B92E-BF68595162BE} - System32\Tasks\{65B280F0-6365-4E24-94F0-A4D23E9E16C8} => pcalua.exe -a C:\Users\ascard\Downloads\LogitechAlertCommander_3.5.97(1).exe -d C:\Users\ascard\Downloads
Task: {5E400A12-8E1E-4828-AEBA-02B8DCDB4A7C} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {6557CFC4-944E-4E54-997A-6F2BDAA43F3E} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG
Task: {733EEED7-6355-4828-B568-5ECA7F0979F1} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {748ABC5F-361B-436C-BD2D-D2D3812D2D39} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {76D161A8-B21A-48D8-B73B-091CE7214CC7} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2015-06-16] (Safer-Networking Ltd.)
Task: {7CC838A6-397E-464E-A2E2-FAA6974611E3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {97500E21-1C16-4ACA-9B1D-FF3168A72BDE} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe
Task: {9FC87FAA-9F3C-444A-8848-D39622713FFE} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {A1726DFA-2535-4BD6-8D1D-9E18ABB27C1C} - System32\Tasks\{5198410F-E2A3-41F6-8852-6740B0156E6B} => C:\Program Files\Corel\Corel VideoStudio Ultimate X8\vstudio.exe [2015-11-25] (Corel TW Corp.)
Task: {A1F9EC48-10A1-4D1B-B962-3612DE8ED19D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {A206A4CA-8FCB-4566-994B-C0A6EBB4EF6B} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {A52309FD-C031-45D4-A61D-2DB0216F043F} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {A6F5EFB4-080D-4746-ADEA-123B1A31FBD3} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {A7B23270-1BCC-44A3-B1CF-0DF77D126428} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {A7CAD570-ED2F-42C6-B515-A8F430A52FB9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {B6C224C8-2158-4181-A5B1-C2C5D09D796C} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
Task: {B7467F7D-DEA8-44B8-A07C-6D0692C65414} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {B989B3E1-A294-4508-80D3-59AF605F2979} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {BF5ADD62-F86B-4E89-986C-53B471D21C43} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2015-06-16] (Safer-Networking Ltd.)
Task: {C1075E9C-1DBA-4889-8D6D-8801FECCF92B} - \Driver Booster SkipUAC (ascard) -> Keine Datei <==== ACHTUNG
Task: {C44E0F95-9DA7-4337-B088-D09F59564136} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-10-08] (Intel Corporation)
Task: {C68C7E38-E209-466A-91C2-1629AF690FC4} - System32\Tasks\{4B620B54-2C8F-450F-BEE5-B8EC1E3A3A0B} => C:\Program Files\Corel\Corel VideoStudio Ultimate X8\vstudio.exe [2015-11-25] (Corel TW Corp.)
Task: {C7A6FA64-1748-4EBD-8DA7-1DB21506F961} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {C8344EF4-9C9B-4BC6-8AF9-F946D1B5DDC8} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {C98DCD91-7932-462D-B537-B7785D688E50} - System32\Tasks\SafeZone scheduled Autoupdate 1473058051 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-08-09] (Avast Software)
Task: {CB87BF96-9E19-4AEC-B738-7E8124F7DF02} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-06-25] (Adobe Systems Incorporated)
Task: {D3E45D6E-A54B-4859-AF24-BB03DB4D12C3} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {D55FC44F-600D-4F09-8D1D-71D18111552A} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-10-08] (Intel Corporation)
Task: {DA55464F-720B-4136-BBA9-7B1CEA012CDB} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {DDC792F2-4244-42D6-8B64-F3D38673C2D9} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {EB0F4B17-6B18-45B3-B065-CEFE36FDE775} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {ED569F6A-E1DA-4C49-85C8-31AD8917A132} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {ED73B1B2-1BC0-4466-85A4-AB525EE55E2A} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {EE60575C-D191-435B-9D29-F917936AC892} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {F85C37B9-6703-480F-A23F-1729DC10732B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {FB08B848-1F0E-4911-8E32-74FBA708D311} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Keine Datei <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-767237098-4183446396-2625044690-1002Core.job => C:\Users\ascard\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-767237098-4183446396-2625044690-1002UA.job => C:\Users\ascard\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-08-22 12:51 - 2016-06-14 22:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-08-22 12:51 - 2016-06-14 22:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-08-22 12:51 - 2016-06-14 22:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-08-22 12:51 - 2016-06-14 22:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-04-15 16:49 - 2016-06-14 22:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-04-15 16:49 - 2016-06-14 22:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-04-15 16:49 - 2016-06-14 22:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-01-22 23:55 - 2016-06-14 22:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-08-10 15:15 - 2016-08-10 15:15 - 00959168 _____ () C:\Users\ascard\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\amd64\ClientTelemetry.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00130048 _____ () C:\WINDOWS\SYSTEM32\CHARTV.dll
2009-01-22 01:45 - 2009-01-22 01:45 - 01401856 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll
2016-08-30 07:30 - 2016-08-30 07:30 - 00071168 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.7.113.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-08-30 07:30 - 2016-08-30 07:30 - 00178176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.7.113.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-08-30 07:30 - 2016-08-30 07:30 - 35288064 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.7.113.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-09-01 09:27 - 2016-09-01 09:27 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-09-01 09:27 - 2016-09-01 09:27 - 09761280 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-09-01 09:34 - 2016-08-20 06:54 - 01401344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-09-01 09:27 - 2016-09-01 09:27 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-09-01 09:34 - 2016-08-20 06:54 - 02438144 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-09-01 09:34 - 2016-08-20 06:56 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-08-22 12:51 - 2016-06-14 22:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2016-08-22 12:51 - 2016-06-14 22:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00236488 _____ () c:\windows\system32\WerEtw.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-09-05 08:45 - 2016-09-05 08:45 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-09-06 20:45 - 2016-09-06 20:45 - 03084464 _____ () C:\Program Files\AVAST Software\Avast\defs\16090602\algo.dll
2016-09-05 08:45 - 2016-09-05 08:45 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2012-01-05 23:22 - 2012-01-05 23:22 - 00465344 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2012-01-05 23:22 - 2012-01-05 23:22 - 00125464 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2012-01-05 23:22 - 2012-01-05 23:22 - 01081368 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2016-07-11 16:04 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2016-07-11 16:04 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2016-07-24 13:28 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2016-07-24 13:28 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2016-09-05 08:45 - 2016-09-05 08:45 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-12-14 15:06 - 2011-12-16 04:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\Temp:CB0AACC9 [180]
AlternateDataStreams: C:\ProgramData\Temp:F0D7EE30 [117]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKLM\...\.scr: SageThumbsImage.scr => "%1" /S <===== ACHTUNG

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

Da befinden sich 7914 mehr Seiten.

IE trusted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\localhost -> localhost
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\123simsen.com -> www.123simsen.com

Da befinden sich 7914 mehr Seiten.


==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2014-12-17 18:26 - 00450771 ____N C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	1000gratisproben.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	1001namen.com
127.0.0.1	www.1001namen.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	10sek.com
127.0.0.1	www.10sek.com
127.0.0.1	www.1-2005-search.com
127.0.0.1	1-2005-search.com
127.0.0.1	123fporn.info
127.0.0.1	www.123fporn.info
127.0.0.1	123haustiereundmehr.com
127.0.0.1	www.123haustiereundmehr.com
127.0.0.1	123moviedownload.com
127.0.0.1	www.123moviedownload.com

Da befinden sich 15463 zusätzliche Einträge.


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-767237098-4183446396-2625044690-1002\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Acer01.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\startupfolder: C:^Users^ascard^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma.lnk => C:\Windows\pss\Adobe Gamma.lnk.Startup
MSCONFIG\startupfolder: C:^Users^ascard^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: (default) => 
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: Nikon Message Center 2 => c:\program files (x86)\nikon\nikon message center 2\nkmc2.exe -s
MSCONFIG\startupreg: OneDrive => "c:\users\ascard\appdata\local\microsoft\onedrive\onedrive.exe" /background
MSCONFIG\startupreg: QuickTime Task => "c:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: SuiteTray => "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
MSCONFIG\startupreg: Vidalia => "C:\Program Files (x86)\Vidalia Bridge Bundle\Vidalia\vidalia.exe"
HKLM\...\StartupApproved\StartupFolder: => "Adobe Acrobat - Schnellstart.lnk"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "Persistence"
HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 7.0"
HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKLM\...\StartupApproved\Run32: => "USB3MON"
HKLM\...\StartupApproved\Run32: => "Nikon Message Center 2"
HKLM\...\StartupApproved\Run32: => "TrojanScanner"
HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\StartupApproved\StartupFolder: => "Dropbox.lnk"
HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\StartupApproved\Run: => "OneDrive"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{F8CAB136-09A6-46F9-B7F2-51A1F9D497B4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{C6554656-729F-440A-A7B1-A716CE5574BB}C:\program files (x86)\logitech\logitech alert\logitech alert commander.exe] => (Allow) C:\program files (x86)\logitech\logitech alert\logitech alert commander.exe
FirewallRules: [UDP Query User{3B7500FC-09EC-49CB-8142-DC81711ED4EB}C:\program files (x86)\logitech\logitech alert\logitech alert commander.exe] => (Allow) C:\program files (x86)\logitech\logitech alert\logitech alert commander.exe
FirewallRules: [TCP Query User{7185B6D2-5E37-406F-B0B7-AD1473482FBD}C:\program files (x86)\logitech\logitech alert\logitech alert commander.exe] => (Allow) C:\program files (x86)\logitech\logitech alert\logitech alert commander.exe
FirewallRules: [UDP Query User{0AC3D4F6-FD7A-4D91-98F3-529038B8D637}C:\program files (x86)\logitech\logitech alert\logitech alert commander.exe] => (Allow) C:\program files (x86)\logitech\logitech alert\logitech alert commander.exe
FirewallRules: [TCP Query User{024066AB-AEB5-4822-A5A9-0A8C93526B60}C:\program files (x86)\acer\clear.fi photo\dmcdaemon.exe] => (Block) C:\program files (x86)\acer\clear.fi photo\dmcdaemon.exe
FirewallRules: [UDP Query User{975D3E62-8BBA-4449-9578-FF0C08A91465}C:\program files (x86)\acer\clear.fi photo\dmcdaemon.exe] => (Block) C:\program files (x86)\acer\clear.fi photo\dmcdaemon.exe
FirewallRules: [TCP Query User{497093A5-0AFC-48C6-9A9D-7B9C27CEDC97}C:\program files (x86)\acer\clear.fi photo\windowsupnp.exe] => (Block) C:\program files (x86)\acer\clear.fi photo\windowsupnp.exe
FirewallRules: [UDP Query User{BC39A5F7-1006-485E-B90A-6F793C7D11C9}C:\program files (x86)\acer\clear.fi photo\windowsupnp.exe] => (Block) C:\program files (x86)\acer\clear.fi photo\windowsupnp.exe
FirewallRules: [TCP Query User{902ACC4C-38BB-4F27-AE56-352128D1FB48}C:\program files (x86)\acer\clear.fi media\dmcdaemon.exe] => (Block) C:\program files (x86)\acer\clear.fi media\dmcdaemon.exe
FirewallRules: [UDP Query User{34DB963B-B00B-4390-9BCF-29C9D79D4425}C:\program files (x86)\acer\clear.fi media\dmcdaemon.exe] => (Block) C:\program files (x86)\acer\clear.fi media\dmcdaemon.exe
FirewallRules: [TCP Query User{CD9FD0EC-2EC8-49C3-832F-E8408DDF37B5}C:\program files (x86)\acer\clear.fi media\windowsupnpmv.exe] => (Block) C:\program files (x86)\acer\clear.fi media\windowsupnpmv.exe
FirewallRules: [UDP Query User{3510D285-D45A-498E-AE60-E94B65023F38}C:\program files (x86)\acer\clear.fi media\windowsupnpmv.exe] => (Block) C:\program files (x86)\acer\clear.fi media\windowsupnpmv.exe
FirewallRules: [TCP Query User{C8126159-A58C-4CF3-A8A2-D7946EB71B17}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{36FA8254-0C75-45FA-914E-913F023293FB}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{772C33CE-AC61-46CE-8D33-82492E755C58}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4A3151DD-F507-46CE-9751-09C445D75D71}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{53331547-5173-4257-BDEB-03C28C2E1BE0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{F86725B9-AB00-4752-B205-20F98CF9A7E8}C:\users\ascard\desktop\smp.4.48\security monitor pro.exe] => (Block) C:\users\ascard\desktop\smp.4.48\security monitor pro.exe
FirewallRules: [UDP Query User{E6E700B7-0F00-41A7-8E6B-5B6DB1EEF0EC}C:\users\ascard\desktop\smp.4.48\security monitor pro.exe] => (Block) C:\users\ascard\desktop\smp.4.48\security monitor pro.exe
FirewallRules: [TCP Query User{FA393488-2A85-4BBA-A36C-3EAF60AAFD07}C:\program files\onone software\perfect portrait 9\perfect portrait 9.exe] => (Block) C:\program files\onone software\perfect portrait 9\perfect portrait 9.exe
FirewallRules: [UDP Query User{E28046EC-5BE0-4C64-9655-600C9CC3C27A}C:\program files\onone software\perfect portrait 9\perfect portrait 9.exe] => (Block) C:\program files\onone software\perfect portrait 9\perfect portrait 9.exe
FirewallRules: [TCP Query User{B3EDB2D7-E407-4C1B-8817-46CC3E5F501D}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{153B36C1-D111-4B27-AE2D-C9EB729B95D2}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{FF97B99B-4508-4E1C-8B8B-9BB65C3E0B5C}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe
FirewallRules: [{0501E44A-F378-4D9E-B421-E3FFCFADC8DF}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe
FirewallRules: [{4AFC0618-BB58-4656-8178-54CDF31D83E4}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe
FirewallRules: [{46092102-C47E-4BD5-8378-2E0ED06C58A7}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe
FirewallRules: [{7F75F429-1E5E-4196-87C8-3B9D7813FD18}] => (Allow) C:\Users\ascard\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{C30A54D7-35EA-42CA-BD6F-EBA37739A776}] => (Allow) C:\Users\ascard\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{AAB201BF-F044-41CD-AF72-62DE02A5D60F}C:\users\ascard\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\ascard\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{BB516139-1699-4FE8-800A-4D018F3F2199}C:\users\ascard\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\ascard\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{51A45F1A-F439-4B4C-AE93-E93E478944B5}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{43438BAD-08E1-4EEF-A959-9B23DF44820A}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{EE352CB3-A1B7-481F-A4E1-506DD9776A7D}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [{029126B9-7452-4D00-A79B-BC5911396551}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
FirewallRules: [TCP Query User{A834D082-1A0B-400F-854E-D88FBF923E99}C:\program files\calibre2\calibre.exe] => (Allow) C:\program files\calibre2\calibre.exe
FirewallRules: [UDP Query User{3110FF1E-87F8-47A8-AD6D-570C27A67F4B}C:\program files\calibre2\calibre.exe] => (Allow) C:\program files\calibre2\calibre.exe
FirewallRules: [{35197BE9-F9F9-4EAD-9357-E948D1FD81EE}] => (Allow) LPort=8317
FirewallRules: [{1E4D0FF8-E884-462E-98F5-EF0FE215F635}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{B49D21E1-4CB7-435D-B3F1-33C24125D6D2}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{57B71E21-69FD-49B9-B275-E552273E9E1E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{FFC445EB-D827-4420-A4C2-73E4297AE860}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{DDFBF322-A24A-4708-910C-D3CCE51E3102}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{7623489E-ED3D-4D42-9D38-092BF0ED5896}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{1BCFD694-4445-44C2-B848-CCCA26904B8E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{92D49C32-4671-46FB-8D8A-58411A9EDBE0}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Block) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [UDP Query User{09557B80-E8D3-4EBF-9FF8-56D2ED955A57}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Block) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [{0EE285C6-22BD-443B-862B-170B7C5B3470}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7347A93C-5909-4099-83A2-CC78CF317086}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{AB984973-45FC-47FD-8C51-33BDF394B2A7}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{D69FABAC-9181-4F52-8C91-C93056B46232}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [{CDA7038E-8FA6-42C7-9CF8-ACEB028396B3}] => (Allow) C:\Program Files (x86)\Deskshare\Security Monitor Pro 4.4\Security Monitor Pro.exe
FirewallRules: [{DDA95E97-8131-40F7-8327-2B754DA62E93}] => (Allow) C:\Program Files (x86)\Deskshare\Security Monitor Pro 4.4\Security Monitor Pro.exe
FirewallRules: [TCP Query User{C0F0E7ED-7322-451E-BD43-EF2FEB17BF6A}C:\users\ascard\desktop\ipcamsearch.exe] => (Block) C:\users\ascard\desktop\ipcamsearch.exe
FirewallRules: [UDP Query User{E86A72DD-3D72-4BA6-9D4F-85007A15BA98}C:\users\ascard\desktop\ipcamsearch.exe] => (Block) C:\users\ascard\desktop\ipcamsearch.exe
FirewallRules: [{91040749-E1D9-4085-BDCB-AFC4F6370F6F}] => (Allow) C:\Program Files (x86)\Deskshare\IP Camera Viewer 3\IP Camera Viewer.exe
FirewallRules: [{80B8D53E-C6F1-409F-BD26-18CBC0BA4D38}] => (Allow) C:\Program Files (x86)\Deskshare\IP Camera Viewer 3\IP Camera Viewer.exe
FirewallRules: [{9EE08065-8CBD-462D-8088-6417EC30346A}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Wiederherstellungspunkte =========================

28-08-2016 12:24:30 Installed Blender
28-08-2016 19:00:13 Windows-Sicherung
01-09-2016 11:07:14 Windows Update
02-09-2016 11:09:49 JRT Pre-Junkware Removal
02-09-2016 21:54:16 JRT Pre-Junkware Removal
03-09-2016 08:42:52 JRT Pre-Junkware Removal
03-09-2016 13:17:02 JRT Pre-Junkware Removal
04-09-2016 14:09:53 JRT Pre-Junkware Removal
04-09-2016 14:44:45 JRT Pre-Junkware Removal
04-09-2016 22:23:38 Windows-Sicherung
04-09-2016 22:40:21 JRT Pre-Junkware Removal
04-09-2016 22:46:13 JRT Pre-Junkware Removal
05-09-2016 15:08:30 JRT Pre-Junkware Removal
06-09-2016 00:04:14 JRT Pre-Junkware Removal
06-09-2016 10:26:35 JRT Pre-Junkware Removal
06-09-2016 22:56:15 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/06/2016 11:05:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.14393.0, Zeitstempel: 0x578999ab
Name des fehlerhaften Moduls: dwmcore.dll, Version: 10.0.14393.103, Zeitstempel: 0x57b7e2e5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000144bf4
ID des fehlerhaften Prozesses: 0x1158
Startzeit der fehlerhaften Anwendung: 0x01d2088258e9e369
Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\dwmcore.dll
Berichtskennung: 2c76b1bc-8d23-4b26-83b7-c93aa97c3318
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/06/2016 11:05:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.14393.0, Zeitstempel: 0x578999ab
Name des fehlerhaften Moduls: dwmcore.dll, Version: 10.0.14393.103, Zeitstempel: 0x57b7e2e5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000144bf4
ID des fehlerhaften Prozesses: 0x166c
Startzeit der fehlerhaften Anwendung: 0x01d208825331b0da
Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\dwmcore.dll
Berichtskennung: 6709a951-bef7-4cca-a07d-e8a7bc6faff6
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/06/2016 11:04:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.14393.0, Zeitstempel: 0x578999ab
Name des fehlerhaften Moduls: dwmcore.dll, Version: 10.0.14393.103, Zeitstempel: 0x57b7e2e5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000144bf4
ID des fehlerhaften Prozesses: 0x1c2c
Startzeit der fehlerhaften Anwendung: 0x01d20882491ed02e
Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\dwmcore.dll
Berichtskennung: 86c969ed-65b3-4029-98a0-984884d395ba
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/06/2016 11:04:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.14393.0, Zeitstempel: 0x578999ab
Name des fehlerhaften Moduls: dwmcore.dll, Version: 10.0.14393.103, Zeitstempel: 0x57b7e2e5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000144bf4
ID des fehlerhaften Prozesses: 0x214
Startzeit der fehlerhaften Anwendung: 0x01d208809a21b471
Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\dwmcore.dll
Berichtskennung: ecfe2a75-c235-42f3-9813-0f72ee3315ce
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/06/2016 10:56:17 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/06/2016 02:44:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.14393.0, Zeitstempel: 0x578999ab
Name des fehlerhaften Moduls: dwmcore.dll, Version: 10.0.14393.103, Zeitstempel: 0x57b7e2e5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000144bf4
ID des fehlerhaften Prozesses: 0x2568
Startzeit der fehlerhaften Anwendung: 0x01d2083c6511e2c1
Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\dwmcore.dll
Berichtskennung: f7af41c0-4e0a-4095-826c-ff5de7226f7b
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/06/2016 02:44:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.14393.0, Zeitstempel: 0x578999ab
Name des fehlerhaften Moduls: dwmcore.dll, Version: 10.0.14393.103, Zeitstempel: 0x57b7e2e5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000144bf4
ID des fehlerhaften Prozesses: 0x23b8
Startzeit der fehlerhaften Anwendung: 0x01d2083c5e20f7c9
Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\dwmcore.dll
Berichtskennung: 81a6d950-216a-455e-ab9f-5620c477e57f
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/06/2016 02:44:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.14393.0, Zeitstempel: 0x578999ab
Name des fehlerhaften Moduls: dwmcore.dll, Version: 10.0.14393.103, Zeitstempel: 0x57b7e2e5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000144bf4
ID des fehlerhaften Prozesses: 0x344
Startzeit der fehlerhaften Anwendung: 0x01d2080f7714151b
Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\dwmcore.dll
Berichtskennung: 1ff6d224-7dde-438c-a5bf-b543df53eb5d
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/06/2016 10:26:37 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/06/2016 09:29:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_scan, Version: 10.0.14393.0, Zeitstempel: 0x57899b1c
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.14393.103, Zeitstempel: 0x57b7e207
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000bc7f4
ID des fehlerhaften Prozesses: 0x4c4
Startzeit der fehlerhaften Anwendung: 0x01d2080f837bc3f0
Pfad der fehlerhaften Anwendung: C:\WINDOWS\System32\svchost.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll
Berichtskennung: 33a87509-3612-4095-a023-3e4a0c0c920f
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:


Systemfehler:
=============
Error: (09/06/2016 10:56:26 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/06/2016 10:55:16 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Netzwerkdienst" (SID: S-1-5-20) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{3185A766-B338-11E4-A71E-12E3F512A338}
 und der APPID 
{7006698D-2974-4091-A424-85DD0B909E23}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (09/06/2016 10:55:13 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Netzwerkdienst" (SID: S-1-5-20) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{3185A766-B338-11E4-A71E-12E3F512A338}
 und der APPID 
{7006698D-2974-4091-A424-85DD0B909E23}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (09/06/2016 10:52:40 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (09/06/2016 10:51:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Management and Security Application User Notification Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/06/2016 10:51:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "IconMan_R" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/06/2016 10:51:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Application Virtualization Client" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/06/2016 10:51:33 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/06/2016 10:51:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/06/2016 10:51:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Client Virtualization Handler" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2016-09-01 15:17:37.445
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-09-01 15:17:36.736
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-09-01 15:17:36.509
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-09-01 15:17:36.290
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-09-01 15:17:36.069
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-09-01 15:17:35.849
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-09-01 15:17:34.471
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-09-01 15:17:34.205
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-09-01 15:16:30.664
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.

  Date: 2016-09-01 15:16:30.643
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz
Prozentuale Nutzung des RAM: 26%
Installierter physikalischer RAM: 8030.35 MB
Verfügbarer physikalischer RAM: 5878.36 MB
Summe virtueller Speicher: 23390.35 MB
Verfügbarer virtueller Speicher: 21257.43 MB

==================== Laufwerke ================================

Drive c: (Acer) (Fixed) (Total:110.23 GB) (Free:32.87 GB) NTFS
Drive d: (DATA) (Fixed) (Total:683.13 GB) (Free:400.62 GB) NTFS
Drive g: (Volume) (Fixed) (Total:931.51 GB) (Free:46.83 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: D7D7D5A1)
Partition 1: (Not Active) - (Size=1 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=110.2 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=467 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: D7D7D44A)
Partition 1: (Not Active) - (Size=15.5 GB) - (Type=27)
Partition 2: (Not Active) - (Size=683.1 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 50734181)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

ascard · 06.09.2016, 22:12

Code:

ATTFilter


	Code: 

 ATTFilter

  
	Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2016
durchgeführt von ascard (Administrator) auf ASCARD-PC (06-09-2016 23:06:03)
Gestartet von C:\Users\ascard\Desktop
Geladene Profile: ascard (Verfügbare Profile: ascard & DefaultAppPool)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Egis Technology Inc. ) C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidMonitorSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Digital Care Solutions) C:\Program Files\BDServices\BitDefenderCOM.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(Atheros) C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.7.113.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\acrobat_sl.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [706440 2015-09-24] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16404224 2015-08-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1408752 2015-08-27] (Realtek Semiconductor)
HKLM\...\Run: [InstantUpdate] => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuDaemon.exe [124520 2012-04-07] ()
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [800896 2012-03-08] (Atheros Commnucations)
HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163800 2016-07-30] (IvoSoft)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\nvspcap64.dll [1767944 2016-06-14] (NVIDIA Corporation)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [296984 2012-01-05] (NTI Corporation)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1105488 2012-03-23] (Dritek System Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2013-07-18] (Intel Corporation)
HKLM-x32\...\Run: [Logitech Alert Commander] => C:\Program Files (x86)\Logitech\Logitech Alert\Logitech Alert Commander.exe [12505400 2013-10-31] (Logitech)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4127488 2015-06-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Acrobat Assistant 7.0] => C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [483328 2004-12-14] (Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9107104 2016-09-05] (AVAST Software)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8894680 2016-08-05] (Piriform Ltd)
HKU\S-1-5-21-767237098-4183446396-2625044690-1002\...\Run: [VLC Updater] => C:\Program Files (x86)\VLC Updater\vlc-updater.exe [370128 2016-09-05] ()
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-05] (AVAST Software)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\ascard\AppData\Roaming\Dropbox\bin\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Acrobat - Schnellstart.lnk [2016-08-04]
ShortcutTarget: Adobe Acrobat - Schnellstart.lnk -> C:\Windows\Installer\{AC76BA86-1033-F400-7760-100000000002}\SC_Acrobat.exe ()
Startup: C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aluagent.lnk [2016-08-19]
ShortcutTarget: aluagent.lnk -> C:\ProgramData\Acer\Acer Updater\aluagent.exe (Acer Incorporated)
Startup: C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-09-02]
ShortcutTarget: Dropbox.lnk -> C:\Users\ascard\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{7e89f04e-0508-498e-b022-633b2fa91e15}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-767237098-4183446396-2625044690-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/androidnews/
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-767237098-4183446396-2625044690-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2016-07-30] (IvoSoft)
BHO-x32: Kein Name -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> Keine Datei
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-03-08] (Atheros Commnucations)
BHO-x32: AcroIEToolbarHelper Class -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2004-12-14] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2016-07-30] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [2004-12-14] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)

FireFox:
========
FF ProfilePath: C:\Users\ascard\AppData\Roaming\Mozilla\Firefox\Profiles\QRx5Jf8b.default
FF NewTab: chrome://fvd.speeddial/content/fvd_about_blank.html
FF DefaultSearchEngine: Bing®
FF SelectedSearchEngine: Bing®
FF Homepage: hxxp://www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-08-13] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-08-13] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2011-12-01] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2011-12-01] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=1.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Keine Datei]
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Keine Datei]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-767237098-4183446396-2625044690-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\ascard\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-03-27] (Unity Technologies ApS)
FF Extension: (Google Search by Image) - C:\Users\ascard\AppData\Roaming\Mozilla\Firefox\Profiles\QRx5Jf8b.default\extensions\google@hitachi.com.xpi [2016-04-28]
FF Extension: (Speed Dial [FVD] - New Tab Page, Sync...) - C:\Users\ascard\AppData\Roaming\Mozilla\Firefox\Profiles\QRx5Jf8b.default\extensions\pavel.sherbakov@gmail.com [2016-08-23]
FF Extension: (1-Click YouTube Video Downloader) - C:\Users\ascard\AppData\Roaming\Mozilla\Firefox\Profiles\QRx5Jf8b.default\extensions\YoutubeDownloader@PeterOlayev.com.xpi [2016-08-24]
FF Extension: (Download YouTube Videos as MP4) - C:\Users\ascard\AppData\Roaming\Mozilla\Firefox\Profiles\QRx5Jf8b.default\Extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2016-09-04]
FF Extension: (Adblock Plus) - C:\Users\ascard\AppData\Roaming\Mozilla\Firefox\Profiles\QRx5Jf8b.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-05]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [@greatdealz] - C:\Users\ascard\AppData\Roaming\Mozilla\Firefox\Profiles\QRx5Jf8b.default\extensions\@greatdealz.xpi => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR StartupUrls: Default -> "chrome://bookmarks/#2","hxxps://www.facebook.com/","hxxps://web.whatsapp.com/","hxxps://startpage.com/deu/"
CHR Profile: C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-28]
CHR Extension: (Adblock Plus) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-08-23]
CHR Extension: (Google-Suche) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Avast SafePrice) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-09-06]
CHR Extension: (Avira Browserschutz) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-07-18]
CHR Extension: (Avast Online Security) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-09-06]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR Extension: (Google Mail) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-30]
CHR Extension: (Chrome Media Router) - C:\Users\ascard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-30]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-12-14] (Adobe Systems) [Datei ist nicht signiert]
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2159320 2016-08-22] (Adobe Systems, Incorporated)
R2 ApHidMonitorService; C:\Program Files\Apoint2K\HidMonitorSvc.exe [104840 2015-09-24] (Alps Electric Co., Ltd.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-05] (AVAST Software)
R2 BitDefenderCOM; C:\Program Files\BDServices\BitDefenderCom.exe [1012736 2016-06-25] (Digital Care Solutions) [Datei ist nicht signiert]
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [Datei ist nicht signiert]
S3 DCDhcpService; C:\Program Files (x86)\Acer\WDAgent\DCDhcpService.exe [111776 2012-02-10] (Atheros Communication Inc.) [Datei ist nicht signiert]
S3 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2016\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [Datei ist nicht signiert]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-10-08] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [Datei ist nicht signiert]
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
R2 PSI_SVC_2_x64; C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (arvato digital services llc)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1750712 2015-06-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2102496 2015-06-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [224712 2015-07-24] (Safer-Networking Ltd.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe [72864 2012-02-19] (Atheros) [Datei ist nicht signiert]
S4 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-05] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-09-05] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-05] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-05] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-05] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969560 2016-09-05] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513496 2016-09-05] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-05] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [292704 2016-09-05] (AVAST Software)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-04-06] (REALiX(tm))
R3 L1C; C:\Windows\System32\drivers\L1C62x64.sys [129224 2015-04-06] (Qualcomm Atheros Co., Ltd.)
R3 ManyCam; C:\Windows\system32\DRIVERS\mcvidrv_x64.sys [34304 2012-01-11] (ManyCam LLC)
R3 mcaudrv_simple; C:\Windows\system32\drivers\mcaudrv_x64.sys [28160 2012-02-22] (ManyCam LLC)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2015-04-06] (Intel Corporation)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics Co., Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42088 2015-10-12] (Anchorfree Inc.)
S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [452040 2016-06-14] (BitDefender S.R.L.)
S1 Uim_DEVIM; C:\Windows\System32\DRIVERS\uim_devim.sys [25904 2015-08-26] ()
S1 Uim_IM; C:\Windows\System32\DRIVERS\uim_im.sys [701232 2015-08-26] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R2 WinisoCDBus; C:\Windows\System32\drivers\WinisoCDBus.sys [204032 2014-02-26] (WinISO.com)
R3 WirelessKeyboardFilter; C:\Windows\System32\drivers\WirelessKeyboardFilter.sys [49896 2016-07-22] (Microsoft Corporation)
S3 WLRAWMp50x64; C:\Windows\System32\Drivers\WLRAWMp50x64.sys [35352 2013-10-31] (Logitech, Inc.)
S3 WLRAWMp50x64; C:\Windows\SysWOW64\Drivers\WLRAWMp50x64.sys [35352 2013-10-31] (Logitech, Inc.)
R3 WLRAWSp50x64; C:\Windows\System32\Drivers\WLRAWSp50x64.sys [34328 2013-10-31] (Logitech, Inc.)
R3 WLRAWSp50x64; C:\Windows\SysWOW64\Drivers\WLRAWSp50x64.sys [34328 2013-10-31] (Logitech, Inc.)
S1 epp; \??\C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\epp.sys [X]
U3 idsvc; kein ImagePath
S3 MFE_RR; \??\C:\Users\ascard\AppData\Local\Temp\mfe_rr.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-06 23:04 - 2016-09-06 23:05 - 02397696 _____ (Farbar) C:\Users\ascard\Desktop\FRST64.exe
2016-09-06 22:55 - 2016-09-06 22:56 - 01610560 _____ (Malwarebytes) C:\Users\ascard\Desktop\JRT.exe
2016-09-06 22:52 - 2016-09-06 22:52 - 00000000 ____H C:\ProgramData\cm-lock
2016-09-06 22:40 - 2016-09-06 22:47 - 03826240 _____ C:\Users\ascard\Desktop\AdwCleaner_6.010(1).exe
2016-09-06 22:31 - 2016-09-06 22:31 - 00001195 _____ C:\Users\ascard\Desktop\test.txt
2016-09-06 22:28 - 2016-09-06 22:28 - 00001197 _____ C:\Users\ascard\Desktop\mbytes.txt
2016-09-06 22:06 - 2016-09-06 22:06 - 00001871 _____ C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\chrome - Verknüpfung.lnk
2016-09-06 22:06 - 2016-09-06 22:06 - 00001802 _____ C:\Users\ascard\Desktop\chrome - Verknüpfung.lnk
2016-09-06 21:22 - 2016-09-06 21:22 - 00000000 ____D C:\Users\ascard\AppData\Local\Adobe
2016-09-06 15:14 - 2016-08-04 14:44 - 00002100 _____ C:\Users\ascard\Desktop\Adobe Acrobat 7.0 Professional.lnk
2016-09-06 15:14 - 2016-06-01 15:47 - 00001216 _____ C:\Users\ascard\Desktop\Ashampoo WinOptimizer 2016.lnk
2016-09-06 14:40 - 2016-09-06 14:40 - 00001095 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2016-09-06 14:40 - 2016-09-06 14:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2016-09-06 14:36 - 2016-09-06 14:36 - 00000000 ____D C:\Program Files\VS Revo Group
2016-09-06 14:09 - 2016-09-06 14:13 - 00071907 _____ C:\Users\ascard\Desktop\Addition.txt
2016-09-06 14:08 - 2016-09-06 23:06 - 00030074 _____ C:\Users\ascard\Desktop\FRST.txt
2016-09-06 12:43 - 2016-09-06 12:43 - 02397696 _____ (Farbar) C:\Users\ascard\Downloads\FRST64(1).exe
2016-09-06 12:41 - 2016-09-06 12:41 - 00373718 _____ C:\Users\ascard\Desktop\TeamSpybot-20160906-124106.cab
2016-09-06 12:40 - 2016-09-06 12:40 - 00373804 _____ C:\Users\ascard\Desktop\TeamSpybot-20160906-124022.cab
2016-09-06 09:40 - 2016-09-06 21:22 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Adobe
2016-09-06 09:22 - 2016-09-06 21:22 - 00000000 ____D C:\ProgramData\Adobe
2016-09-06 09:09 - 2016-09-06 09:23 - 00000000 ____D C:\Program Files\BDServices
2016-09-06 09:08 - 2016-09-06 09:09 - 10841384 _____ (ParetoLogic, Inc.) C:\Users\ascard\Downloads\RegCureProSetup_EF4412AB-5DA0-49E4-A69D-13F8F8E01025_.exe
2016-09-06 07:45 - 2016-09-06 07:45 - 00000000 ____D C:\Users\ascard\Desktop\PhotoshopPortable
2016-09-05 10:52 - 2016-09-05 10:52 - 00000000 ____D C:\Users\ascard\AppData\Roaming\vlc
2016-09-05 10:51 - 2016-09-05 10:51 - 00000920 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-09-05 10:51 - 2016-09-05 10:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-09-05 10:49 - 2016-09-05 10:49 - 00000000 ____D C:\Program Files (x86)\VLC Updater
2016-09-05 10:48 - 2016-09-05 10:49 - 32140168 _____ C:\Users\ascard\Downloads\vlc-2.2.4-win64.exe
2016-09-05 08:55 - 2016-09-05 08:55 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-09-05 08:55 - 2016-09-05 08:55 - 00000000 ____D C:\Users\ascard\Tracing
2016-09-05 08:55 - 2016-09-05 08:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-09-05 08:54 - 2016-09-05 08:54 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2016-09-05 08:47 - 2016-09-05 08:47 - 00037144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2016-09-05 08:47 - 2016-09-05 08:47 - 00004030 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1473058051
2016-09-05 08:47 - 2016-09-05 08:47 - 00001098 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2016-09-05 08:47 - 2016-09-05 08:47 - 00001098 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-09-05 08:47 - 2016-09-05 08:47 - 00000000 ____D C:\Users\ascard\AppData\Local\CEF
2016-09-05 08:45 - 2016-09-05 08:45 - 00969560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2016-09-05 08:45 - 2016-09-05 08:45 - 00513496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2016-09-05 08:45 - 2016-09-05 08:45 - 00391496 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-09-05 08:45 - 2016-09-05 08:45 - 00292704 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2016-09-05 08:45 - 2016-09-05 08:45 - 00163416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2016-09-05 08:45 - 2016-09-05 08:45 - 00108816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2016-09-05 08:45 - 2016-09-05 08:45 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2016-09-05 08:45 - 2016-09-05 08:45 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-09-05 08:45 - 2016-09-05 08:45 - 00053208 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-09-05 08:45 - 2016-09-05 08:45 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-09-05 08:45 - 2016-09-05 08:45 - 00004004 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2016-09-05 08:45 - 2016-09-05 08:45 - 00001989 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2016-09-05 08:45 - 2016-09-05 08:45 - 00001977 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-09-05 08:44 - 2016-09-05 08:47 - 00000000 ____D C:\Program Files\AVAST Software
2016-09-05 08:41 - 2016-09-05 08:44 - 06253640 _____ (AVAST Software) C:\Users\ascard\Downloads\avast_free_antivirus_setup_online.exe
2016-09-05 00:14 - 2016-09-05 00:14 - 00000000 ____D C:\ProgramData\Emsisoft
2016-09-05 00:09 - 2016-09-05 00:12 - 277259016 _____ (Emsisoft Ltd. ) C:\Users\ascard\Downloads\EmsisoftAntiMalwareSetup.exe
2016-09-04 14:57 - 2016-09-04 14:57 - 00002487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-09-04 14:31 - 2016-09-04 14:31 - 02867336 _____ (OSHI Limited) C:\Users\ascard\Downloads\Defender-Installer.exe
2016-09-04 14:16 - 2016-09-04 14:16 - 00004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-09-04 14:16 - 2016-09-04 14:16 - 00002136 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-09-04 12:44 - 2016-09-04 12:44 - 00388608 _____ (Trend Micro Inc.) C:\Users\ascard\Downloads\HijackThis.exe
2016-09-04 11:35 - 2016-09-04 11:35 - 00020810 _____ C:\Users\ascard\Documents\cc_20160904_113522.reg
2016-09-04 11:34 - 2016-09-04 11:34 - 00143438 _____ C:\Users\ascard\Documents\cc_20160904_113404.reg
2016-09-03 00:17 - 2016-09-03 00:17 - 39590890 _____ C:\Users\ascard\Desktop\andreaok.psd
2016-09-02 23:54 - 2016-09-02 23:54 - 13738940 _____ C:\Users\ascard\Desktop\3 (150).psd
2016-09-02 22:05 - 2016-09-06 23:06 - 00000000 ____D C:\FRST
2016-09-02 22:05 - 2016-09-06 13:33 - 00128478 _____ C:\Users\ascard\Downloads\FRST.txt
2016-09-02 21:55 - 2016-09-06 22:58 - 00000548 _____ C:\Users\ascard\Desktop\JRT.txt
2016-09-02 21:35 - 2016-09-02 21:35 - 03826240 _____ C:\Users\ascard\Downloads\adwcleaner_6.010.exe
2016-09-02 21:28 - 2016-09-02 21:28 - 04284888 _____ (AVAST Software) C:\Users\ascard\Downloads\avast-browser-cleanup-sfx121(1).exe
2016-09-02 21:27 - 2016-09-02 21:27 - 04284888 _____ (AVAST Software) C:\Users\ascard\Downloads\avast-browser-cleanup-sfx121.exe
2016-09-02 14:29 - 2016-08-26 07:43 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-09-02 14:29 - 2016-08-26 07:43 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-09-02 12:41 - 2016-09-06 22:13 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-09-02 12:41 - 2016-09-02 12:41 - 00001191 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-09-02 12:41 - 2016-09-02 12:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-09-02 12:41 - 2016-09-02 12:41 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-09-02 12:41 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-09-02 12:41 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-09-02 12:41 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-09-02 12:40 - 2016-09-02 12:41 - 22851472 _____ (Malwarebytes ) C:\Users\ascard\Downloads\mbam-setup-2.2.1.1043.exe
2016-09-02 11:51 - 2016-09-06 10:41 - 00000000 ____D C:\Users\ascard\AppData\Local\ManyCam
2016-09-02 11:51 - 2016-09-02 11:51 - 00000000 ____D C:\Users\ascard\AppData\Roaming\ManyCam
2016-09-02 11:51 - 2016-09-02 11:51 - 00000000 ____D C:\ProgramData\ManyCam
2016-09-02 11:40 - 2016-09-02 11:40 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-09-02 11:20 - 2016-09-02 11:20 - 00603640 _____ (Visicom Media inc.) C:\Users\ascard\Downloads\ManyCamWebInstaller(1).exe
2016-09-02 11:17 - 2014-12-17 18:26 - 00450771 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160902-111744.backup
2016-09-01 09:35 - 2016-08-27 07:12 - 04130944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-09-01 09:35 - 2016-08-27 07:12 - 00244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-09-01 09:35 - 2016-08-27 06:58 - 03893376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-09-01 09:35 - 2016-08-27 06:58 - 00121368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-09-01 09:35 - 2016-08-27 06:39 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2016-09-01 09:35 - 2016-08-27 06:38 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2016-09-01 09:35 - 2016-08-27 06:38 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2016-09-01 09:35 - 2016-08-27 06:37 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2016-09-01 09:35 - 2016-08-27 06:25 - 00804864 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2016-09-01 09:35 - 2016-08-20 08:05 - 01377008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2016-09-01 09:35 - 2016-08-20 08:04 - 07814488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-09-01 09:35 - 2016-08-20 08:03 - 01883784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-09-01 09:35 - 2016-08-20 07:52 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-09-01 09:35 - 2016-08-20 07:52 - 02190688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-09-01 09:35 - 2016-08-20 07:52 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-09-01 09:35 - 2016-08-20 07:52 - 01279328 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-09-01 09:35 - 2016-08-20 07:52 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-09-01 09:35 - 2016-08-20 07:52 - 00658776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-09-01 09:35 - 2016-08-20 07:52 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-09-01 09:35 - 2016-08-20 07:52 - 00178528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
2016-09-01 09:35 - 2016-08-20 07:51 - 00681312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2016-09-01 09:35 - 2016-08-20 07:50 - 02913104 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-09-01 09:35 - 2016-08-20 07:50 - 01099608 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2016-09-01 09:35 - 2016-08-20 07:50 - 00987992 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2016-09-01 09:35 - 2016-08-20 07:50 - 00073568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2016-09-01 09:35 - 2016-08-20 07:50 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-09-01 09:35 - 2016-08-20 07:50 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2016-09-01 09:35 - 2016-08-20 07:47 - 22218808 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-09-01 09:35 - 2016-08-20 07:47 - 01453992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-09-01 09:35 - 2016-08-20 07:47 - 01071728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-09-01 09:35 - 2016-08-20 07:46 - 01570680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-09-01 09:35 - 2016-08-20 07:43 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-09-01 09:35 - 2016-08-20 07:34 - 01430200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-09-01 09:35 - 2016-08-20 07:34 - 00782176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-09-01 09:35 - 2016-08-20 07:33 - 05722312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-09-01 09:35 - 2016-08-20 07:33 - 00852824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-09-01 09:35 - 2016-08-20 07:32 - 02166232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-09-01 09:35 - 2016-08-20 07:32 - 00846552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-09-01 09:35 - 2016-08-20 07:29 - 20965240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-09-01 09:35 - 2016-08-20 07:29 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-09-01 09:35 - 2016-08-20 07:29 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-09-01 09:35 - 2016-08-20 07:25 - 01264912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-09-01 09:35 - 2016-08-20 07:22 - 22571008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-09-01 09:35 - 2016-08-20 07:22 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-09-01 09:35 - 2016-08-20 07:21 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL
2016-09-01 09:35 - 2016-08-20 07:21 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2016-09-01 09:35 - 2016-08-20 07:21 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2016-09-01 09:35 - 2016-08-20 07:21 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-09-01 09:35 - 2016-08-20 07:21 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\c_GSM7.DLL
2016-09-01 09:35 - 2016-08-20 07:20 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2016-09-01 09:35 - 2016-08-20 07:20 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2016-09-01 09:35 - 2016-08-20 07:20 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL
2016-09-01 09:35 - 2016-08-20 07:19 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-09-01 09:35 - 2016-08-20 07:18 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-09-01 09:35 - 2016-08-20 07:18 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-09-01 09:35 - 2016-08-20 07:18 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2016-09-01 09:35 - 2016-08-20 07:18 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2016-09-01 09:35 - 2016-08-20 07:17 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthLEEnum.sys
2016-09-01 09:35 - 2016-08-20 07:17 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll
2016-09-01 09:35 - 2016-08-20 07:16 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2016-09-01 09:35 - 2016-08-20 07:16 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll
2016-09-01 09:35 - 2016-08-20 07:15 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-09-01 09:35 - 2016-08-20 07:15 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-09-01 09:35 - 2016-08-20 07:15 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2016-09-01 09:35 - 2016-08-20 07:15 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-09-01 09:35 - 2016-08-20 07:15 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2016-09-01 09:35 - 2016-08-20 07:14 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL
2016-09-01 09:35 - 2016-08-20 07:14 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2016-09-01 09:35 - 2016-08-20 07:14 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2016-09-01 09:35 - 2016-08-20 07:14 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2016-09-01 09:35 - 2016-08-20 07:14 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL
2016-09-01 09:35 - 2016-08-20 07:13 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-09-01 09:35 - 2016-08-20 07:13 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-09-01 09:35 - 2016-08-20 07:13 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2016-09-01 09:35 - 2016-08-20 07:12 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-09-01 09:35 - 2016-08-20 07:12 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-09-01 09:35 - 2016-08-20 07:12 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-09-01 09:35 - 2016-08-20 07:12 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-09-01 09:35 - 2016-08-20 07:12 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-09-01 09:35 - 2016-08-20 07:11 - 00965120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-09-01 09:35 - 2016-08-20 07:11 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-09-01 09:35 - 2016-08-20 07:11 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-01 09:35 - 2016-08-20 07:11 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-09-01 09:35 - 2016-08-20 07:10 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-09-01 09:35 - 2016-08-20 07:09 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-09-01 09:35 - 2016-08-20 07:09 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2016-09-01 09:35 - 2016-08-20 07:08 - 01906176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2016-09-01 09:35 - 2016-08-20 07:08 - 01547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2016-09-01 09:35 - 2016-08-20 07:08 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-09-01 09:35 - 2016-08-20 07:08 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll
2016-09-01 09:35 - 2016-08-20 07:08 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-09-01 09:35 - 2016-08-20 07:07 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-09-01 09:35 - 2016-08-20 07:07 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-09-01 09:35 - 2016-08-20 07:07 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-09-01 09:35 - 2016-08-20 07:07 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2016-09-01 09:35 - 2016-08-20 07:07 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll
2016-09-01 09:35 - 2016-08-20 07:07 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll
2016-09-01 09:35 - 2016-08-20 07:06 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-09-01 09:35 - 2016-08-20 07:06 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2016-09-01 09:35 - 2016-08-20 07:06 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll
2016-09-01 09:35 - 2016-08-20 07:04 - 23682560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-09-01 09:35 - 2016-08-20 07:04 - 03245056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2016-09-01 09:35 - 2016-08-20 07:04 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-01 09:35 - 2016-08-20 07:04 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-09-01 09:35 - 2016-08-20 07:04 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll
2016-09-01 09:35 - 2016-08-20 07:03 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2016-09-01 09:35 - 2016-08-20 07:03 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-09-01 09:35 - 2016-08-20 07:03 - 02846208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2016-09-01 09:35 - 2016-08-20 07:02 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-09-01 09:35 - 2016-08-20 07:01 - 04612096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-09-01 09:35 - 2016-08-20 07:01 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-09-01 09:35 - 2016-08-20 07:01 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll
2016-09-01 09:35 - 2016-08-20 07:00 - 19423232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-09-01 09:35 - 2016-08-20 07:00 - 08124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-09-01 09:35 - 2016-08-20 07:00 - 01316352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2016-09-01 09:35 - 2016-08-20 07:00 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll
2016-09-01 09:35 - 2016-08-20 06:59 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2016-09-01 09:35 - 2016-08-20 06:59 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-09-01 09:35 - 2016-08-20 06:59 - 01106944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2016-09-01 09:35 - 2016-08-20 06:59 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2016-09-01 09:35 - 2016-08-20 06:59 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll
2016-09-01 09:35 - 2016-08-20 06:58 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-09-01 09:35 - 2016-08-20 06:58 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll
2016-09-01 09:35 - 2016-08-20 06:57 - 02680832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-09-01 09:35 - 2016-08-20 06:57 - 02264064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-09-01 09:35 - 2016-08-20 06:57 - 01282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-09-01 09:35 - 2016-08-20 06:56 - 02711040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2016-09-01 09:35 - 2016-08-20 06:56 - 02315264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-09-01 09:35 - 2016-08-20 06:56 - 02289664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-09-01 09:35 - 2016-08-20 06:56 - 02143232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2016-09-01 09:35 - 2016-08-20 06:56 - 01006080 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2016-09-01 09:35 - 2016-08-20 06:56 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-09-01 09:35 - 2016-08-20 06:56 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll
2016-09-01 09:35 - 2016-08-20 06:55 - 19418624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-09-01 09:35 - 2016-08-20 06:55 - 00726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-09-01 09:35 - 2016-08-20 06:54 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2016-09-01 09:35 - 2016-08-20 06:53 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-09-01 09:35 - 2016-08-20 06:52 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-09-01 09:35 - 2016-08-20 06:51 - 06044672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-09-01 09:35 - 2016-08-20 06:51 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-09-01 09:34 - 2016-08-27 14:45 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll
2016-09-01 09:34 - 2016-08-27 11:37 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll
2016-09-01 09:34 - 2016-08-27 06:44 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll
2016-09-01 09:34 - 2016-08-27 06:43 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll
2016-09-01 09:34 - 2016-08-20 08:26 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-09-01 09:34 - 2016-08-20 08:13 - 00590952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-09-01 09:34 - 2016-08-20 08:06 - 01046976 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-09-01 09:34 - 2016-08-20 08:06 - 00885832 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-09-01 09:34 - 2016-08-20 08:06 - 00108384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-09-01 09:34 - 2016-08-20 08:04 - 01349120 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-09-01 09:34 - 2016-08-20 08:04 - 01163696 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-09-01 09:34 - 2016-08-20 08:03 - 02257248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-09-01 09:34 - 2016-08-20 07:50 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-09-01 09:34 - 2016-08-20 07:50 - 00942424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2016-09-01 09:34 - 2016-08-20 07:50 - 00807776 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2016-09-01 09:34 - 2016-08-20 07:42 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2016-09-01 09:34 - 2016-08-20 07:34 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll
2016-09-01 09:34 - 2016-08-20 07:21 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2016-09-01 09:34 - 2016-08-20 07:21 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2016-09-01 09:34 - 2016-08-20 07:20 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2016-09-01 09:34 - 2016-08-20 07:20 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2016-09-01 09:34 - 2016-08-20 07:19 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2016-09-01 09:34 - 2016-08-20 07:17 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2016-09-01 09:34 - 2016-08-20 07:17 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-09-01 09:34 - 2016-08-20 07:16 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2016-09-01 09:34 - 2016-08-20 07:14 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
2016-09-01 09:34 - 2016-08-20 07:14 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL
2016-09-01 09:34 - 2016-08-20 07:13 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll
2016-09-01 09:34 - 2016-08-20 07:12 - 01014784 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-09-01 09:34 - 2016-08-20 07:12 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-09-01 09:34 - 2016-08-20 07:11 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2016-09-01 09:34 - 2016-08-20 07:10 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-09-01 09:34 - 2016-08-20 07:10 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2016-09-01 09:34 - 2016-08-20 07:09 - 09128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-09-01 09:34 - 2016-08-20 07:09 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-09-01 09:34 - 2016-08-20 07:08 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll
2016-09-01 09:34 - 2016-08-20 07:07 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2016-09-01 09:34 - 2016-08-20 07:05 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2016-09-01 09:34 - 2016-08-20 07:05 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-09-01 09:34 - 2016-08-20 07:04 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2016-09-01 09:34 - 2016-08-20 07:04 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-09-01 09:34 - 2016-08-20 07:03 - 00944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-09-01 09:34 - 2016-08-20 06:59 - 07624192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-09-01 09:34 - 2016-08-20 06:59 - 01690112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-09-01 09:34 - 2016-08-20 06:57 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2016-09-01 09:34 - 2016-08-20 06:56 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll

ascard · 06.09.2016, 22:13

Code:

ATTFilter

2016-09-01 09:34 - 2016-08-20 06:53 - 03617792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-09-01 09:34 - 2016-08-20 06:53 - 03299328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2016-09-01 09:34 - 2016-08-20 06:51 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2016-09-01 09:34 - 2016-08-20 06:50 - 01875456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-09-01 09:34 - 2016-08-20 06:49 - 02999296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2016-09-01 09:34 - 2016-08-20 06:46 - 03105792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2016-09-01 09:34 - 2016-08-19 03:33 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS
2016-09-01 09:27 - 2016-09-01 09:27 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2016-09-01 09:27 - 2016-09-01 09:27 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2016-09-01 09:27 - 2016-09-01 09:27 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-09-01 09:27 - 2016-09-01 09:27 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-09-01 09:27 - 2016-09-01 09:27 - 00409952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2016-09-01 09:27 - 2016-09-01 09:27 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2016-09-01 09:27 - 2016-09-01 09:27 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2016-09-01 09:27 - 2016-09-01 09:27 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2016-09-01 09:27 - 2016-09-01 09:27 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2016-09-01 09:27 - 2016-09-01 09:27 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-09-01 09:27 - 2016-09-01 09:27 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2016-09-01 09:27 - 2016-09-01 09:27 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2016-09-01 09:27 - 2016-09-01 09:27 - 00079544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2016-09-01 09:27 - 2016-09-01 09:27 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-09-01 09:27 - 2016-09-01 09:27 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-09-01 09:27 - 2016-09-01 09:27 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-09-01 09:27 - 2016-09-01 09:27 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-09-01 09:27 - 2016-09-01 09:27 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-08-30 14:38 - 2016-08-30 14:38 - 127071297 _____ C:\Users\ascard\Desktop\Mockup Bottle wine.psd
2016-08-28 13:18 - 2016-08-28 13:18 - 03413015 _____ C:\Users\ascard\Downloads\6059255_2799963_HD.mp4
2016-08-28 13:02 - 2016-08-28 13:02 - 03993392 _____ C:\Users\ascard\Downloads\6059255_2799881_HD.mp4
2016-08-28 12:27 - 2016-08-28 12:27 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Blender Foundation
2016-08-28 12:25 - 2016-08-28 12:25 - 00000000 ____D C:\Users\ascard\.thumbnails
2016-08-25 19:34 - 2016-08-25 19:35 - 01290240 _____ C:\Users\ascard\Downloads\GreentreesandgrassPSD-2.rar.part
2016-08-25 08:05 - 2016-09-06 09:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-08-25 04:57 - 2016-08-25 04:57 - 00049312 _____ (Visicom Media Inc.) C:\WINDOWS\system32\Drivers\mcvidrv.sys
2016-08-23 22:18 - 2016-08-06 06:33 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-08-23 22:18 - 2016-08-06 06:31 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2016-08-23 22:18 - 2016-08-06 06:29 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-08-23 22:18 - 2016-08-06 06:17 - 00450400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-08-23 22:18 - 2016-08-06 06:17 - 00224096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2016-08-23 22:18 - 2016-08-06 06:16 - 00435040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2016-08-23 22:18 - 2016-08-06 06:09 - 00151224 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-08-23 22:18 - 2016-08-06 06:08 - 00509784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-08-23 22:18 - 2016-08-06 05:48 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2016-08-23 22:18 - 2016-08-06 05:41 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll
2016-08-23 22:18 - 2016-08-06 05:40 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-08-23 22:18 - 2016-08-06 05:40 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll
2016-08-23 22:18 - 2016-08-06 05:33 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-08-23 22:18 - 2016-08-06 05:31 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2016-08-23 22:18 - 2016-08-06 05:23 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-08-23 22:18 - 2016-08-06 05:19 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2016-08-23 22:18 - 2016-08-05 11:14 - 01066328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2016-08-23 22:18 - 2016-08-05 11:12 - 05622600 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2016-08-23 22:18 - 2016-08-05 11:10 - 00939872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll
2016-08-23 22:18 - 2016-08-05 11:05 - 00665768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2016-08-23 22:18 - 2016-08-05 10:28 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2016-08-23 22:18 - 2016-08-05 10:22 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2016-08-23 22:18 - 2016-08-05 10:20 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2016-08-23 22:18 - 2016-08-05 10:08 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2016-08-23 22:17 - 2016-08-06 06:31 - 00077664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2016-08-23 22:17 - 2016-08-06 06:29 - 00199008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2016-08-23 22:17 - 2016-08-06 06:26 - 01176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2016-08-23 22:17 - 2016-08-06 06:23 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-08-23 22:17 - 2016-08-06 06:18 - 02745224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-08-23 22:17 - 2016-08-06 06:18 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-08-23 22:17 - 2016-08-06 06:18 - 00396168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-08-23 22:17 - 2016-08-06 06:17 - 00790760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2016-08-23 22:17 - 2016-08-06 06:17 - 00619368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-08-23 22:17 - 2016-08-06 06:15 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2016-08-23 22:17 - 2016-08-06 06:13 - 01847048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-08-23 22:17 - 2016-08-06 06:13 - 01694200 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2016-08-23 22:17 - 2016-08-06 06:13 - 01066096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-08-23 22:17 - 2016-08-06 06:13 - 00595488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2016-08-23 22:17 - 2016-08-06 06:13 - 00381760 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-08-23 22:17 - 2016-08-06 06:13 - 00044472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2016-08-23 22:17 - 2016-08-06 06:08 - 02251432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-08-23 22:17 - 2016-08-06 06:08 - 01469120 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-08-23 22:17 - 2016-08-06 06:08 - 00587968 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-08-23 22:17 - 2016-08-06 06:08 - 00313560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2016-08-23 22:17 - 2016-08-06 06:08 - 00050880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-08-23 22:17 - 2016-08-06 06:04 - 00361096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2016-08-23 22:17 - 2016-08-06 06:03 - 01557296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2016-08-23 22:17 - 2016-08-06 06:03 - 01343928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-08-23 22:17 - 2016-08-06 06:03 - 00955008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-08-23 22:17 - 2016-08-06 06:03 - 00529928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2016-08-23 22:17 - 2016-08-06 06:03 - 00036168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2016-08-23 22:17 - 2016-08-06 06:02 - 00321280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-08-23 22:17 - 2016-08-06 05:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-08-23 22:17 - 2016-08-06 05:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-08-23 22:17 - 2016-08-06 05:48 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2016-08-23 22:17 - 2016-08-06 05:48 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2016-08-23 22:17 - 2016-08-06 05:48 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll
2016-08-23 22:17 - 2016-08-06 05:48 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll
2016-08-23 22:17 - 2016-08-06 05:48 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2016-08-23 22:17 - 2016-08-06 05:48 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll
2016-08-23 22:17 - 2016-08-06 05:47 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2016-08-23 22:17 - 2016-08-06 05:47 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2016-08-23 22:17 - 2016-08-06 05:47 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2016-08-23 22:17 - 2016-08-06 05:47 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
2016-08-23 22:17 - 2016-08-06 05:47 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll
2016-08-23 22:17 - 2016-08-06 05:46 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
2016-08-23 22:17 - 2016-08-06 05:46 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL
2016-08-23 22:17 - 2016-08-06 05:46 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe
2016-08-23 22:17 - 2016-08-06 05:46 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe
2016-08-23 22:17 - 2016-08-06 05:46 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2016-08-23 22:17 - 2016-08-06 05:46 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2016-08-23 22:17 - 2016-08-06 05:45 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2016-08-23 22:17 - 2016-08-06 05:45 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2016-08-23 22:17 - 2016-08-06 05:45 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2016-08-23 22:17 - 2016-08-06 05:45 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2016-08-23 22:17 - 2016-08-06 05:45 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2016-08-23 22:17 - 2016-08-06 05:45 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe
2016-08-23 22:17 - 2016-08-06 05:45 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2016-08-23 22:17 - 2016-08-06 05:45 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe
2016-08-23 22:17 - 2016-08-06 05:44 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2016-08-23 22:17 - 2016-08-06 05:44 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2016-08-23 22:17 - 2016-08-06 05:44 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll
2016-08-23 22:17 - 2016-08-06 05:44 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll
2016-08-23 22:17 - 2016-08-06 05:43 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
2016-08-23 22:17 - 2016-08-06 05:43 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-08-23 22:17 - 2016-08-06 05:43 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-08-23 22:17 - 2016-08-06 05:43 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2016-08-23 22:17 - 2016-08-06 05:42 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-08-23 22:17 - 2016-08-06 05:41 - 13867520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-08-23 22:17 - 2016-08-06 05:41 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2016-08-23 22:17 - 2016-08-06 05:41 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2016-08-23 22:17 - 2016-08-06 05:41 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-08-23 22:17 - 2016-08-06 05:41 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2016-08-23 22:17 - 2016-08-06 05:41 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2016-08-23 22:17 - 2016-08-06 05:41 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2016-08-23 22:17 - 2016-08-06 05:40 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-08-23 22:17 - 2016-08-06 05:40 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
2016-08-23 22:17 - 2016-08-06 05:40 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll
2016-08-23 22:17 - 2016-08-06 05:39 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2016-08-23 22:17 - 2016-08-06 05:39 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-08-23 22:17 - 2016-08-06 05:39 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2016-08-23 22:17 - 2016-08-06 05:39 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll
2016-08-23 22:17 - 2016-08-06 05:38 - 17187328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-08-23 22:17 - 2016-08-06 05:38 - 00526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-08-23 22:17 - 2016-08-06 05:37 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-08-23 22:17 - 2016-08-06 05:36 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2016-08-23 22:17 - 2016-08-06 05:33 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-08-23 22:17 - 2016-08-06 05:31 - 12174336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-08-23 22:17 - 2016-08-06 05:31 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-08-23 22:17 - 2016-08-06 05:31 - 01052672 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2016-08-23 22:17 - 2016-08-06 05:31 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-08-23 22:17 - 2016-08-06 05:30 - 13080576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-08-23 22:17 - 2016-08-06 05:30 - 12345344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-08-23 22:17 - 2016-08-06 05:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-08-23 22:17 - 2016-08-06 05:29 - 13433856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-08-23 22:17 - 2016-08-06 05:29 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-08-23 22:17 - 2016-08-06 05:29 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2016-08-23 22:17 - 2016-08-06 05:29 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2016-08-23 22:17 - 2016-08-06 05:28 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-08-23 22:17 - 2016-08-06 05:28 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2016-08-23 22:17 - 2016-08-06 05:28 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2016-08-23 22:17 - 2016-08-06 05:26 - 02422784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll
2016-08-23 22:17 - 2016-08-06 05:26 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-08-23 22:17 - 2016-08-06 05:26 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-08-23 22:17 - 2016-08-06 05:25 - 03116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll
2016-08-23 22:17 - 2016-08-06 05:25 - 01595904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-08-23 22:17 - 2016-08-06 05:24 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-08-23 22:17 - 2016-08-06 05:24 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-08-23 22:17 - 2016-08-06 05:23 - 02370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-08-23 22:17 - 2016-08-06 05:23 - 01780736 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-08-23 22:17 - 2016-08-06 05:23 - 01508864 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-08-23 22:17 - 2016-08-06 05:23 - 01491456 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-08-23 22:17 - 2016-08-06 05:23 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-08-23 22:17 - 2016-08-06 05:23 - 01062400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-08-23 22:17 - 2016-08-06 05:23 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2016-08-23 22:17 - 2016-08-06 05:21 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2016-08-23 22:17 - 2016-08-06 05:19 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2016-08-23 22:17 - 2016-08-05 10:29 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2016-08-23 22:17 - 2016-08-05 10:23 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2016-08-23 22:17 - 2016-08-05 10:20 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2016-08-23 22:17 - 2016-08-05 10:18 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll
2016-08-23 14:55 - 2016-08-23 14:55 - 248650089 _____ C:\Users\ascard\Desktop\kopfgitarre.psd
2016-08-22 12:51 - 2016-06-14 22:01 - 01767944 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2016-08-22 12:51 - 2016-04-14 07:38 - 00113216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2016-08-22 12:51 - 2016-04-14 07:38 - 00102976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2016-08-22 12:51 - 2016-04-14 07:38 - 00056384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2016-08-19 12:08 - 2016-08-19 12:08 - 00004267 _____ C:\Users\ascard\Desktop\ManyCam - Verknüpfung.lnk
2016-08-18 12:33 - 2016-08-18 12:33 - 08227032 _____ (Piriform Ltd) C:\Users\ascard\Downloads\ccsetup521.exe
2016-08-17 14:14 - 2016-08-17 14:15 - 00214264 _____ C:\TDSSKiller.3.1.0.11_17.08.2016_14.14.07_log.txt
2016-08-17 14:08 - 2016-08-17 14:08 - 11427128 _____ (Bitdefender LLC) C:\Users\ascard\Downloads\BootkitRemoval_x64.exe
2016-08-17 14:06 - 2016-08-17 14:06 - 00784152 _____ (McAfee, Inc.) C:\Users\ascard\Downloads\rootkitremover.exe
2016-08-17 08:26 - 2016-08-17 08:26 - 00000000 ____D C:\ProgramData\Simply Super Software
2016-08-17 08:25 - 2016-08-17 08:25 - 01474568 _____ C:\Users\ascard\Downloads\Trojan Remover - CHIP-Installer.exe
2016-08-16 13:35 - 2016-09-04 12:44 - 00000095 _____ C:\SILENT
2016-08-15 20:54 - 2016-08-15 20:54 - 44534205 _____ C:\Users\ascard\Downloads\NAVIGON Europe v5.4.6 Patched(appsfan.org).apk
2016-08-15 11:01 - 2016-09-05 10:43 - 00000000 ____D C:\Users\ascard\AppData\Roaming\AVAST Software
2016-08-15 11:00 - 2016-08-15 11:00 - 04284888 _____ (AVAST Software) C:\Users\ascard\Downloads\avast-browser-cleanup-sfx.exe
2016-08-14 08:35 - 2014-12-17 18:26 - 00450771 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160814-083555.backup
2016-08-14 08:18 - 2016-08-14 08:19 - 00030256 _____ C:\Users\ascard\Downloads\MilanBold.ttf
2016-08-13 12:56 - 2016-08-13 12:56 - 03784256 _____ C:\Users\ascard\Downloads\adwcleaner_6.000(1).exe
2016-08-13 11:30 - 2016-08-13 12:10 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-08-13 11:30 - 2016-08-13 11:30 - 00003860 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-08-13 10:29 - 2016-09-02 11:51 - 00000000 ____D C:\Program Files (x86)\ManyCam
2016-08-13 10:04 - 2016-08-13 10:04 - 03784256 _____ C:\Users\ascard\Downloads\adwcleaner_6.000.exe
2016-08-12 17:45 - 2016-08-12 17:45 - 73850067 _____ C:\Users\ascard\Desktop\Nina1.psd
2016-08-12 17:21 - 2016-08-12 17:22 - 122029912 _____ C:\Users\ascard\Desktop\nina.psd
2016-08-12 13:03 - 2016-08-12 13:03 - 55878384 _____ (Intel Corporation) C:\Users\ascard\Downloads\Intel SSD Toolbox - v3.3.6(1).exe
2016-08-11 21:04 - 2016-08-28 10:33 - 00001456 _____ C:\Users\ascard\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2016-08-11 14:17 - 2016-08-11 14:17 - 03519312 _____ ( ) C:\Users\ascard\Downloads\OneSafe_Driver_Manager.exe
2016-08-10 17:13 - 2016-08-10 17:13 - 00000000 ____D C:\ProgramData\USOShared
2016-08-10 15:55 - 2016-09-06 09:21 - 00000000 ___DC C:\WINDOWS\Panther
2016-08-10 15:49 - 2016-08-10 15:49 - 01708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2016-08-10 15:49 - 2016-08-10 15:49 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-08-10 15:49 - 2016-08-10 15:49 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-08-10 15:49 - 2016-08-10 15:49 - 01456640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-08-10 15:49 - 2016-08-10 15:49 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-08-10 15:49 - 2016-08-10 15:49 - 00770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-08-10 15:49 - 2016-08-10 15:49 - 00509952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2016-08-10 15:49 - 2016-08-10 15:49 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-08-10 15:49 - 2016-08-10 15:49 - 00389000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2016-08-10 15:49 - 2016-08-10 15:49 - 00297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2016-08-10 15:49 - 2016-08-10 15:49 - 00062816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2016-08-10 15:49 - 2016-07-15 20:29 - 05739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2016-08-10 15:49 - 2016-07-15 20:29 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2016-08-10 15:49 - 2016-07-15 20:14 - 06354944 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2016-08-10 15:49 - 2016-07-15 19:45 - 02629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2016-08-10 15:49 - 2016-07-15 19:29 - 05489664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2016-08-10 15:48 - 2016-08-10 15:48 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\WINDOWS\system32\msmq
2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\Program Files\MSBuild
2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-08-10 15:46 - 2016-08-10 15:46 - 00000000 ____D C:\inetpub
2016-08-10 15:46 - 2016-05-25 15:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-08-10 15:46 - 2016-05-25 15:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-08-10 15:46 - 2016-05-25 15:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2016-08-10 15:46 - 2016-05-25 12:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2016-08-10 15:46 - 2016-05-25 12:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-08-10 15:46 - 2016-05-25 12:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2016-08-10 15:43 - 2016-08-10 15:43 - 00000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER
2016-08-10 15:15 - 2016-08-10 15:15 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-08-10 15:13 - 2016-08-10 20:33 - 00000000 ____D C:\Users\ascard\AppData\Local\ConnectedDevicesPlatform
2016-08-10 15:13 - 2016-08-10 15:13 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2016-08-10 15:13 - 2016-08-10 15:13 - 00000020 ___SH C:\Users\ascard\ntuser.ini
2016-08-10 15:10 - 2016-08-10 15:10 - 00011433 _____ C:\WINDOWS\diagwrn.xml
2016-08-10 15:10 - 2016-08-10 15:10 - 00011433 _____ C:\WINDOWS\diagerr.xml
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Vorlagen
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Startmenü
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2016-08-10 15:10 - 2016-08-10 15:10 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2016-08-10 15:08 - 2016-09-06 22:52 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-08-10 15:08 - 2016-08-10 15:08 - 00003842 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-767237098-4183446396-2625044690-1002UA
2016-08-10 15:08 - 2016-08-10 15:08 - 00003650 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-08-10 15:08 - 2016-08-10 15:08 - 00003570 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-767237098-4183446396-2625044690-1002Core
2016-08-10 15:08 - 2016-08-10 15:08 - 00003426 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-08-10 15:08 - 2016-08-10 15:08 - 00003042 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2016-08-10 15:08 - 2016-08-10 15:08 - 00002680 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon
2016-08-10 15:08 - 2016-08-10 15:08 - 00002324 _____ C:\WINDOWS\System32\Tasks\{65B280F0-6365-4E24-94F0-A4D23E9E16C8}
2016-08-10 15:08 - 2016-08-10 15:08 - 00002234 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2016-08-10 15:08 - 2016-08-10 15:08 - 00002164 _____ C:\WINDOWS\System32\Tasks\SidebarExecute
2016-08-10 15:08 - 2016-08-10 15:08 - 00002142 _____ C:\WINDOWS\System32\Tasks\{EBA32A8E-79E8-4E20-89BD-5FA973AF7B4D}
2016-08-10 15:08 - 2016-08-10 15:08 - 00002142 _____ C:\WINDOWS\System32\Tasks\{5198410F-E2A3-41F6-8852-6740B0156E6B}
2016-08-10 15:08 - 2016-08-10 15:08 - 00002142 _____ C:\WINDOWS\System32\Tasks\{4B620B54-2C8F-450F-BEE5-B8EC1E3A3A0B}
2016-08-10 15:08 - 2016-08-10 15:08 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2016-08-10 15:08 - 2016-08-10 15:08 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2016-08-10 15:08 - 2016-08-10 15:08 - 00000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-08-10 15:08 - 2016-08-10 15:08 - 00000000 ____D C:\WINDOWS\System32\Tasks\Aufgaben der Ereignisanzeige
2016-08-10 15:08 - 2012-04-10 14:20 - 00003200 _____ C:\WINDOWS\System32\Tasks\DeviceDetector
2016-08-10 15:08 - 2012-04-10 14:06 - 00003272 _____ C:\WINDOWS\System32\Tasks\PMMUpdate
2016-08-10 15:08 - 2012-04-10 13:48 - 00003986 _____ C:\WINDOWS\System32\Tasks\UALU notificatin
2016-08-10 15:05 - 2016-08-10 15:05 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-08-10 15:05 - 2016-08-10 15:05 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
2016-08-10 15:05 - 2016-08-10 15:05 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2016-08-10 15:05 - 2016-08-10 15:05 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-08-10 15:05 - 2016-08-10 15:05 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
2016-08-10 15:05 - 2016-08-10 15:05 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2016-08-10 15:05 - 2016-08-10 15:05 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-08-10 15:01 - 2016-08-10 15:01 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2016-08-10 15:00 - 2016-08-10 15:06 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2016-08-10 14:59 - 2016-09-06 22:59 - 02731550 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-08-10 14:59 - 2016-09-05 08:55 - 00000000 ____D C:\Users\ascard
2016-08-10 14:59 - 2016-09-05 08:54 - 00000000 ____D C:\Users\DefaultAppPool
2016-08-10 14:59 - 2016-08-10 14:59 - 01604148 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Videos
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Vorlagen
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Startmenü
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Netzwerkumgebung
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Lokale Einstellungen
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Eigene Dateien
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Druckumgebung
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Documents\Eigene Videos
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Documents\Eigene Musik
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Documents\Eigene Bilder
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\AppData\Local\Verlauf
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\AppData\Local\Anwendungsdaten
2016-08-10 14:59 - 2016-08-10 14:59 - 00000000 _SHDL C:\Users\ascard\Anwendungsdaten
2016-08-10 14:58 - 2016-08-10 14:58 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2016-08-10 14:58 - 2016-08-10 14:58 - 00000000 ____D C:\Program Files\Common Files\Atheros
2016-08-10 14:57 - 2016-08-10 15:01 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-08-10 14:57 - 2016-08-10 15:01 - 00000000 ____D C:\ProgramData\NVIDIA
2016-08-10 14:57 - 2016-08-10 15:01 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-08-10 14:57 - 2016-08-10 15:01 - 00000000 ____D C:\Program Files\Intel
2016-08-10 14:57 - 2016-08-10 15:01 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-08-10 14:57 - 2016-08-10 14:57 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2016-08-10 14:57 - 2016-08-10 14:57 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2016-08-10 14:57 - 2016-08-10 14:57 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2016-08-10 14:57 - 2016-08-10 14:57 - 00000000 ____D C:\WINDOWS\system32\DAX2
2016-08-10 14:57 - 2016-08-10 14:57 - 00000000 ____D C:\Program Files\Realtek
2016-08-10 14:57 - 2016-08-10 14:57 - 00000000 ____D C:\Program Files\Apoint2K
2016-08-10 14:57 - 2016-05-03 23:30 - 00081416 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2016-08-10 14:57 - 2016-05-03 23:30 - 00077832 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2016-08-10 14:57 - 2015-07-13 19:37 - 06873744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2016-08-10 14:57 - 2015-07-13 19:37 - 03493008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2016-08-10 14:57 - 2015-07-13 19:37 - 02558792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2016-08-10 14:57 - 2015-07-13 19:37 - 01059984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2016-08-10 14:57 - 2015-07-13 19:37 - 00937616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2016-08-10 14:57 - 2015-07-13 19:37 - 00385168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2016-08-10 14:57 - 2015-07-13 19:37 - 00075080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2016-08-10 14:57 - 2015-07-13 19:37 - 00062792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2016-08-10 14:57 - 2015-07-13 18:28 - 05096627 _____ C:\WINDOWS\system32\nvcoproc.bin
2016-08-10 14:56 - 2016-09-06 22:00 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-08-10 14:56 - 2016-08-10 14:56 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2016-08-10 14:56 - 2016-08-10 14:56 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2016-08-10 14:56 - 2016-07-16 13:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2016-08-10 14:55 - 2016-09-03 13:16 - 00796576 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-08-10 13:56 - 2016-08-10 13:59 - 00000036 _____ C:\WINDOWS\progress.ini
2016-08-10 13:19 - 2016-09-06 09:21 - 00000000 ____D C:\Windows10Upgrade
2016-08-10 13:19 - 2016-08-10 15:13 - 00000000 ___HD C:\$GetCurrent
2016-08-10 13:19 - 2016-08-10 13:19 - 05790552 _____ (Microsoft Corporation) C:\Users\ascard\Downloads\Windows10Upgrade28084.exe
2016-08-10 13:19 - 2016-08-10 13:19 - 00000755 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 10-Upgrade-Assistent.lnk
2016-08-10 08:40 - 2016-08-10 15:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2016-08-10 08:40 - 2016-08-10 08:40 - 00000000 ____D C:\Program Files\Classic Shell
2016-08-09 11:08 - 2016-08-09 11:08 - 40853954 _____ C:\Users\ascard\Desktop\8_eTIwMTYtMDUtMTUtMDQ [Konvertiert] Kopie.psd
2016-08-08 12:17 - 2016-08-08 12:17 - 00489660 _____ C:\Users\ascard\Downloads\FRITZ.Box Fon WLAN 7270 v3 (UI) 74.06.06_08.08.16_1217.export
2016-08-08 12:17 - 2016-08-08 12:17 - 00489660 _____ C:\Users\ascard\Downloads\FRITZ.Box Fon WLAN 7270 v3 (UI) 74.06.06_08.08.16_1217(1).export

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-06 22:59 - 2016-07-17 00:51 - 01139826 _____ C:\WINDOWS\system32\perfh007.dat
2016-09-06 22:59 - 2016-07-17 00:51 - 00279364 _____ C:\WINDOWS\system32\perfc007.dat
2016-09-06 22:52 - 2016-07-16 08:04 - 00262144 _____ C:\WINDOWS\system32\config\BBI
2016-09-06 22:52 - 2016-07-11 15:45 - 00000000 __SHD C:\Users\ascard\IntelGraphicsProfiles
2016-09-06 22:51 - 2015-04-25 08:57 - 00000000 ____D C:\AdwCleaner
2016-09-06 22:06 - 2016-07-12 14:25 - 00000000 ____D C:\Users\ascard\AppData\Local\ClassicShell
2016-09-06 12:41 - 2016-06-24 14:05 - 1227508736 _____ C:\Users\ascard\AppData\Local\SageThumbs.db3
2016-09-06 09:21 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\INF
2016-09-06 09:21 - 2016-07-11 16:03 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-09-06 09:21 - 2016-06-21 12:21 - 00000000 ____D C:\Program Files (x86)\MP3Gain
2016-09-06 09:21 - 2016-05-13 07:56 - 00000000 ____D C:\Users\ascard\AppData\Roaming\WhatsApp
2016-09-06 09:21 - 2016-05-13 07:55 - 00000000 ____D C:\Users\ascard\AppData\Local\WhatsApp
2016-09-06 09:21 - 2016-05-13 07:55 - 00000000 ____D C:\Users\ascard\AppData\Local\SquirrelTemp
2016-09-06 09:21 - 2015-12-24 12:25 - 00000000 ____D C:\ProgramData\newrestore
2016-09-06 09:21 - 2015-12-24 12:25 - 00000000 ____D C:\ProgramData\launcher
2016-09-06 09:21 - 2015-12-24 12:23 - 00000000 ____D C:\ProgramData\explauncher
2016-09-06 09:21 - 2015-10-18 23:42 - 00000000 ___RD C:\Users\ascard\Desktop\Software
2016-09-06 09:21 - 2015-10-06 23:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2016-09-06 09:21 - 2015-03-18 23:55 - 00000000 ____D C:\Users\ascard\AppData\Roaming\VideoEditor
2016-09-06 09:21 - 2015-02-18 22:25 - 00000000 ____D C:\Users\ascard\Desktop\SMP.4.48
2016-09-06 09:21 - 2015-02-03 00:08 - 00000000 ____D C:\Users\ascard\Documents\SelfMV
2016-09-06 09:21 - 2015-02-01 11:59 - 00000000 ____D C:\Users\ascard\AppData\Roaming\TeamViewer
2016-09-06 09:21 - 2014-12-14 16:56 - 00000000 ____D C:\Program Files\CCleaner
2016-09-06 09:21 - 2014-12-14 16:41 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Screensaver
2016-09-06 09:21 - 2014-12-14 15:22 - 00000000 ____D C:\ProgramData\install_clap
2016-09-06 09:21 - 2014-12-14 15:16 - 00000000 ____D C:\ProgramData\Atheros
2016-09-06 09:21 - 2012-04-10 14:08 - 00000000 ____D C:\ProgramData\oem
2016-09-06 09:21 - 2012-04-10 13:28 - 00000000 ___HD C:\OEM
2016-09-06 08:21 - 2012-04-10 14:09 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-09-05 10:51 - 2014-12-14 17:09 - 00000000 ____D C:\Program Files\VideoLAN
2016-09-05 09:00 - 2015-01-06 12:05 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Skype
2016-09-05 08:56 - 2014-12-14 18:43 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-09-05 08:56 - 2014-12-14 18:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-09-05 08:56 - 2014-12-14 18:43 - 00000000 ____D C:\Program Files\WinRAR
2016-09-05 08:55 - 2015-01-06 12:06 - 00000000 ____D C:\Users\ascard\AppData\Local\Skype
2016-09-05 08:55 - 2012-04-10 13:43 - 00000000 ____D C:\ProgramData\Skype
2016-09-05 08:52 - 2014-12-14 16:43 - 00000000 ____D C:\ProgramData\Package Cache
2016-09-05 08:52 - 2014-12-14 16:43 - 00000000 ____D C:\ProgramData\Avira
2016-09-05 08:51 - 2014-12-17 14:21 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Avira
2016-09-05 08:47 - 2016-05-25 11:21 - 00000000 ____D C:\ProgramData\AVAST Software
2016-09-04 11:36 - 2014-12-14 23:22 - 00000000 ____D C:\Users\ascard\AppData\Local\CrashDumps
2016-09-04 07:46 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-09-03 15:42 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\rescache
2016-09-03 07:39 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-09-02 14:29 - 2016-07-16 13:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-09-02 11:40 - 2015-04-01 17:56 - 00000000 ___RD C:\Users\ascard\Dropbox
2016-09-02 11:40 - 2014-12-17 14:20 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Dropbox
2016-09-02 08:59 - 2014-12-14 15:05 - 00000000 ____D C:\Users\UpdatusUser
2016-09-01 13:14 - 2016-04-27 07:56 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\dsc
2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\et-EE
2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\es-MX
2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\en-GB
2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2016-09-01 13:13 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Provisioning
2016-09-01 13:12 - 2014-12-14 16:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-09-01 11:24 - 2015-06-07 22:50 - 00000000 ____D C:\Users\ascard\AppData\Local\Amazon Cloud Drive
2016-08-23 22:26 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-08-22 12:51 - 2015-10-21 00:00 - 00000000 ____D C:\Users\ascard\AppData\Local\NVIDIA
2016-08-20 12:12 - 2014-12-18 18:59 - 00000000 ____D C:\Users\ascard\Documents\Camtasia Studio
2016-08-19 12:01 - 2015-02-21 15:07 - 00000000 ____D C:\Users\ascard\Documents\My Videos
2016-08-18 12:47 - 2015-08-31 11:20 - 00000000 ____D C:\Program Files\Avidemux 2.6 - 64 bits
2016-08-18 12:33 - 2015-11-02 12:13 - 00000867 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-08-18 09:32 - 2012-04-10 14:18 - 00000000 ____D C:\ProgramData\Temp
2016-08-16 13:31 - 2014-12-14 15:03 - 00000000 ____D C:\Dolby PCEE4
2016-08-16 13:23 - 2016-07-11 16:04 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-08-16 13:20 - 2016-02-18 02:02 - 00000779 _____ C:\Users\ascard\Desktop\Security Monitor Pro - Verknüpfung.lnk
2016-08-13 13:10 - 2016-07-11 15:46 - 00000000 ____D C:\Users\ascard\AppData\Local\Packages
2016-08-13 11:25 - 2012-04-10 14:20 - 00000000 ____D C:\WINDOWS\Downloaded Installations
2016-08-13 10:07 - 2016-07-16 08:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2016-08-12 13:04 - 2016-08-04 21:48 - 00001377 _____ C:\Users\Public\Desktop\Intel SSD Toolbox.lnk
2016-08-11 07:36 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\appcompat
2016-08-10 17:13 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\USOPrivate
2016-08-10 15:55 - 2016-07-16 13:49 - 00000000 ____D C:\WINDOWS\Setup
2016-08-10 15:55 - 2016-07-16 13:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-08-10 15:49 - 2016-07-17 00:52 - 00000000 ____D C:\WINDOWS\OCR
2016-08-10 15:46 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2016-08-10 15:46 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2016-08-10 15:46 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\MUI
2016-08-10 15:46 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2016-08-10 15:46 - 2016-07-16 13:44 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2016-08-10 15:46 - 2016-07-16 13:44 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2016-08-10 15:46 - 2016-07-16 13:44 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2016-08-10 15:46 - 2016-07-16 13:44 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2016-08-10 15:46 - 2016-07-16 13:44 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2016-08-10 15:46 - 2016-07-16 13:44 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2016-08-10 15:46 - 2016-07-16 13:44 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2016-08-10 15:46 - 2016-07-16 13:44 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2016-08-10 15:46 - 2016-07-16 13:44 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2016-08-10 15:46 - 2016-07-16 13:44 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2016-08-10 15:46 - 2016-07-16 13:44 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2016-08-10 15:46 - 2016-07-16 13:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2016-08-10 15:46 - 2016-07-16 13:44 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2016-08-10 15:46 - 2016-07-16 13:44 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2016-08-10 15:46 - 2016-07-16 13:44 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2016-08-10 15:46 - 2016-07-16 13:44 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll
2016-08-10 15:46 - 2016-07-16 13:44 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2016-08-10 15:46 - 2016-07-16 13:43 - 01414144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2016-08-10 15:46 - 2016-07-16 13:43 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2016-08-10 15:46 - 2016-07-16 13:43 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2016-08-10 15:46 - 2016-07-16 13:43 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2016-08-10 15:46 - 2016-07-16 13:43 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2016-08-10 15:46 - 2016-07-16 13:43 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2016-08-10 15:46 - 2016-07-16 13:43 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2016-08-10 15:46 - 2016-07-16 13:43 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2016-08-10 15:46 - 2016-07-16 13:43 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2016-08-10 15:46 - 2016-07-16 13:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2016-08-10 15:46 - 2016-07-16 13:43 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2016-08-10 15:46 - 2016-07-16 13:43 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2016-08-10 15:46 - 2016-07-16 13:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll
2016-08-10 15:46 - 2016-07-16 13:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll
2016-08-10 15:15 - 2016-07-11 15:49 - 00002429 _____ C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-08-10 15:15 - 2016-07-11 15:49 - 00000000 ___RD C:\Users\ascard\OneDrive
2016-08-10 15:10 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows NT
2016-08-10 15:09 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Registration
2016-08-10 15:08 - 2016-07-16 13:47 - 00000000 __RSD C:\WINDOWS\Media
2016-08-10 15:08 - 2016-07-16 13:47 - 00000000 __RHD C:\Users\Public\Libraries
2016-08-10 15:08 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-08-10 15:08 - 2016-07-11 15:41 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-08-10 15:08 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2016-08-10 15:06 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2016-08-10 15:06 - 2015-10-15 18:23 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith
2016-08-10 15:05 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-08-10 15:05 - 2015-10-30 08:28 - 00000000 ____D C:\Users\Default.migrated
2016-08-10 15:01 - 2016-08-02 20:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IsoBuster
2016-08-10 15:01 - 2016-07-19 17:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2016-08-10 15:01 - 2016-07-17 00:50 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 __SHD C:\Program Files\Windows Sidebar
2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\spool
2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\IME
2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\schemas
2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Cursors
2016-08-10 15:01 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-08-10 15:01 - 2016-07-11 16:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2016-08-10 15:01 - 2016-07-11 13:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Core Temp
2016-08-10 15:01 - 2016-07-11 11:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMPUTER BILD
2016-08-10 15:01 - 2016-06-28 11:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2016-08-10 15:01 - 2016-06-24 14:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SageThumbs
2016-08-10 15:01 - 2016-06-21 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP3Gain
2016-08-10 15:01 - 2016-06-03 09:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ulead COOL 3D Production Studio
2016-08-10 15:01 - 2016-06-01 15:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2016-08-10 15:01 - 2016-04-27 07:33 - 00000000 ____D C:\WINDOWS\ShellNew
2016-08-10 15:01 - 2016-04-15 19:17 - 00000000 ____D C:\WINDOWS\SysWOW64\NV
2016-08-10 15:01 - 2016-04-15 19:17 - 00000000 ____D C:\WINDOWS\system32\NV
2016-08-10 15:01 - 2016-04-15 17:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vulkan
2016-08-10 15:01 - 2016-03-14 13:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picture Control Utility 2
2016-08-10 15:01 - 2016-03-14 13:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nikon Message Center 2
2016-08-10 15:01 - 2016-03-14 13:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Capture NX-D
2016-08-10 15:01 - 2016-03-14 13:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ViewNX-i
2016-08-10 15:01 - 2016-03-14 13:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Link to Nikon
2016-08-10 15:01 - 2016-02-23 20:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2016-08-10 15:01 - 2015-10-21 10:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-08-10 15:01 - 2015-10-15 18:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2016-08-10 15:01 - 2015-10-12 20:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPUBSOFT
2016-08-10 15:01 - 2015-10-10 22:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management
2016-08-10 15:01 - 2015-10-09 00:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comic Life 3
2016-08-10 15:01 - 2015-10-06 23:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\proDAD
2016-08-10 15:01 - 2015-10-06 23:19 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Corel VideoStudio Pro X8
2016-08-10 15:01 - 2015-09-27 23:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HxD Hex Editor
2016-08-10 15:01 - 2015-04-20 00:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reallusion
2016-08-10 15:01 - 2015-03-30 11:34 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Crystal Eye Webcam
2016-08-10 15:01 - 2015-03-26 14:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvsoft
2016-08-10 15:01 - 2015-03-18 23:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlashIntegro
2016-08-10 15:01 - 2015-02-23 12:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\onOne Software
2016-08-10 15:01 - 2015-02-09 00:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Topaz Labs
2016-08-10 15:01 - 2015-01-28 12:36 - 00000000 ____D C:\WINDOWS\SysWOW64\spool
2016-08-10 15:01 - 2015-01-15 19:23 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe
2016-08-10 15:01 - 2015-01-11 15:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-08-10 15:01 - 2014-12-30 19:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2016-08-10 15:01 - 2014-12-23 00:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
2016-08-10 15:01 - 2014-12-22 21:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2016-08-10 15:01 - 2014-12-14 20:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-08-10 15:01 - 2014-12-14 19:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2016-08-10 15:01 - 2014-12-14 16:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-08-10 15:01 - 2014-12-14 15:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AcerSystem
2016-08-10 15:01 - 2012-04-10 14:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink MediaEspresso
2016-08-10 15:01 - 2012-04-10 14:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Backup Manager
2016-08-10 15:01 - 2012-04-10 14:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EgisTec
2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ____D C:\WINDOWS\tr
2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ____D C:\WINDOWS\th
2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ____D C:\WINDOWS\sv
2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ____D C:\WINDOWS\sl
2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ____D C:\WINDOWS\sk
2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ____D C:\WINDOWS\ru
2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ____D C:\WINDOWS\ro
2016-08-10 15:01 - 2012-04-10 14:00 - 00000000 ____D C:\WINDOWS\ca
2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\pl
2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\no
2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\nl
2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\it
2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\hu
2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\hr
2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\he
2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\fr
2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\fi
2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\es
2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\en
2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\el
2016-08-10 15:01 - 2012-04-10 13:59 - 00000000 ____D C:\WINDOWS\de
2016-08-10 15:01 - 2012-04-10 13:58 - 00000000 ____D C:\WINDOWS\da
2016-08-10 15:01 - 2012-04-10 13:58 - 00000000 ____D C:\WINDOWS\cs
2016-08-10 15:01 - 2012-04-10 13:58 - 00000000 ____D C:\WINDOWS\bg
2016-08-10 15:01 - 2012-04-10 13:58 - 00000000 ____D C:\WINDOWS\ar
2016-08-10 15:01 - 2012-04-10 13:47 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2016-08-10 15:01 - 2012-04-10 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2016-08-10 15:01 - 2012-04-10 13:12 - 00000000 ____D C:\WINDOWS\SysWOW64\Atheros_L1e
2016-08-10 15:01 - 2012-04-10 13:08 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-08-10 15:01 - 2010-11-21 09:16 - 00000000 ___RD C:\Users\Public\Recorded TV
2016-08-10 15:01 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Microsoft Games
2016-08-10 15:00 - 2016-07-11 13:24 - 00000000 ___RD C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2016-08-10 15:00 - 2016-06-01 12:46 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Disk Space Fan 4 Free
2016-08-10 15:00 - 2016-05-13 07:56 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2016-08-10 15:00 - 2015-06-07 22:50 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Cloud Drive
2016-08-10 15:00 - 2015-02-19 21:43 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinISO
2016-08-10 15:00 - 2014-12-23 00:14 - 00000000 ____D C:\Users\ascard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2016-08-10 14:59 - 2016-07-16 08:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-08-10 14:58 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\PrintDialog
2016-08-10 14:58 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\MiracastView
2016-08-10 14:57 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Help
2016-08-10 14:24 - 2016-07-28 23:19 - 00001138 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-08-10 14:23 - 2015-06-07 18:01 - 00001228 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-767237098-4183446396-2625044690-1002UA.job
2016-08-10 13:17 - 2016-07-28 23:19 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-08-09 20:23 - 2015-06-07 18:01 - 00001176 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-767237098-4183446396-2625044690-1002Core.job
2016-08-08 23:25 - 2014-12-14 17:11 - 00002268 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-08-08 12:47 - 2016-06-01 12:46 - 00000000 ____D C:\Users\ascard\AppData\Roaming\DiskSpaceFan
2016-08-08 09:26 - 2016-05-07 13:29 - 00000022 _____ C:\Users\ascard\Desktop\sys.ini

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-03-06 13:37 - 2016-04-04 22:35 - 0000132 _____ () C:\Users\ascard\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2015-01-30 15:47 - 2015-07-30 21:34 - 0000132 _____ () C:\Users\ascard\AppData\Roaming\Adobe PNG Format CS5 Prefs
2016-09-06 09:10 - 2016-09-06 09:34 - 0000115 _____ () C:\Users\ascard\AppData\Roaming\LogFile.txt
2016-03-14 13:50 - 2016-03-14 13:50 - 0000268 ___RH () C:\Users\ascard\AppData\Roaming\Spacious
2016-03-14 13:50 - 2016-03-14 13:50 - 0000268 ___RH () C:\Users\ascard\AppData\Roaming\Speech Enhancer
2016-08-11 21:04 - 2016-08-28 10:33 - 0001456 _____ () C:\Users\ascard\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2015-02-18 22:35 - 2016-01-07 14:56 - 0007168 _____ () C:\Users\ascard\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-10-11 00:52 - 2015-10-11 00:52 - 0000292 _____ () C:\Users\ascard\AppData\Local\HamsterBookConverter.cfg
2015-05-13 09:04 - 2016-07-13 13:15 - 0007605 _____ () C:\Users\ascard\AppData\Local\resmon.resmoncfg
2016-06-24 14:05 - 2016-09-06 12:41 - 1227508736 _____ () C:\Users\ascard\AppData\Local\SageThumbs.db3
2016-09-06 22:52 - 2016-09-06 22:52 - 0000000 ____H () C:\ProgramData\cm-lock
2016-08-10 14:58 - 2016-08-10 14:58 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-03-14 13:50 - 2016-03-14 13:50 - 0000020 ____H () C:\ProgramData\PKP_DLet.DAT
2016-03-14 13:50 - 2016-03-14 13:50 - 0000020 ____H () C:\ProgramData\PKP_DLev.DAT
2016-03-14 13:50 - 2016-03-14 13:50 - 0000268 ___RH () C:\ProgramData\Standard
2016-03-14 13:50 - 2016-03-14 13:50 - 0000268 ___RH () C:\ProgramData\StartupItems
2015-11-23 01:30 - 2015-11-23 01:30 - 0000008 __RSH () C:\ProgramData\sysqcl1131236454.dat

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\sysqcl1131236454.dat


Einige Dateien in TEMP:
====================
C:\Users\ascard\AppData\Local\Temp\libeay32.dll
C:\Users\ascard\AppData\Local\Temp\msvcr120.dll
C:\Users\ascard\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-09-01 11:07

==================== Ende von FRST.txt ============================

cosinus · 06.09.2016, 22:18

Zitat:

AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

....soviel zum Thema: Avast ist deinstalliert

ascard · 06.09.2016, 22:20

avast habe ich auf deaktieviert gesetzt und hat sich anscheinend beim neustart wie eingeschaltet

cosinus · 06.09.2016, 22:22

Du hast meinen Beitrag aber schon gelesen oder? Oder einfach nur ignoriert?

ascard · 06.09.2016, 22:23

deswegen habe ich ihn ja auf deaktivieren gesetzt

cosinus · 06.09.2016, 22:24

Was der Unterschied zwischen deinstallieren und deaktivieren ist weißt du aber?
Was Avast für einen Müll abzieht ist dir auch egal?

06.09.2016, 22:01	#22
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Fraud.Foxit.daws-wird ständig von spybot gefunden Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken __________________ Logfiles bitte immer in CODE-Tags posten

06.09.2016, 22:22	#28
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Fraud.Foxit.daws-wird ständig von spybot gefunden Du hast meinen Beitrag aber schon gelesen oder? Oder einfach nur ignoriert? __________________ Logfiles bitte immer in CODE-Tags posten

06.09.2016, 22:24	#30
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Fraud.Foxit.daws-wird ständig von spybot gefunden Was der Unterschied zwischen deinstallieren und deaktivieren ist weißt du aber? Was Avast für einen Müll abzieht ist dir auch egal? __________________ Logfiles bitte immer in CODE-Tags posten

Fraud.Foxit.daws-wird ständig von spybot gefunden

Mülltonne: Fraud.Foxit.daws-wird ständig von spybot gefunden