Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Exploit:JS/Meadgive.U

Exploit:JS/Meadgive.U


Log-Analyse und Auswertung: Exploit:JS/Meadgive.U

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Seite 1 von 2 1 2
Alt 12.11.2016, 14:34   #1
m1ck3y
 
Exploit:JS/Meadgive.U - Standard

Exploit:JS/Meadgive.U


Exploit:JS/Meadgive.U

Hallo Leute,

Ich bräuchte wieder mal eure Hilfe. Windows Defender hat mir heute Schadsoftware gemeldet, obwohl es Anti Malewarebytes nicht erkannt hat. Habe den Trojaner oder was es auch immer ist gegoogelt, allerdings findet man nicht viel, nur paar Sachen auf englisch, wobei jedoch dabei steht It cannot seem to be removed. Könnt ihr mir bitte helfen?

lg

Alt 12.11.2016, 15:19   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Exploit:JS/Meadgive.U - Standard

Exploit:JS/Meadgive.U


Bitte vollständige Meldungen posten. Einfach nur der Schädlingsname reicht nicht.

Schau im WD im Verlauf bitte richtig nach.
__________________

__________________
Alt 12.11.2016, 15:21   #3
m1ck3y
 
Exploit:JS/Meadgive.U - Standard

Exploit:JS/Meadgive.U


Das ist leider alles was mir der Windows Defender gegeben hat unter Details.
__________________
Alt 12.11.2016, 15:27   #4
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Exploit:JS/Meadgive.U - Standard

Exploit:JS/Meadgive.U


Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)




Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 12.11.2016, 15:31   #5
m1ck3y
 
Exploit:JS/Meadgive.U - Standard

Exploit:JS/Meadgive.U


Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2016
durchgeführt von Mickey (Administrator) auf DESKTOP-AEGGCVJ (12-11-2016 15:29:20)
Gestartet von F:\Downloads Mickey\mal
Geladene Profile: Mickey &  (Verfügbare Profile: defaultuser0 & Mickey & Lejla)
Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(AppWork GmbH) C:\Users\Mickey\AppData\Local\JDownloader 2.0\JDownloader2.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(VideoLAN) C:\Program Files\VideoLAN\VLC\vlc.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe


==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [MouseDriver] => C:\WINDOWS\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-29] (Microsoft Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-10-28] (Apple Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-755493514-3334125225-602857030-1001\...\Run: [VLC Updater] => C:\Program Files (x86)\VLC Updater\vlc-updater.exe [360776 2016-11-12] ()
HKU\S-1-5-21-755493514-3334125225-602857030-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-755493514-3334125225-602857030-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [VLC Updater] => C:\Program Files (x86)\VLC Updater\vlc-updater.exe [360776 2016-11-12] ()
HKU\S-1-5-21-755493514-3334125225-602857030-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [AdobeBridge] => [X]

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{2f7f52f5-0d19-4509-969a-a2d7678b8e7d}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{dfae5735-28ad-4166-a956-2ba4d9fd185f}: [DhcpNameServer] 172.20.10.1

Internet Explorer:
==================
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-04-22] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 1brmdnm5.default
FF ProfilePath: C:\Users\Mickey\AppData\Roaming\Mozilla\Firefox\Profiles\1brmdnm5.default [2016-11-12]
FF Homepage: Mozilla\Firefox\Profiles\1brmdnm5.default -> google.at
FF Extension: (Ghostery) - C:\Users\Mickey\AppData\Roaming\Mozilla\Firefox\Profiles\1brmdnm5.default\Extensions\firefox@ghostery.com.xpi [2016-10-08]
FF Extension: (NoScript) - C:\Users\Mickey\AppData\Roaming\Mozilla\Firefox\Profiles\1brmdnm5.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-10-08]
FF Extension: (Adblock Plus) - C:\Users\Mickey\AppData\Roaming\Mozilla\Firefox\Profiles\1brmdnm5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-10-28]
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-11-10] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-11-10] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-12-02] (Adobe Systems)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-04-22] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\Microsoft Office\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-10-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-10-25] (NVIDIA Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-04-22] (Microsoft Corporation)

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [djhangopedggnlnicpbjklghlckmndge] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [458296 2016-10-25] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [458296 2016-10-25] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-10-25] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1165368 2016-10-25] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2117128 2016-11-08] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2178576 2016-11-08] (Electronic Arts)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [36504 2015-06-22] (VIA Technologies, Inc.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-11-12] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\drivers\ASACPI.sys [17280 2013-05-17] ()
S3 Netaapl; C:\Windows\System32\drivers\netaapl64.sys [23040 2016-03-28] (Apple Inc.) [Datei ist nicht signiert]
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_848dea456d3c865e\nvlddmkm.sys [14159928 2016-10-26] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [29240 2016-10-25] (NVIDIA Corporation)
S3 NVSWCFilter; C:\Windows\System32\drivers\nvswcfilter.sys [28344 2016-05-09] (Windows (R) Win 7 DDK provider)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47672 2016-10-25] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek                                            )
R3 t_mouse.sys; C:\Windows\System32\drivers\t_mouse.sys [6144 2013-04-09] ()
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-06-17] (Apple, Inc.) [Datei ist nicht signiert]
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 WirelessKeyboardFilter; C:\Windows\System32\drivers\WirelessKeyboardFilter.sys [49896 2016-07-22] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-11-12 15:29 - 2016-11-12 15:29 - 00000000 ____D C:\FRST
2016-11-12 13:41 - 2016-11-12 13:41 - 00004004 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-12 13:41 - 2016-11-12 13:41 - 00003976 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-12 13:41 - 2016-11-12 13:41 - 00003940 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-12 13:41 - 2016-11-12 13:41 - 00003914 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-12 13:41 - 2016-11-12 13:41 - 00003752 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-12 13:41 - 2016-11-12 13:41 - 00003710 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-12 13:41 - 2016-11-12 13:41 - 00000000 ____D C:\Windows\LastGood.Tmp
2016-11-12 13:41 - 2016-10-25 21:21 - 01854008 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2016-11-12 13:41 - 2016-10-25 21:21 - 00106040 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2016-11-12 13:41 - 2016-10-25 21:21 - 00095800 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2016-11-12 13:41 - 2016-10-25 21:21 - 00047672 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2016-11-12 13:27 - 2016-11-12 13:38 - 00001136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-11-12 13:27 - 2016-11-12 13:38 - 00001063 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-11-10 15:40 - 2016-11-10 15:40 - 00003992 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1475928435
2016-11-09 15:31 - 2016-10-29 00:56 - 00828408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-11-09 15:31 - 2016-10-29 00:56 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-09 11:08 - 2016-11-02 13:01 - 00484584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-11-09 11:08 - 2016-11-02 13:01 - 00315744 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-11-09 11:08 - 2016-11-02 12:22 - 01570672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-11-09 11:08 - 2016-11-02 12:22 - 00601712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-11-09 11:08 - 2016-11-02 12:20 - 00590960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-11-09 11:08 - 2016-11-02 12:13 - 01883784 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-11-09 11:08 - 2016-11-02 12:13 - 00773720 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-11-09 11:08 - 2016-11-02 12:12 - 02255712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-11-09 11:08 - 2016-11-02 12:12 - 00376672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-11-09 11:08 - 2016-11-02 12:12 - 00341344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-11-09 11:08 - 2016-11-02 12:10 - 02323728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-11-09 11:08 - 2016-11-02 12:09 - 02257104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-11-09 11:08 - 2016-11-02 12:08 - 00602464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2016-11-09 11:08 - 2016-11-02 12:08 - 00576408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2016-11-09 11:08 - 2016-11-02 12:08 - 00186424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\weretw.dll
2016-11-09 11:08 - 2016-11-02 12:05 - 06657176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-11-09 11:08 - 2016-11-02 12:05 - 03892352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-11-09 11:08 - 2016-11-02 12:05 - 00959112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-11-09 11:08 - 2016-11-02 12:05 - 00951904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-11-09 11:08 - 2016-11-02 12:05 - 00405856 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-11-09 11:08 - 2016-11-02 12:04 - 04312248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-11-09 11:08 - 2016-11-02 12:03 - 00714592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2016-11-09 11:08 - 2016-11-02 12:02 - 00682816 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-11-09 11:08 - 2016-11-02 12:02 - 00238056 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2016-11-09 11:08 - 2016-11-02 12:01 - 01415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2016-11-09 11:08 - 2016-11-02 12:01 - 01263856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-11-09 11:08 - 2016-11-02 12:01 - 00545936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2016-11-09 11:08 - 2016-11-02 12:01 - 00276832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll
2016-11-09 11:08 - 2016-11-02 12:00 - 08156080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2016-11-09 11:08 - 2016-11-02 12:00 - 01274712 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-11-09 11:08 - 2016-11-02 12:00 - 00534096 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-11-09 11:08 - 2016-11-02 11:59 - 04673304 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-11-09 11:08 - 2016-11-02 11:50 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
2016-11-09 11:08 - 2016-11-02 11:49 - 00147968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2016-11-09 11:08 - 2016-11-02 11:49 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-11-09 11:08 - 2016-11-02 11:48 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-11-09 11:08 - 2016-11-02 11:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-11-09 11:08 - 2016-11-02 11:47 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-11-09 11:08 - 2016-11-02 11:46 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininetlui.dll
2016-11-09 11:08 - 2016-11-02 11:44 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2016-11-09 11:08 - 2016-11-02 11:44 - 00089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthExt.dll
2016-11-09 11:08 - 2016-11-02 11:43 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2016-11-09 11:08 - 2016-11-02 11:42 - 00632832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll
2016-11-09 11:08 - 2016-11-02 11:42 - 00549376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenterCPL.dll
2016-11-09 11:08 - 2016-11-02 11:42 - 00506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2016-11-09 11:08 - 2016-11-02 11:42 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2016-11-09 11:08 - 2016-11-02 11:40 - 00896512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontext.dll
2016-11-09 11:08 - 2016-11-02 11:40 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\indexeddbserver.dll
2016-11-09 11:08 - 2016-11-02 11:39 - 00465920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll
2016-11-09 11:08 - 2016-11-02 11:39 - 00348672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
2016-11-09 11:08 - 2016-11-02 11:39 - 00236544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2016-11-09 11:08 - 2016-11-02 11:38 - 00760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appwiz.cpl
2016-11-09 11:08 - 2016-11-02 11:37 - 19415040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-11-09 11:08 - 2016-11-02 11:37 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe
2016-11-09 11:08 - 2016-11-02 11:36 - 07626752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-11-09 11:08 - 2016-11-02 11:36 - 00415744 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe
2016-11-09 11:08 - 2016-11-02 11:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2016-11-09 11:08 - 2016-11-02 11:33 - 12349952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-11-09 11:08 - 2016-11-02 11:33 - 03307520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2016-11-09 11:08 - 2016-11-02 11:32 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\efsext.dll
2016-11-09 11:08 - 2016-11-02 11:31 - 01228288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2016-11-09 11:08 - 2016-11-02 11:31 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\WpcTok.exe
2016-11-09 11:08 - 2016-11-02 11:31 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-11-09 11:08 - 2016-11-02 11:31 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2016-11-09 11:08 - 2016-11-02 11:31 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-11-09 11:08 - 2016-11-02 11:30 - 09131008 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-11-09 11:08 - 2016-11-02 11:30 - 00567296 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2016-11-09 11:08 - 2016-11-02 11:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2016-11-09 11:08 - 2016-11-02 11:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2016-11-09 11:08 - 2016-11-02 11:29 - 07469056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-11-09 11:08 - 2016-11-02 11:29 - 00884224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-11-09 11:08 - 2016-11-02 11:29 - 00336896 _____ (Microsoft Corporation) C:\Windows\system32\NetworkBindingEngineMigPlugin.dll
2016-11-09 11:08 - 2016-11-02 11:29 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\mfsensorgroup.dll
2016-11-09 11:08 - 2016-11-02 11:29 - 00122368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NPSM.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 04423680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00411136 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00274432 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00240640 _____ (Microsoft Corporation) C:\Windows\system32\NetworkDesktopSettings.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\chartv.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-11-09 11:08 - 2016-11-02 11:27 - 02458112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themecpl.dll
2016-11-09 11:08 - 2016-11-02 11:27 - 01388544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2016-11-09 11:08 - 2016-11-02 11:27 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\WlanMediaManager.dll
2016-11-09 11:08 - 2016-11-02 11:27 - 00580608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hgcpl.dll
2016-11-09 11:08 - 2016-11-02 11:27 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2016-11-09 11:08 - 2016-11-02 11:27 - 00495104 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2016-11-09 11:08 - 2016-11-02 11:27 - 00422400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 02747392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 02484736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 00912896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 00712192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 00579072 _____ (Microsoft Corporation) C:\Windows\system32\ddraw.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 00388608 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 00278016 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-11-09 11:08 - 2016-11-02 11:25 - 02998272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2016-11-09 11:08 - 2016-11-02 11:25 - 01556480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2016-11-09 11:08 - 2016-11-02 11:25 - 00655872 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2016-11-09 11:08 - 2016-11-02 11:25 - 00496128 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.UserAccountsHandlers.dll
2016-11-09 11:08 - 2016-11-02 11:24 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
2016-11-09 11:08 - 2016-11-02 11:23 - 03106304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2016-11-09 11:08 - 2016-11-02 11:23 - 02104320 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2016-11-09 11:08 - 2016-11-02 11:23 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-11-09 11:08 - 2016-11-02 11:22 - 13441024 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-11-09 11:08 - 2016-11-02 11:22 - 04749312 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-11-09 11:08 - 2016-11-02 11:22 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-11-09 11:08 - 2016-11-02 11:21 - 00942080 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-11-09 11:08 - 2016-11-02 11:19 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2016-11-09 11:08 - 2016-11-02 11:19 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\NPSM.dll
2016-11-09 11:08 - 2016-11-02 11:19 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\chartv.dll
2016-11-09 11:08 - 2016-11-02 11:19 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-11-09 11:08 - 2016-11-02 11:18 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2016-11-09 11:08 - 2016-11-02 11:18 - 00836608 _____ (Microsoft Corporation) C:\Windows\system32\WpcRefreshTask.dll
2016-11-09 11:08 - 2016-11-02 11:18 - 00779776 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2016-11-09 11:08 - 2016-11-02 11:17 - 01282048 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-11-09 11:08 - 2016-11-02 11:17 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2016-11-09 11:08 - 2016-11-02 11:17 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2016-11-09 11:08 - 2016-11-02 11:17 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2016-11-09 11:08 - 2016-11-02 11:16 - 03400192 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2016-11-09 11:08 - 2016-11-02 11:16 - 03133440 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-11-09 11:08 - 2016-11-02 11:16 - 02512384 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2016-11-09 11:08 - 2016-11-02 11:16 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2016-11-09 11:08 - 2016-11-02 11:16 - 00881664 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-11-09 11:08 - 2016-11-02 11:16 - 00629248 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
2016-11-09 11:08 - 2016-11-02 11:16 - 00579072 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
2016-11-09 11:08 - 2016-11-02 11:16 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2016-11-09 11:08 - 2016-11-02 11:15 - 02611200 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-11-09 11:08 - 2016-11-02 11:15 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-11-09 11:08 - 2016-11-02 11:15 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2016-11-09 11:08 - 2016-11-02 11:14 - 01726976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-11-09 11:08 - 2016-11-02 11:13 - 03496960 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2016-11-09 11:08 - 2016-11-02 09:20 - 00446896 _____ C:\Windows\system32\ApnDatabase.xml
2016-11-09 11:07 - 2016-11-02 12:20 - 00378720 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-11-09 11:07 - 2016-11-02 12:15 - 01051112 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-11-09 11:07 - 2016-11-02 12:15 - 00894096 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-11-09 11:07 - 2016-11-02 12:14 - 07816544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-11-09 11:07 - 2016-11-02 12:13 - 01354320 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-11-09 11:07 - 2016-11-02 12:13 - 01173496 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-11-09 11:07 - 2016-11-02 12:13 - 00423776 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
2016-11-09 11:07 - 2016-11-02 12:08 - 00111968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2016-11-09 11:07 - 2016-11-02 12:05 - 20969928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-11-09 11:07 - 2016-11-02 12:04 - 02678056 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-11-09 11:07 - 2016-11-02 12:04 - 00596832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2016-11-09 11:07 - 2016-11-02 12:03 - 02750936 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-11-09 11:07 - 2016-11-02 12:02 - 00848736 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2016-11-09 11:07 - 2016-11-02 12:02 - 00148832 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2016-11-09 11:07 - 2016-11-02 12:01 - 01425000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2016-11-09 11:07 - 2016-11-02 12:01 - 00092512 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-11-09 11:07 - 2016-11-02 12:00 - 22223968 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-11-09 11:07 - 2016-11-02 12:00 - 04130432 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-11-09 11:07 - 2016-11-02 12:00 - 01061968 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-11-09 11:07 - 2016-11-02 11:56 - 01609920 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2016-11-09 11:07 - 2016-11-02 11:56 - 01572768 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2016-11-09 11:07 - 2016-11-02 11:56 - 01418312 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-11-09 11:07 - 2016-11-02 11:56 - 00628552 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2016-11-09 11:07 - 2016-11-02 11:56 - 00322912 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2016-11-09 11:07 - 2016-11-02 11:55 - 00048992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\iorate.sys
2016-11-09 11:07 - 2016-11-02 11:48 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efsext.dll
2016-11-09 11:07 - 2016-11-02 11:47 - 00285184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BlockedShutdown.dll
2016-11-09 11:07 - 2016-11-02 11:47 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BcastDVRHelper.dll
2016-11-09 11:07 - 2016-11-02 11:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppCapture.dll
2016-11-09 11:07 - 2016-11-02 11:45 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2016-11-09 11:07 - 2016-11-02 11:45 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BioFeedback.dll
2016-11-09 11:07 - 2016-11-02 11:45 - 00182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsensorgroup.dll
2016-11-09 11:07 - 2016-11-02 11:44 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2016-11-09 11:07 - 2016-11-02 11:43 - 00731136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8.dll
2016-11-09 11:07 - 2016-11-02 11:43 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-11-09 11:07 - 2016-11-02 11:43 - 00198144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FSClient.dll
2016-11-09 11:07 - 2016-11-02 11:43 - 00126464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2016-11-09 11:07 - 2016-11-02 11:42 - 00866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Cred.dll
2016-11-09 11:07 - 2016-11-02 11:42 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2016-11-09 11:07 - 2016-11-02 11:42 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-11-09 11:07 - 2016-11-02 11:41 - 00635904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-11-09 11:07 - 2016-11-02 11:40 - 00548352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ddraw.dll
2016-11-09 11:07 - 2016-11-02 11:38 - 22563840 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-11-09 11:07 - 2016-11-02 11:36 - 19415552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-11-09 11:07 - 2016-11-02 11:36 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetailsUpdate.dll
2016-11-09 11:07 - 2016-11-02 11:35 - 00336896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
2016-11-09 11:07 - 2016-11-02 11:34 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-11-09 11:07 - 2016-11-02 11:33 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-11-09 11:07 - 2016-11-02 11:32 - 00045056 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-11-09 11:07 - 2016-11-02 11:31 - 03196416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2016-11-09 11:07 - 2016-11-02 11:31 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\BcastDVRHelper.dll
2016-11-09 11:07 - 2016-11-02 11:31 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
2016-11-09 11:07 - 2016-11-02 11:31 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll
2016-11-09 11:07 - 2016-11-02 11:31 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\wininetlui.dll
2016-11-09 11:07 - 2016-11-02 11:30 - 12175360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-11-09 11:07 - 2016-11-02 11:30 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll
2016-11-09 11:07 - 2016-11-02 11:30 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BioFeedback.dll
2016-11-09 11:07 - 2016-11-02 11:30 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2016-11-09 11:07 - 2016-11-02 11:30 - 00134144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetails.dll
2016-11-09 11:07 - 2016-11-02 11:29 - 03666432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-11-09 11:07 - 2016-11-02 11:29 - 01247232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2016-11-09 11:07 - 2016-11-02 11:29 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2016-11-09 11:07 - 2016-11-02 11:29 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
2016-11-09 11:07 - 2016-11-02 11:29 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-11-09 11:07 - 2016-11-02 11:29 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-11-09 11:07 - 2016-11-02 11:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-11-09 11:07 - 2016-11-02 11:28 - 06044160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-11-09 11:07 - 2016-11-02 11:28 - 00807424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2016-11-09 11:07 - 2016-11-02 11:28 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2016-11-09 11:07 - 2016-11-02 11:28 - 00690176 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2016-11-09 11:07 - 2016-11-02 11:28 - 00321024 _____ (Microsoft Corporation) C:\Windows\system32\NetworkUXBroker.dll
2016-11-09 11:07 - 2016-11-02 11:28 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-11-09 11:07 - 2016-11-02 11:28 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2016-11-09 11:07 - 2016-11-02 11:28 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-11-09 11:07 - 2016-11-02 11:27 - 23677952 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-11-09 11:07 - 2016-11-02 11:27 - 00605184 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-11-09 11:07 - 2016-11-02 11:27 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
2016-11-09 11:07 - 2016-11-02 11:26 - 01880576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2016-11-09 11:07 - 2016-11-02 11:26 - 01595392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-11-09 11:07 - 2016-11-02 11:26 - 01509376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-11-09 11:07 - 2016-11-02 11:26 - 00798208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-11-09 11:07 - 2016-11-02 11:26 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-11-09 11:07 - 2016-11-02 11:25 - 02256384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-11-09 11:07 - 2016-11-02 11:25 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2016-11-09 11:07 - 2016-11-02 11:25 - 00772608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2016-11-09 11:07 - 2016-11-02 11:25 - 00541696 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2016-11-09 11:07 - 2016-11-02 11:24 - 03778560 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-11-09 11:07 - 2016-11-02 11:23 - 02356736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
2016-11-09 11:07 - 2016-11-02 11:23 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
2016-11-09 11:07 - 2016-11-02 11:23 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetailsUpdate.dll
2016-11-09 11:07 - 2016-11-02 11:22 - 13081600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-11-09 11:07 - 2016-11-02 11:22 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2016-11-09 11:07 - 2016-11-02 11:21 - 05111296 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2016-11-09 11:07 - 2016-11-02 11:20 - 02273792 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-11-09 11:07 - 2016-11-02 11:20 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetails.dll
2016-11-09 11:07 - 2016-11-02 11:19 - 08127488 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-11-09 11:07 - 2016-11-02 11:19 - 08075776 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-11-09 11:07 - 2016-11-02 11:19 - 01586176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2016-11-09 11:07 - 2016-11-02 11:19 - 00805888 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2016-11-09 11:07 - 2016-11-02 11:18 - 01690112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2016-11-09 11:07 - 2016-11-02 11:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2016-11-09 11:07 - 2016-11-02 11:17 - 04746752 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-11-09 11:07 - 2016-11-02 11:17 - 00982528 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 04148736 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 02688512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 02669056 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 01779712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 01637888 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 01490944 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 00770560 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 00265728 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2016-11-09 11:07 - 2016-11-02 11:15 - 04708864 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-11-09 11:07 - 2016-11-02 11:15 - 03616768 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-11-09 11:07 - 2016-11-02 11:15 - 01513472 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-11-09 11:07 - 2016-11-02 11:15 - 01348608 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2016-11-09 11:07 - 2016-11-02 11:13 - 03299840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-11-09 11:07 - 2016-11-02 11:13 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2016-11-09 11:07 - 2016-11-02 10:11 - 00788624 _____ C:\Windows\SysWOW64\locale.nls
2016-11-09 11:07 - 2016-11-02 10:11 - 00788624 _____ C:\Windows\system32\locale.nls
2016-11-09 11:07 - 2016-08-02 05:30 - 00822784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2016-11-08 12:00 - 2016-11-08 12:01 - 00000000 ____D C:\Users\Lejla\Desktop\Musicfall16
2016-11-03 08:59 - 2016-11-03 08:59 - 00001453 _____ C:\Users\Lejla\Desktop\S4Studio - Verknüpfung.lnk
2016-11-03 08:58 - 2016-11-03 08:58 - 00000000 ____D C:\Users\Lejla\Documents\Sims 4 Studio
2016-11-01 18:50 - 2016-11-01 18:52 - 00000000 ____D C:\Users\Lejla\Documents\Sims4Studio_v2.7.1.3 (Jackpot)
2016-11-01 17:58 - 2016-11-01 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-11-01 17:58 - 2016-11-01 17:58 - 00000000 ____D C:\Program Files\iTunes
2016-11-01 17:58 - 2016-11-01 17:58 - 00000000 ____D C:\Program Files\iPod
2016-11-01 17:47 - 2016-11-01 17:47 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-10-31 12:18 - 2016-10-31 12:18 - 00000000 ____D C:\Users\Mickey\Documents\Benutzerdefinierte Office-Vorlagen
2016-10-28 16:27 - 2016-10-28 16:27 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-10-28 16:27 - 2016-10-25 21:00 - 00134712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-10-28 16:27 - 2016-09-09 19:25 - 00269600 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-10-28 16:27 - 2016-09-09 19:25 - 00261920 _____ C:\Windows\system32\vulkan-1.dll
2016-10-28 16:27 - 2016-09-09 19:25 - 00110880 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-10-28 16:27 - 2016-09-09 19:24 - 00125216 _____ C:\Windows\system32\vulkaninfo.exe
2016-10-28 16:24 - 2016-10-25 22:40 - 40123840 _____ C:\Windows\system32\nvcompiler.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 35224632 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 34711096 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 28202040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 10912232 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 10782952 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 10332664 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 09120512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 08913512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 08723968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 03927288 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 03468736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 02940352 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 02574784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 01953336 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437570.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437570.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 01037248 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00975296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00943552 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00897080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00802768 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00683640 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00644112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00617696 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00572888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00438208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00394704 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00390200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00384448 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00348728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00327224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00042296 _____ C:\Windows\system32\nvinfo.pb
2016-10-27 21:38 - 2016-10-27 21:38 - 00015425 _____ C:\Windows\system32\OEMDefaultAssociations.xml
2016-10-27 18:57 - 2016-10-15 05:51 - 02186896 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll
2016-10-27 18:57 - 2016-10-15 05:51 - 01637728 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-10-27 18:57 - 2016-10-15 05:51 - 01235296 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-10-27 18:57 - 2016-10-15 05:51 - 00595296 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-10-27 18:57 - 2016-10-15 05:51 - 00584032 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-10-27 18:57 - 2016-10-15 05:51 - 00322912 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-10-27 18:57 - 2016-10-15 05:51 - 00283488 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2016-10-27 18:57 - 2016-10-15 05:51 - 00232800 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-10-27 18:57 - 2016-10-15 05:51 - 00137568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-10-27 18:57 - 2016-10-15 05:51 - 00078688 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-10-27 18:57 - 2016-10-15 05:48 - 00498952 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2016-10-27 18:57 - 2016-10-15 05:43 - 01356352 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2016-10-27 18:57 - 2016-10-15 05:41 - 05622088 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-10-27 18:57 - 2016-10-15 05:38 - 00500064 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-10-27 18:57 - 2016-10-15 05:37 - 00063328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2016-10-27 18:57 - 2016-10-15 05:34 - 01969912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll
2016-10-27 18:57 - 2016-10-15 05:33 - 00455040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DolbyDecMFT.dll
2016-10-27 18:57 - 2016-10-15 05:31 - 02827864 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-10-27 18:57 - 2016-10-15 05:31 - 02190688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-10-27 18:57 - 2016-10-15 05:31 - 00658272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-10-27 18:57 - 2016-10-15 05:31 - 00402272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-10-27 18:57 - 2016-10-15 05:30 - 01851696 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-10-27 18:57 - 2016-10-15 05:30 - 00557408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2016-10-27 18:57 - 2016-10-15 05:30 - 00509280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-10-27 18:57 - 2016-10-15 05:30 - 00341936 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-10-27 18:57 - 2016-10-15 05:29 - 02913104 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-10-27 18:57 - 2016-10-15 05:29 - 01267504 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-10-27 18:57 - 2016-10-15 05:29 - 00908640 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2016-10-27 18:57 - 2016-10-15 05:29 - 00335712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-10-27 18:57 - 2016-10-15 05:29 - 00079200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2016-10-27 18:57 - 2016-10-15 05:26 - 01990648 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2016-10-27 18:57 - 2016-10-15 05:26 - 01694712 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2016-10-27 18:57 - 2016-10-15 05:26 - 01600632 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2016-10-27 18:57 - 2016-10-15 05:26 - 01472536 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-10-27 18:57 - 2016-10-15 05:26 - 00811416 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2016-10-27 18:57 - 2016-10-15 05:26 - 00691080 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2016-10-27 18:57 - 2016-10-15 05:25 - 00882680 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll
2016-10-27 18:57 - 2016-10-15 05:25 - 00742704 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2016-10-27 18:57 - 2016-10-15 05:22 - 01461200 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-10-27 18:57 - 2016-10-15 05:21 - 02537824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-10-27 18:57 - 2016-10-15 05:21 - 01100128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-10-27 18:57 - 2016-10-15 05:21 - 00584032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-10-27 18:57 - 2016-10-15 05:21 - 00292872 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2016-10-27 18:57 - 2016-10-15 05:18 - 00749920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll
2016-10-27 18:57 - 2016-10-15 05:15 - 01557808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2016-10-27 18:57 - 2016-10-15 05:15 - 00687936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2016-10-27 18:57 - 2016-10-15 05:10 - 00254656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpeffects.dll
2016-10-27 18:57 - 2016-10-15 05:06 - 05685760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-10-27 18:57 - 2016-10-15 05:05 - 07216640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-10-27 18:57 - 2016-10-15 05:01 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2016-10-27 18:57 - 2016-10-15 05:00 - 01631232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-10-27 18:57 - 2016-10-15 05:00 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2016-10-27 18:57 - 2016-10-15 05:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-10-27 18:57 - 2016-10-15 05:00 - 00018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stdole2.tlb
2016-10-27 18:57 - 2016-10-15 04:59 - 00272384 _____ (Microsoft Corporation) C:\Windows\system32\mfksproxy.dll
2016-10-27 18:57 - 2016-10-15 04:59 - 00187904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfksproxy.dll
2016-10-27 18:57 - 2016-10-15 04:59 - 00130560 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2016-10-27 18:57 - 2016-10-15 04:58 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2016-10-27 18:57 - 2016-10-15 04:57 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2016-10-27 18:57 - 2016-10-15 04:57 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2016-10-27 18:57 - 2016-10-15 04:57 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpdxm.dll
2016-10-27 18:57 - 2016-10-15 04:57 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dtdump.exe
2016-10-27 18:57 - 2016-10-15 04:56 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\esentutl.exe
2016-10-27 18:57 - 2016-10-15 04:56 - 00306688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esentutl.exe
2016-10-27 18:57 - 2016-10-15 04:56 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\AudioSrvPolicyManager.dll
2016-10-27 18:57 - 2016-10-15 04:56 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFi.dll
2016-10-27 18:57 - 2016-10-15 04:56 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2016-10-27 18:57 - 2016-10-15 04:56 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll
2016-10-27 18:57 - 2016-10-15 04:56 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2016-10-27 18:57 - 2016-10-15 04:56 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
2016-10-27 18:57 - 2016-10-15 04:56 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\OnDemandConnRouteHelper.dll
2016-10-27 18:57 - 2016-10-15 04:55 - 00329216 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
2016-10-27 18:57 - 2016-10-15 04:55 - 00265728 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-10-27 18:57 - 2016-10-15 04:55 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Flights.dll
2016-10-27 18:57 - 2016-10-15 04:55 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFi.dll
2016-10-27 18:57 - 2016-10-15 04:55 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2016-10-27 18:57 - 2016-10-15 04:54 - 00717312 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
2016-10-27 18:57 - 2016-10-15 04:54 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2016-10-27 18:57 - 2016-10-15 04:54 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2016-10-27 18:57 - 2016-10-15 04:54 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll
2016-10-27 18:57 - 2016-10-15 04:54 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoplay.dll
2016-10-27 18:57 - 2016-10-15 04:54 - 00102912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpshell.dll
2016-10-27 18:57 - 2016-10-15 04:54 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
2016-10-27 18:57 - 2016-10-15 04:53 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2016-10-27 18:57 - 2016-10-15 04:53 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-10-27 18:57 - 2016-10-15 04:52 - 06285312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-10-27 18:57 - 2016-10-15 04:52 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2016-10-27 18:57 - 2016-10-15 04:52 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll
2016-10-27 18:57 - 2016-10-15 04:52 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll
2016-10-27 18:57 - 2016-10-15 04:52 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
2016-10-27 18:57 - 2016-10-15 04:51 - 13868544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-10-27 18:57 - 2016-10-15 04:51 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2016-10-27 18:57 - 2016-10-15 04:50 - 17188352 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-10-27 18:57 - 2016-10-15 04:50 - 02716672 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-10-27 18:57 - 2016-10-15 04:50 - 02333184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-10-27 18:57 - 2016-10-15 04:50 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Bluetooth.dll
2016-10-27 18:57 - 2016-10-15 04:50 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-10-27 18:57 - 2016-10-15 04:50 - 00310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2016-10-27 18:57 - 2016-10-15 04:50 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2016-10-27 18:57 - 2016-10-15 04:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2016-10-27 18:57 - 2016-10-15 04:49 - 01913344 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2016-10-27 18:57 - 2016-10-15 04:49 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2016-10-27 18:57 - 2016-10-15 04:49 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-10-27 18:57 - 2016-10-15 04:49 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2016-10-27 18:57 - 2016-10-15 04:49 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2016-10-27 18:57 - 2016-10-15 04:49 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-10-27 18:57 - 2016-10-15 04:48 - 01554944 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2016-10-27 18:57 - 2016-10-15 04:48 - 01323008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
2016-10-27 18:57 - 2016-10-15 04:48 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2016-10-27 18:57 - 2016-10-15 04:47 - 07792640 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2016-10-27 18:57 - 2016-10-15 04:47 - 01113600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
2016-10-27 18:57 - 2016-10-15 04:47 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.BackgroundMediaPlayback.dll
2016-10-27 18:57 - 2016-10-15 04:47 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2016-10-27 18:57 - 2016-10-15 04:46 - 03287552 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-10-27 18:57 - 2016-10-15 04:46 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-10-27 18:57 - 2016-10-15 04:46 - 00471552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2016-10-27 18:57 - 2016-10-15 04:45 - 01790464 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2016-10-27 18:57 - 2016-10-15 04:45 - 00702464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.MediaPlayer.dll
2016-10-27 18:57 - 2016-10-15 04:45 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-10-27 18:57 - 2016-10-15 04:44 - 00747008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RemoteNaturalLanguage.dll
2016-10-27 18:57 - 2016-10-15 04:44 - 00470016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-10-27 18:57 - 2016-10-15 04:44 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe
2016-10-27 18:57 - 2016-10-15 04:43 - 02748928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2016-10-27 18:57 - 2016-10-15 04:43 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2016-10-27 18:57 - 2016-10-15 04:43 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll
2016-10-27 18:57 - 2016-10-15 04:43 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\iscsiwmi.dll
2016-10-27 18:57 - 2016-10-15 04:42 - 06108672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2016-10-27 18:57 - 2016-10-15 04:42 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2016-10-27 18:57 - 2016-10-15 04:42 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\Geolocation.dll
2016-10-27 18:57 - 2016-10-15 04:42 - 00459776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2016-10-27 18:57 - 2016-10-15 04:41 - 07654912 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2016-10-27 18:57 - 2016-10-15 04:41 - 05376000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2016-10-27 18:57 - 2016-10-15 04:41 - 00945664 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-10-27 18:57 - 2016-10-15 04:41 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll
2016-10-27 18:57 - 2016-10-15 04:41 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsiwmi.dll
2016-10-27 18:57 - 2016-10-15 04:39 - 04474368 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2016-10-27 18:57 - 2016-10-15 04:39 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2016-10-27 18:57 - 2016-10-15 04:39 - 01005568 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll
2016-10-27 18:57 - 2016-10-15 04:39 - 00869888 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-10-27 18:57 - 2016-10-15 04:39 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-10-27 18:57 - 2016-10-15 04:39 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2016-10-27 18:57 - 2016-10-15 04:39 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Geolocation.dll
2016-10-27 18:57 - 2016-10-15 04:38 - 01993216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-10-27 18:57 - 2016-10-15 04:38 - 00913920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2016-10-27 18:57 - 2016-10-15 04:38 - 00675840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2016-10-27 18:57 - 2016-10-15 04:37 - 01980416 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-10-27 18:57 - 2016-10-15 04:37 - 01643008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2016-10-27 18:57 - 2016-10-15 04:37 - 01029632 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2016-10-27 18:57 - 2016-10-15 04:37 - 00715264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2016-10-27 18:57 - 2016-10-15 04:37 - 00709120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2016-10-27 18:57 - 2016-10-15 04:37 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\cmifw.dll
2016-10-27 18:57 - 2016-10-15 04:36 - 02290176 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-10-27 18:57 - 2016-10-15 04:36 - 00983040 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2016-10-27 18:57 - 2016-10-15 04:36 - 00792064 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2016-10-27 18:57 - 2016-10-15 04:36 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-10-27 18:57 - 2016-10-15 04:36 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2016-10-27 18:57 - 2016-10-15 04:36 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2016-10-27 18:57 - 2016-10-15 04:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2016-10-27 18:57 - 2016-10-15 04:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmifw.dll
2016-10-27 18:57 - 2016-10-15 04:35 - 03054080 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-10-27 18:57 - 2016-10-15 04:35 - 02708992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2016-10-27 18:57 - 2016-10-15 04:35 - 02315264 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-10-27 18:57 - 2016-10-15 04:35 - 02005504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-10-27 18:57 - 2016-10-15 04:35 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2016-10-27 18:57 - 2016-10-15 04:35 - 00760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll
2016-10-27 18:57 - 2016-10-15 04:35 - 00701952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2016-10-27 18:57 - 2016-10-15 04:35 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-10-27 18:57 - 2016-10-15 04:34 - 02476544 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-10-27 18:57 - 2016-10-15 04:34 - 01840640 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-10-27 18:57 - 2016-10-15 04:34 - 00936448 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2016-10-27 18:57 - 2016-10-15 04:32 - 00886784 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-10-27 18:57 - 2016-10-15 04:31 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2016-10-27 18:57 - 2016-09-10 14:21 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\capimg.sys
2016-10-27 18:57 - 2016-08-27 06:12 - 00244816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-10-27 18:57 - 2016-08-06 05:17 - 00619368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-10-27 18:56 - 2016-10-15 05:38 - 00409952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-10-27 18:56 - 2016-10-15 05:26 - 00160096 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
2016-10-27 18:56 - 2016-10-15 05:20 - 02276736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-10-27 18:56 - 2016-10-15 05:19 - 00272720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-10-27 18:56 - 2016-10-15 05:18 - 02166232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2016-10-27 18:56 - 2016-10-15 05:18 - 01556712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-10-27 18:56 - 2016-10-15 05:18 - 00846560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2016-10-27 18:56 - 2016-10-15 05:15 - 01853776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2016-10-27 18:56 - 2016-10-15 05:15 - 01123368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-10-27 18:56 - 2016-10-15 05:11 - 01435896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-10-27 18:56 - 2016-10-15 04:59 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\stdole2.tlb
2016-10-27 18:56 - 2016-10-15 04:56 - 00327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
2016-10-27 18:56 - 2016-10-15 04:56 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-10-27 18:56 - 2016-10-15 04:55 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-10-27 18:56 - 2016-10-15 04:54 - 00410112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
2016-10-27 18:56 - 2016-10-15 04:52 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2016-10-27 18:56 - 2016-10-15 04:51 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2016-10-27 18:56 - 2016-10-15 04:47 - 04612608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-10-27 18:56 - 2016-10-15 04:44 - 00636928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2016-10-27 18:56 - 2016-10-15 04:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.exe
2016-10-27 18:56 - 2016-10-15 04:39 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3D12.dll
2016-10-27 18:56 - 2016-10-15 04:37 - 03733504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2016-10-27 18:56 - 2016-10-15 04:36 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2016-10-25 13:11 - 2016-10-22 08:25 - 01953336 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437563.dll
2016-10-25 13:11 - 2016-10-22 08:25 - 01585088 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437563.dll
2016-10-22 17:21 - 2016-10-23 12:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-10-22 09:49 - 2016-10-19 23:43 - 01595456 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2016-10-22 09:49 - 2016-10-19 23:43 - 00212936 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-10-22 09:49 - 2016-10-19 23:43 - 00046024 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-10-22 09:49 - 2016-10-18 22:27 - 01951680 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437557.dll
2016-10-22 09:49 - 2016-10-18 22:27 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437557.dll
2016-10-22 09:49 - 2016-10-18 22:27 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-10-22 09:49 - 2016-10-18 22:27 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2016-10-21 18:50 - 2016-10-21 18:50 - 00000000 ____D C:\Users\Lejla\AppData\Local\CEF
2016-10-18 19:33 - 2016-10-18 19:33 - 00000000 ____D C:\Users\Lejla\AppData\Roaming\Opera Software
2016-10-18 19:33 - 2016-10-18 19:33 - 00000000 ____D C:\Users\Lejla\AppData\Local\Opera Software
2016-10-15 21:17 - 2016-11-12 13:23 - 00000000 ____D C:\Users\Public\Documents\AdobeGC
2016-10-15 09:22 - 2016-10-15 09:22 - 00001615 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
2016-10-14 15:32 - 2016-10-14 15:32 - 00064352 _____ (Avago Technologies) C:\Windows\system32\Drivers\MegaSas2i.sys
2016-10-13 15:00 - 2016-10-13 15:00 - 00000791 _____ C:\Users\Mickey\Desktop\Downloads Mickey.lnk

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-11-12 14:43 - 2016-10-08 13:00 - 02857946 _____ C:\Windows\system32\perfh007.dat
2016-11-12 14:43 - 2016-10-08 13:00 - 00758148 _____ C:\Windows\system32\perfc007.dat
2016-11-12 14:43 - 2016-10-08 12:35 - 05652456 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-12 14:42 - 2016-10-08 13:06 - 00000000 ____D C:\Program Files (x86)\Opera
2016-11-12 14:38 - 2016-10-08 13:16 - 00000000 ____D C:\Users\Mickey\AppData\Local\JDownloader 2.0
2016-11-12 14:37 - 2016-10-08 21:26 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-12 14:37 - 2016-10-08 12:57 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-11-12 14:37 - 2016-10-08 12:37 - 00000000 ____D C:\ProgramData\NVIDIA
2016-11-12 14:36 - 2016-10-08 12:52 - 00786432 _____ C:\Windows\system32\config\BBI
2016-11-12 14:36 - 2016-10-08 12:30 - 00000000 ____D C:\Users\Mickey
2016-11-12 14:18 - 2016-10-08 13:36 - 00000000 ____D C:\Users\Mickey\AppData\Roaming\vlc
2016-11-12 14:05 - 2016-10-08 21:26 - 00000000 ____D C:\Windows\system32\SleepStudy
2016-11-12 13:50 - 2016-10-08 13:27 - 00000000 ____D C:\Windows\Minidump
2016-11-12 13:50 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\LiveKernelReports
2016-11-12 13:43 - 2016-10-08 12:56 - 00000000 ____D C:\Windows\INF
2016-11-12 13:41 - 2016-10-08 13:44 - 00001517 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2016-11-12 13:41 - 2016-10-08 12:36 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-11-12 13:41 - 2016-10-08 12:36 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-11-12 13:41 - 2016-10-08 12:36 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-11-12 13:22 - 2016-10-08 13:55 - 00000000 ____D C:\Users\Mickey\AppData\Local\CrashDumps
2016-11-12 13:14 - 2016-10-09 13:53 - 00000000 ____D C:\Users\Mickey\AppData\Local\Adobe
2016-11-12 01:56 - 2016-10-08 14:18 - 00000000 ____D C:\Users\Lejla
2016-11-12 01:53 - 2016-10-08 14:19 - 00000000 ____D C:\Users\Lejla\AppData\Roaming\Origin
2016-11-11 21:16 - 2016-10-09 14:35 - 00000000 ____D C:\Users\Lejla\AppData\Local\CrashDumps
2016-11-11 19:28 - 2016-10-08 13:14 - 00000000 ____D C:\ProgramData\Origin
2016-11-11 11:19 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\rescache
2016-11-10 08:29 - 2016-10-08 12:30 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-11-09 18:07 - 2016-10-08 21:26 - 04895520 _____ C:\Windows\system32\FNTCACHE.DAT
2016-11-09 16:44 - 2016-10-08 12:57 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-11-09 16:44 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-11-09 16:44 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\system32\oobe
2016-11-09 16:44 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\system32\migwiz
2016-11-09 16:44 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\ShellExperiences
2016-11-09 16:44 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\bcastdvr
2016-11-09 15:34 - 2016-10-08 12:53 - 00000000 ____D C:\Windows\CbsTemp
2016-11-09 15:31 - 2016-10-08 12:44 - 00000000 ____D C:\Windows\system32\MRT
2016-11-09 15:30 - 2016-10-08 12:44 - 141011376 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-11-08 13:59 - 2016-10-08 13:17 - 00000000 ____D C:\Program Files (x86)\Origin
2016-11-07 17:05 - 2016-10-09 09:37 - 00000000 ____D C:\Users\Lejla\AppData\Roaming\vlc
2016-11-07 08:39 - 2016-10-10 11:22 - 00000000 ___RD C:\Users\Lejla\Desktop\TS4Things
2016-11-05 11:31 - 2016-10-08 14:18 - 00000000 ____D C:\Users\Lejla\AppData\Local\NVIDIA Corporation
2016-11-05 11:31 - 2016-10-08 14:18 - 00000000 ____D C:\Users\Lejla\AppData\Local\NVIDIA
2016-11-03 18:35 - 2016-10-09 14:19 - 00000000 ____D C:\Users\Lejla\AppData\Local\S4Studio
2016-11-01 17:58 - 2016-10-08 13:09 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-11-01 17:48 - 2016-10-08 13:10 - 00000000 ____D C:\Users\Mickey\AppData\Roaming\Apple Computer
2016-11-01 17:38 - 2016-10-08 14:18 - 00000000 ____D C:\Users\Lejla\AppData\Roaming\Apple Computer
2016-10-31 12:39 - 2016-10-08 12:30 - 00000000 ____D C:\Users\Mickey\AppData\Local\Packages
2016-10-28 18:11 - 2016-10-08 14:50 - 00485032 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-10-27 21:38 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\system32\appraiser
2016-10-27 21:38 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-10-27 05:53 - 2016-10-08 13:17 - 00000000 ____D C:\Users\Mickey\AppData\Roaming\Origin
2016-10-25 21:21 - 2016-10-08 13:44 - 01756728 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2016-10-25 21:21 - 2016-10-08 13:44 - 01454136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2016-10-25 21:21 - 2016-10-08 13:44 - 01318968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2016-10-25 21:21 - 2016-10-08 13:44 - 00121912 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-10-25 21:17 - 2016-10-08 13:40 - 00548408 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-10-25 21:17 - 2016-10-08 13:40 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-10-25 21:17 - 2016-10-08 12:43 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-10-25 21:17 - 2016-10-08 12:36 - 06386232 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-10-25 21:17 - 2016-10-08 12:36 - 02475968 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-10-25 21:17 - 2016-10-08 12:36 - 01764408 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-10-25 21:17 - 2016-10-08 12:36 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-10-25 20:12 - 2016-10-08 13:44 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2016-10-25 17:17 - 2016-10-08 14:19 - 00000000 ____D C:\Users\Lejla\AppData\Local\Origin
2016-10-24 07:31 - 2016-10-08 12:36 - 07507695 _____ C:\Windows\system32\nvcoproc.bin
2016-10-23 12:25 - 2016-10-08 12:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-10-22 09:51 - 2016-10-08 13:42 - 00000000 ____D C:\Users\Mickey\AppData\Local\NVIDIA Corporation
2016-10-15 22:12 - 2016-10-09 13:53 - 00000000 ____D C:\ProgramData\Adobe
2016-10-15 21:34 - 2016-10-08 14:18 - 00000000 ____D C:\Users\Lejla\AppData\Roaming\Adobe
2016-10-15 16:07 - 2016-10-08 13:13 - 00000000 ____D C:\Users\Public\nettv
2016-10-15 09:24 - 2016-10-09 13:55 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-10-15 09:23 - 2016-10-09 13:56 - 00000000 ____D C:\Program Files\Adobe
2016-10-15 09:23 - 2016-10-09 13:56 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-10-14 15:32 - 2016-10-08 12:57 - 00000000 ___SD C:\Windows\system32\DiagSvcs
2016-10-14 15:32 - 2016-10-08 12:57 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-10-14 15:32 - 2016-10-08 12:57 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-10-13 18:17 - 2016-10-08 13:13 - 00000000 ____D C:\Program Files (x86)\NETTV4

Einige Dateien in TEMP:
====================
C:\Users\Lejla\AppData\Local\Temp\JNativeHook_1493622712025440641.dll
C:\Users\Lejla\AppData\Local\Temp\JNativeHook_5136962638928477983.dll
C:\Users\Lejla\AppData\Local\Temp\JNativeHook_6055101079672435770.dll
C:\Users\Lejla\AppData\Local\Temp\JNativeHook_7373320186983068139.dll
C:\Users\Lejla\AppData\Local\Temp\JNativeHook_8188313080036058183.dll
C:\Users\Lejla\AppData\Local\Temp\JNativeHook_8499967871610380001.dll
C:\Users\Mickey\AppData\Local\Temp\JNativeHook_3866736704574146611.dll
C:\Users\Mickey\AppData\Local\Temp\JNativeHook_4312600262201929988.dll
C:\Users\Mickey\AppData\Local\Temp\JNativeHook_6484075281814063193.dll
C:\Users\Mickey\AppData\Local\Temp\JNativeHook_8311839252830410379.dll
C:\Users\Mickey\AppData\Local\Temp\JNativeHook_8654655729602080812.dll
C:\Users\Mickey\AppData\Local\Temp\proxy_vole5489867342384571022.dll
C:\Users\Mickey\AppData\Local\Temp\proxy_vole6721857889489938996.dll
C:\Users\Mickey\AppData\Local\Temp\proxy_vole8965650605489628753.dll
C:\Users\Mickey\AppData\Local\Temp\proxy_vole9063783207970148799.dll


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-11-11 10:59

==================== Ende von FRST.txt ============================


Alt 12.11.2016, 15:32   #6
m1ck3y
 
Exploit:JS/Meadgive.U - Standard

Exploit:JS/Meadgive.U


Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-11-2016
durchgeführt von Mickey (12-11-2016 15:29:55)
Gestartet von F:\Downloads Mickey\mal
Windows 10 Pro Version 1607 (X64) (2016-10-08 11:30:05)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-755493514-3334125225-602857030-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-755493514-3334125225-602857030-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-755493514-3334125225-602857030-1000 - Limited - Disabled) => C:\Users\defaultuser0
Gast (S-1-5-21-755493514-3334125225-602857030-501 - Limited - Disabled)
Lejla (S-1-5-21-755493514-3334125225-602857030-1002 - Administrator - Enabled) => C:\Users\Lejla
Mickey (S-1-5-21-755493514-3334125225-602857030-1001 - Administrator - Enabled) => C:\Users\Mickey

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Ansel (Version: 375.70 - NVIDIA Corporation) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
iTunes (HKLM\...\{2C49F336-2E86-4407-83E2-16AC65598EF4}) (Version: 12.5.3.16 - Apple Inc.)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 49.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 49.0.2 (x86 de)) (Version: 49.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 49.0.2.6136 - Mozilla)
NetTV Plus Player 4 (HKLM-x32\...\NetTV Plus Player 4) (Version: 00.04.07.01 - NetTVPlus)
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 375.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 375.70 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.1.0.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.1.0.52 - NVIDIA Corporation)
NVIDIA Grafiktreiber 375.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 375.70 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.1.0.52 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 1.2.0.0 - NVIDIA Corporation) Hidden
Opera Stable 41.0.2353.56 (HKLM-x32\...\Opera 41.0.2353.56) (Version: 41.0.2353.56 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.2.2.60207 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version:  - Microsoft)
SHIELD Streaming (Version: 7.1.0330 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.1.0.52 - NVIDIA Corporation) Hidden
SSD Fresh 2016 (HKLM-x32\...\{71149886-0AA3-4F31-81F9-CC90EA0D55EF}_is1) (Version: 5.0 - Abelssoft)
The Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.24.102.1020 - Electronic Arts Inc.)
Update for Skype for Business 2015 (KB3039776) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{FD1F398D-BD56-43E6-8E58-707857AC9A8C}) (Version:  - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.5 - VideoLAN)
VLC Updater (HKLM-x32\...\VLC Updater) (Version: 1.0 - VLC Updater)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-755493514-3334125225-602857030-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-755493514-3334125225-602857030-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Mickey\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-755493514-3334125225-602857030-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-755493514-3334125225-602857030-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Mickey\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-755493514-3334125225-602857030-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-755493514-3334125225-602857030-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Lejla\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {04E21CA8-C19F-4FE6-9A8D-5E1EFC32C55B} - \Microsoft\XblGameSave\XblGameSaveTaskLogon -> Keine Datei <==== ACHTUNG
Task: {124F4D43-4783-434F-A784-B8E0D0C7D64C} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-10-25] (NVIDIA Corporation)
Task: {13518EB6-B3FC-4C6A-9C5A-04E6C53A5BC2} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-AEGGCVJ-Mickey => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-08-05] (Adobe Systems Incorporated)
Task: {66E3DFF1-9333-444A-8729-1A3D658CEBF6} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-10-25] (NVIDIA Corporation)
Task: {69702AA7-3C17-40EA-96EE-22196C7FD7DB} - System32\Tasks\Opera scheduled Autoupdate 1475928435 => C:\Program Files (x86)\Opera\launcher.exe [2016-11-07] (Opera Software)
Task: {9351EF33-92ED-46C3-A208-36F658A69BAA} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-10-25] (NVIDIA Corporation)
Task: {952E6F54-E741-45F3-8C97-8BE276260497} - \Microsoft\XblGameSave\XblGameSaveTask -> Keine Datei <==== ACHTUNG
Task: {9D539977-5DA3-4880-A348-130C86851563} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {A7504C49-A137-42F5-ADDD-173872C4EA8C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {B19CA061-F283-4F8B-8452-EEDAAC2177C8} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-10-25] (NVIDIA Corporation)
Task: {B6D68BDF-E21A-4A94-BD78-ED5438ADDCD9} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-10-25] (NVIDIA Corporation)
Task: {BB86DCB7-F6CD-4218-879C-F2C732BAEE95} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-10-25] (NVIDIA Corporation)
Task: {DA347611-0236-4FFE-97CA-BF995A441DE9} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {ED219E87-488B-4814-8392-10A575C0AFA0} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-09-30 14:51 - 2016-09-15 18:25 - 02681200 _____ () C:\Windows\system32\CoreUIComponents.dll
2016-09-01 17:12 - 2016-09-01 17:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-10-05 18:17 - 2016-10-05 18:17 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-10-08 13:44 - 2016-10-25 21:21 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-10-08 13:44 - 2016-10-25 21:21 - 04490808 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-08 13:44 - 2016-10-25 21:21 - 00420408 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll
2016-10-08 12:36 - 2016-10-25 21:17 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-09-30 14:51 - 2016-09-15 18:25 - 02681200 _____ () C:\Windows\SYSTEM32\CoreUIComponents.dll
2016-10-08 12:32 - 2016-10-08 12:32 - 00959168 _____ () C:\Users\Mickey\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2016-09-29 16:40 - 2016-09-29 16:40 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-11-09 11:08 - 2016-11-02 11:30 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-11-09 11:07 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-11-09 11:08 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-11-09 11:07 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-11-09 11:07 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-11-12 14:38 - 2016-11-12 14:38 - 00566439 _____ () C:\Users\Mickey\AppData\Local\JDownloader 2.0\tmp\7zip\SevenZipJBinding-FKPz9\libgcc_s_sjlj-1.dll
2016-11-12 14:38 - 2016-11-12 14:38 - 04078962 _____ () C:\Users\Mickey\AppData\Local\JDownloader 2.0\tmp\7zip\SevenZipJBinding-FKPz9\lib7-Zip-JBinding.dll
2016-10-08 13:16 - 2016-10-08 13:17 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-10-08 13:16 - 2016-10-08 13:17 - 00178176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-10-08 13:16 - 2016-10-08 13:17 - 35250688 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-11-08 13:59 - 2016-11-08 13:58 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll
2016-10-08 13:44 - 2016-10-25 21:21 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-10-08 13:44 - 2016-10-25 20:57 - 00506424 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-10-08 13:44 - 2016-10-25 20:57 - 00255936 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-10-08 13:44 - 2016-10-25 20:57 - 02808256 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-10-08 13:44 - 2016-10-25 21:21 - 00901688 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-10-08 13:44 - 2016-10-25 21:21 - 03776056 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-08 13:44 - 2016-10-25 20:57 - 00246840 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-10-08 13:44 - 2016-10-25 20:57 - 00436792 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-10-08 13:44 - 2016-10-25 20:57 - 00338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-10-08 13:44 - 2016-10-25 20:57 - 00968248 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2016-10-08 13:44 - 2016-10-25 21:20 - 60819000 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2016-10-08 12:57 - 2016-10-08 12:56 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-21-755493514-3334125225-602857030-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-21-755493514-3334125225-602857030-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Mickey\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
HKU\S-1-5-21-755493514-3334125225-602857030-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\Mickey\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
HKU\S-1-5-21-755493514-3334125225-602857030-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\Lejla\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{54665d83-2553-4661-ab3c-2b71ba8dab83}.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{37D0743B-410C-43F3-A126-F736384F0021}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{32057968-C6AC-4B43-BA82-781A59E4D1CB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{EED370B5-68A0-4C97-BC62-91CFB3C599C1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D2983346-3623-4C79-802E-6DB8287B216B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{BEA8747C-55AC-4C49-AADE-4947F1CADBAC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{2CDC4C30-5B06-494A-8F0D-9114D6178316}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{2EB2BF06-2AA6-4DEC-BBA0-C0FA6A7CABC2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{330532D9-5AD7-4DC6-A6F4-F714EEB92847}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{F5E82E53-E22F-4C4B-8DCA-C4C0D6A1762D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A8FE593E-3047-4DAB-B2C8-5D4C51326DB4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{775C1AA6-4DE8-4DB9-BFF9-146E1306F185}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{6B7BE542-6F2B-438C-9C0E-A19EDB7F05A4}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{297AA3CF-EAC1-465D-8B50-143B5439CCF3}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{9DDDFBED-D691-4461-AE20-DFC55434A279}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [TCP Query User{DD962FED-8772-46A7-9A2C-1E35F3B40C49}F:\utorrentportable\app\utorrent\utorrent.exe] => (Allow) F:\utorrentportable\app\utorrent\utorrent.exe
FirewallRules: [UDP Query User{C7DEE48A-F5C7-45D2-B50E-F04CD7BC623D}F:\utorrentportable\app\utorrent\utorrent.exe] => (Allow) F:\utorrentportable\app\utorrent\utorrent.exe
FirewallRules: [{F736CE2B-9EBF-4FFA-B6D1-658FFCAF3EAF}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{04E7AA60-02D9-4FD9-A89F-6DA8F8064F76}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{4C2607F0-089A-443A-848B-09B5AEC72917}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{A11FC5C9-83F8-4D67-89E3-A453DB8A7C07}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{B8D3FAD0-1165-471E-9F57-C6D86361258E}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{25E6472E-BDC9-451E-A14C-19251D25C6FE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe

==================== Wiederherstellungspunkte =========================

ACHTUNG: Systemwiederherstellung ist deaktiviert

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/12/2016 01:42:11 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\Office15\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\Office15\UccApi.DLL" in Zeile  1.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (11/12/2016 01:22:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x2388
Startzeit der fehlerhaften Anwendung: 0x01d23cdf59634cb2
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 10e99014-a717-48f6-85cf-04f96a3605e7
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (11/12/2016 01:22:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x2388
Startzeit der fehlerhaften Anwendung: 0x01d23cdf59634cb2
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 76d948ba-ed97-4ae2-9779-bf455b7e0ba9
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (11/12/2016 01:21:49 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\Office15\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\Office15\UccApi.DLL" in Zeile  1.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (11/12/2016 01:21:30 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\Office15\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\Office15\UccApi.DLL" in Zeile  1.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (11/11/2016 09:16:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x1b30
Startzeit der fehlerhaften Anwendung: 0x01d23c586eccb305
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 5e5b9dc8-70b9-49de-be4e-8100d3ddaa52
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (11/11/2016 09:16:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x1b30
Startzeit der fehlerhaften Anwendung: 0x01d23c586eccb305
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 14639a7b-4f2f-4b06-a549-d6c944b01850
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (11/11/2016 09:16:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x1bc4
Startzeit der fehlerhaften Anwendung: 0x01d23c586d6ae0e5
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: bd13ddbf-ac57-4f62-b5e1-444330081333
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (11/11/2016 09:16:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x1bc4
Startzeit der fehlerhaften Anwendung: 0x01d23c586d6ae0e5
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 9dac377b-d250-4a4c-876c-3101d3266709
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (11/07/2016 07:04:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: TS4_x64.exe, Version: 1.24.102.1020, Zeitstempel: 0x57eef46a
Name des fehlerhaften Moduls: igo64.dll, Version: 10.2.1.38915, Zeitstempel: 0x57f410b7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000097dec
ID des fehlerhaften Prozesses: 0xe24
Startzeit der fehlerhaften Anwendung: 0x01d2391e4ba20fdf
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe
Pfad des fehlerhaften Moduls: c:\program files (x86)\origin\igo64.dll
Berichtskennung: 70f39516-c497-4e7f-b0eb-2c7636cb91fa
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:


Systemfehler:
=============
Error: (11/12/2016 02:37:13 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (11/12/2016 01:28:33 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (11/12/2016 01:27:55 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-AEGGCVJ)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/12/2016 01:27:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/12/2016 01:27:43 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/12/2016 01:27:43 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMScheduler" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/12/2016 01:27:43 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "VIA Karaoke digital mixer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/12/2016 01:27:43 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Origin Web Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/12/2016 01:27:43 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "NVIDIA Display Container LS" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/12/2016 01:27:43 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "NVIDIA LocalSystem Container" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===================================
  Date: 2016-11-12 13:21:52.671
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-11-12 10:00:05.831
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-11 21:16:16.174
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-11-11 21:16:06.223
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-11-11 21:16:04.071
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-11-11 10:59:38.410
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-10 16:24:33.537
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-09 09:06:45.981
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-08 11:29:35.958
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-07 11:39:10.618
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7 CPU 860 @ 2.80GHz
Prozentuale Nutzung des RAM: 24%
Installierter physikalischer RAM: 16382.05 MB
Verfügbarer physikalischer RAM: 12357.28 MB
Summe virtueller Speicher: 18814.05 MB
Verfügbarer virtueller Speicher: 14449.31 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:111.35 GB) (Free:33.92 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (System-reserviert) (Fixed) (Total:0.34 GB) (Free:0.31 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive e: (Seagate 1TB) (Fixed) (Total:931.51 GB) (Free:443.12 GB) NTFS
Drive f: (Seagate 1000 GB) (Fixed) (Total:931.17 GB) (Free:896.03 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 76FCC84D)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.2 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 3FBF5176)
Partition 1: (Active) - (Size=111.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: FE2675D4)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

Alt 12.11.2016, 15:52   #7
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Exploit:JS/Meadgive.U - Standard

Exploit:JS/Meadgive.U


1. Schritt: Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers




2. Schritt: Kaspersky TDSS-Killer

Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.




Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 12.11.2016, 16:21   #8
m1ck3y
 
Exploit:JS/Meadgive.U - Standard

Exploit:JS/Meadgive.U


Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2016.11.12.06
  rootkit: v2016.10.31.01

Windows 10 x64 NTFS
Internet Explorer 11.447.14393.0
Mickey :: DESKTOP-AEGGCVJ [administrator]

12.11.2016 16:05:03
mbar-log-2016-11-12 (16-05-03).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 371052
Time elapsed: 11 minute(s), 58 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
Code:
ATTFilter
16:20:42.0086 0x2930  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
16:20:46.0308 0x2930  ============================================================
16:20:46.0308 0x2930  Current date / time: 2016/11/12 16:20:46.0308
16:20:46.0308 0x2930  SystemInfo:
16:20:46.0308 0x2930  
16:20:46.0308 0x2930  OS Version: 10.0.14393 ServicePack: 0.0
16:20:46.0308 0x2930  Product type: Workstation
16:20:46.0308 0x2930  ComputerName: DESKTOP-AEGGCVJ
16:20:46.0308 0x2930  UserName: Mickey
16:20:46.0308 0x2930  Windows directory: C:\Windows
16:20:46.0308 0x2930  System windows directory: C:\Windows
16:20:46.0308 0x2930  Running under WOW64
16:20:46.0308 0x2930  Processor architecture: Intel x64
16:20:46.0308 0x2930  Number of processors: 8
16:20:46.0308 0x2930  Page size: 0x1000
16:20:46.0308 0x2930  Boot type: Normal boot
16:20:46.0308 0x2930  CodeIntegrityOptions = 0x00000001
16:20:46.0308 0x2930  ============================================================
16:20:46.0398 0x2930  KLMD registered as C:\Windows\system32\drivers\03363242.sys
16:20:46.0398 0x2930  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.447, osProperties = 0x19
16:20:47.0201 0x2930  System UUID: {CA27CF5F-BF84-F43F-781E-8C6DF2E11FE5}
16:20:47.0947 0x2930  Drive \Device\Harddisk2\DR2 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:20:47.0958 0x2930  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:20:47.0958 0x2930  Drive \Device\Harddisk1\DR1 - Size: 0x1BF2976000 ( 111.79 Gb ), SectorSize: 0x200, Cylinders: 0x3901, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:20:47.0977 0x2930  ============================================================
16:20:47.0977 0x2930  \Device\Harddisk2\DR2:
16:20:47.0977 0x2930  MBR partitions:
16:20:47.0977 0x2930  \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74705800
16:20:47.0977 0x2930  \Device\Harddisk0\DR0:
16:20:47.0977 0x2930  MBR partitions:
16:20:47.0977 0x2930  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xAF000
16:20:47.0977 0x2930  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xAF800, BlocksNum 0x74656000
16:20:47.0977 0x2930  \Device\Harddisk1\DR1:
16:20:47.0977 0x2930  MBR partitions:
16:20:47.0977 0x2930  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xDEB2800
16:20:47.0977 0x2930  ============================================================
16:20:47.0982 0x2930  C: <-> \Device\Harddisk1\DR1\Partition1
16:20:47.0992 0x2930  D: <-> \Device\Harddisk0\DR0\Partition1
16:20:47.0992 0x2930  E: <-> \Device\Harddisk2\DR2\Partition1
16:20:48.0018 0x2930  F: <-> \Device\Harddisk0\DR0\Partition2
16:20:48.0018 0x2930  ============================================================
16:20:48.0018 0x2930  Initialize success
16:20:48.0018 0x2930  ============================================================
16:20:58.0962 0x27ec  ============================================================
16:20:58.0962 0x27ec  Scan started
16:20:58.0962 0x27ec  Mode: Manual; 
16:20:58.0962 0x27ec  ============================================================
16:20:58.0962 0x27ec  KSN ping started
16:20:59.0117 0x27ec  KSN ping finished: true
16:20:59.0982 0x27ec  ================ Scan system memory ========================
16:20:59.0982 0x27ec  System memory - ok
16:20:59.0983 0x27ec  ================ Scan services =============================
16:21:00.0066 0x27ec  1394ohci - ok
16:21:00.0070 0x27ec  3ware - ok
16:21:00.0074 0x27ec  ACPI - ok
16:21:00.0078 0x27ec  AcpiDev - ok
16:21:00.0082 0x27ec  acpiex - ok
16:21:00.0084 0x27ec  acpipagr - ok
16:21:00.0088 0x27ec  AcpiPmi - ok
16:21:00.0092 0x27ec  acpitime - ok
16:21:00.0097 0x27ec  ADP80XX - ok
16:21:00.0103 0x27ec  AFD - ok
16:21:00.0158 0x27ec  [ 021D06851E7AFF5C314039DF813608F3, 081B14840F4AD428B4407AA2E639369A45D174D9507BD107F33FE3A94FB8F8EC ] AGSService      C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
16:21:00.0200 0x27ec  AGSService - ok
16:21:00.0226 0x27ec  ahcache - ok
16:21:00.0230 0x27ec  AJRouter - ok
16:21:00.0233 0x27ec  ALG - ok
16:21:00.0237 0x27ec  AmdK8 - ok
16:21:00.0241 0x27ec  AmdPPM - ok
16:21:00.0244 0x27ec  amdsata - ok
16:21:00.0253 0x27ec  amdsbs - ok
16:21:00.0258 0x27ec  amdxata - ok
16:21:00.0263 0x27ec  AppID - ok
16:21:00.0263 0x27ec  AppIDSvc - ok
16:21:00.0268 0x27ec  Appinfo - ok
16:21:00.0273 0x27ec  [ 7D811EA7A2AAA49B0446D42CBC1CD338, AFECE5E44E48F756C7EB81D95C9237552AF8A9C02CBE756E0F3D3C6524DE49AD ] Apple Mobile Device Service C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
16:21:00.0278 0x27ec  Apple Mobile Device Service - ok
16:21:00.0278 0x27ec  applockerfltr - ok
16:21:00.0283 0x27ec  AppMgmt - ok
16:21:00.0288 0x27ec  AppReadiness - ok
16:21:00.0293 0x27ec  AppVClient - ok
16:21:00.0293 0x27ec  AppvStrm - ok
16:21:00.0298 0x27ec  AppvVemgr - ok
16:21:00.0303 0x27ec  AppvVfs - ok
16:21:00.0303 0x27ec  AppXSvc - ok
16:21:00.0308 0x27ec  arcsas - ok
16:21:00.0313 0x27ec  AsyncMac - ok
16:21:00.0313 0x27ec  atapi - ok
16:21:00.0318 0x27ec  AudioEndpointBuilder - ok
16:21:00.0323 0x27ec  Audiosrv - ok
16:21:00.0323 0x27ec  AxInstSV - ok
16:21:00.0328 0x27ec  b06bdrv - ok
16:21:00.0333 0x27ec  BasicDisplay - ok
16:21:00.0333 0x27ec  BasicRender - ok
16:21:00.0341 0x27ec  bcmfn - ok
16:21:00.0345 0x27ec  bcmfn2 - ok
16:21:00.0348 0x27ec  BDESVC - ok
16:21:00.0353 0x27ec  Beep - ok
16:21:00.0353 0x27ec  BFE - ok
16:21:00.0358 0x27ec  BITS - ok
16:21:00.0368 0x27ec  [ B5C2F92EE1106DFE7BB1CCE4D35B6037, E399C390687589194D8AAD385055F0CFA7D52AD9E837D8FF95008B8EB2B34E50 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
16:21:00.0378 0x27ec  Bonjour Service - ok
16:21:00.0383 0x27ec  bowser - ok
16:21:00.0383 0x27ec  BrokerInfrastructure - ok
16:21:00.0388 0x27ec  Browser - ok
16:21:00.0393 0x27ec  BthAvrcpTg - ok
16:21:00.0393 0x27ec  BthHFEnum - ok
16:21:00.0398 0x27ec  bthhfhid - ok
16:21:00.0403 0x27ec  BthHFSrv - ok
16:21:00.0403 0x27ec  BTHMODEM - ok
16:21:00.0408 0x27ec  bthserv - ok
16:21:00.0413 0x27ec  buttonconverter - ok
16:21:00.0418 0x27ec  CapImg - ok
16:21:00.0423 0x27ec  cdfs - ok
16:21:00.0428 0x27ec  CDPSvc - ok
16:21:00.0428 0x27ec  CDPUserSvc - ok
16:21:00.0440 0x27ec  cdrom - ok
16:21:00.0444 0x27ec  CertPropSvc - ok
16:21:00.0447 0x27ec  cht4iscsi - ok
16:21:00.0450 0x27ec  cht4vbd - ok
16:21:00.0453 0x27ec  circlass - ok
16:21:00.0453 0x27ec  CLFS - ok
16:21:00.0458 0x27ec  ClipSVC - ok
16:21:00.0463 0x27ec  clreg - ok
16:21:00.0469 0x27ec  CmBatt - ok
16:21:00.0473 0x27ec  CNG - ok
16:21:00.0478 0x27ec  cnghwassist - ok
16:21:00.0498 0x27ec  CompositeBus - ok
16:21:00.0498 0x27ec  COMSysApp - ok
16:21:00.0503 0x27ec  condrv - ok
16:21:00.0503 0x27ec  CoreMessagingRegistrar - ok
16:21:00.0513 0x27ec  CryptSvc - ok
16:21:00.0513 0x27ec  CSC - ok
16:21:00.0518 0x27ec  CscService - ok
16:21:00.0523 0x27ec  dam - ok
16:21:00.0529 0x27ec  [ A4700D1F78539C0ED32FA50E64F9C692, 5CB03B5F36307BA152245BAD29CB2AC703BBE8197ABC0338A7092ADEA1C3221A ] dc3d            C:\Windows\System32\drivers\dc3d.sys
16:21:00.0529 0x27ec  dc3d - ok
16:21:00.0534 0x27ec  DcomLaunch - ok
16:21:00.0541 0x27ec  DcpSvc - ok
16:21:00.0544 0x27ec  defragsvc - ok
16:21:00.0552 0x27ec  DeviceAssociationService - ok
16:21:00.0554 0x27ec  DeviceInstall - ok
16:21:00.0554 0x27ec  DevQueryBroker - ok
16:21:00.0559 0x27ec  Dfsc - ok
16:21:00.0564 0x27ec  Dhcp - ok
16:21:00.0569 0x27ec  diagnosticshub.standardcollector.service - ok
16:21:00.0569 0x27ec  DiagTrack - ok
16:21:00.0574 0x27ec  disk - ok
16:21:00.0579 0x27ec  DmEnrollmentSvc - ok
16:21:00.0579 0x27ec  dmvsc - ok
16:21:00.0584 0x27ec  dmwappushservice - ok
16:21:00.0589 0x27ec  Dnscache - ok
16:21:00.0594 0x27ec  dot3svc - ok
16:21:00.0594 0x27ec  DPS - ok
16:21:00.0599 0x27ec  drmkaud - ok
16:21:00.0604 0x27ec  DsmSvc - ok
16:21:00.0604 0x27ec  DsSvc - ok
16:21:00.0609 0x27ec  DXGKrnl - ok
16:21:00.0614 0x27ec  EapHost - ok
16:21:00.0614 0x27ec  ebdrv - ok
16:21:00.0619 0x27ec  EFS - ok
16:21:00.0624 0x27ec  EhStorClass - ok
16:21:00.0629 0x27ec  EhStorTcgDrv - ok
16:21:00.0629 0x27ec  embeddedmode - ok
16:21:00.0634 0x27ec  EntAppSvc - ok
16:21:00.0639 0x27ec  ErrDev - ok
16:21:00.0645 0x27ec  EventSystem - ok
16:21:00.0648 0x27ec  exfat - ok
16:21:00.0651 0x27ec  fastfat - ok
16:21:00.0654 0x27ec  Fax - ok
16:21:00.0654 0x27ec  fdc - ok
16:21:00.0659 0x27ec  fdPHost - ok
16:21:00.0664 0x27ec  FDResPub - ok
16:21:00.0664 0x27ec  fhsvc - ok
16:21:00.0669 0x27ec  FileCrypt - ok
16:21:00.0674 0x27ec  FileInfo - ok
16:21:00.0674 0x27ec  Filetrace - ok
16:21:00.0679 0x27ec  flpydisk - ok
16:21:00.0684 0x27ec  FltMgr - ok
16:21:00.0689 0x27ec  FontCache - ok
16:21:00.0689 0x27ec  FrameServer - ok
16:21:00.0694 0x27ec  FsDepends - ok
16:21:00.0694 0x27ec  Fs_Rec - ok
16:21:00.0699 0x27ec  fvevol - ok
16:21:00.0704 0x27ec  gencounter - ok
16:21:00.0704 0x27ec  genericusbfn - ok
16:21:00.0709 0x27ec  GPIOClx0101 - ok
16:21:00.0714 0x27ec  gpsvc - ok
16:21:00.0714 0x27ec  GpuEnergyDrv - ok
16:21:00.0719 0x27ec  HdAudAddService - ok
16:21:00.0724 0x27ec  HDAudBus - ok
16:21:00.0724 0x27ec  HidBatt - ok
16:21:00.0729 0x27ec  HidBth - ok
16:21:00.0734 0x27ec  hidi2c - ok
16:21:00.0740 0x27ec  hidinterrupt - ok
16:21:00.0743 0x27ec  HidIr - ok
16:21:00.0746 0x27ec  hidserv - ok
16:21:00.0750 0x27ec  HidUsb - ok
16:21:00.0753 0x27ec  HomeGroupListener - ok
16:21:00.0754 0x27ec  HomeGroupProvider - ok
16:21:00.0759 0x27ec  HpSAMD - ok
16:21:00.0759 0x27ec  HTTP - ok
16:21:00.0764 0x27ec  HvHost - ok
16:21:00.0764 0x27ec  hvservice - ok
16:21:00.0769 0x27ec  hwpolicy - ok
16:21:00.0774 0x27ec  hyperkbd - ok
16:21:00.0779 0x27ec  i8042prt - ok
16:21:00.0779 0x27ec  iagpio - ok
16:21:00.0784 0x27ec  iai2c - ok
16:21:00.0789 0x27ec  iaLPSS2i_GPIO2 - ok
16:21:00.0789 0x27ec  iaLPSS2i_I2C - ok
16:21:00.0794 0x27ec  iaLPSSi_GPIO - ok
16:21:00.0799 0x27ec  iaLPSSi_I2C - ok
16:21:00.0799 0x27ec  iaStorAV - ok
16:21:00.0804 0x27ec  iaStorV - ok
16:21:00.0809 0x27ec  ibbus - ok
16:21:00.0809 0x27ec  icssvc - ok
16:21:00.0814 0x27ec  IKEEXT - ok
16:21:00.0819 0x27ec  IndirectKmd - ok
16:21:00.0824 0x27ec  intelide - ok
16:21:00.0824 0x27ec  intelpep - ok
16:21:00.0829 0x27ec  intelppm - ok
16:21:00.0834 0x27ec  iorate - ok
16:21:00.0834 0x27ec  IpFilterDriver - ok
16:21:00.0841 0x27ec  iphlpsvc - ok
16:21:00.0844 0x27ec  IPMIDRV - ok
16:21:00.0847 0x27ec  IPNAT - ok
16:21:00.0864 0x27ec  [ 17EE7DFC68F1656A00A686DF2FB67E09, 759B66F7C9169B8728ECE9D4800DF218B303CEA4D69DDE20239B7C13EDB1DB65 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
16:21:00.0874 0x27ec  iPod Service - ok
16:21:00.0879 0x27ec  irda - ok
16:21:00.0879 0x27ec  IRENUM - ok
16:21:00.0884 0x27ec  irmon - ok
16:21:00.0889 0x27ec  isapnp - ok
16:21:00.0894 0x27ec  iScsiPrt - ok
16:21:00.0899 0x27ec  [ 86CFEF6DC6DE51AAB0C10384FE98F48F, 2E41D017B6166A0CCD2DB067AA1D677CF9E32470763B0F251EE0574FB2009D6F ] JRAID           C:\Windows\system32\drivers\jraid.sys
16:21:00.0914 0x27ec  JRAID - ok
16:21:00.0919 0x27ec  kbdclass - ok
16:21:00.0924 0x27ec  kbdhid - ok
16:21:00.0924 0x27ec  kdnic - ok
16:21:00.0929 0x27ec  KeyIso - ok
16:21:00.0934 0x27ec  KSecDD - ok
16:21:00.0934 0x27ec  KSecPkg - ok
16:21:00.0941 0x27ec  ksthunk - ok
16:21:00.0945 0x27ec  KtmRm - ok
16:21:00.0948 0x27ec  LanmanServer - ok
16:21:00.0951 0x27ec  LanmanWorkstation - ok
16:21:00.0954 0x27ec  lfsvc - ok
16:21:00.0954 0x27ec  LicenseManager - ok
16:21:00.0959 0x27ec  lltdio - ok
16:21:00.0964 0x27ec  lltdsvc - ok
16:21:00.0969 0x27ec  lmhosts - ok
16:21:00.0974 0x27ec  LSI_SAS - ok
16:21:00.0974 0x27ec  LSI_SAS2i - ok
16:21:00.0979 0x27ec  LSI_SAS3i - ok
16:21:00.0984 0x27ec  LSI_SSS - ok
16:21:00.0984 0x27ec  LSM - ok
16:21:00.0989 0x27ec  luafv - ok
16:21:00.0994 0x27ec  MapsBroker - ok
16:21:00.0999 0x27ec  [ 78BFF5425E044086E74E78650A359FBB, 294738C10F3ED933D4EC40EA0659372FCF19A3C6D45D356917438CA495F2CB45 ] MBAMProtector   C:\WINDOWS\system32\drivers\mbam.sys
16:21:00.0999 0x27ec  MBAMProtector - ok
16:21:01.0042 0x27ec  [ 9611577752E293259C7DCE19E9026362, 8CB5DFD63FA15603BB6FA6B501E09ED7F4DE0E8F68CB28B78CECAC3711BEFD24 ] MBAMScheduler   C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
16:21:01.0064 0x27ec  MBAMScheduler - ok
16:21:01.0094 0x27ec  [ F1A89A34388B5626F1548D393B23ECB1, EA00AC76C4C8C9340753B58A3313C9177A9B98F9F1BDE08F184CD0F53D0C186F ] MBAMService     C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
16:21:01.0114 0x27ec  MBAMService - ok
16:21:01.0124 0x27ec  [ 78488AF2AB2111D67B3C4044707A519B, 7AA71B9C4C7949A1A21F60EF7CCEDE0079794990696B60557B5DC86F4D47223A ] MBAMSwissArmy   C:\Windows\system32\drivers\MBAMSwissArmy.sys
16:21:01.0129 0x27ec  MBAMSwissArmy - ok
16:21:01.0134 0x27ec  [ 898415AC0B5F1D2A9A48ABCB68A6DC4B, E1FD9AE5E22E3E5A18288E66A6184E92A4B63A1274DCE147A7728BB09C6A225E ] MBAMWebAccessControl C:\WINDOWS\system32\drivers\mwac.sys
16:21:01.0140 0x27ec  MBAMWebAccessControl - ok
16:21:01.0144 0x27ec  megasas - ok
16:21:01.0147 0x27ec  megasas2i - ok
16:21:01.0150 0x27ec  megasr - ok
16:21:01.0153 0x27ec  MessagingService - ok
16:21:01.0154 0x27ec  mlx4_bus - ok
16:21:01.0159 0x27ec  MMCSS - ok
16:21:01.0164 0x27ec  Modem - ok
16:21:01.0164 0x27ec  monitor - ok
16:21:01.0169 0x27ec  mouclass - ok
16:21:01.0174 0x27ec  mouhid - ok
16:21:01.0184 0x27ec  mountmgr - ok
16:21:01.0189 0x27ec  [ 572BD5A99648652147A5D3C6DA946C99, FFDAD4A5682864977C926A5DDDB632CDB2A166BF025757801CC56F2828720023 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
16:21:01.0194 0x27ec  MozillaMaintenance - ok
16:21:01.0199 0x27ec  mpsdrv - ok
16:21:01.0204 0x27ec  MpsSvc - ok
16:21:01.0209 0x27ec  MRxDAV - ok
16:21:01.0209 0x27ec  mrxsmb - ok
16:21:01.0214 0x27ec  mrxsmb10 - ok
16:21:01.0219 0x27ec  mrxsmb20 - ok
16:21:01.0219 0x27ec  MsBridge - ok
16:21:01.0224 0x27ec  MSDTC - ok
16:21:01.0229 0x27ec  Msfs - ok
16:21:01.0234 0x27ec  msgpiowin32 - ok
16:21:01.0234 0x27ec  mshidkmdf - ok
16:21:01.0242 0x27ec  mshidumdf - ok
16:21:01.0246 0x27ec  msisadrv - ok
16:21:01.0250 0x27ec  MSiSCSI - ok
16:21:01.0253 0x27ec  msiserver - ok
16:21:01.0254 0x27ec  MSKSSRV - ok
16:21:01.0254 0x27ec  MsLldp - ok
16:21:01.0259 0x27ec  MSPCLOCK - ok
16:21:01.0264 0x27ec  MSPQM - ok
16:21:01.0264 0x27ec  MsRPC - ok
16:21:01.0269 0x27ec  MsSecFlt - ok
16:21:01.0274 0x27ec  mssmbios - ok
16:21:01.0279 0x27ec  MSTEE - ok
16:21:01.0284 0x27ec  MTConfig - ok
16:21:01.0284 0x27ec  [ 640617B6E682A150C36BE39D78547F6C, 784F712E9DC3EEE81F07946BBA08AA2BEAC7B3961E430B75043645EF7ECA715C ] MTsensor        C:\Windows\System32\drivers\ASACPI.sys
16:21:01.0289 0x27ec  MTsensor - ok
16:21:01.0294 0x27ec  Mup - ok
16:21:01.0294 0x27ec  mvumis - ok
16:21:01.0299 0x27ec  NativeWifiP - ok
16:21:01.0304 0x27ec  NcaSvc - ok
16:21:01.0304 0x27ec  NcbService - ok
16:21:01.0309 0x27ec  NcdAutoSetup - ok
16:21:01.0314 0x27ec  ndfltr - ok
16:21:01.0314 0x27ec  NDIS - ok
16:21:01.0319 0x27ec  NdisCap - ok
16:21:01.0324 0x27ec  NdisImPlatform - ok
16:21:01.0329 0x27ec  NdisTapi - ok
16:21:01.0329 0x27ec  Ndisuio - ok
16:21:01.0334 0x27ec  NdisVirtualBus - ok
16:21:01.0340 0x27ec  NdisWan - ok
16:21:01.0343 0x27ec  ndiswanlegacy - ok
16:21:01.0346 0x27ec  ndproxy - ok
16:21:01.0349 0x27ec  Ndu - ok
16:21:01.0353 0x27ec  [ EE00C544C025958AF50C7B199F3C8595, D774DB020D9C46D1AA0B2DB9FA2C36C4A9C38D904CC6929695321D32ACA0D4D1 ] Netaapl         C:\Windows\System32\drivers\netaapl64.sys
16:21:01.0370 0x27ec  Netaapl - ok
16:21:01.0375 0x27ec  NetAdapterCx - ok
16:21:01.0375 0x27ec  NetBIOS - ok
16:21:01.0380 0x27ec  NetBT - ok
16:21:01.0385 0x27ec  Netlogon - ok
16:21:01.0390 0x27ec  Netman - ok
16:21:01.0395 0x27ec  netprofm - ok
16:21:01.0395 0x27ec  NetSetupSvc - ok
16:21:01.0405 0x27ec  NetTcpPortSharing - ok
16:21:01.0410 0x27ec  NgcCtnrSvc - ok
16:21:01.0415 0x27ec  NgcSvc - ok
16:21:01.0415 0x27ec  NlaSvc - ok
16:21:01.0420 0x27ec  Npfs - ok
16:21:01.0425 0x27ec  npsvctrig - ok
16:21:01.0425 0x27ec  nsi - ok
16:21:01.0430 0x27ec  nsiproxy - ok
16:21:01.0435 0x27ec  NTFS - ok
16:21:01.0435 0x27ec  [ 96ACBF3DDC38A52FEE115F577F36568F, DB8CB01971208C8D7A306A5FEDA39A3802195123E6B801DFB905B0E1934D3C96 ] NuidFltr        C:\Windows\System32\drivers\NuidFltr.sys
16:21:01.0442 0x27ec  NuidFltr - ok
16:21:01.0445 0x27ec  Null - ok
16:21:01.0455 0x27ec  [ A6ED2E5E268D83B77D15348591CB8AE5, 12E2FE967AA46422393E82F112DA0153A2BC86F8B5034187FEF6D37FE51D6562 ] NvContainerLocalSystem C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
16:21:01.0465 0x27ec  NvContainerLocalSystem - ok
16:21:01.0475 0x27ec  [ A6ED2E5E268D83B77D15348591CB8AE5, 12E2FE967AA46422393E82F112DA0153A2BC86F8B5034187FEF6D37FE51D6562 ] NvContainerNetworkService C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
16:21:01.0485 0x27ec  NvContainerNetworkService - ok
16:21:01.0495 0x27ec  [ 64DA1993B1973F049C1347DA1B05185E, 2A04E263DB13751D033E2F9B9518820CF4942EEAFA5A32488570EEB699EE2A96 ] NVHDA           C:\Windows\system32\drivers\nvhda64v.sys
16:21:01.0500 0x27ec  NVHDA - ok
16:21:01.0530 0x27ec  [ 6AEBC7136C17478CBC9A772F1E60EB9E, D059A9134A6C7117B70302FF853485614E1E632C6F002F3D11C111C450B2F647 ] NVIDIA Wireless Controller Service C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
16:21:01.0549 0x27ec  NVIDIA Wireless Controller Service - ok
16:21:01.0887 0x27ec  [ 76ECA562B95DB26C64BEC14BB188A3F6, B4DB40D391B227393EEC13659C64B03499632FD11A75E5183BE8A0C8F3C9688B ] nvlddmkm        C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_848dea456d3c865e\nvlddmkm.sys
16:21:02.0192 0x27ec  nvlddmkm - ok
16:21:02.0210 0x27ec  nvraid - ok
16:21:02.0215 0x27ec  nvstor - ok
16:21:02.0218 0x27ec  [ 06C7DAD44F4B95AA02BE2107486274BC, DBCC2E29F1BEAEFEC5BBD767F71C30FBAA3425E4E88A5C6BAF626661C350CF11 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
16:21:02.0220 0x27ec  NvStreamKms - ok
16:21:02.0233 0x27ec  [ 0297C2F2423CFDC37981B7FE0003AB33, D20D075DCFEE0B94EC4A9C658D1B899894AB9008FB0D0719A0FDF3E3213168E2 ] NvStUSB         C:\Windows\System32\drivers\nvstusb.sys
16:21:02.0245 0x27ec  NvStUSB - ok
16:21:02.0250 0x27ec  [ 9D9CAD70EA640AB8D3EB77BFAE6CABE2, 26BBBDF34808E97ABF8A533320F6D38431893BC9B30FE3203956B78E829C39E7 ] NVSWCFilter     C:\Windows\System32\drivers\nvswcfilter.sys
16:21:02.0252 0x27ec  NVSWCFilter - ok
16:21:02.0256 0x27ec  [ 9F3F8D255C2D1ED457487CF1FAD56399, 9C75677937D1930AB422EFD653D47034E83E02A10BF713C19CC1B8239CD1AC9C ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
16:21:02.0256 0x27ec  nvvad_WaveExtensible - ok
16:21:02.0261 0x27ec  OneSyncSvc - ok
16:21:02.0311 0x27ec  [ 03500C343CEF835CAD0B62C8726A4C62, 76F4C5A3F81F7B59BA8062512773EB30A123288BF9DE515840B510F1E6C42E62 ] Origin Client Service C:\Program Files (x86)\Origin\OriginClientService.exe
16:21:02.0356 0x27ec  Origin Client Service - ok
16:21:02.0411 0x27ec  [ 9E569623B98A37D5C1B4A6DAF2B16529, A09838AA316CA969EF5C066A6BF7D49F3DC532A01F4CEF2D66122F1234938CF3 ] Origin Web Helper Service C:\Program Files (x86)\Origin\OriginWebHelperService.exe
16:21:02.0447 0x27ec  Origin Web Helper Service - ok
16:21:02.0456 0x27ec  [ 30B5F9FB0C35AE6B4A0851D24CE2EE8B, 0340E77E8EC2ADC21B8DDD9C9CC95B3F4BCAFD54618A333C72D7D9587D593B83 ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
16:21:02.0456 0x27ec  ose - ok
16:21:02.0461 0x27ec  p2pimsvc - ok
16:21:02.0466 0x27ec  p2psvc - ok
16:21:02.0466 0x27ec  Parport - ok
16:21:02.0471 0x27ec  partmgr - ok
16:21:02.0476 0x27ec  PcaSvc - ok
16:21:02.0481 0x27ec  pci - ok
16:21:02.0481 0x27ec  pciide - ok
16:21:02.0486 0x27ec  pcmcia - ok
16:21:02.0491 0x27ec  pcw - ok
16:21:02.0496 0x27ec  pdc - ok
16:21:02.0496 0x27ec  PEAUTH - ok
16:21:02.0501 0x27ec  PeerDistSvc - ok
16:21:02.0506 0x27ec  percsas2i - ok
16:21:02.0506 0x27ec  percsas3i - ok
16:21:02.0556 0x27ec  PerfHost - ok
16:21:02.0561 0x27ec  PhoneSvc - ok
16:21:02.0566 0x27ec  PimIndexMaintenanceSvc - ok
16:21:02.0576 0x27ec  pla - ok
16:21:02.0576 0x27ec  PlugPlay - ok
16:21:02.0581 0x27ec  PNRPAutoReg - ok
16:21:02.0586 0x27ec  PNRPsvc - ok
16:21:02.0591 0x27ec  [ E4799B87675C59AA1F620DE5C6F113BB, 094EE16D4CEC68DB316002994482344A6BFCFDE399131F7FA11BB46C2DCBF218 ] Point64         C:\Windows\System32\drivers\point64.sys
16:21:02.0591 0x27ec  Point64 - ok
16:21:02.0596 0x27ec  PolicyAgent - ok
16:21:02.0601 0x27ec  Power - ok
16:21:02.0606 0x27ec  PptpMiniport - ok
16:21:02.0686 0x27ec  [ 7196D3C2E2E3129814C8DAB91F9A7D1E, 6763E4BF8E846B597E78778E520F5BADC95608BAA4EA0AC84971384B5D976DD7 ] PrintNotify     C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
16:21:02.0796 0x27ec  PrintNotify - ok
16:21:02.0806 0x27ec  Processor - ok
16:21:02.0806 0x27ec  ProfSvc - ok
16:21:02.0811 0x27ec  Psched - ok
16:21:02.0816 0x27ec  QWAVE - ok
16:21:02.0816 0x27ec  QWAVEdrv - ok
16:21:02.0821 0x27ec  RasAcd - ok
16:21:02.0826 0x27ec  RasAgileVpn - ok
16:21:02.0826 0x27ec  RasAuto - ok
16:21:02.0831 0x27ec  Rasl2tp - ok
16:21:02.0836 0x27ec  RasMan - ok
16:21:02.0836 0x27ec  RasPppoe - ok
16:21:02.0843 0x27ec  RasSstp - ok
16:21:02.0846 0x27ec  rdbss - ok
16:21:02.0850 0x27ec  rdpbus - ok
16:21:02.0853 0x27ec  RDPDR - ok
16:21:02.0857 0x27ec  RdpVideoMiniport - ok
16:21:02.0862 0x27ec  rdyboost - ok
16:21:02.0862 0x27ec  ReFSv1 - ok
16:21:02.0867 0x27ec  RemoteAccess - ok
16:21:02.0872 0x27ec  RemoteRegistry - ok
16:21:02.0877 0x27ec  RetailDemo - ok
16:21:02.0877 0x27ec  RmSvc - ok
16:21:02.0882 0x27ec  RpcEptMapper - ok
16:21:02.0882 0x27ec  RpcLocator - ok
16:21:02.0887 0x27ec  RpcSs - ok
16:21:02.0887 0x27ec  rspndr - ok
16:21:02.0892 0x27ec  rt640x64 - ok
16:21:02.0897 0x27ec  s3cap - ok
16:21:02.0897 0x27ec  SamSs - ok
16:21:02.0902 0x27ec  sbp2port - ok
16:21:02.0907 0x27ec  SCardSvr - ok
16:21:02.0912 0x27ec  ScDeviceEnum - ok
16:21:02.0917 0x27ec  scfilter - ok
16:21:02.0917 0x27ec  Schedule - ok
16:21:02.0922 0x27ec  scmbus - ok
16:21:02.0927 0x27ec  scmdisk0101 - ok
16:21:02.0927 0x27ec  SCPolicySvc - ok
16:21:02.0932 0x27ec  sdbus - ok
16:21:02.0937 0x27ec  SDRSVC - ok
16:21:02.0937 0x27ec  sdstor - ok
16:21:02.0944 0x27ec  seclogon - ok
16:21:02.0947 0x27ec  SENS - ok
16:21:02.0949 0x27ec  Sense - ok
16:21:02.0952 0x27ec  SensorDataService - ok
16:21:02.0956 0x27ec  SensorService - ok
16:21:02.0957 0x27ec  SensrSvc - ok
16:21:02.0962 0x27ec  SerCx - ok
16:21:02.0962 0x27ec  SerCx2 - ok
16:21:02.0967 0x27ec  Serenum - ok
16:21:02.0972 0x27ec  Serial - ok
16:21:02.0972 0x27ec  sermouse - ok
16:21:02.0977 0x27ec  SessionEnv - ok
16:21:02.0982 0x27ec  sfloppy - ok
16:21:02.0982 0x27ec  SharedAccess - ok
16:21:02.0987 0x27ec  ShellHWDetection - ok
16:21:02.0987 0x27ec  shpamsvc - ok
16:21:02.0992 0x27ec  SiSRaid2 - ok
16:21:02.0997 0x27ec  SiSRaid4 - ok
16:21:03.0002 0x27ec  smphost - ok
16:21:03.0002 0x27ec  SmsRouter - ok
16:21:03.0007 0x27ec  SNMPTRAP - ok
16:21:03.0012 0x27ec  spaceport - ok
16:21:03.0012 0x27ec  SpbCx - ok
16:21:03.0017 0x27ec  Spooler - ok
16:21:03.0017 0x27ec  sppsvc - ok
16:21:03.0023 0x27ec  srv - ok
16:21:03.0023 0x27ec  srv2 - ok
16:21:03.0028 0x27ec  srvnet - ok
16:21:03.0033 0x27ec  SSDPSRV - ok
16:21:03.0033 0x27ec  SstpSvc - ok
16:21:03.0038 0x27ec  StateRepository - ok
16:21:03.0043 0x27ec  stexstor - ok
16:21:03.0047 0x27ec  stisvc - ok
16:21:03.0050 0x27ec  storahci - ok
16:21:03.0053 0x27ec  storflt - ok
16:21:03.0056 0x27ec  stornvme - ok
16:21:03.0057 0x27ec  storqosflt - ok
16:21:03.0062 0x27ec  StorSvc - ok
16:21:03.0062 0x27ec  storufs - ok
16:21:03.0067 0x27ec  storvsc - ok
16:21:03.0072 0x27ec  svsvc - ok
16:21:03.0072 0x27ec  swenum - ok
16:21:03.0087 0x27ec  [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] SwitchBoard     C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
16:21:03.0102 0x27ec  SwitchBoard - ok
16:21:03.0102 0x27ec  swprv - ok
16:21:03.0107 0x27ec  Synth3dVsc - ok
16:21:03.0107 0x27ec  SysMain - ok
16:21:03.0112 0x27ec  SystemEventsBroker - ok
16:21:03.0117 0x27ec  TabletInputService - ok
16:21:03.0117 0x27ec  TapiSrv - ok
16:21:03.0122 0x27ec  Tcpip - ok
16:21:03.0127 0x27ec  Tcpip6 - ok
16:21:03.0127 0x27ec  tcpipreg - ok
16:21:03.0132 0x27ec  tdx - ok
16:21:03.0137 0x27ec  terminpt - ok
16:21:03.0137 0x27ec  TermService - ok
16:21:03.0146 0x27ec  Themes - ok
16:21:03.0149 0x27ec  TieringEngineService - ok
16:21:03.0153 0x27ec  tiledatamodelsvc - ok
16:21:03.0157 0x27ec  TimeBrokerSvc - ok
16:21:03.0157 0x27ec  TPM - ok
16:21:03.0162 0x27ec  TrkWks - ok
16:21:03.0167 0x27ec  TrustedInstaller - ok
16:21:03.0172 0x27ec  tsusbflt - ok
16:21:03.0177 0x27ec  TsUsbGD - ok
16:21:03.0177 0x27ec  tsusbhub - ok
16:21:03.0182 0x27ec  tunnel - ok
16:21:03.0187 0x27ec  tzautoupdate - ok
16:21:03.0187 0x27ec  [ A070ABB9D85582B2BECADBE6FCD12350, 3EBFA349F87933E20C4EADA2FA2E64206CCAC70DFB8B52C2E41670FFB16D7336 ] t_mouse.sys     C:\Windows\System32\drivers\t_mouse.sys
16:21:03.0192 0x27ec  t_mouse.sys - ok
16:21:03.0192 0x27ec  UASPStor - ok
16:21:03.0197 0x27ec  UcmCx0101 - ok
16:21:03.0197 0x27ec  UcmTcpciCx0101 - ok
16:21:03.0202 0x27ec  UcmUcsi - ok
16:21:03.0202 0x27ec  Ucx01000 - ok
16:21:03.0207 0x27ec  UdeCx - ok
16:21:03.0212 0x27ec  udfs - ok
16:21:03.0212 0x27ec  UEFI - ok
16:21:03.0217 0x27ec  UevAgentDriver - ok
16:21:03.0222 0x27ec  UevAgentService - ok
16:21:03.0222 0x27ec  Ufx01000 - ok
16:21:03.0227 0x27ec  UfxChipidea - ok
16:21:03.0232 0x27ec  ufxsynopsys - ok
16:21:03.0237 0x27ec  UI0Detect - ok
16:21:03.0237 0x27ec  umbus - ok
16:21:03.0244 0x27ec  UmPass - ok
16:21:03.0247 0x27ec  UmRdpService - ok
16:21:03.0250 0x27ec  UnistoreSvc - ok
16:21:03.0256 0x27ec  upnphost - ok
16:21:03.0257 0x27ec  UrsChipidea - ok
16:21:03.0262 0x27ec  UrsCx01000 - ok
16:21:03.0262 0x27ec  UrsSynopsys - ok
16:21:03.0267 0x27ec  [ F957092C63CD71D85903CA0D8370F473, 4DEC2FC20329F248135DA24CB6694FD972DCCE8B1BBEA8D872FDE41939E96AAF ] USBAAPL64       C:\Windows\System32\Drivers\usbaapl64.sys
16:21:03.0272 0x27ec  USBAAPL64 - ok
16:21:03.0277 0x27ec  usbccgp - ok
16:21:03.0282 0x27ec  usbcir - ok
16:21:03.0282 0x27ec  usbehci - ok
16:21:03.0287 0x27ec  usbhub - ok
16:21:03.0292 0x27ec  USBHUB3 - ok
16:21:03.0292 0x27ec  usbohci - ok
16:21:03.0297 0x27ec  usbprint - ok
16:21:03.0302 0x27ec  usbser - ok
16:21:03.0302 0x27ec  USBSTOR - ok
16:21:03.0307 0x27ec  usbuhci - ok
16:21:03.0312 0x27ec  USBXHCI - ok
16:21:03.0317 0x27ec  UserDataSvc - ok
16:21:03.0322 0x27ec  UserManager - ok
16:21:03.0327 0x27ec  UsoSvc - ok
16:21:03.0327 0x27ec  VaultSvc - ok
16:21:03.0332 0x27ec  vdrvroot - ok
16:21:03.0332 0x27ec  vds - ok
16:21:03.0337 0x27ec  VerifierExt - ok
16:21:03.0337 0x27ec  vhdmp - ok
16:21:03.0345 0x27ec  vhf - ok
16:21:03.0362 0x27ec  [ EF2270C2DF2B61FF1B8C422DC443CEFE, 30C74108BC0DE5884D64C7611CE8282CE556D9B42D7BE1FE569DE2067FBB4D5A ] VIAHdAudAddService C:\Windows\system32\drivers\viahduaa.sys
16:21:03.0377 0x27ec  VIAHdAudAddService - ok
16:21:03.0382 0x27ec  [ 004175DA13E0372DA58F523104921631, 413A4C8169EDFDBAA58DA5FEDCBF1D0525F64A7AD34BAF17E29BCD14C1C189A7 ] VIAKaraokeService C:\Windows\system32\viakaraokesrv.exe
16:21:03.0402 0x27ec  VIAKaraokeService - ok
16:21:03.0402 0x27ec  vmbus - ok
16:21:03.0407 0x27ec  VMBusHID - ok
16:21:03.0412 0x27ec  vmgid - ok
16:21:03.0412 0x27ec  vmicguestinterface - ok
16:21:03.0417 0x27ec  vmicheartbeat - ok
16:21:03.0422 0x27ec  vmickvpexchange - ok
16:21:03.0427 0x27ec  vmicrdv - ok
16:21:03.0427 0x27ec  vmicshutdown - ok
16:21:03.0432 0x27ec  vmictimesync - ok
16:21:03.0432 0x27ec  vmicvmsession - ok
16:21:03.0437 0x27ec  vmicvss - ok
16:21:03.0443 0x27ec  volmgr - ok
16:21:03.0446 0x27ec  volmgrx - ok
16:21:03.0449 0x27ec  volsnap - ok
16:21:03.0453 0x27ec  volume - ok
16:21:03.0456 0x27ec  vpci - ok
16:21:03.0457 0x27ec  vsmraid - ok
16:21:03.0462 0x27ec  VSS - ok
16:21:03.0462 0x27ec  VSTXRAID - ok
16:21:03.0467 0x27ec  vwifibus - ok
16:21:03.0467 0x27ec  vwififlt - ok
16:21:03.0472 0x27ec  W32Time - ok
16:21:03.0477 0x27ec  WacomPen - ok
16:21:03.0477 0x27ec  WalletService - ok
16:21:03.0482 0x27ec  wanarp - ok
16:21:03.0487 0x27ec  wanarpv6 - ok
16:21:03.0492 0x27ec  wbengine - ok
16:21:03.0492 0x27ec  WbioSrvc - ok
16:21:03.0497 0x27ec  wcifs - ok
16:21:03.0497 0x27ec  Wcmsvc - ok
16:21:03.0502 0x27ec  wcncsvc - ok
16:21:03.0507 0x27ec  wcnfs - ok
16:21:03.0512 0x27ec  WdBoot - ok
16:21:03.0512 0x27ec  Wdf01000 - ok
16:21:03.0517 0x27ec  WdFilter - ok
16:21:03.0522 0x27ec  WdiServiceHost - ok
16:21:03.0522 0x27ec  WdiSystemHost - ok
16:21:03.0527 0x27ec  wdiwifi - ok
16:21:03.0532 0x27ec  WdNisDrv - ok
16:21:03.0532 0x27ec  WdNisSvc - ok
16:21:03.0537 0x27ec  WebClient - ok
16:21:03.0544 0x27ec  Wecsvc - ok
16:21:03.0547 0x27ec  WEPHOSTSVC - ok
16:21:03.0550 0x27ec  wercplsupport - ok
16:21:03.0553 0x27ec  WerSvc - ok
16:21:03.0556 0x27ec  WFPLWFS - ok
16:21:03.0557 0x27ec  WiaRpc - ok
16:21:03.0563 0x27ec  WIMMount - ok
16:21:03.0563 0x27ec  WinDefend - ok
16:21:03.0568 0x27ec  WindowsTrustedRT - ok
16:21:03.0573 0x27ec  WindowsTrustedRTProxy - ok
16:21:03.0578 0x27ec  WinHttpAutoProxySvc - ok
16:21:03.0578 0x27ec  WinMad - ok
16:21:03.0587 0x27ec  Winmgmt - ok
16:21:03.0593 0x27ec  WinRM - ok
16:21:03.0598 0x27ec  WINUSB - ok
16:21:03.0603 0x27ec  WinVerbs - ok
16:21:03.0608 0x27ec  [ 3A627A24EAC6CEC3BA59548AA70BAD6E, C4B908CEB2D6F7F14C635AE02E20B16DAF795073975AE3967627D27E8ABAB015 ] WirelessKeyboardFilter C:\Windows\System32\drivers\WirelessKeyboardFilter.sys
16:21:03.0613 0x27ec  WirelessKeyboardFilter - ok
16:21:03.0617 0x27ec  wisvc - ok
16:21:03.0617 0x27ec  WlanSvc - ok
16:21:03.0623 0x27ec  wlidsvc - ok
16:21:03.0628 0x27ec  WmiAcpi - ok
16:21:03.0633 0x27ec  wmiApSrv - ok
16:21:03.0633 0x27ec  WMPNetworkSvc - ok
16:21:03.0637 0x27ec  Wof - ok
16:21:03.0645 0x27ec  workfolderssvc - ok
16:21:03.0648 0x27ec  WPDBusEnum - ok
16:21:03.0651 0x27ec  WpdUpFltr - ok
16:21:03.0655 0x27ec  WpnService - ok
16:21:03.0658 0x27ec  WpnUserService - ok
16:21:03.0663 0x27ec  ws2ifsl - ok
16:21:03.0668 0x27ec  wscsvc - ok
16:21:03.0668 0x27ec  WSearch - ok
16:21:03.0673 0x27ec  wuauserv - ok
16:21:03.0678 0x27ec  WudfPf - ok
16:21:03.0678 0x27ec  WUDFRd - ok
16:21:03.0683 0x27ec  wudfsvc - ok
16:21:03.0683 0x27ec  WUDFWpdFs - ok
16:21:03.0688 0x27ec  WUDFWpdMtp - ok
16:21:03.0693 0x27ec  WwanSvc - ok
16:21:03.0693 0x27ec  XblAuthManager - ok
16:21:03.0698 0x27ec  XblGameSave - ok
16:21:03.0703 0x27ec  xboxgip - ok
16:21:03.0703 0x27ec  XboxNetApiSvc - ok
16:21:03.0708 0x27ec  xinputhid - ok
16:21:03.0713 0x27ec  ================ Scan global ===============================
16:21:03.0723 0x27ec  [ Global ] - ok
16:21:03.0723 0x27ec  ================ Scan MBR ==================================
16:21:03.0738 0x27ec  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk2\DR2
16:21:03.0749 0x27ec  \Device\Harddisk2\DR2 - ok
16:21:03.0763 0x27ec  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
16:21:03.0877 0x27ec  \Device\Harddisk0\DR0 - ok
16:21:03.0877 0x27ec  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
16:21:04.0090 0x27ec  \Device\Harddisk1\DR1 - ok
16:21:04.0090 0x27ec  ================ Scan VBR ==================================
16:21:04.0092 0x27ec  [ 9B36AC87CCD8DBD7266BE4802F2C548F ] \Device\Harddisk2\DR2\Partition1
16:21:04.0093 0x27ec  \Device\Harddisk2\DR2\Partition1 - ok
16:21:04.0096 0x27ec  [ 88B2F4B56CC02D9194866855BCEE54C5 ] \Device\Harddisk0\DR0\Partition1
16:21:04.0097 0x27ec  \Device\Harddisk0\DR0\Partition1 - ok
16:21:04.0098 0x27ec  [ D665C41385222288F1AB70024C6E69BD ] \Device\Harddisk0\DR0\Partition2
16:21:04.0098 0x27ec  \Device\Harddisk0\DR0\Partition2 - ok
16:21:04.0103 0x27ec  [ BD4D04F5ED84E6B94EAB718ACA386271 ] \Device\Harddisk1\DR1\Partition1
16:21:04.0103 0x27ec  \Device\Harddisk1\DR1\Partition1 - ok
16:21:04.0103 0x27ec  ================ Scan generic autorun ======================
16:21:04.0108 0x27ec  [ DB367E8C8F46C26A05BA982715CC0DB5, 63AE8DD8E41260123E8C98905BD3D444BED86AEA6353F690483E5CB116433AC2 ] C:\Windows\system32\TiltWheelMouse.exe
16:21:04.0128 0x27ec  MouseDriver - ok
16:21:04.0128 0x27ec  WindowsDefender - ok
16:21:04.0128 0x27ec  ShadowPlay - ok
16:21:04.0148 0x27ec  [ 63B913AAB1244D8DED54CF0EFC8A56BD, 639830E9ECB004F09EA968EDF68C0037B5DFF7CCFF007DE5D11DEF2166707341 ] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
16:21:04.0158 0x27ec  AdobeAAMUpdater-1.0 - ok
16:21:04.0168 0x27ec  [ EB34C71AC9BF2532820AE0F8952EE437, 775561BB60F6DBEAB76C0DFE186C60EF95D0246E15CB1A8BBACD1F38C2EA9EA1 ] C:\Program Files\iTunes\iTunesHelper.exe
16:21:04.0168 0x27ec  iTunesHelper - ok
16:21:04.0186 0x27ec  [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
16:21:04.0194 0x27ec  SwitchBoard - ok
16:21:04.0218 0x27ec  [ 8FE651ACBA3344E645CFEB6286FFF6B8, ECE4DFFEB7EB0B19B6790FD0F619A5C4B23CA0BA9CC3F25924925F8EA07264B6 ] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe
16:21:04.0387 0x27ec  AdobeCS6ServiceManager - ok
16:21:04.0433 0x27ec  OneDriveSetup - ok
16:21:04.0433 0x27ec  OneDriveSetup - ok
16:21:04.0438 0x27ec  OneDriveSetup - ok
16:21:04.0448 0x27ec  [ 92952D657D754B615ED1709414B443E9, 39F8B63A195F256D035283816C10B45DDF73A177B4143C0575259EE81D6A4000 ] C:\Program Files (x86)\VLC Updater\vlc-updater.exe
16:21:05.0093 0x27ec  VLC Updater - ok
16:21:05.0098 0x27ec  Waiting for KSN requests completion. In queue: 13
16:21:06.0149 0x27ec  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x61100 ( enabled : updated )
16:21:06.0174 0x27ec  Win FW state via NFP2: enabled ( trusted )
16:21:06.0365 0x27ec  ============================================================
16:21:06.0365 0x27ec  Scan finished
16:21:06.0365 0x27ec  ============================================================
16:21:06.0376 0x1ebc  Detected object count: 0
16:21:06.0376 0x1ebc  Actual detected object count: 0
16:21:21.0676 0x29c8  Deinitialize success

Alt 12.11.2016, 21:08   #9
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Exploit:JS/Meadgive.U - Standard

Exploit:JS/Meadgive.U


Zitat:
16:20:58.0962 0x27ec Scan started
16:20:58.0962 0x27ec Mode: Manual;
Anleitungen bitte richtig lesen. Der TDSS-Killer war nicht richtig eingestellt.
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 13.11.2016, 00:25   #10
m1ck3y
 
Exploit:JS/Meadgive.U - Standard

Exploit:JS/Meadgive.U


Sry jetzt noch einmal

Code:
ATTFilter
00:23:38.0354 0x19c8  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
00:23:41.0083 0x19c8  ============================================================
00:23:41.0083 0x19c8  Current date / time: 2016/11/13 00:23:41.0083
00:23:41.0084 0x19c8  SystemInfo:
00:23:41.0084 0x19c8  
00:23:41.0084 0x19c8  OS Version: 10.0.14393 ServicePack: 0.0
00:23:41.0084 0x19c8  Product type: Workstation
00:23:41.0084 0x19c8  ComputerName: DESKTOP-AEGGCVJ
00:23:41.0084 0x19c8  UserName: Mickey
00:23:41.0084 0x19c8  Windows directory: C:\Windows
00:23:41.0084 0x19c8  System windows directory: C:\Windows
00:23:41.0084 0x19c8  Running under WOW64
00:23:41.0084 0x19c8  Processor architecture: Intel x64
00:23:41.0084 0x19c8  Number of processors: 8
00:23:41.0084 0x19c8  Page size: 0x1000
00:23:41.0084 0x19c8  Boot type: Normal boot
00:23:41.0084 0x19c8  CodeIntegrityOptions = 0x00000001
00:23:41.0084 0x19c8  ============================================================
00:23:41.0182 0x19c8  KLMD registered as C:\Windows\system32\drivers\08819767.sys
00:23:41.0182 0x19c8  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.447, osProperties = 0x19
00:23:41.0907 0x19c8  System UUID: {CA27CF5F-BF84-F43F-781E-8C6DF2E11FE5}
00:23:42.0523 0x19c8  Drive \Device\Harddisk2\DR2 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
00:23:42.0758 0x19c8  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
00:23:42.0766 0x19c8  Drive \Device\Harddisk1\DR1 - Size: 0x1BF2976000 ( 111.79 Gb ), SectorSize: 0x200, Cylinders: 0x3901, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
00:23:43.0943 0x19c8  ============================================================
00:23:43.0943 0x19c8  \Device\Harddisk2\DR2:
00:23:43.0943 0x19c8  MBR partitions:
00:23:43.0943 0x19c8  \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74705800
00:23:43.0943 0x19c8  \Device\Harddisk0\DR0:
00:23:43.0943 0x19c8  MBR partitions:
00:23:43.0943 0x19c8  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xAF000
00:23:43.0943 0x19c8  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xAF800, BlocksNum 0x74656000
00:23:43.0943 0x19c8  \Device\Harddisk1\DR1:
00:23:43.0943 0x19c8  MBR partitions:
00:23:43.0944 0x19c8  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xDEB2800
00:23:43.0944 0x19c8  ============================================================
00:23:43.0945 0x19c8  C: <-> \Device\Harddisk1\DR1\Partition1
00:23:43.0973 0x19c8  D: <-> \Device\Harddisk0\DR0\Partition1
00:23:43.0973 0x19c8  E: <-> \Device\Harddisk2\DR2\Partition1
00:23:43.0995 0x19c8  F: <-> \Device\Harddisk0\DR0\Partition2
00:23:43.0995 0x19c8  ============================================================
00:23:43.0995 0x19c8  Initialize success
00:23:43.0995 0x19c8  ============================================================
00:24:31.0541 0x129c  ============================================================
00:24:31.0541 0x129c  Scan started
00:24:31.0541 0x129c  Mode: Manual; SigCheck; TDLFS; 
00:24:31.0541 0x129c  ============================================================
00:24:31.0541 0x129c  KSN ping started
00:24:31.0715 0x129c  KSN ping finished: true
00:24:32.0626 0x129c  ================ Scan system memory ========================
00:24:32.0626 0x129c  System memory - ok
00:24:32.0627 0x129c  ================ Scan services =============================
00:24:32.0706 0x129c  1394ohci - ok
00:24:32.0709 0x129c  3ware - ok
00:24:32.0713 0x129c  ACPI - ok
00:24:32.0716 0x129c  AcpiDev - ok
00:24:32.0719 0x129c  acpiex - ok
00:24:32.0723 0x129c  acpipagr - ok
00:24:32.0727 0x129c  AcpiPmi - ok
00:24:32.0730 0x129c  acpitime - ok
00:24:32.0735 0x129c  ADP80XX - ok
00:24:32.0739 0x129c  AFD - ok
00:24:32.0794 0x129c  [ 021D06851E7AFF5C314039DF813608F3, 081B14840F4AD428B4407AA2E639369A45D174D9507BD107F33FE3A94FB8F8EC ] AGSService      C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
00:24:32.0878 0x129c  AGSService - ok
00:24:32.0887 0x129c  ahcache - ok
00:24:32.0890 0x129c  AJRouter - ok
00:24:32.0893 0x129c  ALG - ok
00:24:32.0896 0x129c  AmdK8 - ok
00:24:32.0899 0x129c  AmdPPM - ok
00:24:32.0902 0x129c  amdsata - ok
00:24:32.0905 0x129c  amdsbs - ok
00:24:32.0908 0x129c  amdxata - ok
00:24:32.0911 0x129c  AppID - ok
00:24:32.0913 0x129c  AppIDSvc - ok
00:24:32.0916 0x129c  Appinfo - ok
00:24:32.0923 0x129c  [ 7D811EA7A2AAA49B0446D42CBC1CD338, AFECE5E44E48F756C7EB81D95C9237552AF8A9C02CBE756E0F3D3C6524DE49AD ] Apple Mobile Device Service C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
00:24:32.0933 0x129c  Apple Mobile Device Service - ok
00:24:32.0937 0x129c  applockerfltr - ok
00:24:32.0939 0x129c  AppMgmt - ok
00:24:32.0942 0x129c  AppReadiness - ok
00:24:32.0945 0x129c  AppVClient - ok
00:24:32.0948 0x129c  AppvStrm - ok
00:24:32.0951 0x129c  AppvVemgr - ok
00:24:32.0954 0x129c  AppvVfs - ok
00:24:32.0957 0x129c  AppXSvc - ok
00:24:32.0960 0x129c  arcsas - ok
00:24:32.0963 0x129c  AsyncMac - ok
00:24:32.0965 0x129c  atapi - ok
00:24:32.0968 0x129c  AudioEndpointBuilder - ok
00:24:32.0971 0x129c  Audiosrv - ok
00:24:32.0974 0x129c  AxInstSV - ok
00:24:32.0977 0x129c  b06bdrv - ok
00:24:32.0980 0x129c  BasicDisplay - ok
00:24:32.0983 0x129c  BasicRender - ok
00:24:32.0987 0x129c  bcmfn - ok
00:24:32.0990 0x129c  bcmfn2 - ok
00:24:32.0993 0x129c  BDESVC - ok
00:24:32.0996 0x129c  Beep - ok
00:24:32.0999 0x129c  BFE - ok
00:24:33.0002 0x129c  BITS - ok
00:24:33.0015 0x129c  [ B5C2F92EE1106DFE7BB1CCE4D35B6037, E399C390687589194D8AAD385055F0CFA7D52AD9E837D8FF95008B8EB2B34E50 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
00:24:33.0033 0x129c  Bonjour Service - ok
00:24:33.0037 0x129c  bowser - ok
00:24:33.0040 0x129c  BrokerInfrastructure - ok
00:24:33.0043 0x129c  Browser - ok
00:24:33.0046 0x129c  BthAvrcpTg - ok
00:24:33.0049 0x129c  BthHFEnum - ok
00:24:33.0052 0x129c  bthhfhid - ok
00:24:33.0055 0x129c  BthHFSrv - ok
00:24:33.0059 0x129c  BTHMODEM - ok
00:24:33.0063 0x129c  bthserv - ok
00:24:33.0066 0x129c  buttonconverter - ok
00:24:33.0069 0x129c  CapImg - ok
00:24:33.0073 0x129c  cdfs - ok
00:24:33.0076 0x129c  CDPSvc - ok
00:24:33.0078 0x129c  CDPUserSvc - ok
00:24:33.0085 0x129c  cdrom - ok
00:24:33.0088 0x129c  CertPropSvc - ok
00:24:33.0092 0x129c  cht4iscsi - ok
00:24:33.0095 0x129c  cht4vbd - ok
00:24:33.0098 0x129c  circlass - ok
00:24:33.0101 0x129c  CLFS - ok
00:24:33.0105 0x129c  ClipSVC - ok
00:24:33.0108 0x129c  clreg - ok
00:24:33.0113 0x129c  CmBatt - ok
00:24:33.0116 0x129c  CNG - ok
00:24:33.0120 0x129c  cnghwassist - ok
00:24:33.0148 0x129c  CompositeBus - ok
00:24:33.0150 0x129c  COMSysApp - ok
00:24:33.0155 0x129c  condrv - ok
00:24:33.0157 0x129c  CoreMessagingRegistrar - ok
00:24:33.0163 0x129c  CryptSvc - ok
00:24:33.0166 0x129c  CSC - ok
00:24:33.0169 0x129c  CscService - ok
00:24:33.0172 0x129c  dam - ok
00:24:33.0177 0x129c  [ A4700D1F78539C0ED32FA50E64F9C692, 5CB03B5F36307BA152245BAD29CB2AC703BBE8197ABC0338A7092ADEA1C3221A ] dc3d            C:\Windows\System32\drivers\dc3d.sys
00:24:33.0192 0x129c  dc3d - ok
00:24:33.0196 0x129c  DcomLaunch - ok
00:24:33.0199 0x129c  DcpSvc - ok
00:24:33.0203 0x129c  defragsvc - ok
00:24:33.0205 0x129c  DeviceAssociationService - ok
00:24:33.0208 0x129c  DeviceInstall - ok
00:24:33.0211 0x129c  DevQueryBroker - ok
00:24:33.0214 0x129c  Dfsc - ok
00:24:33.0217 0x129c  Dhcp - ok
00:24:33.0221 0x129c  diagnosticshub.standardcollector.service - ok
00:24:33.0224 0x129c  DiagTrack - ok
00:24:33.0228 0x129c  disk - ok
00:24:33.0231 0x129c  DmEnrollmentSvc - ok
00:24:33.0234 0x129c  dmvsc - ok
00:24:33.0237 0x129c  dmwappushservice - ok
00:24:33.0240 0x129c  Dnscache - ok
00:24:33.0245 0x129c  dot3svc - ok
00:24:33.0248 0x129c  DPS - ok
00:24:33.0251 0x129c  drmkaud - ok
00:24:33.0254 0x129c  DsmSvc - ok
00:24:33.0258 0x129c  DsSvc - ok
00:24:33.0260 0x129c  DXGKrnl - ok
00:24:33.0264 0x129c  EapHost - ok
00:24:33.0267 0x129c  ebdrv - ok
00:24:33.0270 0x129c  EFS - ok
00:24:33.0273 0x129c  EhStorClass - ok
00:24:33.0276 0x129c  EhStorTcgDrv - ok
00:24:33.0280 0x129c  embeddedmode - ok
00:24:33.0283 0x129c  EntAppSvc - ok
00:24:33.0286 0x129c  ErrDev - ok
00:24:33.0292 0x129c  EventSystem - ok
00:24:33.0295 0x129c  exfat - ok
00:24:33.0298 0x129c  fastfat - ok
00:24:33.0301 0x129c  Fax - ok
00:24:33.0304 0x129c  fdc - ok
00:24:33.0307 0x129c  fdPHost - ok
00:24:33.0310 0x129c  FDResPub - ok
00:24:33.0313 0x129c  fhsvc - ok
00:24:33.0317 0x129c  FileCrypt - ok
00:24:33.0319 0x129c  FileInfo - ok
00:24:33.0323 0x129c  Filetrace - ok
00:24:33.0326 0x129c  flpydisk - ok
00:24:33.0329 0x129c  FltMgr - ok
00:24:33.0332 0x129c  FontCache - ok
00:24:33.0335 0x129c  FrameServer - ok
00:24:33.0339 0x129c  FsDepends - ok
00:24:33.0341 0x129c  Fs_Rec - ok
00:24:33.0344 0x129c  fvevol - ok
00:24:33.0348 0x129c  gencounter - ok
00:24:33.0352 0x129c  genericusbfn - ok
00:24:33.0354 0x129c  GPIOClx0101 - ok
00:24:33.0358 0x129c  gpsvc - ok
00:24:33.0360 0x129c  GpuEnergyDrv - ok
00:24:33.0363 0x129c  HdAudAddService - ok
00:24:33.0367 0x129c  HDAudBus - ok
00:24:33.0372 0x129c  HidBatt - ok
00:24:33.0375 0x129c  HidBth - ok
00:24:33.0378 0x129c  hidi2c - ok
00:24:33.0382 0x129c  hidinterrupt - ok
00:24:33.0385 0x129c  HidIr - ok
00:24:33.0388 0x129c  hidserv - ok
00:24:33.0391 0x129c  HidUsb - ok
00:24:33.0394 0x129c  HomeGroupListener - ok
00:24:33.0397 0x129c  HomeGroupProvider - ok
00:24:33.0400 0x129c  HpSAMD - ok
00:24:33.0403 0x129c  HTTP - ok
00:24:33.0406 0x129c  HvHost - ok
00:24:33.0410 0x129c  hvservice - ok
00:24:33.0412 0x129c  hwpolicy - ok
00:24:33.0415 0x129c  hyperkbd - ok
00:24:33.0419 0x129c  i8042prt - ok
00:24:33.0422 0x129c  iagpio - ok
00:24:33.0425 0x129c  iai2c - ok
00:24:33.0428 0x129c  iaLPSS2i_GPIO2 - ok
00:24:33.0431 0x129c  iaLPSS2i_I2C - ok
00:24:33.0434 0x129c  iaLPSSi_GPIO - ok
00:24:33.0437 0x129c  iaLPSSi_I2C - ok
00:24:33.0441 0x129c  iaStorAV - ok
00:24:33.0443 0x129c  iaStorV - ok
00:24:33.0447 0x129c  ibbus - ok
00:24:33.0450 0x129c  icssvc - ok
00:24:33.0453 0x129c  IKEEXT - ok
00:24:33.0455 0x129c  IndirectKmd - ok
00:24:33.0460 0x129c  intelide - ok
00:24:33.0463 0x129c  intelpep - ok
00:24:33.0466 0x129c  intelppm - ok
00:24:33.0469 0x129c  iorate - ok
00:24:33.0473 0x129c  IpFilterDriver - ok
00:24:33.0476 0x129c  iphlpsvc - ok
00:24:33.0479 0x129c  IPMIDRV - ok
00:24:33.0482 0x129c  IPNAT - ok
00:24:33.0500 0x129c  [ 17EE7DFC68F1656A00A686DF2FB67E09, 759B66F7C9169B8728ECE9D4800DF218B303CEA4D69DDE20239B7C13EDB1DB65 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
00:24:33.0523 0x129c  iPod Service - ok
00:24:33.0526 0x129c  irda - ok
00:24:33.0529 0x129c  IRENUM - ok
00:24:33.0532 0x129c  irmon - ok
00:24:33.0535 0x129c  isapnp - ok
00:24:33.0539 0x129c  iScsiPrt - ok
00:24:33.0544 0x129c  [ 86CFEF6DC6DE51AAB0C10384FE98F48F, 2E41D017B6166A0CCD2DB067AA1D677CF9E32470763B0F251EE0574FB2009D6F ] JRAID           C:\Windows\system32\drivers\jraid.sys
00:24:33.0574 0x129c  JRAID - ok
00:24:33.0578 0x129c  kbdclass - ok
00:24:33.0581 0x129c  kbdhid - ok
00:24:33.0584 0x129c  kdnic - ok
00:24:33.0586 0x129c  KeyIso - ok
00:24:33.0589 0x129c  KSecDD - ok
00:24:33.0593 0x129c  KSecPkg - ok
00:24:33.0596 0x129c  ksthunk - ok
00:24:33.0599 0x129c  KtmRm - ok
00:24:33.0602 0x129c  LanmanServer - ok
00:24:33.0606 0x129c  LanmanWorkstation - ok
00:24:33.0610 0x129c  lfsvc - ok
00:24:33.0613 0x129c  LicenseManager - ok
00:24:33.0616 0x129c  lltdio - ok
00:24:33.0619 0x129c  lltdsvc - ok
00:24:33.0623 0x129c  lmhosts - ok
00:24:33.0628 0x129c  LSI_SAS - ok
00:24:33.0631 0x129c  LSI_SAS2i - ok
00:24:33.0635 0x129c  LSI_SAS3i - ok
00:24:33.0638 0x129c  LSI_SSS - ok
00:24:33.0641 0x129c  LSM - ok
00:24:33.0644 0x129c  luafv - ok
00:24:33.0647 0x129c  MapsBroker - ok
00:24:33.0651 0x129c  [ 78BFF5425E044086E74E78650A359FBB, 294738C10F3ED933D4EC40EA0659372FCF19A3C6D45D356917438CA495F2CB45 ] MBAMProtector   C:\WINDOWS\system32\drivers\mbam.sys
00:24:33.0661 0x129c  MBAMProtector - ok
00:24:33.0699 0x129c  [ 9611577752E293259C7DCE19E9026362, 8CB5DFD63FA15603BB6FA6B501E09ED7F4DE0E8F68CB28B78CECAC3711BEFD24 ] MBAMScheduler   C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
00:24:33.0747 0x129c  MBAMScheduler - ok
00:24:33.0778 0x129c  [ F1A89A34388B5626F1548D393B23ECB1, EA00AC76C4C8C9340753B58A3313C9177A9B98F9F1BDE08F184CD0F53D0C186F ] MBAMService     C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
00:24:33.0815 0x129c  MBAMService - ok
00:24:33.0827 0x129c  [ 78488AF2AB2111D67B3C4044707A519B, 7AA71B9C4C7949A1A21F60EF7CCEDE0079794990696B60557B5DC86F4D47223A ] MBAMSwissArmy   C:\Windows\system32\drivers\MBAMSwissArmy.sys
00:24:33.0838 0x129c  MBAMSwissArmy - ok
00:24:33.0842 0x129c  [ 898415AC0B5F1D2A9A48ABCB68A6DC4B, E1FD9AE5E22E3E5A18288E66A6184E92A4B63A1274DCE147A7728BB09C6A225E ] MBAMWebAccessControl C:\WINDOWS\system32\drivers\mwac.sys
00:24:33.0851 0x129c  MBAMWebAccessControl - ok
00:24:33.0855 0x129c  megasas - ok
00:24:33.0858 0x129c  megasas2i - ok
00:24:33.0861 0x129c  megasr - ok
00:24:33.0864 0x129c  MessagingService - ok
00:24:33.0870 0x129c  mlx4_bus - ok
00:24:33.0873 0x129c  MMCSS - ok
00:24:33.0876 0x129c  Modem - ok
00:24:33.0879 0x129c  monitor - ok
00:24:33.0882 0x129c  mouclass - ok
00:24:33.0885 0x129c  mouhid - ok
00:24:33.0888 0x129c  mountmgr - ok
00:24:33.0894 0x129c  [ 572BD5A99648652147A5D3C6DA946C99, FFDAD4A5682864977C926A5DDDB632CDB2A166BF025757801CC56F2828720023 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
00:24:33.0906 0x129c  MozillaMaintenance - ok
00:24:33.0909 0x129c  mpsdrv - ok
00:24:33.0912 0x129c  MpsSvc - ok
00:24:33.0916 0x129c  MRxDAV - ok
00:24:33.0919 0x129c  mrxsmb - ok
00:24:33.0922 0x129c  mrxsmb10 - ok
00:24:33.0925 0x129c  mrxsmb20 - ok
00:24:33.0928 0x129c  MsBridge - ok
00:24:33.0931 0x129c  MSDTC - ok
00:24:33.0935 0x129c  Msfs - ok
00:24:33.0939 0x129c  msgpiowin32 - ok
00:24:33.0941 0x129c  mshidkmdf - ok
00:24:33.0945 0x129c  mshidumdf - ok
00:24:33.0947 0x129c  msisadrv - ok
00:24:33.0950 0x129c  MSiSCSI - ok
00:24:33.0953 0x129c  msiserver - ok
00:24:33.0955 0x129c  MSKSSRV - ok
00:24:33.0959 0x129c  MsLldp - ok
00:24:33.0962 0x129c  MSPCLOCK - ok
00:24:33.0964 0x129c  MSPQM - ok
00:24:33.0967 0x129c  MsRPC - ok
00:24:33.0971 0x129c  MsSecFlt - ok
00:24:33.0974 0x129c  mssmbios - ok
00:24:33.0977 0x129c  MSTEE - ok
00:24:33.0980 0x129c  MTConfig - ok
00:24:33.0983 0x129c  [ 640617B6E682A150C36BE39D78547F6C, 784F712E9DC3EEE81F07946BBA08AA2BEAC7B3961E430B75043645EF7ECA715C ] MTsensor        C:\Windows\System32\drivers\ASACPI.sys
00:24:33.0991 0x129c  MTsensor - ok
00:24:33.0994 0x129c  Mup - ok
00:24:33.0997 0x129c  mvumis - ok
00:24:34.0001 0x129c  NativeWifiP - ok
00:24:34.0005 0x129c  NcaSvc - ok
00:24:34.0007 0x129c  NcbService - ok
00:24:34.0010 0x129c  NcdAutoSetup - ok
00:24:34.0013 0x129c  ndfltr - ok
00:24:34.0016 0x129c  NDIS - ok
00:24:34.0019 0x129c  NdisCap - ok
00:24:34.0021 0x129c  NdisImPlatform - ok
00:24:34.0024 0x129c  NdisTapi - ok
00:24:34.0027 0x129c  Ndisuio - ok
00:24:34.0030 0x129c  NdisVirtualBus - ok
00:24:34.0033 0x129c  NdisWan - ok
00:24:34.0035 0x129c  ndiswanlegacy - ok
00:24:34.0038 0x129c  ndproxy - ok
00:24:34.0041 0x129c  Ndu - ok
00:24:34.0045 0x129c  [ EE00C544C025958AF50C7B199F3C8595, D774DB020D9C46D1AA0B2DB9FA2C36C4A9C38D904CC6929695321D32ACA0D4D1 ] Netaapl         C:\Windows\System32\drivers\netaapl64.sys
00:24:34.0068 0x129c  Netaapl - detected UnsignedFile.Multi.Generic ( 1 )
00:24:34.0291 0x129c  Detect skipped due to KSN trusted
00:24:34.0291 0x129c  Netaapl - ok
00:24:34.0299 0x129c  NetAdapterCx - ok
00:24:34.0306 0x129c  NetBIOS - ok
00:24:34.0316 0x129c  NetBT - ok
00:24:34.0322 0x129c  Netlogon - ok
00:24:34.0328 0x129c  Netman - ok
00:24:34.0335 0x129c  netprofm - ok
00:24:34.0341 0x129c  NetSetupSvc - ok
00:24:34.0352 0x129c  NetTcpPortSharing - ok
00:24:34.0357 0x129c  NgcCtnrSvc - ok
00:24:34.0360 0x129c  NgcSvc - ok
00:24:34.0362 0x129c  NlaSvc - ok
00:24:34.0366 0x129c  Npfs - ok
00:24:34.0369 0x129c  npsvctrig - ok
00:24:34.0372 0x129c  nsi - ok
00:24:34.0374 0x129c  nsiproxy - ok
00:24:34.0379 0x129c  NTFS - ok
00:24:34.0382 0x129c  [ 96ACBF3DDC38A52FEE115F577F36568F, DB8CB01971208C8D7A306A5FEDA39A3802195123E6B801DFB905B0E1934D3C96 ] NuidFltr        C:\Windows\System32\drivers\NuidFltr.sys
00:24:34.0394 0x129c  NuidFltr - ok
00:24:34.0397 0x129c  Null - ok
00:24:34.0410 0x129c  [ A6ED2E5E268D83B77D15348591CB8AE5, 12E2FE967AA46422393E82F112DA0153A2BC86F8B5034187FEF6D37FE51D6562 ] NvContainerLocalSystem C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
00:24:34.0430 0x129c  NvContainerLocalSystem - ok
00:24:34.0443 0x129c  [ A6ED2E5E268D83B77D15348591CB8AE5, 12E2FE967AA46422393E82F112DA0153A2BC86F8B5034187FEF6D37FE51D6562 ] NvContainerNetworkService C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
00:24:34.0458 0x129c  NvContainerNetworkService - ok
00:24:34.0467 0x129c  [ 64DA1993B1973F049C1347DA1B05185E, 2A04E263DB13751D033E2F9B9518820CF4942EEAFA5A32488570EEB699EE2A96 ] NVHDA           C:\Windows\system32\drivers\nvhda64v.sys
00:24:34.0480 0x129c  NVHDA - ok
00:24:34.0507 0x129c  [ 6AEBC7136C17478CBC9A772F1E60EB9E, D059A9134A6C7117B70302FF853485614E1E632C6F002F3D11C111C450B2F647 ] NVIDIA Wireless Controller Service C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
00:24:34.0542 0x129c  NVIDIA Wireless Controller Service - ok
00:24:34.0890 0x129c  [ 76ECA562B95DB26C64BEC14BB188A3F6, B4DB40D391B227393EEC13659C64B03499632FD11A75E5183BE8A0C8F3C9688B ] nvlddmkm        C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_848dea456d3c865e\nvlddmkm.sys
00:24:35.0265 0x129c  nvlddmkm - ok
00:24:35.0282 0x129c  nvraid - ok
00:24:35.0284 0x129c  nvstor - ok
00:24:35.0290 0x129c  [ 06C7DAD44F4B95AA02BE2107486274BC, DBCC2E29F1BEAEFEC5BBD767F71C30FBAA3425E4E88A5C6BAF626661C350CF11 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
00:24:35.0297 0x129c  NvStreamKms - ok
00:24:35.0313 0x129c  [ 0297C2F2423CFDC37981B7FE0003AB33, D20D075DCFEE0B94EC4A9C658D1B899894AB9008FB0D0719A0FDF3E3213168E2 ] NvStUSB         C:\Windows\System32\drivers\nvstusb.sys
00:24:35.0335 0x129c  NvStUSB - ok
00:24:35.0339 0x129c  [ 9D9CAD70EA640AB8D3EB77BFAE6CABE2, 26BBBDF34808E97ABF8A533320F6D38431893BC9B30FE3203956B78E829C39E7 ] NVSWCFilter     C:\Windows\System32\drivers\nvswcfilter.sys
00:24:35.0349 0x129c  NVSWCFilter - ok
00:24:35.0353 0x129c  [ 9F3F8D255C2D1ED457487CF1FAD56399, 9C75677937D1930AB422EFD653D47034E83E02A10BF713C19CC1B8239CD1AC9C ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
00:24:35.0362 0x129c  nvvad_WaveExtensible - ok
00:24:35.0366 0x129c  OneSyncSvc - ok
00:24:35.0421 0x129c  [ 03500C343CEF835CAD0B62C8726A4C62, 76F4C5A3F81F7B59BA8062512773EB30A123288BF9DE515840B510F1E6C42E62 ] Origin Client Service C:\Program Files (x86)\Origin\OriginClientService.exe
00:24:35.0485 0x129c  Origin Client Service - ok
00:24:35.0540 0x129c  [ 9E569623B98A37D5C1B4A6DAF2B16529, A09838AA316CA969EF5C066A6BF7D49F3DC532A01F4CEF2D66122F1234938CF3 ] Origin Web Helper Service C:\Program Files (x86)\Origin\OriginWebHelperService.exe
00:24:35.0605 0x129c  Origin Web Helper Service - ok
00:24:35.0613 0x129c  [ 30B5F9FB0C35AE6B4A0851D24CE2EE8B, 0340E77E8EC2ADC21B8DDD9C9CC95B3F4BCAFD54618A333C72D7D9587D593B83 ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
00:24:35.0627 0x129c  ose - ok
00:24:35.0630 0x129c  p2pimsvc - ok
00:24:35.0633 0x129c  p2psvc - ok
00:24:35.0636 0x129c  Parport - ok
00:24:35.0639 0x129c  partmgr - ok
00:24:35.0641 0x129c  PcaSvc - ok
00:24:35.0644 0x129c  pci - ok
00:24:35.0647 0x129c  pciide - ok
00:24:35.0650 0x129c  pcmcia - ok
00:24:35.0652 0x129c  pcw - ok
00:24:35.0655 0x129c  pdc - ok
00:24:35.0658 0x129c  PEAUTH - ok
00:24:35.0661 0x129c  PeerDistSvc - ok
00:24:35.0664 0x129c  percsas2i - ok
00:24:35.0667 0x129c  percsas3i - ok
00:24:35.0704 0x129c  PerfHost - ok
00:24:35.0712 0x129c  PhoneSvc - ok
00:24:35.0714 0x129c  PimIndexMaintenanceSvc - ok
00:24:35.0719 0x129c  pla - ok
00:24:35.0722 0x129c  PlugPlay - ok
00:24:35.0725 0x129c  PNRPAutoReg - ok
00:24:35.0727 0x129c  PNRPsvc - ok
00:24:35.0732 0x129c  [ E4799B87675C59AA1F620DE5C6F113BB, 094EE16D4CEC68DB316002994482344A6BFCFDE399131F7FA11BB46C2DCBF218 ] Point64         C:\Windows\System32\drivers\point64.sys
00:24:35.0743 0x129c  Point64 - ok
00:24:35.0746 0x129c  PolicyAgent - ok
00:24:35.0750 0x129c  Power - ok
00:24:35.0755 0x129c  PptpMiniport - ok
00:24:35.0832 0x129c  [ 7196D3C2E2E3129814C8DAB91F9A7D1E, 6763E4BF8E846B597E78778E520F5BADC95608BAA4EA0AC84971384B5D976DD7 ] PrintNotify     C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
00:24:35.0998 0x129c  PrintNotify - ok
00:24:36.0005 0x129c  Processor - ok
00:24:36.0008 0x129c  ProfSvc - ok
00:24:36.0010 0x129c  Psched - ok
00:24:36.0013 0x129c  QWAVE - ok
00:24:36.0016 0x129c  QWAVEdrv - ok
00:24:36.0019 0x129c  RasAcd - ok
00:24:36.0023 0x129c  RasAgileVpn - ok
00:24:36.0026 0x129c  RasAuto - ok
00:24:36.0029 0x129c  Rasl2tp - ok
00:24:36.0032 0x129c  RasMan - ok
00:24:36.0034 0x129c  RasPppoe - ok
00:24:36.0038 0x129c  RasSstp - ok
00:24:36.0040 0x129c  rdbss - ok
00:24:36.0045 0x129c  rdpbus - ok
00:24:36.0048 0x129c  RDPDR - ok
00:24:36.0053 0x129c  RdpVideoMiniport - ok
00:24:36.0056 0x129c  rdyboost - ok
00:24:36.0059 0x129c  ReFSv1 - ok
00:24:36.0063 0x129c  RemoteAccess - ok
00:24:36.0066 0x129c  RemoteRegistry - ok
00:24:36.0069 0x129c  RetailDemo - ok
00:24:36.0072 0x129c  RmSvc - ok
00:24:36.0075 0x129c  RpcEptMapper - ok
00:24:36.0078 0x129c  RpcLocator - ok
00:24:36.0081 0x129c  RpcSs - ok
00:24:36.0084 0x129c  rspndr - ok
00:24:36.0087 0x129c  rt640x64 - ok
00:24:36.0090 0x129c  s3cap - ok
00:24:36.0093 0x129c  SamSs - ok
00:24:36.0096 0x129c  sbp2port - ok
00:24:36.0099 0x129c  SCardSvr - ok
00:24:36.0102 0x129c  ScDeviceEnum - ok
00:24:36.0104 0x129c  scfilter - ok
00:24:36.0107 0x129c  Schedule - ok
00:24:36.0110 0x129c  scmbus - ok
00:24:36.0113 0x129c  scmdisk0101 - ok
00:24:36.0115 0x129c  SCPolicySvc - ok
00:24:36.0118 0x129c  sdbus - ok
00:24:36.0121 0x129c  SDRSVC - ok
00:24:36.0124 0x129c  sdstor - ok
00:24:36.0127 0x129c  seclogon - ok
00:24:36.0130 0x129c  SENS - ok
00:24:36.0132 0x129c  Sense - ok
00:24:36.0135 0x129c  SensorDataService - ok
00:24:36.0139 0x129c  SensorService - ok
00:24:36.0142 0x129c  SensrSvc - ok
00:24:36.0144 0x129c  SerCx - ok
00:24:36.0147 0x129c  SerCx2 - ok
00:24:36.0150 0x129c  Serenum - ok
00:24:36.0153 0x129c  Serial - ok
00:24:36.0156 0x129c  sermouse - ok
00:24:36.0159 0x129c  SessionEnv - ok
00:24:36.0162 0x129c  sfloppy - ok
00:24:36.0165 0x129c  SharedAccess - ok
00:24:36.0168 0x129c  ShellHWDetection - ok
00:24:36.0171 0x129c  shpamsvc - ok
00:24:36.0174 0x129c  SiSRaid2 - ok
00:24:36.0177 0x129c  SiSRaid4 - ok
00:24:36.0180 0x129c  smphost - ok
00:24:36.0183 0x129c  SmsRouter - ok
00:24:36.0188 0x129c  SNMPTRAP - ok
00:24:36.0191 0x129c  spaceport - ok
00:24:36.0194 0x129c  SpbCx - ok
00:24:36.0197 0x129c  Spooler - ok
00:24:36.0199 0x129c  sppsvc - ok
00:24:36.0202 0x129c  srv - ok
00:24:36.0205 0x129c  srv2 - ok
00:24:36.0208 0x129c  srvnet - ok
00:24:36.0211 0x129c  SSDPSRV - ok
00:24:36.0214 0x129c  SstpSvc - ok
00:24:36.0217 0x129c  StateRepository - ok
00:24:36.0220 0x129c  stexstor - ok
00:24:36.0224 0x129c  stisvc - ok
00:24:36.0227 0x129c  storahci - ok
00:24:36.0230 0x129c  storflt - ok
00:24:36.0232 0x129c  stornvme - ok
00:24:36.0236 0x129c  storqosflt - ok
00:24:36.0238 0x129c  StorSvc - ok
00:24:36.0241 0x129c  storufs - ok
00:24:36.0244 0x129c  storvsc - ok
00:24:36.0247 0x129c  svsvc - ok
00:24:36.0250 0x129c  swenum - ok
00:24:36.0264 0x129c  [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] SwitchBoard     C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
00:24:36.0291 0x129c  SwitchBoard - detected UnsignedFile.Multi.Generic ( 1 )
00:24:36.0471 0x129c  Detect skipped due to KSN trusted
00:24:36.0471 0x129c  SwitchBoard - ok
00:24:36.0476 0x129c  swprv - ok
00:24:36.0483 0x129c  Synth3dVsc - ok
00:24:36.0491 0x129c  SysMain - ok
00:24:36.0498 0x129c  SystemEventsBroker - ok
00:24:36.0504 0x129c  TabletInputService - ok
00:24:36.0509 0x129c  TapiSrv - ok
00:24:36.0512 0x129c  Tcpip - ok
00:24:36.0515 0x129c  Tcpip6 - ok
00:24:36.0520 0x129c  tcpipreg - ok
00:24:36.0524 0x129c  tdx - ok
00:24:36.0528 0x129c  terminpt - ok
00:24:36.0532 0x129c  TermService - ok
00:24:36.0536 0x129c  Themes - ok
00:24:36.0540 0x129c  TieringEngineService - ok
00:24:36.0543 0x129c  tiledatamodelsvc - ok
00:24:36.0547 0x129c  TimeBrokerSvc - ok
00:24:36.0550 0x129c  TPM - ok
00:24:36.0554 0x129c  TrkWks - ok
00:24:36.0556 0x129c  TrustedInstaller - ok
00:24:36.0561 0x129c  tsusbflt - ok
00:24:36.0564 0x129c  TsUsbGD - ok
00:24:36.0567 0x129c  tsusbhub - ok
00:24:36.0572 0x129c  tunnel - ok
00:24:36.0575 0x129c  tzautoupdate - ok
00:24:36.0578 0x129c  [ A070ABB9D85582B2BECADBE6FCD12350, 3EBFA349F87933E20C4EADA2FA2E64206CCAC70DFB8B52C2E41670FFB16D7336 ] t_mouse.sys     C:\Windows\System32\drivers\t_mouse.sys
00:24:36.0599 0x129c  t_mouse.sys - ok
00:24:36.0603 0x129c  UASPStor - ok
00:24:36.0605 0x129c  UcmCx0101 - ok
00:24:36.0609 0x129c  UcmTcpciCx0101 - ok
00:24:36.0612 0x129c  UcmUcsi - ok
00:24:36.0615 0x129c  Ucx01000 - ok
00:24:36.0618 0x129c  UdeCx - ok
00:24:36.0621 0x129c  udfs - ok
00:24:36.0625 0x129c  UEFI - ok
00:24:36.0628 0x129c  UevAgentDriver - ok
00:24:36.0632 0x129c  UevAgentService - ok
00:24:36.0634 0x129c  Ufx01000 - ok
00:24:36.0638 0x129c  UfxChipidea - ok
00:24:36.0641 0x129c  ufxsynopsys - ok
00:24:36.0647 0x129c  UI0Detect - ok
00:24:36.0650 0x129c  umbus - ok
00:24:36.0654 0x129c  UmPass - ok
00:24:36.0657 0x129c  UmRdpService - ok
00:24:36.0660 0x129c  UnistoreSvc - ok
00:24:36.0666 0x129c  upnphost - ok
00:24:36.0670 0x129c  UrsChipidea - ok
00:24:36.0673 0x129c  UrsCx01000 - ok
00:24:36.0677 0x129c  UrsSynopsys - ok
00:24:36.0682 0x129c  [ F957092C63CD71D85903CA0D8370F473, 4DEC2FC20329F248135DA24CB6694FD972DCCE8B1BBEA8D872FDE41939E96AAF ] USBAAPL64       C:\Windows\System32\Drivers\usbaapl64.sys
00:24:36.0691 0x129c  USBAAPL64 - detected UnsignedFile.Multi.Generic ( 1 )
00:24:36.0898 0x129c  Detect skipped due to KSN trusted
00:24:36.0898 0x129c  USBAAPL64 - ok
00:24:36.0905 0x129c  usbccgp - ok
00:24:36.0912 0x129c  usbcir - ok
00:24:36.0918 0x129c  usbehci - ok
00:24:36.0925 0x129c  usbhub - ok
00:24:36.0932 0x129c  USBHUB3 - ok
00:24:36.0939 0x129c  usbohci - ok
00:24:36.0946 0x129c  usbprint - ok
00:24:36.0953 0x129c  usbser - ok
00:24:36.0956 0x129c  USBSTOR - ok
00:24:36.0960 0x129c  usbuhci - ok
00:24:36.0963 0x129c  USBXHCI - ok
00:24:36.0967 0x129c  UserDataSvc - ok
00:24:36.0973 0x129c  UserManager - ok
00:24:36.0976 0x129c  UsoSvc - ok
00:24:36.0980 0x129c  VaultSvc - ok
00:24:36.0982 0x129c  vdrvroot - ok
00:24:36.0986 0x129c  vds - ok
00:24:36.0988 0x129c  VerifierExt - ok
00:24:36.0992 0x129c  vhdmp - ok
00:24:36.0995 0x129c  vhf - ok
00:24:37.0014 0x129c  [ EF2270C2DF2B61FF1B8C422DC443CEFE, 30C74108BC0DE5884D64C7611CE8282CE556D9B42D7BE1FE569DE2067FBB4D5A ] VIAHdAudAddService C:\Windows\system32\drivers\viahduaa.sys
00:24:37.0041 0x129c  VIAHdAudAddService - ok
00:24:37.0046 0x129c  [ 004175DA13E0372DA58F523104921631, 413A4C8169EDFDBAA58DA5FEDCBF1D0525F64A7AD34BAF17E29BCD14C1C189A7 ] VIAKaraokeService C:\Windows\system32\viakaraokesrv.exe
00:24:37.0068 0x129c  VIAKaraokeService - ok
00:24:37.0072 0x129c  vmbus - ok
00:24:37.0075 0x129c  VMBusHID - ok
00:24:37.0078 0x129c  vmgid - ok
00:24:37.0081 0x129c  vmicguestinterface - ok
00:24:37.0083 0x129c  vmicheartbeat - ok
00:24:37.0087 0x129c  vmickvpexchange - ok
00:24:37.0091 0x129c  vmicrdv - ok
00:24:37.0093 0x129c  vmicshutdown - ok
00:24:37.0096 0x129c  vmictimesync - ok
00:24:37.0099 0x129c  vmicvmsession - ok
00:24:37.0101 0x129c  vmicvss - ok
00:24:37.0104 0x129c  volmgr - ok
00:24:37.0107 0x129c  volmgrx - ok
00:24:37.0110 0x129c  volsnap - ok
00:24:37.0113 0x129c  volume - ok
00:24:37.0117 0x129c  vpci - ok
00:24:37.0119 0x129c  vsmraid - ok
00:24:37.0122 0x129c  VSS - ok
00:24:37.0125 0x129c  VSTXRAID - ok
00:24:37.0128 0x129c  vwifibus - ok
00:24:37.0131 0x129c  vwififlt - ok
00:24:37.0134 0x129c  W32Time - ok
00:24:37.0137 0x129c  WacomPen - ok
00:24:37.0140 0x129c  WalletService - ok
00:24:37.0143 0x129c  wanarp - ok
00:24:37.0146 0x129c  wanarpv6 - ok
00:24:37.0149 0x129c  wbengine - ok
00:24:37.0152 0x129c  WbioSrvc - ok
00:24:37.0155 0x129c  wcifs - ok
00:24:37.0158 0x129c  Wcmsvc - ok
00:24:37.0161 0x129c  wcncsvc - ok
00:24:37.0164 0x129c  wcnfs - ok
00:24:37.0167 0x129c  WdBoot - ok
00:24:37.0170 0x129c  Wdf01000 - ok
00:24:37.0173 0x129c  WdFilter - ok
00:24:37.0176 0x129c  WdiServiceHost - ok
00:24:37.0178 0x129c  WdiSystemHost - ok
00:24:37.0181 0x129c  wdiwifi - ok
00:24:37.0184 0x129c  WdNisDrv - ok
00:24:37.0187 0x129c  WdNisSvc - ok
00:24:37.0191 0x129c  WebClient - ok
00:24:37.0194 0x129c  Wecsvc - ok
00:24:37.0197 0x129c  WEPHOSTSVC - ok
00:24:37.0200 0x129c  wercplsupport - ok
00:24:37.0203 0x129c  WerSvc - ok
00:24:37.0206 0x129c  WFPLWFS - ok
00:24:37.0209 0x129c  WiaRpc - ok
00:24:37.0212 0x129c  WIMMount - ok
00:24:37.0214 0x129c  WinDefend - ok
00:24:37.0220 0x129c  WindowsTrustedRT - ok
00:24:37.0223 0x129c  WindowsTrustedRTProxy - ok
00:24:37.0226 0x129c  WinHttpAutoProxySvc - ok
00:24:37.0229 0x129c  WinMad - ok
00:24:37.0238 0x129c  Winmgmt - ok
00:24:37.0240 0x129c  WinRM - ok
00:24:37.0246 0x129c  WINUSB - ok
00:24:37.0249 0x129c  WinVerbs - ok
00:24:37.0253 0x129c  [ 3A627A24EAC6CEC3BA59548AA70BAD6E, C4B908CEB2D6F7F14C635AE02E20B16DAF795073975AE3967627D27E8ABAB015 ] WirelessKeyboardFilter C:\Windows\System32\drivers\WirelessKeyboardFilter.sys
00:24:37.0266 0x129c  WirelessKeyboardFilter - ok
00:24:37.0269 0x129c  wisvc - ok
00:24:37.0272 0x129c  WlanSvc - ok
00:24:37.0276 0x129c  wlidsvc - ok
00:24:37.0279 0x129c  WmiAcpi - ok
00:24:37.0283 0x129c  wmiApSrv - ok
00:24:37.0286 0x129c  WMPNetworkSvc - ok
00:24:37.0289 0x129c  Wof - ok
00:24:37.0294 0x129c  workfolderssvc - ok
00:24:37.0298 0x129c  WPDBusEnum - ok
00:24:37.0303 0x129c  WpdUpFltr - ok
00:24:37.0308 0x129c  WpnService - ok
00:24:37.0311 0x129c  WpnUserService - ok
00:24:37.0316 0x129c  ws2ifsl - ok
00:24:37.0319 0x129c  wscsvc - ok
00:24:37.0324 0x129c  WSearch - ok
00:24:37.0329 0x129c  wuauserv - ok
00:24:37.0332 0x129c  WudfPf - ok
00:24:37.0335 0x129c  WUDFRd - ok
00:24:37.0339 0x129c  wudfsvc - ok
00:24:37.0342 0x129c  WUDFWpdFs - ok
00:24:37.0346 0x129c  WUDFWpdMtp - ok
00:24:37.0349 0x129c  WwanSvc - ok
00:24:37.0352 0x129c  XblAuthManager - ok
00:24:37.0356 0x129c  XblGameSave - ok
00:24:37.0359 0x129c  xboxgip - ok
00:24:37.0362 0x129c  XboxNetApiSvc - ok
00:24:37.0365 0x129c  xinputhid - ok
00:24:37.0367 0x129c  ================ Scan global ===============================
00:24:37.0378 0x129c  [ Global ] - ok
00:24:37.0378 0x129c  ================ Scan MBR ==================================
00:24:37.0380 0x129c  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk2\DR2
00:24:37.0443 0x129c  \Device\Harddisk2\DR2 - ok
00:24:37.0462 0x129c  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
00:24:37.0640 0x129c  \Device\Harddisk0\DR0 - ok
00:24:37.0644 0x129c  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
00:24:37.0876 0x129c  \Device\Harddisk1\DR1 - ok
00:24:37.0877 0x129c  ================ Scan VBR ==================================
00:24:37.0880 0x129c  [ 9B36AC87CCD8DBD7266BE4802F2C548F ] \Device\Harddisk2\DR2\Partition1
00:24:37.0882 0x129c  \Device\Harddisk2\DR2\Partition1 - ok
00:24:37.0887 0x129c  [ 88B2F4B56CC02D9194866855BCEE54C5 ] \Device\Harddisk0\DR0\Partition1
00:24:37.0890 0x129c  \Device\Harddisk0\DR0\Partition1 - ok
00:24:37.0894 0x129c  [ D665C41385222288F1AB70024C6E69BD ] \Device\Harddisk0\DR0\Partition2
00:24:37.0896 0x129c  \Device\Harddisk0\DR0\Partition2 - ok
00:24:37.0901 0x129c  [ BD4D04F5ED84E6B94EAB718ACA386271 ] \Device\Harddisk1\DR1\Partition1
00:24:37.0903 0x129c  \Device\Harddisk1\DR1\Partition1 - ok
00:24:37.0904 0x129c  ================ Scan generic autorun ======================
00:24:37.0915 0x129c  [ DB367E8C8F46C26A05BA982715CC0DB5, 63AE8DD8E41260123E8C98905BD3D444BED86AEA6353F690483E5CB116433AC2 ] C:\Windows\system32\TiltWheelMouse.exe
00:24:37.0945 0x129c  MouseDriver - ok
00:24:37.0946 0x129c  WindowsDefender - ok
00:24:37.0949 0x129c  ShadowPlay - ok
00:24:37.0964 0x129c  [ 63B913AAB1244D8DED54CF0EFC8A56BD, 639830E9ECB004F09EA968EDF68C0037B5DFF7CCFF007DE5D11DEF2166707341 ] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
00:24:37.0983 0x129c  AdobeAAMUpdater-1.0 - ok
00:24:37.0990 0x129c  [ EB34C71AC9BF2532820AE0F8952EE437, 775561BB60F6DBEAB76C0DFE186C60EF95D0246E15CB1A8BBACD1F38C2EA9EA1 ] C:\Program Files\iTunes\iTunesHelper.exe
00:24:37.0999 0x129c  iTunesHelper - ok
00:24:38.0013 0x129c  [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
00:24:38.0036 0x129c  SwitchBoard - detected UnsignedFile.Multi.Generic ( 1 )
00:24:38.0036 0x129c  Detect skipped due to KSN trusted
00:24:38.0036 0x129c  SwitchBoard - ok
00:24:38.0061 0x129c  [ 8FE651ACBA3344E645CFEB6286FFF6B8, ECE4DFFEB7EB0B19B6790FD0F619A5C4B23CA0BA9CC3F25924925F8EA07264B6 ] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe
00:24:38.0148 0x129c  AdobeCS6ServiceManager - ok
00:24:38.0187 0x129c  OneDriveSetup - ok
00:24:38.0190 0x129c  OneDriveSetup - ok
00:24:38.0193 0x129c  OneDriveSetup - ok
00:24:38.0213 0x129c  [ 92952D657D754B615ED1709414B443E9, 39F8B63A195F256D035283816C10B45DDF73A177B4143C0575259EE81D6A4000 ] C:\Program Files (x86)\VLC Updater\vlc-updater.exe
00:24:38.0237 0x129c  VLC Updater - ok
00:24:38.0241 0x129c  Waiting for KSN requests completion. In queue: 37
00:24:39.0269 0x129c  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x61100 ( enabled : updated )
00:24:39.0291 0x129c  Win FW state via NFP2: enabled ( trusted )
00:24:39.0439 0x129c  ============================================================
00:24:39.0439 0x129c  Scan finished
00:24:39.0439 0x129c  ============================================================
00:24:39.0454 0x0e74  Detected object count: 0
00:24:39.0454 0x0e74  Actual detected object count: 0
00:24:49.0965 0x1bec  Deinitialize success

Alt 13.11.2016, 02:13   #11
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Exploit:JS/Meadgive.U - Standard

Exploit:JS/Meadgive.U


Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 13.11.2016, 11:04   #12
m1ck3y
 
Exploit:JS/Meadgive.U - Standard

Exploit:JS/Meadgive.U


Code:
ATTFilter
# AdwCleaner v6.030 - Bericht erstellt am 13/11/2016 um 11:01:12
# Aktualisiert am 19/10/2016 von Malwarebytes
# Datenbank : 2016-11-13.1 [Server]
# Betriebssystem : Windows 10 Pro  (X64)
# Benutzername : Mickey - DESKTOP-AEGGCVJ
# Gestartet von : C:\Users\Mickey\Desktop\AdwCleaner_6.030.exe
# Modus: Suchlauf
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****

Keine schädlichen Dienste gefunden.


***** [ Ordner ] *****

Keine schädlichen Ordner gefunden.


***** [ Dateien ] *****

Keine schädlichen Dateien gefunden.


***** [ DLL ] *****

Keine infizierten DLLs gefunden.


***** [ WMI ] *****

Keine schädlichen Schlüssel gefunden.


***** [ Verknüpfungen ] *****

Keine infizierten Verknüpfungen gefunden.


***** [ Aufgabenplanung ] *****

Keine schädlichen Aufgaben gefunden.


***** [ Registrierungsdatenbank ] *****

Keine schädlichen Elemente in der Registrierungsdatenbank gefunden.


***** [ Internetbrowser ] *****

Keine schädlichen Elemente in Firefox basierten Browsern gefunden.
Keine schädlichen Elemente in Chrome basierten Browsern gefunden.

*************************

C:\AdwCleaner\AdwCleaner[S0].txt - [1195 Bytes] - [13/11/2016 11:01:12]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1268 Bytes] ##########
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 10 Pro x64 
Ran by Mickey (Administrator) on 13.11.2016 at 11:01:39,83
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 0 




Registry: 0 





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 13.11.2016 at 11:02:43,49
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Alt 13.11.2016, 19:45   #13
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Exploit:JS/Meadgive.U - Standard

Exploit:JS/Meadgive.U


Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 13.11.2016, 19:58   #14
m1ck3y
 
Exploit:JS/Meadgive.U - Standard

Exploit:JS/Meadgive.U


Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2016
durchgeführt von Mickey (Administrator) auf DESKTOP-AEGGCVJ (13-11-2016 19:55:43)
Gestartet von C:\Users\Mickey\Desktop
Geladene Profile: Mickey (Verfügbare Profile: defaultuser0 & Mickey & Lejla)
Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(VideoLAN) C:\Program Files\VideoLAN\VLC\vlc.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [MouseDriver] => C:\WINDOWS\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-29] (Microsoft Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-10-28] (Apple Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-755493514-3334125225-602857030-1001\...\Run: [VLC Updater] => C:\Program Files (x86)\VLC Updater\vlc-updater.exe [360776 2016-11-12] ()
HKU\S-1-5-21-755493514-3334125225-602857030-1001\...\Run: [AdobeBridge] => [X]

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{2f7f52f5-0d19-4509-969a-a2d7678b8e7d}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{dfae5735-28ad-4166-a956-2ba4d9fd185f}: [DhcpNameServer] 172.20.10.1

Internet Explorer:
==================
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-04-22] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 1brmdnm5.default
FF ProfilePath: C:\Users\Mickey\AppData\Roaming\Mozilla\Firefox\Profiles\1brmdnm5.default [2016-11-13]
FF Homepage: Mozilla\Firefox\Profiles\1brmdnm5.default -> google.at
FF Extension: (Ghostery) - C:\Users\Mickey\AppData\Roaming\Mozilla\Firefox\Profiles\1brmdnm5.default\Extensions\firefox@ghostery.com.xpi [2016-10-08]
FF Extension: (NoScript) - C:\Users\Mickey\AppData\Roaming\Mozilla\Firefox\Profiles\1brmdnm5.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-10-08]
FF Extension: (Adblock Plus) - C:\Users\Mickey\AppData\Roaming\Mozilla\Firefox\Profiles\1brmdnm5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-10-28]
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-11-10] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-11-10] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-12-02] (Adobe Systems)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-04-22] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\Microsoft Office\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-10-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-10-25] (NVIDIA Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-04-22] (Microsoft Corporation)

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [djhangopedggnlnicpbjklghlckmndge] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [458296 2016-10-25] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [458296 2016-10-25] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-10-25] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1165368 2016-10-25] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2117128 2016-11-08] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2178576 2016-11-08] (Electronic Arts)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [36504 2015-06-22] (VIA Technologies, Inc.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-11-13] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\drivers\ASACPI.sys [17280 2013-05-17] ()
S3 Netaapl; C:\Windows\System32\drivers\netaapl64.sys [23040 2016-03-28] (Apple Inc.) [Datei ist nicht signiert]
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_848dea456d3c865e\nvlddmkm.sys [14159928 2016-10-26] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [29240 2016-10-25] (NVIDIA Corporation)
S3 NVSWCFilter; C:\Windows\System32\drivers\nvswcfilter.sys [28344 2016-05-09] (Windows (R) Win 7 DDK provider)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47672 2016-10-25] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek                                            )
R3 t_mouse.sys; C:\Windows\System32\drivers\t_mouse.sys [6144 2013-04-09] ()
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-06-17] (Apple, Inc.) [Datei ist nicht signiert]
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 WirelessKeyboardFilter; C:\Windows\System32\drivers\WirelessKeyboardFilter.sys [49896 2016-07-22] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-11-13 19:55 - 2016-11-13 19:55 - 00012480 _____ C:\Users\Mickey\Desktop\FRST.txt
2016-11-13 19:55 - 2016-11-13 19:55 - 00000000 ____D C:\FRST
2016-11-13 19:55 - 2016-11-12 15:29 - 02411520 _____ (Farbar) C:\Users\Mickey\Desktop\FRST64.exe
2016-11-12 16:00 - 2016-11-12 16:19 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-11-12 13:41 - 2016-11-12 13:41 - 00004004 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-12 13:41 - 2016-11-12 13:41 - 00003976 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-12 13:41 - 2016-11-12 13:41 - 00003940 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-12 13:41 - 2016-11-12 13:41 - 00003914 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-12 13:41 - 2016-11-12 13:41 - 00003752 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-12 13:41 - 2016-11-12 13:41 - 00003710 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2016-11-12 13:41 - 2016-11-12 13:41 - 00000000 ____D C:\Windows\LastGood.Tmp
2016-11-12 13:41 - 2016-10-25 21:21 - 01854008 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2016-11-12 13:41 - 2016-10-25 21:21 - 00106040 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2016-11-12 13:41 - 2016-10-25 21:21 - 00095800 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2016-11-12 13:41 - 2016-10-25 21:21 - 00047672 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2016-11-12 13:27 - 2016-11-12 13:38 - 00001136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-11-12 13:27 - 2016-11-12 13:38 - 00001063 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-11-10 15:40 - 2016-11-10 15:40 - 00003992 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1475928435
2016-11-09 15:31 - 2016-10-29 00:56 - 00828408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-11-09 15:31 - 2016-10-29 00:56 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-09 11:08 - 2016-11-02 13:01 - 00484584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2016-11-09 11:08 - 2016-11-02 13:01 - 00315744 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-11-09 11:08 - 2016-11-02 12:22 - 01570672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-11-09 11:08 - 2016-11-02 12:22 - 00601712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-11-09 11:08 - 2016-11-02 12:20 - 00590960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-11-09 11:08 - 2016-11-02 12:13 - 01883784 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-11-09 11:08 - 2016-11-02 12:13 - 00773720 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-11-09 11:08 - 2016-11-02 12:12 - 02255712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-11-09 11:08 - 2016-11-02 12:12 - 00376672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-11-09 11:08 - 2016-11-02 12:12 - 00341344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-11-09 11:08 - 2016-11-02 12:10 - 02323728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2016-11-09 11:08 - 2016-11-02 12:09 - 02257104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-11-09 11:08 - 2016-11-02 12:08 - 00602464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2016-11-09 11:08 - 2016-11-02 12:08 - 00576408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2016-11-09 11:08 - 2016-11-02 12:08 - 00186424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\weretw.dll
2016-11-09 11:08 - 2016-11-02 12:05 - 06657176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-11-09 11:08 - 2016-11-02 12:05 - 03892352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2016-11-09 11:08 - 2016-11-02 12:05 - 00959112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-11-09 11:08 - 2016-11-02 12:05 - 00951904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-11-09 11:08 - 2016-11-02 12:05 - 00405856 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-11-09 11:08 - 2016-11-02 12:04 - 04312248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2016-11-09 11:08 - 2016-11-02 12:03 - 00714592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2016-11-09 11:08 - 2016-11-02 12:02 - 00682816 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2016-11-09 11:08 - 2016-11-02 12:02 - 00238056 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2016-11-09 11:08 - 2016-11-02 12:01 - 01415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2016-11-09 11:08 - 2016-11-02 12:01 - 01263856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-11-09 11:08 - 2016-11-02 12:01 - 00545936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2016-11-09 11:08 - 2016-11-02 12:01 - 00276832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll
2016-11-09 11:08 - 2016-11-02 12:00 - 08156080 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2016-11-09 11:08 - 2016-11-02 12:00 - 01274712 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-11-09 11:08 - 2016-11-02 12:00 - 00534096 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-11-09 11:08 - 2016-11-02 11:59 - 04673304 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-11-09 11:08 - 2016-11-02 11:50 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
2016-11-09 11:08 - 2016-11-02 11:49 - 00147968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2016-11-09 11:08 - 2016-11-02 11:49 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-11-09 11:08 - 2016-11-02 11:48 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-11-09 11:08 - 2016-11-02 11:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-11-09 11:08 - 2016-11-02 11:47 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-11-09 11:08 - 2016-11-02 11:46 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininetlui.dll
2016-11-09 11:08 - 2016-11-02 11:44 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2016-11-09 11:08 - 2016-11-02 11:44 - 00089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthExt.dll
2016-11-09 11:08 - 2016-11-02 11:43 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2016-11-09 11:08 - 2016-11-02 11:42 - 00632832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll
2016-11-09 11:08 - 2016-11-02 11:42 - 00549376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenterCPL.dll
2016-11-09 11:08 - 2016-11-02 11:42 - 00506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2016-11-09 11:08 - 2016-11-02 11:42 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2016-11-09 11:08 - 2016-11-02 11:40 - 00896512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontext.dll
2016-11-09 11:08 - 2016-11-02 11:40 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\indexeddbserver.dll
2016-11-09 11:08 - 2016-11-02 11:39 - 00465920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll
2016-11-09 11:08 - 2016-11-02 11:39 - 00348672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
2016-11-09 11:08 - 2016-11-02 11:39 - 00236544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2016-11-09 11:08 - 2016-11-02 11:38 - 00760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appwiz.cpl
2016-11-09 11:08 - 2016-11-02 11:37 - 19415040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-11-09 11:08 - 2016-11-02 11:37 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe
2016-11-09 11:08 - 2016-11-02 11:36 - 07626752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-11-09 11:08 - 2016-11-02 11:36 - 00415744 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe
2016-11-09 11:08 - 2016-11-02 11:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2016-11-09 11:08 - 2016-11-02 11:33 - 12349952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-11-09 11:08 - 2016-11-02 11:33 - 03307520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2016-11-09 11:08 - 2016-11-02 11:32 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\efsext.dll
2016-11-09 11:08 - 2016-11-02 11:31 - 01228288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2016-11-09 11:08 - 2016-11-02 11:31 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\WpcTok.exe
2016-11-09 11:08 - 2016-11-02 11:31 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-11-09 11:08 - 2016-11-02 11:31 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2016-11-09 11:08 - 2016-11-02 11:31 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-11-09 11:08 - 2016-11-02 11:30 - 09131008 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-11-09 11:08 - 2016-11-02 11:30 - 00567296 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2016-11-09 11:08 - 2016-11-02 11:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2016-11-09 11:08 - 2016-11-02 11:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2016-11-09 11:08 - 2016-11-02 11:29 - 07469056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-11-09 11:08 - 2016-11-02 11:29 - 00884224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-11-09 11:08 - 2016-11-02 11:29 - 00336896 _____ (Microsoft Corporation) C:\Windows\system32\NetworkBindingEngineMigPlugin.dll
2016-11-09 11:08 - 2016-11-02 11:29 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\mfsensorgroup.dll
2016-11-09 11:08 - 2016-11-02 11:29 - 00122368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NPSM.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 04423680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00411136 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00274432 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00240640 _____ (Microsoft Corporation) C:\Windows\system32\NetworkDesktopSettings.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\chartv.dll
2016-11-09 11:08 - 2016-11-02 11:28 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-11-09 11:08 - 2016-11-02 11:27 - 02458112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themecpl.dll
2016-11-09 11:08 - 2016-11-02 11:27 - 01388544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2016-11-09 11:08 - 2016-11-02 11:27 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\WlanMediaManager.dll
2016-11-09 11:08 - 2016-11-02 11:27 - 00580608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hgcpl.dll
2016-11-09 11:08 - 2016-11-02 11:27 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2016-11-09 11:08 - 2016-11-02 11:27 - 00495104 _____ (Microsoft Corporation) C:\Windows\system32\DataSenseHandlers.dll
2016-11-09 11:08 - 2016-11-02 11:27 - 00422400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 02747392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 02484736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 00912896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 00712192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 00579072 _____ (Microsoft Corporation) C:\Windows\system32\ddraw.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 00388608 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 00278016 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2016-11-09 11:08 - 2016-11-02 11:26 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Shell.dll
2016-11-09 11:08 - 2016-11-02 11:25 - 02998272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2016-11-09 11:08 - 2016-11-02 11:25 - 01556480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2016-11-09 11:08 - 2016-11-02 11:25 - 00655872 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2016-11-09 11:08 - 2016-11-02 11:25 - 00496128 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.UserAccountsHandlers.dll
2016-11-09 11:08 - 2016-11-02 11:24 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
2016-11-09 11:08 - 2016-11-02 11:23 - 03106304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2016-11-09 11:08 - 2016-11-02 11:23 - 02104320 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2016-11-09 11:08 - 2016-11-02 11:23 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-11-09 11:08 - 2016-11-02 11:22 - 13441024 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-11-09 11:08 - 2016-11-02 11:22 - 04749312 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2016-11-09 11:08 - 2016-11-02 11:22 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2016-11-09 11:08 - 2016-11-02 11:21 - 00942080 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-11-09 11:08 - 2016-11-02 11:19 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2016-11-09 11:08 - 2016-11-02 11:19 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\NPSM.dll
2016-11-09 11:08 - 2016-11-02 11:19 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\chartv.dll
2016-11-09 11:08 - 2016-11-02 11:19 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-11-09 11:08 - 2016-11-02 11:18 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2016-11-09 11:08 - 2016-11-02 11:18 - 00836608 _____ (Microsoft Corporation) C:\Windows\system32\WpcRefreshTask.dll
2016-11-09 11:08 - 2016-11-02 11:18 - 00779776 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2016-11-09 11:08 - 2016-11-02 11:17 - 01282048 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-11-09 11:08 - 2016-11-02 11:17 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2016-11-09 11:08 - 2016-11-02 11:17 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2016-11-09 11:08 - 2016-11-02 11:17 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2016-11-09 11:08 - 2016-11-02 11:16 - 03400192 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2016-11-09 11:08 - 2016-11-02 11:16 - 03133440 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2016-11-09 11:08 - 2016-11-02 11:16 - 02512384 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2016-11-09 11:08 - 2016-11-02 11:16 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2016-11-09 11:08 - 2016-11-02 11:16 - 00881664 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-11-09 11:08 - 2016-11-02 11:16 - 00629248 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
2016-11-09 11:08 - 2016-11-02 11:16 - 00579072 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll
2016-11-09 11:08 - 2016-11-02 11:16 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2016-11-09 11:08 - 2016-11-02 11:15 - 02611200 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2016-11-09 11:08 - 2016-11-02 11:15 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2016-11-09 11:08 - 2016-11-02 11:15 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2016-11-09 11:08 - 2016-11-02 11:14 - 01726976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2016-11-09 11:08 - 2016-11-02 11:13 - 03496960 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2016-11-09 11:08 - 2016-11-02 09:20 - 00446896 _____ C:\Windows\system32\ApnDatabase.xml
2016-11-09 11:07 - 2016-11-02 12:20 - 00378720 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-11-09 11:07 - 2016-11-02 12:15 - 01051112 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-11-09 11:07 - 2016-11-02 12:15 - 00894096 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-11-09 11:07 - 2016-11-02 12:14 - 07816544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-11-09 11:07 - 2016-11-02 12:13 - 01354320 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-11-09 11:07 - 2016-11-02 12:13 - 01173496 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-11-09 11:07 - 2016-11-02 12:13 - 00423776 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
2016-11-09 11:07 - 2016-11-02 12:08 - 00111968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2016-11-09 11:07 - 2016-11-02 12:05 - 20969928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-11-09 11:07 - 2016-11-02 12:04 - 02678056 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2016-11-09 11:07 - 2016-11-02 12:04 - 00596832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2016-11-09 11:07 - 2016-11-02 12:03 - 02750936 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-11-09 11:07 - 2016-11-02 12:02 - 00848736 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2016-11-09 11:07 - 2016-11-02 12:02 - 00148832 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2016-11-09 11:07 - 2016-11-02 12:01 - 01425000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2016-11-09 11:07 - 2016-11-02 12:01 - 00092512 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-11-09 11:07 - 2016-11-02 12:00 - 22223968 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-11-09 11:07 - 2016-11-02 12:00 - 04130432 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2016-11-09 11:07 - 2016-11-02 12:00 - 01061968 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-11-09 11:07 - 2016-11-02 11:56 - 01609920 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2016-11-09 11:07 - 2016-11-02 11:56 - 01572768 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2016-11-09 11:07 - 2016-11-02 11:56 - 01418312 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-11-09 11:07 - 2016-11-02 11:56 - 00628552 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2016-11-09 11:07 - 2016-11-02 11:56 - 00322912 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2016-11-09 11:07 - 2016-11-02 11:55 - 00048992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\iorate.sys
2016-11-09 11:07 - 2016-11-02 11:48 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efsext.dll
2016-11-09 11:07 - 2016-11-02 11:47 - 00285184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BlockedShutdown.dll
2016-11-09 11:07 - 2016-11-02 11:47 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BcastDVRHelper.dll
2016-11-09 11:07 - 2016-11-02 11:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppCapture.dll
2016-11-09 11:07 - 2016-11-02 11:45 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2016-11-09 11:07 - 2016-11-02 11:45 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BioFeedback.dll
2016-11-09 11:07 - 2016-11-02 11:45 - 00182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsensorgroup.dll
2016-11-09 11:07 - 2016-11-02 11:44 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2016-11-09 11:07 - 2016-11-02 11:43 - 00731136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8.dll
2016-11-09 11:07 - 2016-11-02 11:43 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-11-09 11:07 - 2016-11-02 11:43 - 00198144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FSClient.dll
2016-11-09 11:07 - 2016-11-02 11:43 - 00126464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2016-11-09 11:07 - 2016-11-02 11:42 - 00866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Cred.dll
2016-11-09 11:07 - 2016-11-02 11:42 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2016-11-09 11:07 - 2016-11-02 11:42 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-11-09 11:07 - 2016-11-02 11:41 - 00635904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-11-09 11:07 - 2016-11-02 11:40 - 00548352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ddraw.dll
2016-11-09 11:07 - 2016-11-02 11:38 - 22563840 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-11-09 11:07 - 2016-11-02 11:36 - 19415552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-11-09 11:07 - 2016-11-02 11:36 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetailsUpdate.dll
2016-11-09 11:07 - 2016-11-02 11:35 - 00336896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
2016-11-09 11:07 - 2016-11-02 11:34 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-11-09 11:07 - 2016-11-02 11:33 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-11-09 11:07 - 2016-11-02 11:32 - 00045056 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-11-09 11:07 - 2016-11-02 11:31 - 03196416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2016-11-09 11:07 - 2016-11-02 11:31 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\BcastDVRHelper.dll
2016-11-09 11:07 - 2016-11-02 11:31 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\AppCapture.dll
2016-11-09 11:07 - 2016-11-02 11:31 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\ACPBackgroundManagerPolicy.dll
2016-11-09 11:07 - 2016-11-02 11:31 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\wininetlui.dll
2016-11-09 11:07 - 2016-11-02 11:30 - 12175360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-11-09 11:07 - 2016-11-02 11:30 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll
2016-11-09 11:07 - 2016-11-02 11:30 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BioFeedback.dll
2016-11-09 11:07 - 2016-11-02 11:30 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2016-11-09 11:07 - 2016-11-02 11:30 - 00134144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetails.dll
2016-11-09 11:07 - 2016-11-02 11:29 - 03666432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-11-09 11:07 - 2016-11-02 11:29 - 01247232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2016-11-09 11:07 - 2016-11-02 11:29 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2016-11-09 11:07 - 2016-11-02 11:29 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
2016-11-09 11:07 - 2016-11-02 11:29 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-11-09 11:07 - 2016-11-02 11:29 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2016-11-09 11:07 - 2016-11-02 11:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-11-09 11:07 - 2016-11-02 11:28 - 06044160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-11-09 11:07 - 2016-11-02 11:28 - 00807424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2016-11-09 11:07 - 2016-11-02 11:28 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2016-11-09 11:07 - 2016-11-02 11:28 - 00690176 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2016-11-09 11:07 - 2016-11-02 11:28 - 00321024 _____ (Microsoft Corporation) C:\Windows\system32\NetworkUXBroker.dll
2016-11-09 11:07 - 2016-11-02 11:28 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2016-11-09 11:07 - 2016-11-02 11:28 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2016-11-09 11:07 - 2016-11-02 11:28 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-11-09 11:07 - 2016-11-02 11:27 - 23677952 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-11-09 11:07 - 2016-11-02 11:27 - 00605184 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvr.exe
2016-11-09 11:07 - 2016-11-02 11:27 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
2016-11-09 11:07 - 2016-11-02 11:26 - 01880576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2016-11-09 11:07 - 2016-11-02 11:26 - 01595392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-11-09 11:07 - 2016-11-02 11:26 - 01509376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-11-09 11:07 - 2016-11-02 11:26 - 00798208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-11-09 11:07 - 2016-11-02 11:26 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-11-09 11:07 - 2016-11-02 11:25 - 02256384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-11-09 11:07 - 2016-11-02 11:25 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2016-11-09 11:07 - 2016-11-02 11:25 - 00772608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2016-11-09 11:07 - 2016-11-02 11:25 - 00541696 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2016-11-09 11:07 - 2016-11-02 11:24 - 03778560 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2016-11-09 11:07 - 2016-11-02 11:23 - 02356736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
2016-11-09 11:07 - 2016-11-02 11:23 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
2016-11-09 11:07 - 2016-11-02 11:23 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetailsUpdate.dll
2016-11-09 11:07 - 2016-11-02 11:22 - 13081600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-11-09 11:07 - 2016-11-02 11:22 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2016-11-09 11:07 - 2016-11-02 11:21 - 05111296 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2016-11-09 11:07 - 2016-11-02 11:20 - 02273792 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-11-09 11:07 - 2016-11-02 11:20 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetails.dll
2016-11-09 11:07 - 2016-11-02 11:19 - 08127488 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-11-09 11:07 - 2016-11-02 11:19 - 08075776 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-11-09 11:07 - 2016-11-02 11:19 - 01586176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2016-11-09 11:07 - 2016-11-02 11:19 - 00805888 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2016-11-09 11:07 - 2016-11-02 11:18 - 01690112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2016-11-09 11:07 - 2016-11-02 11:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2016-11-09 11:07 - 2016-11-02 11:17 - 04746752 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-11-09 11:07 - 2016-11-02 11:17 - 00982528 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 04148736 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 02688512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 02669056 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 01779712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 01637888 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 01490944 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 00770560 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 00265728 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2016-11-09 11:07 - 2016-11-02 11:15 - 04708864 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-11-09 11:07 - 2016-11-02 11:15 - 03616768 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-11-09 11:07 - 2016-11-02 11:15 - 01513472 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-11-09 11:07 - 2016-11-02 11:15 - 01348608 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2016-11-09 11:07 - 2016-11-02 11:13 - 03299840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2016-11-09 11:07 - 2016-11-02 11:13 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2016-11-09 11:07 - 2016-11-02 10:11 - 00788624 _____ C:\Windows\SysWOW64\locale.nls
2016-11-09 11:07 - 2016-11-02 10:11 - 00788624 _____ C:\Windows\system32\locale.nls
2016-11-09 11:07 - 2016-08-02 05:30 - 00822784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2016-11-08 12:00 - 2016-11-08 12:01 - 00000000 ____D C:\Users\Lejla\Desktop\Musicfall16
2016-11-03 08:59 - 2016-11-03 08:59 - 00001453 _____ C:\Users\Lejla\Desktop\S4Studio - Verknüpfung.lnk
2016-11-03 08:58 - 2016-11-03 08:58 - 00000000 ____D C:\Users\Lejla\Documents\Sims 4 Studio
2016-11-01 18:50 - 2016-11-01 18:52 - 00000000 ____D C:\Users\Lejla\Documents\Sims4Studio_v2.7.1.3 (Jackpot)
2016-11-01 17:58 - 2016-11-01 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-11-01 17:58 - 2016-11-01 17:58 - 00000000 ____D C:\Program Files\iTunes
2016-11-01 17:58 - 2016-11-01 17:58 - 00000000 ____D C:\Program Files\iPod
2016-11-01 17:47 - 2016-11-01 17:47 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-10-31 12:18 - 2016-10-31 12:18 - 00000000 ____D C:\Users\Mickey\Documents\Benutzerdefinierte Office-Vorlagen
2016-10-28 16:27 - 2016-10-28 16:27 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-10-28 16:27 - 2016-10-25 21:00 - 00134712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-10-28 16:27 - 2016-09-09 19:25 - 00269600 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-10-28 16:27 - 2016-09-09 19:25 - 00261920 _____ C:\Windows\system32\vulkan-1.dll
2016-10-28 16:27 - 2016-09-09 19:25 - 00110880 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-10-28 16:27 - 2016-09-09 19:24 - 00125216 _____ C:\Windows\system32\vulkaninfo.exe
2016-10-28 16:24 - 2016-10-25 22:40 - 40123840 _____ C:\Windows\system32\nvcompiler.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 35224632 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 34711096 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 28202040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 10912232 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 10782952 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 10332664 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 09120512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 08913512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 08723968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 03927288 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 03468736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 02940352 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 02574784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 01953336 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437570.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437570.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 01037248 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00975296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00943552 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00897080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00802768 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00683640 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00644112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00617696 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00572888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00438208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00394704 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00390200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00384448 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00348728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00327224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-10-28 16:24 - 2016-10-25 22:40 - 00042296 _____ C:\Windows\system32\nvinfo.pb
2016-10-27 21:38 - 2016-10-27 21:38 - 00015425 _____ C:\Windows\system32\OEMDefaultAssociations.xml
2016-10-27 18:57 - 2016-10-15 05:51 - 02186896 _____ (Microsoft Corporation) C:\Windows\system32\hevcdecoder.dll
2016-10-27 18:57 - 2016-10-15 05:51 - 01637728 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-10-27 18:57 - 2016-10-15 05:51 - 01235296 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-10-27 18:57 - 2016-10-15 05:51 - 00595296 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-10-27 18:57 - 2016-10-15 05:51 - 00584032 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-10-27 18:57 - 2016-10-15 05:51 - 00322912 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-10-27 18:57 - 2016-10-15 05:51 - 00283488 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2016-10-27 18:57 - 2016-10-15 05:51 - 00232800 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-10-27 18:57 - 2016-10-15 05:51 - 00137568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-10-27 18:57 - 2016-10-15 05:51 - 00078688 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-10-27 18:57 - 2016-10-15 05:48 - 00498952 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2016-10-27 18:57 - 2016-10-15 05:43 - 01356352 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2016-10-27 18:57 - 2016-10-15 05:41 - 05622088 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2016-10-27 18:57 - 2016-10-15 05:38 - 00500064 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-10-27 18:57 - 2016-10-15 05:37 - 00063328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2016-10-27 18:57 - 2016-10-15 05:34 - 01969912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hevcdecoder.dll
2016-10-27 18:57 - 2016-10-15 05:33 - 00455040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DolbyDecMFT.dll
2016-10-27 18:57 - 2016-10-15 05:31 - 02827864 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2016-10-27 18:57 - 2016-10-15 05:31 - 02190688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-10-27 18:57 - 2016-10-15 05:31 - 00658272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-10-27 18:57 - 2016-10-15 05:31 - 00402272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-10-27 18:57 - 2016-10-15 05:30 - 01851696 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-10-27 18:57 - 2016-10-15 05:30 - 00557408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2016-10-27 18:57 - 2016-10-15 05:30 - 00509280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-10-27 18:57 - 2016-10-15 05:30 - 00341936 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-10-27 18:57 - 2016-10-15 05:29 - 02913104 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-10-27 18:57 - 2016-10-15 05:29 - 01267504 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-10-27 18:57 - 2016-10-15 05:29 - 00908640 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2016-10-27 18:57 - 2016-10-15 05:29 - 00335712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-10-27 18:57 - 2016-10-15 05:29 - 00079200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2016-10-27 18:57 - 2016-10-15 05:26 - 01990648 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2016-10-27 18:57 - 2016-10-15 05:26 - 01694712 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2016-10-27 18:57 - 2016-10-15 05:26 - 01600632 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2016-10-27 18:57 - 2016-10-15 05:26 - 01472536 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-10-27 18:57 - 2016-10-15 05:26 - 00811416 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2016-10-27 18:57 - 2016-10-15 05:26 - 00691080 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2016-10-27 18:57 - 2016-10-15 05:25 - 00882680 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeManagerObj.dll
2016-10-27 18:57 - 2016-10-15 05:25 - 00742704 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2016-10-27 18:57 - 2016-10-15 05:22 - 01461200 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-10-27 18:57 - 2016-10-15 05:21 - 02537824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-10-27 18:57 - 2016-10-15 05:21 - 01100128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-10-27 18:57 - 2016-10-15 05:21 - 00584032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2016-10-27 18:57 - 2016-10-15 05:21 - 00292872 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2016-10-27 18:57 - 2016-10-15 05:18 - 00749920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll
2016-10-27 18:57 - 2016-10-15 05:15 - 01557808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2016-10-27 18:57 - 2016-10-15 05:15 - 00687936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2016-10-27 18:57 - 2016-10-15 05:10 - 00254656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpeffects.dll
2016-10-27 18:57 - 2016-10-15 05:06 - 05685760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-10-27 18:57 - 2016-10-15 05:05 - 07216640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-10-27 18:57 - 2016-10-15 05:01 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2016-10-27 18:57 - 2016-10-15 05:00 - 01631232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-10-27 18:57 - 2016-10-15 05:00 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2016-10-27 18:57 - 2016-10-15 05:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-10-27 18:57 - 2016-10-15 05:00 - 00018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stdole2.tlb
2016-10-27 18:57 - 2016-10-15 04:59 - 00272384 _____ (Microsoft Corporation) C:\Windows\system32\mfksproxy.dll
2016-10-27 18:57 - 2016-10-15 04:59 - 00187904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfksproxy.dll
2016-10-27 18:57 - 2016-10-15 04:59 - 00130560 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2016-10-27 18:57 - 2016-10-15 04:58 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xboxgip.sys
2016-10-27 18:57 - 2016-10-15 04:57 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2016-10-27 18:57 - 2016-10-15 04:57 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2016-10-27 18:57 - 2016-10-15 04:57 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpdxm.dll
2016-10-27 18:57 - 2016-10-15 04:57 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dtdump.exe
2016-10-27 18:57 - 2016-10-15 04:56 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\esentutl.exe
2016-10-27 18:57 - 2016-10-15 04:56 - 00306688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esentutl.exe
2016-10-27 18:57 - 2016-10-15 04:56 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\AudioSrvPolicyManager.dll
2016-10-27 18:57 - 2016-10-15 04:56 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFi.dll
2016-10-27 18:57 - 2016-10-15 04:56 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2016-10-27 18:57 - 2016-10-15 04:56 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll
2016-10-27 18:57 - 2016-10-15 04:56 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2016-10-27 18:57 - 2016-10-15 04:56 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\HttpsDataSource.dll
2016-10-27 18:57 - 2016-10-15 04:56 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\OnDemandConnRouteHelper.dll
2016-10-27 18:57 - 2016-10-15 04:55 - 00329216 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
2016-10-27 18:57 - 2016-10-15 04:55 - 00265728 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2016-10-27 18:57 - 2016-10-15 04:55 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Flights.dll
2016-10-27 18:57 - 2016-10-15 04:55 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFi.dll
2016-10-27 18:57 - 2016-10-15 04:55 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2016-10-27 18:57 - 2016-10-15 04:54 - 00717312 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
2016-10-27 18:57 - 2016-10-15 04:54 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2016-10-27 18:57 - 2016-10-15 04:54 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2016-10-27 18:57 - 2016-10-15 04:54 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll
2016-10-27 18:57 - 2016-10-15 04:54 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoplay.dll
2016-10-27 18:57 - 2016-10-15 04:54 - 00102912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpshell.dll
2016-10-27 18:57 - 2016-10-15 04:54 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
2016-10-27 18:57 - 2016-10-15 04:53 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2016-10-27 18:57 - 2016-10-15 04:53 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-10-27 18:57 - 2016-10-15 04:52 - 06285312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2016-10-27 18:57 - 2016-10-15 04:52 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2016-10-27 18:57 - 2016-10-15 04:52 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\cdpusersvc.dll
2016-10-27 18:57 - 2016-10-15 04:52 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll
2016-10-27 18:57 - 2016-10-15 04:52 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
2016-10-27 18:57 - 2016-10-15 04:51 - 13868544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-10-27 18:57 - 2016-10-15 04:51 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2016-10-27 18:57 - 2016-10-15 04:50 - 17188352 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-10-27 18:57 - 2016-10-15 04:50 - 02716672 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-10-27 18:57 - 2016-10-15 04:50 - 02333184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2016-10-27 18:57 - 2016-10-15 04:50 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Bluetooth.dll
2016-10-27 18:57 - 2016-10-15 04:50 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-10-27 18:57 - 2016-10-15 04:50 - 00310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2016-10-27 18:57 - 2016-10-15 04:50 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2016-10-27 18:57 - 2016-10-15 04:50 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2016-10-27 18:57 - 2016-10-15 04:49 - 01913344 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2016-10-27 18:57 - 2016-10-15 04:49 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2016-10-27 18:57 - 2016-10-15 04:49 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-10-27 18:57 - 2016-10-15 04:49 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2016-10-27 18:57 - 2016-10-15 04:49 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2016-10-27 18:57 - 2016-10-15 04:49 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-10-27 18:57 - 2016-10-15 04:48 - 01554944 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2016-10-27 18:57 - 2016-10-15 04:48 - 01323008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
2016-10-27 18:57 - 2016-10-15 04:48 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2016-10-27 18:57 - 2016-10-15 04:47 - 07792640 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2016-10-27 18:57 - 2016-10-15 04:47 - 01113600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
2016-10-27 18:57 - 2016-10-15 04:47 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.BackgroundMediaPlayback.dll
2016-10-27 18:57 - 2016-10-15 04:47 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2016-10-27 18:57 - 2016-10-15 04:46 - 03287552 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-10-27 18:57 - 2016-10-15 04:46 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-10-27 18:57 - 2016-10-15 04:46 - 00471552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2016-10-27 18:57 - 2016-10-15 04:45 - 01790464 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2016-10-27 18:57 - 2016-10-15 04:45 - 00702464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Playback.MediaPlayer.dll
2016-10-27 18:57 - 2016-10-15 04:45 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2016-10-27 18:57 - 2016-10-15 04:44 - 00747008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RemoteNaturalLanguage.dll
2016-10-27 18:57 - 2016-10-15 04:44 - 00470016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-10-27 18:57 - 2016-10-15 04:44 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe
2016-10-27 18:57 - 2016-10-15 04:43 - 02748928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2016-10-27 18:57 - 2016-10-15 04:43 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2016-10-27 18:57 - 2016-10-15 04:43 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll
2016-10-27 18:57 - 2016-10-15 04:43 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\iscsiwmi.dll
2016-10-27 18:57 - 2016-10-15 04:42 - 06108672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2016-10-27 18:57 - 2016-10-15 04:42 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2016-10-27 18:57 - 2016-10-15 04:42 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\Geolocation.dll
2016-10-27 18:57 - 2016-10-15 04:42 - 00459776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2016-10-27 18:57 - 2016-10-15 04:41 - 07654912 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2016-10-27 18:57 - 2016-10-15 04:41 - 05376000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2016-10-27 18:57 - 2016-10-15 04:41 - 00945664 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2016-10-27 18:57 - 2016-10-15 04:41 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\EditionUpgradeHelper.dll
2016-10-27 18:57 - 2016-10-15 04:41 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsiwmi.dll
2016-10-27 18:57 - 2016-10-15 04:39 - 04474368 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2016-10-27 18:57 - 2016-10-15 04:39 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2016-10-27 18:57 - 2016-10-15 04:39 - 01005568 _____ (Microsoft Corporation) C:\Windows\system32\D3D12.dll
2016-10-27 18:57 - 2016-10-15 04:39 - 00869888 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-10-27 18:57 - 2016-10-15 04:39 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-10-27 18:57 - 2016-10-15 04:39 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2016-10-27 18:57 - 2016-10-15 04:39 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Geolocation.dll
2016-10-27 18:57 - 2016-10-15 04:38 - 01993216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2016-10-27 18:57 - 2016-10-15 04:38 - 00913920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2016-10-27 18:57 - 2016-10-15 04:38 - 00675840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2016-10-27 18:57 - 2016-10-15 04:37 - 01980416 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-10-27 18:57 - 2016-10-15 04:37 - 01643008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2016-10-27 18:57 - 2016-10-15 04:37 - 01029632 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2016-10-27 18:57 - 2016-10-15 04:37 - 00715264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2016-10-27 18:57 - 2016-10-15 04:37 - 00709120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2016-10-27 18:57 - 2016-10-15 04:37 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\cmifw.dll
2016-10-27 18:57 - 2016-10-15 04:36 - 02290176 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2016-10-27 18:57 - 2016-10-15 04:36 - 00983040 _____ (Microsoft Corporation) C:\Windows\system32\RemoteNaturalLanguage.dll
2016-10-27 18:57 - 2016-10-15 04:36 - 00792064 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2016-10-27 18:57 - 2016-10-15 04:36 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-10-27 18:57 - 2016-10-15 04:36 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2016-10-27 18:57 - 2016-10-15 04:36 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2016-10-27 18:57 - 2016-10-15 04:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2016-10-27 18:57 - 2016-10-15 04:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmifw.dll
2016-10-27 18:57 - 2016-10-15 04:35 - 03054080 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2016-10-27 18:57 - 2016-10-15 04:35 - 02708992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2016-10-27 18:57 - 2016-10-15 04:35 - 02315264 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-10-27 18:57 - 2016-10-15 04:35 - 02005504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2016-10-27 18:57 - 2016-10-15 04:35 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\MapControlCore.dll
2016-10-27 18:57 - 2016-10-15 04:35 - 00760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll
2016-10-27 18:57 - 2016-10-15 04:35 - 00701952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2016-10-27 18:57 - 2016-10-15 04:35 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-10-27 18:57 - 2016-10-15 04:34 - 02476544 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-10-27 18:57 - 2016-10-15 04:34 - 01840640 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-10-27 18:57 - 2016-10-15 04:34 - 00936448 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2016-10-27 18:57 - 2016-10-15 04:32 - 00886784 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-10-27 18:57 - 2016-10-15 04:31 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2016-10-27 18:57 - 2016-09-10 14:21 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\capimg.sys
2016-10-27 18:57 - 2016-08-27 06:12 - 00244816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-10-27 18:57 - 2016-08-06 05:17 - 00619368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-10-27 18:56 - 2016-10-15 05:38 - 00409952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2016-10-27 18:56 - 2016-10-15 05:26 - 00160096 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
2016-10-27 18:56 - 2016-10-15 05:20 - 02276736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2016-10-27 18:56 - 2016-10-15 05:19 - 00272720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-10-27 18:56 - 2016-10-15 05:18 - 02166232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2016-10-27 18:56 - 2016-10-15 05:18 - 01556712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-10-27 18:56 - 2016-10-15 05:18 - 00846560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2016-10-27 18:56 - 2016-10-15 05:15 - 01853776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2016-10-27 18:56 - 2016-10-15 05:15 - 01123368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2016-10-27 18:56 - 2016-10-15 05:11 - 01435896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-10-27 18:56 - 2016-10-15 04:59 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\stdole2.tlb
2016-10-27 18:56 - 2016-10-15 04:56 - 00327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
2016-10-27 18:56 - 2016-10-15 04:56 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-10-27 18:56 - 2016-10-15 04:55 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2016-10-27 18:56 - 2016-10-15 04:54 - 00410112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
2016-10-27 18:56 - 2016-10-15 04:52 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2016-10-27 18:56 - 2016-10-15 04:51 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2016-10-27 18:56 - 2016-10-15 04:47 - 04612608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2016-10-27 18:56 - 2016-10-15 04:44 - 00636928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2016-10-27 18:56 - 2016-10-15 04:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.exe
2016-10-27 18:56 - 2016-10-15 04:39 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3D12.dll
2016-10-27 18:56 - 2016-10-15 04:37 - 03733504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2016-10-27 18:56 - 2016-10-15 04:36 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2016-10-25 13:11 - 2016-10-22 08:25 - 01953336 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437563.dll
2016-10-25 13:11 - 2016-10-22 08:25 - 01585088 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437563.dll
2016-10-22 17:21 - 2016-10-23 12:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-10-22 09:49 - 2016-10-19 23:43 - 01595456 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2016-10-22 09:49 - 2016-10-19 23:43 - 00212936 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-10-22 09:49 - 2016-10-19 23:43 - 00046024 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-10-22 09:49 - 2016-10-18 22:27 - 01951680 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437557.dll
2016-10-22 09:49 - 2016-10-18 22:27 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437557.dll
2016-10-22 09:49 - 2016-10-18 22:27 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-10-22 09:49 - 2016-10-18 22:27 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2016-10-21 18:50 - 2016-10-21 18:50 - 00000000 ____D C:\Users\Lejla\AppData\Local\CEF
2016-10-18 19:33 - 2016-10-18 19:33 - 00000000 ____D C:\Users\Lejla\AppData\Roaming\Opera Software
2016-10-18 19:33 - 2016-10-18 19:33 - 00000000 ____D C:\Users\Lejla\AppData\Local\Opera Software
2016-10-15 21:17 - 2016-11-13 10:07 - 00000000 ____D C:\Users\Public\Documents\AdobeGC
2016-10-15 09:22 - 2016-10-15 09:22 - 00001615 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
2016-10-14 15:32 - 2016-10-14 15:32 - 00064352 _____ (Avago Technologies) C:\Windows\system32\Drivers\MegaSas2i.sys

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-11-13 19:54 - 2016-10-08 13:36 - 00000000 ____D C:\Users\Mickey\AppData\Roaming\vlc
2016-11-13 19:50 - 2016-10-08 21:26 - 00000000 ____D C:\Windows\system32\SleepStudy
2016-11-13 19:19 - 2016-10-08 12:57 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-11-13 18:47 - 2016-10-08 13:00 - 02920698 _____ C:\Windows\system32\perfh007.dat
2016-11-13 18:47 - 2016-10-08 13:00 - 00776220 _____ C:\Windows\system32\perfc007.dat
2016-11-13 18:47 - 2016-10-08 12:35 - 05769216 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-13 18:41 - 2016-10-08 21:26 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-13 18:41 - 2016-10-08 12:37 - 00000000 ____D C:\ProgramData\NVIDIA
2016-11-13 16:06 - 2016-10-08 12:52 - 00786432 _____ C:\Windows\system32\config\BBI
2016-11-13 13:40 - 2016-10-08 13:16 - 00000000 ____D C:\Users\Mickey\AppData\Local\JDownloader 2.0
2016-11-13 09:59 - 2016-10-09 13:53 - 00000000 ____D C:\Users\Mickey\AppData\Local\Adobe
2016-11-13 00:22 - 2016-10-08 14:18 - 00000000 ____D C:\Users\Lejla
2016-11-12 22:39 - 2016-10-08 14:19 - 00000000 ____D C:\Users\Lejla\AppData\Roaming\Origin
2016-11-12 21:44 - 2016-10-08 13:14 - 00000000 ____D C:\ProgramData\Origin
2016-11-12 16:04 - 2016-10-08 12:57 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-11-12 15:40 - 2016-10-08 13:06 - 00000000 ____D C:\Program Files (x86)\Opera
2016-11-12 14:36 - 2016-10-08 12:30 - 00000000 ____D C:\Users\Mickey
2016-11-12 13:50 - 2016-10-08 13:27 - 00000000 ____D C:\Windows\Minidump
2016-11-12 13:50 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\LiveKernelReports
2016-11-12 13:43 - 2016-10-08 12:56 - 00000000 ____D C:\Windows\INF
2016-11-12 13:41 - 2016-10-08 13:44 - 00001517 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2016-11-12 13:41 - 2016-10-08 12:36 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-11-12 13:41 - 2016-10-08 12:36 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-11-12 13:41 - 2016-10-08 12:36 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-11-12 13:22 - 2016-10-08 13:55 - 00000000 ____D C:\Users\Mickey\AppData\Local\CrashDumps
2016-11-11 21:16 - 2016-10-09 14:35 - 00000000 ____D C:\Users\Lejla\AppData\Local\CrashDumps
2016-11-11 11:19 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\rescache
2016-11-10 08:29 - 2016-10-08 12:30 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-11-09 18:07 - 2016-10-08 21:26 - 04895520 _____ C:\Windows\system32\FNTCACHE.DAT
2016-11-09 16:44 - 2016-10-08 12:57 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-11-09 16:44 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2016-11-09 16:44 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\system32\oobe
2016-11-09 16:44 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\system32\migwiz
2016-11-09 16:44 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\ShellExperiences
2016-11-09 16:44 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\bcastdvr
2016-11-09 15:34 - 2016-10-08 12:53 - 00000000 ____D C:\Windows\CbsTemp
2016-11-09 15:31 - 2016-10-08 12:44 - 00000000 ____D C:\Windows\system32\MRT
2016-11-09 15:30 - 2016-10-08 12:44 - 141011376 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-11-08 13:59 - 2016-10-08 13:17 - 00000000 ____D C:\Program Files (x86)\Origin
2016-11-07 17:05 - 2016-10-09 09:37 - 00000000 ____D C:\Users\Lejla\AppData\Roaming\vlc
2016-11-07 08:39 - 2016-10-10 11:22 - 00000000 ___RD C:\Users\Lejla\Desktop\TS4Things
2016-11-05 11:31 - 2016-10-08 14:18 - 00000000 ____D C:\Users\Lejla\AppData\Local\NVIDIA Corporation
2016-11-05 11:31 - 2016-10-08 14:18 - 00000000 ____D C:\Users\Lejla\AppData\Local\NVIDIA
2016-11-03 18:35 - 2016-10-09 14:19 - 00000000 ____D C:\Users\Lejla\AppData\Local\S4Studio
2016-11-01 17:58 - 2016-10-08 13:09 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-11-01 17:48 - 2016-10-08 13:10 - 00000000 ____D C:\Users\Mickey\AppData\Roaming\Apple Computer
2016-11-01 17:38 - 2016-10-08 14:18 - 00000000 ____D C:\Users\Lejla\AppData\Roaming\Apple Computer
2016-10-31 12:39 - 2016-10-08 12:30 - 00000000 ____D C:\Users\Mickey\AppData\Local\Packages
2016-10-28 18:11 - 2016-10-08 14:50 - 00485032 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-10-27 21:38 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\system32\appraiser
2016-10-27 21:38 - 2016-10-08 12:57 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-10-27 05:53 - 2016-10-08 13:17 - 00000000 ____D C:\Users\Mickey\AppData\Roaming\Origin
2016-10-25 21:21 - 2016-10-08 13:44 - 01756728 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2016-10-25 21:21 - 2016-10-08 13:44 - 01454136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2016-10-25 21:21 - 2016-10-08 13:44 - 01318968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2016-10-25 21:21 - 2016-10-08 13:44 - 00121912 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-10-25 21:17 - 2016-10-08 13:40 - 00548408 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-10-25 21:17 - 2016-10-08 13:40 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-10-25 21:17 - 2016-10-08 12:43 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-10-25 21:17 - 2016-10-08 12:36 - 06386232 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-10-25 21:17 - 2016-10-08 12:36 - 02475968 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-10-25 21:17 - 2016-10-08 12:36 - 01764408 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-10-25 21:17 - 2016-10-08 12:36 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-10-25 20:12 - 2016-10-08 13:44 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2016-10-25 17:17 - 2016-10-08 14:19 - 00000000 ____D C:\Users\Lejla\AppData\Local\Origin
2016-10-24 07:31 - 2016-10-08 12:36 - 07507695 _____ C:\Windows\system32\nvcoproc.bin
2016-10-23 12:25 - 2016-10-08 12:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-10-22 09:51 - 2016-10-08 13:42 - 00000000 ____D C:\Users\Mickey\AppData\Local\NVIDIA Corporation
2016-10-15 22:12 - 2016-10-09 13:53 - 00000000 ____D C:\ProgramData\Adobe
2016-10-15 21:34 - 2016-10-08 14:18 - 00000000 ____D C:\Users\Lejla\AppData\Roaming\Adobe
2016-10-15 16:07 - 2016-10-08 13:13 - 00000000 ____D C:\Users\Public\nettv
2016-10-15 09:24 - 2016-10-09 13:55 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-10-15 09:23 - 2016-10-09 13:56 - 00000000 ____D C:\Program Files\Adobe
2016-10-15 09:23 - 2016-10-09 13:56 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-10-14 15:32 - 2016-10-08 12:57 - 00000000 ___SD C:\Windows\system32\DiagSvcs
2016-10-14 15:32 - 2016-10-08 12:57 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-10-14 15:32 - 2016-10-08 12:57 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer

Einige Dateien in TEMP:
====================
C:\Users\Lejla\AppData\Local\Temp\JNativeHook_1493622712025440641.dll
C:\Users\Lejla\AppData\Local\Temp\JNativeHook_2320433326716196214.dll
C:\Users\Lejla\AppData\Local\Temp\JNativeHook_5136962638928477983.dll
C:\Users\Lejla\AppData\Local\Temp\JNativeHook_6055101079672435770.dll
C:\Users\Lejla\AppData\Local\Temp\JNativeHook_7373320186983068139.dll
C:\Users\Lejla\AppData\Local\Temp\JNativeHook_8188313080036058183.dll
C:\Users\Lejla\AppData\Local\Temp\JNativeHook_8499967871610380001.dll
C:\Users\Mickey\AppData\Local\Temp\JNativeHook_3866736704574146611.dll
C:\Users\Mickey\AppData\Local\Temp\JNativeHook_4312600262201929988.dll
C:\Users\Mickey\AppData\Local\Temp\JNativeHook_6484075281814063193.dll
C:\Users\Mickey\AppData\Local\Temp\JNativeHook_8311839252830410379.dll
C:\Users\Mickey\AppData\Local\Temp\JNativeHook_8654655729602080812.dll
C:\Users\Mickey\AppData\Local\Temp\proxy_vole5489867342384571022.dll
C:\Users\Mickey\AppData\Local\Temp\proxy_vole6721857889489938996.dll
C:\Users\Mickey\AppData\Local\Temp\proxy_vole8965650605489628753.dll
C:\Users\Mickey\AppData\Local\Temp\proxy_vole9063783207970148799.dll


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-11-11 10:59

==================== Ende von FRST.txt ============================
Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-11-2016
durchgeführt von Mickey (13-11-2016 19:56:16)
Gestartet von C:\Users\Mickey\Desktop
Windows 10 Pro Version 1607 (X64) (2016-10-08 11:30:05)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-755493514-3334125225-602857030-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-755493514-3334125225-602857030-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-755493514-3334125225-602857030-1000 - Limited - Disabled) => C:\Users\defaultuser0
Gast (S-1-5-21-755493514-3334125225-602857030-501 - Limited - Disabled)
Lejla (S-1-5-21-755493514-3334125225-602857030-1002 - Administrator - Enabled) => C:\Users\Lejla
Mickey (S-1-5-21-755493514-3334125225-602857030-1001 - Administrator - Enabled) => C:\Users\Mickey

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Ansel (Version: 375.70 - NVIDIA Corporation) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
iTunes (HKLM\...\{2C49F336-2E86-4407-83E2-16AC65598EF4}) (Version: 12.5.3.16 - Apple Inc.)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 49.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 49.0.2 (x86 de)) (Version: 49.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 49.0.2.6136 - Mozilla)
NetTV Plus Player 4 (HKLM-x32\...\NetTV Plus Player 4) (Version: 00.04.07.01 - NetTVPlus)
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 375.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 375.70 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.1.0.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.1.0.52 - NVIDIA Corporation)
NVIDIA Grafiktreiber 375.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 375.70 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.1.0.52 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 1.2.0.0 - NVIDIA Corporation) Hidden
Opera Stable 41.0.2353.56 (HKLM-x32\...\Opera 41.0.2353.56) (Version: 41.0.2353.56 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.2.2.60207 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version:  - Microsoft)
SHIELD Streaming (Version: 7.1.0330 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.1.0.52 - NVIDIA Corporation) Hidden
SSD Fresh 2016 (HKLM-x32\...\{71149886-0AA3-4F31-81F9-CC90EA0D55EF}_is1) (Version: 5.0 - Abelssoft)
The Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.24.102.1020 - Electronic Arts Inc.)
Update for Skype for Business 2015 (KB3039776) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{FD1F398D-BD56-43E6-8E58-707857AC9A8C}) (Version:  - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.5 - VideoLAN)
VLC Updater (HKLM-x32\...\VLC Updater) (Version: 1.0 - VLC Updater)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-755493514-3334125225-602857030-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-755493514-3334125225-602857030-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Mickey\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {04E21CA8-C19F-4FE6-9A8D-5E1EFC32C55B} - \Microsoft\XblGameSave\XblGameSaveTaskLogon -> Keine Datei <==== ACHTUNG
Task: {124F4D43-4783-434F-A784-B8E0D0C7D64C} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-10-25] (NVIDIA Corporation)
Task: {13518EB6-B3FC-4C6A-9C5A-04E6C53A5BC2} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-AEGGCVJ-Mickey => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-08-05] (Adobe Systems Incorporated)
Task: {66E3DFF1-9333-444A-8729-1A3D658CEBF6} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-10-25] (NVIDIA Corporation)
Task: {69702AA7-3C17-40EA-96EE-22196C7FD7DB} - System32\Tasks\Opera scheduled Autoupdate 1475928435 => C:\Program Files (x86)\Opera\launcher.exe [2016-11-07] (Opera Software)
Task: {9351EF33-92ED-46C3-A208-36F658A69BAA} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-10-25] (NVIDIA Corporation)
Task: {952E6F54-E741-45F3-8C97-8BE276260497} - \Microsoft\XblGameSave\XblGameSaveTask -> Keine Datei <==== ACHTUNG
Task: {9D539977-5DA3-4880-A348-130C86851563} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {A7504C49-A137-42F5-ADDD-173872C4EA8C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)
Task: {B19CA061-F283-4F8B-8452-EEDAAC2177C8} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-10-25] (NVIDIA Corporation)
Task: {B6D68BDF-E21A-4A94-BD78-ED5438ADDCD9} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-10-25] (NVIDIA Corporation)
Task: {BB86DCB7-F6CD-4218-879C-F2C732BAEE95} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-10-25] (NVIDIA Corporation)
Task: {DA347611-0236-4FFE-97CA-BF995A441DE9} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {ED219E87-488B-4814-8392-10A575C0AFA0} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\Windows\SYSTEM32\ism32k.dll
2016-09-30 14:51 - 2016-09-15 18:25 - 02681200 _____ () C:\Windows\system32\CoreUIComponents.dll
2016-09-01 17:12 - 2016-09-01 17:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-10-05 18:17 - 2016-10-05 18:17 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-10-08 13:44 - 2016-10-25 21:21 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-10-08 13:44 - 2016-10-25 21:21 - 04490808 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-08 13:44 - 2016-10-25 21:21 - 00420408 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll
2016-10-08 12:36 - 2016-10-25 21:17 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-09-30 14:51 - 2016-09-15 18:25 - 02681200 _____ () C:\Windows\SYSTEM32\CoreUIComponents.dll
2016-10-08 12:32 - 2016-10-08 12:32 - 00959168 _____ () C:\Users\Mickey\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2016-09-29 16:40 - 2016-09-29 16:40 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-11-09 11:08 - 2016-11-02 11:30 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-11-09 11:07 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-11-09 11:08 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-11-09 11:07 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-11-09 11:07 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-11-09 11:07 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-10-08 13:16 - 2016-10-08 13:17 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-10-08 13:16 - 2016-10-08 13:17 - 00178176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-10-08 13:16 - 2016-10-08 13:17 - 35250688 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.190.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-11-08 13:59 - 2016-11-08 13:58 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll
2016-10-08 13:44 - 2016-10-25 21:21 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-10-08 13:44 - 2016-10-25 20:57 - 00506424 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-10-08 13:44 - 2016-10-25 20:57 - 00255936 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-10-08 13:44 - 2016-10-25 20:57 - 02808256 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-10-08 13:44 - 2016-10-25 21:21 - 00901688 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-10-08 13:44 - 2016-10-25 21:21 - 03776056 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-08 13:44 - 2016-10-25 20:57 - 00246840 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-10-08 13:44 - 2016-10-25 20:57 - 00436792 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-10-08 13:44 - 2016-10-25 20:57 - 00338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-10-08 13:44 - 2016-10-25 20:57 - 00968248 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2016-10-08 13:44 - 2016-10-25 21:20 - 60819000 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2016-10-08 12:57 - 2016-10-08 12:56 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-755493514-3334125225-602857030-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Mickey\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{37D0743B-410C-43F3-A126-F736384F0021}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{32057968-C6AC-4B43-BA82-781A59E4D1CB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{EED370B5-68A0-4C97-BC62-91CFB3C599C1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D2983346-3623-4C79-802E-6DB8287B216B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{BEA8747C-55AC-4C49-AADE-4947F1CADBAC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{2CDC4C30-5B06-494A-8F0D-9114D6178316}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{2EB2BF06-2AA6-4DEC-BBA0-C0FA6A7CABC2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{330532D9-5AD7-4DC6-A6F4-F714EEB92847}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{F5E82E53-E22F-4C4B-8DCA-C4C0D6A1762D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A8FE593E-3047-4DAB-B2C8-5D4C51326DB4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{775C1AA6-4DE8-4DB9-BFF9-146E1306F185}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{6B7BE542-6F2B-438C-9C0E-A19EDB7F05A4}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{297AA3CF-EAC1-465D-8B50-143B5439CCF3}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{9DDDFBED-D691-4461-AE20-DFC55434A279}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [TCP Query User{DD962FED-8772-46A7-9A2C-1E35F3B40C49}F:\utorrentportable\app\utorrent\utorrent.exe] => (Allow) F:\utorrentportable\app\utorrent\utorrent.exe
FirewallRules: [UDP Query User{C7DEE48A-F5C7-45D2-B50E-F04CD7BC623D}F:\utorrentportable\app\utorrent\utorrent.exe] => (Allow) F:\utorrentportable\app\utorrent\utorrent.exe
FirewallRules: [{F736CE2B-9EBF-4FFA-B6D1-658FFCAF3EAF}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{04E7AA60-02D9-4FD9-A89F-6DA8F8064F76}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{4C2607F0-089A-443A-848B-09B5AEC72917}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{A11FC5C9-83F8-4D67-89E3-A453DB8A7C07}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{B8D3FAD0-1165-471E-9F57-C6D86361258E}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{25E6472E-BDC9-451E-A14C-19251D25C6FE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe

==================== Wiederherstellungspunkte =========================

ACHTUNG: Systemwiederherstellung ist deaktiviert

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/13/2016 01:43:00 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-AEGGCVJ)
Description: Bei der Aktivierung der App „Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2147024865. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/13/2016 01:43:00 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-AEGGCVJ)
Description: Bei der Aktivierung der App „Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/13/2016 01:43:00 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-AEGGCVJ)
Description: Bei der Aktivierung der App „Microsoft.WindowsStore_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/13/2016 01:43:00 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-AEGGCVJ)
Description: Bei der Aktivierung der App „Microsoft.SkypeApp_kzf8qxf38zg5c!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/13/2016 01:43:00 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-AEGGCVJ)
Description: Bei der Aktivierung der App „Microsoft.ZuneMusic_8wekyb3d8bbwe!Microsoft.ZuneMusic“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/13/2016 01:43:00 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-AEGGCVJ)
Description: Bei der Aktivierung der App „Microsoft.CommsPhone_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/13/2016 01:43:00 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-AEGGCVJ)
Description: Bei der Aktivierung der App „Microsoft.CommsPhone_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/12/2016 01:42:11 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\Office15\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\Office15\UccApi.DLL" in Zeile  1.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (11/12/2016 01:22:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x2388
Startzeit der fehlerhaften Anwendung: 0x01d23cdf59634cb2
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 10e99014-a717-48f6-85cf-04f96a3605e7
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (11/12/2016 01:22:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000604
Fehleroffset: 0x0000000000000000
ID des fehlerhaften Prozesses: 0x2388
Startzeit der fehlerhaften Anwendung: 0x01d23cdf59634cb2
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 76d948ba-ed97-4ae2-9779-bf455b7e0ba9
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge


Systemfehler:
=============
Error: (11/13/2016 06:41:14 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (11/13/2016 03:40:12 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (11/13/2016 01:43:06 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (11/13/2016 01:43:00 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-AEGGCVJ)
Description: Ein DCOM-Server konnte nicht gestartet werden: App.AppXryc2qd338f5728r9gzzazav8206ba77s.mca als Nicht verfügbar/Nicht verfügbar. Fehler:
"31"
Aufgetreten beim Start dieses Befehls:
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca

Error: (11/13/2016 01:43:00 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-AEGGCVJ)
Description: Der Server "App.AppX76q4xtxwbj16z0zkyp0pnwtt6m850rvk.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/13/2016 01:43:00 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-AEGGCVJ)
Description: Der Server "App.AppX65azfy60a5wn91mcvdd3dr2y0wj02n39.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/13/2016 01:43:00 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-AEGGCVJ)
Description: Der Server "App.AppX85gcbw533amccd2rr8qswxymhfj649t2.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/13/2016 01:43:00 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-AEGGCVJ)
Description: Der Server "Microsoft.ZuneMusic.AppXg7frm9cyrqhbagxce6zrshkx8fn0ycca.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/13/2016 01:43:00 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-AEGGCVJ)
Description: Der Server "App.AppXfk52rq8fwgnxk74x63vnnhhtg0jw2ee6.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/13/2016 01:43:00 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-AEGGCVJ)
Description: Der Server "App.AppXy7mkh74jb7aq1dpvm6v5njvq2ydc2rtb.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.


CodeIntegrity:
===================================
  Date: 2016-11-12 22:47:04.967
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-12 13:21:52.671
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-11-12 10:00:05.831
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-11 21:16:16.174
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-11-11 21:16:06.223
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-11-11 21:16:04.071
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

  Date: 2016-11-11 10:59:38.410
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-10 16:24:33.537
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-09 09:06:45.981
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-08 11:29:35.958
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7 CPU 860 @ 2.80GHz
Prozentuale Nutzung des RAM: 14%
Installierter physikalischer RAM: 16382.05 MB
Verfügbarer physikalischer RAM: 13935.66 MB
Summe virtueller Speicher: 18814.05 MB
Verfügbarer virtueller Speicher: 16202.6 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:111.35 GB) (Free:34.06 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (System-reserviert) (Fixed) (Total:0.34 GB) (Free:0.31 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive e: (Seagate 1TB) (Fixed) (Total:931.51 GB) (Free:441.31 GB) NTFS
Drive f: (Seagate 1000 GB) (Fixed) (Total:931.17 GB) (Free:890.13 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: FE2675D4)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 76FCC84D)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.2 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 3FBF5176)
Partition 1: (Active) - (Size=111.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 MB) - (Type=27)

==================== Ende von Addition.txt ============================

Alt 13.11.2016, 20:27   #15
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Exploit:JS/Meadgive.U - Standard

Exploit:JS/Meadgive.U


FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
Task: {04E21CA8-C19F-4FE6-9A8D-5E1EFC32C55B} - \Microsoft\XblGameSave\XblGameSaveTaskLogon -> Keine Datei <==== ACHTUNG
Task: {952E6F54-E741-45F3-8C97-8BE276260497} - \Microsoft\XblGameSave\XblGameSaveTask -> Keine Datei <==== ACHTUNG
emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.

__________________
Logfiles bitte immer in CODE-Tags posten

Antwort
Seite 1 von 2 1 2

Themen zu Exploit:JS/Meadgive.U
anti, bräuchte, cannot, defender, englisch, erkannt, exploit, gemeldet, heute, leute, malewarebytes, nicht, nicht erkannt, not, sache, sachen, schadsoftware, troja, trojaner, windows, windows defender


« Eset Online Scanner zeigt 15 Infizierungen und stürzt vor Ablauf ab | PC spinnt »


Ähnliche Themen: Exploit:JS/Meadgive.U


  1. Zero-Day-Exploit-Händler schreibt 100.000 US-Dollar für Flash-Exploit aus
    Nachrichten - 06.01.2016 (0)
  2. ZoneAlarm hat zwei Viren gefunden: HEUR:Exploit.Script.Generic und HEUR:Exploit.Java.Generic
    Log-Analyse und Auswertung - 21.02.2014 (15)
  3. Kaspersky findet 2 trojanische Programme (Windows 7): HEUR:Exploit.Java.CVE-2012-1723.gen und Exploit.Java.CVE-2012-1723.nh
    Plagegeister aller Art und deren Bekämpfung - 18.09.2013 (14)
  4. Exploit Shield zu Malwarebytes Anti-Exploit
    Antiviren-, Firewall- und andere Schutzprogramme - 09.07.2013 (4)
  5. GVU Trojaner-Problem!(Exploit.Drop.GS;Exploit.drop.GSA;trojan.ransom.SUGen;--->Malwarebytes-Funde)
    Plagegeister aller Art und deren Bekämpfung - 02.03.2013 (6)
  6. Trojaner HEUR:Exploit.Java.CVE-2012-0507.gen und HEUR:Exploit.Java.Generic
    Log-Analyse und Auswertung - 26.01.2013 (24)
  7. GVU Virus - runctf.lnk (im Autostart), wgsdgsdgdsgsd.dll (Exploit.Drop.GS), dsgsdgdsgdsgw.pad (Exploit.Drop.GSA) und dsgsdgdsgdsgw.js
    Plagegeister aller Art und deren Bekämpfung - 02.01.2013 (3)
  8. HEUR:Exploit.Java.CVE-2012-4681.gen" sowie mehrfach Exploit.Java.CVE-2012-0507.ou mit kaspersky gefunden in C:Dokumente und Einstellungen ge
    Plagegeister aller Art und deren Bekämpfung - 21.11.2012 (11)
  9. Exploit.Script.Generic, Exploit.JS.Pdfka.gfa, Backdoor.Win32.ZAccess.ypw, Backdoor.Win32.ZAccess.yqi, Trojan.Win32.Miner.dw und weitere
    Log-Analyse und Auswertung - 02.10.2012 (7)
  10. Exploit-CVE2012-1723.f und Exploit-PDF!Blacole.o gefunden
    Log-Analyse und Auswertung - 02.10.2012 (11)
  11. EXP/CVE-2010-0840.HG(Exploit), EXP/JAVA.Ternub.Gen(Exploit) und TR/Agent.464.4(Trojaner) - nicht totzukriegen
    Plagegeister aller Art und deren Bekämpfung - 14.08.2012 (12)
  12. Desinfec't 2012/Kaspersky findet Exploit.Java.CVE-2011-3544.** und Exploit.Java.CVE-2012-0507.**
    Plagegeister aller Art und deren Bekämpfung - 22.06.2012 (21)
  13. Desinfec't 2012/Kaspersky findet Exploit.Java.CVE-2011-3544.** und Exploit.Java.CVE-2012-0507.**
    Mülltonne - 11.06.2012 (0)
  14. AVG-Meldungen: "Exploit Blackhole Exploit KIT" und "Infected Virus found JD/Redir" - Bitte um Hilfe
    Plagegeister aller Art und deren Bekämpfung - 23.12.2011 (11)
  15. PDF:Exploit.J.S.H
    Plagegeister aller Art und deren Bekämpfung - 19.10.2011 (1)
  16. infekt mit: exploit.wmf + exploit.java.ByteVerify + sploit[1].anr
    Plagegeister aller Art und deren Bekämpfung - 29.03.2006 (15)
  17. exploit-byteVerify,JS/Exploit-DialogArg.b,Exploit-mhtRedir.gen. logfile auswerten
    Log-Analyse und Auswertung - 29.10.2004 (4)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Exploit:JS/Meadgive.U - Exploit:JS/Meadgive.U Hallo Leute, Ich bräuchte wieder mal eure Hilfe. Windows Defender hat mir heute Schadsoftware gemeldet, obwohl es Anti Malewarebytes nicht erkannt hat. Habe den Trojaner oder was es auch - Exploit:JS/Meadgive.U...
Archiv
Du betrachtest: Exploit:JS/Meadgive.U auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129