Hallo liebes Team.

Ich bin nun nach 2 Monaten total am verzweifeln und weiß nicht mehr weiter.
Übrigens:
Windows 7 Ultimate
Intel i5 & NVIDIA GTX
Benutze Webbrowser: Firefox und Chrome (hauptsächlich Firefox)

Fangen wir jedoch ganz am Anfang meiner Geschichte an:

Bis vor 2 Monaten hatte ich nie ein Problem mit Viren oder Adware, da ich generell vorschtig durch das Internet gehe und nur bei offiziellen Websites Anwendungen installiere.
Jedoch gab es vor 2 Monaten eine Anwendung (ich kann nicht mehr sagen was für eine), die ich aus Versehen installiert hatte. Diese bekahm von mir auch den Administratorzugriff (ich Idiot..).
Kurz darauf fing der Spaß langsam an:
Zuerst zeigten sich keine Veränderungen an meinem PC, jedoch änderte sich auf einmal mein Suchanbieter meines Webbrowsers (Mozilla Firefox) zu "startpageing123.com".
Wenig später schloss sich Firefox während der Nutzung komplett; die Verknüpfung in der Taskleiste wurde automatisch gelöscht. Es erstellte sich eine neue Firefox-Verknüpfung auf dem Desktop und in der Taskleiste.
Als ich Firefox nun weiter wie gewohnt (mit "startpageing123.com") nutzte, ging der Spaß erst richtig los:
Im Webbrowser kahmen Informationen von Firefox, dass 45 (oder oft mehr) Tabs verhindert wurden zu öffnen.
Beim Surfen durch das Internet öffneten sich beim Klicken auf Links neue Tabs mit Werbung - erst nach dem schließen dieser konnte der urspüngliche Link verwendet werden.
Da es mir nun endgültig gereicht hatte, beschloss ich mal in meiner Systemsteuerung der Programme durchzuschauen. Ich fand Programme wie "WinSnare", "BikaQ Rss" und ähnliche.
Ich deinstallierte diese.
Zusätzlich nutze ich die aktuellste Version des ADWCleaners mehrmalig hintereinander (scan - herunterfahren - scan - usw.).
So weit, so gut: Julian (Ich) sollte natürlich noch weiter leiden.
Ganz davon abgesehen, dass Firefox nun manchmal beim Start unendlich viele Tabs in Dauerschleife öffnete, welche ich nur durch den Taskmanager geschlossen bekommen habe, tauchte auch häufig (jetzt hier beim Verfassen auch) am Webbrowserrand ein blaues "J" auf. Dieses bildet beim klicken ein kleines Fenster mit dem Titel "jollywallet".
Als letzten Punkt muss ich noch hinzufügen, dass auf dem statischen Inhalt von Websites (Text) scheinbar zufällig Wörter blau unterstrichen und kursiv gesetzt werden. Hinter dem Wort ist auch ein grünes Viereck mit Pfeil. Das Wort hat somit einen Link hinterlegt. Beim herüberschweifen mit dem Zeiger öffnen sich ein kleines Werbefenster (kein TAB!). Was beim Klicken passiert kann ich nicht sagen.
Dieses Problem mit dem zufälligen Verändern der Wörter ist auch beim Progammieren ein großes Problem. Beispielsweise habe ich im Webbrowser eben eine meiner Webserver und deren Sites bearbeitet - der Code wurde zufällig vereinzelt mit Links versehen (<a href= [...]). Ultra nervig.
Auch beim Spielen von sicheren (vertrauenswürdigen, kostenpflichtigen) Spielen, tauchte ein kleines, rotes Symbol auf, welches beim Klicken Werbung öffnete (sah ähnlich aus wie das vorherige "jollywallet" - aber in rot). Dies ging im Spiel so weit, dass ich sogar von offiziellen Spieleservern aufgrund von lokaler Anwendungsmanipulation des Spiels von den Servern temporär ausgeschlossen wurde.
Direkt darauf habe ich mich entschlossen diesen Beitrag zu verfassen, da ich am Ende meiner Kräfte bin.

Während der gesamtem Zeit habe ich mehrmals Anwendungen wie "ADWCleaner", "CCleaner" und "Microsoft Security Essentials" als Scanner laufen lassen. Diese fanden immer wieder die Selben Fehler.

Da ich noch Schüler bin und aktuell Ferien habe, bin ich schnell zu erreichen und würde mich über schnelle Fortschritte innerhalb meiner Ferien sehr freuen.
Ich zähle auf euch!

Gerne bin ich auch zu einem persönlichen Gespräch bereit (TeamSpeak (TeamViewer), Skype).

Vielen Dank!

Hoffungsvolle und liebe Grüße aus Niedersachsen
Julian

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.



Um die Bereinigung möchlichst effektiv und schnell gestalten zu können, bitte ich um Beachtung der folgenden Hinweise:

1. Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
   
2. Lies dir meine Anleitungen immer sorgfältig durch, arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste immer alle Logdateien (auch wenn nichts gefunden wurde). Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
   
3. Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
   
4. Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
   Außerdem bitte ich dich, nicht eigenmächtig irgendwelche Sicherheitsprogramme auszuführen und damit deinen Rechner zu überprüfen/bereinigen, da ich so leicht den Überblick verlieren kann.
   Außerdem hättest du dir das Eröffnen eines Themas in diesem Fall auch gleich sparen können, wenn du dann doch wieder alleine rumhantierst.
   
5. Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
   
6. Alle zu verwendenen Programme sind auf dem Desktop ( C:\users\dein Benutzername\Desktop\ ) abzuspeichern und von dort als Administrator zu starten!
   
7. Einige Programme, die wir hier verwenden, können unter Umständen von deinem Antiviren- oder Anti-Malwareprogramm fälschlicherweise als Bedrohung eingestuft werden. Die Sicherheitsprogramme können aufgrund eines bestimmten Programmverhaltens nicht zwischen "gut" oder "böse" unterscheiden und schlagen Alarm. Dabei handelt es sich um Fehlalarme, welche du getrost ignorieren kannst. Gegebenenfalls musst du deine Sicherheitssoftware vor der Ausführung eines Programms deaktivieren, damit unsere Bereinigungsvorgänge nicht beeinträchtigt werden.
   
8. Sollten die Logdateien einmal die zulässige Länge (~ 120.000 Zeichen) überschreiten, so teile die Logdateien auf mehrere Posts auf.
   Zur Not kannst du die Logdateien dann auch zippen (in ein .zip Archiv packen) und als Anhang hochladen.
   
9. Bitte arbeite so lange mit mir zusammen, bis ich dir sage, dass wir fertig sind und dein Rechner "sauber" ist. Das vorzeitige Verschwinden von Symptomen heißt nicht automatisch, dass dein Rechner bereits vollständig sauber ist.
   
10. In der Regel antworte ich dir innerhalb von 24 Stunden, oft sogar wesentlich schneller.
    Jedoch habe auch ich einen normalen Beruf und Familie. Ich bin daher nicht jeden Tag stundenlag hier im Forum unterwegs. Es kann unter Umständen bis zu 2 Tage dauern, bis du eine Antwort von mir erhältst. Sollte diese Zeit überschritten sein, so kannst du mir gerne eine PM als Erinnerung schicken.

Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Danke für deine Mitarbeit!







Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Schritt 2
Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop

• Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
• Drücke Start Scan
  
• Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
  TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
  Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.







Bitte poste mit deiner nächsten Antwort

• die Logdatei von TDSS-Killer,
• die beiden neuen Logdateien von FRST.

Vielen Dank für deine Hilfe - ich bin echt verzweifelt.

Ich konnte ohne Probleme die Schritte ausführen.
Hier die gewünschten Datein:

TDSSKiller-Log:

11:17:06.0056 0x1e78  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
11:17:09.0937 0x1e78  ============================================================
11:17:09.0937 0x1e78  Current date / time: 2017/04/13 11:17:09.0937
11:17:09.0937 0x1e78  SystemInfo:
11:17:09.0937 0x1e78  
11:17:09.0937 0x1e78  OS Version: 6.1.7601 ServicePack: 1.0
11:17:09.0937 0x1e78  Product type: Workstation
11:17:09.0937 0x1e78  ComputerName: GAMINGMASCHINE
11:17:09.0937 0x1e78  UserName: Heartel
11:17:09.0937 0x1e78  Windows directory: C:\Windows
11:17:09.0937 0x1e78  System windows directory: C:\Windows
11:17:09.0937 0x1e78  Running under WOW64
11:17:09.0937 0x1e78  Processor architecture: Intel x64
11:17:09.0937 0x1e78  Number of processors: 4
11:17:09.0937 0x1e78  Page size: 0x1000
11:17:09.0937 0x1e78  Boot type: Normal boot
11:17:09.0937 0x1e78  CodeIntegrityOptions = 0x00000001
11:17:09.0937 0x1e78  ============================================================
11:17:11.0969 0x1e78  KLMD registered as C:\Windows\system32\drivers\86980988.sys
11:17:11.0969 0x1e78  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 7601.23714, osProperties = 0x1
11:17:12.0556 0x1e78  System UUID: {F4B6D61D-91FF-0124-438A-210CFA8EB950}
11:17:12.0962 0x1e78  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
11:17:12.0968 0x1e78  Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
11:17:12.0983 0x1e78  ============================================================
11:17:12.0983 0x1e78  \Device\Harddisk0\DR0:
11:17:12.0983 0x1e78  MBR partitions:
11:17:12.0983 0x1e78  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74705800
11:17:12.0983 0x1e78  \Device\Harddisk1\DR1:
11:17:12.0983 0x1e78  MBR partitions:
11:17:12.0983 0x1e78  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
11:17:12.0983 0x1e78  \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x746D3000
11:17:12.0983 0x1e78  ============================================================
11:17:12.0992 0x1e78  C: <-> \Device\Harddisk1\DR1\Partition2
11:17:13.0035 0x1e78  E: <-> \Device\Harddisk0\DR0\Partition1
11:17:13.0036 0x1e78  ============================================================
11:17:13.0036 0x1e78  Initialize success
11:17:13.0036 0x1e78  ============================================================
11:18:28.0738 0x1df8  ============================================================
11:18:28.0738 0x1df8  Scan started
11:18:28.0738 0x1df8  Mode: Manual; SigCheck; TDLFS; 
11:18:28.0738 0x1df8  ============================================================
11:18:28.0738 0x1df8  KSN ping started
11:18:28.0850 0x1df8  KSN ping finished: true
11:18:30.0937 0x1df8  ================ Scan system memory ========================
11:18:30.0937 0x1df8  System memory - ok
11:18:30.0938 0x1df8  ================ Scan services =============================
11:18:31.0035 0x1df8  [ 0B94DF0DB9DCA3EDB2B57747D5433E7F, B8C4501476396B434D5EA35451556CB97ACF4C8CF666B9C753E2FEFA77DD7213 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
11:18:31.0071 0x1df8  1394ohci - ok
11:18:31.0087 0x1df8  [ 114ACFE781B214B95F53D52020466CFD, CB25CED9C0AA17CC14AABBE845BF497E33C0642699236A93BCA7B197CAA6D2D8 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
11:18:31.0098 0x1df8  ACPI - ok
11:18:31.0107 0x1df8  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
11:18:31.0116 0x1df8  AcpiPmi - ok
11:18:31.0221 0x1df8  [ 671133C0AC2D8B40B7574F69059653E9, A36CC49A0C829A5C4D6CF273791071213F5FFB57DC7022D523CFB731374FF63C ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
11:18:31.0229 0x1df8  AdobeARMservice - ok
11:18:31.0297 0x1df8  [ CA363F172E1978FD155764F2840B0BE8, CB14E2C94ABB8C8809F4E96472F6D1A9A3A0860217631F592E0F62F043165575 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
11:18:31.0308 0x1df8  AdobeFlashPlayerUpdateSvc - ok
11:18:31.0334 0x1df8  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
11:18:31.0348 0x1df8  adp94xx - ok
11:18:31.0364 0x1df8  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\drivers\adpahci.sys
11:18:31.0375 0x1df8  adpahci - ok
11:18:31.0389 0x1df8  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\drivers\adpu320.sys
11:18:31.0398 0x1df8  adpu320 - ok
11:18:31.0420 0x1df8  [ 0EC780FF94D628FF3332F5B8B4FBB4E2, 6CB90B791F3D3AFAA2FC140AF4BC42200A7F26CBF722A9B90671C8639A7440D7 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
11:18:31.0429 0x1df8  AeLookupSvc - ok
11:18:31.0465 0x1df8  [ 4870E3CEA0BC916B1DF9C70CE57E1821, 0AB81CC3AA8CEE55488D0F9D2F3CCC41D20C6E771A83AD9BF0E069F4D89BB8D9 ] AFD             C:\Windows\system32\drivers\afd.sys
11:18:31.0479 0x1df8  AFD - ok
11:18:31.0516 0x1df8  [ B13F706FDC19A097E886E700A16DCB5F, B51195CB29F3AA6D68B57162A9192286CC9354D29A461C9293B535358BAD9DF5 ] AFXfilt         C:\Windows\system32\drivers\AFXfilt.sys
11:18:31.0524 0x1df8  AFXfilt - ok
11:18:31.0531 0x1df8  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
11:18:31.0539 0x1df8  agp440 - ok
11:18:31.0633 0x1df8  [ F2EB8EB5FC46FB849498BBEF2AD6539D, 6BC9938B3E432963FFAB6A13E9237DA7888A3595522BBE99F2AA556ED06F5651 ] AGSService      C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
11:18:31.0671 0x1df8  AGSService - ok
11:18:31.0696 0x1df8  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe
11:18:31.0705 0x1df8  ALG - ok
11:18:31.0718 0x1df8  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
11:18:31.0725 0x1df8  aliide - ok
11:18:31.0733 0x1df8  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
11:18:31.0740 0x1df8  amdide - ok
11:18:31.0747 0x1df8  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
11:18:31.0756 0x1df8  AmdK8 - ok
11:18:31.0762 0x1df8  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
11:18:31.0771 0x1df8  AmdPPM - ok
11:18:31.0784 0x1df8  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
11:18:31.0792 0x1df8  amdsata - ok
11:18:31.0811 0x1df8  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
11:18:31.0821 0x1df8  amdsbs - ok
11:18:31.0830 0x1df8  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys
11:18:31.0837 0x1df8  amdxata - ok
11:18:31.0856 0x1df8  [ F165140EFE85E7767A80BAA234D05A4C, 56101973CEAAFE78C8B723B03AC0835AC693F48EFB32A626BEB29E78C21485E2 ] AppID           C:\Windows\system32\drivers\appid.sys
11:18:31.0864 0x1df8  AppID - ok
11:18:31.0882 0x1df8  [ 43DDA527D48452D9F060744BDD5B0FE3, 94BA31B28E62E224AB60D494286355AF2C848FD75709BC56CDEA7B1BDD75A876 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
11:18:31.0890 0x1df8  AppIDSvc - ok
11:18:31.0926 0x1df8  [ DE23E052E557580674785CDF45B613F3, A955ADC6CC7D816BA7CE1065F911E7A3295A1908C22BE0A3C506C38CFEE8DE0D ] Appinfo         C:\Windows\System32\appinfo.dll
11:18:31.0935 0x1df8  Appinfo - ok
11:18:32.0022 0x1df8  [ 2D564BB1C4559A517B390A031955714D, 3048C187FD107C958D43DD8B954AB55FDD1BC538D3E0066CBFCB428C7A8A87E1 ] Apple Mobile Device Service C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
11:18:32.0029 0x1df8  Apple Mobile Device Service - ok
11:18:32.0048 0x1df8  [ 4D0AA539EFBECC4114031FC1C33F7345, 3D118504FAEE76BA5CE83650409C9BBD472D129B9CDBDBB7C27A5376D76A923F ] AppMgmt         C:\Windows\System32\appmgmts.dll
11:18:32.0058 0x1df8  AppMgmt - ok
11:18:32.0077 0x1df8  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\drivers\arc.sys
11:18:32.0085 0x1df8  arc - ok
11:18:32.0099 0x1df8  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys
11:18:32.0107 0x1df8  arcsas - ok
11:18:32.0210 0x1df8  [ DCB1F756422BE0F18F764A5A2BE75BEB, 91765F4132B51B55F8C8526B61171700EDE782B3BFEE18F597A2341FE82F941D ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
11:18:32.0219 0x1df8  aspnet_state - ok
11:18:32.0248 0x1df8  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
11:18:32.0269 0x1df8  AsyncMac - ok
11:18:32.0288 0x1df8  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys
11:18:32.0295 0x1df8  atapi - ok
11:18:32.0345 0x1df8  [ 67C717EC24FCAAE7B518D9E06AD036AB, F08550E4FCEC2899FACEF2A18CEE3D068D5911FFD2FF5534E4921E56FB0AEF59 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
11:18:32.0363 0x1df8  AudioEndpointBuilder - ok
11:18:32.0374 0x1df8  [ 67C717EC24FCAAE7B518D9E06AD036AB, F08550E4FCEC2899FACEF2A18CEE3D068D5911FFD2FF5534E4921E56FB0AEF59 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
11:18:32.0391 0x1df8  AudioSrv - ok
11:18:32.0417 0x1df8  [ CDA9ED9AEE49BB4076B0FAF5DBE3B666, 31FA98F0A6284EAD0110944694C70C978E3825884F6B429C353B966E20A43413 ] AxInstSV        C:\Windows\System32\AxInstSV.dll
11:18:32.0426 0x1df8  AxInstSV - ok
11:18:32.0450 0x1df8  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys
11:18:32.0463 0x1df8  b06bdrv - ok
11:18:32.0480 0x1df8  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
11:18:32.0492 0x1df8  b57nd60a - ok
11:18:32.0507 0x1df8  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
11:18:32.0516 0x1df8  BDESVC - ok
11:18:32.0526 0x1df8  [ 35BC71BC8B0E7BCA41352679B19AD070, 9AE92D8E5575ACD3EF7143076B473E09D75520302EF1C64057F991070B84118B ] Beep            C:\Windows\system32\drivers\Beep.sys
11:18:32.0535 0x1df8  Beep - ok
11:18:32.0572 0x1df8  [ 9A65B27028F7CAFEDC414A648773D3E7, 37F433F30FF081AAFD914B4A84A7B3A44452A641ACB4B8719EC1C971665F25B5 ] BFE             C:\Windows\System32\bfe.dll
11:18:32.0589 0x1df8  BFE - ok
11:18:32.0620 0x1df8  [ 7F299EC15BD781C260213704032970D2, D8B445AE20C68E2070F56A65770C310F9C4603CB3B02856B76989328BA4E3299 ] BITS            C:\Windows\System32\qmgr.dll
11:18:32.0640 0x1df8  BITS - ok
11:18:32.0649 0x1df8  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
11:18:32.0657 0x1df8  blbdrive - ok
11:18:32.0713 0x1df8  [ B5C2F92EE1106DFE7BB1CCE4D35B6037, E399C390687589194D8AAD385055F0CFA7D52AD9E837D8FF95008B8EB2B34E50 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
11:18:32.0725 0x1df8  Bonjour Service - ok
11:18:32.0748 0x1df8  [ ABA3984C822E4D3F889699912D85D6C5, 2251FA135CC290DA13DAE4743F393C7CC9E6A737C054707CB8D72C369D1FFACB ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
11:18:32.0758 0x1df8  bowser - ok
11:18:32.0777 0x1df8  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
11:18:32.0787 0x1df8  BrFiltLo - ok
11:18:32.0802 0x1df8  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
11:18:32.0811 0x1df8  BrFiltUp - ok
11:18:32.0829 0x1df8  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll
11:18:32.0838 0x1df8  Browser - ok
11:18:32.0851 0x1df8  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
11:18:32.0863 0x1df8  Brserid - ok
11:18:32.0876 0x1df8  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
11:18:32.0886 0x1df8  BrSerWdm - ok
11:18:32.0896 0x1df8  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
11:18:32.0906 0x1df8  BrUsbMdm - ok
11:18:32.0916 0x1df8  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
11:18:32.0924 0x1df8  BrUsbSer - ok
11:18:33.0020 0x1df8  [ 45204969BE5FED3321EBD88B8C33734E, CF2EA36E9D44A7FF8C310AD993445101B79F43EA8AD4F08DB763D4E257397A86 ] BstHdAndroidSvc C:\Program Files (x86)\BlueStacks\HD-Service.exe
11:18:33.0036 0x1df8  BstHdAndroidSvc - ok
11:18:33.0074 0x1df8  [ 96F8C6095B967518EFF43EA6207D8CEB, A32FB2992146BF228E04F37DB77230F507EB7E6A52A3741F2F2ED41B5AA74FBF ] BstHdDrv        C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys
11:18:33.0084 0x1df8  BstHdDrv - ok
11:18:33.0109 0x1df8  [ D3279C4EA3721693D22F854C3AAC994C, FCD4BBCBE176730E1B0D3B30AFED79A7CBB89B33F4C9D5BC91BA2E7165E27ADC ] BstHdLogRotatorSvc C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
11:18:33.0121 0x1df8  BstHdLogRotatorSvc - ok
11:18:33.0152 0x1df8  [ 98DBF25F833576667AC50FE7F807F7C4, 77F2634300CCBD36880F63679BDBFA825B3BE6E46BDB81635B9B88D21D7FEB52 ] BstHdPlusAndroidSvc C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe
11:18:33.0165 0x1df8  BstHdPlusAndroidSvc - ok
11:18:33.0183 0x1df8  [ 2C6666644FD22060F6B887C70C3F1D6C, 625E7BF27487564BBBB5F08DBE78D282D026F22C97F7B0E4A2FF8DF3F58ECA99 ] BstkDrv         C:\Program Files (x86)\BlueStacks\BstkDrv.sys
11:18:33.0193 0x1df8  BstkDrv - ok
11:18:33.0208 0x1df8  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
11:18:33.0217 0x1df8  BTHMODEM - ok
11:18:33.0239 0x1df8  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll
11:18:33.0260 0x1df8  bthserv - ok
11:18:33.0304 0x1df8  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
11:18:33.0325 0x1df8  cdfs - ok
11:18:33.0340 0x1df8  [ E5F4FD3D59B9141560D4174AAE6E66E0, 41614846F083525E913C4C36FB3E4227138833978ECCD840737B766F0BA24D62 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
11:18:33.0349 0x1df8  cdrom - ok
11:18:33.0361 0x1df8  [ 89050BDC752EC2AAEDC50789223CD5E9, CECE30222CC9722655690C5A319F478A9E0C0C8100E660CA2B976852AB9CFDEF ] CertPropSvc     C:\Windows\System32\certprop.dll
11:18:33.0369 0x1df8  CertPropSvc - ok
11:18:33.0381 0x1df8  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys
11:18:33.0391 0x1df8  circlass - ok
11:18:33.0423 0x1df8  [ 3D67C27DD17B254D7915FA16A5AE3573, 5B3A6C6A7F940C06362775DAF13CEADA37C7AA84A509458A57C23B4369970A90 ] CLFS            C:\Windows\system32\CLFS.sys
11:18:33.0435 0x1df8  CLFS - ok
11:18:33.0476 0x1df8  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
11:18:33.0484 0x1df8  clr_optimization_v2.0.50727_32 - ok
11:18:33.0517 0x1df8  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
11:18:33.0525 0x1df8  clr_optimization_v2.0.50727_64 - ok
11:18:33.0569 0x1df8  [ CC49C3DB97ECB904760843F30A708D09, A5480D8D3219DD905D587D60385FACC3BF2E1E01431AB4AA9CCDD42ADFA7225E ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
11:18:33.0578 0x1df8  clr_optimization_v4.0.30319_32 - ok
11:18:33.0602 0x1df8  [ B0F2371E89292E083E0D524CA4C0E9F0, 8C8525B599843650842F6463E49BF05BA816DAD7936C84E1EA8B43DB0FF37436 ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
11:18:33.0611 0x1df8  clr_optimization_v4.0.30319_64 - ok
11:18:33.0695 0x1df8  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
11:18:33.0703 0x1df8  CmBatt - ok
11:18:33.0741 0x1df8  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
11:18:33.0748 0x1df8  cmdide - ok
11:18:33.0889 0x1df8  [ ADDEC51C9ECC4C876E7B51E3B19B1B00, 3A446EAA2C60058037DA6C6B5D745A52905F4DEBF9D9B96B04F27F8BE6F73236 ] cmudaxp         C:\Windows\system32\drivers\cmudaxp.sys
11:18:33.0913 0x1df8  cmudaxp - ok
11:18:33.0954 0x1df8  [ A98CED39AD91B445E2E442A9BD67E8B4, B4189DEEF1C0EE22AE983119047B1A40FFDD8F3E163DFFABD7C2706231B0B1B0 ] CNG             C:\Windows\system32\Drivers\cng.sys
11:18:33.0970 0x1df8  CNG - ok
11:18:33.0998 0x1df8  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
11:18:34.0004 0x1df8  Compbatt - ok
11:18:34.0018 0x1df8  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
11:18:34.0028 0x1df8  CompositeBus - ok
11:18:34.0039 0x1df8  COMSysApp - ok
11:18:34.0092 0x1df8  [ 1154D3FBD01C35A2F9A2073BCB366452, 02F8CBDD8E2F321711528CFFC46E9F0B60CC779C34164E387E2E53DEB518B674 ] cphs            C:\Windows\SysWow64\IntelCpHeciSvc.exe
11:18:34.0104 0x1df8  cphs - ok
11:18:34.0119 0x1df8  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
11:18:34.0126 0x1df8  crcdisk - ok
11:18:34.0196 0x1df8  [ C8BD651E13895B93ED9EC5B4F1DF42BC, D86D6BF0BA3C09B49B3A52C86A7F3B3856A27F79EDD86A8FFA469D9A5F196E8D ] Creative ALchemy AL6 Licensing Service C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
11:18:34.0200 0x1df8  Creative ALchemy AL6 Licensing Service - detected UnsignedFile.Multi.Generic ( 1 )
11:18:34.0287 0x1df8  Detect skipped due to KSN trusted
11:18:34.0287 0x1df8  Creative ALchemy AL6 Licensing Service - ok
11:18:34.0313 0x1df8  [ 2C6632CECFDBBE793FDA8AF9CA55A9CC, 335188515F798483660E529204A13012E4D21B0ECA489224A11C26F91A5B3CCE ] CryptSvc        C:\Windows\system32\cryptsvc.dll
11:18:34.0323 0x1df8  CryptSvc - ok
11:18:34.0350 0x1df8  [ DA5D34AC12C5B08C9F2E968013B76C13, D7124CBD47EF8C94D550AFABBA3477ECD59F7E9CC6A05F397191D2EAAB0D09BD ] CSC             C:\Windows\system32\drivers\csc.sys
11:18:34.0364 0x1df8  CSC - ok
11:18:34.0382 0x1df8  [ 562D6A94FA9324EEFC07E2F9C3C7F180, 30EE40CA9B303449D028969E9436EF33982C3B0FC405FDDE25A0C69F5553177E ] CscService      C:\Windows\System32\cscsvc.dll
11:18:34.0400 0x1df8  CscService - ok
11:18:34.0444 0x1df8  [ E94E2A73DD415849CCAEEF50899FC486, 7A93BA6386DCD6F4CF1E41D347C19F844B51EC4EBA710601E9963A655467A691 ] CTAudSvcService C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
11:18:34.0453 0x1df8  CTAudSvcService - detected UnsignedFile.Multi.Generic ( 1 )
11:18:34.0540 0x1df8  Detect skipped due to KSN trusted
11:18:34.0540 0x1df8  CTAudSvcService - ok
11:18:34.0586 0x1df8  [ 9F5F0457FDF0ACC3337F2DB496F480D2, 9ED441331751A22A1EE6E82B3A63C7EA30381705D6FB37FBAF3CCE819A0FB29A ] cthdb           C:\Windows\system32\DRIVERS\cthdb.sys
11:18:34.0594 0x1df8  cthdb - ok
11:18:34.0629 0x1df8  [ 701F356A52EAD0E7F675157B518C8650, 294965060E31DBBDE3F904C07366766BB73D61BC7F80BB083836931AA4C9AD62 ] DcomLaunch      C:\Windows\system32\rpcss.dll
11:18:34.0645 0x1df8  DcomLaunch - ok
11:18:34.0660 0x1df8  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll
11:18:34.0685 0x1df8  defragsvc - ok
11:18:34.0707 0x1df8  [ 9B38580063D281A99E68EF5813022A5F, D91676B0E0A8E2A090E3E5DD340ABCFC20AE0F55B4C82869D6CFB34239BD27DA ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
11:18:34.0716 0x1df8  DfsC - ok
11:18:34.0734 0x1df8  [ 3855C80D6D8EAAF826D0704F0C4C95A0, D96D864190D3CA841EC4C0F6E2E04DF49AB3FB18016AE9B18E6624E0DF2ED84C ] Dhcp            C:\Windows\system32\dhcpcore.dll
11:18:34.0746 0x1df8  Dhcp - ok
11:18:34.0806 0x1df8  [ EE9954237F15BE4DD9304D12E4D305ED, F295C9BAF20F0E669B673AFCC16B4969EE31B6A3808980DAB93D9B0F167DA3C0 ] DiagTrack       C:\Windows\system32\diagtrack.dll
11:18:34.0833 0x1df8  DiagTrack - ok
11:18:34.0857 0x1df8  [ 9ED290A1E8FDBCF269B26CDA541DDC84, 103332D59EFAAF60B014F4450C4B68051417B5CBBF4CA1769CCE694925CB0A83 ] discache        C:\Windows\system32\drivers\discache.sys
11:18:34.0865 0x1df8  discache - ok
11:18:34.0904 0x1df8  [ 616387BBD83372220B09DE95F4E67BBC, 5E2D5280BB775576E7CDE3FA6BDE494E183123635E5908CF7EBF1FF52966D07D ] Disk            C:\Windows\system32\drivers\disk.sys
11:18:34.0912 0x1df8  Disk - ok
11:18:35.0017 0x1df8  [ 39003A1C4E50E362FFC1D1FFB83A6773, 49398A58D7645B860964CCF5CB5474861ED6DA3040F74F5167362592E154F8FD ] DisplayFusionService C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
11:18:35.0089 0x1df8  DisplayFusionService - ok
11:18:35.0107 0x1df8  [ 5DB085A8A6600BE6401F2B24EECB5415, 5FC5C7C1B4DB7BF6EFD0992E91DB41FD047E90D1ABA0B8F868CB72557F88FB13 ] dmvsc           C:\Windows\system32\drivers\dmvsc.sys
11:18:35.0114 0x1df8  dmvsc - ok
11:18:35.0141 0x1df8  [ 46295251B5536E8C13BD6A6A1C1B4B30, B9B064D8E96421080B36211E6A9EF2C01165B6E704B6AA137268B74E627F4A20 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
11:18:35.0150 0x1df8  Dnscache - ok
11:18:35.0164 0x1df8  [ 8DA62036CC6192959D675142A3084916, BA97989D8E047872C54BC517697366741AFBB483906185EDED67C7C5854FCB4F ] dot3svc         C:\Windows\System32\dot3svc.dll
11:18:35.0176 0x1df8  dot3svc - ok
11:18:35.0190 0x1df8  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll
11:18:35.0212 0x1df8  DPS - ok
11:18:35.0243 0x1df8  [ 26FE888505E5A945B0536AF9A2A27A6F, A6B16ED498BAFE300E1F0E0A241E3D62F7A1C5973EE775904ED14F33A2BC08A6 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
11:18:35.0249 0x1df8  drmkaud - ok
11:18:35.0381 0x1df8  [ C727B350874B61E4BE80AB013530F655, D3C2B704276A8C11017F21BA2AA78E9EB7C4830C4198A89C8CCB92CD5545A6CF ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
11:18:35.0401 0x1df8  DXGKrnl - ok
11:18:35.0434 0x1df8  [ 235C3283DDBFAD74FB451E268CBF0A5D, 15571DA93C685D44A0B82D47242F8FA57F5045D352C0E6AACF6547B11AFC3805 ] e1qexpress      C:\Windows\system32\DRIVERS\e1q60x64.sys
11:18:35.0444 0x1df8  e1qexpress - ok
11:18:35.0459 0x1df8  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll
11:18:35.0480 0x1df8  EapHost - ok
11:18:35.0542 0x1df8  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\drivers\evbda.sys
11:18:35.0595 0x1df8  ebdrv - ok
11:18:35.0621 0x1df8  [ D6CCBE51C4FAA41F21BC451AE2C95B97, 17C99A71E169DD885B40717508D7988B7D0A78BACB11392890ED80518D0BF3F5 ] EFS             C:\Windows\System32\lsass.exe
11:18:35.0628 0x1df8  EFS - ok
11:18:35.0670 0x1df8  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
11:18:35.0687 0x1df8  ehRecvr - ok
11:18:35.0702 0x1df8  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe
11:18:35.0711 0x1df8  ehSched - ok
11:18:35.0733 0x1df8  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
11:18:35.0747 0x1df8  elxstor - ok
11:18:35.0771 0x1df8  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
11:18:35.0779 0x1df8  ErrDev - ok
11:18:35.0826 0x1df8  [ BE646F166163211CD9790F93D89C3981, C57543A72191B9484E51A11951302E9DC0D15B2C6CB2E3A004782551605E6761 ] EuMusDesignVirtualAudioCableWdm C:\Windows\system32\DRIVERS\vrtaucbl.sys
11:18:35.0830 0x1df8  EuMusDesignVirtualAudioCableWdm - detected UnsignedFile.Multi.Generic ( 1 )
11:18:35.0919 0x1df8  Detect skipped due to KSN trusted
11:18:35.0920 0x1df8  EuMusDesignVirtualAudioCableWdm - ok
11:18:35.0940 0x1df8  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll
11:18:35.0967 0x1df8  EventSystem - ok
11:18:35.0985 0x1df8  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys
11:18:36.0008 0x1df8  exfat - ok
11:18:36.0020 0x1df8  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
11:18:36.0043 0x1df8  fastfat - ok
11:18:36.0068 0x1df8  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe
11:18:36.0085 0x1df8  Fax - ok
11:18:36.0098 0x1df8  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
11:18:36.0105 0x1df8  fdc - ok
11:18:36.0128 0x1df8  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll
11:18:36.0148 0x1df8  fdPHost - ok
11:18:36.0158 0x1df8  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
11:18:36.0178 0x1df8  FDResPub - ok
11:18:36.0194 0x1df8  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
11:18:36.0201 0x1df8  FileInfo - ok
11:18:36.0206 0x1df8  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
11:18:36.0226 0x1df8  Filetrace - ok
11:18:36.0236 0x1df8  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
11:18:36.0243 0x1df8  flpydisk - ok
11:18:36.0256 0x1df8  [ BAD52A4449DB51D70826EBDE87D84E22, D9B805CD3B0995FBF8A10060B08D9CAEB1B87371B5B9C0FF07400AEB73B9F0EB ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
11:18:36.0266 0x1df8  FltMgr - ok
11:18:36.0313 0x1df8  [ CF0108CBA6D1860563BA20E3D74C6646, 737B5E89A858D7E3AEC8BF660AA4FCC56501A69468EA143531286016AF7C0B33 ] FontCache       C:\Windows\system32\FntCache.dll
11:18:36.0337 0x1df8  FontCache - ok
11:18:36.0384 0x1df8  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
11:18:36.0391 0x1df8  FontCache3.0.0.0 - ok
11:18:36.0397 0x1df8  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
11:18:36.0404 0x1df8  FsDepends - ok
11:18:36.0414 0x1df8  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
11:18:36.0421 0x1df8  Fs_Rec - ok
11:18:36.0431 0x1df8  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
11:18:36.0443 0x1df8  fvevol - ok
11:18:36.0457 0x1df8  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
11:18:36.0464 0x1df8  gagp30kx - ok
11:18:36.0472 0x1df8  gdrv - ok
11:18:36.0513 0x1df8  [ E4AE497857409127ED57562AF913A903, 262ADD713B1FBF6200550967D1F8635B55D01BBD8FA2E753536E71A4EC87867B ] gpsvc           C:\Windows\System32\gpsvc.dll
11:18:36.0532 0x1df8  gpsvc - ok
11:18:36.0631 0x1df8  [ 2D8BBF6C7241AAD9EDE7708EBB7B43A4, 51AF8150C6CF738AF14F502E6BDAD1035773DD45980770E06393814B75259EF8 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
11:18:36.0639 0x1df8  gupdate - ok
11:18:36.0656 0x1df8  [ 2D8BBF6C7241AAD9EDE7708EBB7B43A4, 51AF8150C6CF738AF14F502E6BDAD1035773DD45980770E06393814B75259EF8 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
11:18:36.0664 0x1df8  gupdatem - ok
11:18:36.0676 0x1df8  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
11:18:36.0684 0x1df8  hcw85cir - ok
11:18:36.0723 0x1df8  [ FBB4644CD43147F8128782BF5BCD1A67, DD4447E8433A2E826A8070271BE723DAF294BED84935307268958B90CB44D26E ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
11:18:36.0734 0x1df8  HdAudAddService - ok
11:18:36.0765 0x1df8  [ 04EC89E18FBA1F3F0E0C55DBF6F45E86, BF9DD474AB47AADEE0FBCB384D0274E54A3510752D0CFAAF6C6020ED6250934A ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
11:18:36.0773 0x1df8  HDAudBus - ok
11:18:36.0786 0x1df8  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys
11:18:36.0794 0x1df8  HidBatt - ok
11:18:36.0806 0x1df8  [ FDF5EAD19FD8B2D0C50A9CCDD7836F9E, B865703E3D9BFC75DF363BF943213C47A63445415E211000717009D2BD0C062B ] HidBth          C:\Windows\system32\drivers\hidbth.sys
11:18:36.0814 0x1df8  HidBth - ok
11:18:36.0838 0x1df8  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\drivers\hidir.sys
11:18:36.0847 0x1df8  HidIr - ok
11:18:36.0866 0x1df8  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll
11:18:36.0887 0x1df8  hidserv - ok
11:18:36.0908 0x1df8  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
11:18:36.0916 0x1df8  HidUsb - ok
11:18:36.0938 0x1df8  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
11:18:36.0959 0x1df8  hkmsvc - ok
11:18:36.0977 0x1df8  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
11:18:36.0989 0x1df8  HomeGroupListener - ok
11:18:37.0009 0x1df8  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
11:18:37.0020 0x1df8  HomeGroupProvider - ok
11:18:37.0032 0x1df8  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
11:18:37.0040 0x1df8  HpSAMD - ok
11:18:37.0101 0x1df8  [ EC80F3ECC5F8543E22BBCB037D837CA9, 23A4AE80A6C317CE77BD9D352CD9CED8649E3AD98A7C0A2044138BB20B46F398 ] HPSupportSolutionsFrameworkService C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
11:18:37.0110 0x1df8  HPSupportSolutionsFrameworkService - ok
11:18:37.0147 0x1df8  [ 26647A4F267D13D67ED6B99EAE2A7F78, A39B622517B317174DDD9D500C9AED1F3193D78E4DD3A81ABE5DBA57630A57E0 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
11:18:37.0165 0x1df8  HTTP - ok
11:18:37.0178 0x1df8  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
11:18:37.0185 0x1df8  hwpolicy - ok
11:18:37.0204 0x1df8  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
11:18:37.0213 0x1df8  i8042prt - ok
11:18:37.0251 0x1df8  [ 6655615C7E4E29E6481F75A93ED99954, C7387D85DEC6BEF74DAD3B36398D1DA8914E9CF6F460D36E30088E3F6754E972 ] iaStorA         C:\Windows\system32\DRIVERS\iaStorA.sys
11:18:37.0266 0x1df8  iaStorA - ok
11:18:37.0349 0x1df8  [ F35FBCEB1B71BC20BBAFA526E203D6A1, F389B689B5DF0D204E3EA21B7201A89D29DE518716781BB390AC6E5CED64C790 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
11:18:37.0356 0x1df8  IAStorDataMgrSvc - ok
11:18:37.0367 0x1df8  [ ABE52EF9AF37C8D4FC67FDB9BE368142, 75B2787A0E45ED4801530D13381E596D1DB635D0A9C3FDFAB3951063048A5ECF ] iaStorF         C:\Windows\system32\DRIVERS\iaStorF.sys
11:18:37.0373 0x1df8  iaStorF - ok
11:18:37.0397 0x1df8  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
11:18:37.0410 0x1df8  iaStorV - ok
11:18:37.0445 0x1df8  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
11:18:37.0464 0x1df8  idsvc - ok
11:18:37.0467 0x1df8  IEEtwCollectorService - ok
11:18:37.0572 0x1df8  [ 09F8023A17EE9EB0897A1B195428192B, 2DF018A24766E32E16F4B4FA9DA3D095BA42702B6869D4D1624A5EBF83805AF2 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
11:18:37.0670 0x1df8  igfx - ok
11:18:37.0706 0x1df8  [ F64E1962751A6DAA3FBB6210D6751E22, 972046FB7F0B443F9251F2F5B4AF0F8BAC2046B3EA295428BC888AAA568EC737 ] igfxCUIService1.0.0.0 C:\Windows\system32\igfxCUIService.exe
11:18:37.0717 0x1df8  igfxCUIService1.0.0.0 - ok
11:18:37.0729 0x1df8  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\drivers\iirsp.sys
11:18:37.0736 0x1df8  iirsp - ok
11:18:37.0769 0x1df8  [ 1C0CCAEEC82218693EF0363C8BCE51D9, 21850F4D166CE634EC05421B61476A6E7EC179908ECE7A5DF1F4EB0155FCB570 ] IKEEXT          C:\Windows\System32\ikeext.dll
11:18:37.0789 0x1df8  IKEEXT - ok
11:18:37.0876 0x1df8  [ 067D63BC5A114FF0C4EF3404F0134625, F6CE79F0015F19B1B346815F769758F5FF6DCA663626DCE352682D93763CFFC0 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
11:18:37.0937 0x1df8  IntcAzAudAddService - ok
11:18:37.0956 0x1df8  [ 890144FA6AB42F2B54EE633BF96A019A, 8741904C66170BA11C78D31681E3759537C0BF2338538678BC64234DB8FDE93F ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
11:18:37.0969 0x1df8  IntcDAud - ok
11:18:38.0024 0x1df8  [ 4C17F57E43645E75800E9E84787E34E5, 6A1531D97462BA3B3DBDAD472AF15B717C958AA8C5CE2373DE0B2A41C35BE33E ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
11:18:38.0042 0x1df8  Intel(R) Capability Licensing Service TCP IP Interface - ok
11:18:38.0054 0x1df8  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
11:18:38.0060 0x1df8  intelide - ok
11:18:38.0079 0x1df8  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
11:18:38.0087 0x1df8  intelppm - ok
11:18:38.0100 0x1df8  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
11:18:38.0121 0x1df8  IPBusEnum - ok
11:18:38.0135 0x1df8  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
11:18:38.0155 0x1df8  IpFilterDriver - ok
11:18:38.0182 0x1df8  [ 44A0A05577B41E2157161071AB109C8A, 84A190CEAC4993141C19E323563C3A6DBF6F9B643A7C02E96DF298F0AFB9F6B9 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
11:18:38.0197 0x1df8  iphlpsvc - ok
11:18:38.0209 0x1df8  [ 3CB3DBEECB9672698B5C1A6EAB2940B0, AC252B7344A3A3F2799D4FF5612FAF9DC8830F30C97B69950CF9245EA5415D08 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
11:18:38.0217 0x1df8  IPMIDRV - ok
11:18:38.0225 0x1df8  [ C9A829B22D1F2613E7A3A3E5C0E43EA2, F8C2BE9B671C14B7D203DAC99E3BEDB113AAC058B6A0D03587DC2C427CC96D74 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
11:18:38.0233 0x1df8  IPNAT - ok
11:18:38.0254 0x1df8  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
11:18:38.0263 0x1df8  IRENUM - ok
11:18:38.0346 0x1df8  [ 5E07045CEAE146804475434227649883, 93F737632B51E5BA8142E7F7395BAF22866D5F6D896153DBE6B6AD7BAB7FA82D ] iSafeKrnl       C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys
11:18:38.0357 0x1df8  iSafeKrnl - ok
11:18:38.0365 0x1df8  iSafeKrnlBoot - ok
11:18:38.0376 0x1df8  [ 406D4425ECFD7BAAFA0E700F7A2E64FD, 1E91C1ECF61EE9FF78FD9644E99880F4443603D764EEC6AFBA12AA7F7F029961 ] iSafeKrnlKit    C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys
11:18:38.0384 0x1df8  iSafeKrnlKit - ok
11:18:38.0421 0x1df8  [ A22E4FC5E5A801DAAE7978F87059CC9F, CE2AEEA094A767BB4714F4498C9F2639FB6D8D9FA77969BC1E27C52D4E6D84F1 ] iSafeKrnlMon    C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys
11:18:38.0429 0x1df8  iSafeKrnlMon - ok
11:18:38.0450 0x1df8  [ C7129E801982BC831831D2F6DD6FCE8B, 5826DA2F1BE5AC91219FFD550CD92B9F6124988A6E6F2C9509CF0A6E5F43FF08 ] iSafeKrnlR3     C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys
11:18:38.0458 0x1df8  iSafeKrnlR3 - ok
11:18:38.0522 0x1df8  [ 9FB02FBA90F6AF59537A30C3DB9777C8, 6597D4994D0D6262B853F64A6E828C5D411225624F137901F6DCF3D3BA81BB80 ] iSafeNetFilter  C:\Windows\system32\DRIVERS\iSafeNetFilter.sys
11:18:38.0529 0x1df8  iSafeNetFilter - ok
11:18:38.0551 0x1df8  [ 6FEA419122DCFABD79A17FC6C9FFB0A6, F9B616A66CEF8DBDE565D2B79E30C3420B40E1F696D849301C03625E6040F9D4 ] iSafeService    C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe
11:18:38.0560 0x1df8  iSafeService - ok
11:18:38.0567 0x1df8  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
11:18:38.0574 0x1df8  isapnp - ok
11:18:38.0595 0x1df8  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
11:18:38.0606 0x1df8  iScsiPrt - ok
11:18:38.0624 0x1df8  [ 45392E76EE30DC9C8F0181C785F0BA48, 7FB522E1AA9B877B9FB1A29C2ADC42EA794E8864AD2411AD275F00F00547F8F3 ] iusb3hcs        C:\Windows\system32\DRIVERS\iusb3hcs.sys
11:18:38.0630 0x1df8  iusb3hcs - ok
11:18:38.0656 0x1df8  [ C6E8FB7FF41877378CCB30DE6E9941DF, CA808A00C0CC21C1C7BE54F0D1E5D3F24C0032BE821C064E0A63901F20F3C6BC ] iusb3hub        C:\Windows\system32\DRIVERS\iusb3hub.sys
11:18:38.0668 0x1df8  iusb3hub - ok
11:18:38.0705 0x1df8  [ 6FBA980433B2B21604CE990FBF542D3F, ACB35A5558DD9EF9A339C9D061207AF5527D3AEFC9AC99AB6CFBA1CE92F8B62D ] iusb3xhc        C:\Windows\system32\DRIVERS\iusb3xhc.sys
11:18:38.0723 0x1df8  iusb3xhc - ok
11:18:38.0762 0x1df8  [ 0B93A01F786F37A4B1EDE84E639FFF10, 8747109A2FA2B80C8C5F5B6D2372C1B0DA4F4BF9DC1D551195ADF0715C260223 ] jhi_service     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
11:18:38.0770 0x1df8  jhi_service - ok
11:18:38.0784 0x1df8  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
11:18:38.0791 0x1df8  kbdclass - ok
11:18:38.0806 0x1df8  [ 3985332405FA64D8E679A1DB24901596, CA4C274704B9F4AE560CC32AD7C22D39ADAD13C61709E21F70C9B1AACE34B7A2 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
11:18:38.0813 0x1df8  kbdhid - ok
11:18:38.0821 0x1df8  [ D6CCBE51C4FAA41F21BC451AE2C95B97, 17C99A71E169DD885B40717508D7988B7D0A78BACB11392890ED80518D0BF3F5 ] KeyIso          C:\Windows\system32\lsass.exe
11:18:38.0829 0x1df8  KeyIso - ok
11:18:38.0852 0x1df8  [ 1C19A55425902DC7EAFD208664837F5B, 8021BCDD0A010351490B8647379776030179F2390365C004A839A00C030D9D3D ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
11:18:38.0860 0x1df8  KSecDD - ok
11:18:38.0902 0x1df8  [ 800B40CE64259F6EEFB1627C9DA0038E, 21D02F7790FB8089C6006A4B65763F8F7F4F52B7D84D2743B8967A542FF42214 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
11:18:38.0911 0x1df8  KSecPkg - ok
11:18:38.0920 0x1df8  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
11:18:38.0941 0x1df8  ksthunk - ok
11:18:38.0961 0x1df8  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll
11:18:38.0987 0x1df8  KtmRm - ok
11:18:39.0012 0x1df8  [ 5CE3ADEF1C7203DCC0467E084ACE5643, E8A26479F296451310D42215E3E280C80A18BD6E537A854D1702873AC4162382 ] LanmanServer    C:\Windows\system32\srvsvc.dll
11:18:39.0024 0x1df8  LanmanServer - ok
11:18:39.0041 0x1df8  [ FCFB82793B989875CF2DF98AD2BEA5BD, 38A612BE12613D2196AE86F8C8686A53AB83E9CEE8E0E4AB0BD0329244D9050A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
11:18:39.0051 0x1df8  LanmanWorkstation - ok
11:18:39.0070 0x1df8  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
11:18:39.0091 0x1df8  lltdio - ok
11:18:39.0124 0x1df8  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
11:18:39.0148 0x1df8  lltdsvc - ok
11:18:39.0165 0x1df8  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll
11:18:39.0186 0x1df8  lmhosts - ok
11:18:39.0251 0x1df8  [ C31139E0907170E2A3FA8D19DCC23D35, C504E93D2018E9E487A428483C646C67B4ECE122560CF0FA49A1626E1509EEAE ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
11:18:39.0262 0x1df8  LMS - ok
11:18:39.0285 0x1df8  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
11:18:39.0293 0x1df8  LSI_FC - ok
11:18:39.0303 0x1df8  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
11:18:39.0311 0x1df8  LSI_SAS - ok
11:18:39.0320 0x1df8  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
11:18:39.0327 0x1df8  LSI_SAS2 - ok
11:18:39.0338 0x1df8  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
11:18:39.0346 0x1df8  LSI_SCSI - ok
11:18:39.0357 0x1df8  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys
11:18:39.0378 0x1df8  luafv - ok
11:18:39.0423 0x1df8  [ 0C85B2B6FB74B36A251792D45E0EF860, 2E04204560C1159ABC25F273B0B7F81FDF9BA5E88C17929FD924C4E945DE5020 ] LVRS64          C:\Windows\system32\DRIVERS\lvrs64.sys
11:18:39.0434 0x1df8  LVRS64 - ok
11:18:39.0545 0x1df8  [ FF3A488924B0032B1A9CA6948C1FA9E8, 6F05852B75498210926F5CDF49D2A6DD97C39CD93D32E3200D7240AADA3E7BEE ] LVUVC64         C:\Windows\system32\DRIVERS\lvuvc64.sys
11:18:39.0620 0x1df8  LVUVC64 - ok
11:18:39.0652 0x1df8  [ 039E4A64A5B6DE525E8CACFF1207B049, C907064F770D28193B8D3F6E1B14E0FF0424DBB7F977894FFEEC04FBB887D0AC ] ManyCam         C:\Windows\system32\DRIVERS\mcvidrv.sys
11:18:39.0658 0x1df8  ManyCam - ok
11:18:39.0698 0x1df8  [ F1CE49C11A9833A5D2EC32443A142064, 70BFA69B61304F7FD4193205B59019B489FE9CE1D3E961568DCACBE0C68EC7B5 ] mcaudrv_simple  C:\Windows\system32\drivers\mcaudrv_x64.sys
11:18:39.0704 0x1df8  mcaudrv_simple - ok
11:18:39.0724 0x1df8  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
11:18:39.0733 0x1df8  Mcx2Svc - ok
11:18:39.0747 0x1df8  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\drivers\megasas.sys
11:18:39.0754 0x1df8  megasas - ok
11:18:39.0779 0x1df8  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
11:18:39.0789 0x1df8  MegaSR - ok
11:18:39.0821 0x1df8  [ 8751062F2F7EC78DE92D778A08099DDE, F10BE771FF9E02A51CF3A167BB967167DE4F66647D7F1508CB27D8FDD8623700 ] MEIx64          C:\Windows\system32\DRIVERS\TeeDriverx64.sys
11:18:39.0830 0x1df8  MEIx64 - ok
11:18:39.0847 0x1df8  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll
11:18:39.0869 0x1df8  MMCSS - ok
11:18:39.0915 0x1df8  [ BFFB0C93D9FB43CA42EF11C9240BFF7F, E1E98C55DF9A56316050A21AC5A7D764338DA55F6124B52A52E71B5B0089C3FA ] Modem           C:\Windows\system32\drivers\modem.sys
11:18:39.0922 0x1df8  Modem - ok
11:18:39.0946 0x1df8  [ 009E04D73298787DAA406104B17305A7, E9713CF96C1FE6808E7F5CDF3255A930D38B7FBBF51DCA63B17F40A37D621718 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
11:18:39.0953 0x1df8  monitor - ok
11:18:39.0971 0x1df8  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
11:18:39.0978 0x1df8  mouclass - ok
11:18:40.0000 0x1df8  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
11:18:40.0008 0x1df8  mouhid - ok
11:18:40.0034 0x1df8  [ 8ADB5445B29941CB41AF2846FD5C93C7, 689582430FE29EC0845B1DB841D3CC49D5D09DE264586E3999EEFE616986D12B ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
11:18:40.0042 0x1df8  mountmgr - ok
11:18:40.0097 0x1df8  [ D57B7C101A8216E7769B14645AFEB276, 38BF427F81589173D3CD823A7BD3CA84B0FADD6747467E7AEADB72D1F4E1404B ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
11:18:40.0106 0x1df8  MozillaMaintenance - ok
11:18:40.0161 0x1df8  [ 3665AB2F67F4024F5F3F80335ED5322A, BE3DC246F176E00D7611A7E16FBC22615199F49EBCB4C90B0C107294E592BF8D ] MpFilter        C:\Windows\system32\DRIVERS\MpFilter.sys
11:18:40.0175 0x1df8  MpFilter - ok
11:18:40.0191 0x1df8  [ 3A6FB80E65EB0D5F78779E1F860CEEDF, DE5004F43EDA2A6C629CEFA76D4F751F6CB4349271B7806206D19F35A68EDBEC ] mpio            C:\Windows\system32\drivers\mpio.sys
11:18:40.0200 0x1df8  mpio - ok
11:18:40.0216 0x1df8  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
11:18:40.0225 0x1df8  mpsdrv - ok
11:18:40.0279 0x1df8  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
11:18:40.0298 0x1df8  MpsSvc - ok
11:18:40.0330 0x1df8  [ 98DB1790F0A584E0A2528B92B052417F, 9AA04CA73AFE599810CD233B9CEC212E16D44DCEDF5C7D0181C7257F498068B5 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
11:18:40.0340 0x1df8  MRxDAV - ok
11:18:40.0358 0x1df8  [ 2EB36DF5E373FCD1783F941A85803F9F, B492BD954CD88F359B33528752B990E03B96337E60F4E732977A1820562FC73B ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
11:18:40.0368 0x1df8  mrxsmb - ok
11:18:40.0398 0x1df8  [ 6C6A67FFEC4C06AEB61BC07E5E5B03C1, D0C461BAD39E9F7606AAE3CCE245252451DE1B391CB279C4E90ECE002CCDB2D7 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
11:18:40.0410 0x1df8  mrxsmb10 - ok
11:18:40.0432 0x1df8  [ D9973E3B4637A4EA35DBF86A26F58270, C571FDCBBF7D5A79FCCD0A308FC5BBA2DCB9E04BB544316BFEB69C31AC803D38 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
11:18:40.0441 0x1df8  mrxsmb20 - ok
11:18:40.0454 0x1df8  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
11:18:40.0460 0x1df8  msahci - ok
11:18:40.0477 0x1df8  [ 12AFF5E3B3E1C6C040B2416ACC3B151B, 61E74BF5D772C435408AFD2CD32FC17678EC105960CB97860BFA16752F31EB6F ] msdsm           C:\Windows\system32\drivers\msdsm.sys
11:18:40.0486 0x1df8  msdsm - ok
11:18:40.0503 0x1df8  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe
11:18:40.0513 0x1df8  MSDTC - ok
11:18:40.0529 0x1df8  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
11:18:40.0550 0x1df8  Msfs - ok
11:18:40.0556 0x1df8  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
11:18:40.0576 0x1df8  mshidkmdf - ok
11:18:40.0585 0x1df8  MSICDSetup - ok
11:18:40.0592 0x1df8  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
11:18:40.0599 0x1df8  msisadrv - ok
11:18:40.0621 0x1df8  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
11:18:40.0643 0x1df8  MSiSCSI - ok
11:18:40.0645 0x1df8  msiserver - ok
11:18:40.0667 0x1df8  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
11:18:40.0687 0x1df8  MSKSSRV - ok
11:18:40.0749 0x1df8  [ 5ADED2C1239D7BD798E2C4EF9EAA1FA3, 6A462DAC110015F3E59610202714120C557674019A0196680B72031C50D7C474 ] MsMpSvc         C:\Program Files\Microsoft Security Client\MsMpEng.exe
11:18:40.0758 0x1df8  MsMpSvc - ok
11:18:40.0767 0x1df8  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
11:18:40.0788 0x1df8  MSPCLOCK - ok
11:18:40.0790 0x1df8  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
11:18:40.0811 0x1df8  MSPQM - ok
11:18:40.0826 0x1df8  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
11:18:40.0838 0x1df8  MsRPC - ok
11:18:40.0848 0x1df8  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
11:18:40.0855 0x1df8  mssmbios - ok
11:18:40.0862 0x1df8  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
11:18:40.0882 0x1df8  MSTEE - ok
11:18:40.0888 0x1df8  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
11:18:40.0896 0x1df8  MTConfig - ok
11:18:40.0911 0x1df8  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys
11:18:40.0918 0x1df8  Mup - ok
11:18:40.0940 0x1df8  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
11:18:40.0968 0x1df8  napagent - ok
11:18:41.0004 0x1df8  [ B323F2FB750238EE63843C2C3D4218F5, 529077D71D9C376CB200AF793364689EA2C61FD49E4C6DD5107F2F2C607A3EE6 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
11:18:41.0015 0x1df8  NativeWifiP - ok
11:18:41.0056 0x1df8  [ F7309F42555F8AAB7144A51A1F2585B0, 065277A8AFAEE3888C997A76D2F751070F92DF4C3354D16B194860B4BDAFF937 ] NDIS            C:\Windows\system32\drivers\ndis.sys
11:18:41.0076 0x1df8  NDIS - ok
11:18:41.0095 0x1df8  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
11:18:41.0116 0x1df8  NdisCap - ok
11:18:41.0131 0x1df8  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
11:18:41.0139 0x1df8  NdisTapi - ok
11:18:41.0159 0x1df8  [ 662CBFAA835FFF1A935DD01890AAFC62, 41CD715EF77446E2ECD70A512BF2A5DC8C32C0F38E56F48621461784C28CF914 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
11:18:41.0167 0x1df8  Ndisuio - ok
11:18:41.0175 0x1df8  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
11:18:41.0196 0x1df8  NdisWan - ok
11:18:41.0205 0x1df8  [ F84F49FD9002E84FBCCF60F9F6AB8FBE, 91DB0A9050F24C3D453316ECFC93F5762AAA8CF6D778406D64952A12119991E0 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
11:18:41.0213 0x1df8  NDProxy - ok
11:18:41.0221 0x1df8  [ BB14215BBAF8EBB5E5FFAA3B6B04D177, 7A53CBF15409FAF34F3959263E7C3E69770CF06B4FEB7A08E3009C18A098DBA3 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
11:18:41.0229 0x1df8  NetBIOS - ok
11:18:41.0257 0x1df8  [ E47D571FEC2C76E867935109AB2A770C, F349D25890B6F476B106FD75BFB081DB737CA9B224D95E44927942FFF2DF82CD ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
11:18:41.0267 0x1df8  NetBT - ok
11:18:41.0280 0x1df8  [ D6CCBE51C4FAA41F21BC451AE2C95B97, 17C99A71E169DD885B40717508D7988B7D0A78BACB11392890ED80518D0BF3F5 ] Netlogon        C:\Windows\system32\lsass.exe
11:18:41.0288 0x1df8  Netlogon - ok
11:18:41.0313 0x1df8  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
11:18:41.0339 0x1df8  Netman - ok
11:18:41.0392 0x1df8  [ 792C776343425C7BF811BEBA4A885D23, D3ADE67963349244C647EC5C23BAE2371B73051AE6E296272AF273DC2963C031 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:18:41.0402 0x1df8  NetMsmqActivator - ok
11:18:41.0415 0x1df8  [ 792C776343425C7BF811BEBA4A885D23, D3ADE67963349244C647EC5C23BAE2371B73051AE6E296272AF273DC2963C031 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:18:41.0424 0x1df8  NetPipeActivator - ok
11:18:41.0443 0x1df8  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
11:18:41.0471 0x1df8  netprofm - ok
11:18:41.0475 0x1df8  [ 792C776343425C7BF811BEBA4A885D23, D3ADE67963349244C647EC5C23BAE2371B73051AE6E296272AF273DC2963C031 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:18:41.0484 0x1df8  NetTcpActivator - ok
11:18:41.0490 0x1df8  [ 792C776343425C7BF811BEBA4A885D23, D3ADE67963349244C647EC5C23BAE2371B73051AE6E296272AF273DC2963C031 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:18:41.0499 0x1df8  NetTcpPortSharing - ok
11:18:41.0565 0x1df8  [ 9EE21F7D46BD2B0F128E0907BABC7D28, 158CE7A2D8FD23CDAB6DF8EF35F624DF85435D2DF273EABF128D46354E12238B ] NetUtils2016    C:\Windows\system32\drivers\NetUtils2016.sys
11:18:41.0586 0x1df8  NetUtils2016 - ok
11:18:41.0613 0x1df8  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
11:18:41.0621 0x1df8  nfrd960 - ok
11:18:41.0664 0x1df8  [ CE5F6E635FE4506AE6F2D6EB87425128, 3DB5ECF7CD2F2C3C010AA40CE57F1B3856E284BBA359FBC41A1B340E3180FD5F ] NisDrv          C:\Windows\system32\DRIVERS\NisDrvWFP.sys
11:18:41.0674 0x1df8  NisDrv - ok
11:18:41.0701 0x1df8  [ D630B510E1E3FF6BA12B705F47F115D9, 05D76065D5D9A82E53EA18CD2D0184338681A7BBD3CD5D6C44D1FA5CB1C63640 ] NisSrv          C:\Program Files\Microsoft Security Client\NisSrv.exe
11:18:41.0714 0x1df8  NisSrv - ok
11:18:41.0743 0x1df8  [ 1198848B46764B158CF995C4D110EFEF, DE98EA0E19FE5A056925212A2FF9F326D16A2E6F56CB02589FC6E628A68D26D5 ] NlaSvc          C:\Windows\System32\nlasvc.dll
11:18:41.0756 0x1df8  NlaSvc - ok
11:18:41.0771 0x1df8  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
11:18:41.0792 0x1df8  Npfs - ok
11:18:41.0815 0x1df8  [ B6537E9A92256943F1FB3B8172307C3B, AA6E4EAEE15A5666BDA8725F762077FDCE8EEA1058E6432C233592A516134E88 ] nsi             C:\Windows\system32\nsisvc.dll
11:18:41.0823 0x1df8  nsi - ok
11:18:41.0834 0x1df8  [ 2A87D15C1A5AE031388DB1FCB0442EE1, 77E11F7C8E7005762FF3CDD820450DD544B70EFDA6369A2BCB4A134534C9CE25 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
11:18:41.0841 0x1df8  nsiproxy - ok
11:18:41.0894 0x1df8  [ 3ABD1BD4844C446FF1423B983566EB47, C83D5CAAAA95D6CB72503DC8AB5AFA2EB4C658121C12E91BFBD3F71CDD3496DB ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
11:18:41.0924 0x1df8  Ntfs - ok
11:18:41.0932 0x1df8  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
11:18:41.0952 0x1df8  Null - ok
11:18:41.0982 0x1df8  [ D812362E8AF615B521AD4DF19A93BD5A, B1F04122DFE9FCC3FC56BE327D86912D624C89F2EFB9684BE66FC22115D0E19F ] NVHDA           C:\Windows\system32\drivers\nvhda64v.sys
11:18:41.0992 0x1df8  NVHDA - ok
11:18:42.0205 0x1df8  [ 45F83C99EDF3253D047F692A42C1A51A, 08EC3CE5F00C9B70F52577FAD0561A8ECCD6C04F96468DBA67B4D4C82C77FA6D ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
11:18:42.0367 0x1df8  nvlddmkm - ok
11:18:42.0390 0x1df8  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
11:18:42.0399 0x1df8  nvraid - ok
11:18:42.0414 0x1df8  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
11:18:42.0423 0x1df8  nvstor - ok
11:18:42.0461 0x1df8  [ DEF76B479C3525952D0BD71E881E07B0, DC4B13AA97F61542F55F92769F9C8C5EB253BD6EB165EF064107D11158CD412F ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
11:18:42.0469 0x1df8  NvStreamKms - ok
11:18:42.0565 0x1df8  [ AF5BE3694A76365874B8967331049F2C, F704A0403B63E856EE9ECCE7C913650F5FF928F0872035EE73E1AE1CD54BC046 ] NvStreamNetworkSvc C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
11:18:42.0623 0x1df8  NvStreamNetworkSvc - ok
11:18:42.0687 0x1df8  [ 77BE9E1AFCE995652A1C4FF4C8A0F839, 4AD981BCC349D413B3CCDC06DC8D6D2C2648D049726D6825E35A9A91D4C072FF ] NvStreamSvc     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
11:18:42.0729 0x1df8  NvStreamSvc - ok
11:18:42.0783 0x1df8  [ 92C7B8287C185022F12253026FA33401, 96E466D17347DB3E789DD6DBF3604E51D4B86D3E49592B0EF6622BD278369F6C ] nvsvc           C:\Windows\system32\nvvsvc.exe
11:18:42.0802 0x1df8  nvsvc - ok
11:18:42.0822 0x1df8  [ F37FE6B15A987AEEC08EEF531F2FAED7, CC768E7DE80C7A8CB2392F9BC528212B8A3A35A30A222ED0B0B959051E6F8065 ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
11:18:42.0831 0x1df8  nvvad_WaveExtensible - ok
11:18:42.0842 0x1df8  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
11:18:42.0851 0x1df8  nv_agp - ok
11:18:42.0874 0x1df8  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
11:18:42.0882 0x1df8  ohci1394 - ok
11:18:43.0030 0x1df8  [ AD851D818F399DD946A9C17AB2156F22, 4A541E7A3A3164581BFB9080DE0976E18F6DD00E39458EBBCBD3B2445708BEB5 ] Origin Client Service E:\Origin\OriginClientService.exe
11:18:43.0065 0x1df8  Origin Client Service - ok
11:18:43.0121 0x1df8  [ 788363C87EBD90AC1EAD2DC5A9A40759, B565663B459414C5C9F81451D9A127D62CDF605BC2A9E686F74A2E4FD44A9B43 ] Origin Web Helper Service E:\Origin\OriginWebHelperService.exe
11:18:43.0158 0x1df8  Origin Web Helper Service - ok
11:18:43.0237 0x1df8  [ 11E0B35479C895888BA3D7F619DCFFF3, 6ED82C19898101EC00BD64A9F90595C3D20AD2D2902AA8765B740FB3B9312DDF ] ose64           C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
11:18:43.0246 0x1df8  ose64 - ok
11:18:43.0383 0x1df8  [ FE9C0029E1AF26350D9985D00520E5C8, 967079CCF7B2CBD4B48C9F076675C26AF93A1CEC26C96811F279414E34004EE6 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
11:18:43.0463 0x1df8  osppsvc - ok
11:18:43.0492 0x1df8  [ 8830D42427D05B15B032108EBBDBD289, 977AEE57EF7639A1B1C8D8858AF369927EB16181100FCC4517F4B58148138C22 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
11:18:43.0505 0x1df8  p2pimsvc - ok
11:18:43.0524 0x1df8  [ 5B7BADED6943AA6F4B6C1ABA5FCCB25F, 07D17B7778A88A3007E98C47773D1D8649C3AF5284BCC870829DDF2725CF2FC1 ] p2psvc          C:\Windows\system32\p2psvc.dll
11:18:43.0538 0x1df8  p2psvc - ok
11:18:43.0550 0x1df8  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\DRIVERS\parport.sys
11:18:43.0558 0x1df8  Parport - ok
11:18:43.0569 0x1df8  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
11:18:43.0577 0x1df8  partmgr - ok
11:18:43.0608 0x1df8  [ 3CD83692C43D87088E85E3C916146FFB, 9E812535E8FBA045FDA30F68E9EB2031132C37721D542A2DC9D4C33E2B137FCF ] PcaSvc          C:\Windows\System32\pcasvc.dll
11:18:43.0618 0x1df8  PcaSvc - ok
11:18:43.0630 0x1df8  [ 9CE2B541DEBE8DCA0ECD251584540703, 04395C3C57C1200C29266077816922CF342A06ECCCB4EDEC0AFA6923C5800B5B ] pci             C:\Windows\system32\drivers\pci.sys
11:18:43.0640 0x1df8  pci - ok
11:18:43.0664 0x1df8  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
11:18:43.0671 0x1df8  pciide - ok
11:18:43.0691 0x1df8  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
11:18:43.0700 0x1df8  pcmcia - ok
11:18:43.0714 0x1df8  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys
11:18:43.0721 0x1df8  pcw - ok
11:18:43.0736 0x1df8  [ EA4D67448BE493D543F1730D6CD04694, 24717C5E41B7CA522F3330EF2228B6685E710A5259396E9887A1C1E7A413F8CA ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
11:18:43.0753 0x1df8  PEAUTH - ok
11:18:43.0788 0x1df8  [ B9B0A4299DD2D76A4243F75FD54DC680, BBF62E9628131FA396EB08D63B76D2D5FBDD61339E92B759125A066470D1C039 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
11:18:43.0815 0x1df8  PeerDistSvc - ok
11:18:43.0882 0x1df8  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
11:18:43.0891 0x1df8  PerfHost - ok
11:18:43.0941 0x1df8  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll
11:18:43.0968 0x1df8  pla - ok
11:18:43.0997 0x1df8  [ FC9CFBF842E2B3A044092ADAD71B5784, 32A6CE32B285302A2DAD0F008099586E955D954BB7EDF7D94696D3CE6FB14CF1 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
11:18:44.0010 0x1df8  PlugPlay - ok
11:18:44.0045 0x1df8  PnkBstrA - ok
11:18:44.0050 0x1df8  PnkBstrB - ok
11:18:44.0064 0x1df8  [ AAB547E4278174BEF5DF44A4811D1673, 9A434E78AB5EE7AC08F8102CD7AC70B1A43F9D7FA23CF8B338015105C8B67B84 ] PNPMEM          C:\Windows\system32\DRIVERS\pnpmem.sys
11:18:44.0072 0x1df8  PNPMEM - ok
11:18:44.0087 0x1df8  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
11:18:44.0096 0x1df8  PNRPAutoReg - ok
11:18:44.0109 0x1df8  [ 8830D42427D05B15B032108EBBDBD289, 977AEE57EF7639A1B1C8D8858AF369927EB16181100FCC4517F4B58148138C22 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
11:18:44.0122 0x1df8  PNRPsvc - ok
11:18:44.0153 0x1df8  [ 80D6B0563ED2BF10656B1D4748331082, B7E6B5E1148B7EE537E8D5C3A65450876B61CD45A395267D08699746E98AD574 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
11:18:44.0168 0x1df8  PolicyAgent - ok
11:18:44.0184 0x1df8  [ 0E2274B028C26022D4E13FA68B727FE3, F8ECC591575D8F3305AE6E7258A16C1D91D6C08482B1DCCD7920142221ACD5BC ] Power           C:\Windows\system32\umpo.dll
11:18:44.0194 0x1df8  Power - ok
11:18:44.0216 0x1df8  [ D8874711B6C3DD308F84E42BA6EFF179, A7E14D9A80D0F2A38568E99E34FFBE2430743523D6739C0251EE5E4E8BBB68CC ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
11:18:44.0225 0x1df8  PptpMiniport - ok
11:18:44.0243 0x1df8  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\drivers\processr.sys
11:18:44.0251 0x1df8  Processor - ok
11:18:44.0271 0x1df8  [ D0891D2F5D63DAB719F005919762912C, F187C38764D01AE3FD7CF711DF8B5FE8EB455186F104D5A76FB9DD7443066352 ] ProfSvc         C:\Windows\system32\profsvc.dll
11:18:44.0282 0x1df8  ProfSvc - ok
11:18:44.0297 0x1df8  [ D6CCBE51C4FAA41F21BC451AE2C95B97, 17C99A71E169DD885B40717508D7988B7D0A78BACB11392890ED80518D0BF3F5 ] ProtectedStorage C:\Windows\system32\lsass.exe
11:18:44.0305 0x1df8  ProtectedStorage - ok
11:18:44.0321 0x1df8  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
11:18:44.0343 0x1df8  Psched - ok
11:18:44.0394 0x1df8  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
11:18:44.0421 0x1df8  ql2300 - ok
11:18:44.0448 0x1df8  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
11:18:44.0456 0x1df8  ql40xx - ok
11:18:44.0491 0x1df8  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll
11:18:44.0506 0x1df8  QWAVE - ok
11:18:44.0520 0x1df8  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
11:18:44.0531 0x1df8  QWAVEdrv - ok
11:18:44.0543 0x1df8  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
11:18:44.0563 0x1df8  RasAcd - ok
11:18:44.0588 0x1df8  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
11:18:44.0596 0x1df8  RasAgileVpn - ok
11:18:44.0603 0x1df8  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll
11:18:44.0625 0x1df8  RasAuto - ok
11:18:44.0649 0x1df8  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
11:18:44.0671 0x1df8  Rasl2tp - ok
11:18:44.0684 0x1df8  [ 4FF5EAF907C288B338A21D9C91AA2E4E, 4D0A7BA47E699782AE1F2321A2B84A83AEC2DA6A287FDBF7926B0980B9BB3A77 ] RasMan          C:\Windows\System32\rasmans.dll
11:18:44.0696 0x1df8  RasMan - ok
11:18:44.0711 0x1df8  [ 77682DE44B334E6AAFCD0ED61FB7404F, C95DF9113D8B777BC9CFE319A710C9293210377F531F0C38FA38C588B8A3F5B4 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
11:18:44.0720 0x1df8  RasPppoe - ok
11:18:44.0726 0x1df8  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
11:18:44.0747 0x1df8  RasSstp - ok
11:18:44.0758 0x1df8  [ 638131F5C52C93ED651A0A7DB8AA6B01, D54B466859664B8CD2415CC205092849D76C765BDDDD7AD0908D2C8DBB1AB9CF ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
11:18:44.0769 0x1df8  rdbss - ok
11:18:44.0780 0x1df8  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
11:18:44.0790 0x1df8  rdpbus - ok
11:18:44.0804 0x1df8  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
11:18:44.0823 0x1df8  RDPCDD - ok
11:18:44.0835 0x1df8  [ 5A5849E58B81C1853D48DF7516CB9AA2, 451F3CFEBD2E204461A9B3AA768A79A61A935237F2A26BF74825B9B0E36A4A3D ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
11:18:44.0844 0x1df8  RDPDR - ok
11:18:44.0858 0x1df8  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
11:18:44.0877 0x1df8  RDPENCDD - ok
11:18:44.0881 0x1df8  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
11:18:44.0900 0x1df8  RDPREFMP - ok
11:18:44.0958 0x1df8  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
11:18:44.0966 0x1df8  RdpVideoMiniport - ok
11:18:44.0989 0x1df8  [ 6F426DCF2DDDCCF6BA4DFD34E9803E5B, F98270D03D2171D6F0D4D719828BF7585C44E18CAF66DEF93A51A0064E1813AE ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
11:18:44.0999 0x1df8  RDPWD - ok
11:18:45.0017 0x1df8  [ 9500266AFA2548D2812DC59D8C1D7BD3, 25FFD440B02D7D651B57133D94C95EB526F7189F3329060D004F28BA179BF89F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
11:18:45.0026 0x1df8  rdyboost - ok
11:18:45.0043 0x1df8  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
11:18:45.0052 0x1df8  RemoteAccess - ok
11:18:45.0071 0x1df8  [ 44A031C50D6E8077A034D59E094AB1E2, 7C03954A82C15B14D9160C2E8675A82A47E1C34E0D731CE5A4DED795CF873EED ] RemoteRegistry  C:\Windows\system32\regsvc.dll
11:18:45.0081 0x1df8  RemoteRegistry - ok
11:18:45.0128 0x1df8  [ 5BD6B1EC997FF3DD779D62E05D2079A8, BE4BDE29C134BAEDE4D35C777F2C6195F8C12FEF4583FAD2A442F8D1678B7FF7 ] RMCAST          C:\Windows\system32\DRIVERS\RMCAST.sys
11:18:45.0138 0x1df8  RMCAST - ok
11:18:45.0143 0x1df8  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
11:18:45.0165 0x1df8  RpcEptMapper - ok
11:18:45.0185 0x1df8  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
11:18:45.0193 0x1df8  RpcLocator - ok
11:18:45.0223 0x1df8  [ 701F356A52EAD0E7F675157B518C8650, 294965060E31DBBDE3F904C07366766BB73D61BC7F80BB083836931AA4C9AD62 ] RpcSs           C:\Windows\system32\rpcss.dll
11:18:45.0239 0x1df8  RpcSs - ok
11:18:45.0245 0x1df8  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
11:18:45.0267 0x1df8  rspndr - ok
11:18:45.0316 0x1df8  [ D787F86566F6EA23053D9C5F401E33B7, 82B1952A57FB800425E12FEFF5B326C7B7815980646F5359673CBC8BBB4C46CF ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys
11:18:45.0334 0x1df8  RTL8167 - ok
11:18:45.0376 0x1df8  [ 177963A6EEBAA9EF3B56A2DBE9D5D0FC, 908E71F2F2CB6595B2E14EF6BB526114CFFBBFCB1D6AB6672DE9917F4C515419 ] RTL8192Ce       C:\Windows\system32\DRIVERS\rtl8192Ce.sys
11:18:45.0398 0x1df8  RTL8192Ce - ok
11:18:45.0415 0x1df8  [ E60C0A09F997826C7627B244195AB581, E8630ED74B38B98BF584E353D992C1311BC36AB7F20A1BB66C9CD65CE1E46F8D ] s3cap           C:\Windows\system32\drivers\vms3cap.sys
11:18:45.0423 0x1df8  s3cap - ok
11:18:45.0431 0x1df8  [ D6CCBE51C4FAA41F21BC451AE2C95B97, 17C99A71E169DD885B40717508D7988B7D0A78BACB11392890ED80518D0BF3F5 ] SamSs           C:\Windows\system32\lsass.exe
11:18:45.0439 0x1df8  SamSs - ok
11:18:45.0447 0x1df8  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
11:18:45.0456 0x1df8  sbp2port - ok
11:18:45.0476 0x1df8  [ DBF28417B606FEA67F40FA4DEBDCEDA4, BBBA27D3E87AB4FADABB44624F206F14E49C8EACF2B7D81667E238615530DC3D ] SCardSvr        C:\Windows\System32\SCardSvr.dll
11:18:45.0486 0x1df8  SCardSvr - ok
11:18:45.0499 0x1df8  [ B0402F6755F0BEFFF66414A41EED6350, A365586427B49F8F2965F647F3D435BB165CA69C697E291C6898AC15ED5B0EB6 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
11:18:45.0507 0x1df8  scfilter - ok
11:18:45.0552 0x1df8  [ E1F233CE5DA10AC41C0545F5DAD25998, 658BCA85D4B3B4628B8B4CB12F9D1C8C10ECB8751E3568B4843998B3EC0047A2 ] Schedule        C:\Windows\system32\schedsvc.dll
11:18:45.0576 0x1df8  Schedule - ok
11:18:45.0605 0x1df8  [ 89050BDC752EC2AAEDC50789223CD5E9, CECE30222CC9722655690C5A319F478A9E0C0C8100E660CA2B976852AB9CFDEF ] SCPolicySvc     C:\Windows\System32\certprop.dll
11:18:45.0614 0x1df8  SCPolicySvc - ok
11:18:45.0628 0x1df8  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
11:18:45.0639 0x1df8  SDRSVC - ok
11:18:45.0651 0x1df8  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
11:18:45.0659 0x1df8  secdrv - ok
11:18:45.0683 0x1df8  [ 003AC904558D652DD47795D82F866DE0, B47308DFB488DEFAA46A67282B18C5CE1FF9859327E1F1AB666B9BD290F393DB ] seclogon        C:\Windows\system32\seclogon.dll
11:18:45.0692 0x1df8  seclogon - ok
11:18:45.0704 0x1df8  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll
11:18:45.0725 0x1df8  SENS - ok
11:18:45.0734 0x1df8  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
11:18:45.0742 0x1df8  SensrSvc - ok
11:18:45.0764 0x1df8  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
11:18:45.0772 0x1df8  Serenum - ok
11:18:45.0789 0x1df8  [ 083D3741859C4FEA4410BB4ACC536A39, FD89DA79FE0377E22AB3770E3030FDEBBB5A2DBF8B023045833EC8D9EFE680A0 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
11:18:45.0797 0x1df8  Serial - ok
11:18:45.0814 0x1df8  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys
11:18:45.0822 0x1df8  sermouse - ok
11:18:45.0836 0x1df8  [ B83579A3127F13580B63CBEB85DD4B2B, ACD04233D1941928095384F815C9A065C28078E6624532023F1031352A4D9DD3 ] SessionEnv      C:\Windows\system32\sessenv.dll
11:18:45.0846 0x1df8  SessionEnv - ok
11:18:45.0855 0x1df8  [ C3D57658C34C68DB5D8970A1CF96284E, 4227C4AFDA94FB87FDB6642FB345209809EB86EC8F02DB79502AE54EF4A98A4B ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
11:18:45.0863 0x1df8  sffdisk - ok
11:18:45.0874 0x1df8  [ 21EACBEFFFB0FB4999D3D10245CF10A5, 46EFD8D61FE7CB6C9BAA84B869558749CC394D15B425E1657CABA6EAE718D6CF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
11:18:45.0881 0x1df8  sffp_mmc - ok
11:18:45.0890 0x1df8  [ AF660EA3039E8FE3C2051D7224C82F34, F559BF0492DBFFE877D04DF565265195794BEB92CCAC22E4665CD7BE42F8FA2B ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
11:18:45.0898 0x1df8  sffp_sd - ok
11:18:45.0910 0x1df8  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys
11:18:45.0918 0x1df8  sfloppy - ok
11:18:45.0945 0x1df8  [ 8944F9C62D18FD16B1114C48C1E3DB26, 7AAC831672DBD63A4B4C5E7AC89A3CCA08FED87E0ED5AFCBBB1345F28A8E4C76 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
11:18:45.0958 0x1df8  SharedAccess - ok
11:18:45.0974 0x1df8  [ EA9092F3DB26EDC7199AB64C9EF0D2D7, 2FD5AFD91CF50FEEE0E5C59590C471BE61470E1C0BF4DC3745B75739BB0769F3 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
11:18:45.0988 0x1df8  ShellHWDetection - ok
11:18:46.0004 0x1df8  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
11:18:46.0011 0x1df8  SiSRaid2 - ok
11:18:46.0027 0x1df8  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
11:18:46.0035 0x1df8  SiSRaid4 - ok
11:18:46.0123 0x1df8  [ B72B80E6FF423C5011E745CB76DA9A08, 18A6B9D46E91AD4D463EB5CB832702392D2E162577F90C328B515FCE69FABD15 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
11:18:46.0140 0x1df8  SkypeUpdate - ok
11:18:46.0162 0x1df8  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
11:18:46.0184 0x1df8  Smb - ok
11:18:46.0207 0x1df8  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
11:18:46.0216 0x1df8  SNMPTRAP - ok
11:18:46.0240 0x1df8  [ 0FFE35F0B0CD5A324BBE22F02569AE3B, F4EE803EEFDB4EAEEDB3024C3516F1F9A202C77F4870D6B74356BBDE32B3B560 ] speedfan        C:\Windows\SysWOW64\speedfan.sys
11:18:46.0247 0x1df8  speedfan - ok
11:18:46.0256 0x1df8  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys
11:18:46.0263 0x1df8  spldr - ok
11:18:46.0286 0x1df8  [ 0E188E193A90E49F2C13FD6CB1EC15E5, 2F09769F588703316743478BAE96C4FF47196C15FD65809A62E58702766709DA ] Spooler         C:\Windows\System32\spoolsv.exe
11:18:46.0303 0x1df8  Spooler - ok
11:18:46.0387 0x1df8  [ 2A0DA1B8F48E7F3C9337E5463CEABB8D, 581C95B02DFD1300875ED2F61E65A682CABD1375251C10254F744E5D5A1A8B08 ] sppsvc          C:\Windows\system32\sppsvc.exe
11:18:46.0458 0x1df8  sppsvc - ok
11:18:46.0470 0x1df8  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
11:18:46.0491 0x1df8  sppuinotify - ok
11:18:46.0526 0x1df8  [ 74D30C2EF66C2EB19F17ED5423AA8038, F79AB2B2B60620565FB2169255F95F4B37F6113F0AF776D1BAD02681EBE0DB54 ] sptd            C:\Windows\System32\Drivers\sptd.sys
11:18:46.0538 0x1df8  sptd - ok
11:18:46.0568 0x1df8  [ EB15C46477EB84B6B520871ED5936CCF, 7366FD2E1315109B9A2F47DA08959CF0CBEEB1F20B2E2DEF449D39B508107D29 ] srv             C:\Windows\system32\DRIVERS\srv.sys
11:18:46.0582 0x1df8  srv - ok
11:18:46.0610 0x1df8  [ 7F4FDC9528BCE6FB919615B6A77D5724, C4843381504E0F50D4B8E4F8886C83112018CE5F64467B875F2809508EA2B182 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
11:18:46.0624 0x1df8  srv2 - ok
11:18:46.0634 0x1df8  [ 3F20CD2A11872284BD667DAD6D4801CC, 917EAA680CD10D3EA59EEF4B77BB3813D5718E7D1CB0846431255EE73035D834 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
11:18:46.0644 0x1df8  srvnet - ok
11:18:46.0652 0x1df8  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
11:18:46.0676 0x1df8  SSDPSRV - ok
11:18:46.0682 0x1df8  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll
11:18:46.0703 0x1df8  SstpSvc - ok
11:18:46.0789 0x1df8  [ DF8D486ADBBC6ACA0901CF3C1A09EF05, 734477E23E1C8578517B187CE26FC0F5646BB557F871D6C69D78D12AEB20D287 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
11:18:46.0817 0x1df8  Steam Client Service - ok
11:18:46.0916 0x1df8  [ 601F0449030798FDFB2932F902C24C98, 95D5BEFF5E909513C6823FC115259FF7C5AD695C5992874B612248D9616F5DA5 ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
11:18:46.0927 0x1df8  Stereo Service - ok
11:18:46.0944 0x1df8  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
11:18:46.0951 0x1df8  stexstor - ok
11:18:46.0980 0x1df8  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
11:18:46.0999 0x1df8  stisvc - ok
11:18:47.0029 0x1df8  [ 7785DC213270D2FC066538DAF94087E7, F09CB2895241719CA5147B2EE9F7ECBD0303AFFB5CD896F06D4D29BAAAFC207B ] storflt         C:\Windows\system32\drivers\vmstorfl.sys
11:18:47.0036 0x1df8  storflt - ok
11:18:47.0050 0x1df8  [ D34E4943D5AC096C8EDEEBFD80D76E23, 1DD7F6F97060B5F763A04ACA1F75E59DAB09EF824FD09B83FC3C192837D006DE ] storvsc         C:\Windows\system32\drivers\storvsc.sys
11:18:47.0057 0x1df8  storvsc - ok
11:18:47.0067 0x1df8  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
11:18:47.0074 0x1df8  swenum - ok
11:18:47.0093 0x1df8  [ 5D967724564F7ACCEBAC3720CFE89C32, 3420E958DA13235968138E593BC190469F456059518B7524BDE9F6F1271679F2 ] swprv           C:\Windows\System32\swprv.dll
11:18:47.0109 0x1df8  swprv - ok
11:18:47.0121 0x1df8  [ C3A39C4079305480972D29C44B868C78, 8F1BB75C743256F905EAEDE744B6082C53774C49126875FB4E4FBA30F5478B17 ] Synth3dVsc      C:\Windows\system32\drivers\synth3dvsc.sys
11:18:47.0129 0x1df8  Synth3dVsc - ok
11:18:47.0186 0x1df8  [ 922A8A7C531C8D813F2D1226F4A4FE01, 65734F23AB005FE84AA7F72D6592E884D042F6513234C17E7EDC93C2886C74C2 ] SysMain         C:\Windows\system32\sysmain.dll
11:18:47.0218 0x1df8  SysMain - ok
11:18:47.0228 0x1df8  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
11:18:47.0237 0x1df8  TabletInputService - ok
11:18:47.0257 0x1df8  taphss6 - ok
11:18:47.0273 0x1df8  [ D583628BEAD52E4E78E5A8FA338D0E02, 15D69565A824ACDB5F25903351CB9427605CB41E2BD8828D190E09D20007241C ] TapiSrv         C:\Windows\System32\tapisrv.dll
11:18:47.0285 0x1df8  TapiSrv - ok
11:18:47.0323 0x1df8  [ B2875D7ABB82867DC3AA03D991940201, F954C33FBA912A517B59330F6438C1953F9F1D8F4D8FD25945EB836A1DB07ABB ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
11:18:47.0356 0x1df8  Tcpip - ok
11:18:47.0387 0x1df8  [ B2875D7ABB82867DC3AA03D991940201, F954C33FBA912A517B59330F6438C1953F9F1D8F4D8FD25945EB836A1DB07ABB ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
11:18:47.0419 0x1df8  TCPIP6 - ok
11:18:47.0441 0x1df8  [ 7FE5586314EE7D6AA8483264A089E5AF, 4E3EA68713A45C22F1B9A1AA125E15D06D0C5E637B815537431ADFB6D7563879 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
11:18:47.0448 0x1df8  tcpipreg - ok
11:18:47.0471 0x1df8  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
11:18:47.0479 0x1df8  TDPIPE - ok
11:18:47.0497 0x1df8  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
11:18:47.0505 0x1df8  TDTCP - ok
11:18:47.0527 0x1df8  [ 37A9CDA299BD9E35E84B03EA2BC5A2CC, 07819713E15F99CFFC5F3166F058FB90112F7329C982A2E07CF8B25C32926944 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
11:18:47.0535 0x1df8  tdx - ok
11:18:47.0768 0x1df8  [ 44449A0EB8EBD8DCBC3ED4BB62BA3A5F, 168197015D1E5ED71775250084C224A1100E0F989A6D1CC4102004E5AAD74F3A ] TeamViewer      C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
11:18:47.0921 0x1df8  TeamViewer - ok
11:18:47.0945 0x1df8  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
11:18:47.0953 0x1df8  TermDD - ok
11:18:47.0962 0x1df8  [ EF4469AB69EB15E5D3754E6AEAFBCD3D, 3609214C3D5181364B544EBF17E9A109952BE1C4C35BE0A8727BFA8F49ECB130 ] terminpt        C:\Windows\system32\drivers\terminpt.sys
11:18:47.0970 0x1df8  terminpt - ok
11:18:47.0999 0x1df8  [ 6A5B600AD0041E9AF564DE73B716F3D2, D6426A63D8EED6E1630E639F489B096E3A1BE5178561F20B3CB8B1289FF9227A ] TermService     C:\Windows\System32\termsrv.dll
11:18:48.0017 0x1df8  TermService - ok
11:18:48.0034 0x1df8  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
11:18:48.0045 0x1df8  Themes - ok
11:18:48.0065 0x1df8  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll
11:18:48.0086 0x1df8  THREADORDER - ok
11:18:48.0101 0x1df8  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
11:18:48.0123 0x1df8  TrkWks - ok
11:18:48.0167 0x1df8  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
11:18:48.0189 0x1df8  TrustedInstaller - ok
11:18:48.0204 0x1df8  [ 2CE1083C5A2D9BA5FFAD087F997EE25C, 1293A1B4D98A800A16BCD3ED52EA8AB429259FC16F9B6D3A0CAAEE7C7BE57DF7 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
11:18:48.0211 0x1df8  tssecsrv - ok
11:18:48.0227 0x1df8  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
11:18:48.0234 0x1df8  TsUsbFlt - ok
11:18:48.0247 0x1df8  [ D34789988234DCC8FA55FA9A485AF0EC, 5C1A77EFA23261F5F9C971A12145CA6AC701723A94B6A8AE9BE95EEDD3C02919 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys
11:18:48.0255 0x1df8  TsUsbGD - ok
11:18:48.0279 0x1df8  [ E1748D04AE40118B62BC18AC86032192, A954B141D1B27272C771D14F3B40C7CC1F572DD72559F2C96182EFBE2B095FDE ] tsusbhub        C:\Windows\system32\drivers\tsusbhub.sys
11:18:48.0288 0x1df8  tsusbhub - ok
11:18:48.0320 0x1df8  [ A9EFA7F181D82632CDEDEEBC99FA0A41, 2F775A9382CD899B4360B9E61563F47F3DAA14FEDB204865705747437B211D6C ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
11:18:48.0329 0x1df8  tunnel - ok
11:18:48.0343 0x1df8  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
11:18:48.0351 0x1df8  uagp35 - ok
11:18:48.0395 0x1df8  UCBrowserSvc - ok
11:18:48.0435 0x1df8  [ BC380DF77F023D410466676FA5A27E3C, 818F9705530DA80DAAA00360CB5127AA5D7137EA0E55C0E82A07B7C65F84CD36 ] ucdrv           C:\Program Files (x86)\UCBrowser\Security:ucdrv-x64.sys
11:18:48.0435 0x1df8  Suspicious file ( Hidden ): C:\Program Files (x86)\UCBrowser\Security:ucdrv-x64.sys. md5: BC380DF77F023D410466676FA5A27E3C, sha256: 818F9705530DA80DAAA00360CB5127AA5D7137EA0E55C0E82A07B7C65F84CD36
11:18:48.0435 0x1df8  ucdrv - detected HiddenFile.Multi.Generic ( 1 )
11:18:48.0523 0x1df8  Detect skipped due to KSN trusted
11:18:48.0523 0x1df8  ucdrv - ok
11:18:48.0536 0x1df8  [ 992DCA93480DBF9EF103A7350C5B360E, A97739B3299EBA2043E1593C211F3AEFFA2258D8D8F0643FF3E7A6893DFC86AA ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
11:18:48.0547 0x1df8  udfs - ok
11:18:48.0572 0x1df8  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
11:18:48.0581 0x1df8  UI0Detect - ok
11:18:48.0590 0x1df8  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
11:18:48.0597 0x1df8  uliagpkx - ok
11:18:48.0617 0x1df8  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
11:18:48.0625 0x1df8  umbus - ok
11:18:48.0642 0x1df8  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\drivers\umpass.sys
11:18:48.0650 0x1df8  UmPass - ok
11:18:48.0670 0x1df8  [ A388D1BF00504BE934737C741DF542AB, 00A8627C3D372313D9212EC4F52B6A6E22CA9E9E2B5ECC21E652CD02F6101AF5 ] UmRdpService    C:\Windows\System32\umrdp.dll
11:18:48.0681 0x1df8  UmRdpService - ok
11:18:48.0713 0x1df8  [ 67A95B9D129ED5399E7965CD09CF30E7, F1F2F684146F1CCB293BB9871117B8CFC1D04588A830F67CE5D3F0D034D93B2A ] UMVPFSrv        C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
11:18:48.0725 0x1df8  UMVPFSrv - ok
11:18:48.0740 0x1df8  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
11:18:48.0766 0x1df8  upnphost - ok
11:18:48.0821 0x1df8  [ 5C3BE22E485B9BF11FCEFDC676C728D0, F55061066ECF6920D56518A677BB538C18B7F1BB150ED6DB3591408F44E8D53A ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys
11:18:48.0825 0x1df8  USBAAPL64 - detected UnsignedFile.Multi.Generic ( 1 )
11:18:48.0913 0x1df8  Detect skipped due to KSN trusted
11:18:48.0913 0x1df8  USBAAPL64 - ok
11:18:48.0937 0x1df8  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
11:18:48.0947 0x1df8  usbaudio - ok
11:18:48.0978 0x1df8  [ 28B81917A195B67617AF7DCF4DFE5736, 40A4D2AAE1BDE5ABA8708ED150396E913C566ECD5CDA40D6C6DB256F1B9FD4A9 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
11:18:48.0987 0x1df8  usbccgp - ok
11:18:49.0008 0x1df8  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
11:18:49.0017 0x1df8  usbcir - ok
11:18:49.0041 0x1df8  [ B626F048318DAE65A3317F0592BE592C, 284D8FFE1D35F852EFDA182A72288AC3A10D6ED825FE2CC5812497D3FE291AF1 ] usbehci         C:\Windows\system32\drivers\usbehci.sys
11:18:49.0049 0x1df8  usbehci - ok
11:18:49.0089 0x1df8  [ 390109E8E05BA00375DCB1ED64DC60AF, B8628502590B423BEFB6F7C8C69FAD0667AD0746FF6B444EE02016E8E1052B78 ] usbhub          C:\Windows\system32\drivers\usbhub.sys
11:18:49.0101 0x1df8  usbhub - ok
11:18:49.0127 0x1df8  [ B4DF0F4C1D9D25DFE1DAD1D8670F1D4F, 4317C2DEDC639527B53864BAEC46CBE022D298C0503E29E1072DD1C851D92BFC ] usbohci         C:\Windows\system32\drivers\usbohci.sys
11:18:49.0135 0x1df8  usbohci - ok
11:18:49.0146 0x1df8  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\drivers\usbprint.sys
11:18:49.0156 0x1df8  usbprint - ok
11:18:49.0171 0x1df8  [ E161EE674DA4D1F121EDBC5719FE61AA, AD1233246907D93CAA47853C983F30B7E0E184918B6FFCBA0EFBFCA8EB2C40DC ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
11:18:49.0181 0x1df8  USBSTOR - ok
11:18:49.0191 0x1df8  [ CFEAAF96E666E3DCBD8F6DFF516784AE, 006218A3DB5851790CC0A7F3DCD7B3AF82F624DA679296DE507AFD36C5468317 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
11:18:49.0199 0x1df8  usbuhci - ok
11:18:49.0225 0x1df8  [ 81D8645AC588E7A6D9755D8FD84E6FDD, 0D6904CF522CD822AE106259D46BC161F56E3992FEA6F1DF70EDC5BFA2247F5E ] UxSms           C:\Windows\System32\uxsms.dll
11:18:49.0234 0x1df8  UxSms - ok
11:18:49.0248 0x1df8  [ D6CCBE51C4FAA41F21BC451AE2C95B97, 17C99A71E169DD885B40717508D7988B7D0A78BACB11392890ED80518D0BF3F5 ] VaultSvc        C:\Windows\system32\lsass.exe
11:18:49.0257 0x1df8  VaultSvc - ok
11:18:49.0282 0x1df8  [ 4006E66939B4D716C990256CF93D4BC1, 5E9366D8B684768B0188077C05B52B29D43B9A401A73D81045B9823458334223 ] VBAudioVACMME   C:\Windows\system32\DRIVERS\vbaudio_cable64_win7.sys
11:18:49.0288 0x1df8  VBAudioVACMME - ok
11:18:49.0312 0x1df8  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
11:18:49.0319 0x1df8  vdrvroot - ok
11:18:49.0333 0x1df8  [ 44082C4A89ABDAC0C4B08AA8834270B4, C312E144AC4E5475506EBC62CC5D0529B256771C1FA2D709228D3F6BFEB55DED ] vds             C:\Windows\System32\vds.exe
11:18:49.0349 0x1df8  vds - ok
11:18:49.0364 0x1df8  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
11:18:49.0373 0x1df8  vga - ok
11:18:49.0383 0x1df8  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
11:18:49.0404 0x1df8  VgaSave - ok
11:18:49.0407 0x1df8  VGPU - ok
11:18:49.0420 0x1df8  [ 2E9907E787CDAFA2AAA7F928853B7142, 29F30D60BBE5909D4DB569D52ADC7677CA94831B6E5CB25927386CC24CCCE898 ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
11:18:49.0429 0x1df8  vhdmp - ok
11:18:49.0444 0x1df8  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
11:18:49.0452 0x1df8  viaide - ok
11:18:49.0471 0x1df8  [ 86EA3E79AE350FEA5331A1303054005F, 7E7D6027EB41E591633C7383A5D29A3BA8ECFC08C177D2BCF741EE27686B1691 ] vmbus           C:\Windows\system32\drivers\vmbus.sys
11:18:49.0481 0x1df8  vmbus - ok
11:18:49.0491 0x1df8  [ 7DE90B48F210D29649380545DB45A187, 09522F84285D62B961868DA98C40B82E746CA4D24A9780905673A2349D6B07F4 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
11:18:49.0499 0x1df8  VMBusHID - ok
11:18:49.0511 0x1df8  [ B7962BD45492837173E0EF274E691C1F, 6845F94E6345888714206072229035C0E93BA6E8B4EACFA8C479474B5FF1AA88 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
11:18:49.0519 0x1df8  volmgr - ok
11:18:49.0530 0x1df8  [ 0904EF550B3D3FEB326638A4BAD9937E, 462FA11F260C420756DBD989CB505EEB9A286B9EEB826EB2935C119C839EDC8E ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
11:18:49.0542 0x1df8  volmgrx - ok
11:18:49.0556 0x1df8  [ 35B18F5EBE7459D9CCEFAB6CA5B399FA, 14FCDF1F5EEF310F3C1D58BBEE56154D58539F74D282610C038603FC5CBCAD9D ] volsnap         C:\Windows\system32\drivers\volsnap.sys
11:18:49.0566 0x1df8  volsnap - ok
11:18:49.0578 0x1df8  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
11:18:49.0587 0x1df8  vsmraid - ok
11:18:49.0626 0x1df8  [ 0EE1E0842B66F9DF52C5510741053EE3, 7B5CB798BB84328B04104C234AE25AE33707E47A1E0C7E9675D6410E6F1D0AE8 ] VSS             C:\Windows\system32\vssvc.exe
11:18:49.0656 0x1df8  VSS - ok
11:18:49.0663 0x1df8  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
11:18:49.0670 0x1df8  vwifibus - ok
11:18:49.0696 0x1df8  [ 274804C8405091526F2AFFDE354D433A, 702E33C998C29A9C448F0C968527C8B769DC1CAB7AFC7D7A1506FBF96741D0FA ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
11:18:49.0703 0x1df8  vwififlt - ok
11:18:49.0726 0x1df8  [ FC7784CE50FD5C6A7555F9280B4542ED, B0A73E85C9CF36362E4449D86AE5EAFE6E4B159ABC89F4C9249DB531463710B0 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
11:18:49.0733 0x1df8  vwifimp - ok
11:18:49.0748 0x1df8  [ C7B83BD98BA3560374569C0C13EA3685, 68C05B99D6035568E2470FE7E73167AF584CC721F76E02CA1470CA5E1E341607 ] W32Time         C:\Windows\system32\w32time.dll
11:18:49.0762 0x1df8  W32Time - ok
11:18:49.0773 0x1df8  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
11:18:49.0781 0x1df8  WacomPen - ok
11:18:49.0796 0x1df8  [ 79A3B7533AEEDCFC511E534DF8333D5C, ED2D241DE7DF3F61C34B7D968AE5574344FA830977E2E7C0BCCF8CD3968CB24E ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
11:18:49.0805 0x1df8  WANARP - ok
11:18:49.0809 0x1df8  [ 79A3B7533AEEDCFC511E534DF8333D5C, ED2D241DE7DF3F61C34B7D968AE5574344FA830977E2E7C0BCCF8CD3968CB24E ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
11:18:49.0817 0x1df8  Wanarpv6 - ok
11:18:49.0851 0x1df8  [ F91B8969183F3461BD3D3438052AEAD0, 8AC901D5CF209479DBE1DD0D7BB084848796E0659C134998F82CDFC6EC7059E7 ] wbengine        C:\Windows\system32\wbengine.exe
11:18:49.0881 0x1df8  wbengine - ok
11:18:49.0911 0x1df8  [ 509575C01A75FB7D80569ED33075D615, 8B5E44D245EC4C07E1D9D79F1BA56EF3482C7B5BA095BBD9704D3031F00BE9E8 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
11:18:49.0922 0x1df8  WbioSrvc - ok
11:18:49.0939 0x1df8  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
11:18:49.0954 0x1df8  wcncsvc - ok
11:18:49.0980 0x1df8  [ BC00873272B3771CCDA38336AF2B4D4B, 3E412DEC5F172B4C5FD5C227CD790EE56B90A00A8B538704E8F973D230BE2289 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
11:18:49.0989 0x1df8  WcsPlugInService - ok
11:18:49.0997 0x1df8  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys
11:18:50.0004 0x1df8  Wd - ok
11:18:50.0026 0x1df8  [ 37CE6867FC4A6827009A713A9737262C, D8890524F4EF358E35C4A992BEAF7C8FB5ED647FE4D899D3CF608C2201E218A5 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
11:18:50.0045 0x1df8  Wdf01000 - ok
11:18:50.0073 0x1df8  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\Windows\system32\wdi.dll
11:18:50.0082 0x1df8  WdiServiceHost - ok
11:18:50.0085 0x1df8  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost   C:\Windows\system32\wdi.dll
11:18:50.0094 0x1df8  WdiSystemHost - ok
11:18:50.0124 0x1df8  [ EE841B6D1F2B9508D3ABAE52AC05A94F, F1AE981FCDBFC4672A4EABABD41382E93762EFC2EDAD96E75530E7ACA5AF1FD8 ] WebClient       C:\Windows\System32\webclnt.dll
11:18:50.0136 0x1df8  WebClient - ok
11:18:50.0144 0x1df8  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
11:18:50.0169 0x1df8  Wecsvc - ok
11:18:50.0181 0x1df8  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
11:18:50.0203 0x1df8  wercplsupport - ok
11:18:50.0233 0x1df8  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
11:18:50.0255 0x1df8  WerSvc - ok
11:18:50.0287 0x1df8  [ 009604986BAE004733728282BD98BB03, CE82EA41E6CC1EF2D11BFB2761105C422EA9A146FF52034C4A2221A4B5FD3940 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
11:18:50.0294 0x1df8  WfpLwf - ok
11:18:50.0306 0x1df8  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
11:18:50.0313 0x1df8  WIMMount - ok
11:18:50.0322 0x1df8  WinDefend - ok
11:18:50.0325 0x1df8  WinHttpAutoProxySvc - ok
11:18:50.0367 0x1df8  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
11:18:50.0391 0x1df8  Winmgmt - ok
11:18:50.0435 0x1df8  [ EBDA1B0F15CB9B2CBCC6C94824E4E054, C51314F7D611E4903DA00EFA8EB99365414436324D256083CE0B5A8E055E8E06 ] WinRM           C:\Windows\system32\WsmSvc.dll
11:18:50.0473 0x1df8  WinRM - ok
11:18:50.0511 0x1df8  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUSB.SYS
11:18:50.0521 0x1df8  WinUsb - ok
11:18:50.0561 0x1df8  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
11:18:50.0581 0x1df8  Wlansvc - ok
11:18:50.0595 0x1df8  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
11:18:50.0603 0x1df8  WmiAcpi - ok
11:18:50.0618 0x1df8  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
11:18:50.0628 0x1df8  wmiApSrv - ok
11:18:50.0633 0x1df8  WMPNetworkSvc - ok
11:18:50.0642 0x1df8  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
11:18:50.0650 0x1df8  WPCSvc - ok
11:18:50.0663 0x1df8  [ 40E549091F6BA713114B85159BFC6993, E37255A374A0CF31087A1E0535ED6BC32B8848B084A1626A0AC4F2BAA376FB36 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
11:18:50.0674 0x1df8  WPDBusEnum - ok
11:18:50.0691 0x1df8  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
11:18:50.0712 0x1df8  ws2ifsl - ok
11:18:50.0722 0x1df8  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll
11:18:50.0735 0x1df8  wscsvc - ok
11:18:50.0738 0x1df8  WSearch - ok
11:18:50.0804 0x1df8  [ F24A345C584EC2EFC49F9F375EBDA2A5, 85FBB211CA2320363B5503E06AC23C6A89007D3777D696DF6D7ADB2369965ECD ] wuauserv        C:\Windows\system32\wuaueng.dll
11:18:50.0849 0x1df8  wuauserv - ok
11:18:50.0859 0x1df8  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
11:18:50.0867 0x1df8  WudfPf - ok
11:18:50.0884 0x1df8  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
11:18:50.0894 0x1df8  WUDFRd - ok
11:18:50.0901 0x1df8  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
11:18:50.0911 0x1df8  wudfsvc - ok
11:18:50.0919 0x1df8  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll
11:18:50.0930 0x1df8  WwanSvc - ok
11:18:50.0949 0x1df8  ================ Scan global ===============================
11:18:50.0973 0x1df8  [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\Windows\system32\basesrv.dll
11:18:51.0002 0x1df8  [ 1623550592C687B4F6E905FC39E8E8B0, 33D472C15964392391B1274551BFC3E228442BEEF1DCE99041D23E18753C2B35 ] C:\Windows\system32\winsrv.dll
11:18:51.0010 0x1df8  [ 1623550592C687B4F6E905FC39E8E8B0, 33D472C15964392391B1274551BFC3E228442BEEF1DCE99041D23E18753C2B35 ] C:\Windows\system32\winsrv.dll
11:18:51.0033 0x1df8  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
11:18:51.0069 0x1df8  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe
11:18:51.0073 0x1df8  [ Global ] - ok
11:18:51.0074 0x1df8  ================ Scan MBR ==================================
11:18:51.0102 0x1df8  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
11:18:51.0250 0x1df8  \Device\Harddisk0\DR0 - ok
11:18:51.0255 0x1df8  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
11:18:51.0580 0x1df8  \Device\Harddisk1\DR1 - ok
11:18:51.0580 0x1df8  ================ Scan VBR ==================================
11:18:51.0582 0x1df8  [ BB85CB1479DE983F96785F3F203C8D0B ] \Device\Harddisk0\DR0\Partition1
11:18:51.0583 0x1df8  \Device\Harddisk0\DR0\Partition1 - ok
11:18:51.0584 0x1df8  [ 5FDEDEBCF7FCD7D957564CBE10C3C890 ] \Device\Harddisk1\DR1\Partition1
11:18:51.0585 0x1df8  \Device\Harddisk1\DR1\Partition1 - ok
11:18:51.0586 0x1df8  [ 4AED40069BB25784F2FAADDAFEEA7EE7 ] \Device\Harddisk1\DR1\Partition2
11:18:51.0587 0x1df8  \Device\Harddisk1\DR1\Partition2 - ok
11:18:51.0588 0x1df8  ================ Scan generic autorun ======================
11:18:51.0863 0x1df8  [ 493ABE82E781DC998DCA299CE0CA9F50, 9FA0FBC03058802848B6D73B609C14C80F4764A79EB305D2CC0D76F3EDC88765 ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
11:18:52.0058 0x1df8  RTHDVCPL - ok
11:18:52.0130 0x1df8  [ 7A727248EBC065BD2BB94A9B2892D190, B1E12ED3D07963EF0FA09B3ECD8AC3FBD316733D968A99C958DF7026B1BDFD99 ] c:\Program Files\Microsoft Security Client\msseces.exe
11:18:52.0158 0x1df8  MSC - ok
11:18:52.0216 0x1df8  [ C8AC55CCB8AB33713522B4CAAFAC0F59, CCEA638F90395F5C1C9DA892227FF4F3A7BC7567DEF8A7B63AFE2A487DADA88A ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
11:18:52.0255 0x1df8  NvBackend - ok
11:18:52.0294 0x1df8  [ C9900177A954E22C84A696075A40A173, 33E32173FF811DF1B687916CB3CADAE2907DAF5AC4B80F559039D3B61553C48F ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
11:18:52.0297 0x1df8  IAStorIcon - detected UnsignedFile.Multi.Generic ( 1 )
11:18:52.0384 0x1df8  Detect skipped due to KSN trusted
11:18:52.0384 0x1df8  IAStorIcon - ok
11:18:52.0432 0x1df8  [ 51138BEEA3E2C21EC44D0932C71762A8, 5AD3C37E6F2B9DB3EE8B5AEEDC474645DE90C66E3D95F8620C48102F1EBA4124 ] C:\Windows\syswow64\RunDll32.exe
11:18:52.0441 0x1df8  Cmaudio8788 - ok
11:18:52.0467 0x1df8  [ A63D2674F5EEABEEEA7865F5FC07F402, 48F764ED46A6FFE12BCEB1963D8350F58ECFEA04B815A1BC63FBA1D4E489780B ] C:\Windows\system\CmGxMon.exe
11:18:52.0470 0x1df8  Cmaudio8788GX - detected UnsignedFile.Multi.Generic ( 1 )
11:18:52.0556 0x1df8  Detect skipped due to KSN trusted
11:18:52.0556 0x1df8  Cmaudio8788GX - ok
11:18:52.0589 0x1df8  [ 1A9CBFCE469C8CA77B70DB366056AAD9, BEA0919B7C934523CAFB5DB8B242872EAFBACA667517783472B8CCF0E7928DF2 ] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe
11:18:52.0597 0x1df8  IMSS - ok
11:18:52.0618 0x1df8  [ E4E7B29D050F5480071984FE6543C311, 9A4D8D1702AE74AB4FE4367EAF4AD6500F59D4F25B3CCACE3EF07613B7B5853C ] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
11:18:52.0628 0x1df8  USB3MON - ok
11:18:52.0658 0x1df8  [ C419DF63E0121D72411285780C2FC6CC, F47F854D327C589D174D3BB5B55D5C05F5ACA73DF52A6BEF47596B9010190291 ] C:\Windows\UpdReg.EXE
11:18:52.0662 0x1df8  UpdReg - detected UnsignedFile.Multi.Generic ( 1 )
11:18:52.0752 0x1df8  Detect skipped due to KSN trusted
11:18:52.0752 0x1df8  UpdReg - ok
11:18:52.0811 0x1df8  [ F32BAB32A4ACDCFF27D6560A10880F20, 6C4ACF84E7142551DD249C3BE883835EE1D7213EAF4490710DAC73B6D63E9995 ] C:\Program Files (x86)\Creative\Sound Blaster Audigy Fx\Sound Blaster Audigy Fx Control Panel\SBAdgyFx.exe
11:18:52.0826 0x1df8  Sound Blaster Audigy Fx Control Panel - detected UnsignedFile.Multi.Generic ( 1 )
11:18:52.0913 0x1df8  Detect skipped due to KSN trusted
11:18:52.0913 0x1df8  Sound Blaster Audigy Fx Control Panel - ok
11:18:52.0978 0x1df8  [ E05782E0B697CADBBC17E78C67280B30, 87A142350F1BD9FF7ADDDBF80AC5C1EFDCE93F8E3142B95ACC8D85DDE77D42D8 ] C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
11:18:52.0988 0x1df8  Lightshot - ok
11:18:53.0022 0x1df8  [ 6EACC43D0542EF88226FB34B0B12EDB0, 6345E4B49D7F804F6DE042F981AB172822B6AB74C42209BEFB0582B019430884 ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
11:18:53.0036 0x1df8  SunJavaUpdateSched - ok
11:18:53.0089 0x1df8  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
11:18:53.0117 0x1df8  Sidebar - ok
11:18:53.0132 0x1df8  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
11:18:53.0144 0x1df8  mctadmin - ok
11:18:53.0164 0x1df8  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
11:18:53.0188 0x1df8  Sidebar - ok
11:18:53.0192 0x1df8  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
11:18:53.0204 0x1df8  mctadmin - ok
11:18:53.0367 0x1df8  [ 1F038325CFFA270B74E14C8E2605397A, C6CF4AE3C0193C02CBEB0E78F3987F6FACECF909A4A5A69377F1614A5DF7A912 ] C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
11:18:53.0491 0x1df8  DisplayFusion - ok
11:18:53.0609 0x1df8  [ 2BE40ABFE3350DB58ED9445442A9B539, 33D9473855DA2ED3BCA573D1240477A280624815083E4432C5417B6337ED5DA9 ] C:\Users\Heartel\AppData\Roaming\Spotify\SpotifyWebHelper.exe
11:18:53.0635 0x1df8  Spotify Web Helper - ok
11:18:53.0761 0x1df8  [ 18EE6C694976C4D205AF24D6CCE3B660, 262F8B929CBBC8BFDD465826A27625ED9508A7C325C45F1964A4EFAC36D60056 ] C:\Program Files\CCleaner\CCleaner64.exe
11:18:53.0864 0x1df8  CCleaner Monitoring - ok
11:18:53.0963 0x1df8  [ 2F3E5E6834D1171B2CCF756729AD38BD, 86A95957B3E27A314C1BDEEC327401B5E0789D75ACAEE10F4711AECF2A9142F5 ] C:\Program Files (x86)\Steam\steam.exe
11:18:54.0009 0x1df8  Steam - ok
11:18:54.0060 0x1df8  [ CC436BB2A26391F3DEBE316F6FB0474F, 2DA63827AD1449CA5F2888ADFA9645F1EAF8B39D26EC214441EE80F3A56E6E72 ] C:\Users\Heartel\AppData\Local\Microsoft\BingSvc\BingSvc.exe
11:18:54.0069 0x1df8  BingSvc - ok
11:18:54.0098 0x1df8  Skype - ok
11:18:54.0163 0x1df8  [ 9008A3EF8F6A72B01FAE682E85AF37E0, 60F8BFAC325E284E7D9C7ED0B816C5D7AC105E6F44BF878C3B282167A1C3972B ] C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\GoogleUpdateCore.exe
11:18:54.0178 0x1df8  Google Update - ok
11:18:54.0179 0x1df8  Waiting for KSN requests completion. In queue: 138
11:18:55.0187 0x1df8  AV detected via SS2: Microsoft Security Essentials, C:\Program Files\Microsoft Security Client\msseces.exe ( 4.10.209.0 ), 0x61000 ( enabled : updated )
11:18:55.0209 0x1df8  Win FW state via NFP2: enabled ( trusted )
11:18:55.0347 0x1df8  ============================================================
11:18:55.0347 0x1df8  Scan finished
11:18:55.0347 0x1df8  ============================================================
11:18:55.0353 0x1d98  Detected object count: 0
11:18:55.0353 0x1d98  Actual detected object count: 0
11:19:12.0457 0x1b5c  Deinitialize success
         

FRST.txt

FRST Logfile:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017
durchgeführt von Heartel (Administrator) auf GAMINGMASCHINE (13-04-2017 11:11:52)
Gestartet von C:\Users\Heartel\Desktop
Geladene Profile: Heartel (Verfügbare Profile: Heartel)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Opera)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Windows\system\CMGxMon.exe
(CMedia) C:\Program Files\ASUS Xonar DX Audio\Customapp\AsusAudioCenter.exe
() C:\Program Files\ASUS Xonar DX Audio\Customapp\MXmon.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
(Spotify Ltd) C:\Users\Heartel\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(© 2015 Microsoft Corporation) C:\Users\Heartel\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Audigy Fx\Sound Blaster Audigy Fx Control Panel\SBAdgyFx.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.1\Lightshot.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Spotify Ltd) C:\Users\Heartel\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Heartel\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Heartel\AppData\Roaming\Spotify\Spotify.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671792 2014-03-14] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-05-02] (NVIDIA Corporation)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)
HKLM\...\Run: [Cmaudio8788] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cmicnfgp.cpl,CMICtrlWnd
HKLM\...\Run: [Cmaudio8788GX] => C:\Windows\system\CmGxMon.exe [20480 2007-12-19] ()
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1087960 2014-03-20] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Sound Blaster Audigy Fx Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Audigy Fx\Sound Blaster Audigy Fx Control Panel\SBAdgyFx.exe [861184 2013-11-08] (Creative Technology Ltd)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [DisplayFusion] => C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [8587256 2016-01-19] (Binary Fortress Software)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [Spotify Web Helper] => C:\Users\Heartel\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-04-05] (Spotify Ltd)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3019552 2017-03-23] (Valve Corporation)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [BingSvc] => C:\Users\Heartel\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27545048 2017-03-14] (Skype Technologies S.A.)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [Google Update] => C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\GoogleUpdateCore.exe [599632 2017-04-08] (Google Inc.)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\MountPoints2: {15888e6b-9a96-11e4-94bd-74d435f41938} - F:\LaunchU3.exe
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\MountPoints2: {1d6d65cc-7e36-11e4-840a-806e6f6e6963} - D:\Run.exe
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\MountPoints2: {3014f7b8-015b-11e5-8828-74d435f41938} - F:\LaunchU3.exe -a
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\MountPoints2: {354da4f3-b3d7-11e6-b7d5-74d435f41938} - F:\OnePlus_setup.exe /s
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\MountPoints2: {b0600c7d-bff3-11e4-8ed5-74d435f41938} - F:\setup.exe
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)
HKLM\...\Providers\am7fgfeu: C:\Program Files (x86)\Jernercult Verfier\local64spl.dll [307712 2017-02-19] ()
IFEO\taskmgr.exe: [Debugger] 
ShellExecuteHooks: Kein Name - {19B5BEEC-F444-11E6-83B9-64006A5CFC23} - C:\Program Files (x86)\Chalisy\Reomotain.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [KzShlobj] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} => C:\Program Files\¿ìѹ\X64\KZipShell.dll -> Keine Datei
Startup: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MSI GamingApp.lnk [2015-10-09]
ShortcutTarget: MSI GamingApp.lnk -> C:\Program Files (x86)\MSI\MSI GamingApp\MSIGamingApp.exe (Micro-Star International Co., Ltd.)
Startup: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Teamspeak 3.lnk [2015-02-27]
ShortcutTarget: Teamspeak 3.lnk -> C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe (TeamSpeak Systems GmbH)
GroupPolicy: Beschränkung <======= ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{999D1179-744D-4DD5-BC88-B2651E02B3E8}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{D1C6F279-1FA0-4641-87DB-A1C0B126CAAA}: [DhcpNameServer] 192.168.48.2

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBKhl918K0qpwZ-pvDPiNazcZvuYU6Umq7RhanftF3XnJSdbvEFf0UhXe_uzOVhhX-q8t_ZsvCe2TbYT5XZjI2Ed0PuNXo7FLSmJ2QsYaER7LpB-m8n99NlsXM8D2CAxEeptGuYaobYN3uVpnfpl_uv1xNUvDkCrb73xnRoTX5fZnLFFMahCann&q={searchTerms}
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-1de21753&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-1de21753&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000 -> {08B1AC39-6A34-4C48-ADB1-539FAE119548} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2017-03-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-09-13] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-13] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-09-13] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-22] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-13] (Oracle Corporation)
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://files.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505 [2017-04-13]
FF user.js: detected! => C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\user.js [2017-04-13]
FF NewTab: Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505 -> hxxp://www.luckysearch123.com?type=hp&ts=1492074510&from=49de0413&uid=wdcxwd10ezex-00bn5a0_wd-wcc3f4enzvd2nzvd2&z=caf75858c1885b33bd6c313gez4tdobe7m6zewagaz
FF Homepage: Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505 -> hxxp://www.luckysearch123.com?type=hp&ts=1492074510&from=49de0413&uid=wdcxwd10ezex-00bn5a0_wd-wcc3f4enzvd2nzvd2&z=caf75858c1885b33bd6c313gez4tdobe7m6zewagaz
FF Extension: (xRocket Toolbar) - C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\Extensions\arthurj8283@gmail.com [2017-04-13] [ist nicht signiert]
FF Extension: (convert2mp3.net YouTube2MP3 Converter) - C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\Extensions\info@convert2mp3.net.xpi [2017-04-02]
FF Extension: (Adblock Plus) - C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-04-02]
FF Extension: (Disable Prefetch) - C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\features\{4bf942c7-75a0-4281-8e25-94166fc0ef77}\disable-prefetch@mozilla.org.xpi [2017-04-08]
FF SearchPlugin: C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\searchplugins\luck.xml [2017-04-13]
FF SearchPlugin: C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\searchplugins\ourluckysites.xml [2017-04-11]
FF Extension: (Site Deployment Checker) - C:\Program Files (x86)\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi [2017-04-01] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [arthurj8283@gmail.com] - C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\extensions\arthurj8283@gmail.com
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-11] ()
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-13] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-13] (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-11] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-13] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-19] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-07-23] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-07-23] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-11] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Heartel\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000: @talk.google.com/O1DPlugin -> C:\Users\Heartel\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-08] (Google Inc.)
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-08] (Google Inc.)
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Heartel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-01-22] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2016-07-19] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Heartel\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Heartel\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\browser\defaults\preferences\firefox.js [2017-02-19]

Chrome: 
=======
CHR DefaultProfile: Profile 1
CHR HomePage: Profile 1 -> hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
CHR StartupUrls: Profile 1 -> "hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2" 
CHR DefaultSearchURL: Profile 1 -> hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
CHR DefaultSearchKeyword: Profile 1 -> ourluckysites
CHR Profile: C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2017-03-11] <==== ACHTUNG
CHR Profile: C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-04-13]
CHR Extension: (Google Slides) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-02-22]
CHR Extension: (Google Docs) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2017-02-22]
CHR Extension: (Google Drive) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-22]
CHR Extension: (Spotiload (former Spotify Vk Downloader)) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\baggnalhgbpeanbhedjlbndhjgmimmhl [2017-02-23]
CHR Extension: (YouTube) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-22]
CHR Extension: (Adblock Plus) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-02-22]
CHR Extension: (Google Sheets) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-02-22]
CHR Extension: (Avira Browser Safety) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2017-02-22]
CHR Extension: (Google Docs Offline) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-02-22]
CHR Extension: (Skype) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2017-02-24]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-02-22]
CHR Extension: (Gmail) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-02-22]
CHR Extension: (Chrome Media Router) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-22]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [blmlepcapjlbgcpkdlffnhibhpecongp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [428056 2017-02-21] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [406040 2017-02-21] (BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe [452632 2017-02-21] (BlueStack Systems, Inc.)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2015-11-27] (Creative Labs) [Datei ist nicht signiert]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [429056 2013-10-28] (Creative Technology Ltd) [Datei ist nicht signiert]
R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [4664856 2016-01-19] (Binary Fortress Software)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-10-03] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 iSafeService; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [131024 2016-12-02] (Elex do Brasil Participações Ltda)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-05-02] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-05-02] (NVIDIA Corporation)
S3 Origin Client Service; E:\Origin\OriginClientService.exe [2119688 2016-12-30] (Electronic Arts)
S2 Origin Web Helper Service; E:\Origin\OriginWebHelperService.exe [2180624 2016-12-30] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75064 2016-12-30] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [215128 2016-12-30] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10351856 2016-12-15] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-04-09] (Microsoft Corporation)
S2 UCBrowserSvc; "C:\Program Files (x86)\UCBrowser\Application\UCService.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 AFXfilt; C:\Windows\System32\drivers\AFXfilt.sys [25088 2013-06-04] (Creative Technology Ltd.)
S3 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [152672 2017-02-21] (BlueStack Systems)
S3 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [270904 2017-02-21] (Bluestack System Inc. )
R3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [1197568 2008-01-18] (C-Media Inc)
S3 cthdb; C:\Windows\System32\DRIVERS\cthdb.sys [25088 2013-12-09] (Creative Technology Ltd)
S3 e1qexpress; C:\Windows\System32\DRIVERS\e1q60x64.sys [244736 2009-06-10] (Intel Corporation)
S3 EuMusDesignVirtualAudioCableWdm; C:\Windows\System32\DRIVERS\vrtaucbl.sys [67584 2015-08-24] (Eugene V. Muzychenko) [Datei ist nicht signiert]
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-11] (Intel Corporation)
R1 iSafeKrnl; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [262344 2016-05-23] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlKit; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [110112 2016-05-23] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlMon; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [52440 2016-05-23] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlR3; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [103904 2016-05-23] (Elex do Brasil Participações Ltda)
R1 iSafeNetFilter; C:\Windows\System32\DRIVERS\iSafeNetFilter.sys [52392 2016-05-19] (Elex do Brasil Participações Ltda)
R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [42016 2013-11-27] (Visicom Media Inc.)
R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35232 2013-12-06] (Visicom Media Inc.)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [118272 2014-03-20] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R1 NetUtils2016; C:\Windows\system32\drivers\NetUtils2016.sys [909944 2017-04-11] () <==== ACHTUNG
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-05-02] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [11376 2015-12-10] () [Datei ist nicht signiert]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-12-07] (Duplex Secure Ltd.)
R1 ucdrv; C:\Program Files (x86)\UCBrowser\Security:ucdrv-x64.sys [25444 ] (UC Web Inc.) <==== ACHTUNG
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-08-16] (Apple, Inc.) [Datei ist nicht signiert]
R3 VBAudioVACMME; C:\Windows\System32\DRIVERS\vbaudio_cable64_win7.sys [41192 2015-08-24] (Windows (R) Win 7 DDK provider)
U3 ai9gp3c3; C:\Windows\System32\Drivers\ai9gp3c3.sys [0 ] (Intel Corporation) <==== ACHTUNG (Null Byte Datei/Ordner)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 iSafeKrnlBoot; system32\DRIVERS\iSafeKrnlBoot.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-08-02 21:19 - 2017-08-02 21:19 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\ASUS
2017-08-02 21:19 - 2017-08-02 21:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS Xonar DX Audio
2017-08-02 21:19 - 2017-08-02 21:19 - 00000000 ____D C:\Program Files (x86)\OpenAL
2017-08-02 21:19 - 2008-01-11 12:20 - 00192512 ____R (C-Media Electronics Inc.) C:\Windows\system\CMGxSrv.dll
2017-08-02 21:19 - 2008-01-10 11:58 - 06475776 ____R (C-Media Corporation) C:\Windows\SysWOW64\CmiCnfgp.cpl
2017-08-02 21:19 - 2007-12-19 04:41 - 00020480 ____R () C:\Windows\system\CMGxMon.exe
2017-08-02 21:19 - 2007-12-13 11:12 - 00122880 ____R (CMedia Electronics Inc.) C:\Windows\SysWOW64\Cm_Oal.dll
2017-08-02 21:19 - 2007-12-13 11:12 - 00122880 ____R (CMedia Electronics Inc.) C:\Windows\system32\Cm_Oal.dll
2017-08-02 21:19 - 2007-12-05 06:40 - 00450560 ____R (C-Media Electronics Inc.) C:\Windows\system32\cmasiopx.dll
2017-08-02 21:19 - 2007-12-05 06:38 - 00172094 ____R (C-Media Electronics Inc.) C:\Windows\SysWOW64\cmasiop.dll
2017-08-02 21:19 - 2007-11-27 04:30 - 00782336 ____R (Creative Labs Inc.) C:\Windows\SysWOW64\tmpF4BA.tmp
2017-08-02 21:19 - 2007-11-27 04:30 - 00782336 ____R (Creative Labs Inc.) C:\Windows\SysWOW64\tmp5DAA.tmp
2017-08-02 21:19 - 2007-11-27 04:30 - 00782336 ____R (Creative Labs Inc.) C:\Windows\SysWOW64\tmp5DA9.tmp
2017-08-02 21:19 - 2007-11-04 19:30 - 01144983 ____R C:\Windows\KB936225x64.msu
2017-08-02 21:19 - 2007-10-22 14:01 - 00139264 ____R C:\Windows\SysWOW64\VmixP8.dll
2017-08-02 21:19 - 2006-09-13 04:21 - 00200704 ____R (C-Media) C:\Windows\SysWOW64\Cmpaoxy.dll
2017-08-02 21:19 - 2005-04-13 09:29 - 00032768 ____R (C-Media Inc.) C:\Windows\SysWOW64\CmPropP.dll
2017-08-02 21:19 - 2001-11-23 06:08 - 00712704 ____R (Sensaura Ltd) C:\Windows\system32\Audio3Dp.dll
2017-08-02 21:19 - 2001-11-23 06:08 - 00712704 ____R (Sensaura Ltd) C:\Windows\system32\a3d.dll
2017-08-02 21:18 - 2017-08-02 21:19 - 00036425 _____ C:\Windows\Cmicnfgp.ini.cfl
2017-08-02 21:18 - 2017-08-02 21:19 - 00000868 _____ C:\Windows\Cmicnfgp.ini.imi
2017-08-02 21:18 - 2017-08-02 21:19 - 00000140 _____ C:\Windows\system\Dlap.pfx
2017-08-02 21:18 - 2017-08-02 21:19 - 00000000 ____D C:\Program Files\ASUS Xonar DX Audio
2017-08-02 21:18 - 2008-01-25 10:30 - 00718848 ____R C:\Windows\system32\Cmeauoxy.exe
2017-08-02 21:18 - 2008-01-18 10:58 - 01197568 _____ (C-Media Inc) C:\Windows\system32\Drivers\cmudaxp.sys
2017-08-02 21:18 - 2007-12-21 09:54 - 00007052 ____R C:\Windows\Cmicnfgp.ini.cfg
2017-08-02 21:18 - 2007-04-19 09:12 - 00032768 _____ (C-Media Electronics Inc.) C:\Windows\system32\cmudaxp.dll
2017-08-02 21:18 - 2004-04-14 05:28 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\SysWOW64\CmiFltr.dll
2017-08-02 21:18 - 2004-04-14 05:28 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\system\CmiFltr.dll
2017-04-13 11:11 - 2017-04-13 11:13 - 00035128 _____ C:\Users\Heartel\Desktop\FRST.txt
2017-04-13 11:11 - 2017-04-13 11:11 - 02424832 _____ (Farbar) C:\Users\Heartel\Desktop\FRST64.exe
2017-04-13 11:11 - 2017-04-13 11:11 - 00000000 ____D C:\FRST
2017-04-12 14:31 - 2017-03-27 20:13 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-04-12 14:31 - 2017-03-27 19:28 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-04-12 14:31 - 2017-03-25 21:39 - 20284416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-04-12 14:31 - 2017-03-25 21:07 - 04604416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-04-12 14:31 - 2017-03-25 21:06 - 13654016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-04-12 14:31 - 2017-03-25 20:55 - 02767360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-04-12 14:31 - 2017-03-25 20:52 - 02289152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-04-12 14:31 - 2017-03-25 20:51 - 01313280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-04-12 14:31 - 2017-03-25 20:48 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-04-12 14:31 - 2017-03-25 20:47 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-04-12 14:31 - 2017-03-25 20:47 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-04-12 14:31 - 2017-03-25 20:47 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-04-12 14:31 - 2017-03-25 20:45 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-04-12 14:31 - 2017-03-25 20:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-04-12 14:31 - 2017-03-25 20:44 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-04-12 14:31 - 2017-03-25 20:35 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-04-12 14:31 - 2017-03-25 20:35 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-04-12 14:31 - 2017-03-25 20:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-04-12 14:31 - 2017-03-25 20:14 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-04-12 14:31 - 2017-03-25 20:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-04-12 14:31 - 2017-03-25 20:13 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-04-12 14:31 - 2017-03-25 20:13 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-04-12 14:31 - 2017-03-25 20:10 - 02898432 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-04-12 14:31 - 2017-03-25 20:04 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-04-12 14:31 - 2017-03-25 20:02 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-04-12 14:31 - 2017-03-25 19:57 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-04-12 14:31 - 2017-03-25 19:56 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-04-12 14:31 - 2017-03-25 19:56 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-04-12 14:31 - 2017-03-25 19:56 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-04-12 14:31 - 2017-03-25 19:56 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-04-12 14:31 - 2017-03-25 19:52 - 25746944 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-04-12 14:31 - 2017-03-25 19:45 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-04-12 14:31 - 2017-03-25 19:41 - 06045696 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-04-12 14:31 - 2017-03-25 19:41 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-04-12 14:31 - 2017-03-25 19:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-04-12 14:31 - 2017-03-25 19:29 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-04-12 14:31 - 2017-03-25 19:24 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-04-12 14:31 - 2017-03-25 19:23 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-04-12 14:31 - 2017-03-25 19:20 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-04-12 14:31 - 2017-03-25 19:19 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-04-12 14:31 - 2017-03-25 19:17 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-04-12 14:31 - 2017-03-25 19:06 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-04-12 14:31 - 2017-03-25 19:04 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-04-12 14:31 - 2017-03-25 19:00 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-04-12 14:31 - 2017-03-25 18:59 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-04-12 14:31 - 2017-03-25 18:57 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-04-12 14:31 - 2017-03-25 18:57 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-04-12 14:31 - 2017-03-25 18:28 - 15259136 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-04-12 14:31 - 2017-03-25 18:27 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-04-12 14:31 - 2017-03-25 18:24 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-04-12 14:31 - 2017-03-25 18:10 - 01546240 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-04-12 14:31 - 2017-03-25 18:01 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-04-12 14:31 - 2017-03-25 00:50 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-04-12 14:31 - 2017-03-25 00:42 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-04-12 14:31 - 2017-03-22 17:32 - 03165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-04-12 14:31 - 2017-03-22 17:32 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-04-12 14:31 - 2017-03-22 17:32 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-04-12 14:31 - 2017-03-22 17:30 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2017-04-12 14:31 - 2017-03-22 17:24 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2017-04-12 14:31 - 2017-03-22 17:17 - 02651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-04-12 14:31 - 2017-03-22 17:15 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-04-12 14:31 - 2017-03-22 17:15 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-04-12 14:31 - 2017-03-22 17:15 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-04-12 14:31 - 2017-03-22 17:15 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-04-12 14:31 - 2017-03-22 17:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-04-12 14:31 - 2017-03-22 17:15 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2017-04-12 14:31 - 2017-03-22 17:05 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-04-12 14:31 - 2017-03-22 17:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2017-04-12 14:31 - 2017-03-22 17:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2017-04-12 14:31 - 2017-03-22 17:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2017-04-12 14:31 - 2017-03-14 17:34 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-04-12 14:31 - 2017-03-14 17:34 - 00265448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-04-12 14:31 - 2017-03-14 17:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2017-04-12 14:31 - 2017-03-10 18:35 - 00382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-04-12 14:31 - 2017-03-10 18:31 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-04-12 14:31 - 2017-03-10 18:31 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-04-12 14:31 - 2017-03-10 18:31 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-04-12 14:31 - 2017-03-10 18:31 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-04-12 14:31 - 2017-03-10 18:27 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-04-12 14:31 - 2017-03-10 18:20 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-04-12 14:31 - 2017-03-10 18:19 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-04-12 14:31 - 2017-03-10 18:19 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-04-12 14:31 - 2017-03-10 18:00 - 03219968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-04-12 14:31 - 2017-03-10 17:53 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-04-12 14:31 - 2017-03-08 22:20 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2017-04-12 14:31 - 2017-03-08 22:10 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2017-04-12 14:31 - 2017-03-08 06:37 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-04-12 14:31 - 2017-03-08 06:36 - 05548264 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-04-12 14:31 - 2017-03-08 06:36 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-04-12 14:31 - 2017-03-08 06:36 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-04-12 14:31 - 2017-03-08 06:36 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-04-12 14:31 - 2017-03-08 06:34 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 02064384 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:26 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-04-12 14:31 - 2017-03-08 06:26 - 03945192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-04-12 14:31 - 2017-03-08 06:24 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 01416192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:03 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-04-12 14:31 - 2017-03-08 06:03 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-04-12 14:31 - 2017-03-08 06:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-04-12 14:31 - 2017-03-08 06:03 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-04-12 14:31 - 2017-03-08 06:00 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-04-12 14:31 - 2017-03-08 05:59 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-04-12 14:31 - 2017-03-08 05:57 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-04-12 14:31 - 2017-03-08 05:56 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-04-12 14:31 - 2017-03-08 05:56 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-04-12 14:31 - 2017-03-08 05:56 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-04-12 14:31 - 2017-03-08 05:55 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-04-12 14:31 - 2017-03-08 05:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-04-12 14:31 - 2017-03-08 05:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-04-12 14:31 - 2017-03-08 05:54 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-04-12 14:31 - 2017-03-08 05:54 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-04-12 14:31 - 2017-03-08 05:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-04-12 14:31 - 2017-03-08 05:53 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-04-12 14:31 - 2017-03-08 05:53 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 05:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 05:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 05:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-04-12 14:31 - 2017-03-07 18:30 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-04-12 14:31 - 2017-03-07 18:17 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2017-04-12 14:31 - 2017-03-07 16:05 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-04-12 14:31 - 2017-03-04 03:27 - 01574912 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-04-12 14:31 - 2017-03-04 03:27 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2017-04-12 14:31 - 2017-03-04 03:14 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-04-12 14:31 - 2017-03-04 03:14 - 00077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
2017-04-12 14:31 - 2017-02-14 18:33 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-04-12 14:31 - 2017-02-14 18:19 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2017-04-12 14:31 - 2017-02-11 18:33 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-04-12 14:31 - 2017-02-11 18:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2017-04-12 14:31 - 2017-02-09 18:32 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2017-04-12 14:31 - 2017-02-09 18:32 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2017-04-12 14:31 - 2017-02-09 18:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00011608 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2017-04-12 14:31 - 2016-03-24 00:40 - 03181568 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2017-04-12 14:31 - 2016-03-24 00:40 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2017-04-11 16:40 - 2016-05-19 08:42 - 00052392 _____ (Elex do Brasil Participações Ltda) C:\Windows\system32\Drivers\iSafeNetFilter.sys
2017-04-10 12:07 - 2017-04-11 16:28 - 00000000 ____D C:\Users\Heartel\AppData\Local\AMD
2017-04-10 12:07 - 2017-04-10 12:07 - 00000000 ____D C:\Update
2017-04-09 19:50 - 2017-04-09 19:50 - 00005171 _____ C:\Users\Heartel\AppData\Local\recently-used.xbel
2017-04-01 17:41 - 2017-04-01 17:41 - 00000000 ____D C:\Users\Heartel\Desktop\Old Firefox Data
2017-04-01 17:35 - 2017-04-11 12:57 - 00001776 _____ C:\Users\Heartel\Desktop\firefox - Verknüpfung.lnk
2017-04-01 17:03 - 2017-04-01 16:54 - 04089296 _____ C:\Users\Heartel\Desktop\adwcleaner_6.045.exe
2017-03-31 17:07 - 2017-03-31 17:07 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\Elex-tech
2017-03-31 17:07 - 2017-03-31 17:07 - 00000000 ____D C:\Program Files (x86)\Elex-tech
2017-03-29 11:00 - 2017-03-29 11:00 - 00122320 _____ C:\Users\Heartel\AppData\Local\GDIPFONTCACHEV1.DAT
2017-03-29 10:58 - 2017-04-12 18:58 - 05128208 _____ C:\Windows\system32\FNTCACHE.DAT
2017-03-20 00:48 - 2017-03-20 00:48 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2017-03-20 00:48 - 2017-03-20 00:48 - 00019112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr110_clr0400.dll
2017-03-20 00:48 - 2017-03-20 00:48 - 00019112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100_clr0400.dll
2017-03-20 00:48 - 2017-03-20 00:48 - 00019112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp110_clr0400.dll
2017-03-20 00:41 - 2017-03-20 00:41 - 00030400 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2017-03-20 00:41 - 2017-03-20 00:41 - 00019112 _____ (Microsoft Corporation) C:\Windows\system32\msvcr110_clr0400.dll
2017-03-20 00:41 - 2017-03-20 00:41 - 00019112 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100_clr0400.dll
2017-03-20 00:41 - 2017-03-20 00:41 - 00019112 _____ (Microsoft Corporation) C:\Windows\system32\msvcp110_clr0400.dll
2017-03-18 13:40 - 2017-03-18 13:40 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-03-18 13:40 - 2017-03-18 13:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-03-15 19:39 - 2017-03-15 19:39 - 00000000 ____D C:\Program Files (x86)\58C97C3C_cacayima
2017-03-14 22:21 - 2017-02-11 17:58 - 00462848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-03-14 22:21 - 2017-02-11 17:58 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-03-14 22:21 - 2017-02-11 17:58 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-03-14 22:21 - 2017-02-10 18:32 - 00803328 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-03-14 22:21 - 2017-02-10 18:17 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-03-14 22:21 - 2017-02-10 16:33 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-03-14 22:21 - 2017-02-09 18:32 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll
2017-03-14 22:21 - 2017-02-09 18:31 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2017-03-14 22:21 - 2017-02-09 18:31 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
2017-03-14 22:21 - 2017-02-09 18:14 - 00481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2017-03-14 22:21 - 2017-02-09 18:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll
2017-03-14 22:21 - 2017-02-09 17:51 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcsPlugInService.dll
2017-03-14 22:21 - 2017-02-09 16:06 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-03-14 22:21 - 2017-02-09 16:06 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-03-14 22:21 - 2017-02-06 18:14 - 00733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-03-14 22:21 - 2017-01-13 20:00 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-03-14 22:21 - 2017-01-13 20:00 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2017-03-14 22:21 - 2017-01-13 19:45 - 00741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-03-14 22:21 - 2017-01-13 19:45 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2017-03-14 22:21 - 2017-01-11 20:01 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-03-14 22:21 - 2017-01-11 20:01 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2017-03-14 22:21 - 2017-01-11 19:43 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2017-03-14 22:21 - 2017-01-11 19:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2017-03-14 21:57 - 2017-02-23 01:42 - 00084712 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-03-14 21:57 - 2017-02-23 01:37 - 01285632 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-03-14 21:57 - 2017-02-18 16:05 - 01609216 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-03-14 21:57 - 2017-02-18 16:05 - 00646656 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-03-14 21:57 - 2016-12-31 17:36 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-03-14 21:57 - 2016-12-31 17:36 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-03-14 21:57 - 2016-12-31 17:36 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2017-03-14 21:57 - 2016-12-31 17:36 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-03-14 21:57 - 2016-12-31 17:36 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-03-14 21:47 - 2017-04-11 12:57 - 00002451 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-03-14 21:42 - 2017-03-14 21:42 - 00000000 ____D C:\Program Files (x86)\58C847B7_cacayima

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-08-02 21:43 - 2017-01-22 21:40 - 00000000 ____D C:\Program Files\OnlineFotoservice
2017-08-02 21:41 - 2015-09-18 16:04 - 00000000 ____D C:\Windows\Minidump
2017-08-02 21:23 - 2016-07-01 20:40 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
2017-08-02 21:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system
2017-08-02 21:19 - 2007-10-22 08:33 - 00000807 _____ C:\Windows\system\Cmicnfgp.ini
2017-08-02 21:05 - 2015-11-26 22:15 - 00000192 ___RH C:\Windows\ctfile.rfc
2017-04-13 11:12 - 2016-11-16 21:57 - 00000000 ____D C:\Users\Heartel\AppData\LocalLow\Mozilla
2017-04-13 11:12 - 2015-03-20 22:24 - 00000000 ____D C:\Program Files (x86)\Steam
2017-04-13 11:12 - 2011-04-12 09:43 - 00700128 _____ C:\Windows\system32\perfh007.dat
2017-04-13 11:12 - 2011-04-12 09:43 - 00149766 _____ C:\Windows\system32\perfc007.dat
2017-04-13 11:12 - 2009-07-14 07:13 - 01622694 _____ C:\Windows\system32\PerfStringBackup.INI
2017-04-13 11:12 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-04-13 11:10 - 2016-08-01 19:52 - 00000000 ____D C:\Users\Heartel\AppData\Local\Spotify
2017-04-13 11:07 - 2014-12-14 20:07 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\TS3Client
2017-04-13 11:07 - 2014-12-10 14:54 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\Skype
2017-04-13 11:06 - 2017-02-19 19:16 - 00625272 _____ C:\Windows\system32\NetUtils2016.dll
2017-04-13 11:04 - 2016-01-23 22:14 - 00000000 ____D C:\ProgramData\NVIDIA
2017-04-13 11:04 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-04-12 19:11 - 2009-07-14 06:45 - 00026544 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-04-12 19:11 - 2009-07-14 06:45 - 00026544 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-04-12 18:28 - 2014-12-07 21:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2017-04-12 18:22 - 2014-09-11 21:04 - 00000000 ____D C:\Windows\system32\MRT
2017-04-12 18:19 - 2014-09-11 21:04 - 148601744 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-04-12 18:17 - 2014-09-11 20:53 - 01595358 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-04-12 18:15 - 2009-07-14 04:34 - 00000478 _____ C:\Windows\win.ini
2017-04-12 18:02 - 2015-10-08 19:55 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-04-12 17:46 - 2017-02-19 19:18 - 00000460 _____ C:\Windows\Tasks\UCBrowserUpdater.job
2017-04-12 17:37 - 2016-08-01 19:51 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\Spotify
2017-04-12 17:01 - 2016-02-01 21:34 - 00000392 _____ C:\Windows\Tasks\update-sys.job
2017-04-12 16:06 - 2016-02-01 21:34 - 00000392 _____ C:\Windows\Tasks\update-S-1-5-21-4225298673-1622639848-1158892530-1000.job
2017-04-12 14:11 - 2014-12-10 15:49 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\.minecraft
2017-04-11 16:38 - 2017-02-28 21:29 - 00000000 ____D C:\Windows\system32\log
2017-04-11 16:38 - 2017-02-19 19:16 - 00909944 _____ C:\Windows\system32\Drivers\NetUtils2016.sys
2017-04-11 16:38 - 2015-01-31 15:45 - 00000000 ____D C:\AdwCleaner
2017-04-11 16:36 - 2017-02-22 19:39 - 00003542 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-04-11 16:36 - 2017-02-22 19:39 - 00003414 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-04-11 13:04 - 2016-09-11 11:57 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-04-11 12:57 - 2017-03-08 17:11 - 00000000 ____D C:\Program Files (x86)\MK
2017-04-11 12:57 - 2017-02-22 19:40 - 00002463 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-04-11 12:57 - 2015-05-18 20:07 - 00000000 ____D C:\Users\Heartel\AppData\Local\CrashDumps
2017-04-11 12:57 - 2014-12-07 19:41 - 00001611 _____ C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-04-11 12:53 - 2017-03-02 21:05 - 00000000 _____ C:\Windows\SysWOW64\1
2017-04-11 10:50 - 2017-02-21 10:25 - 00000000 ____D C:\Program Files (x86)\Chalisy
2017-04-10 12:06 - 2017-02-21 10:24 - 00000000 ____D C:\Program Files\am7fgfeu
2017-04-09 23:08 - 2014-12-14 15:32 - 00000000 ____D C:\Users\Heartel\.gimp-2.8
2017-04-09 19:50 - 2014-12-14 17:44 - 00000000 ____D C:\Users\Heartel\AppData\Local\gtk-2.0
2017-04-08 12:42 - 2015-07-06 18:44 - 00003724 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4225298673-1622639848-1158892530-1000UA
2017-04-08 12:42 - 2015-07-06 18:44 - 00003452 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4225298673-1622639848-1158892530-1000Core
2017-04-08 12:28 - 2015-12-23 21:45 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2017-04-08 00:06 - 2010-11-21 05:27 - 00532136 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-04-04 19:49 - 2016-01-20 21:53 - 00000000 ____D C:\Users\Heartel\AppData\Local\DisplayFusion
2017-04-02 17:12 - 2017-02-19 20:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-04-02 17:12 - 2017-01-28 15:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-04-01 16:30 - 2017-03-08 17:17 - 00000000 _____ C:\Windows\SysWOW64\4
2017-04-01 16:30 - 2017-03-08 17:16 - 00000000 _____ C:\Windows\SysWOW64\3
2017-04-01 13:45 - 2015-12-23 19:43 - 00000600 _____ C:\Users\Heartel\AppData\Local\PUTTY.RND
2017-03-29 13:49 - 2014-12-11 09:54 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\Audacity
2017-03-27 20:31 - 2015-02-08 00:05 - 04843520 ___SH C:\Users\Heartel\Desktop\Thumbs.db
2017-03-18 13:40 - 2015-12-24 23:28 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2017-03-18 13:40 - 2014-12-10 14:54 - 00000000 ____D C:\ProgramData\Skype
2017-03-18 13:39 - 2014-12-07 19:47 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-15 18:33 - 2016-11-12 12:13 - 00000000 ____D C:\Windows\rescache
2017-03-15 17:36 - 2014-12-12 15:08 - 00000000 ____D C:\Windows\system32\appraiser
2017-03-15 17:36 - 2014-12-07 20:27 - 00000000 ___SD C:\Windows\system32\CompatTel
2017-03-15 17:36 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\DVD Maker

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-04-19 18:56 - 2015-12-10 21:08 - 0000000 _____ () C:\Users\Heartel\AppData\Roaming\FileIn.cns
2015-04-19 18:56 - 2015-12-10 21:08 - 0000000 _____ () C:\Users\Heartel\AppData\Roaming\FileOut.cns
2016-03-06 14:35 - 2016-03-15 15:17 - 0000282 _____ () C:\Users\Heartel\AppData\Roaming\GPU MeterV2_Settings.ini
2016-04-20 16:15 - 2016-04-20 16:24 - 0000600 _____ () C:\Users\Heartel\AppData\Roaming\PUTTY.RND
2015-11-17 20:01 - 2015-11-17 20:01 - 0174261 _____ () C:\Users\Heartel\AppData\Roaming\VideoPad.dmp
2015-12-23 19:43 - 2017-04-01 13:45 - 0000600 _____ () C:\Users\Heartel\AppData\Local\PUTTY.RND
2017-04-09 19:50 - 2017-04-09 19:50 - 0005171 _____ () C:\Users\Heartel\AppData\Local\recently-used.xbel
2014-12-22 21:40 - 2017-02-19 20:55 - 0007606 _____ () C:\Users\Heartel\AppData\Local\Resmon.ResmonCfg
2017-03-01 18:58 - 2016-11-23 15:37 - 0000570 _____ () C:\Users\Heartel\AppData\Local\TroubleshooterConfig.json
2016-02-01 21:34 - 2016-02-01 21:34 - 0000003 _____ () C:\Users\Heartel\AppData\Local\updater.log
2016-02-01 21:34 - 2016-08-06 20:05 - 0000424 _____ () C:\Users\Heartel\AppData\Local\UserProducts.xml
2014-12-07 19:51 - 2014-12-07 19:51 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-09-11 12:26 - 2016-09-11 12:46 - 0000305 _____ () C:\ProgramData\hpzinstall.log
2016-02-28 17:14 - 2016-02-28 17:14 - 0000016 _____ () C:\ProgramData\mntemp

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-04-05 17:15

==================== Ende von FRST.txt ============================
         

--- --- ---

Addition.txt
FRST Additions Logfile:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15-03-2017
durchgeführt von Heartel (13-04-2017 11:13:30)
Gestartet von C:\Users\Heartel\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2014-12-07 17:40:38)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-4225298673-1622639848-1158892530-500 - Administrator - Disabled)
Gast (S-1-5-21-4225298673-1622639848-1158892530-501 - Limited - Disabled)
Heartel (S-1-5-21-4225298673-1622639848-1158892530-1000 - Administrator - Enabled) => C:\Users\Heartel
HomeGroupUser$ (S-1-5-21-4225298673-1622639848-1158892530-1002 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\uTorrent) (Version: 3.4.7.42330 - BitTorrent Inc.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.023.20070 - Adobe Systems Incorporated)
Adobe Flash Player 24 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Photoshop CS6 Version 13.0.1 (HKLM-x32\...\{A724DC44-6241-42D3-BA57-778B178ABC17}_is1) (Version: 13.0.1 - Adobe Systems, Inc.)
aerosoft's - Berliner S-Bahn Teil 1 (HKLM-x32\...\{2AEB2EFA-477F-4F3F-9864-356AC2141F45}) (Version:  - )
aerosoft's - High Speed Trains (HKLM-x32\...\{C98DB470-A8FD-4C84-9B21-DF222199DD66}) (Version:  - )
aerosoft's - Hoellentalbahn (HKLM-x32\...\{82D7E57E-D9F0-4C2E-AA57-3E143D89F515}) (Version:  - )
Aerosoft's - Strassenbahn Berlin-Koepenick (HKLM-x32\...\{681734DF-28F0-4842-855C-91CCE610FA67}) (Version: 1.10 - Aerosoft)
Akai Professional MPX File Conversion Utility (HKLM-x32\...\MPXFileConversionUtility) (Version:  - )
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ASUS Xonar DX Audio Driver (HKLM\...\C-Media Oxygen HD Audio Driver) (Version:  - )
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield: Bad Company 2 (HKLM\...\Steam App 24960) (Version:  - DICE)
Battlefield™ 1 (HKLM-x32\...\{335B50BC-6130-4BAF-9A6A-F1561270587B}) (Version: 1.0.47.30570 - Electronic Arts)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.6.100.6363 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.00 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5931 - CDBurnerXP)
Cinema 4D version R12 (HKLM-x32\...\{7D9D8134-9FA3-4FFF-ADA1-BF609F29997A}_is1) (Version: R12 - Salat Production)
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version:  - Valve)
CPUID CPU-Z 1.75 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
Creative Systeminformationen (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DDFCreator 2.2.1 (HKLM-x32\...\DDFCreator_2.2.1) (Version: 2.2.1 - DMXControl Projects e.V.)
DDFCreator 3.0 (HKLM-x32\...\DDFCreator_3.0) (Version: 3.0 - DMXControl Projects e.V.)
DisplayFusion 7.3.3 (HKLM-x32\...\B076073A-5527-4f4f-B46B-B10692277DA2_is1) (Version: 7.3.3.0 - Binary Fortress Software)
DMXControl 2.12.2 (HKLM-x32\...\DMXControl) (Version: 2.12.2 - PopSoft)
Eisenbahn.exe Professional 6.0 (HKLM-x32\...\{6B249FAC-DD1A-405F-A8A2-AA6A2252ED32}) (Version: 6.00.0000 - Trend)
Emergency Download Driver (HKLM-x32\...\{3F0F5AB4-C9CE-4226-8393-E9CFF8369D9D}) (Version: 1.1.16.1526 - Microsoft)
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.0.5 - SCS Software)
FileZilla Client 3.23.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.23.0.2 - Tim Kosse)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Goat Simulator (HKLM-x32\...\R29hdFNpbXVsYXRvcg==_is1) (Version: 1 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 57.0.2987.133 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 5.41.3.0 - Google)
Google Update Helper (x32 Version: 1.3.33.3 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Greenfoot (HKLM-x32\...\{8C838B70-3A71-41E8-91A6-4ADCF2E483D0}) (Version: 2.4.2 - Greenfoot Team)
HP Support Solutions Framework (HKLM-x32\...\{D549B5E2-DBE8-4190-ABA5-71106264398C}) (Version: 12.5.32.203 - HP Inc.)
Human Fall Flat (HKLM-x32\...\1203767418_is1) (Version: 2.0.0.2 - GOG.com)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3960 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
Island Flight Simulator (HKLM-x32\...\Island Flight SimulatorFinal) (Version: Final - Game Owl)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Java SE Development Kit 8 Update 101 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180101}) (Version: 8.0.1010.13 - Oracle Corporation)
Java-Editor 13.36, 2016.08.06 (HKLM-x32\...\{65FBA21B-7F80-4E4E-B275-0958D2648F94}_is1) (Version:  - Gerhard Röhner)
Lightshot-5.4.0.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.1 - Skillbrains)
Lumia UEFI Blue Driver (HKLM-x32\...\{9D2A75FE-8CE1-4297-AEC1-A097D47BACE9}) (Version: 1.1.10.1526 - Microsoft)
Magic 3D Easy View (HKLM-x32\...\Magic 3D Easy View_is1) (Version:  - Nicolaudie)
ManyCam 4.0.52 (HKLM-x32\...\ManyCam) (Version: 4.0.52 - Visicom Media Inc.)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
Microsoft Train Simulator (HKLM-x32\...\Train Simulator 1.0) (Version:  - )
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.0 (HKLM-x32\...\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}) (Version: 3.0.11010.0 - Microsoft Corporation)
MIDI-OX (HKLM-x32\...\{A6457851-5EA9-45B0-AF1D-D2A0A4781CFB}) (Version: 7.02.372 - MIDIOX Computing)
Minecraft Note Block Studio version 3.2.1 (HKLM-x32\...\{84077DA9-3075-4AE5-BC82-345202B8CD4F}_is1) (Version: 3.2.1 - David Norgren)
Mini Metro (HKLM-x32\...\1434554947_is1) (Version: 2.0.0.4 - GOG.com)
Mozilla Firefox 52.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 52.0.2 (x86 en-US)) (Version: 52.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.2.6291 - Mozilla)
Mozilla Thunderbird 45.2.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.2.0 (x86 de)) (Version: 45.2.0 - Mozilla)
MSI GamingApp (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 1.0.0.18 - MSI)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.6 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.62 - NVIDIA Corporation)
NVIDIA Grafiktreiber 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.62 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OnePlus USB Drivers 1.00 (HKLM-x32\...\OnePlus USB Drivers 1.00) (Version: 1.00 - OnePlus, Inc)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 10.3.3.1921 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PhantomZerOS 7.9 MD (HKLM-x32\...\PhantomZerOS_is1) (Version:  - Zero 88)
Plotagon (HKLM-x32\...\Plotagon 1.10.0) (Version: 1.10.0 - Plotagon)
Plotagon (x32 Version: 1.10.0 - Plotagon) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.988 - Even Balance, Inc.)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 7.78.1218.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7200 - Realtek Semiconductor Corp.)
Rechnungsverwalter (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Rechnungsverwalter) (Version: 2.10.43 - Temia Consulting)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.0.5 - Rockstar Games)
RollerCoaster Tycoon 3 (HKLM-x32\...\RollerCoaster Tycoon 3_is1) (Version:  - Atari)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version:  - Microsoft) Hidden
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.3.5 - NVIDIA Corporation) Hidden
SiudiDriver Version 2.3 (HKLM\...\SiudiDriver_is1) (Version: 2.3 - LightingSoft AG)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
Sound Blaster Audigy Fx (HKLM-x32\...\{77CE1865-F3B9-4B6D-A558-28674AE7787E}) (Version: 1.00.06 - Creative Technology Limited)
Sound Blaster Audigy Fx Extras (HKLM-x32\...\{52272D09-08E0-4A57-BC14-BC09F5D7AE26}) (Version: 1.0 - Creative Technology Limited)
Soundcloud Playlist Downloader (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\35cf6f8efa605d1f) (Version: 1.0.0.36 - Soundcloud Playlist Downloader)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Spotify (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Spotify) (Version: 1.0.52.725.g943b26a8 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.72365 - TeamViewer)
Technitium MAC Address Changer v6.0 (HKLM-x32\...\TMACv6.0) (Version: 6.0 - Technitium)
TmUnitedForever (HKLM-x32\...\TmUnitedForever_is1) (Version:  - Nadeo)
Trucks And Trailers (HKLM-x32\...\Trucks And Trailers_is1) (Version: Trucks And Trailers - Fenixx--Repack--(21.06.2011))
TS3index Bot-Manager (HKLM\...\TS3index-MusicBot) (Version: 1.0.4.1 - TS3index.com GbR)
Unity Web Player (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\UnityWebPlayer) (Version: 5.3.2f1 - Unity Technologies ApS)
Update for Skype for Business 2015 (KB3172492) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUS_{EF472462-0A4C-480C-AE1B-FA192B0B17AB}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3178731) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{949C4091-F95D-418E-B215-27303F51F9AA}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3178731) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{949C4091-F95D-418E-B215-27303F51F9AA}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3178731) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUS_{949C4091-F95D-418E-B215-27303F51F9AA}) (Version:  - Microsoft)
VBCABLE, The Virtual Audio Cable (HKLM\...\VB:VBCABLE {87459874-1236-4469}) (Version:  - VB-Audio Software)
Vegas Pro 13.0 (64-bit) (HKLM\...\{CE92F061-BFBC-11E3-8FF3-F04DA23A5C58}) (Version: 13.0.290 - Sony)
VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 3.79 - NCH Software)
Virtual Audio Cable 4.9 (HKLM\...\Virtual Audio Cable 4.9) (Version:  - )
VirtualDJ 8 (HKLM-x32\...\{5A89A21C-6391-4AFC-8502-66F6F7250125}) (Version: 8.0.2325.0 - Atomix Productions)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.2 - VideoLAN)
War Thunder (HKLM-x32\...\Steam App 236390) (Version:  - Gaijin Entertainment)
Windows Device Recovery Tool 3.1.6 (HKLM-x32\...\{2d723982-37f4-441b-8702-49a3cb4b38bb}) (Version: 3.1.6 - Microsoft)
Windows Phone app for desktop (HKLM-x32\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation)
Windows-Treiberpaket - OnePlus, Inc. (WinUSB) AndroidUsbDeviceClass  (05/24/2012 6.0.0000.00000) (HKLM\...\59AFF6524BE5C0983F2711DEB8D25D511D4F4924) (Version: 05/24/2012 6.0.0000.00000 - OnePlus, Inc.)
WinUsb CoInstallers (HKLM-x32\...\{9755918A-CDF8-4F1E-8453-6359CF1A330A}) (Version: 1.1.12.1526 - Microsoft)
WinUSB Compatible ID Drivers (HKLM-x32\...\{A4A0B236-6046-4CAB-8177-1EAF61112C75}) (Version: 1.1.11.1526 - Microsoft)
WinUSB Drivers ext (HKLM-x32\...\{29BAAF65-09E5-4F52-8D15-2FAF2E23A8DC}) (Version: 1.1.24.1544 - Microsoft)
WorldPainter 2.2.6 (HKLM\...\4144-4862-0472-7103) (Version: 2.2.6 - pepsoft.org)
X11_GMouse (HKLM-x32\...\{88A3CF84-961E-4F26-B7E5-A9485BC33EBD}) (Version: 2.04.0004 - Masione)
YAC(Yet Another Cleaner!) (HKLM-x32\...\iSafe) (Version:  - ELEX DO BRASIL PARTICIPAÇÕES LTDA) <==== ACHTUNG

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{2F5DA951-82C6-471e-90BD-CAB15552A932}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{5b55a44a-d008-49aa-9234-86fb7709bc0a}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{8C46158B-D978-483C-A312-16EE5013BE04}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll (Google Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {158A9012-4211-42D5-9110-5C8A42BCC66C} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
Task: {1C786F0C-EBED-4A4B-91CC-059B211A073D} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2016-07-01] ()
Task: {1E2B87C1-0339-4F26-A9A4-55BB61460E81} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {2B2B3DBD-C788-4C09-8306-5F779095C550} - \AutoKMSCustom -> Keine Datei <==== ACHTUNG
Task: {2E6A44C6-3B83-4DA5-A728-F9AA00B949D5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.)
Task: {3F09F082-8437-42C1-AD0B-6699FDAE2534} - System32\Tasks\{A25D09F0-63B4-47E1-996F-57F00119FC58} => pcalua.exe -a "C:\Users\Heartel\Downloads\Crysis 3 - InstallShield Wizard.exe" -d C:\Users\Heartel\Downloads
Task: {45BAE16E-A565-402F-BC4B-683824183D1A} - System32\Tasks\{E1843C6C-14F0-4F89-ACB4-52062D6CE11B} => E:\Exeter & acc\Minecraft Account Generator\Minecraft Account Generator.exe 
Task: {4DEFEE0F-9A01-4683-AA4D-168492F65B63} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {5871B1A8-D797-4FAD-B7E3-4349753EE4EB} - System32\Tasks\{FD611095-058E-4F84-94FA-1B4E1D22B686} => pcalua.exe -a C:\Users\Heartel\Downloads\plesk-installer.exe -d C:\Users\Heartel\Downloads
Task: {6156367F-5D7E-4A5E-A77A-0959FA1CB9C6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-12-21] (HP Inc.)
Task: {633DEE98-8608-42BD-A3E2-D73723BD0913} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()
Task: {65250479-C676-47FC-984A-E81063D8F267} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-11-21] (Piriform Ltd)
Task: {86E50960-71EF-4440-9801-6EC92496E2A8} - System32\Tasks\{09C0C51B-8C8E-4D47-BBEC-4EFCB188B86F} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{681734DF-28F0-4842-855C-91CCE610FA67}\Setup.exe" -c -runfromtemp -l0x0007 -uninst -removeonly
Task: {8B7FD444-EEEC-41BA-AAAC-EA8E48955355} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {9C7C62EE-C6FA-4ED8-97F5-5FD926BDF4A5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-02-02] (Adobe Systems Incorporated)
Task: {A1D2368B-76B8-422B-B3C1-52A4069DA1EA} - System32\Tasks\Jernercult Verfier => C:\Program Files (x86)\Chalisy\phierk.exe 
Task: {AAD8C506-4362-48CC-AAAE-BF4843B4330E} - System32\Tasks\update-S-1-5-21-4225298673-1622639848-1158892530-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()
Task: {CC6C5E45-FC6D-4DB9-A722-E285414872F9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-22] (Google Inc.)
Task: {CDB318FF-EB4B-449E-A3BF-17B579F7E1DD} - System32\Tasks\{FE4CBB08-7824-4E6D-84A0-8B1ADB91A110} => E:\Exeter & acc\Minecraft Account Generator\Minecraft Account Generator.exe 
Task: {D941C3A7-1A5E-4C74-91A9-874B42C467E1} - System32\Tasks\UCBrowserUpdater => C:\Program Files (x86)\UCBrowser\Application\update_task.exe  <==== ACHTUNG
Task: {DB1EE54B-425E-47FF-B0E8-8483F5470701} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {DF02501A-56C8-4802-B0D2-A7284FE0AE8F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4225298673-1622639848-1158892530-1000UA => C:\Users\Heartel\AppData\Local\Google\Update\GoogleUpdate.exe [2015-07-06] (Google Inc.)
Task: {DFD323A8-CFB0-4209-A5C4-3BFD31F4CF71} - \Mighty Defrag Logon -> Keine Datei <==== ACHTUNG
Task: {E0B65604-F6E5-4164-85B0-99730E64924A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4225298673-1622639848-1158892530-1000Core => C:\Users\Heartel\AppData\Local\Google\Update\GoogleUpdate.exe [2015-07-06] (Google Inc.)
Task: {E2E1414C-E3CD-4221-A6E4-C64E04A654FD} - \Mighty Defrag -> Keine Datei <==== ACHTUNG
Task: {E5441460-5ACF-4DE7-B9E6-9E49FAEC84EA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-11] (Adobe Systems Incorporated)
Task: {EC177DA1-61F4-446C-937A-FA763826AA16} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-22] (Google Inc.)
Task: {F3CB46DC-D864-4295-800A-2843CAF92FED} - System32\Tasks\{1CEA907F-8EE3-45B5-9F3A-627E99128B77} => pcalua.exe -a "C:\Program Files (x86)\Creative\Sound Blaster Audigy Fx\Program\Setup.exe" -d "C:\Program Files (x86)\Creative\Sound Blaster Audigy Fx\Program"

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\UCBrowserUpdater.job => C:\Program Files (x86)\UCBrowser\Application\update_task.exe <==== ACHTUNG
Task: C:\Windows\Tasks\update-S-1-5-21-4225298673-1622639848-1158892530-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnet Eхplоrеr.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.erolpxei.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Online Help.lnk -> hxxp://www.virtualdj.com/wiki
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\www.virtualdj.com.lnk -> hxxp://www.virtualdj.com
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Intеrnеt Ехрlorеr (Nо Add-ons).lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.erolpxei.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Ballcine\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gооgle Chrоmе.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.emorhc.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Lаunсh Intеrnеt Eхрlоrer Вrоwser.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.erolpxei.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Ballcine\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gооglе Сhrоmе.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.emorhc.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Моzilla Firefох.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.xoferif.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Google Chrome.lnk -> C:\Program Files (x86)\Ballcine\Application\chrome.exe (Google Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооgle Сhrome.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.emorhc.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Мozillа Firеfoх.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.xoferif.bat (Keine Datei) <===== Cyrillic

ShortcutWithArgument: C:\Users\Heartel\Desktop\firefox - Verknüpfung.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491908242&z=e069448fc1b13c52303b567g0z1tag0tceab8o1zaz&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491908242&z=e069448fc1b13c52303b567g0z1tag0tceab8o1zaz&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491908242&z=e069448fc1b13c52303b567g0z1tag0tceab8o1zaz&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\firefox - Verknüpfung.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491908242&z=e069448fc1b13c52303b567g0z1tag0tceab8o1zaz&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9b4132eb14cd54df\Google Chrome.lnk -> C:\Program Files (x86)\Ballcine\Application\chrome.exe (Google Inc.) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Ballcine\Application\chrome.exe (Google Inc.) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\Google Chrome.lnk -> C:\Program Files (x86)\Ballcine\Application\chrome.exe (Google Inc.) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491908242&z=e069448fc1b13c52303b567g0z1tag0tceab8o1zaz&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491908242&z=e069448fc1b13c52303b567g0z1tag0tceab8o1zaz&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2017-02-19 19:16 - 2017-04-13 11:06 - 00625272 _____ () C:\Windows\System32\NetUtils2016.dll
2016-01-23 22:14 - 2015-07-23 03:31 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-02-19 19:15 - 2017-02-19 19:15 - 00307712 _____ () C:\Program Files (x86)\Jernercult Verfier\local64spl.dll
2016-05-16 18:18 - 2016-05-02 07:54 - 00369208 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-05-16 18:18 - 2016-05-02 07:54 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-05-16 18:18 - 2016-05-02 07:55 - 03613240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-01-23 22:14 - 2016-05-02 07:55 - 00289848 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-12-30 17:20 - 2016-12-30 17:20 - 00075064 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2016-12-30 17:20 - 2016-12-30 19:09 - 00215128 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2016-05-16 18:18 - 2016-05-02 07:55 - 01990200 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-05-16 18:18 - 2016-05-02 07:55 - 02667576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-05-16 18:18 - 2016-05-02 07:55 - 01842232 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-01-24 04:41 - 2016-05-02 07:55 - 00208952 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2016-05-16 18:18 - 2016-05-02 07:54 - 00035896 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-05-16 18:18 - 2016-05-02 07:54 - 00921656 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2016-12-06 18:17 - 2016-12-06 18:17 - 00052400 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2015-04-15 22:13 - 2015-04-15 22:13 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2017-08-02 21:19 - 2007-12-19 04:41 - 00020480 ____R () C:\Windows\system\CMGxMon.exe
2017-08-02 21:18 - 2008-01-09 08:18 - 00090112 ____R () C:\Program Files\ASUS Xonar DX Audio\Customapp\MXMon.exe
2014-11-22 02:03 - 2014-11-22 02:03 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2014-02-28 11:14 - 2017-01-18 15:57 - 00176408 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll
2014-08-04 15:43 - 2017-01-18 15:57 - 00107288 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2014-08-04 15:43 - 2017-01-18 15:57 - 00118040 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2014-08-04 15:46 - 2017-01-18 15:57 - 00486680 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-08-04 15:46 - 2017-01-18 15:57 - 00319768 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2017-03-31 17:07 - 2016-05-23 04:37 - 00065696 ____N () C:\Program Files (x86)\Elex-tech\YAC\zlib1.dll
2016-01-23 22:14 - 2016-05-02 08:02 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2017-03-31 17:07 - 2016-05-23 04:37 - 00179200 ____N () C:\Program Files (x86)\Elex-tech\YAC\libpng.dll
2017-08-02 21:18 - 2007-12-17 13:05 - 00323584 ____R () C:\Program Files\ASUS Xonar DX Audio\CustomApp\cmdevice.dll
2015-03-20 22:26 - 2017-03-10 02:13 - 00674592 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-03-20 22:26 - 2016-09-01 03:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-03-20 22:26 - 2016-09-01 03:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-03-20 22:26 - 2016-09-01 03:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2015-03-20 22:26 - 2017-03-23 02:52 - 02465056 _____ () C:\Program Files (x86)\Steam\video.dll
2015-03-20 22:26 - 2016-01-27 09:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-03-20 22:26 - 2016-01-27 09:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-03-20 22:26 - 2016-01-27 09:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-03-20 22:26 - 2016-01-27 09:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-03-20 22:26 - 2016-01-27 09:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2015-03-20 22:26 - 2017-03-31 00:46 - 00848672 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-12-25 16:00 - 2016-07-05 00:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2017-01-30 13:52 - 2017-01-30 13:52 - 01926632 ____R () C:\Program Files (x86)\Skype\Phone\roottools.dll
2016-12-25 16:01 - 2017-01-30 23:41 - 68875552 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2015-03-20 22:26 - 2017-03-23 02:52 - 00383776 _____ () C:\Program Files (x86)\Steam\steam.dll
2014-03-20 12:43 - 2014-03-20 12:43 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2016-08-01 19:52 - 2017-04-05 20:11 - 67725936 _____ () C:\Users\Heartel\AppData\Roaming\Spotify\libcef.dll
2016-08-01 19:52 - 2017-04-05 20:11 - 01929840 _____ () C:\Users\Heartel\AppData\Roaming\Spotify\libglesv2.dll
2016-08-01 19:52 - 2017-04-05 20:11 - 00087152 _____ () C:\Users\Heartel\AppData\Roaming\Spotify\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Windows\system32\drivers:ucdrv-x64.sys [25444]
AlternateDataStreams: C:\Windows\system32\drivers:x64 [371912]
AlternateDataStreams: C:\Windows\system32\drivers:x86 [1214242]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\localhost -> localhost

==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2017-02-19 19:37 - 00002185 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 cpm.paneladmin.pro
127.0.0.1 publisher.hmdiadmingate.xyz
127.0.0.1 distribution.hmdiadmingate.xyz
127.0.0.1 hmdicrewtracksystem.xyz
127.0.0.1 beautifllink.xyz
127.0.0.1 cpm.paneladmin.pro
127.0.0.1 publisher.hmdiadmingate.xyz
127.0.0.1 distribution.hmdiadmingate.xyz
127.0.0.1 hmdicrewtracksystem.xyz
127.0.0.1 beautifllink.xyz
127.0.0.1 cpm.paneladmin.pro
127.0.0.1 publisher.hmdiadmingate.xyz
127.0.0.1 distribution.hmdiadmingate.xyz
127.0.0.1 hmdicrewtracksystem.xyz
127.0.0.1 beautifllink.xyz

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Heartel\AppData\Local\DisplayFusion\Wallpaper_2
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
MSCONFIG\startupreg: EaseUS Cleanup => "E:\Programme & Spiele\EaseUS Partition Master 11.0\bin\CleanUpUI.exe" 10 300
MSCONFIG\startupreg: EaseUS EPM tray => E:\Programme & Spiele\EaseUS Partition Master 11.0\bin\EpmNews.exe
MSCONFIG\startupreg: Gaijin.Net Agent => "C:\Users\Heartel\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe"
MSCONFIG\startupreg: Google Update => C:\Users\Heartel\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Logitech Download Assistant => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
MSCONFIG\startupreg: ShadowPlay => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Spotify => "C:\Users\Heartel\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Heartel\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [TCP Query User{BFFA6BC7-C83F-4F09-BC81-A02BFB8EDCA8}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{ADAC7221-D7E0-4E23-B278-B8082DFC919A}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [TCP Query User{3FBF689F-227E-402D-A8C1-28AC216FB28E}E:\crysis 3\bin32\crysis3.exe] => (Allow) E:\crysis 3\bin32\crysis3.exe
FirewallRules: [UDP Query User{78C0FAB7-B56E-437C-9F13-890D77D89AB6}E:\crysis 3\bin32\crysis3.exe] => (Allow) E:\crysis 3\bin32\crysis3.exe
FirewallRules: [{3EB34205-9BDF-44ED-9D2C-4F3E2C7C123C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D7447A74-33D0-48D7-9FBA-A4A979D18910}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{120DB67A-AE64-4904-84EE-676E80A1601B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{73BFC15A-CB49-46B7-8EFF-293FEAC46860}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{EDAC3D01-FE2C-4F0E-8D91-7FF35F68999E}C:\program files (x86)\virtualdj\virtualdj8.exe] => (Allow) C:\program files (x86)\virtualdj\virtualdj8.exe
FirewallRules: [UDP Query User{18A49D1C-41F2-465B-B66A-49D3E9A2EF51}C:\program files (x86)\virtualdj\virtualdj8.exe] => (Allow) C:\program files (x86)\virtualdj\virtualdj8.exe
FirewallRules: [TCP Query User{AB255F22-1778-4591-96A7-0824A4807429}C:\program files (x86)\virtualdj\virtualdj8.exe] => (Allow) C:\program files (x86)\virtualdj\virtualdj8.exe
FirewallRules: [UDP Query User{759CE62C-6E84-42DC-8A56-C469E14A61C6}C:\program files (x86)\virtualdj\virtualdj8.exe] => (Allow) C:\program files (x86)\virtualdj\virtualdj8.exe
FirewallRules: [TCP Query User{4E6698A6-C59F-4243-B003-57A3D05E6A16}C:\slmev\easyview.exe] => (Allow) C:\slmev\easyview.exe
FirewallRules: [UDP Query User{B116D314-E3A5-46F0-94C9-2E54D514443A}C:\slmev\easyview.exe] => (Allow) C:\slmev\easyview.exe
FirewallRules: [TCP Query User{8BF28753-D5D3-4EF8-985C-A410D703A63C}C:\program files (x86)\ddfcreator3\ddfcreator3.exe] => (Allow) C:\program files (x86)\ddfcreator3\ddfcreator3.exe
FirewallRules: [UDP Query User{F70237F1-546D-4CC3-AAA6-5324ACF1B2E2}C:\program files (x86)\ddfcreator3\ddfcreator3.exe] => (Allow) C:\program files (x86)\ddfcreator3\ddfcreator3.exe
FirewallRules: [{613FAAFF-7CC1-4ED5-B67E-A851E0487441}] => (Allow) E:\BF 3\Battlefield 3\bf3.exe
FirewallRules: [{80A4B577-D24D-48E4-AC59-931BF33C1792}] => (Allow) E:\BF 3\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{E648FF54-D998-43C0-A660-9AC7091CE975}C:\slmev\easyview.exe] => (Allow) C:\slmev\easyview.exe
FirewallRules: [UDP Query User{D1AF2CA6-D6E5-4657-8CB9-E177562D2BF3}C:\slmev\easyview.exe] => (Allow) C:\slmev\easyview.exe
FirewallRules: [{A82035CF-5B1F-45A7-9EC8-D2F1B16C72AC}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{68B25799-CA1C-461C-8A16-9132665D169C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{100833A2-40A5-402E-A307-3DDCE54975FC}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{3B514394-0B05-42B9-A4C8-4557909EBA29}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{2F36DADF-3CE2-443B-B3AF-2C6E62E77D6C}] => (Allow) E:\SteamLibrary\steamapps\common\War Thunder\launcher.exe
FirewallRules: [{2F4FFC96-C191-4814-A16D-21D7F742C095}] => (Allow) E:\SteamLibrary\steamapps\common\War Thunder\launcher.exe
FirewallRules: [TCP Query User{B1D7A997-5060-4831-801B-FCE24D91F11D}E:\steamlibrary\steamapps\common\war thunder\aces.exe] => (Allow) E:\steamlibrary\steamapps\common\war thunder\aces.exe
FirewallRules: [UDP Query User{5B625FFE-C1B7-48A3-B899-C647934B6DC2}E:\steamlibrary\steamapps\common\war thunder\aces.exe] => (Allow) E:\steamlibrary\steamapps\common\war thunder\aces.exe
FirewallRules: [TCP Query User{CB3E2650-D238-48A5-B250-20F989EE3229}E:\programme & spiele\cubeworld\server.exe] => (Allow) E:\programme & spiele\cubeworld\server.exe
FirewallRules: [UDP Query User{EE0F3143-39ED-4907-90EB-9D9011D52D25}E:\programme & spiele\cubeworld\server.exe] => (Allow) E:\programme & spiele\cubeworld\server.exe
FirewallRules: [TCP Query User{A6E981B4-4049-46F1-B06C-B7EB48BD3774}C:\program files\unity\editor\unity.exe] => (Allow) C:\program files\unity\editor\unity.exe
FirewallRules: [UDP Query User{1773D5C0-9937-4D21-A76A-E1933DB79516}C:\program files\unity\editor\unity.exe] => (Allow) C:\program files\unity\editor\unity.exe
FirewallRules: [{9277BEC1-B6CC-4837-B936-363D469E1EDD}] => (Block) C:\program files\unity\editor\unity.exe
FirewallRules: [{A7642725-BBC5-4039-A406-BFD9E37C7ADD}] => (Block) C:\program files\unity\editor\unity.exe
FirewallRules: [TCP Query User{49539AB8-BDD5-4EBD-ABA8-1F782A99CAAF}C:\slmev\tools.exe] => (Allow) C:\slmev\tools.exe
FirewallRules: [UDP Query User{32F6D9BB-4552-4BC7-830C-D3D33FA4AC90}C:\slmev\tools.exe] => (Allow) C:\slmev\tools.exe
FirewallRules: [{0F58C7E6-8E71-41EA-97EC-0806E402AF8F}] => (Block) C:\slmev\tools.exe
FirewallRules: [{7E63DE4F-76AF-45D7-BFC5-088A87BEF3A3}] => (Block) C:\slmev\tools.exe
FirewallRules: [{D0578FFC-B62A-4796-80B2-23BE75F8DD28}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{C9B12236-3BFC-4E6A-B310-9AE861075A75}C:\program files (x86)\greenfoot\greenfoot.exe] => (Allow) C:\program files (x86)\greenfoot\greenfoot.exe
FirewallRules: [UDP Query User{B8090E58-C5A1-42B3-8D3F-D7CF6ED72953}C:\program files (x86)\greenfoot\greenfoot.exe] => (Allow) C:\program files (x86)\greenfoot\greenfoot.exe
FirewallRules: [TCP Query User{63586EC8-D6B4-4E1D-9F2E-0C0E6BC3FB60}C:\program files (x86)\greenfoot\jdk\jre\bin\java.exe] => (Allow) C:\program files (x86)\greenfoot\jdk\jre\bin\java.exe
FirewallRules: [UDP Query User{0B8E62B8-191D-4618-94B6-423BBDCF2396}C:\program files (x86)\greenfoot\jdk\jre\bin\java.exe] => (Allow) C:\program files (x86)\greenfoot\jdk\jre\bin\java.exe
FirewallRules: [{3F6A2D1F-5B81-449D-AA89-DF3EA683491F}] => (Block) C:\program files (x86)\greenfoot\jdk\jre\bin\java.exe
FirewallRules: [{A8E58174-39F3-477A-A5AF-B5A016A0888D}] => (Block) C:\program files (x86)\greenfoot\jdk\jre\bin\java.exe
FirewallRules: [{ADE76328-ED82-491E-9AC7-12DC255D1A67}] => (Block) C:\program files (x86)\greenfoot\greenfoot.exe
FirewallRules: [{F9F73C29-63F3-4F54-817D-48454952B35C}] => (Block) C:\program files (x86)\greenfoot\greenfoot.exe
FirewallRules: [TCP Query User{0E1E7894-5A36-4EC0-8381-B27D62B3E217}C:\users\heartel\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\heartel\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{24728204-DCC0-4AFB-8776-DB4742CB5F4A}C:\users\heartel\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\heartel\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{CE726153-6CD9-4CEC-92A6-782D2067D0AF}] => (Block) C:\users\heartel\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{18CC009E-86DA-4FF9-A244-AC9F254360BD}] => (Block) C:\users\heartel\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{3326E89B-2AE1-4AFC-B397-404E2ECD93B7}E:\programme & spiele\teamspeak3-server_win64\ts3server_win64.exe] => (Allow) E:\programme & spiele\teamspeak3-server_win64\ts3server_win64.exe
FirewallRules: [UDP Query User{E07FD9CB-A2D5-4F48-ABFC-1716D302A219}E:\programme & spiele\teamspeak3-server_win64\ts3server_win64.exe] => (Allow) E:\programme & spiele\teamspeak3-server_win64\ts3server_win64.exe
FirewallRules: [{E293C347-C36A-44CF-8D0C-DA20FE9A3530}] => (Block) E:\programme & spiele\teamspeak3-server_win64\ts3server_win64.exe
FirewallRules: [{F7AE1CEF-0C9C-44A3-B147-A8F08C364A44}] => (Block) E:\programme & spiele\teamspeak3-server_win64\ts3server_win64.exe
FirewallRules: [TCP Query User{D4F96556-3D71-4898-89CB-936CC7CDE94B}E:\programme & spiele\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe] => (Allow) E:\programme & spiele\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe
FirewallRules: [UDP Query User{1F542960-63C2-4EBF-9FEF-04602DB95234}E:\programme & spiele\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe] => (Allow) E:\programme & spiele\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe
FirewallRules: [{D174FA6C-F0B1-4915-84DA-E9406DDE2D68}] => (Block) E:\programme & spiele\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe
FirewallRules: [{4BE8F7CC-2DBE-4511-970C-EB50966AB9ED}] => (Block) E:\programme & spiele\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe
FirewallRules: [TCP Query User{FE375233-D0CE-47CD-87B0-F6DCBCE5DAEF}C:\program files\java\jre1.8.0_66\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [UDP Query User{688803F4-46E3-49FF-B499-A5311C827FC7}C:\program files\java\jre1.8.0_66\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{8504B1B3-0614-4BBA-972F-2743DF3B6AE8}] => (Block) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{59F17FF9-C0DE-460C-86F5-4061314142A1}] => (Block) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [TCP Query User{33DA1D94-BB3C-44FE-BA2E-E12FA51C0FBF}C:\program files\java\jre1.8.0_66\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_66\bin\java.exe
FirewallRules: [UDP Query User{3ECF3FF7-C168-4055-8980-564689BF9B19}C:\program files\java\jre1.8.0_66\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_66\bin\java.exe
FirewallRules: [{C037FFF2-F02F-460C-83B9-6C8628AF7827}] => (Block) C:\program files\java\jre1.8.0_66\bin\java.exe
FirewallRules: [{B18B3A32-04A1-41A5-8DDD-D2453F6DBFF8}] => (Block) C:\program files\java\jre1.8.0_66\bin\java.exe
FirewallRules: [{131B4041-8586-4A55-9742-E010D38B4F7E}] => (Allow) E:\Programme & Spiele\gta V\PlayGTAV.exe
FirewallRules: [{14ECD069-402D-4F14-8230-C9112AA5651E}] => (Allow) E:\Programme & Spiele\gta V\PlayGTAV.exe
FirewallRules: [{962D7961-4475-43FB-A72A-D96179C79651}] => (Allow) E:\Programme & Spiele\gta V\PlayGTAV.exe
FirewallRules: [{C4C072FA-607C-45BA-815A-9F4E5807FCFD}] => (Allow) E:\Programme & Spiele\gta V\PlayGTAV.exe
FirewallRules: [TCP Query User{C848974C-BA48-473D-AFC2-94C56D0A5D8C}C:\users\heartel\appdata\local\temp\temp7_u.zip\u1504.exe] => (Allow) C:\users\heartel\appdata\local\temp\temp7_u.zip\u1504.exe
FirewallRules: [UDP Query User{FCB2CF53-EE49-41B5-BDA5-856FA38A2C80}C:\users\heartel\appdata\local\temp\temp7_u.zip\u1504.exe] => (Allow) C:\users\heartel\appdata\local\temp\temp7_u.zip\u1504.exe
FirewallRules: [{F2F39F2B-4FC5-48C3-9FBF-4924F5599FFD}] => (Block) C:\users\heartel\appdata\local\temp\temp7_u.zip\u1504.exe
FirewallRules: [{87E63150-0072-4EF2-AFE0-2D9F4BCE628D}] => (Block) C:\users\heartel\appdata\local\temp\temp7_u.zip\u1504.exe
FirewallRules: [TCP Query User{B78A537D-BAF5-4FF5-A7A1-B47F8511D4D6}C:\users\heartel\appdata\local\temp\temp8_u.zip\u1504.exe] => (Allow) C:\users\heartel\appdata\local\temp\temp8_u.zip\u1504.exe
FirewallRules: [UDP Query User{07719FD5-526F-47C0-9E0F-130923354556}C:\users\heartel\appdata\local\temp\temp8_u.zip\u1504.exe] => (Allow) C:\users\heartel\appdata\local\temp\temp8_u.zip\u1504.exe
FirewallRules: [{F639EFE9-4405-4C07-BECB-D29DE8F6A523}] => (Block) C:\users\heartel\appdata\local\temp\temp8_u.zip\u1504.exe
FirewallRules: [{863F5B60-5346-436C-B82E-97F797ED21CA}] => (Block) C:\users\heartel\appdata\local\temp\temp8_u.zip\u1504.exe
FirewallRules: [TCP Query User{003E6943-7087-4F46-A998-8EE0400CE0A5}C:\users\heartel\appdata\local\temp\temp9_u.zip\u1504.exe] => (Allow) C:\users\heartel\appdata\local\temp\temp9_u.zip\u1504.exe
FirewallRules: [UDP Query User{AF01D6B6-4B7B-4537-AB2B-03047B9DE688}C:\users\heartel\appdata\local\temp\temp9_u.zip\u1504.exe] => (Allow) C:\users\heartel\appdata\local\temp\temp9_u.zip\u1504.exe
FirewallRules: [{DB60DBEE-E15C-4F88-AF05-078FB65209B3}] => (Block) C:\users\heartel\appdata\local\temp\temp9_u.zip\u1504.exe
FirewallRules: [{1FAD335E-E972-4050-BFAE-6E80AE9C1956}] => (Block) C:\users\heartel\appdata\local\temp\temp9_u.zip\u1504.exe
FirewallRules: [TCP Query User{49550DC3-E13E-438F-9BCE-FCE424A2642D}C:\users\heartel\downloads\u\u1504.exe] => (Allow) C:\users\heartel\downloads\u\u1504.exe
FirewallRules: [UDP Query User{91D667F5-D5D2-4244-91A7-1EF189D4C857}C:\users\heartel\downloads\u\u1504.exe] => (Allow) C:\users\heartel\downloads\u\u1504.exe
FirewallRules: [{1AF2B74C-8CAE-4F81-AE7D-D553108EF741}] => (Block) C:\users\heartel\downloads\u\u1504.exe
FirewallRules: [{E9ACABF4-86FB-4A5D-8209-5904D8EF95BF}] => (Block) C:\users\heartel\downloads\u\u1504.exe
FirewallRules: [TCP Query User{743D9313-7B6B-4DEC-B146-423CECDE9456}E:\programme & spiele\gta v\gta5.exe] => (Allow) E:\programme & spiele\gta v\gta5.exe
FirewallRules: [UDP Query User{219A3258-A8A3-43F6-9B8D-EC05BDAFD52C}E:\programme & spiele\gta v\gta5.exe] => (Allow) E:\programme & spiele\gta v\gta5.exe
FirewallRules: [{09A27D03-C22B-4079-9529-13371287465D}] => (Allow) E:\Programme & Spiele\gta V\GTA5.exe
FirewallRules: [{E4CC024B-7F75-406D-91D2-FD93A761A4CC}] => (Allow) E:\Programme & Spiele\gta V\GTA5.exe
FirewallRules: [{3AE33F0B-F21D-4BF4-B64E-8741E9A568EE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{706FB591-6BCE-4BD9-8364-09D876B75964}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{98C0B1E8-497C-4F84-8221-D941ECD938F7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{34D6E57F-03FB-43D6-8F1C-504E97F46E2B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{5DB83AB0-B838-404F-AAAB-E1641A776C92}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{454C04DE-3775-47ED-887D-0635B4DE313E}C:\users\heartel\downloads\plesk-installer.exe] => (Block) C:\users\heartel\downloads\plesk-installer.exe
FirewallRules: [UDP Query User{A3909BB3-AA18-4F89-BF9A-B552523B6735}C:\users\heartel\downloads\plesk-installer.exe] => (Block) C:\users\heartel\downloads\plesk-installer.exe
FirewallRules: [TCP Query User{EFEA0CFE-8506-454B-AFBE-D1D3AF3FCCB1}C:\program files\java\jre1.8.0_71\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_71\bin\java.exe
FirewallRules: [UDP Query User{9C5AEF26-E7CF-40CA-A57B-A7B3B2D91F50}C:\program files\java\jre1.8.0_71\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_71\bin\java.exe
FirewallRules: [{28210005-0079-4596-B0C2-5ABFD084A273}] => (Block) C:\program files\java\jre1.8.0_71\bin\java.exe
FirewallRules: [{2E79C486-C4A9-4B34-A7DF-0D792670D4BF}] => (Block) C:\program files\java\jre1.8.0_71\bin\java.exe
FirewallRules: [TCP Query User{8D685C1B-00D7-457F-A85C-DA978487613D}E:\programme & spiele\goat simulator\binaries\win32\goatgame-win32-shipping.exe] => (Allow) E:\programme & spiele\goat simulator\binaries\win32\goatgame-win32-shipping.exe
FirewallRules: [UDP Query User{BB5E269A-B4FE-471A-9899-844DB3551A20}E:\programme & spiele\goat simulator\binaries\win32\goatgame-win32-shipping.exe] => (Allow) E:\programme & spiele\goat simulator\binaries\win32\goatgame-win32-shipping.exe
FirewallRules: [{FE55CB23-E390-452A-8E32-F3475B7CB26B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B1A5DCE9-9D44-4A44-B19A-48D1ED943BD3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4D151109-4AD9-40A6-AA4D-C8FB1570B694}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{E7A393E9-0D19-4B8A-A94C-2A6FE7B1E1B3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{6AA3F673-1EDF-4E25-86A8-F1CD16F1937C}C:\program files\java\jre1.8.0_73\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_73\bin\java.exe
FirewallRules: [UDP Query User{80612B7E-25A2-4A4D-8D9F-08CA8F18FFA1}C:\program files\java\jre1.8.0_73\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_73\bin\java.exe
FirewallRules: [{423AFB18-0554-4566-BC18-A2694B09AFB3}] => (Block) C:\program files\java\jre1.8.0_73\bin\java.exe
FirewallRules: [{89C395A8-7E34-4C1A-BDF0-D9A4F9EB8E35}] => (Block) C:\program files\java\jre1.8.0_73\bin\java.exe
FirewallRules: [TCP Query User{41E3E6CC-EEE2-4906-84F5-BBDC34DEB6ED}C:\program files (x86)\tmunitedforever\tmforever.exe] => (Allow) C:\program files (x86)\tmunitedforever\tmforever.exe
FirewallRules: [UDP Query User{136CB6EE-2948-4698-913D-2478B7FCE1F6}C:\program files (x86)\tmunitedforever\tmforever.exe] => (Allow) C:\program files (x86)\tmunitedforever\tmforever.exe
FirewallRules: [TCP Query User{766FC13C-14AC-4704-8472-4CA37F91E8E9}E:\programme & spiele\teamspeak3-server_win64\ts3server.exe] => (Allow) E:\programme & spiele\teamspeak3-server_win64\ts3server.exe
FirewallRules: [UDP Query User{2F31C0C3-A6DB-43A0-81D0-68C3CBCC5E5B}E:\programme & spiele\teamspeak3-server_win64\ts3server.exe] => (Allow) E:\programme & spiele\teamspeak3-server_win64\ts3server.exe
FirewallRules: [{729AF89B-FCFD-494F-9AFA-EFC27D90154B}] => (Block) E:\programme & spiele\teamspeak3-server_win64\ts3server.exe
FirewallRules: [{E7964C90-7ACA-4C6F-9FD6-D3A88D8F3F65}] => (Block) E:\programme & spiele\teamspeak3-server_win64\ts3server.exe
FirewallRules: [{0E975B87-4758-4FF1-A68F-F36A98F66409}] => (Allow) C:\Program Files\Internet Explorer\iexplore.exe
FirewallRules: [{74486E12-291C-40A6-986C-7D2C514A32DD}] => (Allow) C:\Program Files\Internet Explorer\iexplore.exe
FirewallRules: [{CAF66744-015C-49E2-AFF0-5A424EE6D84E}] => (Allow) C:\Program Files\Internet Explorer\iexplore.exe
FirewallRules: [{FF7DD450-BBCD-493B-AA0C-44A2F9F310CF}] => (Allow) C:\Program Files\Internet Explorer\iexplore.exe
FirewallRules: [{E29FDFD0-A769-4165-A38A-87B2E974F03E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{9B1E69B3-3073-44C4-A535-A08C1B30B335}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{6A0A1DB6-9A1B-4C62-8A25-D358C3F0D9CE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{058E0C71-23A8-4A11-834E-7437A7D4C546}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [TCP Query User{DE4F746C-C6B2-4AD7-919C-13F66018010E}E:\programme & spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) E:\programme & spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{4CBE08FF-2562-44F4-A83F-CE49F0D9C4D7}E:\programme & spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) E:\programme & spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{A4684907-BA7D-4034-8974-7A0F64C53B1E}] => (Block) E:\programme & spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{F5BA8D82-C838-49E6-B74A-98C961426376}] => (Block) E:\programme & spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{EBB7E101-019E-47CF-AB2E-B5C7C19751E0}C:\program files (x86)\tmunitedforever\tmforever.exe] => (Allow) C:\program files (x86)\tmunitedforever\tmforever.exe
FirewallRules: [UDP Query User{6C3EDC43-081B-4FBB-8B26-269E728B8005}C:\program files (x86)\tmunitedforever\tmforever.exe] => (Allow) C:\program files (x86)\tmunitedforever\tmforever.exe
FirewallRules: [{805AC4B9-1980-4944-B27F-B6177D055CE9}] => (Allow) C:\Users\Heartel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{1AE43292-9913-4FFA-9393-C23B92B4D0BC}] => (Allow) C:\Users\Heartel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{4A4453BF-A14A-44C4-AAC7-4AD0E190C3BB}] => (Allow) C:\Users\Heartel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{3ED9CCAE-DF09-49DF-BD41-C012BC84E1FC}] => (Allow) C:\Users\Heartel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{366FE1D9-9B47-4517-B07B-9699699DE952}] => (Allow) C:\Users\Heartel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E07A66CA-7DC9-4A8C-9B2B-3BD6A8A010D2}] => (Allow) C:\Users\Heartel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{7629CAFC-2C3F-47CD-A770-4D265678AAD5}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{F2E28E53-95EF-436E-8C8A-F339AD89E897}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{244B6633-8DFA-481F-86B8-8EC3FA639706}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{F0C40C7C-98B8-4473-A9A7-EE06CBDD1331}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [TCP Query User{A50044BF-6D3C-4C5D-9DFD-AD99EA4B9E36}E:\programme & spiele\scrap mechanic\release\scrapmechanic.exe] => (Allow) E:\programme & spiele\scrap mechanic\release\scrapmechanic.exe
FirewallRules: [UDP Query User{7308AE96-F8AF-45EB-87A3-58BC784D75BB}E:\programme & spiele\scrap mechanic\release\scrapmechanic.exe] => (Allow) E:\programme & spiele\scrap mechanic\release\scrapmechanic.exe
FirewallRules: [{F049A035-07CD-4B8F-A6F8-1AF94AD3293F}] => (Block) E:\programme & spiele\scrap mechanic\release\scrapmechanic.exe
FirewallRules: [{E87F9583-F223-4F04-9065-719E401AFBBD}] => (Block) E:\programme & spiele\scrap mechanic\release\scrapmechanic.exe
FirewallRules: [TCP Query User{FFEAD25B-9AAC-4B25-AFF8-4528E8DE9479}C:\users\heartel\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\heartel\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{3BC80EC7-23DC-4542-BA5A-042B0E5AB79B}C:\users\heartel\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\heartel\appdata\roaming\spotify\spotify.exe
FirewallRules: [{39CBE839-89E5-4DCA-8DF7-5C3962F94678}] => (Block) C:\users\heartel\appdata\roaming\spotify\spotify.exe
FirewallRules: [{30B5ADFA-9767-43C6-B0A0-388CB1492B87}] => (Block) C:\users\heartel\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{245B8A12-16B8-4FF4-BB7D-17620F445F08}E:\programme & spiele\phantomzeros\phantomzeros.exe] => (Allow) E:\programme & spiele\phantomzeros\phantomzeros.exe
FirewallRules: [UDP Query User{C59127A5-89DF-4AEC-B7DC-109C3A31A0F1}E:\programme & spiele\phantomzeros\phantomzeros.exe] => (Allow) E:\programme & spiele\phantomzeros\phantomzeros.exe
FirewallRules: [{BE0C678D-F9ED-4257-BB44-8C41AAC9689C}] => (Block) E:\programme & spiele\phantomzeros\phantomzeros.exe
FirewallRules: [{2936CC7A-C80B-45A4-ADF8-CE6AE7C6601D}] => (Block) E:\programme & spiele\phantomzeros\phantomzeros.exe
FirewallRules: [TCP Query User{65E1D120-13F5-4593-AC09-E41A86B05208}E:\programme & spiele\magic3deasyview\easyview.exe] => (Allow) E:\programme & spiele\magic3deasyview\easyview.exe
FirewallRules: [UDP Query User{591E33D7-70EC-49E9-9984-DDE8C096631A}E:\programme & spiele\magic3deasyview\easyview.exe] => (Allow) E:\programme & spiele\magic3deasyview\easyview.exe
FirewallRules: [{B26EB633-59AD-43A5-BB24-784A36D35377}] => (Block) E:\programme & spiele\magic3deasyview\easyview.exe
FirewallRules: [{6CB36593-8624-4801-9C2E-807E6EBD2F06}] => (Block) E:\programme & spiele\magic3deasyview\easyview.exe
FirewallRules: [TCP Query User{2FCD6D18-B3E9-4FA2-807B-352D5B6F8FC6}C:\users\heartel\downloads\road-to-ballhalla_www.freegamesdl.net\road-to-ballhalla_www.freegamesdl.net\game\roadtoballhallaue4\binaries\win64\rollplayinggameue4-win64-shipping.exe] => (Allow) C:\users\heartel\downloads\road-to-ballhalla_www.freegamesdl.net\road-to-ballhalla_www.freegamesdl.net\game\roadtoballhallaue4\binaries\win64\rollplayinggameue4-win64-shipping.exe
FirewallRules: [UDP Query User{4D7D304E-4D83-40B2-BAB2-2EDF51302170}C:\users\heartel\downloads\road-to-ballhalla_www.freegamesdl.net\road-to-ballhalla_www.freegamesdl.net\game\roadtoballhallaue4\binaries\win64\rollplayinggameue4-win64-shipping.exe] => (Allow) C:\users\heartel\downloads\road-to-ballhalla_www.freegamesdl.net\road-to-ballhalla_www.freegamesdl.net\game\roadtoballhallaue4\binaries\win64\rollplayinggameue4-win64-shipping.exe
FirewallRules: [{8FE619AE-DFF7-49E4-8609-18B399AD7C46}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{9CB526A5-94D3-4592-B181-88A33FE426B3}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{F512C458-C10A-47CB-9F0A-9E583343B8E7}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{783268B4-466C-45D4-AF0E-B1D719567F64}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{CD9E0534-0BF3-4376-928A-4665342F0F06}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{BED4B398-8AD8-4F9A-A694-805A79DA7146}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{C91859ED-4984-40D6-81F8-154941901818}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{D0865995-8531-4E56-BE72-FE4795090F9F}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{1DE9FEF4-E923-4D1C-B500-F027650664C4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{71641106-0A06-4253-955E-ECD35AAF2DE1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{7CEDCD46-7092-4B0D-84DD-C723B809C516}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{D20E00A2-8196-4BE0-B11B-F3460BCD4E5C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{6C8677FA-BAB8-48B7-B268-C2F873C36DEA}] => (Allow) E:\SteamLibrary\steamapps\common\Battlefield Bad Company 2\BFBC2Game.exe
FirewallRules: [{F783B036-CF16-4965-8382-46F865A811F7}] => (Allow) E:\SteamLibrary\steamapps\common\Battlefield Bad Company 2\BFBC2Game.exe
FirewallRules: [{AB5BED0D-6C21-4AFA-8040-260F75A19252}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{61F10F69-49CC-484B-BE87-A4AA8FA45BA4}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{C66C92CB-CBD8-468B-9BBC-66323C9360E1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{0EFFD869-5E2F-4415-84C4-3AE9B5D4E6CF}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{339C0BCA-3513-4B03-8D92-F40B5FB04BFA}] => (Allow) E:\BF 3\Battlefield 1\bf1Trial.exe
FirewallRules: [{4164C349-6B56-4EE1-A45B-701E82E149AB}] => (Allow) E:\BF 3\Battlefield 1\bf1Trial.exe
FirewallRules: [{97381521-4AF2-43B4-8190-52B98C6555EB}] => (Allow) E:\BF 3\Battlefield 1\bf1.exe
FirewallRules: [{3914EC4D-FA92-4EE7-B94D-60EA0CB28ADB}] => (Allow) E:\BF 3\Battlefield 1\bf1.exe
FirewallRules: [{318F7B37-7F28-40D6-BF51-F2F961B0585F}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe
FirewallRules: [{98300FB0-3AA8-45CA-8BCF-DCBBC42A7C74}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1DA3C6B3-97F1-48C3-B48A-32B34109FD94}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E8C18493-08BD-4344-BDEF-DEB6AEAAB66A}] => (Allow) C:\Program Files (x86)\Ballcine\Application\chrome.exe
FirewallRules: [{60C67BF2-AA82-4C5C-AD51-E833BDCA6A10}] => (Allow) C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe
FirewallRules: [{CCB667D3-6984-42B3-A974-6C97728EF9C9}] => (Allow) C:\Program Files (x86)\Firefox\Firefox.exe
FirewallRules: [{D6B333B3-AADE-4824-B8B8-E1953D13C088}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{08E7578C-360A-46EF-8D08-78BE44609430}] => (Allow) C:\Program Files (x86)\MIO\loader\wdcxwd10ezex-00bn5a0_wd-wcc3f4enzvd2nzvd2.dat
FirewallRules: [{8A0C3582-EA3A-493D-AFA6-1612D7B4D5B9}] => (Allow) C:\Program Files (x86)\MIO\loader\wdcxwd10ezex-00bn5a0_wd-wcc3f4enzvd2nzvd2.dat

==================== Wiederherstellungspunkte =========================


==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: HD Webcam C270
Description: HD Webcam C270
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Logitech
Service: usbaudio
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (04/13/2017 11:06:30 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (04/12/2017 07:13:38 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).

Error: (04/12/2017 07:03:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (04/12/2017 07:00:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (04/12/2017 06:25:17 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\servicing\TrustedInstaller.exe; Beschreibung = Windows Modules Installer; Fehler = 0x80070422).

Error: (04/12/2017 06:18:55 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\servicing\TrustedInstaller.exe; Beschreibung = Windows Modules Installer; Fehler = 0x80070422).

Error: (04/12/2017 06:15:35 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).

Error: (04/12/2017 02:06:32 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (04/11/2017 04:40:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (04/11/2017 04:26:51 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).


Systemfehler:
=============
Error: (04/13/2017 11:06:27 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "UC浏览器基础服务" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (04/13/2017 11:06:27 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Origin Web Helper Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (04/13/2017 11:06:27 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Origin Web Helper Service erreicht.

Error: (04/13/2017 11:04:39 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Apple Mobile Device Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (04/13/2017 11:04:39 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Apple Mobile Device Service erreicht.

Error: (04/12/2017 07:18:38 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Der Server "{3FCB7074-EC9E-4AAF-9BE3-C0E356942366}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (04/12/2017 07:03:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "UC浏览器基础服务" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (04/12/2017 07:03:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Origin Web Helper Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (04/12/2017 07:03:01 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Origin Web Helper Service erreicht.

Error: (04/12/2017 07:02:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Apple Mobile Device Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.


CodeIntegrity:
===================================
  Date: 2017-04-13 11:04:30.398
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\winhttp.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-04-13 11:04:30.299
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\api-ms-win-core-synch-l1-2-0.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-04-13 11:04:30.203
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\api-ms-win-core-synch-l1-2-0.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-04-13 11:04:30.094
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\winhttp.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-04-13 11:04:12.216
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2017-04-13 11:04:12.138
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2017-04-12 19:01:58.469
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2017-04-12 19:01:58.376
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2017-04-12 18:58:34.407
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2017-04-12 18:58:34.329
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 43%
Installierter physikalischer RAM: 8054.65 MB
Verfügbarer physikalischer RAM: 4535.75 MB
Summe virtueller Speicher: 16107.49 MB
Verfügbarer virtueller Speicher: 12195.16 MB

==================== Laufwerke ================================

Drive c: (Boot) (Fixed) (Total:931.41 GB) (Free:802.83 GB) NTFS
Drive e: (Daten) (Fixed) (Total:931.51 GB) (Free:499.51 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: DCADF02B)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F38A4BF1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         

--- --- ---


Nochmals: Vielen Dank!



Ich muss noch anmerken das ich selbst oft das Gefühl habe, dass sich Anwendungen (also diese Adware und so) selbst nach dem Booten oder zwischendurch (wenn sich der Brwoser plötzlich automatisch neustartet) von selbst installieren...

Servus,



du bist mit Adware infiziert. Sie ist lästig, aber nicht gefährlich.

Keine Sorge, wir bekommen das wieder hin, wenn du 1 zu 1 das machst, was ich dir sage.

Aber zuerst eine "unangenehme" Nachricht:




Du hast da mindestens eine illegale/gecrackte Software auf deinem Rechner:
Microsoft Office Professional Plus 2013

Lesestoff:
Illegale Software: Cracks, Keygens und Co

Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html

Es geht weiter, wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.

Ich habe die Deinstallation nun abgeschlossen.

Benötigst du die drei Logs erneut als Beweis?

Servus,

• Starte die FRST erneut. Vergewissere dich, dass vor Addition.txt ein Haken gesetzt ist.
• Setze einen Haken vor Dateiliste 90 Tage und drücke auf Untersuchen.
• FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
• Poste mir beide Logdateien mit deiner nächsten Antwort.

Addition:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15-03-2017
durchgeführt von Heartel (14-04-2017 18:30:13)
Gestartet von C:\Users\Heartel\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2014-12-07 17:40:38)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-4225298673-1622639848-1158892530-500 - Administrator - Disabled)
Gast (S-1-5-21-4225298673-1622639848-1158892530-501 - Limited - Disabled)
Heartel (S-1-5-21-4225298673-1622639848-1158892530-1000 - Administrator - Enabled) => C:\Users\Heartel
HomeGroupUser$ (S-1-5-21-4225298673-1622639848-1158892530-1002 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\uTorrent) (Version: 3.4.7.42330 - BitTorrent Inc.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Adobe Flash Player 24 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Photoshop CS6 Version 13.0.1 (HKLM-x32\...\{A724DC44-6241-42D3-BA57-778B178ABC17}_is1) (Version: 13.0.1 - Adobe Systems, Inc.)
aerosoft's - Berliner S-Bahn Teil 1 (HKLM-x32\...\{2AEB2EFA-477F-4F3F-9864-356AC2141F45}) (Version:  - )
aerosoft's - High Speed Trains (HKLM-x32\...\{C98DB470-A8FD-4C84-9B21-DF222199DD66}) (Version:  - )
aerosoft's - Hoellentalbahn (HKLM-x32\...\{82D7E57E-D9F0-4C2E-AA57-3E143D89F515}) (Version:  - )
Aerosoft's - Strassenbahn Berlin-Koepenick (HKLM-x32\...\{681734DF-28F0-4842-855C-91CCE610FA67}) (Version: 1.10 - Aerosoft)
Akai Professional MPX File Conversion Utility (HKLM-x32\...\MPXFileConversionUtility) (Version:  - )
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ASUS Xonar DX Audio Driver (HKLM\...\C-Media Oxygen HD Audio Driver) (Version:  - )
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield: Bad Company 2 (HKLM\...\Steam App 24960) (Version:  - DICE)
Battlefield™ 1 (HKLM-x32\...\{335B50BC-6130-4BAF-9A6A-F1561270587B}) (Version: 1.0.47.30570 - Electronic Arts)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.6.100.6363 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.00 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5931 - CDBurnerXP)
Cinema 4D version R12 (HKLM-x32\...\{7D9D8134-9FA3-4FFF-ADA1-BF609F29997A}_is1) (Version: R12 - Salat Production)
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version:  - Valve)
CPUID CPU-Z 1.75 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
Creative Systeminformationen (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DDFCreator 2.2.1 (HKLM-x32\...\DDFCreator_2.2.1) (Version: 2.2.1 - DMXControl Projects e.V.)
DDFCreator 3.0 (HKLM-x32\...\DDFCreator_3.0) (Version: 3.0 - DMXControl Projects e.V.)
DisplayFusion 7.3.3 (HKLM-x32\...\B076073A-5527-4f4f-B46B-B10692277DA2_is1) (Version: 7.3.3.0 - Binary Fortress Software)
DMXControl 2.12.2 (HKLM-x32\...\DMXControl) (Version: 2.12.2 - PopSoft)
Eisenbahn.exe Professional 6.0 (HKLM-x32\...\{6B249FAC-DD1A-405F-A8A2-AA6A2252ED32}) (Version: 6.00.0000 - Trend)
Emergency Download Driver (HKLM-x32\...\{3F0F5AB4-C9CE-4226-8393-E9CFF8369D9D}) (Version: 1.1.16.1526 - Microsoft)
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.0.5 - SCS Software)
FileZilla Client 3.23.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.23.0.2 - Tim Kosse)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Goat Simulator (HKLM-x32\...\R29hdFNpbXVsYXRvcg==_is1) (Version: 1 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 57.0.2987.133 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 5.41.3.0 - Google)
Google Update Helper (x32 Version: 1.3.33.3 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Greenfoot (HKLM-x32\...\{8C838B70-3A71-41E8-91A6-4ADCF2E483D0}) (Version: 2.4.2 - Greenfoot Team)
HP Support Solutions Framework (HKLM-x32\...\{D549B5E2-DBE8-4190-ABA5-71106264398C}) (Version: 12.5.32.203 - HP Inc.)
Human Fall Flat (HKLM-x32\...\1203767418_is1) (Version: 2.0.0.2 - GOG.com)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3960 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
Island Flight Simulator (HKLM-x32\...\Island Flight SimulatorFinal) (Version: Final - Game Owl)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Java SE Development Kit 8 Update 101 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180101}) (Version: 8.0.1010.13 - Oracle Corporation)
Java-Editor 13.36, 2016.08.06 (HKLM-x32\...\{65FBA21B-7F80-4E4E-B275-0958D2648F94}_is1) (Version:  - Gerhard Röhner)
Lightshot-5.4.0.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.1 - Skillbrains)
Lumia UEFI Blue Driver (HKLM-x32\...\{9D2A75FE-8CE1-4297-AEC1-A097D47BACE9}) (Version: 1.1.10.1526 - Microsoft)
Magic 3D Easy View (HKLM-x32\...\Magic 3D Easy View_is1) (Version:  - Nicolaudie)
ManyCam 4.0.52 (HKLM-x32\...\ManyCam) (Version: 4.0.52 - Visicom Media Inc.)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
Microsoft Train Simulator (HKLM-x32\...\Train Simulator 1.0) (Version:  - )
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.0 (HKLM-x32\...\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}) (Version: 3.0.11010.0 - Microsoft Corporation)
MIDI-OX (HKLM-x32\...\{A6457851-5EA9-45B0-AF1D-D2A0A4781CFB}) (Version: 7.02.372 - MIDIOX Computing)
Minecraft Note Block Studio version 3.2.1 (HKLM-x32\...\{84077DA9-3075-4AE5-BC82-345202B8CD4F}_is1) (Version: 3.2.1 - David Norgren)
Mini Metro (HKLM-x32\...\1434554947_is1) (Version: 2.0.0.4 - GOG.com)
Mozilla Firefox 52.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 52.0.2 (x86 en-US)) (Version: 52.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.2.6291 - Mozilla)
Mozilla Thunderbird 45.2.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.2.0 (x86 de)) (Version: 45.2.0 - Mozilla)
MSI GamingApp (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 1.0.0.18 - MSI)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.6 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.62 - NVIDIA Corporation)
NVIDIA Grafiktreiber 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.62 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OnePlus USB Drivers 1.00 (HKLM-x32\...\OnePlus USB Drivers 1.00) (Version: 1.00 - OnePlus, Inc)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 10.3.3.1921 - Electronic Arts, Inc.)
PhantomZerOS 7.9 MD (HKLM-x32\...\PhantomZerOS_is1) (Version:  - Zero 88)
Plotagon (HKLM-x32\...\Plotagon 1.10.0) (Version: 1.10.0 - Plotagon)
Plotagon (x32 Version: 1.10.0 - Plotagon) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.988 - Even Balance, Inc.)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 7.78.1218.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7200 - Realtek Semiconductor Corp.)
Rechnungsverwalter (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Rechnungsverwalter) (Version: 2.10.43 - Temia Consulting)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.0.5 - Rockstar Games)
RollerCoaster Tycoon 3 (HKLM-x32\...\RollerCoaster Tycoon 3_is1) (Version:  - Atari)
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.3.5 - NVIDIA Corporation) Hidden
SiudiDriver Version 2.3 (HKLM\...\SiudiDriver_is1) (Version: 2.3 - LightingSoft AG)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
Sound Blaster Audigy Fx (HKLM-x32\...\{77CE1865-F3B9-4B6D-A558-28674AE7787E}) (Version: 1.00.06 - Creative Technology Limited)
Sound Blaster Audigy Fx Extras (HKLM-x32\...\{52272D09-08E0-4A57-BC14-BC09F5D7AE26}) (Version: 1.0 - Creative Technology Limited)
Soundcloud Playlist Downloader (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\35cf6f8efa605d1f) (Version: 1.0.0.36 - Soundcloud Playlist Downloader)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Spotify (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Spotify) (Version: 1.0.52.725.g943b26a8 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.72365 - TeamViewer)
Technitium MAC Address Changer v6.0 (HKLM-x32\...\TMACv6.0) (Version: 6.0 - Technitium)
TmUnitedForever (HKLM-x32\...\TmUnitedForever_is1) (Version:  - Nadeo)
Trucks And Trailers (HKLM-x32\...\Trucks And Trailers_is1) (Version: Trucks And Trailers - Fenixx--Repack--(21.06.2011))
TS3index Bot-Manager (HKLM\...\TS3index-MusicBot) (Version: 1.0.4.1 - TS3index.com GbR)
Unity Web Player (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\UnityWebPlayer) (Version: 5.3.2f1 - Unity Technologies ApS)
VBCABLE, The Virtual Audio Cable (HKLM\...\VB:VBCABLE {87459874-1236-4469}) (Version:  - VB-Audio Software)
Vegas Pro 13.0 (64-bit) (HKLM\...\{CE92F061-BFBC-11E3-8FF3-F04DA23A5C58}) (Version: 13.0.290 - Sony)
VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 3.79 - NCH Software)
Virtual Audio Cable 4.9 (HKLM\...\Virtual Audio Cable 4.9) (Version:  - )
VirtualDJ 8 (HKLM-x32\...\{5A89A21C-6391-4AFC-8502-66F6F7250125}) (Version: 8.0.2325.0 - Atomix Productions)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.2 - VideoLAN)
War Thunder (HKLM-x32\...\Steam App 236390) (Version:  - Gaijin Entertainment)
Windows Device Recovery Tool 3.1.6 (HKLM-x32\...\{2d723982-37f4-441b-8702-49a3cb4b38bb}) (Version: 3.1.6 - Microsoft)
Windows Phone app for desktop (HKLM-x32\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation)
Windows-Treiberpaket - OnePlus, Inc. (WinUSB) AndroidUsbDeviceClass  (05/24/2012 6.0.0000.00000) (HKLM\...\59AFF6524BE5C0983F2711DEB8D25D511D4F4924) (Version: 05/24/2012 6.0.0000.00000 - OnePlus, Inc.)
WinUsb CoInstallers (HKLM-x32\...\{9755918A-CDF8-4F1E-8453-6359CF1A330A}) (Version: 1.1.12.1526 - Microsoft)
WinUSB Compatible ID Drivers (HKLM-x32\...\{A4A0B236-6046-4CAB-8177-1EAF61112C75}) (Version: 1.1.11.1526 - Microsoft)
WinUSB Drivers ext (HKLM-x32\...\{29BAAF65-09E5-4F52-8D15-2FAF2E23A8DC}) (Version: 1.1.24.1544 - Microsoft)
WorldPainter 2.2.6 (HKLM\...\4144-4862-0472-7103) (Version: 2.2.6 - pepsoft.org)
X11_GMouse (HKLM-x32\...\{88A3CF84-961E-4F26-B7E5-A9485BC33EBD}) (Version: 2.04.0004 - Masione)
YAC(Yet Another Cleaner!) (HKLM-x32\...\iSafe) (Version:  - ELEX DO BRASIL PARTICIPAÇÕES LTDA) <==== ACHTUNG

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{2F5DA951-82C6-471e-90BD-CAB15552A932}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{5b55a44a-d008-49aa-9234-86fb7709bc0a}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{8C46158B-D978-483C-A312-16EE5013BE04}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll (Google Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {189CEE60-A660-4CB7-84FB-200524A39AD8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-02-02] (Adobe Systems Incorporated)
Task: {1C786F0C-EBED-4A4B-91CC-059B211A073D} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2016-07-01] ()
Task: {2B2B3DBD-C788-4C09-8306-5F779095C550} - \AutoKMSCustom -> Keine Datei <==== ACHTUNG
Task: {2E6A44C6-3B83-4DA5-A728-F9AA00B949D5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.)
Task: {3F09F082-8437-42C1-AD0B-6699FDAE2534} - System32\Tasks\{A25D09F0-63B4-47E1-996F-57F00119FC58} => pcalua.exe -a "C:\Users\Heartel\Downloads\Crysis 3 - InstallShield Wizard.exe" -d C:\Users\Heartel\Downloads
Task: {45BAE16E-A565-402F-BC4B-683824183D1A} - System32\Tasks\{E1843C6C-14F0-4F89-ACB4-52062D6CE11B} => E:\Exeter & acc\Minecraft Account Generator\Minecraft Account Generator.exe 
Task: {4DEFEE0F-9A01-4683-AA4D-168492F65B63} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {5871B1A8-D797-4FAD-B7E3-4349753EE4EB} - System32\Tasks\{FD611095-058E-4F84-94FA-1B4E1D22B686} => pcalua.exe -a C:\Users\Heartel\Downloads\plesk-installer.exe -d C:\Users\Heartel\Downloads
Task: {6156367F-5D7E-4A5E-A77A-0959FA1CB9C6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-12-21] (HP Inc.)
Task: {633DEE98-8608-42BD-A3E2-D73723BD0913} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()
Task: {65250479-C676-47FC-984A-E81063D8F267} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-11-21] (Piriform Ltd)
Task: {7542B224-86E3-45E8-96EE-8CA5F76EAD93} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
Task: {86E50960-71EF-4440-9801-6EC92496E2A8} - System32\Tasks\{09C0C51B-8C8E-4D47-BBEC-4EFCB188B86F} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{681734DF-28F0-4842-855C-91CCE610FA67}\Setup.exe" -c -runfromtemp -l0x0007 -uninst -removeonly
Task: {A1D2368B-76B8-422B-B3C1-52A4069DA1EA} - System32\Tasks\Jernercult Verfier => C:\Program Files (x86)\Chalisy\phierk.exe 
Task: {AAD8C506-4362-48CC-AAAE-BF4843B4330E} - System32\Tasks\update-S-1-5-21-4225298673-1622639848-1158892530-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()
Task: {CC6C5E45-FC6D-4DB9-A722-E285414872F9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-22] (Google Inc.)
Task: {CDB318FF-EB4B-449E-A3BF-17B579F7E1DD} - System32\Tasks\{FE4CBB08-7824-4E6D-84A0-8B1ADB91A110} => E:\Exeter & acc\Minecraft Account Generator\Minecraft Account Generator.exe 
Task: {D941C3A7-1A5E-4C74-91A9-874B42C467E1} - System32\Tasks\UCBrowserUpdater => C:\Program Files (x86)\UCBrowser\Application\update_task.exe  <==== ACHTUNG
Task: {DF02501A-56C8-4802-B0D2-A7284FE0AE8F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4225298673-1622639848-1158892530-1000UA => C:\Users\Heartel\AppData\Local\Google\Update\GoogleUpdate.exe [2015-07-06] (Google Inc.)
Task: {DFD323A8-CFB0-4209-A5C4-3BFD31F4CF71} - \Mighty Defrag Logon -> Keine Datei <==== ACHTUNG
Task: {E0B65604-F6E5-4164-85B0-99730E64924A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4225298673-1622639848-1158892530-1000Core => C:\Users\Heartel\AppData\Local\Google\Update\GoogleUpdate.exe [2015-07-06] (Google Inc.)
Task: {E2E1414C-E3CD-4221-A6E4-C64E04A654FD} - \Mighty Defrag -> Keine Datei <==== ACHTUNG
Task: {E5441460-5ACF-4DE7-B9E6-9E49FAEC84EA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-11] (Adobe Systems Incorporated)
Task: {EC177DA1-61F4-446C-937A-FA763826AA16} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-22] (Google Inc.)
Task: {F3CB46DC-D864-4295-800A-2843CAF92FED} - System32\Tasks\{1CEA907F-8EE3-45B5-9F3A-627E99128B77} => pcalua.exe -a "C:\Program Files (x86)\Creative\Sound Blaster Audigy Fx\Program\Setup.exe" -d "C:\Program Files (x86)\Creative\Sound Blaster Audigy Fx\Program"

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\UCBrowserUpdater.job => C:\Program Files (x86)\UCBrowser\Application\update_task.exe <==== ACHTUNG
Task: C:\Windows\Tasks\update-S-1-5-21-4225298673-1622639848-1158892530-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnet Eхplоrеr.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.erolpxei.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Online Help.lnk -> hxxp://www.virtualdj.com/wiki
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\www.virtualdj.com.lnk -> hxxp://www.virtualdj.com
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Intеrnеt Ехрlorеr (Nо Add-ons).lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.erolpxei.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Ballcine\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gооgle Chrоmе.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.emorhc.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Lаunсh Intеrnеt Eхрlоrer Вrоwser.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.erolpxei.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Ballcine\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gооglе Сhrоmе.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.emorhc.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Моzilla Firefох.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.xoferif.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Google Chrome.lnk -> C:\Program Files (x86)\Ballcine\Application\chrome.exe (Google Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооgle Сhrome.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.emorhc.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Мozillа Firеfoх.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.xoferif.bat (Keine Datei) <===== Cyrillic

ShortcutWithArgument: C:\Users\Heartel\Desktop\firefox - Verknüpfung.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491908242&z=e069448fc1b13c52303b567g0z1tag0tceab8o1zaz&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491908242&z=e069448fc1b13c52303b567g0z1tag0tceab8o1zaz&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491908242&z=e069448fc1b13c52303b567g0z1tag0tceab8o1zaz&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\firefox - Verknüpfung.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491908242&z=e069448fc1b13c52303b567g0z1tag0tceab8o1zaz&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9b4132eb14cd54df\Google Chrome.lnk -> C:\Program Files (x86)\Ballcine\Application\chrome.exe (Google Inc.) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Ballcine\Application\chrome.exe (Google Inc.) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\Google Chrome.lnk -> C:\Program Files (x86)\Ballcine\Application\chrome.exe (Google Inc.) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491908242&z=e069448fc1b13c52303b567g0z1tag0tceab8o1zaz&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.ourluckysites.com/?type=sc&ts=1491908242&z=e069448fc1b13c52303b567g0z1tag0tceab8o1zaz&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2017-02-19 19:16 - 2017-04-14 11:17 - 00625272 _____ () C:\Windows\System32\NetUtils2016.dll
2016-01-23 22:14 - 2015-07-23 03:31 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-02-19 19:15 - 2017-02-19 19:15 - 00307712 _____ () C:\Program Files (x86)\Jernercult Verfier\local64spl.dll
2016-05-16 18:18 - 2016-05-02 07:54 - 00369208 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-05-16 18:18 - 2016-05-02 07:54 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-05-16 18:18 - 2016-05-02 07:55 - 03613240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-01-23 22:14 - 2016-05-02 07:55 - 00289848 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-12-30 17:20 - 2016-12-30 17:20 - 00075064 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2016-12-30 17:20 - 2016-12-30 19:09 - 00215128 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2016-05-16 18:18 - 2016-05-02 07:55 - 01990200 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-05-16 18:18 - 2016-05-02 07:55 - 02667576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-05-16 18:18 - 2016-05-02 07:55 - 01842232 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-01-24 04:41 - 2016-05-02 07:55 - 00208952 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2016-05-16 18:18 - 2016-05-02 07:54 - 00035896 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-05-16 18:18 - 2016-05-02 07:54 - 00921656 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2016-12-06 18:17 - 2016-12-06 18:17 - 00052400 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2015-04-15 22:13 - 2015-04-15 22:13 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2017-08-02 21:19 - 2007-12-19 04:41 - 00020480 ____R () C:\Windows\system\CMGxMon.exe
2017-08-02 21:18 - 2008-01-09 08:18 - 00090112 ____R () C:\Program Files\ASUS Xonar DX Audio\Customapp\MXMon.exe
2014-02-28 11:14 - 2017-01-18 15:57 - 00176408 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll
2014-08-04 15:43 - 2017-01-18 15:57 - 00107288 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2014-08-04 15:43 - 2017-01-18 15:57 - 00118040 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2014-08-04 15:46 - 2017-01-18 15:57 - 00319768 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2014-08-04 15:46 - 2017-01-18 15:57 - 00486680 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-11-22 02:03 - 2014-11-22 02:03 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2017-03-31 17:07 - 2016-05-23 04:37 - 00065696 ____N () C:\Program Files (x86)\Elex-tech\YAC\zlib1.dll
2014-03-20 12:43 - 2014-03-20 12:43 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2016-01-23 22:14 - 2016-05-02 08:02 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2017-03-31 17:07 - 2016-05-23 04:37 - 00179200 ____N () C:\Program Files (x86)\Elex-tech\YAC\libpng.dll
2017-08-02 21:18 - 2007-12-17 13:05 - 00323584 ____R () C:\Program Files\ASUS Xonar DX Audio\CustomApp\cmdevice.dll
2015-03-20 22:26 - 2017-03-10 02:13 - 00674592 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-03-20 22:26 - 2016-09-01 03:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-03-20 22:26 - 2016-09-01 03:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-03-20 22:26 - 2016-09-01 03:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2015-03-20 22:26 - 2017-03-23 02:52 - 02465056 _____ () C:\Program Files (x86)\Steam\video.dll
2015-03-20 22:26 - 2016-01-27 09:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-03-20 22:26 - 2016-01-27 09:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-03-20 22:26 - 2016-01-27 09:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-03-20 22:26 - 2016-01-27 09:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-03-20 22:26 - 2016-01-27 09:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2015-03-20 22:26 - 2017-03-31 00:46 - 00848672 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-12-25 16:00 - 2016-07-05 00:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2017-01-30 13:52 - 2017-01-30 13:52 - 01926632 ____R () C:\Program Files (x86)\Skype\Phone\roottools.dll
2016-12-25 16:01 - 2017-01-30 23:41 - 68875552 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2015-03-20 22:26 - 2017-03-23 02:52 - 00383776 _____ () C:\Program Files (x86)\Steam\steam.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Windows\system32\drivers:ucdrv-x64.sys [25444]
AlternateDataStreams: C:\Windows\system32\drivers:x64 [371912]
AlternateDataStreams: C:\Windows\system32\drivers:x86 [1214242]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\localhost -> localhost

==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2017-02-19 19:37 - 00002185 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 cpm.paneladmin.pro
127.0.0.1 publisher.hmdiadmingate.xyz
127.0.0.1 distribution.hmdiadmingate.xyz
127.0.0.1 hmdicrewtracksystem.xyz
127.0.0.1 beautifllink.xyz
127.0.0.1 cpm.paneladmin.pro
127.0.0.1 publisher.hmdiadmingate.xyz
127.0.0.1 distribution.hmdiadmingate.xyz
127.0.0.1 hmdicrewtracksystem.xyz
127.0.0.1 beautifllink.xyz
127.0.0.1 cpm.paneladmin.pro
127.0.0.1 publisher.hmdiadmingate.xyz
127.0.0.1 distribution.hmdiadmingate.xyz
127.0.0.1 hmdicrewtracksystem.xyz
127.0.0.1 beautifllink.xyz

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Heartel\AppData\Local\DisplayFusion\Wallpaper_2
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
MSCONFIG\startupreg: EaseUS Cleanup => "E:\Programme & Spiele\EaseUS Partition Master 11.0\bin\CleanUpUI.exe" 10 300
MSCONFIG\startupreg: EaseUS EPM tray => E:\Programme & Spiele\EaseUS Partition Master 11.0\bin\EpmNews.exe
MSCONFIG\startupreg: Gaijin.Net Agent => "C:\Users\Heartel\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe"
MSCONFIG\startupreg: Google Update => C:\Users\Heartel\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Logitech Download Assistant => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
MSCONFIG\startupreg: ShadowPlay => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Spotify => "C:\Users\Heartel\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Heartel\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [TCP Query User{BFFA6BC7-C83F-4F09-BC81-A02BFB8EDCA8}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{ADAC7221-D7E0-4E23-B278-B8082DFC919A}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [TCP Query User{3FBF689F-227E-402D-A8C1-28AC216FB28E}E:\crysis 3\bin32\crysis3.exe] => (Allow) E:\crysis 3\bin32\crysis3.exe
FirewallRules: [UDP Query User{78C0FAB7-B56E-437C-9F13-890D77D89AB6}E:\crysis 3\bin32\crysis3.exe] => (Allow) E:\crysis 3\bin32\crysis3.exe
FirewallRules: [{3EB34205-9BDF-44ED-9D2C-4F3E2C7C123C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D7447A74-33D0-48D7-9FBA-A4A979D18910}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{120DB67A-AE64-4904-84EE-676E80A1601B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{73BFC15A-CB49-46B7-8EFF-293FEAC46860}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{EDAC3D01-FE2C-4F0E-8D91-7FF35F68999E}C:\program files (x86)\virtualdj\virtualdj8.exe] => (Allow) C:\program files (x86)\virtualdj\virtualdj8.exe
FirewallRules: [UDP Query User{18A49D1C-41F2-465B-B66A-49D3E9A2EF51}C:\program files (x86)\virtualdj\virtualdj8.exe] => (Allow) C:\program files (x86)\virtualdj\virtualdj8.exe
FirewallRules: [TCP Query User{AB255F22-1778-4591-96A7-0824A4807429}C:\program files (x86)\virtualdj\virtualdj8.exe] => (Allow) C:\program files (x86)\virtualdj\virtualdj8.exe
FirewallRules: [UDP Query User{759CE62C-6E84-42DC-8A56-C469E14A61C6}C:\program files (x86)\virtualdj\virtualdj8.exe] => (Allow) C:\program files (x86)\virtualdj\virtualdj8.exe
FirewallRules: [TCP Query User{4E6698A6-C59F-4243-B003-57A3D05E6A16}C:\slmev\easyview.exe] => (Allow) C:\slmev\easyview.exe
FirewallRules: [UDP Query User{B116D314-E3A5-46F0-94C9-2E54D514443A}C:\slmev\easyview.exe] => (Allow) C:\slmev\easyview.exe
FirewallRules: [TCP Query User{8BF28753-D5D3-4EF8-985C-A410D703A63C}C:\program files (x86)\ddfcreator3\ddfcreator3.exe] => (Allow) C:\program files (x86)\ddfcreator3\ddfcreator3.exe
FirewallRules: [UDP Query User{F70237F1-546D-4CC3-AAA6-5324ACF1B2E2}C:\program files (x86)\ddfcreator3\ddfcreator3.exe] => (Allow) C:\program files (x86)\ddfcreator3\ddfcreator3.exe
FirewallRules: [{613FAAFF-7CC1-4ED5-B67E-A851E0487441}] => (Allow) E:\BF 3\Battlefield 3\bf3.exe
FirewallRules: [{80A4B577-D24D-48E4-AC59-931BF33C1792}] => (Allow) E:\BF 3\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{E648FF54-D998-43C0-A660-9AC7091CE975}C:\slmev\easyview.exe] => (Allow) C:\slmev\easyview.exe
FirewallRules: [UDP Query User{D1AF2CA6-D6E5-4657-8CB9-E177562D2BF3}C:\slmev\easyview.exe] => (Allow) C:\slmev\easyview.exe
FirewallRules: [{A82035CF-5B1F-45A7-9EC8-D2F1B16C72AC}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{68B25799-CA1C-461C-8A16-9132665D169C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{100833A2-40A5-402E-A307-3DDCE54975FC}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{3B514394-0B05-42B9-A4C8-4557909EBA29}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{2F36DADF-3CE2-443B-B3AF-2C6E62E77D6C}] => (Allow) E:\SteamLibrary\steamapps\common\War Thunder\launcher.exe
FirewallRules: [{2F4FFC96-C191-4814-A16D-21D7F742C095}] => (Allow) E:\SteamLibrary\steamapps\common\War Thunder\launcher.exe
FirewallRules: [TCP Query User{B1D7A997-5060-4831-801B-FCE24D91F11D}E:\steamlibrary\steamapps\common\war thunder\aces.exe] => (Allow) E:\steamlibrary\steamapps\common\war thunder\aces.exe
FirewallRules: [UDP Query User{5B625FFE-C1B7-48A3-B899-C647934B6DC2}E:\steamlibrary\steamapps\common\war thunder\aces.exe] => (Allow) E:\steamlibrary\steamapps\common\war thunder\aces.exe
FirewallRules: [TCP Query User{CB3E2650-D238-48A5-B250-20F989EE3229}E:\programme & spiele\cubeworld\server.exe] => (Allow) E:\programme & spiele\cubeworld\server.exe
FirewallRules: [UDP Query User{EE0F3143-39ED-4907-90EB-9D9011D52D25}E:\programme & spiele\cubeworld\server.exe] => (Allow) E:\programme & spiele\cubeworld\server.exe
FirewallRules: [TCP Query User{A6E981B4-4049-46F1-B06C-B7EB48BD3774}C:\program files\unity\editor\unity.exe] => (Allow) C:\program files\unity\editor\unity.exe
FirewallRules: [UDP Query User{1773D5C0-9937-4D21-A76A-E1933DB79516}C:\program files\unity\editor\unity.exe] => (Allow) C:\program files\unity\editor\unity.exe
FirewallRules: [{9277BEC1-B6CC-4837-B936-363D469E1EDD}] => (Block) C:\program files\unity\editor\unity.exe
FirewallRules: [{A7642725-BBC5-4039-A406-BFD9E37C7ADD}] => (Block) C:\program files\unity\editor\unity.exe
FirewallRules: [TCP Query User{49539AB8-BDD5-4EBD-ABA8-1F782A99CAAF}C:\slmev\tools.exe] => (Allow) C:\slmev\tools.exe
FirewallRules: [UDP Query User{32F6D9BB-4552-4BC7-830C-D3D33FA4AC90}C:\slmev\tools.exe] => (Allow) C:\slmev\tools.exe
FirewallRules: [{0F58C7E6-8E71-41EA-97EC-0806E402AF8F}] => (Block) C:\slmev\tools.exe
FirewallRules: [{7E63DE4F-76AF-45D7-BFC5-088A87BEF3A3}] => (Block) C:\slmev\tools.exe
FirewallRules: [{D0578FFC-B62A-4796-80B2-23BE75F8DD28}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{C9B12236-3BFC-4E6A-B310-9AE861075A75}C:\program files (x86)\greenfoot\greenfoot.exe] => (Allow) C:\program files (x86)\greenfoot\greenfoot.exe
FirewallRules: [UDP Query User{B8090E58-C5A1-42B3-8D3F-D7CF6ED72953}C:\program files (x86)\greenfoot\greenfoot.exe] => (Allow) C:\program files (x86)\greenfoot\greenfoot.exe
FirewallRules: [TCP Query User{63586EC8-D6B4-4E1D-9F2E-0C0E6BC3FB60}C:\program files (x86)\greenfoot\jdk\jre\bin\java.exe] => (Allow) C:\program files (x86)\greenfoot\jdk\jre\bin\java.exe
FirewallRules: [UDP Query User{0B8E62B8-191D-4618-94B6-423BBDCF2396}C:\program files (x86)\greenfoot\jdk\jre\bin\java.exe] => (Allow) C:\program files (x86)\greenfoot\jdk\jre\bin\java.exe
FirewallRules: [{3F6A2D1F-5B81-449D-AA89-DF3EA683491F}] => (Block) C:\program files (x86)\greenfoot\jdk\jre\bin\java.exe
FirewallRules: [{A8E58174-39F3-477A-A5AF-B5A016A0888D}] => (Block) C:\program files (x86)\greenfoot\jdk\jre\bin\java.exe
FirewallRules: [{ADE76328-ED82-491E-9AC7-12DC255D1A67}] => (Block) C:\program files (x86)\greenfoot\greenfoot.exe
FirewallRules: [{F9F73C29-63F3-4F54-817D-48454952B35C}] => (Block) C:\program files (x86)\greenfoot\greenfoot.exe
FirewallRules: [TCP Query User{0E1E7894-5A36-4EC0-8381-B27D62B3E217}C:\users\heartel\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\heartel\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{24728204-DCC0-4AFB-8776-DB4742CB5F4A}C:\users\heartel\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\heartel\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{CE726153-6CD9-4CEC-92A6-782D2067D0AF}] => (Block) C:\users\heartel\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{18CC009E-86DA-4FF9-A244-AC9F254360BD}] => (Block) C:\users\heartel\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{3326E89B-2AE1-4AFC-B397-404E2ECD93B7}E:\programme & spiele\teamspeak3-server_win64\ts3server_win64.exe] => (Allow) E:\programme & spiele\teamspeak3-server_win64\ts3server_win64.exe
FirewallRules: [UDP Query User{E07FD9CB-A2D5-4F48-ABFC-1716D302A219}E:\programme & spiele\teamspeak3-server_win64\ts3server_win64.exe] => (Allow) E:\programme & spiele\teamspeak3-server_win64\ts3server_win64.exe
FirewallRules: [{E293C347-C36A-44CF-8D0C-DA20FE9A3530}] => (Block) E:\programme & spiele\teamspeak3-server_win64\ts3server_win64.exe
FirewallRules: [{F7AE1CEF-0C9C-44A3-B147-A8F08C364A44}] => (Block) E:\programme & spiele\teamspeak3-server_win64\ts3server_win64.exe
FirewallRules: [TCP Query User{D4F96556-3D71-4898-89CB-936CC7CDE94B}E:\programme & spiele\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe] => (Allow) E:\programme & spiele\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe
FirewallRules: [UDP Query User{1F542960-63C2-4EBF-9FEF-04602DB95234}E:\programme & spiele\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe] => (Allow) E:\programme & spiele\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe
FirewallRules: [{D174FA6C-F0B1-4915-84DA-E9406DDE2D68}] => (Block) E:\programme & spiele\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe
FirewallRules: [{4BE8F7CC-2DBE-4511-970C-EB50966AB9ED}] => (Block) E:\programme & spiele\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe
FirewallRules: [TCP Query User{FE375233-D0CE-47CD-87B0-F6DCBCE5DAEF}C:\program files\java\jre1.8.0_66\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [UDP Query User{688803F4-46E3-49FF-B499-A5311C827FC7}C:\program files\java\jre1.8.0_66\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{8504B1B3-0614-4BBA-972F-2743DF3B6AE8}] => (Block) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{59F17FF9-C0DE-460C-86F5-4061314142A1}] => (Block) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [TCP Query User{33DA1D94-BB3C-44FE-BA2E-E12FA51C0FBF}C:\program files\java\jre1.8.0_66\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_66\bin\java.exe
FirewallRules: [UDP Query User{3ECF3FF7-C168-4055-8980-564689BF9B19}C:\program files\java\jre1.8.0_66\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_66\bin\java.exe
FirewallRules: [{C037FFF2-F02F-460C-83B9-6C8628AF7827}] => (Block) C:\program files\java\jre1.8.0_66\bin\java.exe
FirewallRules: [{B18B3A32-04A1-41A5-8DDD-D2453F6DBFF8}] => (Block) C:\program files\java\jre1.8.0_66\bin\java.exe
FirewallRules: [{131B4041-8586-4A55-9742-E010D38B4F7E}] => (Allow) E:\Programme & Spiele\gta V\PlayGTAV.exe
FirewallRules: [{14ECD069-402D-4F14-8230-C9112AA5651E}] => (Allow) E:\Programme & Spiele\gta V\PlayGTAV.exe
FirewallRules: [{962D7961-4475-43FB-A72A-D96179C79651}] => (Allow) E:\Programme & Spiele\gta V\PlayGTAV.exe
FirewallRules: [{C4C072FA-607C-45BA-815A-9F4E5807FCFD}] => (Allow) E:\Programme & Spiele\gta V\PlayGTAV.exe
FirewallRules: [TCP Query User{C848974C-BA48-473D-AFC2-94C56D0A5D8C}C:\users\heartel\appdata\local\temp\temp7_u.zip\u1504.exe] => (Allow) C:\users\heartel\appdata\local\temp\temp7_u.zip\u1504.exe
FirewallRules: [UDP Query User{FCB2CF53-EE49-41B5-BDA5-856FA38A2C80}C:\users\heartel\appdata\local\temp\temp7_u.zip\u1504.exe] => (Allow) C:\users\heartel\appdata\local\temp\temp7_u.zip\u1504.exe
FirewallRules: [{F2F39F2B-4FC5-48C3-9FBF-4924F5599FFD}] => (Block) C:\users\heartel\appdata\local\temp\temp7_u.zip\u1504.exe
FirewallRules: [{87E63150-0072-4EF2-AFE0-2D9F4BCE628D}] => (Block) C:\users\heartel\appdata\local\temp\temp7_u.zip\u1504.exe
FirewallRules: [TCP Query User{B78A537D-BAF5-4FF5-A7A1-B47F8511D4D6}C:\users\heartel\appdata\local\temp\temp8_u.zip\u1504.exe] => (Allow) C:\users\heartel\appdata\local\temp\temp8_u.zip\u1504.exe
FirewallRules: [UDP Query User{07719FD5-526F-47C0-9E0F-130923354556}C:\users\heartel\appdata\local\temp\temp8_u.zip\u1504.exe] => (Allow) C:\users\heartel\appdata\local\temp\temp8_u.zip\u1504.exe
FirewallRules: [{F639EFE9-4405-4C07-BECB-D29DE8F6A523}] => (Block) C:\users\heartel\appdata\local\temp\temp8_u.zip\u1504.exe
FirewallRules: [{863F5B60-5346-436C-B82E-97F797ED21CA}] => (Block) C:\users\heartel\appdata\local\temp\temp8_u.zip\u1504.exe
FirewallRules: [TCP Query User{003E6943-7087-4F46-A998-8EE0400CE0A5}C:\users\heartel\appdata\local\temp\temp9_u.zip\u1504.exe] => (Allow) C:\users\heartel\appdata\local\temp\temp9_u.zip\u1504.exe
FirewallRules: [UDP Query User{AF01D6B6-4B7B-4537-AB2B-03047B9DE688}C:\users\heartel\appdata\local\temp\temp9_u.zip\u1504.exe] => (Allow) C:\users\heartel\appdata\local\temp\temp9_u.zip\u1504.exe
FirewallRules: [{DB60DBEE-E15C-4F88-AF05-078FB65209B3}] => (Block) C:\users\heartel\appdata\local\temp\temp9_u.zip\u1504.exe
FirewallRules: [{1FAD335E-E972-4050-BFAE-6E80AE9C1956}] => (Block) C:\users\heartel\appdata\local\temp\temp9_u.zip\u1504.exe
FirewallRules: [TCP Query User{49550DC3-E13E-438F-9BCE-FCE424A2642D}C:\users\heartel\downloads\u\u1504.exe] => (Allow) C:\users\heartel\downloads\u\u1504.exe
FirewallRules: [UDP Query User{91D667F5-D5D2-4244-91A7-1EF189D4C857}C:\users\heartel\downloads\u\u1504.exe] => (Allow) C:\users\heartel\downloads\u\u1504.exe
FirewallRules: [{1AF2B74C-8CAE-4F81-AE7D-D553108EF741}] => (Block) C:\users\heartel\downloads\u\u1504.exe
FirewallRules: [{E9ACABF4-86FB-4A5D-8209-5904D8EF95BF}] => (Block) C:\users\heartel\downloads\u\u1504.exe
FirewallRules: [TCP Query User{743D9313-7B6B-4DEC-B146-423CECDE9456}E:\programme & spiele\gta v\gta5.exe] => (Allow) E:\programme & spiele\gta v\gta5.exe
FirewallRules: [UDP Query User{219A3258-A8A3-43F6-9B8D-EC05BDAFD52C}E:\programme & spiele\gta v\gta5.exe] => (Allow) E:\programme & spiele\gta v\gta5.exe
FirewallRules: [{09A27D03-C22B-4079-9529-13371287465D}] => (Allow) E:\Programme & Spiele\gta V\GTA5.exe
FirewallRules: [{E4CC024B-7F75-406D-91D2-FD93A761A4CC}] => (Allow) E:\Programme & Spiele\gta V\GTA5.exe
FirewallRules: [{3AE33F0B-F21D-4BF4-B64E-8741E9A568EE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{706FB591-6BCE-4BD9-8364-09D876B75964}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{98C0B1E8-497C-4F84-8221-D941ECD938F7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{34D6E57F-03FB-43D6-8F1C-504E97F46E2B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{5DB83AB0-B838-404F-AAAB-E1641A776C92}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{454C04DE-3775-47ED-887D-0635B4DE313E}C:\users\heartel\downloads\plesk-installer.exe] => (Block) C:\users\heartel\downloads\plesk-installer.exe
FirewallRules: [UDP Query User{A3909BB3-AA18-4F89-BF9A-B552523B6735}C:\users\heartel\downloads\plesk-installer.exe] => (Block) C:\users\heartel\downloads\plesk-installer.exe
FirewallRules: [TCP Query User{EFEA0CFE-8506-454B-AFBE-D1D3AF3FCCB1}C:\program files\java\jre1.8.0_71\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_71\bin\java.exe
FirewallRules: [UDP Query User{9C5AEF26-E7CF-40CA-A57B-A7B3B2D91F50}C:\program files\java\jre1.8.0_71\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_71\bin\java.exe
FirewallRules: [{28210005-0079-4596-B0C2-5ABFD084A273}] => (Block) C:\program files\java\jre1.8.0_71\bin\java.exe
FirewallRules: [{2E79C486-C4A9-4B34-A7DF-0D792670D4BF}] => (Block) C:\program files\java\jre1.8.0_71\bin\java.exe
FirewallRules: [TCP Query User{8D685C1B-00D7-457F-A85C-DA978487613D}E:\programme & spiele\goat simulator\binaries\win32\goatgame-win32-shipping.exe] => (Allow) E:\programme & spiele\goat simulator\binaries\win32\goatgame-win32-shipping.exe
FirewallRules: [UDP Query User{BB5E269A-B4FE-471A-9899-844DB3551A20}E:\programme & spiele\goat simulator\binaries\win32\goatgame-win32-shipping.exe] => (Allow) E:\programme & spiele\goat simulator\binaries\win32\goatgame-win32-shipping.exe
FirewallRules: [{FE55CB23-E390-452A-8E32-F3475B7CB26B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B1A5DCE9-9D44-4A44-B19A-48D1ED943BD3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4D151109-4AD9-40A6-AA4D-C8FB1570B694}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{E7A393E9-0D19-4B8A-A94C-2A6FE7B1E1B3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{6AA3F673-1EDF-4E25-86A8-F1CD16F1937C}C:\program files\java\jre1.8.0_73\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_73\bin\java.exe
FirewallRules: [UDP Query User{80612B7E-25A2-4A4D-8D9F-08CA8F18FFA1}C:\program files\java\jre1.8.0_73\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_73\bin\java.exe
FirewallRules: [{423AFB18-0554-4566-BC18-A2694B09AFB3}] => (Block) C:\program files\java\jre1.8.0_73\bin\java.exe
FirewallRules: [{89C395A8-7E34-4C1A-BDF0-D9A4F9EB8E35}] => (Block) C:\program files\java\jre1.8.0_73\bin\java.exe
FirewallRules: [TCP Query User{41E3E6CC-EEE2-4906-84F5-BBDC34DEB6ED}C:\program files (x86)\tmunitedforever\tmforever.exe] => (Allow) C:\program files (x86)\tmunitedforever\tmforever.exe
FirewallRules: [UDP Query User{136CB6EE-2948-4698-913D-2478B7FCE1F6}C:\program files (x86)\tmunitedforever\tmforever.exe] => (Allow) C:\program files (x86)\tmunitedforever\tmforever.exe
FirewallRules: [TCP Query User{766FC13C-14AC-4704-8472-4CA37F91E8E9}E:\programme & spiele\teamspeak3-server_win64\ts3server.exe] => (Allow) E:\programme & spiele\teamspeak3-server_win64\ts3server.exe
FirewallRules: [UDP Query User{2F31C0C3-A6DB-43A0-81D0-68C3CBCC5E5B}E:\programme & spiele\teamspeak3-server_win64\ts3server.exe] => (Allow) E:\programme & spiele\teamspeak3-server_win64\ts3server.exe
FirewallRules: [{729AF89B-FCFD-494F-9AFA-EFC27D90154B}] => (Block) E:\programme & spiele\teamspeak3-server_win64\ts3server.exe
FirewallRules: [{E7964C90-7ACA-4C6F-9FD6-D3A88D8F3F65}] => (Block) E:\programme & spiele\teamspeak3-server_win64\ts3server.exe
FirewallRules: [{0E975B87-4758-4FF1-A68F-F36A98F66409}] => (Allow) C:\Program Files\Internet Explorer\iexplore.exe
FirewallRules: [{74486E12-291C-40A6-986C-7D2C514A32DD}] => (Allow) C:\Program Files\Internet Explorer\iexplore.exe
FirewallRules: [{CAF66744-015C-49E2-AFF0-5A424EE6D84E}] => (Allow) C:\Program Files\Internet Explorer\iexplore.exe
FirewallRules: [{FF7DD450-BBCD-493B-AA0C-44A2F9F310CF}] => (Allow) C:\Program Files\Internet Explorer\iexplore.exe
FirewallRules: [{E29FDFD0-A769-4165-A38A-87B2E974F03E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{9B1E69B3-3073-44C4-A535-A08C1B30B335}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{6A0A1DB6-9A1B-4C62-8A25-D358C3F0D9CE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{058E0C71-23A8-4A11-834E-7437A7D4C546}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [TCP Query User{DE4F746C-C6B2-4AD7-919C-13F66018010E}E:\programme & spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) E:\programme & spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{4CBE08FF-2562-44F4-A83F-CE49F0D9C4D7}E:\programme & spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) E:\programme & spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{A4684907-BA7D-4034-8974-7A0F64C53B1E}] => (Block) E:\programme & spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{F5BA8D82-C838-49E6-B74A-98C961426376}] => (Block) E:\programme & spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{EBB7E101-019E-47CF-AB2E-B5C7C19751E0}C:\program files (x86)\tmunitedforever\tmforever.exe] => (Allow) C:\program files (x86)\tmunitedforever\tmforever.exe
FirewallRules: [UDP Query User{6C3EDC43-081B-4FBB-8B26-269E728B8005}C:\program files (x86)\tmunitedforever\tmforever.exe] => (Allow) C:\program files (x86)\tmunitedforever\tmforever.exe
FirewallRules: [{805AC4B9-1980-4944-B27F-B6177D055CE9}] => (Allow) C:\Users\Heartel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{1AE43292-9913-4FFA-9393-C23B92B4D0BC}] => (Allow) C:\Users\Heartel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{4A4453BF-A14A-44C4-AAC7-4AD0E190C3BB}] => (Allow) C:\Users\Heartel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{3ED9CCAE-DF09-49DF-BD41-C012BC84E1FC}] => (Allow) C:\Users\Heartel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{366FE1D9-9B47-4517-B07B-9699699DE952}] => (Allow) C:\Users\Heartel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E07A66CA-7DC9-4A8C-9B2B-3BD6A8A010D2}] => (Allow) C:\Users\Heartel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{7629CAFC-2C3F-47CD-A770-4D265678AAD5}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{F2E28E53-95EF-436E-8C8A-F339AD89E897}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{244B6633-8DFA-481F-86B8-8EC3FA639706}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{F0C40C7C-98B8-4473-A9A7-EE06CBDD1331}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [TCP Query User{A50044BF-6D3C-4C5D-9DFD-AD99EA4B9E36}E:\programme & spiele\scrap mechanic\release\scrapmechanic.exe] => (Allow) E:\programme & spiele\scrap mechanic\release\scrapmechanic.exe
FirewallRules: [UDP Query User{7308AE96-F8AF-45EB-87A3-58BC784D75BB}E:\programme & spiele\scrap mechanic\release\scrapmechanic.exe] => (Allow) E:\programme & spiele\scrap mechanic\release\scrapmechanic.exe
FirewallRules: [{F049A035-07CD-4B8F-A6F8-1AF94AD3293F}] => (Block) E:\programme & spiele\scrap mechanic\release\scrapmechanic.exe
FirewallRules: [{E87F9583-F223-4F04-9065-719E401AFBBD}] => (Block) E:\programme & spiele\scrap mechanic\release\scrapmechanic.exe
FirewallRules: [TCP Query User{FFEAD25B-9AAC-4B25-AFF8-4528E8DE9479}C:\users\heartel\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\heartel\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{3BC80EC7-23DC-4542-BA5A-042B0E5AB79B}C:\users\heartel\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\heartel\appdata\roaming\spotify\spotify.exe
FirewallRules: [{39CBE839-89E5-4DCA-8DF7-5C3962F94678}] => (Block) C:\users\heartel\appdata\roaming\spotify\spotify.exe
FirewallRules: [{30B5ADFA-9767-43C6-B0A0-388CB1492B87}] => (Block) C:\users\heartel\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{245B8A12-16B8-4FF4-BB7D-17620F445F08}E:\programme & spiele\phantomzeros\phantomzeros.exe] => (Allow) E:\programme & spiele\phantomzeros\phantomzeros.exe
FirewallRules: [UDP Query User{C59127A5-89DF-4AEC-B7DC-109C3A31A0F1}E:\programme & spiele\phantomzeros\phantomzeros.exe] => (Allow) E:\programme & spiele\phantomzeros\phantomzeros.exe
FirewallRules: [{BE0C678D-F9ED-4257-BB44-8C41AAC9689C}] => (Block) E:\programme & spiele\phantomzeros\phantomzeros.exe
FirewallRules: [{2936CC7A-C80B-45A4-ADF8-CE6AE7C6601D}] => (Block) E:\programme & spiele\phantomzeros\phantomzeros.exe
FirewallRules: [TCP Query User{65E1D120-13F5-4593-AC09-E41A86B05208}E:\programme & spiele\magic3deasyview\easyview.exe] => (Allow) E:\programme & spiele\magic3deasyview\easyview.exe
FirewallRules: [UDP Query User{591E33D7-70EC-49E9-9984-DDE8C096631A}E:\programme & spiele\magic3deasyview\easyview.exe] => (Allow) E:\programme & spiele\magic3deasyview\easyview.exe
FirewallRules: [{B26EB633-59AD-43A5-BB24-784A36D35377}] => (Block) E:\programme & spiele\magic3deasyview\easyview.exe
FirewallRules: [{6CB36593-8624-4801-9C2E-807E6EBD2F06}] => (Block) E:\programme & spiele\magic3deasyview\easyview.exe
FirewallRules: [TCP Query User{2FCD6D18-B3E9-4FA2-807B-352D5B6F8FC6}C:\users\heartel\downloads\road-to-ballhalla_www.freegamesdl.net\road-to-ballhalla_www.freegamesdl.net\game\roadtoballhallaue4\binaries\win64\rollplayinggameue4-win64-shipping.exe] => (Allow) C:\users\heartel\downloads\road-to-ballhalla_www.freegamesdl.net\road-to-ballhalla_www.freegamesdl.net\game\roadtoballhallaue4\binaries\win64\rollplayinggameue4-win64-shipping.exe
FirewallRules: [UDP Query User{4D7D304E-4D83-40B2-BAB2-2EDF51302170}C:\users\heartel\downloads\road-to-ballhalla_www.freegamesdl.net\road-to-ballhalla_www.freegamesdl.net\game\roadtoballhallaue4\binaries\win64\rollplayinggameue4-win64-shipping.exe] => (Allow) C:\users\heartel\downloads\road-to-ballhalla_www.freegamesdl.net\road-to-ballhalla_www.freegamesdl.net\game\roadtoballhallaue4\binaries\win64\rollplayinggameue4-win64-shipping.exe
FirewallRules: [{CD9E0534-0BF3-4376-928A-4665342F0F06}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{BED4B398-8AD8-4F9A-A694-805A79DA7146}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{C91859ED-4984-40D6-81F8-154941901818}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{D0865995-8531-4E56-BE72-FE4795090F9F}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{1DE9FEF4-E923-4D1C-B500-F027650664C4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{71641106-0A06-4253-955E-ECD35AAF2DE1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{7CEDCD46-7092-4B0D-84DD-C723B809C516}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{D20E00A2-8196-4BE0-B11B-F3460BCD4E5C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{6C8677FA-BAB8-48B7-B268-C2F873C36DEA}] => (Allow) E:\SteamLibrary\steamapps\common\Battlefield Bad Company 2\BFBC2Game.exe
FirewallRules: [{F783B036-CF16-4965-8382-46F865A811F7}] => (Allow) E:\SteamLibrary\steamapps\common\Battlefield Bad Company 2\BFBC2Game.exe
FirewallRules: [{AB5BED0D-6C21-4AFA-8040-260F75A19252}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{61F10F69-49CC-484B-BE87-A4AA8FA45BA4}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{C66C92CB-CBD8-468B-9BBC-66323C9360E1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{0EFFD869-5E2F-4415-84C4-3AE9B5D4E6CF}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{339C0BCA-3513-4B03-8D92-F40B5FB04BFA}] => (Allow) E:\BF 3\Battlefield 1\bf1Trial.exe
FirewallRules: [{4164C349-6B56-4EE1-A45B-701E82E149AB}] => (Allow) E:\BF 3\Battlefield 1\bf1Trial.exe
FirewallRules: [{97381521-4AF2-43B4-8190-52B98C6555EB}] => (Allow) E:\BF 3\Battlefield 1\bf1.exe
FirewallRules: [{3914EC4D-FA92-4EE7-B94D-60EA0CB28ADB}] => (Allow) E:\BF 3\Battlefield 1\bf1.exe
FirewallRules: [{318F7B37-7F28-40D6-BF51-F2F961B0585F}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe
FirewallRules: [{98300FB0-3AA8-45CA-8BCF-DCBBC42A7C74}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1DA3C6B3-97F1-48C3-B48A-32B34109FD94}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E8C18493-08BD-4344-BDEF-DEB6AEAAB66A}] => (Allow) C:\Program Files (x86)\Ballcine\Application\chrome.exe
FirewallRules: [{60C67BF2-AA82-4C5C-AD51-E833BDCA6A10}] => (Allow) C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe
FirewallRules: [{CCB667D3-6984-42B3-A974-6C97728EF9C9}] => (Allow) C:\Program Files (x86)\Firefox\Firefox.exe
FirewallRules: [{D6B333B3-AADE-4824-B8B8-E1953D13C088}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{08E7578C-360A-46EF-8D08-78BE44609430}] => (Allow) C:\Program Files (x86)\MIO\loader\wdcxwd10ezex-00bn5a0_wd-wcc3f4enzvd2nzvd2.dat
FirewallRules: [{8A0C3582-EA3A-493D-AFA6-1612D7B4D5B9}] => (Allow) C:\Program Files (x86)\MIO\loader\wdcxwd10ezex-00bn5a0_wd-wcc3f4enzvd2nzvd2.dat

==================== Wiederherstellungspunkte =========================


==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: HD Webcam C270
Description: HD Webcam C270
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Logitech
Service: usbaudio
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (04/14/2017 11:32:08 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = PROPLUS wird installiert; Fehler = 0x80070422).

Error: (04/14/2017 11:31:14 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = PROPLUS wird installiert; Fehler = 0x80070422).

Error: (04/14/2017 11:31:09 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = PROPLUS wird installiert; Fehler = 0x80070422).

Error: (04/14/2017 11:31:07 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = PROPLUS wird installiert; Fehler = 0x80070422).

Error: (04/14/2017 11:31:01 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = PROPLUS wird installiert; Fehler = 0x80070422).

Error: (04/14/2017 11:30:56 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = PROPLUS wird installiert; Fehler = 0x80070422).

Error: (04/14/2017 11:30:54 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = PROPLUS wird installiert; Fehler = 0x80070422).

Error: (04/14/2017 11:30:52 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = PROPLUS wird installiert; Fehler = 0x80070422).

Error: (04/14/2017 11:30:49 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = PROPLUS wird installiert; Fehler = 0x80070422).

Error: (04/14/2017 11:30:47 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = PROPLUS wird installiert; Fehler = 0x80070422).


Systemfehler:
=============
Error: (04/14/2017 11:12:53 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "UC浏览器基础服务" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (04/14/2017 11:12:53 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Origin Web Helper Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (04/14/2017 11:12:53 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Origin Web Helper Service erreicht.

Error: (04/14/2017 11:10:56 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Apple Mobile Device Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (04/14/2017 11:10:56 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Apple Mobile Device Service erreicht.

Error: (04/13/2017 12:41:40 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Der Server "{3FCB7074-EC9E-4AAF-9BE3-C0E356942366}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (04/13/2017 11:06:27 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "UC浏览器基础服务" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (04/13/2017 11:06:27 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Origin Web Helper Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (04/13/2017 11:06:27 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Origin Web Helper Service erreicht.

Error: (04/13/2017 11:04:39 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Apple Mobile Device Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.


CodeIntegrity:
===================================
  Date: 2017-04-14 11:10:38.950
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2017-04-14 11:10:38.856
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2017-04-13 11:04:30.398
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\winhttp.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-04-13 11:04:30.299
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\api-ms-win-core-synch-l1-2-0.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-04-13 11:04:30.203
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\api-ms-win-core-synch-l1-2-0.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-04-13 11:04:30.094
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\winhttp.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-04-13 11:04:12.216
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2017-04-13 11:04:12.138
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2017-04-12 19:01:58.469
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2017-04-12 19:01:58.376
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 42%
Installierter physikalischer RAM: 8054.65 MB
Verfügbarer physikalischer RAM: 4625.68 MB
Summe virtueller Speicher: 16107.49 MB
Verfügbarer virtueller Speicher: 12498.61 MB

==================== Laufwerke ================================

Drive c: (Boot) (Fixed) (Total:931.41 GB) (Free:836.48 GB) NTFS
Drive e: (Daten) (Fixed) (Total:931.51 GB) (Free:499.5 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: DCADF02B)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F38A4BF1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         

FRST

FRST Logfile:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017
durchgeführt von Heartel (Administrator) auf GAMINGMASCHINE (14-04-2017 18:28:35)
Gestartet von C:\Users\Heartel\Desktop
Geladene Profile: Heartel (Verfügbare Profile: Heartel)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Opera)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Windows\system\CMGxMon.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe
(CMedia) C:\Program Files\ASUS Xonar DX Audio\Customapp\AsusAudioCenter.exe
() C:\Program Files\ASUS Xonar DX Audio\Customapp\MXmon.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
(Spotify Ltd) C:\Users\Heartel\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(© 2015 Microsoft Corporation) C:\Users\Heartel\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Audigy Fx\Sound Blaster Audigy Fx Control Panel\SBAdgyFx.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.1\Lightshot.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Microsoft Corporation) C:\Windows\System32\MpSigStub.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671792 2014-03-14] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-05-02] (NVIDIA Corporation)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)
HKLM\...\Run: [Cmaudio8788] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cmicnfgp.cpl,CMICtrlWnd
HKLM\...\Run: [Cmaudio8788GX] => C:\Windows\system\CmGxMon.exe [20480 2007-12-19] ()
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1087960 2014-03-20] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Sound Blaster Audigy Fx Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Audigy Fx\Sound Blaster Audigy Fx Control Panel\SBAdgyFx.exe [861184 2013-11-08] (Creative Technology Ltd)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [DisplayFusion] => C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [8587256 2016-01-19] (Binary Fortress Software)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [Spotify Web Helper] => C:\Users\Heartel\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-04-05] (Spotify Ltd)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3019552 2017-03-23] (Valve Corporation)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [BingSvc] => C:\Users\Heartel\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27545048 2017-03-14] (Skype Technologies S.A.)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [Google Update] => C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\GoogleUpdateCore.exe [599632 2017-04-08] (Google Inc.)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\MountPoints2: {15888e6b-9a96-11e4-94bd-74d435f41938} - F:\LaunchU3.exe
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\MountPoints2: {1d6d65cc-7e36-11e4-840a-806e6f6e6963} - D:\Run.exe
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\MountPoints2: {3014f7b8-015b-11e5-8828-74d435f41938} - F:\LaunchU3.exe -a
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\MountPoints2: {354da4f3-b3d7-11e6-b7d5-74d435f41938} - F:\OnePlus_setup.exe /s
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\MountPoints2: {b0600c7d-bff3-11e4-8ed5-74d435f41938} - F:\setup.exe
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)
HKLM\...\Providers\am7fgfeu: C:\Program Files (x86)\Jernercult Verfier\local64spl.dll [307712 2017-02-19] ()
IFEO\taskmgr.exe: [Debugger] 
ShellExecuteHooks: Kein Name - {19B5BEEC-F444-11E6-83B9-64006A5CFC23} - C:\Program Files (x86)\Chalisy\Reomotain.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [KzShlobj] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} => C:\Program Files\¿ìѹ\X64\KZipShell.dll -> Keine Datei
Startup: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MSI GamingApp.lnk [2015-10-09]
ShortcutTarget: MSI GamingApp.lnk -> C:\Program Files (x86)\MSI\MSI GamingApp\MSIGamingApp.exe (Micro-Star International Co., Ltd.)
Startup: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Teamspeak 3.lnk [2015-02-27]
ShortcutTarget: Teamspeak 3.lnk -> C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe (TeamSpeak Systems GmbH)
GroupPolicy: Beschränkung <======= ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{999D1179-744D-4DD5-BC88-B2651E02B3E8}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{D1C6F279-1FA0-4641-87DB-A1C0B126CAAA}: [DhcpNameServer] 192.168.48.2

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBKhl918K0qpwZ-pvDPiNazcZvuYU6Umq7RhanftF3XnJSdbvEFf0UhXe_uzOVhhX-q8t_ZsvCe2TbYT5XZjI2Ed0PuNXo7FLSmJ2QsYaER7LpB-m8n99NlsXM8D2CAxEeptGuYaobYN3uVpnfpl_uv1xNUvDkCrb73xnRoTX5fZnLFFMahCann&q={searchTerms}
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-1de21753&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-1de21753&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000 -> {08B1AC39-6A34-4C48-ADB1-539FAE119548} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-09-13] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-13] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-09-13] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-13] (Oracle Corporation)
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://files.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505 [2017-04-14]
FF user.js: detected! => C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\user.js [2017-04-13]
FF NewTab: Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505 -> hxxp://www.luckysearch123.com?type=hp&ts=1492074510&from=49de0413&uid=wdcxwd10ezex-00bn5a0_wd-wcc3f4enzvd2nzvd2&z=caf75858c1885b33bd6c313gez4tdobe7m6zewagaz
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505 -> luck
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505 -> luck
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505 -> luck
FF Homepage: Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505 -> hxxp://www.luckysearch123.com?type=hp&ts=1492074510&from=49de0413&uid=wdcxwd10ezex-00bn5a0_wd-wcc3f4enzvd2nzvd2&z=caf75858c1885b33bd6c313gez4tdobe7m6zewagaz
FF Extension: (xRocket Toolbar) - C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\Extensions\arthurj8283@gmail.com [2017-04-13] [ist nicht signiert]
FF Extension: (convert2mp3.net YouTube2MP3 Converter) - C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\Extensions\info@convert2mp3.net.xpi [2017-04-14]
FF Extension: (Adblock Plus) - C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-04-02]
FF Extension: (Disable Prefetch) - C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\features\{4bf942c7-75a0-4281-8e25-94166fc0ef77}\disable-prefetch@mozilla.org.xpi [2017-04-08]
FF SearchPlugin: C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\searchplugins\luck.xml [2017-04-13]
FF SearchPlugin: C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\searchplugins\ourluckysites.xml [2017-04-11]
FF Extension: (Site Deployment Checker) - C:\Program Files (x86)\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi [2017-04-01] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [arthurj8283@gmail.com] - C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\extensions\arthurj8283@gmail.com
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-11] ()
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-13] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-13] (Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-11] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-13] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-07-23] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-07-23] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-11] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Heartel\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000: @talk.google.com/O1DPlugin -> C:\Users\Heartel\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-08] (Google Inc.)
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-08] (Google Inc.)
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Heartel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-01-22] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Heartel\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Heartel\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\browser\defaults\preferences\firefox.js [2017-02-19]

Chrome: 
=======
CHR DefaultProfile: Profile 1
CHR HomePage: Profile 1 -> hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
CHR StartupUrls: Profile 1 -> "hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2" 
CHR DefaultSearchURL: Profile 1 -> hxxp://www.ourluckysites.com/search/?type=ds&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2&q={searchTerms}
CHR DefaultSearchKeyword: Profile 1 -> ourluckysites
CHR Profile: C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2017-03-11] <==== ACHTUNG
CHR Profile: C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-04-14]
CHR Extension: (Google Slides) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-02-22]
CHR Extension: (Google Docs) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2017-02-22]
CHR Extension: (Google Drive) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-22]
CHR Extension: (Spotiload (former Spotify Vk Downloader)) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\baggnalhgbpeanbhedjlbndhjgmimmhl [2017-02-23]
CHR Extension: (YouTube) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-22]
CHR Extension: (Adblock Plus) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-02-22]
CHR Extension: (Google Sheets) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-02-22]
CHR Extension: (Avira Browser Safety) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2017-02-22]
CHR Extension: (Google Docs Offline) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-02-22]
CHR Extension: (Skype) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2017-02-24]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-02-22]
CHR Extension: (Gmail) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-02-22]
CHR Extension: (Chrome Media Router) - C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-22]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [blmlepcapjlbgcpkdlffnhibhpecongp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [428056 2017-02-21] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [406040 2017-02-21] (BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe [452632 2017-02-21] (BlueStack Systems, Inc.)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2015-11-27] (Creative Labs) [Datei ist nicht signiert]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [429056 2013-10-28] (Creative Technology Ltd) [Datei ist nicht signiert]
R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [4664856 2016-01-19] (Binary Fortress Software)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-10-03] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 iSafeService; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [131024 2016-12-02] (Elex do Brasil Participações Ltda)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-05-02] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-05-02] (NVIDIA Corporation)
S3 Origin Client Service; E:\Origin\OriginClientService.exe [2119688 2016-12-30] (Electronic Arts)
S2 Origin Web Helper Service; E:\Origin\OriginWebHelperService.exe [2180624 2016-12-30] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75064 2016-12-30] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [215128 2016-12-30] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10351856 2016-12-15] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-04-09] (Microsoft Corporation)
S2 UCBrowserSvc; "C:\Program Files (x86)\UCBrowser\Application\UCService.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 AFXfilt; C:\Windows\System32\drivers\AFXfilt.sys [25088 2013-06-04] (Creative Technology Ltd.)
S3 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [152672 2017-02-21] (BlueStack Systems)
S3 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [270904 2017-02-21] (Bluestack System Inc. )
R3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [1197568 2008-01-18] (C-Media Inc)
S3 cthdb; C:\Windows\System32\DRIVERS\cthdb.sys [25088 2013-12-09] (Creative Technology Ltd)
S3 e1qexpress; C:\Windows\System32\DRIVERS\e1q60x64.sys [244736 2009-06-10] (Intel Corporation)
S3 EuMusDesignVirtualAudioCableWdm; C:\Windows\System32\DRIVERS\vrtaucbl.sys [67584 2015-08-24] (Eugene V. Muzychenko) [Datei ist nicht signiert]
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-11] (Intel Corporation)
R1 iSafeKrnl; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [262344 2016-05-23] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlKit; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [110112 2016-05-23] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlMon; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [52440 2016-05-23] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlR3; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [103904 2016-05-23] (Elex do Brasil Participações Ltda)
R1 iSafeNetFilter; C:\Windows\System32\DRIVERS\iSafeNetFilter.sys [52392 2016-05-19] (Elex do Brasil Participações Ltda)
R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [42016 2013-11-27] (Visicom Media Inc.)
R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35232 2013-12-06] (Visicom Media Inc.)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [118272 2014-03-20] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R1 NetUtils2016; C:\Windows\system32\drivers\NetUtils2016.sys [909944 2017-04-11] () <==== ACHTUNG
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-05-02] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [11376 2015-12-10] () [Datei ist nicht signiert]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-12-07] (Duplex Secure Ltd.)
R1 ucdrv; C:\Program Files (x86)\UCBrowser\Security:ucdrv-x64.sys [25444 ] (UC Web Inc.) <==== ACHTUNG
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-08-16] (Apple, Inc.) [Datei ist nicht signiert]
R3 VBAudioVACMME; C:\Windows\System32\DRIVERS\vbaudio_cable64_win7.sys [41192 2015-08-24] (Windows (R) Win 7 DDK provider)
U3 adimq3n1; C:\Windows\System32\Drivers\adimq3n1.sys [0 ] (Advanced Micro Devices) <==== ACHTUNG (Null Byte Datei/Ordner)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 iSafeKrnlBoot; system32\DRIVERS\iSafeKrnlBoot.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Drei Monate: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-08-02 21:19 - 2017-08-02 21:19 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\ASUS
2017-08-02 21:19 - 2017-08-02 21:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS Xonar DX Audio
2017-08-02 21:19 - 2017-08-02 21:19 - 00000000 ____D C:\Program Files (x86)\OpenAL
2017-08-02 21:19 - 2008-01-11 12:20 - 00192512 ____R (C-Media Electronics Inc.) C:\Windows\system\CMGxSrv.dll
2017-08-02 21:19 - 2008-01-10 11:58 - 06475776 ____R (C-Media Corporation) C:\Windows\SysWOW64\CmiCnfgp.cpl
2017-08-02 21:19 - 2007-12-19 04:41 - 00020480 ____R () C:\Windows\system\CMGxMon.exe
2017-08-02 21:19 - 2007-12-13 11:12 - 00122880 ____R (CMedia Electronics Inc.) C:\Windows\SysWOW64\Cm_Oal.dll
2017-08-02 21:19 - 2007-12-13 11:12 - 00122880 ____R (CMedia Electronics Inc.) C:\Windows\system32\Cm_Oal.dll
2017-08-02 21:19 - 2007-12-05 06:40 - 00450560 ____R (C-Media Electronics Inc.) C:\Windows\system32\cmasiopx.dll
2017-08-02 21:19 - 2007-12-05 06:38 - 00172094 ____R (C-Media Electronics Inc.) C:\Windows\SysWOW64\cmasiop.dll
2017-08-02 21:19 - 2007-11-27 04:30 - 00782336 ____R (Creative Labs Inc.) C:\Windows\SysWOW64\tmpF4BA.tmp
2017-08-02 21:19 - 2007-11-27 04:30 - 00782336 ____R (Creative Labs Inc.) C:\Windows\SysWOW64\tmp5DAA.tmp
2017-08-02 21:19 - 2007-11-27 04:30 - 00782336 ____R (Creative Labs Inc.) C:\Windows\SysWOW64\tmp5DA9.tmp
2017-08-02 21:19 - 2007-11-04 19:30 - 01144983 ____R C:\Windows\KB936225x64.msu
2017-08-02 21:19 - 2007-10-22 14:01 - 00139264 ____R C:\Windows\SysWOW64\VmixP8.dll
2017-08-02 21:19 - 2006-09-13 04:21 - 00200704 ____R (C-Media) C:\Windows\SysWOW64\Cmpaoxy.dll
2017-08-02 21:19 - 2005-04-13 09:29 - 00032768 ____R (C-Media Inc.) C:\Windows\SysWOW64\CmPropP.dll
2017-08-02 21:19 - 2001-11-23 06:08 - 00712704 ____R (Sensaura Ltd) C:\Windows\system32\Audio3Dp.dll
2017-08-02 21:19 - 2001-11-23 06:08 - 00712704 ____R (Sensaura Ltd) C:\Windows\system32\a3d.dll
2017-08-02 21:18 - 2017-08-02 21:19 - 00036425 _____ C:\Windows\Cmicnfgp.ini.cfl
2017-08-02 21:18 - 2017-08-02 21:19 - 00000868 _____ C:\Windows\Cmicnfgp.ini.imi
2017-08-02 21:18 - 2017-08-02 21:19 - 00000140 _____ C:\Windows\system\Dlap.pfx
2017-08-02 21:18 - 2017-08-02 21:19 - 00000000 ____D C:\Program Files\ASUS Xonar DX Audio
2017-08-02 21:18 - 2008-01-25 10:30 - 00718848 ____R C:\Windows\system32\Cmeauoxy.exe
2017-08-02 21:18 - 2008-01-18 10:58 - 01197568 _____ (C-Media Inc) C:\Windows\system32\Drivers\cmudaxp.sys
2017-08-02 21:18 - 2007-12-21 09:54 - 00007052 ____R C:\Windows\Cmicnfgp.ini.cfg
2017-08-02 21:18 - 2007-04-19 09:12 - 00032768 _____ (C-Media Electronics Inc.) C:\Windows\system32\cmudaxp.dll
2017-08-02 21:18 - 2004-04-14 05:28 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\SysWOW64\CmiFltr.dll
2017-08-02 21:18 - 2004-04-14 05:28 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\system\CmiFltr.dll
2017-04-13 11:17 - 2017-04-13 11:19 - 00229612 _____ C:\TDSSKiller.3.1.0.12_13.04.2017_11.17.06_log.txt
2017-04-13 11:16 - 2017-04-13 11:16 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Heartel\Desktop\tdsskiller.exe
2017-04-13 11:13 - 2017-04-13 11:14 - 00083548 _____ C:\Users\Heartel\Desktop\Addition.txt
2017-04-13 11:11 - 2017-04-14 18:29 - 00033742 _____ C:\Users\Heartel\Desktop\FRST.txt
2017-04-13 11:11 - 2017-04-14 18:28 - 00000000 ____D C:\FRST
2017-04-13 11:11 - 2017-04-13 11:11 - 02424832 _____ (Farbar) C:\Users\Heartel\Desktop\FRST64.exe
2017-04-12 14:31 - 2017-03-27 20:13 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-04-12 14:31 - 2017-03-27 19:28 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-04-12 14:31 - 2017-03-25 21:39 - 20284416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-04-12 14:31 - 2017-03-25 21:07 - 04604416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-04-12 14:31 - 2017-03-25 21:06 - 13654016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-04-12 14:31 - 2017-03-25 20:55 - 02767360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-04-12 14:31 - 2017-03-25 20:52 - 02289152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-04-12 14:31 - 2017-03-25 20:51 - 01313280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-04-12 14:31 - 2017-03-25 20:48 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-04-12 14:31 - 2017-03-25 20:47 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-04-12 14:31 - 2017-03-25 20:47 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-04-12 14:31 - 2017-03-25 20:47 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-04-12 14:31 - 2017-03-25 20:45 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-04-12 14:31 - 2017-03-25 20:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-04-12 14:31 - 2017-03-25 20:44 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-04-12 14:31 - 2017-03-25 20:35 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-04-12 14:31 - 2017-03-25 20:35 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-04-12 14:31 - 2017-03-25 20:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-04-12 14:31 - 2017-03-25 20:14 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-04-12 14:31 - 2017-03-25 20:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-04-12 14:31 - 2017-03-25 20:13 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-04-12 14:31 - 2017-03-25 20:13 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-04-12 14:31 - 2017-03-25 20:10 - 02898432 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-04-12 14:31 - 2017-03-25 20:04 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-04-12 14:31 - 2017-03-25 20:02 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-04-12 14:31 - 2017-03-25 19:57 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-04-12 14:31 - 2017-03-25 19:56 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-04-12 14:31 - 2017-03-25 19:56 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-04-12 14:31 - 2017-03-25 19:56 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-04-12 14:31 - 2017-03-25 19:56 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-04-12 14:31 - 2017-03-25 19:52 - 25746944 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-04-12 14:31 - 2017-03-25 19:45 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-04-12 14:31 - 2017-03-25 19:41 - 06045696 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-04-12 14:31 - 2017-03-25 19:41 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-04-12 14:31 - 2017-03-25 19:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-04-12 14:31 - 2017-03-25 19:29 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-04-12 14:31 - 2017-03-25 19:24 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-04-12 14:31 - 2017-03-25 19:23 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-04-12 14:31 - 2017-03-25 19:20 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-04-12 14:31 - 2017-03-25 19:19 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-04-12 14:31 - 2017-03-25 19:17 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-04-12 14:31 - 2017-03-25 19:06 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-04-12 14:31 - 2017-03-25 19:04 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-04-12 14:31 - 2017-03-25 19:00 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-04-12 14:31 - 2017-03-25 18:59 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-04-12 14:31 - 2017-03-25 18:57 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-04-12 14:31 - 2017-03-25 18:57 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-04-12 14:31 - 2017-03-25 18:28 - 15259136 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-04-12 14:31 - 2017-03-25 18:27 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-04-12 14:31 - 2017-03-25 18:24 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-04-12 14:31 - 2017-03-25 18:10 - 01546240 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-04-12 14:31 - 2017-03-25 18:01 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-04-12 14:31 - 2017-03-25 00:50 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-04-12 14:31 - 2017-03-25 00:42 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-04-12 14:31 - 2017-03-22 17:32 - 03165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-04-12 14:31 - 2017-03-22 17:32 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-04-12 14:31 - 2017-03-22 17:32 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-04-12 14:31 - 2017-03-22 17:30 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2017-04-12 14:31 - 2017-03-22 17:24 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2017-04-12 14:31 - 2017-03-22 17:17 - 02651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-04-12 14:31 - 2017-03-22 17:15 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-04-12 14:31 - 2017-03-22 17:15 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-04-12 14:31 - 2017-03-22 17:15 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-04-12 14:31 - 2017-03-22 17:15 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-04-12 14:31 - 2017-03-22 17:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-04-12 14:31 - 2017-03-22 17:15 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2017-04-12 14:31 - 2017-03-22 17:05 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-04-12 14:31 - 2017-03-22 17:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2017-04-12 14:31 - 2017-03-22 17:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2017-04-12 14:31 - 2017-03-22 17:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2017-04-12 14:31 - 2017-03-14 17:34 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-04-12 14:31 - 2017-03-14 17:34 - 00265448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-04-12 14:31 - 2017-03-14 17:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2017-04-12 14:31 - 2017-03-10 18:35 - 00382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-04-12 14:31 - 2017-03-10 18:31 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-04-12 14:31 - 2017-03-10 18:31 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-04-12 14:31 - 2017-03-10 18:31 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-04-12 14:31 - 2017-03-10 18:31 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-04-12 14:31 - 2017-03-10 18:27 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-04-12 14:31 - 2017-03-10 18:20 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-04-12 14:31 - 2017-03-10 18:19 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-04-12 14:31 - 2017-03-10 18:19 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-04-12 14:31 - 2017-03-10 18:00 - 03219968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-04-12 14:31 - 2017-03-10 17:53 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-04-12 14:31 - 2017-03-08 22:20 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2017-04-12 14:31 - 2017-03-08 22:10 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2017-04-12 14:31 - 2017-03-08 06:37 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-04-12 14:31 - 2017-03-08 06:36 - 05548264 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-04-12 14:31 - 2017-03-08 06:36 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-04-12 14:31 - 2017-03-08 06:36 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-04-12 14:31 - 2017-03-08 06:36 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-04-12 14:31 - 2017-03-08 06:34 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 02064384 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:26 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-04-12 14:31 - 2017-03-08 06:26 - 03945192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-04-12 14:31 - 2017-03-08 06:24 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 01416192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:03 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-04-12 14:31 - 2017-03-08 06:03 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-04-12 14:31 - 2017-03-08 06:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-04-12 14:31 - 2017-03-08 06:03 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-04-12 14:31 - 2017-03-08 06:00 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-04-12 14:31 - 2017-03-08 05:59 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-04-12 14:31 - 2017-03-08 05:57 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-04-12 14:31 - 2017-03-08 05:56 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-04-12 14:31 - 2017-03-08 05:56 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-04-12 14:31 - 2017-03-08 05:56 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-04-12 14:31 - 2017-03-08 05:55 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-04-12 14:31 - 2017-03-08 05:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-04-12 14:31 - 2017-03-08 05:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-04-12 14:31 - 2017-03-08 05:54 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-04-12 14:31 - 2017-03-08 05:54 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-04-12 14:31 - 2017-03-08 05:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-04-12 14:31 - 2017-03-08 05:53 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-04-12 14:31 - 2017-03-08 05:53 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 05:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 05:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 05:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-04-12 14:31 - 2017-03-07 18:30 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-04-12 14:31 - 2017-03-07 18:17 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2017-04-12 14:31 - 2017-03-07 16:05 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-04-12 14:31 - 2017-03-04 03:27 - 01574912 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-04-12 14:31 - 2017-03-04 03:27 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2017-04-12 14:31 - 2017-03-04 03:14 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-04-12 14:31 - 2017-03-04 03:14 - 00077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
2017-04-12 14:31 - 2017-02-14 18:33 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-04-12 14:31 - 2017-02-14 18:19 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2017-04-12 14:31 - 2017-02-11 18:33 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-04-12 14:31 - 2017-02-11 18:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2017-04-12 14:31 - 2017-02-09 18:32 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2017-04-12 14:31 - 2017-02-09 18:32 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2017-04-12 14:31 - 2017-02-09 18:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00011608 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2017-04-12 14:31 - 2016-03-24 00:40 - 03181568 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2017-04-12 14:31 - 2016-03-24 00:40 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2017-04-11 16:40 - 2016-05-19 08:42 - 00052392 _____ (Elex do Brasil Participações Ltda) C:\Windows\system32\Drivers\iSafeNetFilter.sys
2017-04-10 12:07 - 2017-04-11 16:28 - 00000000 ____D C:\Users\Heartel\AppData\Local\AMD
2017-04-10 12:07 - 2017-04-10 12:07 - 00000000 ____D C:\Update
2017-04-09 19:50 - 2017-04-09 19:50 - 00005171 _____ C:\Users\Heartel\AppData\Local\recently-used.xbel
2017-04-01 17:41 - 2017-04-01 17:41 - 00000000 ____D C:\Users\Heartel\Desktop\Old Firefox Data
2017-04-01 17:35 - 2017-04-11 12:57 - 00001776 _____ C:\Users\Heartel\Desktop\firefox - Verknüpfung.lnk
2017-04-01 17:03 - 2017-04-01 16:54 - 04089296 _____ C:\Users\Heartel\Desktop\adwcleaner_6.045.exe
2017-03-31 17:07 - 2017-03-31 17:07 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\Elex-tech
2017-03-31 17:07 - 2017-03-31 17:07 - 00000000 ____D C:\Program Files (x86)\Elex-tech
2017-03-29 11:00 - 2017-03-29 11:00 - 00122320 _____ C:\Users\Heartel\AppData\Local\GDIPFONTCACHEV1.DAT
2017-03-29 10:58 - 2017-04-12 18:58 - 05128208 _____ C:\Windows\system32\FNTCACHE.DAT
2017-03-20 00:48 - 2017-03-20 00:48 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2017-03-20 00:48 - 2017-03-20 00:48 - 00019112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr110_clr0400.dll
2017-03-20 00:48 - 2017-03-20 00:48 - 00019112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100_clr0400.dll
2017-03-20 00:48 - 2017-03-20 00:48 - 00019112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp110_clr0400.dll
2017-03-20 00:41 - 2017-03-20 00:41 - 00030400 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2017-03-20 00:41 - 2017-03-20 00:41 - 00019112 _____ (Microsoft Corporation) C:\Windows\system32\msvcr110_clr0400.dll
2017-03-20 00:41 - 2017-03-20 00:41 - 00019112 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100_clr0400.dll
2017-03-20 00:41 - 2017-03-20 00:41 - 00019112 _____ (Microsoft Corporation) C:\Windows\system32\msvcp110_clr0400.dll
2017-03-18 13:40 - 2017-03-18 13:40 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-03-18 13:40 - 2017-03-18 13:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-03-15 19:39 - 2017-03-15 19:39 - 00000000 ____D C:\Program Files (x86)\58C97C3C_cacayima
2017-03-14 22:21 - 2017-02-11 17:58 - 00462848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-03-14 22:21 - 2017-02-11 17:58 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-03-14 22:21 - 2017-02-11 17:58 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-03-14 22:21 - 2017-02-10 18:32 - 00803328 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-03-14 22:21 - 2017-02-10 18:17 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-03-14 22:21 - 2017-02-10 16:33 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-03-14 22:21 - 2017-02-09 18:32 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll
2017-03-14 22:21 - 2017-02-09 18:31 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2017-03-14 22:21 - 2017-02-09 18:31 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
2017-03-14 22:21 - 2017-02-09 18:14 - 00481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2017-03-14 22:21 - 2017-02-09 18:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll
2017-03-14 22:21 - 2017-02-09 17:51 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcsPlugInService.dll
2017-03-14 22:21 - 2017-02-09 16:06 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-03-14 22:21 - 2017-02-09 16:06 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-03-14 22:21 - 2017-02-06 18:14 - 00733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-03-14 22:21 - 2017-01-13 20:00 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-03-14 22:21 - 2017-01-13 20:00 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2017-03-14 22:21 - 2017-01-13 19:45 - 00741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-03-14 22:21 - 2017-01-13 19:45 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2017-03-14 22:21 - 2017-01-11 20:01 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-03-14 22:21 - 2017-01-11 20:01 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2017-03-14 22:21 - 2017-01-11 19:43 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2017-03-14 22:21 - 2017-01-11 19:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2017-03-14 21:57 - 2017-02-23 01:42 - 00084712 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-03-14 21:57 - 2017-02-23 01:37 - 01285632 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-03-14 21:57 - 2017-02-18 16:05 - 01609216 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-03-14 21:57 - 2017-02-18 16:05 - 00646656 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-03-14 21:57 - 2016-12-31 17:36 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-03-14 21:57 - 2016-12-31 17:36 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-03-14 21:57 - 2016-12-31 17:36 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2017-03-14 21:57 - 2016-12-31 17:36 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-03-14 21:57 - 2016-12-31 17:36 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-03-14 21:47 - 2017-04-11 12:57 - 00002451 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-03-14 21:42 - 2017-03-14 21:42 - 00000000 ____D C:\Program Files (x86)\58C847B7_cacayima
2017-03-08 17:17 - 2017-04-01 16:30 - 00000000 _____ C:\Windows\SysWOW64\4
2017-03-08 17:16 - 2017-04-01 16:30 - 00000000 _____ C:\Windows\SysWOW64\3
2017-03-08 17:16 - 2017-03-08 17:16 - 00000000 ____D C:\Program Files (x86)\MIO
2017-03-08 17:11 - 2017-04-11 12:57 - 00000000 ____D C:\Program Files (x86)\MK
2017-03-02 21:05 - 2017-04-11 12:53 - 00000000 _____ C:\Windows\SysWOW64\1
2017-03-01 19:01 - 2017-03-01 22:08 - 00000000 ____D C:\Users\Heartel\AppData\Local\Troubleshooter
2017-03-01 18:58 - 2016-11-23 15:37 - 00000570 _____ C:\Users\Heartel\AppData\Local\TroubleshooterConfig.json
2017-03-01 18:57 - 2017-03-01 18:57 - 00001636 _____ C:\ProgramData\Microsoft\Windows\Start Menu\BlueStacks.lnk
2017-03-01 18:55 - 2017-03-01 18:57 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2017-03-01 18:55 - 2017-02-21 15:00 - 00000000 ____D C:\ProgramData\BlueStacks
2017-03-01 17:29 - 2017-03-01 18:56 - 00000000 ____D C:\Users\Heartel\AppData\Local\Bluestacks
2017-02-28 21:29 - 2017-04-11 16:38 - 00000000 ____D C:\Windows\system32\log
2017-02-28 21:25 - 2017-02-28 21:25 - 00000000 ____D C:\Users\Heartel\AppData\Local\Ballcine
2017-02-28 21:25 - 2017-02-28 21:25 - 00000000 ____D C:\Program Files (x86)\Ballcine
2017-02-22 19:40 - 2017-04-11 12:57 - 00002463 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-02-22 19:39 - 2017-04-11 16:36 - 00003542 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-02-22 19:39 - 2017-04-11 16:36 - 00003414 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-02-22 19:39 - 2017-02-22 19:39 - 01129376 _____ (Google Inc.) C:\Users\Heartel\Downloads\ChromeSetup.exe
2017-02-21 10:25 - 2017-04-11 10:50 - 00000000 ____D C:\Program Files (x86)\Chalisy
2017-02-21 10:24 - 2017-04-10 12:06 - 00000000 ____D C:\Program Files\am7fgfeu
2017-02-20 20:08 - 2017-02-20 20:09 - 00000000 ____D C:\Users\Heartel\Downloads\modpacks^direwolf20_17^1_10_0^direwolf20_17-server
2017-02-20 20:03 - 2017-02-20 20:05 - 198527849 _____ C:\Users\Heartel\Downloads\modpacks^direwolf20_17^1_10_0^direwolf20_17-server.zip
2017-02-19 20:59 - 2017-04-02 17:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-02-19 19:29 - 2017-02-19 19:29 - 00000000 _____ C:\Windows\system32\__000000014170C8AD__C0000005.dmp
2017-02-19 19:22 - 2017-02-19 19:22 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\Threrythecicult
2017-02-19 19:18 - 2017-04-14 17:46 - 00000460 _____ C:\Windows\Tasks\UCBrowserUpdater.job
2017-02-19 19:18 - 2017-02-19 19:18 - 00003438 _____ C:\Windows\System32\Tasks\UCBrowserUpdater
2017-02-19 19:18 - 2017-02-19 19:18 - 00000000 ____D C:\Users\Heartel\AppData\Local\UCBrowser
2017-02-19 19:17 - 2017-02-19 19:29 - 00000000 ____D C:\Windows\system32\SSL
2017-02-19 19:17 - 2017-02-19 19:18 - 00000000 ____D C:\Program Files (x86)\UCBrowser
2017-02-19 19:16 - 2017-04-14 11:17 - 00625272 _____ C:\Windows\system32\NetUtils2016.dll
2017-02-19 19:16 - 2017-04-11 16:38 - 00909944 _____ C:\Windows\system32\Drivers\NetUtils2016.sys
2017-02-19 19:16 - 2017-02-19 19:16 - 00000000 ____D C:\Windows\system32\sstmp
2017-02-19 19:15 - 2017-02-19 19:16 - 00000000 ____D C:\Users\Heartel\AppData\Local\Fuwotain
2017-02-19 19:15 - 2017-02-19 19:15 - 00005994 _____ C:\Windows\System32\Tasks\Jernercult Verfier
2017-02-19 19:15 - 2017-02-19 19:15 - 00000000 ____D C:\Program Files (x86)\Jernercult Verfier
2017-02-19 19:14 - 2017-02-19 19:14 - 02400960 _____ (BitTorrent Inc.) C:\Users\Heartel\Downloads\Download%20Microsoft%20Toolkit%202.5.5%20100%%20Fu
2017-02-19 19:14 - 2017-02-19 19:14 - 00001267 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Мozillа Firеfoх.lnk
2017-02-19 19:14 - 2017-02-19 19:14 - 00001181 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооgle Сhrome.lnk
2017-02-19 19:14 - 2017-02-19 19:14 - 00001075 ___RS C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnet Eхplоrеr.lnk
2017-02-08 18:47 - 2008-01-25 10:26 - 00300544 ____R C:\Windows\system32\CmiInstallResAll64.dll
2017-02-08 18:47 - 2006-10-05 23:45 - 00524768 ____R (Microsoft Corporation) C:\Windows\difxapi.dll
2017-02-08 18:44 - 2017-02-08 18:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-02-08 18:42 - 2015-07-23 02:46 - 00572232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-02-07 22:02 - 2017-02-07 22:02 - 06975096 _____ (Tim Kosse) C:\Users\Heartel\Downloads\FileZilla_3.24.0_win64-setup.exe
2017-01-28 15:55 - 2017-04-02 17:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-01-26 12:51 - 2017-02-28 20:40 - 00000000 ____D C:\Users\Heartel\AppData\Local\ManyCam
2017-01-26 12:50 - 2017-01-26 12:50 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\ManyCam
2017-01-26 12:50 - 2017-01-26 12:50 - 00000000 ____D C:\ProgramData\Temp
2017-01-26 12:31 - 2017-01-26 13:00 - 00000000 ____D C:\Program Files (x86)\ManyCam
2017-01-22 21:50 - 2017-01-22 21:50 - 00000000 ____D C:\ProgramData\tmp
2017-01-22 21:50 - 2017-01-22 21:50 - 00000000 ____D C:\ProgramData\hps
2017-01-22 21:40 - 2017-08-02 21:43 - 00000000 ____D C:\Program Files\OnlineFotoservice

==================== Drei Monate: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-08-02 21:41 - 2015-09-18 16:04 - 00000000 ____D C:\Windows\Minidump
2017-08-02 21:23 - 2016-07-01 20:40 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
2017-08-02 21:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system
2017-08-02 21:19 - 2007-10-22 08:33 - 00000807 _____ C:\Windows\system\Cmicnfgp.ini
2017-08-02 21:05 - 2015-11-26 22:15 - 00000192 ___RH C:\Windows\ctfile.rfc
2017-04-14 18:27 - 2016-11-16 21:57 - 00000000 ____D C:\Users\Heartel\AppData\LocalLow\Mozilla
2017-04-14 18:02 - 2015-10-08 19:55 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-04-14 17:01 - 2016-02-01 21:34 - 00000392 _____ C:\Windows\Tasks\update-sys.job
2017-04-14 16:06 - 2016-02-01 21:34 - 00000392 _____ C:\Windows\Tasks\update-S-1-5-21-4225298673-1622639848-1158892530-1000.job
2017-04-14 16:06 - 2014-12-10 14:54 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\Skype
2017-04-14 15:02 - 2016-09-11 11:57 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-04-14 15:01 - 2016-09-11 11:57 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-04-14 13:09 - 2015-03-20 22:24 - 00000000 ____D C:\Program Files (x86)\Steam
2017-04-14 11:41 - 2014-12-10 15:49 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\.minecraft
2017-04-14 11:33 - 2014-12-07 21:54 - 00000000 ____D C:\Program Files\Microsoft Office
2017-04-14 11:33 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2017-04-14 11:32 - 2011-04-12 09:54 - 00000000 ____D C:\Windows\ShellNew
2017-04-14 11:30 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2017-04-14 11:30 - 2009-07-14 04:34 - 00000387 _____ C:\Windows\win.ini
2017-04-14 11:21 - 2009-07-14 06:45 - 00026544 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-04-14 11:21 - 2009-07-14 06:45 - 00026544 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-04-14 11:18 - 2014-12-14 20:07 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\TS3Client
2017-04-14 11:17 - 2011-04-12 09:43 - 00700128 _____ C:\Windows\system32\perfh007.dat
2017-04-14 11:17 - 2011-04-12 09:43 - 00149766 _____ C:\Windows\system32\perfc007.dat
2017-04-14 11:17 - 2009-07-14 07:13 - 01622694 _____ C:\Windows\system32\PerfStringBackup.INI
2017-04-14 11:17 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-04-14 11:10 - 2016-01-23 22:14 - 00000000 ____D C:\ProgramData\NVIDIA
2017-04-14 11:10 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-04-13 12:41 - 2016-08-01 19:52 - 00000000 ____D C:\Users\Heartel\AppData\Local\Spotify
2017-04-13 11:14 - 2016-08-01 19:51 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\Spotify
2017-04-12 18:22 - 2014-09-11 21:04 - 00000000 ____D C:\Windows\system32\MRT
2017-04-12 18:19 - 2014-09-11 21:04 - 148601744 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-04-12 18:17 - 2014-09-11 20:53 - 01595358 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-04-11 16:38 - 2015-01-31 15:45 - 00000000 ____D C:\AdwCleaner
2017-04-11 12:57 - 2015-05-18 20:07 - 00000000 ____D C:\Users\Heartel\AppData\Local\CrashDumps
2017-04-11 12:57 - 2014-12-07 19:41 - 00001611 _____ C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-04-09 23:08 - 2014-12-14 15:32 - 00000000 ____D C:\Users\Heartel\.gimp-2.8
2017-04-09 19:50 - 2014-12-14 17:44 - 00000000 ____D C:\Users\Heartel\AppData\Local\gtk-2.0
2017-04-08 12:42 - 2015-07-06 18:44 - 00003724 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4225298673-1622639848-1158892530-1000UA
2017-04-08 12:42 - 2015-07-06 18:44 - 00003452 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4225298673-1622639848-1158892530-1000Core
2017-04-08 12:28 - 2015-12-23 21:45 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2017-04-08 00:06 - 2010-11-21 05:27 - 00532136 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-04-04 19:49 - 2016-01-20 21:53 - 00000000 ____D C:\Users\Heartel\AppData\Local\DisplayFusion
2017-04-01 13:45 - 2015-12-23 19:43 - 00000600 _____ C:\Users\Heartel\AppData\Local\PUTTY.RND
2017-03-29 13:49 - 2014-12-11 09:54 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\Audacity
2017-03-27 20:31 - 2015-02-08 00:05 - 04843520 ___SH C:\Users\Heartel\Desktop\Thumbs.db
2017-03-18 13:40 - 2015-12-24 23:28 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2017-03-18 13:40 - 2014-12-10 14:54 - 00000000 ____D C:\ProgramData\Skype
2017-03-18 13:39 - 2014-12-07 19:47 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-15 18:33 - 2016-11-12 12:13 - 00000000 ____D C:\Windows\rescache
2017-03-15 17:36 - 2014-12-12 15:08 - 00000000 ____D C:\Windows\system32\appraiser
2017-03-15 17:36 - 2014-12-07 20:27 - 00000000 ___SD C:\Windows\system32\CompatTel
2017-03-15 17:36 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\DVD Maker

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-04-19 18:56 - 2015-12-10 21:08 - 0000000 _____ () C:\Users\Heartel\AppData\Roaming\FileIn.cns
2015-04-19 18:56 - 2015-12-10 21:08 - 0000000 _____ () C:\Users\Heartel\AppData\Roaming\FileOut.cns
2016-03-06 14:35 - 2016-03-15 15:17 - 0000282 _____ () C:\Users\Heartel\AppData\Roaming\GPU MeterV2_Settings.ini
2016-04-20 16:15 - 2016-04-20 16:24 - 0000600 _____ () C:\Users\Heartel\AppData\Roaming\PUTTY.RND
2015-11-17 20:01 - 2015-11-17 20:01 - 0174261 _____ () C:\Users\Heartel\AppData\Roaming\VideoPad.dmp
2015-12-23 19:43 - 2017-04-01 13:45 - 0000600 _____ () C:\Users\Heartel\AppData\Local\PUTTY.RND
2017-04-09 19:50 - 2017-04-09 19:50 - 0005171 _____ () C:\Users\Heartel\AppData\Local\recently-used.xbel
2014-12-22 21:40 - 2017-02-19 20:55 - 0007606 _____ () C:\Users\Heartel\AppData\Local\Resmon.ResmonCfg
2017-03-01 18:58 - 2016-11-23 15:37 - 0000570 _____ () C:\Users\Heartel\AppData\Local\TroubleshooterConfig.json
2016-02-01 21:34 - 2016-02-01 21:34 - 0000003 _____ () C:\Users\Heartel\AppData\Local\updater.log
2016-02-01 21:34 - 2016-08-06 20:05 - 0000424 _____ () C:\Users\Heartel\AppData\Local\UserProducts.xml
2014-12-07 19:51 - 2014-12-07 19:51 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-09-11 12:26 - 2016-09-11 12:46 - 0000305 _____ () C:\ProgramData\hpzinstall.log
2016-02-28 17:14 - 2016-02-28 17:14 - 0000016 _____ () C:\ProgramData\mntemp

Einige Dateien in TEMP:
====================
2017-04-14 11:30 - 2014-01-23 17:04 - 0178760 _____ (Microsoft Corporation) C:\Users\Heartel\AppData\Local\Temp\ose00000.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-04-14 13:08

==================== Ende von FRST.txt ============================
         

--- --- ---

Servus,





Schritt 1
Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser.
• Starte die adwcleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Werkzeuge > Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • Image File Execution Options Schlüssel
  • "Tracing" Schlüssel
  • "Prefetch" Dateien
  • Proxy
  • Winsock
  • Firewall
  • Internet Explorer Richtlinien
  • Chrome Richtlinien
  • Chrome Einstellungen
  • Hosts-Datei
• Bestätige die Auswahl mit Ok.
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen (auch dann wenn AdwCleaner sagt, dass nichts gefunden wurde) und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware 3

• Installiere das Programm in den vorgegebenen Pfad.
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scan, wähle den Bedrohungs-Scan aus und klicke auf Scan starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Ausgewählte Elemente in die Quarantäne verschieben.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM nach dem Neustart, klicke auf Berichte.
• Wähle den neuesten Scan-Bericht aus, klicke auf Bericht anzeigen und dann auf Export.
• Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3

• Starte die FRST erneut. Vergewissere dich, dass vor Addition.txt ein Haken gesetzt ist und drücke auf Untersuchen.
• FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
• Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

• die Logdatei von AdwCleaner,
• die Logdatei von MBAM,
• die beiden neuen Logdateien von FRST.

ADWCleaner

# AdwCleaner v6.045 - Bericht erstellt am 15/04/2017 um 22:40:02
# Aktualisiert am 28/03/2017 von Malwarebytes
# Datenbank : 2017-04-14.1 [Server]
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (X64)
# Benutzername : Heartel - GAMINGMASCHINE
# Gestartet von : C:\Users\Heartel\Desktop\adwcleaner_6.045.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****

[-] Dienst gelöscht: iSafeKrnlMon
[-] Dienst gelöscht: NetUtils2016
[-] Dienst gelöscht: ucdrv


***** [ Ordner ] *****

[#] Ordner mit Neustart gelöscht: C:\Users\Heartel\AppData\Roaming\Elex-tech
[#] Ordner mit Neustart gelöscht: C:\Program Files (x86)\Elex-tech
[-] Ordner gelöscht: C:\Program Files (x86)\Jernercult Verfier
[-] Ordner gelöscht: C:\Program Files (x86)\Chalisy
[-] Ordner gelöscht: C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\extensions\arthurj8283@gmail.com
[#] Ordner mit Neustart gelöscht: C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\extensions\arthurj8283@gmail.com
[#] Ordner mit Neustart gelöscht: C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\extensions\arthurj8283@gmail.com
[#] Ordner mit Neustart gelöscht: C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\extensions\arthurj8283@gmail.com


***** [ Dateien ] *****

[#] Datei gelöscht: C:\Windows\SysNative\NetUtils2016.dll
[-] Datei gelöscht: C:\Windows\SysNative\drivers\iSafeNetFilter.sys
[-] Datei gelöscht: C:\Windows\SysNative\drivers\NetUtils2016.sys
[#] Datei gelöscht: C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\searchplugins\luck.xml
[#] Datei gelöscht: C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\searchplugins\ourluckysites.xml


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****

[-] Verknüpfung desinfiziert: C:\Users\Public\Desktop\Google Chrome.lnk
[-] Verknüpfung desinfiziert: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
[-] Verknüpfung desinfiziert: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games\Train Simulator\Train Simulator Editoren & Tools.lnk
[-] Verknüpfung desinfiziert: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games\Train Simulator\Train Simulator.lnk
[-] Verknüpfung desinfiziert: C:\Users\Heartel\Desktop\firefox - Verknüpfung.lnk
[-] Verknüpfung desinfiziert: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[-] Verknüpfung desinfiziert: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
[-] Verknüpfung desinfiziert: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[-] Verknüpfung desinfiziert: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\firefox - Verknüpfung.lnk
[-] Verknüpfung desinfiziert: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9b4132eb14cd54df\Google Chrome.lnk
[-] Verknüpfung desinfiziert: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk
[-] Verknüpfung desinfiziert: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\Google Chrome.lnk


***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\services\iSafeKrnl
[-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\services\iSafeKrnlBoot
[-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\services\iSafeKrnlKit
[-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\services\iSafeKrnlR3
[-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\services\iSafeNetFilter
[-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\services\iSafeService
[-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\services\isafekrnl
[-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\services\isafekrnlboot
[-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\services\isafekrnlkit
[-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\services\isafekrnlmon
[-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\services\isafekrnlr3
[-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\services\isafenetfilter
[-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\services\isafeservice
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\UCHTML
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Elex-tech
[-] Schlüssel gelöscht: HKLM\SOFTWARE\b`nl{y
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\b`nl{y
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\HDWallpaper
[#] Daten mit Neustart wiederhergestellt: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\Software\Microsoft\Internet Explorer\Main [Start Page] 
[#] Daten mit Neustart wiederhergestellt: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] 
[#] Daten mit Neustart wiederhergestellt: HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] 
[#] Daten mit Neustart wiederhergestellt: HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] 
[-] Daten  wiederhergestellt: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] 
[#] Daten mit Neustart wiederhergestellt: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] 
[#] Daten mit Neustart wiederhergestellt: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] 
[-] Daten  wiederhergestellt: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] 
[#] Daten mit Neustart wiederhergestellt: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] 
[#] Daten mit Neustart wiederhergestellt: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] 
[-] Daten  wiederhergestellt: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] 
[#] Daten mit Neustart wiederhergestellt: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] 
[#] Daten mit Neustart wiederhergestellt: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] 
[-] Daten  wiederhergestellt: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] 
[-] Schlüssel gelöscht: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[#] Daten mit Neustart wiederhergestellt: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[#] Daten mit Neustart wiederhergestellt: HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Schlüssel gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[#] Daten mit Neustart wiederhergestellt: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[#] Daten mit Neustart wiederhergestellt: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Wert gelöscht: HKLM\SOFTWARE\Mozilla\Firefox\Extensions [arthurj8283@gmail.com]
[#] Wert mit Neustart gelöscht: HKLM\SOFTWARE\Mozilla\Firefox\Extensions [arthurj8283@gmail.com]
[#] Wert mit Neustart gelöscht: HKLM\SOFTWARE\Mozilla\Firefox\Extensions [arthurj8283@gmail.com]
[#] Wert mit Neustart gelöscht: HKLM\SOFTWARE\Mozilla\Firefox\Extensions [arthurj8283@gmail.com]


***** [ Browser ] *****

[-] Firefox Einstellungen bereinigt: "browser.newtab.url" -  "hxxp://www.luckysearch123.com?type=hp&ts=1492074510&from=49de0413&uid=wdcxwd10ezex-00bn5a0_wd-wcc3f4enzvd2nzvd2&z=caf75858c1885b33bd6c313gez4tdobe7m6zewagaz"
[-] Firefox Einstellungen bereinigt: "browser.search.searchengine.iconURL" -  "hxxp://www.luckysearch123.com/favicon.ico?t=1"
[-] Firefox Einstellungen bereinigt: "browser.search.searchengine.url" -  "hxxp://www.luckysearch123.com/search.php?type=ds&ts=1492074510&from=49de0413&uid=wdcxwd10ezex-00bn5a0_wd-wcc3f4enzvd2nzvd2&z=caf75858c1885b33bd6c313gez4tdobe7m6zewagaz&q={searchTerms}"
[-] Firefox Einstellungen bereinigt: "browser.startup.homepage" -  "hxxp://www.luckysearch123.com?type=hp&ts=1492074510&from=49de0413&uid=wdcxwd10ezex-00bn5a0_wd-wcc3f4enzvd2nzvd2&z=caf75858c1885b33bd6c313gez4tdobe7m6zewagaz"
[-] Firefox Einstellungen bereinigt: "browser.newtab.url" -  "hxxp://www.luckysearch123.com?type=hp&ts=1492074510&from=49de0413&uid=wdcxwd10ezex-00bn5a0_wd-wcc3f4enzvd2nzvd2&z=caf75858c1885b33bd6c313gez4tdobe7m6zewagaz"
[-] Firefox Einstellungen bereinigt: "browser.search.searchengine.iconURL" -  "hxxp://www.luckysearch123.com/favicon.ico?t=1"
[-] Firefox Einstellungen bereinigt: "browser.search.searchengine.url" -  "hxxp://www.luckysearch123.com/search.php?type=ds&ts=1492074510&from=49de0413&uid=wdcxwd10ezex-00bn5a0_wd-wcc3f4enzvd2nzvd2&z=caf75858c1885b33bd6c313gez4tdobe7m6zewagaz&q={searchTerms}"
[-] Firefox Einstellungen bereinigt: "browser.startup.homepage" -  "hxxp://www.luckysearch123.com?type=hp&ts=1492074510&from=49de0413&uid=wdcxwd10ezex-00bn5a0_wd-wcc3f4enzvd2nzvd2&z=caf75858c1885b33bd6c313gez4tdobe7m6zewagaz"
[-] [C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1] [startup_urls] Gelöscht: hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
[-] [C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1] [favicon_url] Gelöscht: hxxp://www.ourluckysites.com/searchfavicon.ico
[-] [C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1] [homepage] Gelöscht: hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2


*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: "Image File Execution Options" Schlüssel gelöscht
:: "Prefetch" Dateien gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Firewall Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht
:: Chrome Einstellungen zurückgesetzt: C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\Profile 1
:: Chrome Einstellungen zurückgesetzt: C:\Users\Heartel\AppData\Local\Google\Chrome\User Data\ChromeDefaultData
:: Hosts-Datei wiederhergestellt

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [11288 Bytes] - [15/04/2017 22:40:02]
C:\AdwCleaner\AdwCleaner[S0].txt - [12497 Bytes] - [15/04/2017 22:37:56]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [11436 Bytes] ##########
         

MBAM.txt ist zu groß...

->Anhang

FRST
[CODE]ich
FRST Logfile:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017 (ACHTUNG: ====> FRSTVersion ist 31 Tage alt und könnte veraltet sein)
durchgeführt von Heartel (Administrator) auf GAMINGMASCHINE (15-04-2017 23:40:42)
Gestartet von C:\Users\Heartel\Desktop
Geladene Profile: Heartel &  (Verfügbare Profile: Heartel)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Windows\system\CMGxMon.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(CMedia) C:\Program Files\ASUS Xonar DX Audio\Customapp\AsusAudioCenter.exe
() C:\Program Files\ASUS Xonar DX Audio\Customapp\MXmon.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
(Spotify Ltd) C:\Users\Heartel\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(© 2015 Microsoft Corporation) C:\Users\Heartel\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Audigy Fx\Sound Blaster Audigy Fx Control Panel\SBAdgyFx.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.1\Lightshot.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671792 2014-03-14] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-05-02] (NVIDIA Corporation)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)
HKLM\...\Run: [Cmaudio8788] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cmicnfgp.cpl,CMICtrlWnd
HKLM\...\Run: [Cmaudio8788GX] => C:\Windows\system\CmGxMon.exe [20480 2007-12-19] ()
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1087960 2014-03-20] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Sound Blaster Audigy Fx Control Panel] => C:\Program Files (x86)\Creative\Sound Blaster Audigy Fx\Sound Blaster Audigy Fx Control Panel\SBAdgyFx.exe [861184 2013-11-08] (Creative Technology Ltd)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [DisplayFusion] => C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [8587256 2016-01-19] (Binary Fortress Software)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [Spotify Web Helper] => C:\Users\Heartel\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-04-05] (Spotify Ltd)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3019552 2017-03-23] (Valve Corporation)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [BingSvc] => C:\Users\Heartel\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27545048 2017-03-14] (Skype Technologies S.A.)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Run: [Google Update] => C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\GoogleUpdateCore.exe [599632 2017-04-08] (Google Inc.)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\MountPoints2: {15888e6b-9a96-11e4-94bd-74d435f41938} - F:\LaunchU3.exe
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\MountPoints2: {1d6d65cc-7e36-11e4-840a-806e6f6e6963} - D:\Run.exe
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\MountPoints2: {3014f7b8-015b-11e5-8828-74d435f41938} - F:\LaunchU3.exe -a
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\MountPoints2: {354da4f3-b3d7-11e6-b7d5-74d435f41938} - F:\OnePlus_setup.exe /s
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\MountPoints2: {b0600c7d-bff3-11e4-8ed5-74d435f41938} - F:\setup.exe
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\Run: [DisplayFusion] => C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [8587256 2016-01-19] (Binary Fortress Software)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\Run: [Spotify Web Helper] => C:\Users\Heartel\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-04-05] (Spotify Ltd)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7063832 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3019552 2017-03-23] (Valve Corporation)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\Run: [BingSvc] => C:\Users\Heartel\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27545048 2017-03-14] (Skype Technologies S.A.)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\Run: [Google Update] => C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\GoogleUpdateCore.exe [599632 2017-04-08] (Google Inc.)
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\MountPoints2: {15888e6b-9a96-11e4-94bd-74d435f41938} - F:\LaunchU3.exe
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\MountPoints2: {1d6d65cc-7e36-11e4-840a-806e6f6e6963} - D:\Run.exe
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\MountPoints2: {3014f7b8-015b-11e5-8828-74d435f41938} - F:\LaunchU3.exe -a
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\MountPoints2: {354da4f3-b3d7-11e6-b7d5-74d435f41938} - F:\OnePlus_setup.exe /s
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\MountPoints2: {b0600c7d-bff3-11e4-8ed5-74d435f41938} - F:\setup.exe
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)
IFEO\taskmgr.exe: [Debugger] 
ShellExecuteHooks: Kein Name - {19B5BEEC-F444-11E6-83B9-64006A5CFC23} - C:\Program Files (x86)\Chalisy\Reomotain.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [KzShlobj] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} =>  -> Keine Datei
Startup: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MSI GamingApp.lnk [2015-10-09]
ShortcutTarget: MSI GamingApp.lnk -> C:\Program Files (x86)\MSI\MSI GamingApp\MSIGamingApp.exe (Micro-Star International Co., Ltd.)
Startup: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Teamspeak 3.lnk [2015-02-27]
ShortcutTarget: Teamspeak 3.lnk -> C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe (TeamSpeak Systems GmbH)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{999D1179-744D-4DD5-BC88-B2651E02B3E8}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{D1C6F279-1FA0-4641-87DB-A1C0B126CAAA}: [DhcpNameServer] 192.168.48.2

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&ts=1491057038&z=aa0b238a31a1bb00463518ag9z9t3g2e5w1m9g4eao&from=che0812&uid=WDCXWD10EZEX-00BN5A0_WD-WCC3F4ENZVD2NZVD2
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\Software\Microsoft\Internet Explorer\Main,Start Page = 
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-1de21753&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436215 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436319 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-1de21753&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-1de21753&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000 -> {08B1AC39-6A34-4C48-ADB1-539FAE119548} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-1de21753&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-1de21753&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437 -> {08B1AC39-6A34-4C48-ADB1-539FAE119548} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-09-13] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-13] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-09-13] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-13] (Oracle Corporation)
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://files.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505 [2017-04-15]
FF user.js: detected! => C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\user.js [2017-04-13]
FF NewTab: Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505 -> hxxp://www.luckysearch123.com?type=hp&ts=1492074510&from=49de0413&uid=wdcxwd10ezex-00bn5a0_wd-wcc3f4enzvd2nzvd2&z=caf75858c1885b33bd6c313gez4tdobe7m6zewagaz
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505 -> luck
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505 -> luck
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505 -> luck
FF Homepage: Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505 -> hxxp://www.luckysearch123.com?type=hp&ts=1492074510&from=49de0413&uid=wdcxwd10ezex-00bn5a0_wd-wcc3f4enzvd2nzvd2&z=caf75858c1885b33bd6c313gez4tdobe7m6zewagaz
FF Extension: (convert2mp3.net YouTube2MP3 Converter) - C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\Extensions\info@convert2mp3.net.xpi [2017-04-14]
FF Extension: (Adblock Plus) - C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-04-02]
FF Extension: (Disable Prefetch) - C:\Users\Heartel\AppData\Roaming\Mozilla\Firefox\Profiles\vbbq4sdc.default-1491061276505\features\{4bf942c7-75a0-4281-8e25-94166fc0ef77}\disable-prefetch@mozilla.org.xpi [2017-04-08]
FF Extension: (Site Deployment Checker) - C:\Program Files (x86)\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi [2017-04-01] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-11] ()
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-13] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-13] (Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-11] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-13] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-07-23] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-07-23] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-11] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Heartel\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000: @talk.google.com/O1DPlugin -> C:\Users\Heartel\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-08] (Google Inc.)
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-08] (Google Inc.)
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Heartel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-01-22] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437: @talk.google.com/GoogleTalkPlugin -> C:\Users\Heartel\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437: @talk.google.com/O1DPlugin -> C:\Users\Heartel\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437: @tools.google.com/Google Update;version=3 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-08] (Google Inc.)
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437: @tools.google.com/Google Update;version=9 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-08] (Google Inc.)
FF Plugin HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Heartel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-01-22] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Heartel\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Heartel\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\browser\defaults\preferences\firefox.js [2017-02-19]

Chrome: 
=======
CHR DefaultProfile: Profile 1
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [blmlepcapjlbgcpkdlffnhibhpecongp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [428056 2017-02-21] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [406040 2017-02-21] (BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe [452632 2017-02-21] (BlueStack Systems, Inc.)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2015-11-27] (Creative Labs) [Datei ist nicht signiert]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [429056 2013-10-28] (Creative Technology Ltd) [Datei ist nicht signiert]
R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [4664856 2016-01-19] (Binary Fortress Software)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-10-03] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
S2 iSafeService; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [131024 2016-12-02] () [Datei ist nicht signiert]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-05-02] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-05-02] (NVIDIA Corporation)
S3 Origin Client Service; E:\Origin\OriginClientService.exe [2119688 2016-12-30] (Electronic Arts)
S2 Origin Web Helper Service; E:\Origin\OriginWebHelperService.exe [2180624 2016-12-30] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75064 2016-12-30] ()
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10351856 2016-12-15] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-04-09] (Microsoft Corporation)
S2 UCBrowserSvc; "C:\Program Files (x86)\UCBrowser\Application\UCService.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 AFXfilt; C:\Windows\System32\drivers\AFXfilt.sys [25088 2013-06-04] (Creative Technology Ltd.)
S3 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [152672 2017-02-21] (BlueStack Systems)
S3 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [270904 2017-02-21] (Bluestack System Inc. )
R3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [1197568 2008-01-18] (C-Media Inc)
S3 cthdb; C:\Windows\System32\DRIVERS\cthdb.sys [25088 2013-12-09] (Creative Technology Ltd)
S3 e1qexpress; C:\Windows\System32\DRIVERS\e1q60x64.sys [244736 2009-06-10] (Intel Corporation)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-03-22] ()
S3 EuMusDesignVirtualAudioCableWdm; C:\Windows\System32\DRIVERS\vrtaucbl.sys [67584 2015-08-24] (Eugene V. Muzychenko) [Datei ist nicht signiert]
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-11] (Intel Corporation)
S1 iSafeKrnl; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [262344 2016-05-23] () [Datei ist nicht signiert]
S1 iSafeKrnlKit; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [110112 2016-05-23] () [Datei ist nicht signiert]
S1 iSafeKrnlR3; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [103904 2016-05-23] () [Datei ist nicht signiert]
R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [42016 2013-11-27] (Visicom Media Inc.)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [186304 2017-04-15] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [111544 2017-04-15] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2017-04-15] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [251832 2017-04-15] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [82720 2017-04-15] (Malwarebytes)
R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35232 2013-12-06] (Visicom Media Inc.)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [118272 2014-03-20] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-05-02] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [11376 2015-12-10] () [Datei ist nicht signiert]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-12-07] (Duplex Secure Ltd.)
S1 ucdrv; C:\Program Files (x86)\UCBrowser\Security:ucdrv-x64.sys [25444 ] (UC Web Inc.) <==== ACHTUNG
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-08-16] (Apple, Inc.) [Datei ist nicht signiert]
R3 VBAudioVACMME; C:\Windows\System32\DRIVERS\vbaudio_cable64_win7.sys [41192 2015-08-24] (Windows (R) Win 7 DDK provider)
U3 ad3qz7th; C:\Windows\System32\Drivers\ad3qz7th.sys [0 ] (Microsoft Corporation) <==== ACHTUNG (Null Byte Datei/Ordner)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 iSafeKrnlBoot; system32\DRIVERS\iSafeKrnlBoot.sys [X]
S1 iSafeNetFilter; system32\DRIVERS\iSafeNetFilter.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-08-02 21:19 - 2017-08-02 21:19 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\ASUS
2017-08-02 21:19 - 2017-08-02 21:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS Xonar DX Audio
2017-08-02 21:19 - 2017-08-02 21:19 - 00000000 ____D C:\Program Files (x86)\OpenAL
2017-08-02 21:19 - 2008-01-11 12:20 - 00192512 ____R (C-Media Electronics Inc.) C:\Windows\system\CMGxSrv.dll
2017-08-02 21:19 - 2008-01-10 11:58 - 06475776 ____R (C-Media Corporation) C:\Windows\SysWOW64\CmiCnfgp.cpl
2017-08-02 21:19 - 2007-12-19 04:41 - 00020480 ____R () C:\Windows\system\CMGxMon.exe
2017-08-02 21:19 - 2007-12-13 11:12 - 00122880 ____R (CMedia Electronics Inc.) C:\Windows\SysWOW64\Cm_Oal.dll
2017-08-02 21:19 - 2007-12-13 11:12 - 00122880 ____R (CMedia Electronics Inc.) C:\Windows\system32\Cm_Oal.dll
2017-08-02 21:19 - 2007-12-05 06:40 - 00450560 ____R (C-Media Electronics Inc.) C:\Windows\system32\cmasiopx.dll
2017-08-02 21:19 - 2007-12-05 06:38 - 00172094 ____R (C-Media Electronics Inc.) C:\Windows\SysWOW64\cmasiop.dll
2017-08-02 21:19 - 2007-11-27 04:30 - 00782336 ____R (Creative Labs Inc.) C:\Windows\SysWOW64\tmpF4BA.tmp
2017-08-02 21:19 - 2007-11-27 04:30 - 00782336 ____R (Creative Labs Inc.) C:\Windows\SysWOW64\tmp5DAA.tmp
2017-08-02 21:19 - 2007-11-27 04:30 - 00782336 ____R (Creative Labs Inc.) C:\Windows\SysWOW64\tmp5DA9.tmp
2017-08-02 21:19 - 2007-11-04 19:30 - 01144983 ____R C:\Windows\KB936225x64.msu
2017-08-02 21:19 - 2007-10-22 14:01 - 00139264 ____R C:\Windows\SysWOW64\VmixP8.dll
2017-08-02 21:19 - 2006-09-13 04:21 - 00200704 ____R (C-Media) C:\Windows\SysWOW64\Cmpaoxy.dll
2017-08-02 21:19 - 2005-04-13 09:29 - 00032768 ____R (C-Media Inc.) C:\Windows\SysWOW64\CmPropP.dll
2017-08-02 21:19 - 2001-11-23 06:08 - 00712704 ____R (Sensaura Ltd) C:\Windows\system32\Audio3Dp.dll
2017-08-02 21:19 - 2001-11-23 06:08 - 00712704 ____R (Sensaura Ltd) C:\Windows\system32\a3d.dll
2017-08-02 21:18 - 2017-08-02 21:19 - 00036425 _____ C:\Windows\Cmicnfgp.ini.cfl
2017-08-02 21:18 - 2017-08-02 21:19 - 00000868 _____ C:\Windows\Cmicnfgp.ini.imi
2017-08-02 21:18 - 2017-08-02 21:19 - 00000140 _____ C:\Windows\system\Dlap.pfx
2017-08-02 21:18 - 2017-08-02 21:19 - 00000000 ____D C:\Program Files\ASUS Xonar DX Audio
2017-08-02 21:18 - 2008-01-25 10:30 - 00718848 ____R C:\Windows\system32\Cmeauoxy.exe
2017-08-02 21:18 - 2008-01-18 10:58 - 01197568 _____ (C-Media Inc) C:\Windows\system32\Drivers\cmudaxp.sys
2017-08-02 21:18 - 2007-12-21 09:54 - 00007052 ____R C:\Windows\Cmicnfgp.ini.cfg
2017-08-02 21:18 - 2007-04-19 09:12 - 00032768 _____ (C-Media Electronics Inc.) C:\Windows\system32\cmudaxp.dll
2017-08-02 21:18 - 2004-04-14 05:28 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\SysWOW64\CmiFltr.dll
2017-08-02 21:18 - 2004-04-14 05:28 - 00315392 _____ (C-Media Electronics Inc.) C:\Windows\system\CmiFltr.dll
2017-04-15 23:40 - 2017-04-15 23:40 - 00881906 _____ C:\Users\Heartel\Desktop\mbam.txt
2017-04-15 22:44 - 2017-04-15 22:44 - 00186304 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-04-15 22:43 - 2017-04-15 23:34 - 00082720 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-04-15 22:43 - 2017-04-15 23:33 - 00251832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-04-15 22:43 - 2017-04-15 23:33 - 00111544 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-04-15 22:43 - 2017-04-15 23:33 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-04-15 22:43 - 2017-04-15 22:43 - 00001871 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-04-15 22:43 - 2017-04-15 22:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-04-15 22:43 - 2017-04-15 22:43 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-04-15 22:43 - 2017-04-15 22:43 - 00000000 ____D C:\Program Files\Malwarebytes
2017-04-15 22:43 - 2017-03-22 11:02 - 00077440 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-04-15 22:29 - 2017-04-15 22:30 - 60107896 _____ (Malwarebytes ) C:\Users\Heartel\Desktop\mb3-setup-consumer-3.0.6.1469-10103.exe
2017-04-15 22:27 - 2017-04-15 22:27 - 04089296 _____ C:\Users\Heartel\Desktop\adwcleaner_6.045.exe
2017-04-13 11:17 - 2017-04-13 11:19 - 00229612 _____ C:\TDSSKiller.3.1.0.12_13.04.2017_11.17.06_log.txt
2017-04-13 11:16 - 2017-04-13 11:16 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Heartel\Desktop\tdsskiller.exe
2017-04-13 11:13 - 2017-04-14 18:31 - 00079853 _____ C:\Users\Heartel\Desktop\Addition.txt
2017-04-13 11:11 - 2017-04-15 23:41 - 00032676 _____ C:\Users\Heartel\Desktop\FRST.txt
2017-04-13 11:11 - 2017-04-15 23:40 - 00000000 ____D C:\FRST
2017-04-13 11:11 - 2017-04-13 11:11 - 02424832 _____ (Farbar) C:\Users\Heartel\Desktop\FRST64.exe
2017-04-12 14:31 - 2017-03-27 20:13 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-04-12 14:31 - 2017-03-27 19:28 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-04-12 14:31 - 2017-03-25 21:39 - 20284416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-04-12 14:31 - 2017-03-25 21:07 - 04604416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-04-12 14:31 - 2017-03-25 21:06 - 13654016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-04-12 14:31 - 2017-03-25 20:55 - 02767360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-04-12 14:31 - 2017-03-25 20:52 - 02289152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-04-12 14:31 - 2017-03-25 20:51 - 01313280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-04-12 14:31 - 2017-03-25 20:48 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-04-12 14:31 - 2017-03-25 20:47 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-04-12 14:31 - 2017-03-25 20:47 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-04-12 14:31 - 2017-03-25 20:47 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-04-12 14:31 - 2017-03-25 20:46 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-04-12 14:31 - 2017-03-25 20:45 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-04-12 14:31 - 2017-03-25 20:45 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-04-12 14:31 - 2017-03-25 20:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-04-12 14:31 - 2017-03-25 20:44 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-04-12 14:31 - 2017-03-25 20:35 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-04-12 14:31 - 2017-03-25 20:35 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-04-12 14:31 - 2017-03-25 20:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-04-12 14:31 - 2017-03-25 20:14 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-04-12 14:31 - 2017-03-25 20:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-04-12 14:31 - 2017-03-25 20:13 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-04-12 14:31 - 2017-03-25 20:13 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-04-12 14:31 - 2017-03-25 20:10 - 02898432 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-04-12 14:31 - 2017-03-25 20:04 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-04-12 14:31 - 2017-03-25 20:02 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-04-12 14:31 - 2017-03-25 19:57 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-04-12 14:31 - 2017-03-25 19:56 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-04-12 14:31 - 2017-03-25 19:56 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-04-12 14:31 - 2017-03-25 19:56 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-04-12 14:31 - 2017-03-25 19:56 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-04-12 14:31 - 2017-03-25 19:52 - 25746944 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-04-12 14:31 - 2017-03-25 19:45 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-04-12 14:31 - 2017-03-25 19:41 - 06045696 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-04-12 14:31 - 2017-03-25 19:41 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-04-12 14:31 - 2017-03-25 19:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-04-12 14:31 - 2017-03-25 19:29 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-04-12 14:31 - 2017-03-25 19:24 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-04-12 14:31 - 2017-03-25 19:23 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-04-12 14:31 - 2017-03-25 19:20 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-04-12 14:31 - 2017-03-25 19:19 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-04-12 14:31 - 2017-03-25 19:17 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-04-12 14:31 - 2017-03-25 19:06 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-04-12 14:31 - 2017-03-25 19:04 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-04-12 14:31 - 2017-03-25 19:00 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-04-12 14:31 - 2017-03-25 18:59 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-04-12 14:31 - 2017-03-25 18:57 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-04-12 14:31 - 2017-03-25 18:57 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-04-12 14:31 - 2017-03-25 18:28 - 15259136 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-04-12 14:31 - 2017-03-25 18:27 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-04-12 14:31 - 2017-03-25 18:24 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-04-12 14:31 - 2017-03-25 18:10 - 01546240 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-04-12 14:31 - 2017-03-25 18:01 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-04-12 14:31 - 2017-03-25 00:50 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-04-12 14:31 - 2017-03-25 00:42 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-04-12 14:31 - 2017-03-22 17:32 - 03165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-04-12 14:31 - 2017-03-22 17:32 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-04-12 14:31 - 2017-03-22 17:32 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-04-12 14:31 - 2017-03-22 17:30 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2017-04-12 14:31 - 2017-03-22 17:24 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2017-04-12 14:31 - 2017-03-22 17:17 - 02651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-04-12 14:31 - 2017-03-22 17:15 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-04-12 14:31 - 2017-03-22 17:15 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-04-12 14:31 - 2017-03-22 17:15 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-04-12 14:31 - 2017-03-22 17:15 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-04-12 14:31 - 2017-03-22 17:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-04-12 14:31 - 2017-03-22 17:15 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2017-04-12 14:31 - 2017-03-22 17:05 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-04-12 14:31 - 2017-03-22 17:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2017-04-12 14:31 - 2017-03-22 17:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2017-04-12 14:31 - 2017-03-22 17:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2017-04-12 14:31 - 2017-03-14 17:34 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-04-12 14:31 - 2017-03-14 17:34 - 00265448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-04-12 14:31 - 2017-03-14 17:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2017-04-12 14:31 - 2017-03-10 18:35 - 00382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-04-12 14:31 - 2017-03-10 18:31 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-04-12 14:31 - 2017-03-10 18:31 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-04-12 14:31 - 2017-03-10 18:31 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-04-12 14:31 - 2017-03-10 18:31 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-04-12 14:31 - 2017-03-10 18:27 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-04-12 14:31 - 2017-03-10 18:20 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-04-12 14:31 - 2017-03-10 18:19 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-04-12 14:31 - 2017-03-10 18:19 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-04-12 14:31 - 2017-03-10 18:00 - 03219968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-04-12 14:31 - 2017-03-10 17:53 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-04-12 14:31 - 2017-03-08 22:20 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2017-04-12 14:31 - 2017-03-08 22:10 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2017-04-12 14:31 - 2017-03-08 06:37 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-04-12 14:31 - 2017-03-08 06:36 - 05548264 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-04-12 14:31 - 2017-03-08 06:36 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-04-12 14:31 - 2017-03-08 06:36 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-04-12 14:31 - 2017-03-08 06:36 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-04-12 14:31 - 2017-03-08 06:34 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 02064384 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:26 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-04-12 14:31 - 2017-03-08 06:26 - 03945192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-04-12 14:31 - 2017-03-08 06:24 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 01416192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-04-12 14:31 - 2017-03-08 06:22 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:21 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 06:03 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-04-12 14:31 - 2017-03-08 06:03 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-04-12 14:31 - 2017-03-08 06:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-04-12 14:31 - 2017-03-08 06:03 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-04-12 14:31 - 2017-03-08 06:00 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-04-12 14:31 - 2017-03-08 05:59 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-04-12 14:31 - 2017-03-08 05:57 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-04-12 14:31 - 2017-03-08 05:56 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-04-12 14:31 - 2017-03-08 05:56 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-04-12 14:31 - 2017-03-08 05:56 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-04-12 14:31 - 2017-03-08 05:55 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-04-12 14:31 - 2017-03-08 05:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-04-12 14:31 - 2017-03-08 05:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-04-12 14:31 - 2017-03-08 05:54 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-04-12 14:31 - 2017-03-08 05:54 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-04-12 14:31 - 2017-03-08 05:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-04-12 14:31 - 2017-03-08 05:53 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-04-12 14:31 - 2017-03-08 05:53 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 05:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 05:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-04-12 14:31 - 2017-03-08 05:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-04-12 14:31 - 2017-03-07 18:30 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-04-12 14:31 - 2017-03-07 18:17 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2017-04-12 14:31 - 2017-03-07 16:05 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-04-12 14:31 - 2017-03-04 03:27 - 01574912 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-04-12 14:31 - 2017-03-04 03:27 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2017-04-12 14:31 - 2017-03-04 03:14 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-04-12 14:31 - 2017-03-04 03:14 - 00077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
2017-04-12 14:31 - 2017-02-14 18:33 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-04-12 14:31 - 2017-02-14 18:19 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2017-04-12 14:31 - 2017-02-11 18:33 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-04-12 14:31 - 2017-02-11 18:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2017-04-12 14:31 - 2017-02-09 18:32 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2017-04-12 14:31 - 2017-02-09 18:32 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2017-04-12 14:31 - 2017-02-09 18:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:36 - 00011608 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2017-04-12 14:31 - 2017-01-18 17:35 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2017-04-12 14:31 - 2016-03-24 00:40 - 03181568 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2017-04-12 14:31 - 2016-03-24 00:40 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2017-04-10 12:07 - 2017-04-11 16:28 - 00000000 ____D C:\Users\Heartel\AppData\Local\AMD
2017-04-10 12:07 - 2017-04-10 12:07 - 00000000 ____D C:\Update
2017-04-09 19:50 - 2017-04-09 19:50 - 00005171 _____ C:\Users\Heartel\AppData\Local\recently-used.xbel
2017-04-01 17:41 - 2017-04-01 17:41 - 00000000 ____D C:\Users\Heartel\Desktop\Old Firefox Data
2017-04-01 17:35 - 2017-04-15 22:39 - 00001017 _____ C:\Users\Heartel\Desktop\firefox - Verknüpfung.lnk
2017-03-31 17:07 - 2017-03-31 17:07 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\Elex-tech
2017-03-31 17:07 - 2017-03-31 17:07 - 00000000 ____D C:\Program Files (x86)\Elex-tech
2017-03-29 11:00 - 2017-04-15 13:19 - 00120304 _____ C:\Users\Heartel\AppData\Local\GDIPFONTCACHEV1.DAT
2017-03-29 10:58 - 2017-04-15 13:17 - 05125088 _____ C:\Windows\system32\FNTCACHE.DAT
2017-03-20 00:48 - 2017-03-20 00:48 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2017-03-20 00:48 - 2017-03-20 00:48 - 00019112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr110_clr0400.dll
2017-03-20 00:48 - 2017-03-20 00:48 - 00019112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100_clr0400.dll
2017-03-20 00:48 - 2017-03-20 00:48 - 00019112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp110_clr0400.dll
2017-03-20 00:41 - 2017-03-20 00:41 - 00030400 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2017-03-20 00:41 - 2017-03-20 00:41 - 00019112 _____ (Microsoft Corporation) C:\Windows\system32\msvcr110_clr0400.dll
2017-03-20 00:41 - 2017-03-20 00:41 - 00019112 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100_clr0400.dll
2017-03-20 00:41 - 2017-03-20 00:41 - 00019112 _____ (Microsoft Corporation) C:\Windows\system32\msvcp110_clr0400.dll
2017-03-18 13:40 - 2017-03-18 13:40 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-03-18 13:40 - 2017-03-18 13:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-08-02 21:43 - 2017-01-22 21:40 - 00000000 ____D C:\Program Files\OnlineFotoservice
2017-08-02 21:41 - 2015-09-18 16:04 - 00000000 ____D C:\Windows\Minidump
2017-08-02 21:23 - 2016-07-01 20:40 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
2017-08-02 21:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system
2017-08-02 21:19 - 2007-10-22 08:33 - 00000807 _____ C:\Windows\system\Cmicnfgp.ini
2017-08-02 21:05 - 2015-11-26 22:15 - 00000192 ___RH C:\Windows\ctfile.rfc
2017-04-15 23:41 - 2009-07-14 06:45 - 00026544 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-04-15 23:41 - 2009-07-14 06:45 - 00026544 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-04-15 23:39 - 2015-03-20 22:24 - 00000000 ____D C:\Program Files (x86)\Steam
2017-04-15 23:39 - 2011-04-12 09:43 - 00700128 _____ C:\Windows\system32\perfh007.dat
2017-04-15 23:39 - 2011-04-12 09:43 - 00149766 _____ C:\Windows\system32\perfc007.dat
2017-04-15 23:39 - 2009-07-14 07:13 - 01622694 _____ C:\Windows\system32\PerfStringBackup.INI
2017-04-15 23:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-04-15 23:35 - 2014-12-10 14:54 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\Skype
2017-04-15 23:34 - 2014-12-14 20:07 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\TS3Client
2017-04-15 23:33 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-04-15 23:32 - 2016-01-23 22:14 - 00000000 ____D C:\ProgramData\NVIDIA
2017-04-15 23:02 - 2017-02-19 19:17 - 00000000 ____D C:\Program Files (x86)\UCBrowser
2017-04-15 23:02 - 2015-10-08 19:55 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-04-15 22:43 - 2016-11-16 21:57 - 00000000 ____D C:\Users\Heartel\AppData\LocalLow\Mozilla
2017-04-15 22:41 - 2017-02-19 19:16 - 00625272 ____N C:\Windows\system32\NetUtils2016.dll
2017-04-15 22:40 - 2015-01-31 15:45 - 00000000 ____D C:\AdwCleaner
2017-04-15 22:39 - 2017-03-14 21:47 - 00001246 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-04-15 22:39 - 2017-02-22 19:40 - 00001258 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-04-15 22:39 - 2014-12-07 19:41 - 00001003 _____ C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-04-15 21:01 - 2016-02-01 21:34 - 00000392 _____ C:\Windows\Tasks\update-sys.job
2017-04-15 20:06 - 2016-02-01 21:34 - 00000392 _____ C:\Windows\Tasks\update-S-1-5-21-4225298673-1622639848-1158892530-1000.job
2017-04-15 14:18 - 2016-08-01 19:52 - 00000000 ____D C:\Users\Heartel\AppData\Local\Spotify
2017-04-15 13:58 - 2016-08-01 19:51 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\Spotify
2017-04-15 13:58 - 2016-01-15 20:02 - 00000000 ____D C:\Program Files\Rockstar Games
2017-04-15 13:58 - 2016-01-15 20:02 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2017-04-15 13:22 - 2014-12-10 15:49 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\.minecraft
2017-04-14 18:44 - 2016-12-30 17:21 - 00215128 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2017-04-14 18:44 - 2016-12-30 17:20 - 00215128 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2017-04-14 15:02 - 2016-09-11 11:57 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-04-14 15:01 - 2016-09-11 11:57 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-04-14 11:33 - 2014-12-07 21:54 - 00000000 ____D C:\Program Files\Microsoft Office
2017-04-14 11:33 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2017-04-14 11:32 - 2011-04-12 09:54 - 00000000 ____D C:\Windows\ShellNew
2017-04-14 11:30 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2017-04-14 11:30 - 2009-07-14 04:34 - 00000387 _____ C:\Windows\win.ini
2017-04-12 18:22 - 2014-09-11 21:04 - 00000000 ____D C:\Windows\system32\MRT
2017-04-12 18:19 - 2014-09-11 21:04 - 148601744 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-04-12 18:17 - 2014-09-11 20:53 - 01595358 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-04-11 16:38 - 2017-02-28 21:29 - 00000000 ____D C:\Windows\system32\log
2017-04-11 16:36 - 2017-02-22 19:39 - 00003542 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-04-11 16:36 - 2017-02-22 19:39 - 00003414 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-04-11 12:57 - 2017-03-08 17:11 - 00000000 ____D C:\Program Files (x86)\MK
2017-04-11 12:57 - 2015-05-18 20:07 - 00000000 ____D C:\Users\Heartel\AppData\Local\CrashDumps
2017-04-11 12:53 - 2017-03-02 21:05 - 00000000 _____ C:\Windows\SysWOW64\1
2017-04-10 12:06 - 2017-02-21 10:24 - 00000000 ____D C:\Program Files\am7fgfeu
2017-04-09 23:08 - 2014-12-14 15:32 - 00000000 ____D C:\Users\Heartel\.gimp-2.8
2017-04-09 19:50 - 2014-12-14 17:44 - 00000000 ____D C:\Users\Heartel\AppData\Local\gtk-2.0
2017-04-08 12:42 - 2015-07-06 18:44 - 00003724 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4225298673-1622639848-1158892530-1000UA
2017-04-08 12:42 - 2015-07-06 18:44 - 00003452 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4225298673-1622639848-1158892530-1000Core
2017-04-08 12:28 - 2015-12-23 21:45 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2017-04-08 00:06 - 2010-11-21 05:27 - 00532136 _____ (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-04-04 19:49 - 2016-01-20 21:53 - 00000000 ____D C:\Users\Heartel\AppData\Local\DisplayFusion
2017-04-02 17:12 - 2017-02-19 20:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-04-02 17:12 - 2017-01-28 15:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-04-01 16:30 - 2017-03-08 17:17 - 00000000 _____ C:\Windows\SysWOW64\4
2017-04-01 16:30 - 2017-03-08 17:16 - 00000000 _____ C:\Windows\SysWOW64\3
2017-04-01 13:45 - 2015-12-23 19:43 - 00000600 _____ C:\Users\Heartel\AppData\Local\PUTTY.RND
2017-03-29 13:49 - 2014-12-11 09:54 - 00000000 ____D C:\Users\Heartel\AppData\Roaming\Audacity
2017-03-27 20:31 - 2015-02-08 00:05 - 04843520 ___SH C:\Users\Heartel\Desktop\Thumbs.db
2017-03-18 13:40 - 2015-12-24 23:28 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2017-03-18 13:40 - 2014-12-10 14:54 - 00000000 ____D C:\ProgramData\Skype
2017-03-18 13:39 - 2014-12-07 19:47 - 00000000 ____D C:\ProgramData\Package Cache

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-04-19 18:56 - 2015-12-10 21:08 - 0000000 _____ () C:\Users\Heartel\AppData\Roaming\FileIn.cns
2015-04-19 18:56 - 2015-12-10 21:08 - 0000000 _____ () C:\Users\Heartel\AppData\Roaming\FileOut.cns
2016-03-06 14:35 - 2016-03-15 15:17 - 0000282 _____ () C:\Users\Heartel\AppData\Roaming\GPU MeterV2_Settings.ini
2016-04-20 16:15 - 2016-04-20 16:24 - 0000600 _____ () C:\Users\Heartel\AppData\Roaming\PUTTY.RND
2015-11-17 20:01 - 2015-11-17 20:01 - 0174261 _____ () C:\Users\Heartel\AppData\Roaming\VideoPad.dmp
2015-12-23 19:43 - 2017-04-01 13:45 - 0000600 _____ () C:\Users\Heartel\AppData\Local\PUTTY.RND
2017-04-09 19:50 - 2017-04-09 19:50 - 0005171 _____ () C:\Users\Heartel\AppData\Local\recently-used.xbel
2014-12-22 21:40 - 2017-02-19 20:55 - 0007606 _____ () C:\Users\Heartel\AppData\Local\Resmon.ResmonCfg
2017-03-01 18:58 - 2016-11-23 15:37 - 0000570 _____ () C:\Users\Heartel\AppData\Local\TroubleshooterConfig.json
2016-02-01 21:34 - 2016-02-01 21:34 - 0000003 _____ () C:\Users\Heartel\AppData\Local\updater.log
2016-02-01 21:34 - 2016-08-06 20:05 - 0000424 _____ () C:\Users\Heartel\AppData\Local\UserProducts.xml
2014-12-07 19:51 - 2014-12-07 19:51 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-09-11 12:26 - 2016-09-11 12:46 - 0000305 _____ () C:\ProgramData\hpzinstall.log
2016-02-28 17:14 - 2016-02-28 17:14 - 0000016 _____ () C:\ProgramData\mntemp

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-04-14 13:08

==================== Ende von FRST.txt ============================
         

--- --- ---

Addition

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15-03-2017
durchgeführt von Heartel (15-04-2017 23:42:10)
Gestartet von C:\Users\Heartel\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2014-12-07 17:40:38)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-4225298673-1622639848-1158892530-500 - Administrator - Disabled)
Gast (S-1-5-21-4225298673-1622639848-1158892530-501 - Limited - Disabled)
Heartel (S-1-5-21-4225298673-1622639848-1158892530-1000 - Administrator - Enabled) => C:\Users\Heartel
HomeGroupUser$ (S-1-5-21-4225298673-1622639848-1158892530-1002 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\uTorrent) (Version: 3.4.7.42330 - BitTorrent Inc.)
µTorrent (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\uTorrent) (Version: 3.4.7.42330 - BitTorrent Inc.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Adobe Flash Player 24 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Photoshop CS6 Version 13.0.1 (HKLM-x32\...\{A724DC44-6241-42D3-BA57-778B178ABC17}_is1) (Version: 13.0.1 - Adobe Systems, Inc.)
aerosoft's - Berliner S-Bahn Teil 1 (HKLM-x32\...\{2AEB2EFA-477F-4F3F-9864-356AC2141F45}) (Version:  - )
aerosoft's - High Speed Trains (HKLM-x32\...\{C98DB470-A8FD-4C84-9B21-DF222199DD66}) (Version:  - )
aerosoft's - Hoellentalbahn (HKLM-x32\...\{82D7E57E-D9F0-4C2E-AA57-3E143D89F515}) (Version:  - )
Aerosoft's - Strassenbahn Berlin-Koepenick (HKLM-x32\...\{681734DF-28F0-4842-855C-91CCE610FA67}) (Version: 1.10 - Aerosoft)
Akai Professional MPX File Conversion Utility (HKLM-x32\...\MPXFileConversionUtility) (Version:  - )
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ASUS Xonar DX Audio Driver (HKLM\...\C-Media Oxygen HD Audio Driver) (Version:  - )
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield: Bad Company 2 (HKLM\...\Steam App 24960) (Version:  - DICE)
Battlefield™ 1 (HKLM-x32\...\{335B50BC-6130-4BAF-9A6A-F1561270587B}) (Version: 1.0.47.30570 - Electronic Arts)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.6.100.6363 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.00 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5931 - CDBurnerXP)
Cinema 4D version R12 (HKLM-x32\...\{7D9D8134-9FA3-4FFF-ADA1-BF609F29997A}_is1) (Version: R12 - Salat Production)
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version:  - Valve)
CPUID CPU-Z 1.75 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
Creative Systeminformationen (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DDFCreator 2.2.1 (HKLM-x32\...\DDFCreator_2.2.1) (Version: 2.2.1 - DMXControl Projects e.V.)
DDFCreator 3.0 (HKLM-x32\...\DDFCreator_3.0) (Version: 3.0 - DMXControl Projects e.V.)
DisplayFusion 7.3.3 (HKLM-x32\...\B076073A-5527-4f4f-B46B-B10692277DA2_is1) (Version: 7.3.3.0 - Binary Fortress Software)
DMXControl 2.12.2 (HKLM-x32\...\DMXControl) (Version: 2.12.2 - PopSoft)
Eisenbahn.exe Professional 6.0 (HKLM-x32\...\{6B249FAC-DD1A-405F-A8A2-AA6A2252ED32}) (Version: 6.00.0000 - Trend)
Emergency Download Driver (HKLM-x32\...\{3F0F5AB4-C9CE-4226-8393-E9CFF8369D9D}) (Version: 1.1.16.1526 - Microsoft)
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.0.5 - SCS Software)
FileZilla Client 3.23.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.23.0.2 - Tim Kosse)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Goat Simulator (HKLM-x32\...\R29hdFNpbXVsYXRvcg==_is1) (Version: 1 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 57.0.2987.133 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 5.41.3.0 - Google)
Google Update Helper (x32 Version: 1.3.33.3 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Greenfoot (HKLM-x32\...\{8C838B70-3A71-41E8-91A6-4ADCF2E483D0}) (Version: 2.4.2 - Greenfoot Team)
HP Support Solutions Framework (HKLM-x32\...\{D549B5E2-DBE8-4190-ABA5-71106264398C}) (Version: 12.5.32.203 - HP Inc.)
Human Fall Flat (HKLM-x32\...\1203767418_is1) (Version: 2.0.0.2 - GOG.com)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3960 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.0.3.1001 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
Island Flight Simulator (HKLM-x32\...\Island Flight SimulatorFinal) (Version: Final - Game Owl)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Java SE Development Kit 8 Update 101 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180101}) (Version: 8.0.1010.13 - Oracle Corporation)
Java-Editor 13.36, 2016.08.06 (HKLM-x32\...\{65FBA21B-7F80-4E4E-B275-0958D2648F94}_is1) (Version:  - Gerhard Röhner)
Lightshot-5.4.0.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.1 - Skillbrains)
Lumia UEFI Blue Driver (HKLM-x32\...\{9D2A75FE-8CE1-4297-AEC1-A097D47BACE9}) (Version: 1.1.10.1526 - Microsoft)
Magic 3D Easy View (HKLM-x32\...\Magic 3D Easy View_is1) (Version:  - Nicolaudie)
Malwarebytes Version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
ManyCam 4.0.52 (HKLM-x32\...\ManyCam) (Version: 4.0.52 - Visicom Media Inc.)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
Microsoft Train Simulator (HKLM-x32\...\Train Simulator 1.0) (Version:  - )
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.0 (HKLM-x32\...\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}) (Version: 3.0.11010.0 - Microsoft Corporation)
MIDI-OX (HKLM-x32\...\{A6457851-5EA9-45B0-AF1D-D2A0A4781CFB}) (Version: 7.02.372 - MIDIOX Computing)
Minecraft Note Block Studio version 3.2.1 (HKLM-x32\...\{84077DA9-3075-4AE5-BC82-345202B8CD4F}_is1) (Version: 3.2.1 - David Norgren)
Mini Metro (HKLM-x32\...\1434554947_is1) (Version: 2.0.0.4 - GOG.com)
Mozilla Firefox 52.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 52.0.2 (x86 en-US)) (Version: 52.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.2.6291 - Mozilla)
Mozilla Thunderbird 45.2.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.2.0 (x86 de)) (Version: 45.2.0 - Mozilla)
MSI GamingApp (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 1.0.0.18 - MSI)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.6 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.62 - NVIDIA Corporation)
NVIDIA Grafiktreiber 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.62 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OnePlus USB Drivers 1.00 (HKLM-x32\...\OnePlus USB Drivers 1.00) (Version: 1.00 - OnePlus, Inc)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 10.3.3.1921 - Electronic Arts, Inc.)
PhantomZerOS 7.9 MD (HKLM-x32\...\PhantomZerOS_is1) (Version:  - Zero 88)
Plotagon (HKLM-x32\...\Plotagon 1.10.0) (Version: 1.10.0 - Plotagon)
Plotagon (x32 Version: 1.10.0 - Plotagon) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.988 - Even Balance, Inc.)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 7.78.1218.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7200 - Realtek Semiconductor Corp.)
Rechnungsverwalter (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Rechnungsverwalter) (Version: 2.10.43 - Temia Consulting)
Rechnungsverwalter (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\Rechnungsverwalter) (Version: 2.10.43 - Temia Consulting)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.1.4 - Rockstar Games)
RollerCoaster Tycoon 3 (HKLM-x32\...\RollerCoaster Tycoon 3_is1) (Version:  - Atari)
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.3.5 - NVIDIA Corporation) Hidden
SiudiDriver Version 2.3 (HKLM\...\SiudiDriver_is1) (Version: 2.3 - LightingSoft AG)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
Sound Blaster Audigy Fx (HKLM-x32\...\{77CE1865-F3B9-4B6D-A558-28674AE7787E}) (Version: 1.00.06 - Creative Technology Limited)
Sound Blaster Audigy Fx Extras (HKLM-x32\...\{52272D09-08E0-4A57-BC14-BC09F5D7AE26}) (Version: 1.0 - Creative Technology Limited)
Soundcloud Playlist Downloader (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\35cf6f8efa605d1f) (Version: 1.0.0.36 - Soundcloud Playlist Downloader)
Soundcloud Playlist Downloader (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\35cf6f8efa605d1f) (Version: 1.0.0.36 - Soundcloud Playlist Downloader)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Spotify (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\Spotify) (Version: 1.0.52.725.g943b26a8 - Spotify AB)
Spotify (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\Spotify) (Version: 1.0.52.725.g943b26a8 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.72365 - TeamViewer)
Technitium MAC Address Changer v6.0 (HKLM-x32\...\TMACv6.0) (Version: 6.0 - Technitium)
TmUnitedForever (HKLM-x32\...\TmUnitedForever_is1) (Version:  - Nadeo)
Trucks And Trailers (HKLM-x32\...\Trucks And Trailers_is1) (Version: Trucks And Trailers - Fenixx--Repack--(21.06.2011))
TS3index Bot-Manager (HKLM\...\TS3index-MusicBot) (Version: 1.0.4.1 - TS3index.com GbR)
Unity Web Player (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\UnityWebPlayer) (Version: 5.3.2f1 - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\UnityWebPlayer) (Version: 5.3.2f1 - Unity Technologies ApS)
VBCABLE, The Virtual Audio Cable (HKLM\...\VB:VBCABLE {87459874-1236-4469}) (Version:  - VB-Audio Software)
Vegas Pro 13.0 (64-bit) (HKLM\...\{CE92F061-BFBC-11E3-8FF3-F04DA23A5C58}) (Version: 13.0.290 - Sony)
VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 3.79 - NCH Software)
Virtual Audio Cable 4.9 (HKLM\...\Virtual Audio Cable 4.9) (Version:  - )
VirtualDJ 8 (HKLM-x32\...\{5A89A21C-6391-4AFC-8502-66F6F7250125}) (Version: 8.0.2325.0 - Atomix Productions)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.2 - VideoLAN)
War Thunder (HKLM-x32\...\Steam App 236390) (Version:  - Gaijin Entertainment)
Windows Device Recovery Tool 3.1.6 (HKLM-x32\...\{2d723982-37f4-441b-8702-49a3cb4b38bb}) (Version: 3.1.6 - Microsoft)
Windows Phone app for desktop (HKLM-x32\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation)
Windows-Treiberpaket - OnePlus, Inc. (WinUSB) AndroidUsbDeviceClass  (05/24/2012 6.0.0000.00000) (HKLM\...\59AFF6524BE5C0983F2711DEB8D25D511D4F4924) (Version: 05/24/2012 6.0.0000.00000 - OnePlus, Inc.)
WinUsb CoInstallers (HKLM-x32\...\{9755918A-CDF8-4F1E-8453-6359CF1A330A}) (Version: 1.1.12.1526 - Microsoft)
WinUSB Compatible ID Drivers (HKLM-x32\...\{A4A0B236-6046-4CAB-8177-1EAF61112C75}) (Version: 1.1.11.1526 - Microsoft)
WinUSB Drivers ext (HKLM-x32\...\{29BAAF65-09E5-4F52-8D15-2FAF2E23A8DC}) (Version: 1.1.24.1544 - Microsoft)
WorldPainter 2.2.6 (HKLM\...\4144-4862-0472-7103) (Version: 2.2.6 - pepsoft.org)
X11_GMouse (HKLM-x32\...\{88A3CF84-961E-4F26-B7E5-A9485BC33EBD}) (Version: 2.04.0004 - Masione)
YAC(Yet Another Cleaner!) (HKLM-x32\...\iSafe) (Version:  - ELEX DO BRASIL PARTICIPAÇÕES LTDA) <==== ACHTUNG

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437_Classes\CLSID\{2F5DA951-82C6-471e-90BD-CAB15552A932}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437_Classes\CLSID\{5b55a44a-d008-49aa-9234-86fb7709bc0a}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437_Classes\CLSID\{8C46158B-D978-483C-A312-16EE5013BE04}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{2F5DA951-82C6-471e-90BD-CAB15552A932}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{5b55a44a-d008-49aa-9234-86fb7709bc0a}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{8C46158B-D978-483C-A312-16EE5013BE04}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Heartel\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll (Google Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {189CEE60-A660-4CB7-84FB-200524A39AD8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-02-02] (Adobe Systems Incorporated)
Task: {1C786F0C-EBED-4A4B-91CC-059B211A073D} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2016-07-01] ()
Task: {2B2B3DBD-C788-4C09-8306-5F779095C550} - \AutoKMSCustom -> Keine Datei <==== ACHTUNG
Task: {2E6A44C6-3B83-4DA5-A728-F9AA00B949D5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.)
Task: {3F09F082-8437-42C1-AD0B-6699FDAE2534} - System32\Tasks\{A25D09F0-63B4-47E1-996F-57F00119FC58} => pcalua.exe -a "C:\Users\Heartel\Downloads\Crysis 3 - InstallShield Wizard.exe" -d C:\Users\Heartel\Downloads
Task: {45BAE16E-A565-402F-BC4B-683824183D1A} - System32\Tasks\{E1843C6C-14F0-4F89-ACB4-52062D6CE11B} => E:\Exeter & acc\Minecraft Account Generator\Minecraft Account Generator.exe 
Task: {4DEFEE0F-9A01-4683-AA4D-168492F65B63} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {5871B1A8-D797-4FAD-B7E3-4349753EE4EB} - System32\Tasks\{FD611095-058E-4F84-94FA-1B4E1D22B686} => pcalua.exe -a C:\Users\Heartel\Downloads\plesk-installer.exe -d C:\Users\Heartel\Downloads
Task: {6156367F-5D7E-4A5E-A77A-0959FA1CB9C6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-12-21] (HP Inc.)
Task: {633DEE98-8608-42BD-A3E2-D73723BD0913} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()
Task: {65250479-C676-47FC-984A-E81063D8F267} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-11-21] (Piriform Ltd)
Task: {86E50960-71EF-4440-9801-6EC92496E2A8} - System32\Tasks\{09C0C51B-8C8E-4D47-BBEC-4EFCB188B86F} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{681734DF-28F0-4842-855C-91CCE610FA67}\Setup.exe" -c -runfromtemp -l0x0007 -uninst -removeonly
Task: {8CF40912-8004-4C5A-857A-CF58C6B62E9F} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
Task: {AAD8C506-4362-48CC-AAAE-BF4843B4330E} - System32\Tasks\update-S-1-5-21-4225298673-1622639848-1158892530-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()
Task: {CC6C5E45-FC6D-4DB9-A722-E285414872F9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-22] (Google Inc.)
Task: {CDB318FF-EB4B-449E-A3BF-17B579F7E1DD} - System32\Tasks\{FE4CBB08-7824-4E6D-84A0-8B1ADB91A110} => E:\Exeter & acc\Minecraft Account Generator\Minecraft Account Generator.exe 
Task: {DF02501A-56C8-4802-B0D2-A7284FE0AE8F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4225298673-1622639848-1158892530-1000UA => C:\Users\Heartel\AppData\Local\Google\Update\GoogleUpdate.exe [2015-07-06] (Google Inc.)
Task: {E0B65604-F6E5-4164-85B0-99730E64924A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4225298673-1622639848-1158892530-1000Core => C:\Users\Heartel\AppData\Local\Google\Update\GoogleUpdate.exe [2015-07-06] (Google Inc.)
Task: {E5441460-5ACF-4DE7-B9E6-9E49FAEC84EA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-11] (Adobe Systems Incorporated)
Task: {EC177DA1-61F4-446C-937A-FA763826AA16} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-22] (Google Inc.)
Task: {F3CB46DC-D864-4295-800A-2843CAF92FED} - System32\Tasks\{1CEA907F-8EE3-45B5-9F3A-627E99128B77} => pcalua.exe -a "C:\Program Files (x86)\Creative\Sound Blaster Audigy Fx\Program\Setup.exe" -d "C:\Program Files (x86)\Creative\Sound Blaster Audigy Fx\Program"

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\update-S-1-5-21-4225298673-1622639848-1158892530-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnet Eхplоrеr.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.erolpxei.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Online Help.lnk -> hxxp://www.virtualdj.com/wiki
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\www.virtualdj.com.lnk -> hxxp://www.virtualdj.com
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Intеrnеt Ехрlorеr (Nо Add-ons).lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.erolpxei.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gооgle Chrоmе.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.emorhc.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Lаunсh Intеrnеt Eхрlоrer Вrоwser.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.erolpxei.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gооglе Сhrоmе.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.emorhc.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\Users\Heartel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Моzilla Firefох.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.xoferif.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооgle Сhrome.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.emorhc.bat (Keine Datei) <===== Cyrillic
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Мozillа Firеfoх.lnk -> C:\Users\Heartel\AppData\Roaming\Browsers\exe.xoferif.bat (Keine Datei) <===== Cyrillic

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-01-23 22:14 - 2015-07-23 03:31 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-05-16 18:18 - 2016-05-02 07:54 - 00369208 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-05-16 18:18 - 2016-05-02 07:54 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-05-16 18:18 - 2016-05-02 07:55 - 03613240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-01-23 22:14 - 2016-05-02 07:55 - 00289848 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-12-30 17:20 - 2016-12-30 17:20 - 00075064 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2017-04-15 22:43 - 2017-03-22 10:24 - 02271520 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2017-04-15 22:43 - 2017-03-23 19:40 - 02267600 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2016-05-16 18:18 - 2016-05-02 07:55 - 02667576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-05-16 18:18 - 2016-05-02 07:55 - 01990200 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-05-16 18:18 - 2016-05-02 07:55 - 01842232 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-01-24 04:41 - 2016-05-02 07:55 - 00208952 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2016-12-06 18:17 - 2016-12-06 18:17 - 00052400 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2016-05-16 18:18 - 2016-05-02 07:54 - 00035896 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-05-16 18:18 - 2016-05-02 07:54 - 00921656 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2017-08-02 21:19 - 2007-12-19 04:41 - 00020480 ____R () C:\Windows\system\CMGxMon.exe
2017-08-02 21:18 - 2008-01-09 08:18 - 00090112 ____R () C:\Program Files\ASUS Xonar DX Audio\Customapp\MXMon.exe
2014-11-22 02:03 - 2014-11-22 02:03 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2016-01-23 22:14 - 2016-05-02 08:02 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2017-08-02 21:18 - 2007-12-17 13:05 - 00323584 ____R () C:\Program Files\ASUS Xonar DX Audio\CustomApp\cmdevice.dll
2015-03-20 22:26 - 2017-03-10 02:13 - 00674592 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-03-20 22:26 - 2016-09-01 03:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-03-20 22:26 - 2016-09-01 03:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-03-20 22:26 - 2016-09-01 03:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2015-03-20 22:26 - 2017-03-23 02:52 - 02465056 _____ () C:\Program Files (x86)\Steam\video.dll
2015-03-20 22:26 - 2016-01-27 09:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-03-20 22:26 - 2016-01-27 09:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-03-20 22:26 - 2016-01-27 09:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-03-20 22:26 - 2016-01-27 09:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-03-20 22:26 - 2016-01-27 09:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2015-03-20 22:26 - 2017-03-31 00:46 - 00848672 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-12-25 16:00 - 2016-07-05 00:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2017-01-30 13:52 - 2017-01-30 13:52 - 01926632 ____R () C:\Program Files (x86)\Skype\Phone\roottools.dll
2016-12-25 16:01 - 2017-01-30 23:41 - 68875552 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2015-03-20 22:26 - 2017-03-23 02:52 - 00383776 _____ () C:\Program Files (x86)\Steam\steam.dll
2014-03-20 12:43 - 2014-03-20 12:43 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\...\localhost -> localhost

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2017-04-15 22:40 - 00000832 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-4225298673-1622639848-1158892530-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Heartel\AppData\Local\DisplayFusion\Wallpaper_2
HKU\S-1-5-21-4225298673-1622639848-1158892530-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04152017233436437\Control Panel\Desktop\\Wallpaper -> C:\Users\Heartel\AppData\Local\DisplayFusion\Wallpaper_2
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
MSCONFIG\startupreg: EaseUS Cleanup => "E:\Programme & Spiele\EaseUS Partition Master 11.0\bin\CleanUpUI.exe" 10 300
MSCONFIG\startupreg: EaseUS EPM tray => E:\Programme & Spiele\EaseUS Partition Master 11.0\bin\EpmNews.exe
MSCONFIG\startupreg: Gaijin.Net Agent => "C:\Users\Heartel\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe"
MSCONFIG\startupreg: Google Update => C:\Users\Heartel\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Logitech Download Assistant => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
MSCONFIG\startupreg: ShadowPlay => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Spotify => "C:\Users\Heartel\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Heartel\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [TCP Query User{A77D6728-7263-4395-9DD8-16CB84342A46}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{2610F31C-9172-4A87-8BD0-FAB95B62B653}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{C3E636B2-27FC-4E5F-B8C0-9B4EFCA6B6A3}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{5F0789CD-66E5-48DF-B7C0-F4FEB4CADF26}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{5B24ED0F-DFAA-49C2-820B-7E5E6B4DCA67}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{DC491E68-531B-474F-9333-9041117F822F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

==================== Wiederherstellungspunkte =========================


==================== Fehlerhafte Geräte im Gerätemanager =============

Name: ucdrv
Description: ucdrv
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: ucdrv
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: YAC Kit Driver
Description: YAC Kit Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: iSafeKrnlKit
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: HD Webcam C270
Description: HD Webcam C270
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Logitech
Service: usbaudio
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: YAC Ring3 Driver
Description: YAC Ring3 Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: iSafeKrnlR3
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: YAC NDIS Driver
Description: YAC NDIS Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: iSafeNetFilter
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (04/15/2017 11:34:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (04/15/2017 10:42:35 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (04/15/2017 07:06:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (04/15/2017 01:31:14 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x80070422).

Error: (04/15/2017 01:19:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (04/14/2017 11:32:08 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = PROPLUS wird installiert; Fehler = 0x80070422).

Error: (04/14/2017 11:31:14 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = PROPLUS wird installiert; Fehler = 0x80070422).

Error: (04/14/2017 11:31:09 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = PROPLUS wird installiert; Fehler = 0x80070422).

Error: (04/14/2017 11:31:07 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = PROPLUS wird installiert; Fehler = 0x80070422).

Error: (04/14/2017 11:31:01 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\msiexec.exe /V; Beschreibung = PROPLUS wird installiert; Fehler = 0x80070422).


Systemfehler:
=============
Error: (04/15/2017 11:33:47 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
iSafeKrnl
iSafeKrnlKit
iSafeKrnlR3
iSafeNetFilter
ucdrv

Error: (04/15/2017 11:33:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "UC浏览器基础服务" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (04/15/2017 11:33:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Origin Web Helper Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (04/15/2017 11:33:43 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Origin Web Helper Service erreicht.

Error: (04/15/2017 11:33:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Apple Mobile Device Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (04/15/2017 11:33:08 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Apple Mobile Device Service erreicht.

Error: (04/15/2017 11:33:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "YAC Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Die Version von YAC Service ist nicht mit der ausgeführten Windows-Version kompatibel. Öffnen Sie die Systeminformationen des Computers, um zu überprüfen, ob eine x86-(32 Bit)- oder eine x64-(64 Bit)-Version des Programms erforderlich ist, und wenden Sie sich anschließend an den Herausgeber der Software.

Error: (04/15/2017 10:41:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "YAC NDIS Driver" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (04/15/2017 10:41:47 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
iSafeNetFilter

Error: (04/15/2017 10:41:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "UC浏览器基础服务" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.


CodeIntegrity:
===================================
  Date: 2017-04-15 23:32:50.661
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2017-04-15 23:32:50.583
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2017-04-15 22:41:05.598
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\winhttp.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-04-15 22:41:05.330
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\api-ms-win-core-synch-l1-2-0.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-04-15 22:41:05.235
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\api-ms-win-core-synch-l1-2-0.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-04-15 22:41:04.538
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\winhttp.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2017-04-15 22:40:52.349
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2017-04-15 22:40:52.271
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2017-04-15 19:04:29.348
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2017-04-15 19:04:29.254
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\vrtaucbl.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 37%
Installierter physikalischer RAM: 8054.65 MB
Verfügbarer physikalischer RAM: 5064.04 MB
Summe virtueller Speicher: 16107.49 MB
Verfügbarer virtueller Speicher: 13099.59 MB

==================== Laufwerke ================================

Drive c: (Boot) (Fixed) (Total:931.41 GB) (Free:836.53 GB) NTFS
Drive e: (Daten) (Fixed) (Total:931.51 GB) (Free:497.69 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: DCADF02B)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F38A4BF1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================