Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 28.09.2016, 19:05   #1
axyo
 
Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert - Beitrag

Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert



Hallo,

Seit gestern bekomme ich in extrem unregelmäßigen Abständen ein blaues Pop Up Fenster, welches sich nach ca. einer Sekunde wieder schließt. Ich kann in der Zeit immer nur einen großen "LOADING..." Schriftzug erkennen.

Ich habe schon mit Malwarebytes, SuperAntiMalware, CCleaner und Avira selbst gescannt jedoch wurde nichts gefunden.

Wenn ich versuche, den Windows Defender zu öffnen bekomme ich diese Meldungen: hxxp://imgur.com/a/umXEp

Außerdem ist hier der Echtzeitschutz und alles andere aus, obwohl ich es eingeschalten habe. Das ist definitiv erst seit gestern so.


Hier die FRST Logs:

FRST.txt:
Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 28-09-2016
durchgeführt von Agando (Administrator) auf AGANDO-PC (28-09-2016 17:59:59)
Gestartet von C:\Users\Agando\Desktop
Geladene Profile: Agando (Verfügbare Profile: Agando & Gast)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Opera)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
() C:\Program Files (x86)\AdBlocker\Service.WinServiceHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
() C:\Program Files (x86)\WhatPulse2\whatpulse.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Nenad Hrg (SoftwareOK.com)) C:\Users\Agando\Desktop\Dateien\programme\AutoHideMouseCursor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
() C:\Program Files (x86)\Origin\QtWebEngineProcess.exe
() C:\Program Files (x86)\Origin\QtWebEngineProcess.exe
() C:\Program Files (x86)\Origin\QtWebEngineProcess.exe
() C:\Program Files (x86)\WhatPulse2\whatpulse-watchdog.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Trend Micro Inc.) C:\Users\Agando\Desktop\Dateien\HijackThis.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe


==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-06-15] (NVIDIA Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [630912 2012-05-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [60136 2016-08-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [18536 2016-09-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [830064 2016-09-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [AMD_Display] => [X]
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2858272 2016-09-20] (Valve Corporation)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [WhatPulse] => C:\Program Files (x86)\WhatPulse2\whatpulse.exe [3942400 2016-02-25] ()
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7943072 2016-08-30] (SUPERAntiSpyware)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3503088 2016-09-20] (Electronic Arts)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [AutoHideMouseCursor] => C:\Users\Agando\Desktop\Dateien\programme\AutoHideMouseCursor.exe [34816 2013-08-27] (Nenad Hrg (SoftwareOK.com))
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8912088 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\MountPoints2: {4eeb9d88-7c98-11e6-8ea9-d8cb8a37411a} - F:\startme.exe
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\MountPoints2: {64225049-bb47-11e4-8f6d-806e6f6e6963} - D:\DVDSetup.exe
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-21] (Microsoft Corporation)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Winsock: Catalog9-x64 01 C:\Windows\system32\zdengine64.dll Keine Datei 
Winsock: Catalog9-x64 02 C:\Windows\system32\zdengine64.dll Keine Datei 
Winsock: Catalog9-x64 03 C:\Windows\system32\zdengine64.dll Keine Datei 
Winsock: Catalog9-x64 04 C:\Windows\system32\zdengine64.dll Keine Datei 
Winsock: Catalog9-x64 15 C:\Windows\system32\zdengine64.dll Keine Datei 
Hosts: 0.0.0.1	mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{268427DE-E434-45BD-88EC-B67F4F63F895}: [DhcpNameServer] 192.168.9.1 192.168.9.1
Tcpip\..\Interfaces\{715DE7BB-61E4-4C78-973D-580A8E88C542}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{81DD97E4-ED28-4EAD-99E3-B6C5F20A5C2F}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{A95EB6A5-4DD0-42E9-AFFF-534397AD1C34}: [NameServer] 138.201.137.84,8.8.8.8
Tcpip\..\Interfaces\{A95EB6A5-4DD0-42E9-AFFF-534397AD1C34}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{AD54DC0C-B34B-4BFF-AAB8-2990E51F17E2}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Software\Microsoft\Internet Explorer\Main,Start Page = 
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3320435249-1176308213-2412890335-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-27] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-27] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-27] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: AviraBrowserSafety.BrowserSafety -> {c3c77255-42c0-499f-b664-6e981a0b1647} -> C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-27] (Oracle Corporation)
Handler-x32: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll [2016-09-13] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2015-02-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei]
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-27] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-27] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] ( Microsoft Corporation)
FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-02-18] (Unity Technologies ApS)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll [2016-09-13] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-02-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-27] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [Keine Datei]
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-08-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-08-25] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-02-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: @nsroblox.roblox.com/launcher -> C:\Users\Agando\AppData\Local\Roblox\Versions\version-e6d872d544b64cd9\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: @nsroblox.roblox.com/launcher64 -> C:\Users\Agando\AppData\Local\Roblox\Versions\version-e6d872d544b64cd9\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Agando\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-01-22] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-08-29] ()

Chrome: 
=======
CHR HomePage: Profile 1 -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyLkSna9LUifg6M5suwWTpzqcTYN8dCdaMZbXCSrGOY_xXasBjQ4DIVneKvjWDT4z9o7Y_46ZwULO9UTRX3xZipgVWGN2hkaHpXc9xmBmHMbsONjSwkj0navg66OawPwlyoYcX_4Y90kXzjdp_0vi43llhOOomXWqnKcBuTI4,
CHR StartupUrls: Profile 1 -> "hxxps://www.google.de/","hxxps://www.youtube.com/"
CHR Profile: C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1 [2016-09-28]
CHR Extension: (ProxFlow) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-08-13]
CHR Extension: (HD for YouTube™) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\akjbfncbadcmnkopckegnmjgihagponf [2015-11-21]
CHR Extension: (Google Drive) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (Adblock Plus) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-07-08]
CHR Extension: (Google Docs Offline) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (GoodWordGuide.com: Instant Dictionary) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mfembjnmeainjncdflaoclcjadfhpoim [2016-07-08]
CHR Extension: (Google Mail Checker) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2015-10-19]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR Extension: (Hover Zoom+) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pccckmaobkjjboncdfnnofkonhgpceea [2016-08-13]


Opera: 
=======
OPR StartupUrls: "hxxp://www.google.com/","hxxp://www.youtube.com/"
OPR Extension: (ProxFlow) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-09-23]
OPR Extension: (YouTube™ Flash-HTML5) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\abpeogmjbjonedcakbihofgpoelmfbgj [2016-08-17]
OPR Extension: (HD quality for YouTube™ (1080p, 1440p, 2160p)) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\emcclmhiklabihbljnpjnacgdaaohpjc [2016-07-26]
OPR Extension: (Twitch Now) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\hiahmjdojdodmjjhhddegdnhcpjmokmo [2016-07-10]
OPR Extension: (Download Chrome Extension) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\kipjbhgniklcnglfaldilecjomjaddfi [2016-07-10]
OPR Extension: (Adblock Plus) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2016-08-24]
OPR Extension: (Hover Zoom+) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\pccckmaobkjjboncdfnnofkonhgpceea [2016-09-27]


==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 AdBlockerService; C:\Program Files (x86)\AdBlocker\Service.WinServiceHost.exe [7168 2016-04-09] () [Datei ist nicht signiert]
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-05-04] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [989696 2016-09-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [470600 2016-09-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [470600 2016-09-09] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1454720 2016-09-09] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [324304 2016-08-19] (Avira Operations GmbH & Co. KG)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368 2016-06-15] (NVIDIA Corporation)
S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [8704 2015-09-02] (Hi-Rez Studios) [Datei ist nicht signiert]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29728 2016-08-15] (HP Inc.)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-02-18] (Logitech Inc.)
S4 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [289256 2015-06-26] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-06-15] (NVIDIA Corporation)
S3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-06-15] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-06-15] (NVIDIA Corporation)
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2141192 2016-09-20] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2206224 2016-09-20] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2016-08-30] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2016-09-02] ()
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [344576 2014-01-22] (Qualcomm Atheros) [Datei ist nicht signiert]
R2 SpeedupService; C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [26632 2016-09-05] (Avira Operations GmbH & Co. KG)
S4 VmbService; C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [8704 2013-09-05] (Vodafone) [Datei ist nicht signiert]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [55936 2011-11-13] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [171752 2016-07-28] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [145984 2016-07-28] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2015-12-03] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [79696 2016-05-11] (Avira Operations GmbH & Co. KG)
R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [80080 2013-11-08] (Qualcomm Atheros, Inc.)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-09-28] (Malwarebytes)
R2 npf; C:\Windows\System32\drivers\npf.sys [36600 2015-06-01] (Riverbed Technology, Inc.)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-06-15] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex) [Datei ist nicht signiert]
S3 YMIDUSBW; C:\Windows\System32\drivers\ymidusbx64.sys [51496 2013-04-04] (Yamaha Corporation)
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 UCOREW64; \??\C:\Users\Agando\AppData\Local\Temp\Rar$EXa0.815\AMIBIOS_and_Aptio_AMI_Firmware_Update_Utility\AMIBIOS\AFUWin\64\UCOREW64.SYS [X]
S3 VUSB3HUB; system32\DRIVERS\ViaHub3.sys [X]
S3 X6va060; \??\C:\Windows\SysWOW64\Drivers\X6va060 [X]
S3 X6va062; \??\C:\Windows\SysWOW64\Drivers\X6va062 [X]
S3 xhcdrv; system32\DRIVERS\xhcdrv.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
S3 xspirit; \??\C:\Windows\xspirit.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-28 17:59 - 2016-09-28 18:00 - 00028066 _____ C:\Users\Agando\Desktop\FRST.txt
2016-09-28 17:59 - 2016-09-28 17:59 - 02404352 _____ (Farbar) C:\Users\Agando\Desktop\FRST64.exe
2016-09-28 17:59 - 2016-09-28 17:59 - 00000000 ____D C:\FRST
2016-09-28 16:03 - 2016-09-28 16:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-09-28 16:03 - 2016-09-28 16:03 - 00000000 ____D C:\Program Files\CCleaner
2016-09-25 22:09 - 2016-09-25 22:09 - 00000000 ____D C:\Users\Agando\AppData\Local\GeoLocator
2016-09-25 21:34 - 2016-09-25 21:34 - 00000000 ____D C:\Users\Agando\AppData\Roaming\FlowStone
2016-09-25 21:34 - 2016-09-25 21:34 - 00000000 ____D C:\Program Files (x86)\DSPRobotics
2016-09-25 21:16 - 2016-09-26 16:23 - 00000000 ____D C:\Users\Agando\Downloads\FL Studio Producer Edition 11.0.4+Plugins Bundle R2R [ChingLiu]
2016-09-24 10:11 - 2016-09-24 10:11 - 00000000 _____ C:\TOSTACK
2016-09-24 10:10 - 2016-09-24 10:24 - 00000000 ____D C:\Program Files (x86)\AdBlocker
2016-09-24 10:10 - 2016-09-24 10:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AdBlocker
2016-09-24 10:08 - 2016-09-25 22:09 - 00000000 ____D C:\Users\Agando\ReportSender
2016-09-21 15:12 - 2016-08-12 19:02 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-09-21 15:12 - 2016-06-14 19:16 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2016-09-21 15:11 - 2016-08-29 17:31 - 14183424 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-09-21 15:11 - 2016-08-29 17:31 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-09-21 15:11 - 2016-08-29 17:31 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-09-21 15:11 - 2016-08-29 17:12 - 12880384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-09-21 15:11 - 2016-08-29 17:12 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-09-21 15:11 - 2016-08-29 17:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-09-21 15:11 - 2016-08-29 17:04 - 03229696 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-09-21 15:11 - 2016-08-29 16:55 - 02972672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-09-21 15:11 - 2016-08-16 22:40 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2016-09-21 15:11 - 2016-08-12 19:02 - 12574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-09-21 15:11 - 2016-08-12 19:02 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-09-21 15:11 - 2016-08-12 19:02 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-09-21 15:11 - 2016-08-12 19:02 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-09-21 15:11 - 2016-08-12 18:47 - 12574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-09-21 15:11 - 2016-08-12 18:47 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-09-21 15:11 - 2016-08-12 18:31 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-09-21 15:11 - 2016-08-12 18:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-09-21 15:11 - 2016-08-12 18:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-09-21 15:11 - 2016-08-12 18:26 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 02023424 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 01178112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 00249344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmRes.dll
2016-09-21 15:11 - 2016-08-06 17:01 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-09-21 15:11 - 2016-08-06 17:01 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe
2016-09-21 15:11 - 2016-08-06 16:53 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2016-09-21 15:11 - 2016-08-06 16:53 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmprovhost.exe
2016-09-21 15:11 - 2016-08-06 16:53 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmplpxy.dll
2016-09-21 15:11 - 2016-06-14 19:21 - 00094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-09-21 15:11 - 2016-06-14 19:16 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 01483264 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-09-21 15:11 - 2016-06-14 19:11 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-09-21 15:11 - 2016-06-14 17:21 - 03209216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 01176064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2016-09-21 15:11 - 2016-06-14 17:15 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-09-21 15:11 - 2016-06-14 17:15 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-09-21 15:11 - 2016-06-14 17:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-09-21 15:11 - 2016-06-14 17:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2016-09-21 15:11 - 2016-06-14 17:05 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-09-21 15:11 - 2016-06-14 17:00 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2016-09-21 15:11 - 2016-06-14 17:00 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2016-09-21 14:20 - 2016-09-21 14:20 - 00000000 _____ C:\Users\Agando\AppData\Local\Driver_LOM_8161Present.flag
2016-09-21 14:18 - 2016-09-21 14:19 - 00000000 ____D C:\CIMTEMP
2016-09-21 13:51 - 2016-08-05 17:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-09-21 13:51 - 2016-08-05 17:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-09-20 21:06 - 2016-09-20 21:06 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server
2016-09-20 21:05 - 2016-09-20 21:06 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2016-09-17 14:40 - 2016-09-17 14:40 - 00000000 ____D C:\e49e132389896a47af13baaab7
2016-09-17 09:02 - 2016-09-17 09:07 - 00000000 ____D C:\Users\Agando\Documents\RCT3
2016-09-17 09:02 - 2016-09-17 09:02 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Atari
2016-09-14 22:26 - 2016-09-01 21:26 - 00394440 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-09-14 22:26 - 2016-09-01 20:41 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-09-14 22:26 - 2016-09-01 05:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-09-14 22:26 - 2016-09-01 05:08 - 20312064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-09-14 22:26 - 2016-09-01 04:48 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-09-14 22:26 - 2016-09-01 04:46 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-09-14 22:26 - 2016-09-01 04:46 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-09-14 22:26 - 2016-09-01 04:46 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-09-14 22:26 - 2016-09-01 04:44 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-09-14 22:26 - 2016-09-01 04:34 - 02286592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-09-14 22:26 - 2016-09-01 04:31 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-09-14 22:26 - 2016-09-01 04:31 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-09-14 22:26 - 2016-09-01 04:26 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-09-14 22:26 - 2016-09-01 04:24 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-09-14 22:26 - 2016-09-01 04:24 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-09-14 22:26 - 2016-09-01 04:23 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-09-14 22:26 - 2016-09-01 04:08 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-09-14 22:26 - 2016-09-01 03:59 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-09-14 22:26 - 2016-09-01 03:57 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-09-14 22:26 - 2016-09-01 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-09-14 22:26 - 2016-09-01 03:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-09-14 22:26 - 2016-09-01 03:48 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-09-14 22:26 - 2016-09-01 03:45 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-09-14 22:26 - 2016-09-01 03:34 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-09-14 22:26 - 2016-09-01 03:30 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-09-14 22:26 - 2016-09-01 03:29 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-09-14 22:26 - 2016-09-01 03:29 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-09-14 22:26 - 2016-09-01 03:27 - 13808128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-09-14 22:26 - 2016-09-01 03:24 - 04607488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-09-14 22:26 - 2016-09-01 02:45 - 25770496 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-09-14 22:26 - 2016-09-01 02:43 - 02445824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-09-14 22:26 - 2016-09-01 02:42 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-09-14 22:26 - 2016-09-01 02:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-09-14 22:26 - 2016-09-01 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-09-14 22:26 - 2016-09-01 02:38 - 01316352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-09-14 22:26 - 2016-09-01 02:25 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-09-14 22:26 - 2016-09-01 02:24 - 02894336 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-09-14 22:26 - 2016-09-01 02:24 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-09-14 22:26 - 2016-09-01 02:24 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-09-14 22:26 - 2016-09-01 02:24 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-09-14 22:26 - 2016-09-01 02:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-09-14 22:26 - 2016-09-01 02:16 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-09-14 22:26 - 2016-09-01 02:15 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-09-14 22:26 - 2016-09-01 02:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-09-14 22:26 - 2016-09-01 02:11 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-09-14 22:26 - 2016-09-01 02:11 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-09-14 22:26 - 2016-09-01 02:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-09-14 22:26 - 2016-09-01 02:10 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-09-14 22:26 - 2016-09-01 02:06 - 06047232 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-09-14 22:26 - 2016-09-01 02:03 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-09-14 22:26 - 2016-09-01 01:59 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-09-14 22:26 - 2016-09-01 01:51 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-09-14 22:26 - 2016-09-01 01:50 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-09-14 22:26 - 2016-09-01 01:47 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-09-14 22:26 - 2016-09-01 01:46 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-09-14 22:26 - 2016-09-01 01:44 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-09-14 22:26 - 2016-09-01 01:42 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-09-14 22:26 - 2016-09-01 01:31 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-09-14 22:26 - 2016-09-01 01:29 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-09-14 22:26 - 2016-09-01 01:28 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-09-14 22:26 - 2016-09-01 01:27 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-09-14 22:26 - 2016-09-01 01:26 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-09-14 22:26 - 2016-09-01 01:15 - 15411712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-09-14 22:26 - 2016-09-01 01:10 - 02921472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-09-14 22:26 - 2016-09-01 00:58 - 01550848 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-09-14 22:26 - 2016-09-01 00:47 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-09-14 22:26 - 2016-08-12 18:26 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-09-14 22:26 - 2016-08-12 18:26 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-09-14 22:26 - 2016-08-12 18:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-09-14 22:25 - 2016-09-02 17:40 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-09-14 22:25 - 2016-09-02 17:35 - 05548264 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-09-14 22:25 - 2016-09-02 17:35 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-09-14 22:25 - 2016-09-02 17:35 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-09-14 22:25 - 2016-09-02 17:35 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-09-14 22:25 - 2016-09-02 17:34 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:21 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-09-14 22:25 - 2016-09-02 17:21 - 03944680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-09-14 22:25 - 2016-09-02 17:18 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:02 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-09-14 22:25 - 2016-09-02 17:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-09-14 22:25 - 2016-09-02 17:02 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-09-14 22:25 - 2016-09-02 17:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-09-14 22:25 - 2016-09-02 16:58 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-09-14 22:25 - 2016-09-02 16:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-09-14 22:25 - 2016-09-02 16:55 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-09-14 22:25 - 2016-09-02 16:54 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-09-14 22:25 - 2016-09-02 16:54 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-09-14 22:25 - 2016-09-02 16:53 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-09-14 22:25 - 2016-09-02 16:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-09-14 22:25 - 2016-09-02 16:53 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-09-14 22:25 - 2016-09-02 16:49 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-09-14 22:25 - 2016-09-02 16:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-09-14 22:25 - 2016-09-02 16:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-09-14 22:25 - 2016-09-02 16:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-09-14 22:25 - 2016-09-02 16:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-09-14 22:25 - 2016-09-02 16:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 16:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 16:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 16:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-09-14 22:25 - 2016-05-14 00:09 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-09-14 22:25 - 2016-05-14 00:09 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-09-14 22:25 - 2016-05-14 00:09 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-09-14 22:25 - 2016-05-14 00:07 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-09-14 22:25 - 2016-05-13 23:55 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-09-14 22:25 - 2016-05-13 23:53 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-09-14 22:25 - 2016-05-13 23:53 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-09-14 22:25 - 2016-05-13 23:52 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-09-14 22:25 - 2016-05-13 23:52 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-09-14 22:25 - 2016-05-13 23:52 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-09-14 22:25 - 2016-05-13 23:52 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-09-14 22:25 - 2016-05-13 23:50 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-09-14 22:25 - 2016-05-13 23:38 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-09-14 22:25 - 2016-05-13 23:38 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-09-14 22:25 - 2016-05-13 23:38 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-09-14 22:25 - 2016-05-13 23:38 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-09-14 22:25 - 2016-05-12 19:14 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-09-14 22:25 - 2016-05-12 17:18 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-09-14 22:25 - 2016-05-12 17:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-09-14 22:25 - 2016-05-04 19:21 - 00114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-09-14 22:25 - 2016-05-04 19:17 - 03244032 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-09-14 22:25 - 2016-05-04 19:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-09-14 22:25 - 2016-05-04 19:17 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-09-14 22:25 - 2016-05-04 19:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-09-14 22:25 - 2016-05-04 19:16 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-09-14 22:25 - 2016-05-04 17:04 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-09-14 22:25 - 2016-05-04 16:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-09-14 22:24 - 2016-08-16 19:36 - 01009152 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-09-14 22:24 - 2016-08-16 04:48 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-09-14 22:24 - 2016-08-16 04:35 - 03218432 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-09-14 22:24 - 2016-08-06 17:31 - 00877056 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-09-14 22:24 - 2016-08-06 17:15 - 00581632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-09-14 22:24 - 2016-07-07 17:36 - 01896168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-09-14 22:24 - 2016-07-07 17:36 - 00377576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-09-14 22:24 - 2016-07-07 17:36 - 00287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-09-14 22:24 - 2016-07-07 17:08 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-09-14 22:24 - 2016-07-01 17:31 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-09-14 22:24 - 2016-07-01 17:31 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2016-09-14 22:24 - 2016-07-01 17:13 - 00741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-09-14 22:24 - 2016-07-01 17:13 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2016-09-14 22:24 - 2016-05-04 19:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-09-14 22:24 - 2016-05-04 19:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-09-14 20:53 - 2016-09-14 20:53 - 00000000 ____D C:\Users\Agando\.QtWebEngineProcess
2016-09-14 20:53 - 2016-09-14 20:53 - 00000000 ____D C:\Users\Agando\.Origin
2016-09-14 18:54 - 2016-09-28 17:40 - 00000512 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 8a80bd6b-eafa-48a4-b767-55dbf8fad592.job
2016-09-14 18:54 - 2016-09-16 23:35 - 00003590 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 8a80bd6b-eafa-48a4-b767-55dbf8fad592
2016-09-14 18:54 - 2016-09-14 18:54 - 00003516 _____ C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 2b274173-6618-4046-8fa0-f7aba0175c32
2016-09-14 18:52 - 2016-09-14 18:52 - 00000000 ____D C:\Users\Agando\AppData\Roaming\SUPERAntiSpyware.com
2016-09-14 18:52 - 2016-09-14 18:52 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2016-09-14 18:52 - 2016-09-14 18:52 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2016-09-14 18:52 - 2016-09-14 18:52 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2016-09-14 18:44 - 2016-09-14 18:44 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD
2016-09-14 18:44 - 2016-09-14 18:44 - 00000000 ____D C:\Program Files (x86)\AMD
2016-09-14 18:40 - 2016-09-14 18:41 - 00000000 ____D C:\Program Files (x86)\CPU Thermometer
2016-09-14 18:40 - 2016-09-14 18:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPU Thermometer
2016-09-13 18:11 - 2016-09-28 17:43 - 00000000 ____D C:\Users\Public\Speedup Sessions
2016-09-07 22:26 - 2016-09-07 22:26 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2016-09-07 19:41 - 2016-09-07 19:41 - 00000000 ____D C:\Windows\system32\DAX2
2016-09-07 19:40 - 2016-06-03 08:29 - 72520720 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2016-09-07 19:40 - 2016-06-03 08:29 - 24399544 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRenderAVX64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 24310136 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRender64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 17359672 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioCapture64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 15202040 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 14057256 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 13122584 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 12988352 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO4064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 10512448 _____ (Intel Corporation) C:\Windows\system32\IntelSSTAPO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 07172920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 07096192 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 06402432 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV3apo.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 06264640 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64AF3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 06064046 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2016-09-07 19:40 - 2016-06-03 08:29 - 05804772 _____ C:\Windows\system32\Drivers\rtvienna.dat
2016-09-07 19:40 - 2016-06-03 08:29 - 05776968 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 05593624 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 05339552 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 05111040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2016-09-07 19:40 - 2016-06-03 08:29 - 03299824 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE2.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 03283248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 03282544 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 03199744 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 03181209 _____ C:\Windows\system32\Drivers\rtkSSTsetting.dat
2016-09-07 19:40 - 2016-06-03 08:29 - 03096248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02895104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2016-09-07 19:40 - 2016-06-03 08:29 - 02825104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO7064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02726416 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02477520 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02437760 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02190992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02110600 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02060032 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02050184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01965816 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01959608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64AF3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01847888 _____ (DTS, Inc.) C:\Windows\system32\slcnt64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01780624 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01608128 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01591064 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01508936 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01435144 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01422928 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01382240 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01355616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01336544 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaeapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01334384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01213664 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01186832 _____ (Intel Corporation) C:\Windows\system32\IntelSstCApoPropPage.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01166168 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01061120 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01023240 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01003864 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00999856 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00965032 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00962056 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tosasfapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00931624 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00927424 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00923744 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00873472 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00743968 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00727440 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00716112 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00708312 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00689888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00678184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00677672 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00618192 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00589072 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SECOMN32.DLL
2016-09-07 19:40 - 2016-06-03 08:29 - 00586424 _____ (Conexant Systems, Inc.) C:\Windows\system32\CAF64APO2.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00570096 _____ (Intel Corporation) C:\Windows\system32\tbb_waves.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00532384 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00524680 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaemaxapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00514528 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00504312 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00500560 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00472312 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00467168 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00450120 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00447728 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00447104 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\toseaeapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00445400 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00441272 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00428232 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00416512 _____ (Harman) C:\Windows\system32\HMUI.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00387320 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00381416 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00371456 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00366128 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\HMAPO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00362056 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64AF3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00360352 _____ (Harman) C:\Windows\system32\HMClariFi.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00343712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00341152 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00341152 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00330568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00327456 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00310424 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64F3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00272720 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00258872 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00253904 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00253872 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00252880 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00231920 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00221968 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00214832 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00209536 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00203848 _____ (Harman) C:\Windows\system32\HMHVS.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00192984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00190936 _____ (Harman) C:\Windows\system32\HMEQ_Voice.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00190936 _____ (Harman) C:\Windows\system32\HMEQ.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00179600 _____ (Harman) C:\Windows\system32\HMLimiter.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00166208 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00158704 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00154368 _____ (Harman) C:\Windows\system32\HarmanAudioInterface.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00151792 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00134208 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00122328 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00110984 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00090920 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00088352 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00088320 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00084616 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00083632 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00075544 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00065832 _____ (Conexant System, Inc.) C:\Windows\system32\Caf64api.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00023696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00007756 _____ C:\Windows\system32\cxapo.prop
2016-09-07 19:40 - 2016-06-03 08:29 - 00005604 _____ C:\Windows\system32\cxapo.lncs
2016-09-07 19:39 - 2016-06-03 08:29 - 00574760 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2016-09-07 19:39 - 2016-06-03 08:29 - 00118600 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2016-09-07 19:39 - 2016-06-03 08:29 - 00118592 _____ C:\Windows\system32\AcpiServiceVnA64.dll
2016-09-07 19:39 - 2016-06-03 08:29 - 00105312 _____ C:\Windows\system32\audioLibVc.dll
2016-09-07 19:34 - 2016-09-07 19:34 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Innovative Solutions
2016-09-07 19:34 - 2016-09-07 19:34 - 00000000 ____D C:\Users\Agando\AppData\Local\Innovative Solutions
2016-09-02 22:26 - 2016-08-25 22:50 - 00133056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-09-02 22:26 - 2016-05-04 04:23 - 00129824 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-09-02 22:26 - 2016-05-04 04:22 - 00130848 _____ C:\Windows\system32\vulkan-1.dll
2016-09-02 22:26 - 2016-05-04 04:22 - 00045344 _____ C:\Windows\system32\vulkaninfo.exe
2016-09-02 22:26 - 2016-05-04 04:22 - 00040224 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-09-02 22:21 - 2016-08-26 01:28 - 40070200 _____ C:\Windows\system32\nvcompiler.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 35182648 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 34801088 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 28207672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 14093368 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-09-02 22:21 - 2016-08-26 01:28 - 10865704 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 10737632 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 10278080 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 09086856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 08875408 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 08680696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 03594808 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 03160512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 01920960 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437270.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437270.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00956352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00941504 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00892864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00686896 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00575984 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00520912 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00493608 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00437696 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00436088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00408784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00390200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00223304 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-09-02 22:21 - 2016-08-26 01:28 - 00181488 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00159352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00153368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00131536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00054728 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00039731 _____ C:\Windows\system32\nvinfo.pb
2016-09-02 22:21 - 2016-08-26 01:28 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-09-02 22:21 - 2016-08-26 01:28 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2016-09-02 21:53 - 2016-09-02 21:53 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2016-09-02 20:31 - 2016-09-02 20:31 - 00000000 ____D C:\Neuer Ordner
2016-09-02 20:22 - 2016-09-28 17:42 - 00000000 ____D C:\Program Files (x86)\Steam
2016-09-02 19:53 - 2016-09-02 21:15 - 00000000 ____D C:\Program Files (x86)\Origin Games
2016-09-02 12:59 - 2015-05-05 14:01 - 01948928 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO264.dll
2016-09-02 12:58 - 2015-05-05 14:01 - 01716480 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO232.dll
2016-09-02 05:09 - 2016-09-02 05:09 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2016-08-31 22:26 - 2016-08-31 22:26 - 00000016 _____ C:\ProgramData\mntemp
2016-08-31 15:12 - 2016-08-31 15:24 - 00000000 ____D C:\Users\Agando\Documents\Battlefield 1 Open Beta
2016-08-31 15:10 - 2016-08-31 15:10 - 00000000 ____D C:\Program Files\Common Files\EAInstaller
2016-08-29 20:00 - 2016-08-29 20:00 - 02250024 _____ C:\Windows\SysWOW64\pbsvc.exe

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-28 17:59 - 2015-03-01 12:31 - 00000000 ___RD C:\Users\Agando\Desktop\Dateien
2016-09-28 17:59 - 2015-02-26 10:20 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Origin
2016-09-28 17:55 - 2016-04-25 19:48 - 00000000 ____D C:\Users\Agando\AppData\Local\whatpulse
2016-09-28 17:50 - 2009-07-14 06:45 - 00021648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-09-28 17:50 - 2009-07-14 06:45 - 00021648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-09-28 17:44 - 2015-02-26 10:18 - 00000000 ____D C:\ProgramData\Origin
2016-09-28 17:40 - 2015-02-23 13:06 - 00000000 ____D C:\ProgramData\NVIDIA
2016-09-28 17:40 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-09-28 17:40 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-28 17:29 - 2015-02-23 12:41 - 00000000 ____D C:\Users\Agando\AppData\Local\VirtualStore
2016-09-28 16:09 - 2016-03-06 23:27 - 00000000 ____D C:\Users\Agando\AppData\Local\CrashDumps
2016-09-28 16:09 - 2015-02-25 17:38 - 00000000 ____D C:\Windows\Minidump
2016-09-28 16:09 - 2015-02-23 12:32 - 00000000 ____D C:\Windows\Panther
2016-09-28 16:09 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-09-28 15:57 - 2015-04-08 13:45 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-09-28 15:43 - 2015-03-14 13:44 - 00000000 ____D C:\Users\Agando\AppData\Local\ElevatedDiagnostics
2016-09-26 13:33 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system
2016-09-25 22:12 - 2016-03-13 15:17 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForAgando.job
2016-09-25 21:21 - 2016-04-20 16:04 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-09-25 21:19 - 2015-05-30 15:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-09-25 21:00 - 2011-04-12 09:43 - 00699544 _____ C:\Windows\system32\perfh007.dat
2016-09-25 21:00 - 2011-04-12 09:43 - 00149426 _____ C:\Windows\system32\perfc007.dat
2016-09-25 21:00 - 2009-07-14 07:13 - 01620900 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-25 11:11 - 2016-03-13 15:17 - 00003192 _____ C:\Windows\System32\Tasks\HPCeeScheduleForAgando
2016-09-25 11:01 - 2016-04-20 16:04 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-09-25 00:05 - 2015-04-17 19:20 - 00000000 ____D C:\Users\Agando\AppData\Roaming\SoftGrid Client
2016-09-24 23:26 - 2016-07-17 19:26 - 00000946 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-09-24 10:09 - 2015-02-28 18:04 - 00000000 ____D C:\ProgramData\Package Cache
2016-09-24 10:08 - 2015-02-23 12:41 - 00000000 ____D C:\Users\Agando
2016-09-22 20:21 - 2016-07-09 18:48 - 00003870 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1468082936
2016-09-22 20:21 - 2015-07-28 18:54 - 00000000 ____D C:\Program Files (x86)\Opera
2016-09-21 16:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-09-21 15:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-09-21 15:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism
2016-09-21 15:25 - 2015-07-16 14:52 - 00000000 ____D C:\ProgramData\Skype
2016-09-21 15:19 - 2015-02-23 12:47 - 01594244 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-09-20 21:06 - 2015-02-28 20:40 - 00000000 ___HD C:\Windows\msdownld.tmp
2016-09-20 21:06 - 2015-02-28 20:40 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-09-20 21:05 - 2016-02-28 22:26 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2016-09-20 14:22 - 2015-02-26 10:18 - 00000000 ____D C:\Program Files (x86)\Origin
2016-09-20 12:15 - 2015-02-26 10:20 - 00000000 ____D C:\Users\Agando\AppData\Local\Origin
2016-09-18 23:14 - 2016-03-02 14:05 - 00000000 ____D C:\Users\Agando\AppData\Local\Battle.net
2016-09-18 10:14 - 2016-03-02 14:05 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-09-17 14:37 - 2015-02-28 16:11 - 00000000 ____D C:\Users\Agando\Documents\My Games
2016-09-17 13:45 - 2016-02-09 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-09-17 08:24 - 2016-04-20 16:04 - 00002187 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-09-16 20:49 - 2016-04-24 21:39 - 00000000 ____D C:\Program Files (x86)\Overwatch
2016-09-15 13:45 - 2009-07-14 06:45 - 00278064 _____ C:\Windows\system32\FNTCACHE.DAT
2016-09-14 22:45 - 2016-01-24 22:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-09-14 22:44 - 2016-01-24 22:17 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-09-14 22:44 - 2016-01-24 22:17 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-09-14 22:44 - 2015-02-28 01:03 - 00000000 ____D C:\Windows\system32\MRT
2016-09-14 22:36 - 2015-02-28 01:03 - 144199024 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-09-14 19:31 - 2015-02-25 22:42 - 00000000 ____D C:\Users\Agando\AppData\Local\TeamSpeak 3 Client
2016-09-14 18:43 - 2015-08-26 23:52 - 00007598 _____ C:\Users\Agando\AppData\Local\Resmon.ResmonCfg
2016-09-13 19:19 - 2016-07-17 19:26 - 00003944 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-09-13 19:19 - 2015-05-30 15:10 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-09-13 19:19 - 2015-05-30 15:10 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-09-13 19:19 - 2015-05-30 15:10 - 00000000 ____D C:\Windows\system32\Macromed
2016-09-13 19:19 - 2015-04-10 03:14 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-09-13 19:19 - 2015-04-10 03:14 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-09-13 18:11 - 2016-07-25 15:28 - 00003344 _____ C:\Windows\System32\Tasks\Avira System Speedup Tray
2016-09-13 18:11 - 2015-03-01 20:11 - 00000000 ____D C:\Program Files (x86)\Avira
2016-09-10 18:09 - 2015-06-22 18:02 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Mumble
2016-09-07 20:51 - 2015-03-03 14:51 - 00000000 ____D C:\Users\Agando\AppData\Local\Ubisoft Game Launcher
2016-09-07 19:41 - 2015-02-23 12:52 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-09-07 19:29 - 2015-02-23 12:51 - 00000000 ___HD C:\Program Files (x86)\Temp
2016-09-02 22:27 - 2015-02-23 13:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-09-02 22:27 - 2015-02-23 13:06 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-09-02 21:52 - 2016-02-22 20:20 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-09-02 21:52 - 2016-02-22 20:20 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2016-09-02 21:52 - 2015-03-01 13:17 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-09-02 20:25 - 2015-02-25 18:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-09-02 13:31 - 2015-02-23 12:51 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-09-02 05:17 - 2015-03-23 21:49 - 00000000 ____D C:\Users\Gast
2016-09-02 05:17 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\security
2016-09-02 05:16 - 2015-02-23 12:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-09-02 05:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2016-09-02 01:03 - 2016-04-29 20:27 - 00000000 ____D C:\Users\Agando\Documents\Overwatch
2016-09-02 01:03 - 2016-03-02 14:04 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Battle.net
2016-09-02 01:03 - 2015-12-19 21:20 - 00000000 ____D C:\Windows\System32\Tasks\Hewlett-Packard
2016-09-02 01:03 - 2015-02-23 13:05 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-09-02 01:03 - 2015-02-23 12:52 - 00000000 ____D C:\Program Files\Realtek
2016-09-02 01:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2016-09-02 01:02 - 2015-02-23 13:06 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-09-02 01:01 - 2016-05-29 13:49 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-08-31 00:26 - 2016-06-21 20:49 - 00000000 ____D C:\Program Files (x86)\Overwatch Test
2016-08-30 19:54 - 2015-04-04 02:02 - 00076152 _____ C:\Windows\system32\PnkBstrA.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-12-30 21:14 - 2007-06-18 22:20 - 1731584 _____ (Ovosoft) C:\Program Files (x86)\snapper.exe
2015-04-13 15:00 - 2015-04-13 15:00 - 0000080 _____ () C:\Users\Agando\AppData\Roaming\vibranceGUI.ini
2015-05-03 20:43 - 2015-05-03 20:43 - 0003584 _____ () C:\Users\Agando\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-09-21 14:20 - 2016-09-21 14:20 - 0000000 _____ () C:\Users\Agando\AppData\Local\Driver_LOM_8161Present.flag
2016-06-06 21:03 - 2016-06-06 21:03 - 0000872 _____ () C:\Users\Agando\AppData\Local\recently-used.xbel
2015-08-26 23:52 - 2016-09-14 18:43 - 0007598 _____ () C:\Users\Agando\AppData\Local\Resmon.ResmonCfg
2015-04-22 19:40 - 2015-04-22 19:40 - 0000057 _____ () C:\ProgramData\Ament.ini
2016-09-02 05:09 - 2016-09-02 05:09 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-08-31 22:26 - 2016-08-31 22:26 - 0000016 _____ () C:\ProgramData\mntemp
2015-11-20 22:25 - 2015-11-20 22:59 - 0000098 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


Einige Dateien in TEMP:
====================
C:\Users\Agando\AppData\Local\Temp\avgnt.exe
C:\Users\Agando\AppData\Local\Temp\devcon64.exe
C:\Users\Gast\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-09-25 12:40

==================== Ende von FRST.txt ============================
         
Addition.txt:

Pastebin weil der Thread sonst zu lange ist: hxxp://pastebin.com/1M65FKUS


Hoffe jemand kann mir helfen

Geändert von axyo (28.09.2016 um 19:16 Uhr)

Alt 28.09.2016, 22:42   #2
M-K-D-B
/// TB-Ausbilder
 
Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert - Standard

Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert






Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:
  • Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
  • Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
  • Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
  • Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
  • Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
  • Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort als Administrator zu starten!
  • Einige Programme, die wir hier verwenden, können unter Umständen von deinem Antiviren- oder Anti-Malwareprogramm fälschlicherweise als Bedrohung eingestuft werden. Die Sicherheitsprogramme können aufgrund eines bestimmten Programmverhaltens nicht zwischen "gut" oder "böse" unterscheiden und schlagen Alarm. Dabei handelt es sich um Fehlalarme, welche du getrost ignorieren kannst. Gegebenenfalls musst du deine Sicherheitssoftware vor der Ausführung eines Programms deaktivieren, damit unsere Bereinigungsvorgänge nicht beeinträchtigt werden.



Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:
So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Danke für deine Mitarbeit!






Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________

__________________

Alt 29.09.2016, 17:24   #3
axyo
 
Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert - Standard

Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert



Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2016.09.29.08
  rootkit: v2016.09.26.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18449
Agando :: AGANDO-PC [administrator]

29.09.2016 16:13:12
mbar-log-2016-09-29 (16-13-12).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 356166
Time elapsed: 25 minute(s), 31 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         

Code:
ATTFilter
 
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2016.09.29.08
  rootkit: v2016.09.26.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18449
Agando :: AGANDO-PC [administrator]

29.09.2016 16:48:43
mbar-log-2016-09-29 (16-48-43).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 356053
Time elapsed: 22 minute(s), 32 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         
__________________

Alt 29.09.2016, 20:45   #4
M-K-D-B
/// TB-Ausbilder
 
Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert - Standard

Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert



Servus,




Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

__________________
Gruß
M-K-D-B


==========================================================
offline vom 22.12.2018 bis 01.01.2019
==========================================================

Das Trojaner-Board unterstützen

Alt 30.09.2016, 13:08   #5
axyo
 
Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert - Standard

Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert



Code:
ATTFilter
Combofix Logfile:
Code:
ATTFilter
ComboFix 16-09-28.01 - Agando 30.09.2016  12:23:25.1.6 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8156.4824 [GMT 2:00]
ausgeführt von:: c:\users\Agando\Desktop\ComboFix.exe
AV: Avira Antivirus *Enabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Antivirus *Enabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\users\Agando\AppData\Local\assembly\tmp
c:\users\Agando\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
c:\windows\msdownld.tmp
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\pthreadVC.dll
c:\windows\SysWow64\wpcap.dll
c:\windows\TEMP\HP Support Framework\HPSF_Config1.dll
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_npf
.
.
(((((((((((((((((((((((   Dateien erstellt von 2016-08-28 bis 2016-09-30  ))))))))))))))))))))))))))))))
.
.
2016-09-29 14:12 . 2016-09-29 15:24	--------	d-----w-	c:\programdata\Malwarebytes' Anti-Malware (portable)
2016-09-28 15:59 . 2016-09-28 16:01	--------	d-----w-	C:\FRST
2016-09-28 14:03 . 2016-09-28 14:03	--------	d-----w-	c:\program files\CCleaner
2016-09-25 20:09 . 2016-09-25 20:09	--------	d-----w-	c:\users\Agando\AppData\Local\GeoLocator
2016-09-25 19:34 . 2016-09-25 19:34	--------	d-----w-	c:\users\Agando\AppData\Roaming\FlowStone
2016-09-25 19:34 . 2016-09-25 19:34	--------	d-----w-	c:\program files (x86)\DSPRobotics
2016-09-24 08:08 . 2016-09-25 20:09	--------	d-----w-	c:\users\Agando\ReportSender
2016-09-21 13:12 . 2016-08-12 17:02	14632960	----a-w-	c:\windows\system32\wmp.dll
2016-09-21 13:12 . 2016-06-14 17:16	1202176	----a-w-	c:\windows\system32\drmv2clt.dll
2016-09-21 12:18 . 2016-09-21 12:19	--------	d-----w-	C:\CIMTEMP
2016-09-21 11:51 . 2016-08-05 15:30	2048	----a-w-	c:\windows\system32\tzres.dll
2016-09-21 11:51 . 2016-08-05 15:13	2048	----a-w-	c:\windows\SysWow64\tzres.dll
2016-09-20 19:05 . 2016-09-20 19:06	--------	d-----w-	c:\program files (x86)\RivaTuner Statistics Server
2016-09-17 12:40 . 2016-09-17 12:40	--------	d-----w-	C:\e49e132389896a47af13baaab7
2016-09-17 07:02 . 2016-09-17 07:02	--------	d-----w-	c:\users\Agando\AppData\Roaming\Atari
2016-09-14 20:25 . 2016-05-13 22:09	3156480	----a-w-	c:\windows\system32\wucltux.dll
2016-09-14 20:24 . 2016-05-04 17:17	25088	----a-w-	c:\windows\SysWow64\msimsg.dll
2016-09-14 18:53 . 2016-09-14 18:53	--------	d-----w-	c:\users\Agando\.QtWebEngineProcess
2016-09-14 18:53 . 2016-09-14 18:53	--------	d-----w-	c:\users\Agando\.Origin
2016-09-14 16:52 . 2016-09-14 16:52	--------	d-----w-	c:\users\Agando\AppData\Roaming\SUPERAntiSpyware.com
2016-09-14 16:52 . 2016-09-14 16:52	--------	d-----w-	c:\program files\SUPERAntiSpyware
2016-09-14 16:52 . 2016-09-14 16:52	--------	d-----w-	c:\programdata\SUPERAntiSpyware.com
2016-09-14 16:44 . 2016-09-14 16:44	--------	d-----w-	c:\program files (x86)\AMD
2016-09-14 16:41 . 2016-09-14 16:41	--------	d-----w-	c:\windows\system32\wbem\Framework
2016-09-14 16:40 . 2016-09-14 16:41	--------	d-----w-	c:\program files (x86)\CPU Thermometer
2016-09-13 16:11 . 2016-09-30 10:42	--------	d-----w-	c:\users\Public\Speedup Sessions
2016-09-07 20:26 . 2016-09-07 20:26	--------	d-----w-	c:\program files (x86)\AGEIA Technologies
2016-09-07 17:41 . 2016-09-07 17:41	--------	d-----w-	c:\windows\system32\DAX2
2016-09-07 17:39 . 2016-06-03 06:29	574760	----a-w-	c:\windows\system32\AERTAC64.dll
2016-09-07 17:39 . 2016-06-03 06:29	118600	----a-w-	c:\windows\system32\AERTAR64.dll
2016-09-07 17:39 . 2016-06-03 06:29	118592	----a-w-	c:\windows\system32\AcpiServiceVnA64.dll
2016-09-07 17:39 . 2016-06-03 06:29	105312	----a-w-	c:\windows\system32\audioLibVc.dll
2016-09-07 17:34 . 2016-09-07 17:34	--------	d-----w-	c:\users\Agando\AppData\Roaming\Innovative Solutions
2016-09-07 17:34 . 2016-09-07 17:34	--------	d-----w-	c:\users\Agando\AppData\Local\Innovative Solutions
2016-09-02 20:26 . 2016-08-25 20:50	133056	----a-w-	c:\windows\SysWow64\nvStreaming.exe
2016-09-02 20:26 . 2016-05-04 02:23	129824	----a-w-	c:\windows\SysWow64\vulkan-1.dll
2016-09-02 20:26 . 2016-05-04 02:22	40224	----a-w-	c:\windows\SysWow64\vulkaninfo.exe
2016-09-02 20:26 . 2016-05-04 02:22	130848	----a-w-	c:\windows\system32\vulkan-1.dll
2016-09-02 20:26 . 2016-05-04 02:22	45344	----a-w-	c:\windows\system32\vulkaninfo.exe
2016-09-02 19:53 . 2016-09-02 19:53	--------	d-----w-	c:\program files (x86)\Battlelog Web Plugins
2016-09-02 18:31 . 2016-09-02 18:31	--------	d-----w-	C:\Neuer Ordner
2016-09-02 18:22 . 2016-09-30 10:41	--------	d-----w-	c:\program files (x86)\Steam
2016-09-02 17:53 . 2016-09-02 19:15	--------	d-----w-	c:\program files (x86)\Origin Games
2016-09-02 10:59 . 2015-05-05 12:01	1948928	----a-w-	c:\windows\system32\MBAPO264.dll
2016-09-02 10:58 . 2015-05-05 12:01	1716480	----a-w-	c:\windows\SysWow64\MBAPO232.dll
2016-08-31 13:10 . 2016-08-31 13:10	--------	d-----w-	c:\program files\Common Files\EAInstaller
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-09-29 15:25 . 2015-04-08 11:45	109272	----a-w-	c:\windows\system32\drivers\mbamchameleon.sys
2016-09-29 14:47 . 2015-04-08 11:45	192216	----a-w-	c:\windows\system32\drivers\MBAMSwissArmy.sys
2016-09-14 20:36 . 2015-02-27 23:03	144199024	-c--a-w-	c:\windows\system32\MRT.exe
2016-09-13 17:19 . 2015-05-30 13:10	796352	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2016-09-13 17:19 . 2015-04-10 01:14	142528	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2016-09-02 19:52 . 2016-02-22 18:20	281872	----a-w-	c:\windows\SysWow64\PnkBstrB.exe
2016-09-02 19:52 . 2015-03-01 11:17	281872	----a-w-	c:\windows\SysWow64\PnkBstrB.ex0
2016-09-02 19:52 . 2016-02-22 18:20	76888	----a-w-	c:\windows\SysWow64\PnkBstrA.exe
2016-09-02 15:16 . 2016-09-14 20:25	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2016-08-30 17:54 . 2015-04-04 00:02	76152	----a-w-	c:\windows\system32\PnkBstrA.exe
2016-08-29 18:00 . 2016-08-29 18:00	2250024	----a-w-	c:\windows\SysWow64\pbsvc.exe
2016-08-28 14:30 . 2016-08-28 14:30	466456	----a-w-	c:\windows\system32\wrap_oal.dll
2016-08-28 14:30 . 2016-08-28 14:30	444952	----a-w-	c:\windows\SysWow64\wrap_oal.dll
2016-08-28 14:30 . 2016-08-28 14:30	122904	----a-w-	c:\windows\system32\OpenAL32.dll
2016-08-28 14:30 . 2016-08-28 14:30	109080	----a-w-	c:\windows\SysWow64\OpenAL32.dll
2016-08-25 23:28 . 2016-05-29 11:45	17463088	----a-w-	c:\windows\system32\nvd3dumx.dll
2016-08-25 23:28 . 2016-05-29 11:45	1019960	----a-w-	c:\windows\system32\NvFBC64.dll
2016-08-25 23:28 . 2016-04-05 11:37	1588688	----a-w-	c:\windows\system32\nvhdagenco6420103.dll
2016-08-25 23:28 . 2015-08-24 23:30	19848080	----a-w-	c:\windows\system32\nvwgf2umx.dll
2016-08-25 23:28 . 2015-02-25 16:04	17263792	----a-w-	c:\windows\SysWow64\nvwgf2um.dll
2016-08-25 23:28 . 2015-02-25 16:04	3456888	----a-w-	c:\windows\SysWow64\nvapi.dll
2016-08-25 23:28 . 2015-02-23 11:05	3917512	----a-w-	c:\windows\system32\nvapi64.dll
2016-08-25 23:28 . 2015-02-23 11:05	14352816	----a-w-	c:\windows\SysWow64\nvd3dum.dll
2016-08-25 21:10 . 2015-02-23 11:06	6385720	----a-w-	c:\windows\system32\nvcpl.dll
2016-08-25 21:10 . 2015-02-23 11:06	2475064	----a-w-	c:\windows\system32\nvsvc64.dll
2016-08-25 21:10 . 2015-02-23 11:06	1764408	----a-w-	c:\windows\system32\nvsvcr.dll
2016-08-25 21:10 . 2015-02-23 11:06	1362368	----a-w-	c:\windows\system32\nvvsvc.exe
2016-08-25 21:10 . 2016-02-29 13:16	81856	----a-w-	c:\windows\system32\nv3dappshextr.dll
2016-08-25 21:10 . 2016-02-29 13:16	548408	----a-w-	c:\windows\system32\nv3dappshext.dll
2016-08-25 21:10 . 2015-02-23 11:06	71224	----a-w-	c:\windows\system32\nvshext.dll
2016-08-25 21:10 . 2015-02-23 11:06	393784	----a-w-	c:\windows\system32\nvmctray.dll
2016-08-22 15:18 . 2015-02-23 11:06	7320235	----a-w-	c:\windows\system32\nvcoproc.bin
2016-08-12 16:46 . 2016-09-21 13:11	2560	----a-w-	c:\windows\apppatch\AcRes.dll
2016-08-05 13:09 . 2016-08-05 13:09	28352	----a-w-	c:\windows\SysWow64\aspnet_counters.dll
2016-08-05 13:09 . 2016-08-05 13:09	19104	----a-w-	c:\windows\SysWow64\msvcr110_clr0400.dll
2016-08-05 13:09 . 2016-08-05 13:09	19104	----a-w-	c:\windows\SysWow64\msvcr100_clr0400.dll
2016-08-05 13:09 . 2016-08-05 13:09	19104	----a-w-	c:\windows\SysWow64\msvcp110_clr0400.dll
2016-08-05 13:02 . 2016-08-05 13:02	19112	----a-w-	c:\windows\system32\msvcr110_clr0400.dll
2016-08-05 13:02 . 2016-08-05 13:02	19112	----a-w-	c:\windows\system32\msvcr100_clr0400.dll
2016-08-05 13:02 . 2016-08-05 13:02	19112	----a-w-	c:\windows\system32\msvcp110_clr0400.dll
2016-08-05 13:02 . 2016-08-05 13:02	30400	----a-w-	c:\windows\system32\aspnet_counters.dll
2016-08-04 17:35 . 2015-03-01 11:34	281032	----a-w-	c:\windows\SysWow64\PnkBstrB.xtr
2016-07-28 10:30 . 2016-02-09 19:21	171752	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2016-07-28 10:30 . 2016-02-09 19:21	145984	----a-w-	c:\windows\system32\drivers\avipbb.sys
2016-07-07 18:24 . 2012-07-17 12:37	24800	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2007-06-18 20:20 . 2015-12-30 19:14	1731584	----a-w-	c:\program files (x86)\snapper.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2016-09-20 2858272]
"WhatPulse"="c:\program files (x86)\WhatPulse2\whatpulse.exe" [2016-02-25 3942400]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2016-08-30 7943072]
"EADM"="c:\program files (x86)\Origin\Origin.exe" [2016-09-20 3503088]
"AutoHideMouseCursor"="c:\users\Agando\Desktop\Dateien\programme\AutoHideMouseCursor.exe" [2013-08-27 34816]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2016-08-26 8912088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-05-04 630912]
"Avira SystrayStartTrigger"="c:\program files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe" [2016-08-19 60136]
"Avira System Speedup User Starter"="c:\program files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe" [2016-09-05 18536]
"avgnt"="c:\program files (x86)\Avira\Antivirus\avgnt.exe" [2016-09-09 830064]
.
c:\users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
zSpeedup.lnk - c:\program files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe -systemready [2016-9-13 18536]
.
c:\users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
zSpeedup.lnk - c:\program files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe -systemready [2016-9-13 18536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
R2 AntiVirMailService;Avira Mail Protection;c:\program files (x86)\Avira\Antivirus\avmailc7.exe;c:\program files (x86)\Avira\Antivirus\avmailc7.exe [x]
R2 AntiVirWebService;Avira Web Protection;c:\program files (x86)\Avira\Antivirus\avwebg7.exe;c:\program files (x86)\Avira\Antivirus\avwebg7.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service;c:\program files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe;c:\program files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [x]
R2 Origin Web Helper Service;Origin Web Helper Service;c:\program files (x86)\Origin\OriginWebHelperService.exe;c:\program files (x86)\Origin\OriginWebHelperService.exe [x]
R3 cpuz136;cpuz136;c:\windows\TEMP\cpuz136\cpuz136_x64.sys;c:\windows\TEMP\cpuz136\cpuz136_x64.sys [x]
R3 DrvAgent64;DrvAgent64;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
R3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys;c:\windows\SYSNATIVE\drivers\MBfilt64.sys [x]
R3 MSICDSetup;MSICDSetup;d:\cdriver64.sys;d:\CDriver64.sys [x]
R3 NTIOLib_1_0_C;NTIOLib_1_0_C;d:\ntiolib_x64.sys;d:\NTIOLib_X64.sys [x]
R3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys;c:\windows\SYSNATIVE\pwdspio.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys;c:\windows\SYSNATIVE\drivers\ScreamingBAudio64.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 UCOREW64;UCOREW64;c:\users\Agando\AppData\Local\Temp\Rar$EXa0.815\AMIBIOS_and_Aptio_AMI_Firmware_Update_Utility\AMIBIOS\AFUWin\64\UCOREW64.SYS;c:\users\Agando\AppData\Local\Temp\Rar$EXa0.815\AMIBIOS_and_Aptio_AMI_Firmware_Update_Utility\AMIBIOS\AFUWin\64\UCOREW64.SYS [x]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM);c:\windows\system32\DRIVERS\vcsvad.sys;c:\windows\SYSNATIVE\DRIVERS\vcsvad.sys [x]
R3 VUSB3HUB;VIA USB 3 Root Hub Service;c:\windows\system32\DRIVERS\ViaHub3.sys;c:\windows\SYSNATIVE\DRIVERS\ViaHub3.sys [x]
R3 X6va060;X6va060;c:\windows\SysWOW64\Drivers\X6va060;c:\windows\SysWOW64\Drivers\X6va060 [x]
R3 X6va062;X6va062;c:\windows\SysWOW64\Drivers\X6va062;c:\windows\SysWOW64\Drivers\X6va062 [x]
R3 xhcdrv;VIA USB eXtensible Host Controller Service;c:\windows\system32\DRIVERS\xhcdrv.sys;c:\windows\SYSNATIVE\DRIVERS\xhcdrv.sys [x]
R3 xhunter1;xhunter1;c:\windows\xhunter1.sys;c:\windows\xhunter1.sys [x]
R3 xspirit;xspirit;c:\windows\xspirit.sys;c:\windows\xspirit.sys [x]
R3 YMIDUSBW;Yamaha USB-MIDI Driver (WDM);c:\windows\system32\drivers\ymidusbx64.sys;c:\windows\SYSNATIVE\drivers\ymidusbx64.sys [x]
R4 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.11.149\McCHSvc.exe;c:\program files\McAfee Security Scan\3.11.149\McCHSvc.exe [x]
R4 Origin Client Service;Origin Client Service;c:\program files (x86)\Origin\OriginClientService.exe;c:\program files (x86)\Origin\OriginClientService.exe [x]
R4 VmbService;Vodafone-Mobile-Broadband-Dienst;c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe;c:\program files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [x]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x]
S0 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys;c:\windows\SYSNATIVE\pwdrvio.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 BfLwf;Qualcomm Atheros Bandwidth Control;c:\windows\system32\DRIVERS\bflwfx64.sys;c:\windows\SYSNATIVE\DRIVERS\bflwfx64.sys [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [x]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [x]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\Antivirus\sched.exe;c:\program files (x86)\Avira\Antivirus\sched.exe [x]
S2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 Avira.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 LGCoreTemp;Logitech CPU Core Tempurature;c:\program files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys;c:\program files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [x]
S2 LogiRegistryService;Logitech Gaming Registry Service;c:\program files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe;c:\program files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [x]
S2 Qualcomm Atheros Killer Service V2;Qualcomm Atheros Killer Service V2;c:\program files\Qualcomm Atheros\Network Manager\KillerService.exe;c:\program files\Qualcomm Atheros\Network Manager\KillerService.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 SpeedupService;Avira System Speedup;c:\program files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe;c:\program files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 Ke2200;NDIS Miniport Driver for the Killer e2200 PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\e22w7x64.sys;c:\windows\SYSNATIVE\DRIVERS\e22w7x64.sys [x]
S3 LGBusEnum;Logitech Gaming Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 LGJoyXlCore;Logitech Translation Layer Driver (LGS);c:\windows\system32\drivers\LGJoyXlCore.sys;c:\windows\SYSNATIVE\drivers\LGJoyXlCore.sys [x]
S3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver;c:\windows\system32\DRIVERS\LGSHidFilt.Sys;c:\windows\SYSNATIVE\DRIVERS\LGSHidFilt.Sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 NvStreamNetworkSvc;NVIDIA Streamer Network Service;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation	REG_MULTI_SZ   	SSDPSRV upnphost SCardSvr QWAVE wcncsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2016-09-17 06:22	1267528	----a-w-	c:\program files (x86)\Google\Chrome\Application\53.0.2785.116\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2016-09-24 c:\windows\Tasks\Adobe Flash Player PPAPI Notifier.job
- c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_162_pepper.exe [2016-09-13 17:19]
.
2016-09-30 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-30 17:19]
.
2016-09-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2016-04-20 14:04]
.
2016-09-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2016-04-20 14:04]
.
2016-09-29 c:\windows\Tasks\HPCeeScheduleForAgando.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16 08:51]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2016-06-15 2398776]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = 
mDefault_Search_URL = www.google.com
mDefault_Page_URL = www.google.com
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
mSearch Bar = hxxp://www.google.com
IE: {{d8f67242-b229-4065-95fa-391b077ed6ca} - {d8f67242-b229-4065-95fa-391b077ed6ca} - mscoree.dll
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{715DE7BB-61E4-4C78-973D-580A8E88C542}: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{715DE7BB-61E4-4C78-973D-580A8E88C542}\75C414E4D2441443647363: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{A95EB6A5-4DD0-42E9-AFFF-534397AD1C34}: NameServer = 138.201.199.90,8.8.8.8
Handler: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - c:\windows\System32\mscoree.dll
FF - ProfilePath - c:\users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-AMD_Display - (no file)
AddRemove-{79C54A05-F146-4EA0-8A70-D4EFE6181E52} - c:\program files (x86)\InstallShield Installation Information\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}\setup.exe
AddRemove-DG0-PlanetSide 2 - c:\program files (x86)\Steam\steamapps\common\PlanetSide 2\Uninstaller.exe
AddRemove-{288487BA-D8C5-4C81-BD89-C7E49DD48E18} - c:\users\Agando\AppData\Local\{315BE8E4-3CB5-445C-99AC-8B636E57459F}\DesktopReminderSetup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va060]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va060"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va062]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va062"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\Antivirus\avguard.exe
c:\program files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2016-09-30  12:58:51 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2016-09-30 10:58
.
Vor Suchlauf: 17 Verzeichnis(se), 407.241.191.424 Bytes frei
Nach Suchlauf: 21 Verzeichnis(se), 406.781.136.896 Bytes frei
.
- - End Of File - - 47710ADE36C59472CB8D6A6AFF84D3B8
         
--- --- --- A36C5E4F47E84449FF07ED3517B43A31


Alt 30.09.2016, 21:12   #6
M-K-D-B
/// TB-Ausbilder
 
Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert - Standard

Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert



Servus,





Schritt 1
Downloade Dir bitte AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Werkzeuge > Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel
    • "Prefetch" Dateien
    • Proxy
    • Winsock
    • Internet Explorer Richtlinien
    • Chrome Richtlinien
  • Bestätige die Auswahl mit Ok.
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen (auch dann wenn AdwCleaner sagt, dass nichts gefunden wurde) und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).






Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.







Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.







Schritt 4
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
  • FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.






Bitte poste mit deiner nächsten Antwort
  • die Logdatei von AdwCleaner,
  • die Logdatei von MBAM,
  • die Logdatei von JRT,
  • die beiden neuen Logdateien von FRST.
__________________
--> Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert

Alt 30.09.2016, 23:31   #7
axyo
 
Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert - Standard

Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert



AdwCleaner:

AdwCleaner Logfile:
Code:
ATTFilter
# AdwCleaner v6.020 - Bericht erstellt am 30/09/2016 um 21:48:59
# Aktualisiert am 14/09/2016 von ToolsLib
# Datenbank : 2016-09-30.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (X64)
# Benutzername : Agando - AGANDO-PC
# Gestartet von : C:\Users\Agando\Desktop\Dateien\programme\AdwCleaner.exe
# Modus: Löschen
# Unterstützung : https://toolslib.net/forum



***** [ Dienste ] *****



***** [ Ordner ] *****



***** [ Dateien ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****



***** [ Browser ] *****



*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: "Prefetch" Dateien gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [6615 Bytes] - [28/09/2016 19:34:05]
C:\AdwCleaner\AdwCleaner[C2].txt - [1054 Bytes] - [30/09/2016 21:48:59]
C:\AdwCleaner\AdwCleaner[S1].txt - [6175 Bytes] - [20/11/2015 22:26:42]
C:\AdwCleaner\AdwCleaner[S2].txt - [6546 Bytes] - [28/09/2016 19:26:45]
C:\AdwCleaner\AdwCleaner[S3].txt - [1580 Bytes] - [30/09/2016 16:32:41]
C:\AdwCleaner\AdwCleaner[S4].txt - [1653 Bytes] - [30/09/2016 21:48:41]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1419 Bytes] ##########
         
--- --- ---

[/CODE]

MBAM:

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Scan Date: 30.09.2016
Scan Time: 21:57
Logfile: MBAM log.txt
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.09.30.14
Rootkit Database: v2016.09.26.02
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Agando

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 365233
Time Elapsed: 27 min, 9 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)
         
JRT:

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.8 (09.20.2016)
Operating System: Windows 7 Home Premium x64 
Ran by Agando (Administrator) on 30.09.2016 at 23:05:11,84
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 24 

Successfully deleted: C:\ProgramData\mntemp (File) 
Successfully deleted: C:\ProgramData\productdata (Folder) 
Successfully deleted: C:\Users\Agando\AppData\Local\crashrpt (Folder) 
Successfully deleted: C:\Users\Agando\AppData\Local\innovative solutions (Folder) 
Successfully deleted: C:\Users\Agando\AppData\Roaming\innovative solutions (Folder) 
Successfully deleted: C:\Windows\system32\Tasks\Avira System Speedup Tray (Task)
Successfully deleted: C:\Users\Agando\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Agando\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Agando\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B2RPNEZX (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Agando\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BIAMGC4C (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Agando\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C2SWLOZA (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Agando\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D79VPEIT (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Agando\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\Agando\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B2RPNEZX (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BIAMGC4C (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C2SWLOZA (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D79VPEIT (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\SysWOW64\sho109E.tmp (File) 
Successfully deleted: C:\Windows\SysWOW64\sho7BDF.tmp (File) 

Deleted the following from C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\prefs.js
user_pref(browser.urlbar.suggest.searches, true);
user_pref(extensions.Imagus.tls, {\advanced\:false,\sieveAutoUpdate\:true,\sieveCacheRes\:true,\opzoom\:true,\sendToHosts\:[[\+TinEye\,\hxxps://www.tineye.com/



Registry: 0 





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30.09.2016 at 23:07:38,97
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
FRST:


FRST Logfile:
Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 28-09-2016
durchgeführt von Agando (Administrator) auf AGANDO-PC (30-09-2016 23:08:57)
Gestartet von C:\Users\Agando\Desktop\virus
Geladene Profile: Agando &  (Verfügbare Profile: Agando & Gast)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Opera)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Qualcomm Atheros) C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
() C:\Program Files (x86)\WhatPulse2\whatpulse.exe
() C:\Program Files (x86)\WhatPulse2\whatpulse-watchdog.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Users\Agando\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\40.0.2308.62\opera.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-06-15] (NVIDIA Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [630912 2012-05-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [60136 2016-08-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [18536 2016-09-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [830064 2016-09-09] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2858272 2016-09-20] (Valve Corporation)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [WhatPulse] => c:\program files (x86)\whatpulse2\whatpulse.exe [3942400 2016-02-25] ()
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7943072 2016-08-30] (SUPERAntiSpyware)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3503088 2016-09-20] (Electronic Arts)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [AutoHideMouseCursor] => C:\Users\Agando\Desktop\Dateien\programme\AutoHideMouseCursor.exe [34816 2013-08-27] (Nenad Hrg (SoftwareOK.com))
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8912088 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-21] (Microsoft Corporation)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2858272 2016-09-20] (Valve Corporation)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [WhatPulse] => C:\Program Files (x86)\WhatPulse2\whatpulse.exe [3942400 2016-02-25] ()
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7943072 2016-08-30] (SUPERAntiSpyware)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3503088 2016-09-20] (Electronic Arts)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [AutoHideMouseCursor] => C:\Users\Agando\Desktop\Dateien\programme\AutoHideMouseCursor.exe [34816 2013-08-27] (Nenad Hrg (SoftwareOK.com))
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8912088 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-21] (Microsoft Corporation)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2858272 2016-09-20] (Valve Corporation)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [WhatPulse] => C:\Program Files (x86)\WhatPulse2\whatpulse.exe [3942400 2016-02-25] ()
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7943072 2016-08-30] (SUPERAntiSpyware)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3503088 2016-09-20] (Electronic Arts)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [AutoHideMouseCursor] => C:\Users\Agando\Desktop\Dateien\programme\AutoHideMouseCursor.exe [34816 2013-08-27] (Nenad Hrg (SoftwareOK.com))
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8912088 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-21] (Microsoft Corporation)
Startup: C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2016-09-30]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2016-09-30]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{268427DE-E434-45BD-88EC-B67F4F63F895}: [DhcpNameServer] 192.168.9.1 192.168.9.1
Tcpip\..\Interfaces\{715DE7BB-61E4-4C78-973D-580A8E88C542}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{81DD97E4-ED28-4EAD-99E3-B6C5F20A5C2F}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{A95EB6A5-4DD0-42E9-AFFF-534397AD1C34}: [NameServer] 138.201.199.90,8.8.8.8
Tcpip\..\Interfaces\{A95EB6A5-4DD0-42E9-AFFF-534397AD1C34}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{AD54DC0C-B34B-4BFF-AAB8-2990E51F17E2}: [DhcpNameServer] 192.168.2.1
ManualProxies: 

Internet Explorer:
==================
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main,Start Page = 
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3320435249-1176308213-2412890335-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-27] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-27] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-27] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: AviraBrowserSafety.BrowserSafety -> {c3c77255-42c0-499f-b664-6e981a0b1647} -> C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-27] (Oracle Corporation)
Handler-x32: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll [2016-09-13] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2015-02-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei]
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-27] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-27] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] ( Microsoft Corporation)
FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-02-18] (Unity Technologies ApS)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll [2016-09-13] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-02-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-27] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50709.0\npctrl.dll [2016-07-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [Keine Datei]
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-08-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-08-25] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-02-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: @nsroblox.roblox.com/launcher -> C:\Users\Agando\AppData\Local\Roblox\Versions\version-e6d872d544b64cd9\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: @nsroblox.roblox.com/launcher64 -> C:\Users\Agando\AppData\Local\Roblox\Versions\version-e6d872d544b64cd9\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Agando\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-01-22] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-08-29] ()
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-02-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @nsroblox.roblox.com/launcher -> C:\Users\Agando\AppData\Local\Roblox\Versions\version-e6d872d544b64cd9\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @nsroblox.roblox.com/launcher64 -> C:\Users\Agando\AppData\Local\Roblox\Versions\version-e6d872d544b64cd9\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Agando\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-01-22] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-08-29] ()
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-02-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1: @nsroblox.roblox.com/launcher -> C:\Users\Agando\AppData\Local\Roblox\Versions\version-e6d872d544b64cd9\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1: @nsroblox.roblox.com/launcher64 -> C:\Users\Agando\AppData\Local\Roblox\Versions\version-e6d872d544b64cd9\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Agando\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-01-22] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3320435249-1176308213-2412890335-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-08-29] ()
FF Extension: (Dictionary Tooltip) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\extensions\{C6128004-4838-4708-9A97-BB172D17767D}.xpi [2016-06-12]
FF Extension: (Grammarly for Firefox) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\Extensions\87677a2c52b84ad3a151a4a72f5bd3c4@jetpack.xpi [2016-07-05]
FF Extension: (Avira Browser Safety) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\Extensions\abs@avira.com [2016-06-22]
FF Extension: (Battlefield Heroes Updater) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\Extensions\battlefieldheroespatcher@ea.com [2015-04-19] [ist nicht signiert]
FF Extension: (Twitch Now) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\Extensions\jid1-jwVSihNsgAw5jA@jetpack.xpi [2016-05-19]
FF Extension: (YouTube™ HD Plus) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\Extensions\jid1-wkCmfgboni3B1Q@jetpack.xpi [2016-04-21]
FF Extension: (Imagus) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\Extensions\{00000f2a-7cde-4f20-83ed-434fcb420d71}.xpi [2016-05-27]
FF Extension: (ProxTube - Gesperrte YouTube Videos entsperren) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}.xpi [2016-04-25]
FF Extension: (Adblock Plus) - C:\Users\Agando\AppData\Roaming\Mozilla\Firefox\Profiles\UGYJUpkk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt => nicht gefunden

Chrome: 
=======
CHR HomePage: Profile 1 -> hxxps://www.google.com/
CHR StartupUrls: Profile 1 -> "hxxps://www.google.de/","hxxps://www.youtube.com/"
CHR Profile: C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1 [2016-09-28]
CHR Extension: (ProxFlow) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-08-13]
CHR Extension: (HD for YouTube™) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\akjbfncbadcmnkopckegnmjgihagponf [2015-11-21]
CHR Extension: (Google Drive) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (Adblock Plus) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-07-08]
CHR Extension: (Google Docs Offline) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (GoodWordGuide.com: Instant Dictionary) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mfembjnmeainjncdflaoclcjadfhpoim [2016-07-08]
CHR Extension: (Google Mail Checker) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2015-10-19]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR Extension: (Hover Zoom+) - C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pccckmaobkjjboncdfnnofkonhgpceea [2016-08-13]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp] - hxxps://clients2.google.com/service/update2/crx

Opera: 
=======
OPR StartupUrls: "hxxp://www.google.com/","hxxp://www.youtube.com/"
OPR Extension: (ProxFlow) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-09-23]
OPR Extension: (YouTube™ Flash-HTML5) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\abpeogmjbjonedcakbihofgpoelmfbgj [2016-08-17]
OPR Extension: (Block site) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\eiimnmioipafcokbfikbljfdeojpcgbh [2016-09-28]
OPR Extension: (HD quality for YouTube™ (1080p, 1440p, 2160p)) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\emcclmhiklabihbljnpjnacgdaaohpjc [2016-07-26]
OPR Extension: (Twitch Now) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\hiahmjdojdodmjjhhddegdnhcpjmokmo [2016-07-10]
OPR Extension: (JavaScript Popup Blocker) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\hiajdlfgbgnnjakkbnpdhmhfhklkbiol [2016-09-30]
OPR Extension: (Download Chrome Extension) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\kipjbhgniklcnglfaldilecjomjaddfi [2016-07-10]
OPR Extension: (Adblock Plus) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2016-08-24]
OPR Extension: (Hover Zoom+) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\pccckmaobkjjboncdfnnofkonhgpceea [2016-09-27]
OPR Extension: (That's Pretty Good (iDubbbzTV)) - C:\Users\Agando\AppData\Roaming\Opera Software\Opera Stable\Extensions\pnidecdngnainebcfbmebgpkmnmljdng [2016-07-27]

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-05-04] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [989696 2016-09-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [470600 2016-09-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [470600 2016-09-09] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1454720 2016-09-09] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [324304 2016-08-19] (Avira Operations GmbH & Co. KG)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368 2016-06-15] (NVIDIA Corporation)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [8704 2015-09-02] (Hi-Rez Studios) [Datei ist nicht signiert]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29728 2016-08-15] (HP Inc.)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-02-18] (Logitech Inc.)
S4 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [289256 2015-06-26] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-06-15] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-06-15] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-06-15] (NVIDIA Corporation)
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2141192 2016-09-20] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2206224 2016-09-20] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2016-08-30] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2016-09-02] ()
R2 Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [344576 2014-01-22] (Qualcomm Atheros) [Datei ist nicht signiert]
R2 SpeedupService; C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [26632 2016-09-05] (Avira Operations GmbH & Co. KG)
S4 VmbService; C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [8704 2013-09-05] (Vodafone) [Datei ist nicht signiert]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [55936 2011-11-13] (Advanced Micro Devices)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [171752 2016-07-28] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [145984 2016-07-28] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2015-12-03] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [79696 2016-05-11] (Avira Operations GmbH & Co. KG)
R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [80080 2013-11-08] (Qualcomm Atheros, Inc.)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [154320 2013-03-20] (Qualcomm Atheros, Inc.)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-06-15] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex) [Datei ist nicht signiert]
S3 YMIDUSBW; C:\Windows\System32\drivers\ymidusbx64.sys [51496 2013-04-04] (Yamaha Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 UCOREW64; \??\C:\Users\Agando\AppData\Local\Temp\Rar$EXa0.815\AMIBIOS_and_Aptio_AMI_Firmware_Update_Utility\AMIBIOS\AFUWin\64\UCOREW64.SYS [X]
S3 VUSB3HUB; system32\DRIVERS\ViaHub3.sys [X]
S3 X6va060; \??\C:\Windows\SysWOW64\Drivers\X6va060 [X]
S3 X6va062; \??\C:\Windows\SysWOW64\Drivers\X6va062 [X]
S3 xhcdrv; system32\DRIVERS\xhcdrv.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
S3 xspirit; \??\C:\Windows\xspirit.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-30 18:25 - 2016-09-30 18:25 - 01182367 _____ C:\Users\Agando\Downloads\Pflegeanleitung Tenorhorn.pdf
2016-09-30 12:59 - 2016-09-30 12:59 - 00025673 _____ C:\ComboFix.txt
2016-09-30 12:20 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2016-09-30 12:20 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2016-09-30 12:20 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-09-30 12:20 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-09-30 12:20 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-09-30 12:20 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2016-09-30 12:20 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2016-09-30 12:20 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2016-09-30 12:19 - 2016-09-30 12:59 - 00000000 ____D C:\Qoobox
2016-09-30 12:19 - 2016-09-30 12:55 - 00000000 ____D C:\Windows\erdnt
2016-09-29 16:12 - 2016-09-29 17:24 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-09-28 22:17 - 2016-09-30 23:08 - 00000000 ____D C:\Users\Agando\Desktop\virus
2016-09-28 19:55 - 2016-09-28 19:55 - 00002794 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-09-28 17:59 - 2016-09-30 23:08 - 00000000 ____D C:\FRST
2016-09-28 17:33 - 2016-09-28 17:33 - 00000004 _____ C:\Users\Agando\Documents\'hosts.'.txt
2016-09-28 16:03 - 2016-09-28 16:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-09-28 16:03 - 2016-09-28 16:03 - 00000000 ____D C:\Program Files\CCleaner
2016-09-25 22:09 - 2016-09-25 22:09 - 00000000 ____D C:\Users\Agando\AppData\Local\GeoLocator
2016-09-25 21:34 - 2016-09-25 21:34 - 00000000 ____D C:\Users\Agando\AppData\Roaming\FlowStone
2016-09-25 21:34 - 2016-09-25 21:34 - 00000000 ____D C:\Program Files (x86)\DSPRobotics
2016-09-25 21:16 - 2016-09-26 16:23 - 00000000 ____D C:\Users\Agando\Downloads\FL Studio Producer Edition 11.0.4+Plugins Bundle R2R [ChingLiu]
2016-09-24 10:11 - 2016-09-24 10:11 - 00000000 _____ C:\TOSTACK
2016-09-24 10:08 - 2016-09-25 22:09 - 00000000 ____D C:\Users\Agando\ReportSender
2016-09-21 15:12 - 2016-08-12 19:02 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-09-21 15:12 - 2016-06-14 19:16 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2016-09-21 15:11 - 2016-08-29 17:31 - 14183424 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-09-21 15:11 - 2016-08-29 17:31 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-09-21 15:11 - 2016-08-29 17:31 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-09-21 15:11 - 2016-08-29 17:12 - 12880384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-09-21 15:11 - 2016-08-29 17:12 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-09-21 15:11 - 2016-08-29 17:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-09-21 15:11 - 2016-08-29 17:04 - 03229696 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-09-21 15:11 - 2016-08-29 16:55 - 02972672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-09-21 15:11 - 2016-08-16 22:40 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2016-09-21 15:11 - 2016-08-16 22:40 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2016-09-21 15:11 - 2016-08-12 19:02 - 12574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-09-21 15:11 - 2016-08-12 19:02 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-09-21 15:11 - 2016-08-12 19:02 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-09-21 15:11 - 2016-08-12 19:02 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-09-21 15:11 - 2016-08-12 18:47 - 12574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-09-21 15:11 - 2016-08-12 18:47 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-09-21 15:11 - 2016-08-12 18:31 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-09-21 15:11 - 2016-08-12 18:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-09-21 15:11 - 2016-08-12 18:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-09-21 15:11 - 2016-08-12 18:26 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 02023424 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll
2016-09-21 15:11 - 2016-08-06 17:31 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 01178112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 00249344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2016-09-21 15:11 - 2016-08-06 17:15 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmRes.dll
2016-09-21 15:11 - 2016-08-06 17:01 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-09-21 15:11 - 2016-08-06 17:01 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe
2016-09-21 15:11 - 2016-08-06 16:53 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2016-09-21 15:11 - 2016-08-06 16:53 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmprovhost.exe
2016-09-21 15:11 - 2016-08-06 16:53 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmplpxy.dll
2016-09-21 15:11 - 2016-06-14 19:21 - 00094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-09-21 15:11 - 2016-06-14 19:16 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 01483264 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2016-09-21 15:11 - 2016-06-14 19:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-09-21 15:11 - 2016-06-14 19:11 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-09-21 15:11 - 2016-06-14 17:21 - 03209216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 01176064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2016-09-21 15:11 - 2016-06-14 17:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2016-09-21 15:11 - 2016-06-14 17:15 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-09-21 15:11 - 2016-06-14 17:15 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-09-21 15:11 - 2016-06-14 17:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-09-21 15:11 - 2016-06-14 17:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2016-09-21 15:11 - 2016-06-14 17:05 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2016-09-21 15:11 - 2016-06-14 17:00 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2016-09-21 15:11 - 2016-06-14 17:00 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2016-09-21 14:20 - 2016-09-21 14:20 - 00000000 _____ C:\Users\Agando\AppData\Local\Driver_LOM_8161Present.flag
2016-09-21 14:18 - 2016-09-21 14:19 - 00000000 ____D C:\CIMTEMP
2016-09-21 13:51 - 2016-08-05 17:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-09-21 13:51 - 2016-08-05 17:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-09-20 21:06 - 2016-09-20 21:06 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server
2016-09-20 21:05 - 2016-09-20 21:06 - 00000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2016-09-17 14:40 - 2016-09-17 14:40 - 00000000 ____D C:\e49e132389896a47af13baaab7
2016-09-17 09:02 - 2016-09-17 09:07 - 00000000 ____D C:\Users\Agando\Documents\RCT3
2016-09-17 09:02 - 2016-09-17 09:02 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Atari
2016-09-14 22:26 - 2016-09-01 21:26 - 00394440 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-09-14 22:26 - 2016-09-01 20:41 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-09-14 22:26 - 2016-09-01 05:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-09-14 22:26 - 2016-09-01 05:08 - 20312064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-09-14 22:26 - 2016-09-01 04:48 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-09-14 22:26 - 2016-09-01 04:46 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-09-14 22:26 - 2016-09-01 04:46 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-09-14 22:26 - 2016-09-01 04:46 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-09-14 22:26 - 2016-09-01 04:44 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-09-14 22:26 - 2016-09-01 04:34 - 02286592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-09-14 22:26 - 2016-09-01 04:31 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-09-14 22:26 - 2016-09-01 04:31 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-09-14 22:26 - 2016-09-01 04:26 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-09-14 22:26 - 2016-09-01 04:24 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-09-14 22:26 - 2016-09-01 04:24 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-09-14 22:26 - 2016-09-01 04:23 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-09-14 22:26 - 2016-09-01 04:08 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-09-14 22:26 - 2016-09-01 03:59 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-09-14 22:26 - 2016-09-01 03:57 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-09-14 22:26 - 2016-09-01 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-09-14 22:26 - 2016-09-01 03:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-09-14 22:26 - 2016-09-01 03:48 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-09-14 22:26 - 2016-09-01 03:45 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-09-14 22:26 - 2016-09-01 03:34 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-09-14 22:26 - 2016-09-01 03:30 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-09-14 22:26 - 2016-09-01 03:29 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-09-14 22:26 - 2016-09-01 03:29 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-09-14 22:26 - 2016-09-01 03:27 - 13808128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-09-14 22:26 - 2016-09-01 03:24 - 04607488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-09-14 22:26 - 2016-09-01 02:45 - 25770496 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-09-14 22:26 - 2016-09-01 02:43 - 02445824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-09-14 22:26 - 2016-09-01 02:42 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-09-14 22:26 - 2016-09-01 02:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-09-14 22:26 - 2016-09-01 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-09-14 22:26 - 2016-09-01 02:38 - 01316352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-09-14 22:26 - 2016-09-01 02:25 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-09-14 22:26 - 2016-09-01 02:24 - 02894336 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-09-14 22:26 - 2016-09-01 02:24 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-09-14 22:26 - 2016-09-01 02:24 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-09-14 22:26 - 2016-09-01 02:24 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-09-14 22:26 - 2016-09-01 02:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-09-14 22:26 - 2016-09-01 02:16 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-09-14 22:26 - 2016-09-01 02:15 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-09-14 22:26 - 2016-09-01 02:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-09-14 22:26 - 2016-09-01 02:11 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-09-14 22:26 - 2016-09-01 02:11 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-09-14 22:26 - 2016-09-01 02:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-09-14 22:26 - 2016-09-01 02:10 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-09-14 22:26 - 2016-09-01 02:06 - 06047232 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-09-14 22:26 - 2016-09-01 02:03 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-09-14 22:26 - 2016-09-01 01:59 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-09-14 22:26 - 2016-09-01 01:51 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-09-14 22:26 - 2016-09-01 01:50 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-09-14 22:26 - 2016-09-01 01:47 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-09-14 22:26 - 2016-09-01 01:46 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-09-14 22:26 - 2016-09-01 01:44 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-09-14 22:26 - 2016-09-01 01:42 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-09-14 22:26 - 2016-09-01 01:31 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-09-14 22:26 - 2016-09-01 01:29 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-09-14 22:26 - 2016-09-01 01:28 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-09-14 22:26 - 2016-09-01 01:27 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-09-14 22:26 - 2016-09-01 01:26 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-09-14 22:26 - 2016-09-01 01:15 - 15411712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-09-14 22:26 - 2016-09-01 01:10 - 02921472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-09-14 22:26 - 2016-09-01 00:58 - 01550848 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-09-14 22:26 - 2016-09-01 00:47 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-09-14 22:26 - 2016-08-12 18:26 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-09-14 22:26 - 2016-08-12 18:26 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-09-14 22:26 - 2016-08-12 18:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-09-14 22:25 - 2016-09-02 17:40 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-09-14 22:25 - 2016-09-02 17:35 - 05548264 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-09-14 22:25 - 2016-09-02 17:35 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-09-14 22:25 - 2016-09-02 17:35 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-09-14 22:25 - 2016-09-02 17:35 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-09-14 22:25 - 2016-09-02 17:34 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-09-14 22:25 - 2016-09-02 17:31 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:21 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-09-14 22:25 - 2016-09-02 17:21 - 03944680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-09-14 22:25 - 2016-09-02 17:18 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 17:02 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-09-14 22:25 - 2016-09-02 17:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-09-14 22:25 - 2016-09-02 17:02 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-09-14 22:25 - 2016-09-02 17:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-09-14 22:25 - 2016-09-02 16:58 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-09-14 22:25 - 2016-09-02 16:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-09-14 22:25 - 2016-09-02 16:55 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-09-14 22:25 - 2016-09-02 16:54 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-09-14 22:25 - 2016-09-02 16:54 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-09-14 22:25 - 2016-09-02 16:53 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-09-14 22:25 - 2016-09-02 16:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-09-14 22:25 - 2016-09-02 16:53 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-09-14 22:25 - 2016-09-02 16:49 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-09-14 22:25 - 2016-09-02 16:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-09-14 22:25 - 2016-09-02 16:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-09-14 22:25 - 2016-09-02 16:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-09-14 22:25 - 2016-09-02 16:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-09-14 22:25 - 2016-09-02 16:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 16:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 16:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-09-14 22:25 - 2016-09-02 16:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-09-14 22:25 - 2016-05-14 00:09 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-09-14 22:25 - 2016-05-14 00:09 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-09-14 22:25 - 2016-05-14 00:09 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-09-14 22:25 - 2016-05-14 00:07 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-09-14 22:25 - 2016-05-13 23:55 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-09-14 22:25 - 2016-05-13 23:53 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-09-14 22:25 - 2016-05-13 23:53 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-09-14 22:25 - 2016-05-13 23:52 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-09-14 22:25 - 2016-05-13 23:52 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-09-14 22:25 - 2016-05-13 23:52 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-09-14 22:25 - 2016-05-13 23:52 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-09-14 22:25 - 2016-05-13 23:50 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-09-14 22:25 - 2016-05-13 23:38 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-09-14 22:25 - 2016-05-13 23:38 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-09-14 22:25 - 2016-05-13 23:38 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-09-14 22:25 - 2016-05-13 23:38 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-09-14 22:25 - 2016-05-12 19:14 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-09-14 22:25 - 2016-05-12 17:18 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-09-14 22:25 - 2016-05-12 17:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-09-14 22:25 - 2016-05-04 19:21 - 00114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-09-14 22:25 - 2016-05-04 19:17 - 03244032 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-09-14 22:25 - 2016-05-04 19:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-09-14 22:25 - 2016-05-04 19:17 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-09-14 22:25 - 2016-05-04 19:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-09-14 22:25 - 2016-05-04 19:16 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-09-14 22:25 - 2016-05-04 17:04 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-09-14 22:25 - 2016-05-04 16:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-09-14 22:24 - 2016-08-16 19:36 - 01009152 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-09-14 22:24 - 2016-08-16 04:48 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-09-14 22:24 - 2016-08-16 04:35 - 03218432 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-09-14 22:24 - 2016-08-06 17:31 - 00877056 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-09-14 22:24 - 2016-08-06 17:15 - 00581632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-09-14 22:24 - 2016-07-07 17:36 - 01896168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-09-14 22:24 - 2016-07-07 17:36 - 00377576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-09-14 22:24 - 2016-07-07 17:36 - 00287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-09-14 22:24 - 2016-07-07 17:08 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2016-09-14 22:24 - 2016-07-01 17:31 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-09-14 22:24 - 2016-07-01 17:31 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2016-09-14 22:24 - 2016-07-01 17:13 - 00741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-09-14 22:24 - 2016-07-01 17:13 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2016-09-14 22:24 - 2016-05-04 19:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-09-14 22:24 - 2016-05-04 19:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-09-14 20:53 - 2016-09-14 20:53 - 00000000 ____D C:\Users\Agando\.QtWebEngineProcess
2016-09-14 20:53 - 2016-09-14 20:53 - 00000000 ____D C:\Users\Agando\.Origin
2016-09-14 18:52 - 2016-09-14 18:52 - 00000000 ____D C:\Users\Agando\AppData\Roaming\SUPERAntiSpyware.com
2016-09-14 18:52 - 2016-09-14 18:52 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2016-09-14 18:52 - 2016-09-14 18:52 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2016-09-14 18:52 - 2016-09-14 18:52 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2016-09-14 18:44 - 2016-09-14 18:44 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD
2016-09-14 18:44 - 2016-09-14 18:44 - 00000000 ____D C:\Program Files (x86)\AMD
2016-09-14 18:40 - 2016-09-14 18:41 - 00000000 ____D C:\Program Files (x86)\CPU Thermometer
2016-09-14 18:40 - 2016-09-14 18:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPU Thermometer
2016-09-13 18:11 - 2016-09-30 21:51 - 00000000 ____D C:\Users\Public\Speedup Sessions
2016-09-07 22:26 - 2016-09-07 22:26 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2016-09-07 19:41 - 2016-09-07 19:41 - 00000000 ____D C:\Windows\system32\DAX2
2016-09-07 19:40 - 2016-06-03 08:29 - 72520720 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2016-09-07 19:40 - 2016-06-03 08:29 - 24399544 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRenderAVX64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 24310136 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRender64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 17359672 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioCapture64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 15202040 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 14057256 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 13122584 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 12988352 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO4064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 10512448 _____ (Intel Corporation) C:\Windows\system32\IntelSSTAPO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 07172920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 07096192 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 06402432 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV3apo.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 06264640 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64AF3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 06064046 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2016-09-07 19:40 - 2016-06-03 08:29 - 05804772 _____ C:\Windows\system32\Drivers\rtvienna.dat
2016-09-07 19:40 - 2016-06-03 08:29 - 05776968 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 05593624 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 05339552 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 05111040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2016-09-07 19:40 - 2016-06-03 08:29 - 03299824 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE2.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 03283248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 03282544 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 03199744 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 03181209 _____ C:\Windows\system32\Drivers\rtkSSTsetting.dat
2016-09-07 19:40 - 2016-06-03 08:29 - 03096248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02895104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2016-09-07 19:40 - 2016-06-03 08:29 - 02825104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO7064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02726416 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02477520 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02437760 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02190992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02110600 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02060032 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 02050184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01965816 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01959608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64AF3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01847888 _____ (DTS, Inc.) C:\Windows\system32\slcnt64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01780624 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01608128 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01591064 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01508936 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01435144 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01422928 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01382240 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01355616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01336544 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaeapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01334384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01213664 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01186832 _____ (Intel Corporation) C:\Windows\system32\IntelSstCApoPropPage.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01166168 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01061120 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01023240 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 01003864 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00999856 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00965032 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00962056 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tosasfapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00931624 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00927424 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00923744 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00873472 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00743968 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00727440 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00716112 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00708312 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00689888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00678184 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00677672 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00618192 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00589072 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SECOMN32.DLL
2016-09-07 19:40 - 2016-06-03 08:29 - 00586424 _____ (Conexant Systems, Inc.) C:\Windows\system32\CAF64APO2.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00570096 _____ (Intel Corporation) C:\Windows\system32\tbb_waves.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00532384 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00524680 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaemaxapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00514528 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00504312 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00500560 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00472312 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00467168 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00450120 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00447728 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00447104 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\toseaeapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00445400 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00441272 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00428232 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00416512 _____ (Harman) C:\Windows\system32\HMUI.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00387320 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00381416 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00371456 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00366128 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\HMAPO.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00362056 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64AF3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00360352 _____ (Harman) C:\Windows\system32\HMClariFi.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00343712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00341152 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00341152 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00330568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00327456 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00310424 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64F3.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00272720 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00258872 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00253904 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00253872 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00252880 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00231920 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00221968 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00214832 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00209536 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00203848 _____ (Harman) C:\Windows\system32\HMHVS.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00192984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00190936 _____ (Harman) C:\Windows\system32\HMEQ_Voice.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00190936 _____ (Harman) C:\Windows\system32\HMEQ.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00179600 _____ (Harman) C:\Windows\system32\HMLimiter.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00166208 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00158704 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00154368 _____ (Harman) C:\Windows\system32\HarmanAudioInterface.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00151792 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00134208 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00122328 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00110984 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00090920 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00088352 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00088320 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00084616 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00083632 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00075544 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00065832 _____ (Conexant System, Inc.) C:\Windows\system32\Caf64api.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00023696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2016-09-07 19:40 - 2016-06-03 08:29 - 00007756 _____ C:\Windows\system32\cxapo.prop
2016-09-07 19:40 - 2016-06-03 08:29 - 00005604 _____ C:\Windows\system32\cxapo.lncs
2016-09-07 19:39 - 2016-06-03 08:29 - 00574760 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2016-09-07 19:39 - 2016-06-03 08:29 - 00118600 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2016-09-07 19:39 - 2016-06-03 08:29 - 00118592 _____ C:\Windows\system32\AcpiServiceVnA64.dll
2016-09-07 19:39 - 2016-06-03 08:29 - 00105312 _____ C:\Windows\system32\audioLibVc.dll
2016-09-02 22:26 - 2016-08-25 22:50 - 00133056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-09-02 22:26 - 2016-05-04 04:23 - 00129824 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-09-02 22:26 - 2016-05-04 04:22 - 00130848 _____ C:\Windows\system32\vulkan-1.dll
2016-09-02 22:26 - 2016-05-04 04:22 - 00045344 _____ C:\Windows\system32\vulkaninfo.exe
2016-09-02 22:26 - 2016-05-04 04:22 - 00040224 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-09-02 22:21 - 2016-08-26 01:28 - 40070200 _____ C:\Windows\system32\nvcompiler.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 35182648 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 34801088 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 28207672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 14093368 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-09-02 22:21 - 2016-08-26 01:28 - 10865704 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 10737632 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 10278080 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 09086856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 08875408 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 08680696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 03594808 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 03160512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 01920960 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437270.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437270.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00956352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00941504 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00892864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00686896 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00575984 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00520912 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00493608 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00437696 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00436088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00408784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00390200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00223304 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-09-02 22:21 - 2016-08-26 01:28 - 00181488 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00159352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00153368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00131536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00054728 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-09-02 22:21 - 2016-08-26 01:28 - 00039731 _____ C:\Windows\system32\nvinfo.pb
2016-09-02 22:21 - 2016-08-26 01:28 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-09-02 22:21 - 2016-08-26 01:28 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2016-09-02 21:53 - 2016-09-02 21:53 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2016-09-02 20:31 - 2016-09-02 20:31 - 00000000 ____D C:\Neuer Ordner
2016-09-02 20:22 - 2016-09-30 21:50 - 00000000 ____D C:\Program Files (x86)\Steam
2016-09-02 19:53 - 2016-09-02 21:15 - 00000000 ____D C:\Program Files (x86)\Origin Games
2016-09-02 12:59 - 2015-05-05 14:01 - 01948928 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO264.dll
2016-09-02 12:58 - 2015-05-05 14:01 - 01716480 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO232.dll
2016-09-02 05:09 - 2016-09-02 05:09 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2016-08-31 15:12 - 2016-08-31 15:24 - 00000000 ____D C:\Users\Agando\Documents\Battlefield 1 Open Beta
2016-08-31 15:10 - 2016-08-31 15:10 - 00000000 ____D C:\Program Files\Common Files\EAInstaller

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-30 23:04 - 2016-04-25 19:48 - 00000000 ____D C:\Users\Agando\AppData\Local\whatpulse
2016-09-30 23:04 - 2015-03-01 12:31 - 00000000 ___RD C:\Users\Agando\Desktop\Dateien
2016-09-30 23:02 - 2015-02-26 10:20 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Origin
2016-09-30 22:21 - 2016-04-20 16:04 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-09-30 22:19 - 2015-05-30 15:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-09-30 22:00 - 2009-07-14 06:45 - 00021648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-09-30 22:00 - 2009-07-14 06:45 - 00021648 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-09-30 21:56 - 2015-04-08 13:45 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-09-30 21:52 - 2015-02-26 10:18 - 00000000 ____D C:\ProgramData\Origin
2016-09-30 21:51 - 2015-11-20 22:26 - 00000000 ____D C:\AdwCleaner
2016-09-30 21:50 - 2016-04-20 16:04 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-09-30 21:50 - 2015-02-23 13:06 - 00000000 ____D C:\ProgramData\NVIDIA
2016-09-30 21:50 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-30 12:43 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2016-09-30 12:41 - 2009-07-14 04:34 - 01048576 _____ C:\Windows\system32\config\DEFAULT.bak
2016-09-30 12:41 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2016-09-30 12:41 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2016-09-30 06:14 - 2015-04-17 19:20 - 00000000 ____D C:\Users\Agando\AppData\Roaming\SoftGrid Client
2016-09-30 06:07 - 2015-07-29 15:12 - 00000000 ____D C:\Users\Agando\Desktop\schule
2016-09-29 17:25 - 2015-04-08 13:45 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-09-29 16:13 - 2015-04-08 13:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-09-29 11:11 - 2016-03-13 15:17 - 00003192 _____ C:\Windows\System32\Tasks\HPCeeScheduleForAgando
2016-09-29 11:11 - 2016-03-13 15:17 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForAgando.job
2016-09-28 19:33 - 2015-02-23 12:41 - 00000997 _____ C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-09-28 17:40 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-09-28 17:29 - 2015-02-23 12:41 - 00000000 ____D C:\Users\Agando\AppData\Local\VirtualStore
2016-09-28 16:09 - 2016-03-06 23:27 - 00000000 ____D C:\Users\Agando\AppData\Local\CrashDumps
2016-09-28 16:09 - 2015-02-25 17:38 - 00000000 ____D C:\Windows\Minidump
2016-09-28 16:09 - 2015-02-23 12:32 - 00000000 ____D C:\Windows\Panther
2016-09-28 16:09 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-09-28 15:43 - 2015-03-14 13:44 - 00000000 ____D C:\Users\Agando\AppData\Local\ElevatedDiagnostics
2016-09-27 20:05 - 2015-07-28 18:50 - 00000000 ____D C:\Program Files (x86)\Image-Line
2016-09-26 13:33 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system
2016-09-25 21:34 - 2015-07-28 18:54 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-09-25 21:34 - 2015-07-28 18:54 - 00000000 ____D C:\Program Files\Image-Line
2016-09-25 21:00 - 2011-04-12 09:43 - 00699544 _____ C:\Windows\system32\perfh007.dat
2016-09-25 21:00 - 2011-04-12 09:43 - 00149426 _____ C:\Windows\system32\perfc007.dat
2016-09-25 21:00 - 2009-07-14 07:13 - 01620900 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-24 23:26 - 2016-07-17 19:26 - 00000946 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-09-24 10:09 - 2015-02-28 18:04 - 00000000 ____D C:\ProgramData\Package Cache
2016-09-24 10:08 - 2015-02-23 12:41 - 00000000 ____D C:\Users\Agando
2016-09-22 20:21 - 2016-07-09 18:48 - 00003870 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1468082936
2016-09-22 20:21 - 2015-07-28 18:54 - 00000000 ____D C:\Program Files (x86)\Opera
2016-09-21 16:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-09-21 15:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-09-21 15:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism
2016-09-21 15:25 - 2015-07-16 14:52 - 00000000 ____D C:\ProgramData\Skype
2016-09-21 15:19 - 2015-02-23 12:47 - 01594244 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-09-20 21:06 - 2015-02-28 20:40 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-09-20 21:05 - 2016-02-28 22:26 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2016-09-20 14:22 - 2015-02-26 10:18 - 00000000 ____D C:\Program Files (x86)\Origin
2016-09-20 12:15 - 2015-02-26 10:20 - 00000000 ____D C:\Users\Agando\AppData\Local\Origin
2016-09-18 23:14 - 2016-03-02 14:05 - 00000000 ____D C:\Users\Agando\AppData\Local\Battle.net
2016-09-18 10:14 - 2016-03-02 14:05 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-09-17 14:37 - 2015-02-28 16:11 - 00000000 ____D C:\Users\Agando\Documents\My Games
2016-09-17 13:45 - 2016-02-09 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-09-17 08:24 - 2016-04-20 16:04 - 00002187 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-09-16 20:49 - 2016-04-24 21:39 - 00000000 ____D C:\Program Files (x86)\Overwatch
2016-09-15 13:45 - 2009-07-14 06:45 - 00278064 _____ C:\Windows\system32\FNTCACHE.DAT
2016-09-14 22:45 - 2016-01-24 22:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-09-14 22:44 - 2016-01-24 22:17 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-09-14 22:44 - 2016-01-24 22:17 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-09-14 22:44 - 2015-02-28 01:03 - 00000000 ____D C:\Windows\system32\MRT
2016-09-14 22:36 - 2015-02-28 01:03 - 144199024 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-09-14 19:31 - 2015-02-25 22:42 - 00000000 ____D C:\Users\Agando\AppData\Local\TeamSpeak 3 Client
2016-09-14 18:43 - 2015-08-26 23:52 - 00007598 _____ C:\Users\Agando\AppData\Local\Resmon.ResmonCfg
2016-09-13 19:19 - 2016-07-17 19:26 - 00003944 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-09-13 19:19 - 2015-05-30 15:10 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-09-13 19:19 - 2015-05-30 15:10 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-09-13 19:19 - 2015-05-30 15:10 - 00000000 ____D C:\Windows\system32\Macromed
2016-09-13 19:19 - 2015-04-10 03:14 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-09-13 19:19 - 2015-04-10 03:14 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-09-13 18:11 - 2015-03-01 20:11 - 00000000 ____D C:\Program Files (x86)\Avira
2016-09-10 18:09 - 2015-06-22 18:02 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Mumble
2016-09-07 20:51 - 2015-03-03 14:51 - 00000000 ____D C:\Users\Agando\AppData\Local\Ubisoft Game Launcher
2016-09-07 19:41 - 2015-02-23 12:52 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2016-09-07 19:29 - 2015-02-23 12:51 - 00000000 ___HD C:\Program Files (x86)\Temp
2016-09-02 22:27 - 2015-02-23 13:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-09-02 22:27 - 2015-02-23 13:06 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-09-02 21:52 - 2016-02-22 20:20 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-09-02 21:52 - 2016-02-22 20:20 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2016-09-02 21:52 - 2015-03-01 13:17 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-09-02 20:25 - 2015-02-25 18:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-09-02 13:31 - 2015-02-23 12:51 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-09-02 05:17 - 2015-03-23 21:49 - 00000000 ____D C:\Users\Gast
2016-09-02 05:17 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\security
2016-09-02 05:16 - 2015-02-23 12:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-09-02 05:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2016-09-02 01:03 - 2016-04-29 20:27 - 00000000 ____D C:\Users\Agando\Documents\Overwatch
2016-09-02 01:03 - 2016-03-02 14:04 - 00000000 ____D C:\Users\Agando\AppData\Roaming\Battle.net
2016-09-02 01:03 - 2015-12-19 21:20 - 00000000 ____D C:\Windows\System32\Tasks\Hewlett-Packard
2016-09-02 01:03 - 2015-02-23 13:05 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-09-02 01:03 - 2015-02-23 12:52 - 00000000 ____D C:\Program Files\Realtek
2016-09-02 01:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2016-09-02 01:02 - 2015-02-23 13:06 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-09-02 01:01 - 2016-05-29 13:49 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-08-31 00:26 - 2016-06-21 20:49 - 00000000 ____D C:\Program Files (x86)\Overwatch Test

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-12-30 21:14 - 2007-06-18 22:20 - 1731584 _____ (Ovosoft) C:\Program Files (x86)\snapper.exe
2015-04-13 15:00 - 2015-04-13 15:00 - 0000080 _____ () C:\Users\Agando\AppData\Roaming\vibranceGUI.ini
2015-05-03 20:43 - 2015-05-03 20:43 - 0003584 _____ () C:\Users\Agando\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-09-21 14:20 - 2016-09-21 14:20 - 0000000 _____ () C:\Users\Agando\AppData\Local\Driver_LOM_8161Present.flag
2016-06-06 21:03 - 2016-06-06 21:03 - 0000872 _____ () C:\Users\Agando\AppData\Local\recently-used.xbel
2015-08-26 23:52 - 2016-09-14 18:43 - 0007598 _____ () C:\Users\Agando\AppData\Local\Resmon.ResmonCfg
2015-04-22 19:40 - 2015-04-22 19:40 - 0000057 _____ () C:\ProgramData\Ament.ini
2016-09-02 05:09 - 2016-09-02 05:09 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\Agando\AppData\Local\Temp\avgnt.exe
C:\Users\Agando\AppData\Local\Temp\libeay32.dll
C:\Users\Agando\AppData\Local\Temp\msvcr120.dll
C:\Users\Agando\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-09-25 12:40

==================== Ende von FRST.txt ============================
         
--- --- ---




Addition.txt hier: hxxp://pastebin.com/fNwXE8ik

Bzw als Download: hxxp://www.filedropper.com/addition

Alt 01.10.2016, 13:48   #8
M-K-D-B
/// TB-Ausbilder
 
Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert - Standard

Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert



Servus,



du wunderst dich, dass die Echtzeitüberwachung von Windows Defender deaktiviert ist, obwohl der Echtzeitschutz von Avira aktiv ist?

Sobald man ein AV-Programm mit Echtzeitschutz installiert (z. B. Avira, wovon ich ehrlich gesagt nicht viel halte), ist es nur logisch, dass der Echtzeitschutz von Windows Defender deaktiviert ist bzw. wird.



wir entfernen die letzten Reste und kontrollieren nochmal alles.



Hinweis: Der Suchlauf mit ESET kann länger dauern.



Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Code:
ATTFilter
start
CloseProcesses:
CMD: dir "%ProgramFiles%"
CMD: dir "%ProgramFiles(x86)%"
CMD: dir "%ProgramData%"
CMD: dir "%Appdata%"
CMD: dir "%LocalAppdata%"
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.







Schritt 2

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset







Schritt 3
Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.
  • Starte die HitmanPro.exe
  • Klicke auf
  • Entferne den Haken bei
  • Klicke auf
    und
  • Akzeptiere die Lizenzbedingungen und klicke auf
  • Klicke auf

    und auf
  • Wenn der Scan beendet wurde, nichts löschen lassen etc. sondern wähle unten links auf der Button-Leiste
    und speichere die Logdatei auf Deinem Desktop.
  • Schließe HitmanPro und poste mir das Log.

 







Schritt 4
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
  • FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.





Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?







Bitte poste mit deiner nächsten Antwort
  • die Logdatei des FRST-Fix,
  • die Logdatei von ESET,
  • die Logdatei von HitmanPro,
  • die beiden neuen Logdateien von FRST,
  • die Beantwortung der gestellten Fragen.
__________________
Gruß
M-K-D-B


==========================================================
offline vom 22.12.2018 bis 01.01.2019
==========================================================

Das Trojaner-Board unterstützen

Alt 02.10.2016, 00:15   #9
axyo
 
Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert - Standard

Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert



FRST-Fix:

Code:
ATTFilter
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 28-09-2016
durchgeführt von Agando (01-10-2016 16:35:43) Run:1
Gestartet von C:\Users\Agando\Desktop\virus
Geladene Profile: Agando (Verfügbare Profile: Agando & Gast)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
start
CloseProcesses:
CMD: dir "%ProgramFiles%"
CMD: dir "%ProgramFiles(x86)%"
CMD: dir "%ProgramData%"
CMD: dir "%Appdata%"
CMD: dir "%LocalAppdata%"
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
         
*****************

Prozess erfolgreich geschlossen.

========= dir "%ProgramFiles%" =========

 Volume in Laufwerk C: hat keine Bezeichnung.
 Volumeseriennummer: BA9C-A625

 Verzeichnis von C:\Program Files

28.09.2016  16:03    <DIR>          .
28.09.2016  16:03    <DIR>          ..
16.03.2015  15:41    <DIR>          Adware-Removal-Tool
23.02.2015  12:49    <DIR>          ATI
23.02.2015  12:49    <DIR>          ATI Technologies
17.05.2015  14:07    <DIR>          Blender Foundation
21.11.2015  13:57    <DIR>          Bonjour
28.09.2016  16:03    <DIR>          CCleaner
28.07.2015  18:54    <DIR>          Common Files
06.08.2015  13:57    <DIR>          CPUID
12.04.2011  09:55    <DIR>          DVD Maker
29.07.2015  15:28    <DIR>          Epic Games
16.05.2015  19:05    <DIR>          GIMP 2
16.04.2016  17:21    <DIR>          Highresolution Enterprises
22.04.2015  19:40    <DIR>          HP
25.09.2016  21:34    <DIR>          Image-Line
15.09.2016  13:43    <DIR>          Internet Explorer
27.04.2015  14:58    <DIR>          Java
05.03.2016  17:03    <DIR>          Logitech Gaming Software
04.08.2015  15:10    <DIR>          McAfee Security Scan
12.04.2011  09:55    <DIR>          Microsoft Games
23.02.2015  13:15    <DIR>          Microsoft Office
14.09.2016  22:44    <DIR>          Microsoft Silverlight
24.02.2016  21:24    <DIR>          mmpicker
14.07.2009  07:32    <DIR>          MSBuild
27.08.2015  15:54    <DIR>          Nem's Tools
02.09.2016  01:03    <DIR>          NVIDIA Corporation
18.05.2016  16:41    <DIR>          OBS
04.05.2015  18:58    <DIR>          paint.net
23.02.2015  12:50    <DIR>          Qualcomm Atheros
02.09.2016  01:03    <DIR>          Realtek
14.07.2009  07:32    <DIR>          Reference Assemblies
21.02.2016  17:34    <DIR>          Rockstar Games
11.01.2016  22:07    <DIR>          Siemens
14.09.2016  18:52    <DIR>          SUPERAntiSpyware
20.04.2015  22:15    <DIR>          Tracker Software
27.02.2015  22:34    <DIR>          Unity
27.02.2015  21:19    <DIR>          Windows Defender
12.04.2011  09:43    <DIR>          Windows Mail
21.09.2016  15:27    <DIR>          Windows Media Player
23.02.2015  12:41    <DIR>          Windows NT
12.04.2011  09:43    <DIR>          Windows Photo Viewer
21.11.2010  05:31    <DIR>          Windows Portable Devices
12.04.2011  09:43    <DIR>          Windows Sidebar
01.08.2015  10:32    <DIR>          WinPcap
25.02.2015  18:42    <DIR>          WinRAR
18.12.2015  20:20    <DIR>          Yamaha
               0 Datei(en),              0 Bytes
              47 Verzeichnis(se), 412.854.845.440 Bytes frei

========= Ende von CMD: =========


========= dir "%ProgramFiles(x86)%" =========

 Volume in Laufwerk C: hat keine Bezeichnung.
 Volumeseriennummer: BA9C-A625

 Verzeichnis von C:\Program Files (x86)

28.09.2016  19:33    <DIR>          .
28.09.2016  19:33    <DIR>          ..
07.09.2016  22:26    <DIR>          AGEIA Technologies
14.09.2016  18:44    <DIR>          AMD
23.02.2015  12:50    <DIR>          AMD APP
23.02.2015  12:50    <DIR>          ATI Technologies
08.08.2015  22:39    <DIR>          Audacity
30.09.2015  15:36    <DIR>          AV Voice Changer 8.2 Diamond
20.11.2015  23:13    <DIR>          AVG
16.03.2015  22:10    <DIR>          Avidemux 2.6
13.09.2016  18:11    <DIR>          Avira
21.12.2015  21:00    <DIR>          BandiMPEG1
01.10.2016  14:45    <DIR>          Battle.net
02.09.2016  21:53    <DIR>          Battlelog Web Plugins
21.11.2015  13:57    <DIR>          Bonjour
27.09.2015  16:16    <DIR>          CEVO
01.03.2015  23:13    <DIR>          Cheat Engine 6.4
30.09.2016  12:29    <DIR>          Common Files
14.09.2016  18:41    <DIR>          CPU Thermometer
23.02.2015  12:58    <DIR>          Creative
18.05.2016  16:37    <DIR>          Digipen
25.09.2016  21:34    <DIR>          DSPRobotics
23.08.2016  13:57    <DIR>          Duty Calls
19.04.2015  21:04    <DIR>          EA Games
25.02.2016  19:21    <DIR>          ElsterFormular
29.07.2015  15:29    <DIR>          Epic Games
22.01.2016  19:55    <DIR>          Exact Audio Copy
16.03.2015  15:31    <DIR>          Futuremark
29.07.2015  15:31    <DIR>          GameforgeLive
03.05.2015  21:09    <DIR>          GIF Viewer
20.04.2016  16:04    <DIR>          Google
19.12.2015  21:25    <DIR>          Hewlett-Packard
26.09.2015  00:12    <DIR>          Hi-Rez Studios
22.04.2015  19:40    <DIR>          HP
27.09.2016  20:05    <DIR>          Image-Line
15.09.2016  13:42    <DIR>          Internet Explorer
20.11.2015  23:23    <DIR>          IObit
04.12.2015  23:24    <DIR>          JAM Software
27.04.2015  14:59    <DIR>          Java
20.02.2016  22:37    <DIR>          Landwirtschafts Simulator 2011
10.07.2016  01:09    <DIR>           Malwarebytes Anti-Malware 
29.06.2015  23:51    <DIR>          Microsoft Application Virtualization Client
29.06.2015  23:50    <DIR>          Microsoft ASP.NET
01.03.2015  12:36    <DIR>          Microsoft Chart Controls
23.02.2015  13:15    <DIR>          Microsoft Office
14.09.2016  22:44    <DIR>          Microsoft Silverlight
28.06.2015  23:14    <DIR>          Microsoft SQL Server Compact Edition
02.07.2015  16:01    <DIR>          Microsoft XNA
23.02.2015  12:45    <DIR>          Microsoft.NET
03.05.2015  20:29    <DIR>          MiniTool Partition Wizard Free 9.0
11.06.2016  10:33    <DIR>          Mozilla Firefox
11.06.2016  10:33    <DIR>          Mozilla Maintenance Service
14.07.2009  07:32    <DIR>          MSBuild
16.04.2015  15:48    <DIR>          MSECache
20.09.2016  21:05    <DIR>          MSI Afterburner
05.08.2016  14:25    <DIR>          Mumble
01.08.2015  10:40    <DIR>          Nmap
30.10.2015  22:51    <DIR>          Notepad++
02.09.2016  01:02    <DIR>          NVIDIA Corporation
18.05.2016  16:41    <DIR>          OBS
28.08.2016  16:30    <DIR>          OpenAL
22.09.2016  20:21    <DIR>          Opera
20.09.2016  14:22    <DIR>          Origin
02.09.2016  21:15    <DIR>          Origin Games
01.10.2016  14:46    <DIR>          Overwatch
31.08.2016  00:26    <DIR>          Overwatch Test
26.09.2015  16:30    <DIR>          Project64 2.0
27.11.2015  14:25    <DIR>          QuickTime
27.07.2015  16:23    <DIR>          RandyRants.com
27.08.2015  21:01    <DIR>          Razer
02.09.2016  13:31    <DIR>          Realtek
14.07.2009  07:32    <DIR>          Reference Assemblies
20.09.2016  21:06    <DIR>          RivaTuner Statistics Server
21.02.2016  17:34    <DIR>          Rockstar Games
10.12.2015  17:43    <DIR>          Skiller PRO
11.12.2015  00:10    <DIR>          Skiller PRO+
18.06.2007  22:20         1.731.584 snapper.exe
20.11.2015  22:12    <DIR>          Sony
01.10.2016  14:45    <DIR>          Steam
23.09.2015  21:27    <DIR>          SystemRequirementsLab
01.05.2016  16:08    <DIR>          Tag
20.11.2015  22:30    <DIR>          TempInstaller
11.11.2015  17:52    <DIR>          Tipp10
09.03.2015  18:14    <DIR>          Ubisoft
21.11.2015  00:15    <DIR>          UniqueApps
28.08.2015  15:51    <DIR>          Valve
23.02.2015  13:00    <DIR>          VIA
26.05.2015  14:41    <DIR>          Vodafone
20.12.2015  22:26    <DIR>          VstPlugins
02.09.2016  01:01    <DIR>          VulkanRT
25.04.2016  19:48    <DIR>          WhatPulse2
27.02.2015  21:19    <DIR>          Windows Defender
28.06.2015  23:14    <DIR>          Windows Live
12.04.2011  09:43    <DIR>          Windows Mail
21.09.2016  15:27    <DIR>          Windows Media Player
14.07.2009  07:32    <DIR>          Windows NT
12.04.2011  09:43    <DIR>          Windows Photo Viewer
21.11.2010  05:31    <DIR>          Windows Portable Devices
12.04.2011  09:43    <DIR>          Windows Sidebar
               1 Datei(en),      1.731.584 Bytes
              98 Verzeichnis(se), 412.854.841.344 Bytes frei

========= Ende von CMD: =========


========= dir "%ProgramData%" =========

 Volume in Laufwerk C: hat keine Bezeichnung.
 Volumeseriennummer: BA9C-A625

 Verzeichnis von C:\ProgramData

30.09.2016  23:05    <DIR>          .
30.09.2016  23:05    <DIR>          ..
20.03.2016  00:21    <DIR>          .mono
24.11.2015  15:27    <DIR>          Adobe
23.02.2015  12:49    <DIR>          AMD
22.04.2015  19:40                57 Ament.ini
21.11.2015  13:54    <DIR>          Apple
27.11.2015  14:24    <DIR>          Apple Computer
03.01.2016  17:31    <DIR>          ATI
20.11.2015  23:13    <DIR>          Avg
09.02.2016  21:21    <DIR>          Avira
30.09.2015  15:31    <DIR>          Avnex
02.03.2016  14:04    <DIR>          Battle.net
02.03.2016  14:05    <DIR>          Blizzard Entertainment
28.08.2016  17:21    <DIR>          boost_interprocess
27.09.2015  16:18    <DIR>          Celavimus
23.02.2015  12:59    <DIR>          Creative
23.02.2015  12:50    <DIR>          Downloaded Installations
04.04.2015  01:48    <DIR>          Electronic Arts
25.02.2016  19:22    <DIR>          elsterformular
19.04.2015  17:56    <DIR>          Epic
26.05.2015  14:41    <DIR>          FLEXnet
19.12.2015  21:47    <DIR>          Hewlett-Packard
26.09.2015  00:12    <DIR>          Hi-Rez Studios
19.12.2015  21:31    <DIR>          HP
21.11.2015  13:56    <DIR>          IObit
03.05.2015  20:31    <DIR>          iSkysoft
17.05.2015  14:04    <DIR>          IsolatedStorage
03.04.2015  20:55    <DIR>          Logishrd
26.05.2015  14:41    <DIR>          Macrovision
29.09.2016  16:13    <DIR>          Malwarebytes
29.09.2016  17:24    <DIR>          Malwarebytes' Anti-Malware (portable)
30.05.2015  15:10    <DIR>          McAfee
21.11.2015  13:57    <DIR>          McAfee Security Scan
20.11.2015  23:03    <DIR>          MFAData
11.12.2015  21:42    <DIR>          Microsoft Help
19.04.2015  21:02    <DIR>          Mozilla
07.02.2016  23:56    <DIR>          Nexon
07.02.2016  23:57    <DIR>          NexonEU
01.10.2016  09:45    <DIR>          NVIDIA
02.09.2016  22:27    <DIR>          NVIDIA Corporation
27.04.2015  15:05    <DIR>          Oracle
01.10.2016  09:48    <DIR>          Origin
24.09.2016  10:09    <DIR>          Package Cache
23.02.2015  12:51    <DIR>          Qualcomm
27.08.2015  21:01    <DIR>          Razer
20.03.2015  16:36    <DIR>          Rockstar Games
21.09.2016  15:25    <DIR>          Skype
25.02.2015  19:22    <DIR>          Sun
14.09.2016  18:52    <DIR>          SUPERAntiSpyware.com
17.04.2015  21:58    <DIR>          VirtualizedApplications
26.05.2015  14:41    <DIR>          Vodafone
               1 Datei(en),             57 Bytes
              51 Verzeichnis(se), 412.854.972.416 Bytes frei

========= Ende von CMD: =========


========= dir "%Appdata%" =========

 Volume in Laufwerk C: hat keine Bezeichnung.
 Volumeseriennummer: BA9C-A625

 Verzeichnis von C:\Users\Agando\AppData\Roaming

30.09.2016  23:05    <DIR>          .
30.09.2016  23:05    <DIR>          ..
16.03.2016  21:08    <DIR>          .minecraft
20.03.2016  00:21    <DIR>          .mono
22.01.2016  19:55    <DIR>          AccurateRip
28.02.2015  00:56    <DIR>          Adobe
28.11.2015  13:02    <DIR>          Apple Computer
17.09.2016  09:02    <DIR>          Atari
03.01.2016  17:31    <DIR>          ATI
03.07.2016  20:00    <DIR>          Audacity
04.08.2015  20:58    <DIR>          avidemux
09.02.2016  21:27    <DIR>          Avira
02.09.2016  01:03    <DIR>          Battle.net
26.01.2016  13:20    <DIR>          bsnes
10.10.2015  20:54    <DIR>          com.playsaurus.heroclicker
11.05.2015  00:23    <DIR>          DesktopReminder
18.05.2016  16:40    <DIR>          digipen
04.01.2016  03:43    <DIR>          DVDVideoSoft
22.01.2016  19:55    <DIR>          EAC
16.02.2016  16:49    <DIR>          Edgemeal Software
25.02.2016  19:22    <DIR>          elsterformular
20.07.2015  16:19    <DIR>          eve Updater
26.05.2015  14:49    <DIR>          FLEXnet
25.09.2016  21:34    <DIR>          FlowStone
03.05.2015  20:52    <DIR>          HandBrake
19.12.2015  21:26    <DIR>          Hewlett-Packard
16.04.2016  17:18    <DIR>          Highresolution Enterprises
19.12.2015  21:24    <DIR>          hpqLog
23.02.2015  12:41    <DIR>          Identities
28.07.2015  18:54    <DIR>          Image-Line
11.12.2015  00:10    <DIR>          InstallShield
21.11.2015  13:55    <DIR>          IObit
17.05.2015  14:04    <DIR>          IsolatedStorage
04.12.2015  23:24    <DIR>          JAM Software
02.03.2015  17:59    <DIR>          java
03.04.2015  20:59    <DIR>          Logishrd
28.02.2015  00:50    <DIR>          Logitech
12.04.2015  13:16    <DIR>          Macromedia
12.04.2011  09:54    <DIR>          Media Center Programs
19.04.2015  21:02    <DIR>          Mozilla
10.09.2016  18:09    <DIR>          Mumble
25.11.2015  20:02    <DIR>          Notepad++
17.03.2015  19:21    <DIR>          NVIDIA
25.03.2016  15:27    <DIR>          OBS
28.07.2015  18:55    <DIR>          Opera Software
01.10.2016  16:33    <DIR>          Origin
28.08.2015  01:28    <DIR>          ProcessLasso
30.09.2015  15:12    <DIR>          Screaming Bee
08.06.2015  15:42    <DIR>          Shooter
24.01.2016  22:25    <DIR>          Skype
30.09.2016  06:14    <DIR>          SoftGrid Client
20.11.2015  22:12    <DIR>          Sony
14.09.2016  18:52    <DIR>          SUPERAntiSpyware.com
11.11.2015  18:02    <DIR>          TIPP10
23.02.2015  13:16    <DIR>          TP
15.04.2016  15:42    <DIR>          TubeTycoon
27.02.2015  23:10    <DIR>          Unity
21.11.2015  13:58    <DIR>          vibranceGUI
13.04.2015  15:00                80 vibranceGUI.ini
26.05.2015  14:41    <DIR>          Vodafone
19.04.2015  00:10    <DIR>          Wargaming.net
28.08.2016  16:31    <DIR>          Waveform
25.02.2015  18:42    <DIR>          WinRAR
               1 Datei(en),             80 Bytes
              63 Verzeichnis(se), 412.854.972.416 Bytes frei

========= Ende von CMD: =========


========= dir "%LocalAppdata%" =========

 Volume in Laufwerk C: hat keine Bezeichnung.
 Volumeseriennummer: BA9C-A625

 Verzeichnis von C:\Users\Agando\AppData\Local

01.10.2016  09:47    <DIR>          .
01.10.2016  09:47    <DIR>          ..
17.07.2016  19:26    <DIR>          Adobe
07.02.2016  23:38    <DIR>          Akamai
01.04.2016  15:43    <DIR>          AltF4Space
03.01.2016  17:31    <DIR>          AMD
27.11.2015  14:24    <DIR>          Apple
08.12.2015  07:30    <DIR>          Apple Computer
25.02.2015  18:11    <DIR>          Apps
20.03.2016  18:47    <DIR>          Arktos
30.09.2016  12:34    <DIR>          assembly
03.01.2016  17:31    <DIR>          ATI
20.11.2015  22:56    <DIR>          Avg
20.11.2015  23:10    <DIR>          AvgSetupLog
09.02.2016  21:21    <DIR>          Avira
01.10.2016  16:23    <DIR>          Battle.net
02.03.2016  14:05    <DIR>          Blizzard Entertainment
27.08.2016  20:34    <DIR>          CallofDuty4MW
22.07.2015  13:43    <DIR>          CEF
02.03.2015  00:07    <DIR>          Chromium
28.09.2016  16:09    <DIR>          CrashDumps
01.10.2016  09:46    <DIR>          CrashRpt
17.12.2015  22:24    <DIR>          Creative
20.12.2015  00:21    <DIR>          Daybreak Game Company
03.05.2015  20:43             3.584 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
20.04.2016  16:04    <DIR>          Deployment
09.05.2016  18:55    <DIR>          Diagnostics
18.05.2016  16:40    <DIR>          digipen
18.12.2015  20:19    <DIR>          Downloaded Installations
21.09.2016  14:20                 0 Driver_LOM_8161Present.flag
17.05.2016  21:15    <DIR>          EdgeOfReality
28.09.2016  15:43    <DIR>          ElevatedDiagnostics
19.04.2015  17:56    <DIR>          EpicGamesLauncher
14.05.2016  17:42    <DIR>          FalloutNV
16.05.2015  19:07    <DIR>          fontconfig
09.02.2016  21:20            61.968 GDIPFONTCACHEV1.DAT
16.05.2015  19:07    <DIR>          gegl-0.2
25.09.2016  22:09    <DIR>          GeoLocator
12.09.2015  13:30    <DIR>          Google
17.10.2015  20:10    <DIR>          gtk-2.0
01.06.2015  10:18    <DIR>          GWX
31.01.2016  12:53    <DIR>          Hewlett-Packard
22.04.2015  19:41    <DIR>          HP
11.05.2015  00:18    <DIR>          InstallAware Installation Information
03.05.2015  20:31    <DIR>          iSkysoft
03.04.2015  21:02    <DIR>          Logitech
10.02.2016  16:37    <DIR>          Macromedia
20.11.2015  23:02    <DIR>          MFAData
20.09.2016  20:26    <DIR>          Microsoft
11.12.2015  21:42    <DIR>          Microsoft Help
19.04.2015  21:02    <DIR>          Mozilla
03.03.2015  16:12    <DIR>          My Games
25.08.2015  17:16    <DIR>          Nem's Tools
29.05.2016  13:39    <DIR>          NVIDIA
26.03.2016  14:35    <DIR>          NVIDIA Corporation
07.02.2016  23:54    <DIR>          NXEPassportClient
14.04.2015  22:53    <DIR>          openvr
28.07.2015  18:55    <DIR>          Opera Software
20.09.2016  12:15    <DIR>          Origin
04.05.2015  18:59    <DIR>          paint.net
31.03.2015  22:14    <DIR>          PAYDAY
10.03.2015  19:53    <DIR>          PAYDAY 2
02.04.2015  23:30    <DIR>          PAYDAY 2 - Backup
11.05.2015  00:18    <DIR>          Polenter_-_Software_Solut
23.02.2015  12:59    <DIR>          Programs
19.04.2015  21:25    <DIR>          PunkBuster
27.08.2015  21:01    <DIR>          Razer
27.08.2015  17:55    <DIR>          Razer_Inc
06.06.2016  21:03               872 recently-used.xbel
19.10.2015  19:30    <DIR>          Reditr
14.09.2016  18:43             7.598 Resmon.ResmonCfg
28.07.2016  14:54    <DIR>          Roblox
24.08.2016  15:28    <DIR>          Savage
26.02.2015  12:47    <DIR>          SCE
16.07.2015  14:53    <DIR>          Skype
17.04.2015  19:20    <DIR>          SoftGrid Client
20.11.2015  22:12    <DIR>          Sony
23.02.2016  18:57    <DIR>          spacegame
18.01.2016  17:17    <DIR>          Steam
14.09.2016  19:31    <DIR>          TeamSpeak 3 Client
01.10.2016  16:35    <DIR>          Temp
20.11.2015  23:06    <DIR>          Tempfolder
07.09.2016  20:51    <DIR>          Ubisoft Game Launcher
10.02.2016  15:48    <DIR>          Unity
24.08.2016  15:28    <DIR>          UnrealEngine
19.04.2015  17:56    <DIR>          UnrealEngineLauncher
28.09.2016  17:29    <DIR>          VirtualStore
01.10.2016  16:30    <DIR>          whatpulse
04.08.2015  20:58    <DIR>          Windows Live
               5 Datei(en),         74.022 Bytes
              84 Verzeichnis(se), 412.854.964.224 Bytes frei

========= Ende von CMD: =========


========= RemoveProxy: =========

"HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Schlüssel erfolgreich entfernt
HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies\\ => Wert erfolgreich entfernt
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt


========= Ende von RemoveProxy: =========


========= ipconfig /flushdns =========


Windows-IP-Konfiguration

Der DNS-Aufl”sungscache wurde geleert.

========= Ende von CMD: =========


========= netsh winsock reset =========


Der Winsock-Katalog wurde zurckgesetzt.
Sie mssen den Computer neu starten, um den Vorgang abzuschlieáen.


========= Ende von CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 4891462 B
Java, Flash, Steam htmlcache => 387022249 B
Windows/system/drivers => 84522 B
Edge => 0 B
Chrome => 14929920 B
Firefox => 18383244 B
Opera => 422655961 B

Temp, IE cache, history, cookies, recent:
Default => 33125 B
Public => 0 B
ProgramData => 0 B
systemprofile => 83687 B
systemprofile32 => 72596 B
LocalService => 66228 B
NetworkService => 66228 B
Agando => 136015533 B
Gast => 23858 B

RecycleBin => 28769690 B
EmptyTemp: => 974.2 MB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende von Fixlog 16:36:32 ====
         
ESET:

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=9b389aea87373243b6db0a69b6a2df19
# end=init
# utc_time=2016-10-01 02:41:31
# local_time=2016-10-01 04:41:31 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 30931
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=9b389aea87373243b6db0a69b6a2df19
# end=updated
# utc_time=2016-10-01 02:43:24
# local_time=2016-10-01 04:43:24 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=9b389aea87373243b6db0a69b6a2df19
# engine=30931
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-10-01 05:26:49
# local_time=2016-10-01 07:26:49 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Antivirus'
# compatibility_mode=1815 16777213 100 98 12581 26193744 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 20310327 226972659 0 0
# scanned=457001
# found=1
# cleaned=1
# scan_time=9805
sh=02A40E3489799CCA06F3793FFCB9225E65F53601 ft=1 fh=fdeeb0affd325f87 vn="MSIL/FakeTool.PS Trojaner (Gesäubert durch Löschen)" ac=C fn="C:\Program Files\Adware-Removal-Tool\ARTP3.exe"
         
HitmanPro:

Code:
ATTFilter
Code:
ATTFilter
HitmanPro 3.7.14.280
www.hitmanpro.com

   Computer name . . . . : AGANDO-PC
   Windows . . . . . . . : 6.1.1.7601.X64/6
   User name . . . . . . : Agando-PC\Agando
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Free

   Scan date . . . . . . : 2016-10-01 23:49:22
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 6m 48s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 20

   Objects scanned . . . : 1.978.236
   Files scanned . . . . : 55.470
   Remnants scanned  . . : 691.128 files / 1.231.638 keys

Suspicious files ____________________________________________________________

   C:\Users\Agando\AppData\Local\PunkBuster\BF4\pb\PnkBstrK.sys
      Size . . . . . . . : 138.648 bytes
      Age  . . . . . . . : 546.9 days (2015-04-04 01:52:36)
      Entropy  . . . . . : 7.7
      SHA-256  . . . . . : DE86A451D282866613EE18CF668C2E962ABCB09FA51F7FF0C98405418A19EA81
      RSA Key Size . . . : 2048
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : 22.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program contains PE structure anomalies. This is not typical for most programs.
         The file is a device driver. Device drivers run as trusted (highly privileged) code.
         Program is code signed with a valid Authenticode certificate.

   C:\Users\Agando\AppData\Local\PunkBuster\BLR\pb\pbcl.dll
      Size . . . . . . . : 949.190 bytes
      Age  . . . . . . . : 580.0 days (2015-03-02 00:07:20)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : DAF43E93528BEEECC015FA98D6EE6D6FD6D19A049321E47A65665144E4511F41
      Fuzzy  . . . . . . : 29.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program contains PE structure anomalies. This is not typical for most programs.

   C:\Users\Agando\AppData\Local\PunkBuster\BLR\pb\PnkBstrK.sys
      Size . . . . . . . : 140.360 bytes
      Age  . . . . . . . : 580.0 days (2015-03-02 00:07:30)
      Entropy  . . . . . : 7.8
      SHA-256  . . . . . : 0F41B3843E2D2D1BB1ACF8B7CAA293309CC1CF8CF478B1AC86DD6BB214928DC4
      RSA Key Size . . . : 2048
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : 22.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program contains PE structure anomalies. This is not typical for most programs.
         The file is a device driver. Device drivers run as trusted (highly privileged) code.
         Program is code signed with a valid Authenticode certificate.

   C:\Users\Agando\AppData\Local\PunkBuster\FC3\pb\pbcl.dll
      Size . . . . . . . : 953.886 bytes
      Age  . . . . . . . : 578.4 days (2015-03-03 15:18:29)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 6D5E2CD4A7A43EB00B600BA783AD3BEE6B817C030A40600D40367173A6ECEB13
      Fuzzy  . . . . . . : 29.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program contains PE structure anomalies. This is not typical for most programs.

   C:\Users\Agando\AppData\Local\PunkBuster\FC3\pb\pbcls.dll
      Size . . . . . . . : 953.886 bytes
      Age  . . . . . . . : 578.4 days (2015-03-03 15:18:29)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 6D5E2CD4A7A43EB00B600BA783AD3BEE6B817C030A40600D40367173A6ECEB13
      Fuzzy  . . . . . . : 29.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program contains PE structure anomalies. This is not typical for most programs.

   C:\Users\Agando\AppData\Local\PunkBuster\FC3\pb\PnkBstrK.sys
      Size . . . . . . . : 138.032 bytes
      Age  . . . . . . . : 578.4 days (2015-03-03 15:18:39)
      Entropy  . . . . . : 7.8
      SHA-256  . . . . . : ABAF3FACF01E10E4C685F79C3B9E5D2118B3CF8629C4277EBE035B2A10474148
      RSA Key Size . . . : 2048
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : 22.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program contains PE structure anomalies. This is not typical for most programs.
         The file is a device driver. Device drivers run as trusted (highly privileged) code.
         Program is code signed with a valid Authenticode certificate.

   C:\Users\Agando\AppData\Local\PunkBuster\HEROES\pb\dll\wc002323.dll
      Size . . . . . . . : 956.648 bytes
      Age  . . . . . . . : 531.1 days (2015-04-19 21:32:33)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : E88505208F2EA9F150F451C73EEFE57D54A7F50E9D24CB9E647D95A1E826A052
      RSA Key Size . . . : 2048
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : 22.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program contains PE structure anomalies. This is not typical for most programs.
         Program is code signed with a valid Authenticode certificate.

   C:\Users\Agando\AppData\Local\PunkBuster\HEROES\pb\pbcl.dll
      Size . . . . . . . : 956.648 bytes
      Age  . . . . . . . : 445.5 days (2015-07-14 12:23:12)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : E88505208F2EA9F150F451C73EEFE57D54A7F50E9D24CB9E647D95A1E826A052
      RSA Key Size . . . : 2048
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : 22.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program contains PE structure anomalies. This is not typical for most programs.
         Program is code signed with a valid Authenticode certificate.

   C:\Users\Agando\AppData\Local\PunkBuster\HEROES\pb\pbclold.dll
      Size . . . . . . . : 956.648 bytes
      Age  . . . . . . . : 531.1 days (2015-04-19 21:25:28)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : E88505208F2EA9F150F451C73EEFE57D54A7F50E9D24CB9E647D95A1E826A052
      RSA Key Size . . . : 2048
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : 22.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program contains PE structure anomalies. This is not typical for most programs.
         Program is code signed with a valid Authenticode certificate.

   C:\Users\Agando\AppData\Local\PunkBuster\HEROES\pb\PnkBstrK.sys
      Size . . . . . . . : 139.648 bytes
      Age  . . . . . . . : 531.1 days (2015-04-19 21:27:43)
      Entropy  . . . . . : 7.8
      SHA-256  . . . . . : 164A5F0B9153B75F8955C44BFAE12B594B8D53922AE090132695FF2DAD191C8A
      RSA Key Size . . . : 2048
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : 22.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program contains PE structure anomalies. This is not typical for most programs.
         The file is a device driver. Device drivers run as trusted (highly privileged) code.
         Program is code signed with a valid Authenticode certificate.

   C:\Users\Agando\AppData\Local\PunkBuster\HOS\pb\pbcl.dll
      Size . . . . . . . : 951.877 bytes
      Age  . . . . . . . : 222.1 days (2016-02-22 20:30:02)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 833CB80463E9181DBCC24242B392B70E6E80DD72A07B79727AB9936FCADEDD2A
      Fuzzy  . . . . . . : 29.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program contains PE structure anomalies. This is not typical for most programs.

   C:\Users\Agando\AppData\Local\PunkBuster\HOS\pb\pbclold.dll
      Size . . . . . . . : 951.877 bytes
      Age  . . . . . . . : 580.4 days (2015-03-01 13:34:45)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 833CB80463E9181DBCC24242B392B70E6E80DD72A07B79727AB9936FCADEDD2A
      Fuzzy  . . . . . . : 29.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program contains PE structure anomalies. This is not typical for most programs.

   C:\Users\Agando\AppData\Local\PunkBuster\HOS\pb\PnkBstrK.sys
      Size . . . . . . . : 140.304 bytes
      Age  . . . . . . . : 580.4 days (2015-03-01 13:34:55)
      Entropy  . . . . . : 7.7
      SHA-256  . . . . . : E7BAC3CC5AD8D1B11C55BD39437326883D86657CE8EB61606C3BED5710945660
      RSA Key Size . . . : 2048
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : 22.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program contains PE structure anomalies. This is not typical for most programs.
         The file is a device driver. Device drivers run as trusted (highly privileged) code.
         Program is code signed with a valid Authenticode certificate.

   C:\Users\Agando\Desktop\virus\FRST64.exe
      Size . . . . . . . : 2.404.352 bytes
      Age  . . . . . . . : 3.2 days (2016-09-28 17:59:18)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 003671152E9C80D316767EC62EFA9A34F8F282CC80E338F13246262E5F9C529C
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.


Potential Unwanted Programs _________________________________________________

   search.snapdo.com
   C:\Users\Agando\AppData\Local\Google\Chrome\User Data\Default\Web Data

   C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS (DriverRestore)
      Size . . . . . . . : 22.200 bytes
      Age  . . . . . . . : 374.1 days (2015-09-23 21:30:24)
      Entropy  . . . . . : 6.4
      SHA-256  . . . . . : 05F052C64D192CF69A462A5EC16DDA0D43CA5D0245900C9FCB9201685A2E7748
      Product  . . . . . : DriverAgent
      Publisher  . . . . : Phoenix Technologies
      Description  . . . : DriverAgent Direct I/O for 64-bit Windows
      Version  . . . . . : 6.0
      Copyright  . . . . : EnTech Taiwan, 1997-2009
      RSA Key Size . . . : 2048
      Service  . . . . . : DrvAgent64
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -4.0
      Startup
         HKLM\SYSTEM\CurrentControlSet\Services\DrvAgent64\

   HKLM\SYSTEM\ControlSet001\services\DrvAgent64\ (DriverRestore)
   HKLM\SYSTEM\ControlSet002\services\DrvAgent64\ (DriverRestore)
   HKLM\SYSTEM\CurrentControlSet\services\DrvAgent64\ (DriverRestore)
   HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Software\IM\ (Sweetpacks)
         
FRST und Addition.txt:

FRST: hxxp://pastebin.com/G3jrQSi5

Addition: hxxp://pastebin.com/qVjdyxgX

Download: hxxp://www.filedropper.com/logs_7


Blaues Popup ist immer noch da, sonst ist alles normal.

Alt 02.10.2016, 13:52   #10
M-K-D-B
/// TB-Ausbilder
 
Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert - Standard

Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert



Servus,






Schritt 1
Setze Google Chrome nach dieser Anleitung zurück.





Schritt 2
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Code:
ATTFilter
start
CloseProcesses:
S3 X6va060; \??\C:\Windows\SysWOW64\Drivers\X6va060 [X]
S3 X6va062; \??\C:\Windows\SysWOW64\Drivers\X6va062 [X]
C:\Program Files\Adware-Removal-Tool
Task: {1867A3AB-618C-4C12-9FF0-971B250A0DC9} - System32\Tasks\{D5902AEE-71FA-44DA-92AC-B9B5A5062745} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{6734CA10-8FB8-4C7F-B8C7-75317C617DC5}\setup.exe" -c -runfromtemp -l0x0409
DeleteKey: HKLM\SYSTEM\CurrentControlSet\services\DrvAgent64
DeleteKey: HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Software\IM
Unlock: HKEY_LOCAL_MACHINE\SOFTWARE\Policies
Unlock: HKEY_CURRENT_USER\SOFTWARE\Policies
CMD: reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /s
CMD: reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies" /s
CMD: reg query "HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows Defender" /s
CMD: reg query "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies" /s
Reboot:
end
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.









Bitte poste mit deiner nächsten Antwort
  • die Logdatei des FRST-Fix.
__________________
Gruß
M-K-D-B


==========================================================
offline vom 22.12.2018 bis 01.01.2019
==========================================================

Das Trojaner-Board unterstützen

Alt 02.10.2016, 14:42   #11
axyo
 
Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert - Standard

Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert



Code:
ATTFilter
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 28-09-2016
durchgeführt von Agando (02-10-2016 14:38:12) Run:2
Gestartet von C:\Users\Agando\Desktop\virus
Geladene Profile: Agando (Verfügbare Profile: Agando & Gast)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
start
CloseProcesses:
S3 X6va060; \??\C:\Windows\SysWOW64\Drivers\X6va060 [X]
S3 X6va062; \??\C:\Windows\SysWOW64\Drivers\X6va062 [X]
C:\Program Files\Adware-Removal-Tool
Task: {1867A3AB-618C-4C12-9FF0-971B250A0DC9} - System32\Tasks\{D5902AEE-71FA-44DA-92AC-B9B5A5062745} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{6734CA10-8FB8-4C7F-B8C7-75317C617DC5}\setup.exe" -c -runfromtemp -l0x0409
DeleteKey: HKLM\SYSTEM\CurrentControlSet\services\DrvAgent64
DeleteKey: HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Software\IM
Unlock: HKEY_LOCAL_MACHINE\SOFTWARE\Policies
Unlock: HKEY_CURRENT_USER\SOFTWARE\Policies
CMD: reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /s
CMD: reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies" /s
CMD: reg query "HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows Defender" /s
CMD: reg query "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies" /s
Reboot:
end
         
*****************

Prozess erfolgreich geschlossen.
X6va060 => Dienst erfolgreich entfernt
X6va062 => Dienst erfolgreich entfernt
C:\Program Files\Adware-Removal-Tool => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1867A3AB-618C-4C12-9FF0-971B250A0DC9}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1867A3AB-618C-4C12-9FF0-971B250A0DC9}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{D5902AEE-71FA-44DA-92AC-B9B5A5062745} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D5902AEE-71FA-44DA-92AC-B9B5A5062745}" => Schlüssel erfolgreich entfernt
HKLM\SYSTEM\CurrentControlSet\services\DrvAgent64 => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKLM\SYSTEM\CurrentControlSet\services\DrvAgent64 => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Software\IM => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKU\S-1-5-21-3320435249-1176308213-2412890335-1000\Software\IM => Schlüssel erfolgreich entfernt
"HKEY_LOCAL_MACHINE\SOFTWARE\Policies" => Schlüssel wurde entsperrt
"HKEY_CURRENT_USER\SOFTWARE\Policies" => Schlüssel wurde entsperrt

========= reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /s =========


HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
    DisableAntiSpyware    REG_DWORD    0x1

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet
    SpyNetReporting    REG_DWORD    0x0
    SubmitSamplesConsent    REG_DWORD    0x2


========= Ende von CMD: =========


========= reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies" /s =========


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop
    NoAddingComponents    REG_DWORD    0x1
    NoComponents    REG_DWORD    0x1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments
    ScanWithAntiVirus    REG_DWORD    0x3

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
    NoDrives    REG_DWORD    0x0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\run

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum
    {BDEADF00-C265-11D0-BCED-00A0C90AB50F}    REG_DWORD    0x1
    {6DFD7C5C-2451-11d3-A299-00C04F8EF6AF}    REG_DWORD    0x40000021
    {0DF44EAA-FF21-4412-828E-260A8728E7F1}    REG_DWORD    0x20

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
    ConsentPromptBehaviorAdmin    REG_DWORD    0x5
    ConsentPromptBehaviorUser    REG_DWORD    0x3
    EnableInstallerDetection    REG_DWORD    0x1
    EnableLUA    REG_DWORD    0x1
    EnableSecureUIAPaths    REG_DWORD    0x1
    EnableUIADesktopToggle    REG_DWORD    0x0
    EnableVirtualization    REG_DWORD    0x1
    PromptOnSecureDesktop    REG_DWORD    0x1
    ValidateAdminCodeSignatures    REG_DWORD    0x0
    dontdisplaylastusername    REG_DWORD    0x0
    legalnoticecaption    REG_SZ    
    legalnoticetext    REG_SZ    
    scforceoption    REG_DWORD    0x0
    shutdownwithoutlogon    REG_DWORD    0x1
    undockwithoutlogon    REG_DWORD    0x1
    FilterAdministratorToken    REG_DWORD    0x0
    DisableRegistryTools    REG_DWORD    0x0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\UIPI

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\UIPI\Clipboard

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\UIPI\Clipboard\ExceptionFormats
    CF_TEXT    REG_DWORD    0x1
    CF_BITMAP    REG_DWORD    0x2
    CF_OEMTEXT    REG_DWORD    0x7
    CF_DIB    REG_DWORD    0x8
    CF_PALETTE    REG_DWORD    0x9
    CF_UNICODETEXT    REG_DWORD    0xd
    CF_DIBV5    REG_DWORD    0x11

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Uninstall

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate


========= Ende von CMD: =========


========= reg query "HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows Defender" /s =========

FEHLER: Der angegebene Registrierungsschlssel bzw. Wert wurde nicht gefunden.

========= Ende von CMD: =========


========= reg query "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies" /s =========


HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Associations

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
    NoDriveTypeAutoRun    REG_BINARY    00000000
    NoDrives    REG_DWORD    0x0

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Network

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate


========= Ende von CMD: =========



Das System musste neu gestartet werden.

==== Ende von Fixlog 14:38:15 ====
         

Alt 03.10.2016, 10:46   #12
M-K-D-B
/// TB-Ausbilder
 
Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert - Standard

Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert



Servus,




Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Code:
ATTFilter
start
CloseProcesses:
Unlock: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
CMD: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /f
CMD: reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 0 /f
reboot:
end
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.







Schritt 2
Downloade dir bitte Farbar Service Scanner Farbar Service Scanner
  • Starte das Tool mit Doppelklick auf die FSS.exe
  • Gehe sicher, dass folgende Optionen angehakt sind.
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center/Action Center
    • Windows Update
    • Windows Defender
    • Other Services
  • Klicke auf Scan.
  • Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.









Bitte poste mit deiner nächsten Antwort
  • die Logdatei des FRST-Fix,
  • die Logdatei von FSS.
__________________
Gruß
M-K-D-B


==========================================================
offline vom 22.12.2018 bis 01.01.2019
==========================================================

Das Trojaner-Board unterstützen

Alt 03.10.2016, 19:48   #13
axyo
 
Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert - Standard

Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert



Code:
ATTFilter
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 28-09-2016
durchgeführt von Agando (03-10-2016 19:40:28) Run:3
Gestartet von C:\Users\Agando\Desktop\virus
Geladene Profile: Agando (Verfügbare Profile: Agando & Gast)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
start
CloseProcesses:
Unlock: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
CMD: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /f
CMD: reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 0 /f
reboot:
end
*****************

Prozess erfolgreich geschlossen.
"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" => Schlüssel wurde entsperrt

========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /f =========

Der Vorgang wurde erfolgreich beendet.


========= Ende von CMD: =========


========= reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 0 /f =========

Der Vorgang wurde erfolgreich beendet.


========= Ende von CMD: =========



Das System musste neu gestartet werden.

==== Ende von Fixlog 19:40:28 ====
         

Code:
ATTFilter
Farbar Service Scanner Version: 27-01-2016
Ran by Agando (administrator) on 03-10-2016 at 19:45:50
Running from "C:\Users\Agando\Desktop\virus"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy: 
==================


System Restore:
============

System Restore Policy: 
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy: 
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy: 
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed


**** End of log ****
         

Alt 03.10.2016, 20:58   #14
M-K-D-B
/// TB-Ausbilder
 
Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert - Standard

Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert



Servus,


da Avira installiert ist, wird der Windows Defender automatisch deaktiviert.

Bedeutet:
Willst du, dass der Windows Defender läuft, musst du zuvor Avira über die Systemsteuerung deinstallieren.







Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber.
Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.





Cleanup:
Alle Logs gepostet? Dann lade Dir bitte DelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.
Hinweis:
DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.





Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:
Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.




Sofern du noch unentschieden bist, verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

   
 

Microsoft Security Essentials (MSE) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE entschieden hast, brauchst du nicht extra MSE zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür.




Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.




Optional:
Adblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren.
NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.

Lade Software von einem sauberen Portal wie .
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .




Abschließend noch ein paar grundsätzliche Bemerkungen:
  • Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
  • Lade keine Software von Chip, Softonic oder SourceForge. Die dort angebotene Software wird häufig mit einem sog. "Installer" verteilt, mit dem man sich nur unerwünschte Software oder Adware installiert.
  • Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Selbst Microsoft unterstützt sog. Registry-Cleaner nicht. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.




Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.
__________________
Gruß
M-K-D-B


==========================================================
offline vom 22.12.2018 bis 01.01.2019
==========================================================

Das Trojaner-Board unterstützen

Alt 03.10.2016, 21:07   #15
axyo
 
Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert - Standard

Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert



Scheint jetzt alles in Ordnung zu sein, das blaue Popup habe ich auch schon seit einer Weile nicht mehr gesehen. Danke für die Hilfe!

Antwort

Themen zu Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert
.dll, administrator, antivirus, avira, bonjour, defender, error, explorer, flash player, hijack, home, homepage, installation, mozilla, prozesse, realtek, schutz, security, services.exe, software, svchost.exe, system, teamspeak, windows, winlogon.exe



Ähnliche Themen: Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert


  1. Windows 10: "Run time error 217 at..." PC-Peripherie- & Boot-Troubles
    Log-Analyse und Auswertung - 13.08.2016 (6)
  2. "Windows Defender Configuration has changed"
    Plagegeister aller Art und deren Bekämpfung - 26.07.2016 (22)
  3. Windows 10: Defender meldet "Malware erkannt" Worm:Win32/Gamarue.I
    Log-Analyse und Auswertung - 25.04.2016 (14)
  4. Neuer Schutz: Microsoft kündigt "Threat Protection" für Windows 10 an
    Nachrichten - 10.03.2016 (0)
  5. Sicherheitscenter deaktiviert und Virus "ADWARE/InstallCo.HA" "ADWARE/bProtect.D" "TR/Mevade.A.95" gefunden
    Log-Analyse und Auswertung - 10.09.2013 (10)
  6. "Deutsche Post(eMail-Anhang)" Alle "EXE(Programme)" werden blockiert "WIN 7 Defender"
    Plagegeister aller Art und deren Bekämpfung - 27.12.2012 (3)
  7. gefälschte Windows Scan-Software "Security Protection"
    Plagegeister aller Art und deren Bekämpfung - 06.07.2011 (14)
  8. gefälschte Windows Scan-Software "Security Protection"
    Log-Analyse und Auswertung - 19.06.2011 (51)
  9. "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen
    Plagegeister aller Art und deren Bekämpfung - 17.06.2011 (28)
  10. Trojaner(?) - "Backdoor:Win32/Cycbot.B" fund durch Windows Defender
    Plagegeister aller Art und deren Bekämpfung - 19.03.2011 (23)
  11. TR/Crypt.XPACK.Gen und "Windows System Defender"
    Log-Analyse und Auswertung - 12.11.2009 (2)
  12. Real-Time AntiSpy soll Installation von Spyware im Betriebssystem verhindern
    Antiviren-, Firewall- und andere Schutzprogramme - 29.03.2009 (38)
  13. "error cleaner" "privacy protector" "spyware&malware protection"
    Plagegeister aller Art und deren Bekämpfung - 28.06.2008 (7)
  14. "error cleaner" "privacy protector" "spyware und malware protection"
    Plagegeister aller Art und deren Bekämpfung - 28.06.2008 (2)
  15. Adminsperre für ADMIN (mich) ("error cleaner" "privacy protector")
    Mülltonne - 23.06.2008 (1)
  16. Fehlerhäufung (Virenscan unmöglich, "windows hard error", usw)
    Plagegeister aller Art und deren Bekämpfung - 29.12.2007 (2)
  17. "Real-time scanning does not work"...Problem Kaspersky mit Windows Service Pack 2?
    Antiviren-, Firewall- und andere Schutzprogramme - 01.09.2004 (3)

Zum Thema Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert - Hallo, Seit gestern bekomme ich in extrem unregelmäßigen Abständen ein blaues Pop Up Fenster, welches sich nach ca. einer Sekunde wieder schließt. Ich kann in der Zeit immer nur einen - Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert...
Archiv
Du betrachtest: Win 7: Windows Defender error, "Real Time Protection" automatisch deaktiviert auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.