![]() |
|
Plagegeister aller Art und deren Bekämpfung: Seltsame Probleme mit Google: Captchas gegen zu viele Anfragen von meinem NetzwerkWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #16 |
![]() | ![]() Seltsame Probleme mit Google: Captchas gegen zu viele Anfragen von meinem Netzwerk Also: ESET Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=579393067d1db0489d25e9186a349be7 # end=init # utc_time=2017-05-23 10:27:57 # local_time=2017-05-23 12:27:57 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # osver=6.2.9200 NT Update Init Update Download Update Finalize Updated modules version: 33477 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=579393067d1db0489d25e9186a349be7 # end=updated # utc_time=2017-05-23 10:32:45 # local_time=2017-05-23 12:32:45 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # osver=6.2.9200 NT # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7777 # api_version=3.1.1 # EOSSerial=579393067d1db0489d25e9186a349be7 # engine=33477 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2017-05-23 01:52:40 # local_time=2017-05-23 03:52:40 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.2.9200 NT # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 68561 5680556 0 0 # compatibility_mode_1='Sophos Anti-Virus' # compatibility_mode=8450 16777213 100 99 10701143 71357755 0 0 # scanned=464652 # found=1 # cleaned=0 # scan_time=11995 sh=06E33278D473995EBB843A1FC99E964929DD9AD4 ft=1 fh=99ac218d6441f30b vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="C:\Windows.old\Users\domin\AppData\Local\Temp\DMR\dmr_72.exe" FIXLOG FRST Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 22-05-2017 durchgeführt von domin (23-05-2017 16:22:54) Run:1 Gestartet von C:\Users\domin\Desktop Geladene Profile: domin (Verfügbare Profile: domin & postgres) Start-Modus: Normal ============================================== fixlist Inhalt: ***************** FF NetworkProxy: Mozilla\Firefox\Profiles\4mrs5lus.default-1480260514579 -> backup.ftp", "" cmd: tracert 8.8.8.8 emptytemp: ***************** Firefox Proxy-Einstellungen wurden zurückgesetzt ========= tracert 8.8.8.8 ========= Routenverfolgung zu google-public-dns-a.google.com [8.8.8.8] ber maximal 30 Hops: 1 3 ms 2 ms 2 ms sphairon.box [192.168.100.1] 2 23 ms 18 ms 18 ms 87.186.224.75 3 276 ms 19 ms 18 ms 87.186.206.90 4 23 ms 22 ms 24 ms 217.239.49.246 5 31 ms 30 ms 30 ms 72.14.196.17 6 30 ms 30 ms 30 ms 216.239.49.128 7 34 ms 32 ms 31 ms 108.170.232.181 8 39 ms 38 ms 39 ms 66.249.95.150 9 43 ms 38 ms 32 ms 209.85.251.231 10 * * * Zeitberschreitung der Anforderung. 11 * * * Zeitberschreitung der Anforderung. 12 * * * Zeitberschreitung der Anforderung. 13 * * * Zeitberschreitung der Anforderung. 14 * * * Zeitberschreitung der Anforderung. 15 * * * Zeitberschreitung der Anforderung. 16 * * * Zeitberschreitung der Anforderung. 17 * * * Zeitberschreitung der Anforderung. 18 * * * Zeitberschreitung der Anforderung. 19 * * * Zeitberschreitung der Anforderung. 20 34 ms 31 ms 31 ms google-public-dns-a.google.com [8.8.8.8] Ablaufverfolgung beendet. ========= Ende von CMD: ========= =========== EmptyTemp: ========== BITS transfer queue => 6578176 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 30769866 B Java, Flash, Steam htmlcache => 1312 B Windows/system/drivers => 16402588 B Edge => 27378506 B Chrome => 0 B Firefox => 388442921 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 9882 B NetworkService => 1900 B domin => 218538257 B postgres => 0 B RecycleBin => 791717 B EmptyTemp: => 657 MB temporäre Dateien entfernt. ================================ Das System musste neu gestartet werden. ==== Ende von Fixlog 16:26:03 ==== Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 22-05-2017 durchgeführt von domin (Administrator) auf LAPTOP-VNC38IT1 (23-05-2017 17:27:49) Gestartet von C:\Users\domin\Desktop Geladene Profile: domin (Verfügbare Profile: domin & postgres) Platform: Windows 10 Home Version 1703 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_7ee21f0fcd504371\igfxCUIService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (Intel Corporation) C:\Windows\System32\IntelSSTAPO\ParameterService\ParameterService.exe (Sophos Limited) D:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe (Sophos Limited) D:\Program Files (x86)\Sophos\Sophos Client Firewall\SCFManager.exe (Sophos Limited) D:\Program Files (x86)\Sophos\Sophos Client Firewall\SCFService.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe (Windows (R) Win 7 DDK provider) C:\Windows\System32\AdminService.exe (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe () C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (CyberGhost S.R.L) C:\Program Files\CyberGhost 6\CyberGhost.Service.exe (Sophos Limited) D:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe (Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe (Sophos Limited) D:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe (Sophos Limited) C:\Program Files (x86)\Common Files\Sophos\Web Intelligence\swi_fc.exe (Sophos Limited) D:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe (Electronic Arts) D:\Origin\origin\OriginWebHelperService.exe (Malwarebytes) D:\Program Files (x86)\Anti-Malware\MBAMService.exe (Sophos Limited) D:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_7ee21f0fcd504371\igfxEM.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe (Malwarebytes) D:\Program Files (x86)\Anti-Malware\mbamtray.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_7ee21f0fcd504371\IntelCpHeciSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe () C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_7ee21f0fcd504371\igfxext.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe (Axentra Corporation) D:\medion lifecloud\HipServAgent\HipServAgent.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe (Sophos Limited) D:\Program Files (x86)\Sophos\AutoUpdate\ALMon.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe (Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe (Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe () C:\OEM\Preload\FubTracking\FubTracking.exe (Acer) C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe (Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe () C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe () C:\Program Files (x86)\Acer\Care Center\ACCStd.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11703.1001.45.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerButton_NB.exe (acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8126.42377.0_x64__8wekyb3d8bbwe\HxMail.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8126.42377.0_x64__8wekyb3d8bbwe\HxTsr.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16704512 2016-11-08] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1471488 2016-11-08] (Realtek Semiconductor) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated) HKLM\...\Run: [DAX2_APP] => C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe [629248 2015-11-13] () HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [Malwarebytes TrayApp] => D:\PROGRAM FILES (X86)\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [HipServ Agent] => D:\medion lifecloud\HipServAgent\HipServAgent.exe [2722920 2014-01-27] (Axentra Corporation) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2404952 2017-03-27] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Sophos AutoUpdate Monitor] => D:\Program Files (x86)\Sophos\AutoUpdate\almon.exe [1592104 2015-06-30] (Sophos Limited) HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [1870928 2017-04-05] (Adobe Systems Inc.) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [28734456 2017-05-16] (Dropbox, Inc.) HKU\S-1-5-21-1652607985-3082241843-2615521068-1001\...\Run: [AcerPortal] => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2418392 2016-09-09] (Acer) HKU\S-1-5-21-1652607985-3082241843-2615521068-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [886352 2017-04-05] (Adobe Systems Incorporated) HKU\S-1-5-21-1652607985-3082241843-2615521068-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27716568 2017-05-04] (Skype Technologies S.A.) AppInit_DLLs: D:\Program,Files,(x86)\Sophos\Sophos,Anti-Virus\sophos_detoured_x64.dll => Keine Datei ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-05-06] (Acer Incorporated) ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-05-06] (Acer Incorporated) ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-05-06] (Acer Incorporated) ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.100.1 Tcpip\..\Interfaces\{b61d1ff5-d25c-45bf-80bd-d5698f51f594}: [DhcpNameServer] 192.18.128.24 Tcpip\..\Interfaces\{cf66d319-aac0-4fcc-8c40-a43f0133fad0}: [DhcpNameServer] 192.168.100.1 Internet Explorer: ================== HKU\S-1-5-21-1652607985-3082241843-2615521068-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer15.msn.com/?pc=ACTE HKU\S-1-5-21-1652607985-3082241843-2615521068-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer15.msn.com/?pc=ACTE BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-04-05] (Adobe Systems Incorporated) BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-04-05] (Adobe Systems Incorporated) BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-04-05] (Adobe Systems Incorporated) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-04-05] (Adobe Systems Incorporated) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-04-05] (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-04-05] (Adobe Systems Incorporated) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-28] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-28] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-28] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-08-28] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\domin\AppData\Roaming\Mozilla\Firefox\Profiles\4mrs5lus.default-1480260514579 [2017-05-23] FF Extension: (Ghostery) - C:\Users\domin\AppData\Roaming\Mozilla\Firefox\Profiles\4mrs5lus.default-1480260514579\Extensions\firefox@ghostery.com.xpi [2017-05-05] FF Extension: (Font Finder) - C:\Users\domin\AppData\Roaming\Mozilla\Firefox\Profiles\4mrs5lus.default-1480260514579\Extensions\{a658a273-612e-489e-b4f1-5344e672f4f5}.xpi [2017-05-03] FF Extension: (Adblock Plus) - C:\Users\domin\AppData\Roaming\Mozilla\Firefox\Profiles\4mrs5lus.default-1480260514579\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-01-03] FF Extension: (Adobe Acrobat DC - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn [2017-04-21] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll [2016-12-21] () FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-03-27] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-21] () FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-24] (Intel Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-08-28] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-08-28] (Microsoft Corporation) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2017-04-05] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-03-27] (Adobe Systems) Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [771672 2017-03-14] (Adobe Systems Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-02-27] (Adobe Systems, Incorporated) R2 AtherosSvc; C:\WINDOWS\system32\AdminService.exe [355760 2016-06-26] (Windows (R) Win 7 DDK provider) R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2267352 2016-08-30] (Acer Incorporated) R2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [87088 2017-03-22] (CyberGhost S.R.L) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2981056 2016-08-11] (Microsoft Corporation) R3 cphs; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_7ee21f0fcd504371\IntelCpHeciSvc.exe [301528 2016-11-23] (Intel Corporation) S3 cplspcon; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_7ee21f0fcd504371\IntelCpHDCPSvc.exe [480216 2016-11-23] (Intel Corporation) R2 DAX2API; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [154816 2016-07-18] () S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-04-30] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-04-30] (Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [48944 2017-05-16] (Dropbox, Inc.) R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573568 2015-05-14] (Acer Incorporated) R2 igfxCUIService2.0.0.0; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_7ee21f0fcd504371\igfxCUIService.exe [341976 2016-11-23] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation) S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Datei ist nicht signiert] R2 IntelSSTSvc; C:\WINDOWS\system32\IntelSSTAPO\ParameterService\ParameterService.exe [26608 2016-07-12] (Intel Corporation) R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Datei ist nicht signiert] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-09-18] (Intel Corporation) R2 MBAMService; D:\Program Files (x86)\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495224 2017-05-03] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495224 2017-05-03] (NVIDIA Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-05-18] (NVIDIA Corporation) R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [450168 2017-05-03] (NVIDIA Corporation) S3 Origin Client Service; D:\Origin\origin\OriginClientService.exe [2162064 2017-05-11] (Electronic Arts) R2 Origin Web Helper Service; D:\Origin\origin\OriginWebHelperService.exe [3136920 2017-05-11] (Electronic Arts) S3 PAExec; C:\WINDOWS\PAExec.exe [189112 2016-12-26] (Power Admin LLC) R3 QALSvc; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [401248 2015-09-04] (Acer Incorporated) R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [453984 2015-09-04] (Acer Incorporated) R2 SAVAdminService; D:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe [288552 2015-07-30] (Sophos Limited) R2 SAVService; D:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe [208168 2015-07-30] (Sophos Limited) R2 Sophos AutoUpdate Service; D:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe [340264 2015-06-30] (Sophos Limited) R2 Sophos Client Firewall; D:\Program Files (x86)\Sophos\Sophos Client Firewall\SCFService.exe [852640 2015-07-09] (Sophos Limited) R2 Sophos Client Firewall Manager; D:\Program Files (x86)\Sophos\Sophos Client Firewall\SCFManager.exe [170280 2015-07-09] (Sophos Limited) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert] R2 swi_filter; D:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe [300840 2015-07-30] (Sophos Limited) R2 swi_service; D:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [3278632 2015-07-30] (Sophos Limited) S3 ThunderboltService; C:\Program Files (x86)\Intel\Thunderbolt Software\tbtsvc.exe [1770136 2015-08-04] (Intel Corporation) R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [247040 2015-05-27] (acer) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S1 cgnetfilter1521; C:\WINDOWS\System32\drivers\cgnetfilter1521.sys [84768 2017-03-22] (Windows (R) Win 7 DDK provider) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77440 2017-05-09] () S3 iaLPSS2_I2C; C:\WINDOWS\System32\drivers\iaLPSS2_I2C.sys [185128 2015-07-08] (Intel Corporation) R3 igfx; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_7ee21f0fcd504371\igdkmd64.sys [11039704 2016-11-23] (Intel Corporation) R3 IntcAudioBus; C:\WINDOWS\System32\drivers\IntcAudioBus.sys [227952 2016-11-08] (Intel(R) Corporation) R3 IntcDMic; C:\WINDOWS\system32\DRIVERS\IntcDMic.sys [607344 2016-08-19] (Intel(R) Corporation) R3 IntcOED; C:\WINDOWS\System32\drivers\IntcOED.sys [659544 2016-11-08] (Intel(R) Corporation) R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [21344 2015-09-04] (Acer Incorporated) R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [187320 2017-05-23] (Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [113592 2017-05-23] (Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [43968 2017-05-23] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [251832 2017-05-23] (Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [93624 2017-05-23] (Malwarebytes) S3 nhi; C:\WINDOWS\System32\drivers\tbt81x.sys [125432 2015-08-10] (Intel Corporation) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvacwu.inf_amd64_31f4ef4821269ebb\nvlddmkm.sys [14190520 2017-01-17] (NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-05-03] (NVIDIA Corporation) U5 NvStUSB; C:\Windows\System32\Drivers\NvStUSB.sys [460960 2015-08-29] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48248 2017-05-03] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57976 2017-05-03] (NVIDIA Corporation) R3 Qcamain10x64; C:\WINDOWS\System32\drivers\Qcamain10x64.sys [2344448 2017-03-18] (Qualcomm Atheros, Inc.) R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [14688 2015-09-04] (Acer Incorporated) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [889584 2015-09-23] (Realtek ) R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [411712 2015-05-19] (Realsil Semiconductor Corporation) R1 SAVOnAccess; C:\WINDOWS\System32\DRIVERS\savonaccess.sys [161024 2015-07-30] (Sophos Limited) S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] () R1 SFWCallout; C:\WINDOWS\system32\DRIVERS\SFWCallout.sys [65280 2015-07-09] (Sophos Limited) S4 SophosBootDriver; C:\WINDOWS\system32\DRIVERS\SophosBootDriver.sys [27904 2015-07-30] (Sophos Limited) R1 swi_callout; C:\WINDOWS\system32\DRIVERS\swi_callout.sys [32512 2015-07-30] (Sophos Limited) R3 SynRMIHID; C:\WINDOWS\system32\DRIVERS\SynRMIHID.sys [47784 2015-07-29] (Synaptics Incorporated) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation) Code:
ATTFilter ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-05-23 16:22 - 2017-05-23 16:26 - 00002709 _____ C:\Users\domin\Desktop\Fixlog.txt 2017-05-23 12:27 - 2017-05-23 12:27 - 02870984 _____ (ESET) C:\Users\domin\Downloads\esetsmartinstaller_deu.exe 2017-05-23 12:27 - 2017-05-23 12:27 - 00000000 ____D C:\Program Files (x86)\ESET 2017-05-22 20:37 - 2016-12-29 15:16 - 06384576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2017-05-22 20:37 - 2016-12-29 15:16 - 02475968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2017-05-22 20:37 - 2016-12-29 15:16 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2017-05-22 20:37 - 2016-12-29 15:16 - 00546752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2017-05-22 20:37 - 2016-12-29 15:16 - 00392128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2017-05-22 20:37 - 2016-12-29 15:16 - 00083512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2017-05-22 20:37 - 2016-12-29 15:16 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2017-05-22 20:37 - 2016-12-22 01:59 - 07651057 _____ C:\WINDOWS\system32\nvcoproc.bin 2017-05-22 20:35 - 2017-05-22 20:36 - 00164908 _____ C:\WINDOWS\system32\tbt_log.txt 2017-05-22 19:38 - 2017-05-18 07:55 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2017-05-22 19:31 - 2017-05-18 09:35 - 01988216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438233.dll 2017-05-22 19:31 - 2017-05-18 09:35 - 01606592 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438233.dll 2017-05-22 19:31 - 2017-01-17 01:37 - 00042296 _____ C:\WINDOWS\system32\nvinfo.pb 2017-05-22 19:26 - 2017-05-22 19:26 - 00116902 _____ C:\Users\domin\Downloads\Angebot CLASSIC.pdf 2017-05-22 16:45 - 2017-05-22 16:45 - 00004000 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-22 16:45 - 2017-05-03 22:21 - 00175736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll 2017-05-22 16:45 - 2017-05-03 22:21 - 00143480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll 2017-05-21 00:49 - 2017-05-23 16:22 - 00000000 ____D C:\Users\domin\Desktop\FRST-OlderVersion 2017-05-21 00:48 - 2017-05-21 00:48 - 00001341 _____ C:\Users\domin\Desktop\AdwCleaner[C2].txt 2017-05-21 00:38 - 2017-05-21 00:39 - 04102600 _____ C:\Users\domin\Downloads\AdwCleaner_6.046.exe 2017-05-21 00:27 - 2017-05-21 00:27 - 00001388 _____ C:\Users\domin\Desktop\mbam.txt 2017-05-21 00:16 - 2017-05-23 17:05 - 00093624 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2017-05-21 00:16 - 2017-05-23 17:00 - 00251832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2017-05-21 00:16 - 2017-05-23 17:00 - 00187320 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys 2017-05-21 00:16 - 2017-05-23 17:00 - 00113592 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2017-05-21 00:16 - 2017-05-23 17:00 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2017-05-21 00:16 - 2017-05-21 00:16 - 00000865 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2017-05-21 00:16 - 2017-05-09 16:37 - 00077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys 2017-05-21 00:15 - 2017-05-21 00:15 - 00000000 ____D C:\ProgramData\Malwarebytes 2017-05-21 00:13 - 2017-05-21 00:14 - 63364552 _____ (Malwarebytes ) C:\Users\domin\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.122-1.0.1976.exe 2017-05-20 14:24 - 2017-05-20 14:24 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2017-05-20 14:23 - 2017-05-20 14:23 - 00000020 ___SH C:\Users\domin\ntuser.ini 2017-05-20 12:30 - 2017-05-20 12:30 - 00000000 ____D C:\Windows.old 2017-05-20 12:29 - 2017-05-20 12:29 - 23681024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 21353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 20505600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 20374424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 12787200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 11870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 08320920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 08244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 07931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 06759512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 06728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 06292992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 04848440 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 04730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 04469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 04446208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 03672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-05-20 12:29 - 2017-05-20 12:29 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 03655680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 03116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 02969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 02957824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-05-20 12:29 - 2017-05-20 12:29 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 02651648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 02635336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 02499584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 02444192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-05-20 12:29 - 2017-05-20 12:29 - 02443776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 02435584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 02399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 02330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 02298880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 02259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 02158544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 02085280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2017-05-20 12:29 - 2017-05-20 12:29 - 02056192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-05-20 12:29 - 2017-05-20 12:29 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2017-05-20 12:29 - 2017-05-20 12:29 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01852776 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01803264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01760264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01604312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01557288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01518088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01433600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01411128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01356800 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01325456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01320352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01295872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01285120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 01257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01242624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 01103872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01075712 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01051648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 01024416 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00980992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2017-05-20 12:29 - 2017-05-20 12:29 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00775824 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 00750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00741784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 00722944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2017-05-20 12:29 - 2017-05-20 12:29 - 00716440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2017-05-20 12:29 - 2017-05-20 12:29 - 00708712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00673112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00651680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00626520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00605936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00599576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00559000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2017-05-20 12:29 - 2017-05-20 12:29 - 00543640 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00523296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2017-05-20 12:29 - 2017-05-20 12:29 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2017-05-20 12:29 - 2017-05-20 12:29 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00409504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2017-05-20 12:29 - 2017-05-20 12:29 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2017-05-20 12:29 - 2017-05-20 12:29 - 00387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00382368 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00311192 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00207264 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00142240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2017-05-20 12:29 - 2017-05-20 12:29 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys 2017-05-20 12:29 - 2017-05-20 12:29 - 00105456 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2017-05-20 12:29 - 2017-05-20 12:29 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2017-05-20 12:29 - 2017-05-20 12:29 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00047104 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00038912 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys 2017-05-20 12:29 - 2017-05-20 12:29 - 00032004 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin 2017-05-20 12:29 - 2017-05-20 12:29 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll 2017-05-20 12:29 - 2017-05-20 12:29 - 00027040 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe 2017-05-20 12:29 - 2017-05-20 12:29 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll 2017-05-20 12:27 - 2017-05-20 12:27 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2017-05-20 12:27 - 2017-05-20 11:32 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2017-05-20 12:26 - 2017-05-20 12:26 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2017-05-20 12:26 - 2017-05-20 12:26 - 00000000 ____D C:\Program Files\Reference Assemblies 2017-05-20 12:26 - 2017-05-20 12:26 - 00000000 ____D C:\Program Files\MSBuild 2017-05-20 12:26 - 2017-05-20 12:26 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2017-05-20 12:26 - 2017-05-20 12:26 - 00000000 ____D C:\Program Files (x86)\MSBuild 2017-05-20 12:26 - 2017-02-10 12:26 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2017-05-20 12:26 - 2017-02-10 12:26 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2017-05-20 12:26 - 2017-02-10 12:26 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2017-05-20 12:26 - 2017-02-10 12:21 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2017-05-20 12:26 - 2017-02-10 12:21 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2017-05-20 12:26 - 2017-02-10 12:21 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2017-05-20 11:43 - 2017-05-23 17:07 - 02003702 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-05-20 11:42 - 2017-05-20 11:42 - 00000000 ____D C:\ProgramData\USOShared 2017-05-20 11:40 - 2017-05-20 11:40 - 00011433 _____ C:\WINDOWS\diagwrn.xml 2017-05-20 11:40 - 2017-05-20 11:40 - 00011433 _____ C:\WINDOWS\diagerr.xml 2017-05-20 11:39 - 2017-05-20 11:39 - 00003852 _____ C:\WINDOWS\System32\Tasks\ACCAgent 2017-05-20 11:38 - 2017-05-23 17:00 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-05-20 11:38 - 2017-05-22 16:45 - 00004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-20 11:38 - 2017-05-22 16:45 - 00003994 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-20 11:38 - 2017-05-22 16:45 - 00003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-20 11:38 - 2017-05-22 16:45 - 00003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-20 11:38 - 2017-05-22 16:45 - 00003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-20 11:38 - 2017-05-22 16:45 - 00003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-20 11:38 - 2017-05-22 16:45 - 00003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-20 11:38 - 2017-05-20 14:25 - 00003290 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2 2017-05-20 11:38 - 2017-05-20 11:39 - 00003758 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA 2017-05-20 11:38 - 2017-05-20 11:39 - 00002808 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-dominik.gasser@gmx.de 2017-05-20 11:38 - 2017-05-20 11:38 - 00003534 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore 2017-05-20 11:38 - 2017-05-20 11:38 - 00003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2017-05-20 11:38 - 2017-05-20 11:38 - 00002820 _____ C:\WINDOWS\System32\Tasks\ACC 2017-05-20 11:38 - 2017-05-20 11:38 - 00002762 _____ C:\WINDOWS\System32\Tasks\BacKGroundAgent 2017-05-20 11:38 - 2017-05-20 11:38 - 00002706 _____ C:\WINDOWS\System32\Tasks\UbtFrameworkService 2017-05-20 11:38 - 2017-05-20 11:38 - 00002534 _____ C:\WINDOWS\System32\Tasks\AcerCloud 2017-05-20 11:38 - 2017-05-20 11:38 - 00002328 _____ C:\WINDOWS\System32\Tasks\ACCBackgroundApplication 2017-05-20 11:38 - 2017-05-20 11:38 - 00002264 _____ C:\WINDOWS\System32\Tasks\Power Button 2017-05-20 11:38 - 2017-05-20 11:38 - 00002222 _____ C:\WINDOWS\System32\Tasks\Power Management 2017-05-20 11:38 - 2017-05-20 11:38 - 00002180 _____ C:\WINDOWS\System32\Tasks\Quick Access 2017-05-20 11:38 - 2017-05-20 11:38 - 00002074 _____ C:\WINDOWS\System32\Tasks\FUBTrackingByPLD 2017-05-20 11:38 - 2017-05-20 11:38 - 00000000 ____D C:\WINDOWS\System32\Tasks\Intel 2017-05-20 11:36 - 2017-05-20 11:36 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2017-05-20 11:34 - 2017-05-20 11:37 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2017-05-20 11:33 - 2017-05-23 17:02 - 00000000 ____D C:\ProgramData\NVIDIA 2017-05-20 11:33 - 2017-05-23 01:16 - 00000000 ____D C:\Users\domin 2017-05-20 11:33 - 2017-05-22 20:36 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2017-05-20 11:33 - 2017-05-22 19:38 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2017-05-20 11:33 - 2017-05-22 19:38 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-05-20 11:33 - 2017-05-20 11:38 - 00000000 ____D C:\Users\postgres 2017-05-20 11:33 - 2017-05-20 11:34 - 00000000 ____D C:\Program Files (x86)\Realtek 2017-05-20 11:33 - 2017-05-20 11:33 - 01805173 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip 2017-05-20 11:33 - 2017-05-20 11:33 - 00000102 _____ C:\ProgramData\Microsoft.SqlServer.Compact.400.64.bc 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\postgres\Vorlagen 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\postgres\Startmenü 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\postgres\Netzwerkumgebung 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\postgres\Lokale Einstellungen 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\postgres\Eigene Dateien 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\postgres\Druckumgebung 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\postgres\Documents\Eigene Videos 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\postgres\Documents\Eigene Musik 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\postgres\Documents\Eigene Bilder 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\postgres\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\postgres\AppData\Local\Verlauf 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\postgres\AppData\Local\Anwendungsdaten 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\postgres\Anwendungsdaten 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\domin\Vorlagen 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\domin\Startmenü 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\domin\Netzwerkumgebung 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\domin\Lokale Einstellungen 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\domin\Eigene Dateien 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\domin\Druckumgebung 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\domin\Documents\Eigene Videos 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\domin\Documents\Eigene Musik 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\domin\Documents\Eigene Bilder 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\domin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\domin\AppData\Local\Verlauf 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\domin\AppData\Local\Anwendungsdaten 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 _SHDL C:\Users\domin\Anwendungsdaten 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 ____D C:\WINDOWS\system32\IntelSSTAPO 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 ____D C:\WINDOWS\system32\DAX2 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 ____D C:\ProgramData\rtkSSTSetting 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 ____D C:\ProgramData\Dolby 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 ____D C:\Program Files\Realtek 2017-05-20 11:33 - 2017-05-20 11:33 - 00000000 ____D C:\Program Files\Dolby 2017-05-20 11:33 - 2016-10-19 11:54 - 01920820 _____ C:\WINDOWS\system32\Drivers\rtkSSTSetting.zip 2017-05-20 11:32 - 2017-05-23 17:26 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-05-20 11:32 - 2017-05-23 17:00 - 05092760 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-05-20 11:32 - 2017-05-20 11:34 - 00000000 ____D C:\Program Files\Intel 2017-05-20 11:32 - 2017-05-20 11:34 - 00000000 ____D C:\Program Files (x86)\Intel 2017-05-20 11:32 - 2017-05-20 11:32 - 00000000 ____D C:\WINDOWS\SysWOW64\sda 2017-05-20 11:32 - 2017-05-20 11:32 - 00000000 ____D C:\WINDOWS\system32\Intel 2017-05-20 11:32 - 2017-05-20 11:32 - 00000000 ____D C:\Program Files\Common Files\Atheros 2017-05-20 11:32 - 2017-05-20 11:32 - 00000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin 2017-05-20 11:32 - 2017-03-18 22:56 - 02233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2017-05-20 11:32 - 2016-11-23 03:02 - 00113664 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2017-05-20 11:32 - 2016-11-23 03:02 - 00104456 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2017-05-20 10:49 - 2017-05-20 14:23 - 00000000 ___DC C:\WINDOWS\Panther 2017-05-19 09:04 - 2017-05-23 17:28 - 00030426 _____ C:\Users\domin\Desktop\FRST.txt 2017-05-19 09:04 - 2017-05-23 17:27 - 00000000 ____D C:\FRST 2017-05-19 09:04 - 2017-05-21 00:54 - 00043727 _____ C:\Users\domin\Desktop\Addition.txt 2017-05-19 09:03 - 2017-05-23 16:22 - 02429952 _____ (Farbar) C:\Users\domin\Desktop\FRST64.exe 2017-05-17 23:50 - 2017-05-20 11:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2017-05-17 09:17 - 2017-05-17 09:17 - 00001260 _____ C:\Users\domin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Update- und Datenschutzeinstellungen.lnk 2017-05-17 09:17 - 2017-05-17 09:17 - 00000000 ____D C:\Users\domin\AppData\Local\UNP 2017-05-16 23:01 - 2017-05-16 23:01 - 00048944 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2017-05-16 14:31 - 2017-05-20 11:37 - 00000000 ____D C:\WINDOWS\system32\UNP 2017-05-16 14:31 - 2017-05-16 14:32 - 00000000 ____D C:\Program Files\UNP 2017-05-14 22:54 - 2017-05-20 11:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2017-05-14 22:54 - 2017-05-14 22:54 - 00002642 _____ C:\Users\Public\Desktop\Skype.lnk 2017-05-14 22:54 - 2017-05-14 22:54 - 00000000 ___RD C:\Program Files (x86)\Skype 2017-05-14 22:54 - 2017-05-14 22:54 - 00000000 ____D C:\Users\domin\Tracing 2017-05-14 22:54 - 2017-05-14 22:54 - 00000000 ____D C:\ProgramData\Skype 2017-05-14 22:52 - 2017-05-14 22:52 - 01632216 _____ (Skype Technologies S.A.) C:\Users\domin\Downloads\SkypeSetup.exe 2017-05-11 20:01 - 2017-03-04 08:26 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll 2017-05-10 09:45 - 2017-05-10 09:45 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignc4009ce387e94ad0 2017-05-10 09:45 - 2017-05-10 09:45 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign45c4cd1e2144960c 2017-05-10 09:44 - 2017-05-10 09:44 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign7d1d2a24bff0ba70 2017-05-10 09:44 - 2017-05-10 09:44 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign3cc84bcc43377ba3 2017-05-10 09:43 - 2017-05-10 09:43 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignf0023ab6201d5367 2017-05-10 09:43 - 2017-05-10 09:43 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign9a6f2a9c3ff865bd 2017-05-09 11:49 - 2017-05-09 11:51 - 84913002 _____ C:\Users\domin\Downloads\projektvocal_mix2.wav 2017-05-07 12:21 - 2017-05-03 21:28 - 00001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat 2017-05-07 12:19 - 2017-05-03 22:21 - 00057976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys 2017-05-07 12:11 - 2017-05-22 16:45 - 00001493 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2017-05-07 12:11 - 2017-05-20 11:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2017-05-07 12:11 - 2017-05-07 12:24 - 00000000 ____D C:\Users\domin\AppData\Local\NVIDIA 2017-05-07 12:11 - 2017-05-03 22:21 - 01893496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2017-05-07 12:11 - 2017-05-03 22:21 - 01755256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll 2017-05-07 12:11 - 2017-05-03 22:21 - 01477240 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2017-05-07 12:11 - 2017-05-03 22:21 - 01317496 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll 2017-05-07 12:11 - 2017-05-03 22:21 - 00121464 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll 2017-05-07 12:11 - 2017-05-03 22:21 - 00048248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys 2017-05-07 12:09 - 2017-05-07 12:09 - 80175936 _____ (NVIDIA Corporation) C:\Users\domin\Downloads\GeForce_Experience_v3.5.0.76.exe 2017-05-07 12:02 - 2017-05-07 12:04 - 437877496 _____ (NVIDIA Corporation) C:\Users\domin\Downloads\382.05-notebook-win10-64bit-international-whql.exe 2017-05-03 23:38 - 2017-05-04 09:31 - 00000000 ____D C:\Users\domin\AppData\Local\CyberGhost 2017-05-03 23:38 - 2017-05-03 23:38 - 00002079 _____ C:\Users\domin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberGhost 6.lnk 2017-05-03 23:37 - 2017-05-20 11:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 6 2017-05-03 23:37 - 2017-05-03 23:38 - 00000000 ____D C:\Program Files\TAP-Windows 2017-05-03 23:37 - 2017-05-03 23:37 - 00001773 _____ C:\Users\domin\Desktop\CyberGhost 6.lnk 2017-05-03 23:37 - 2017-03-22 09:39 - 00084768 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\cgnetfilter1521.sys 2017-05-03 23:36 - 2017-05-03 23:38 - 00000000 ____D C:\Program Files\CyberGhost 6 2017-05-03 19:02 - 2017-05-03 19:02 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignfa80dfdc866750d1 2017-05-03 16:58 - 2017-05-03 16:58 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign60df51ff85998711 2017-05-03 16:53 - 2017-05-03 16:53 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign5ce449efa41a68a5 2017-05-03 11:12 - 2017-05-03 11:12 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignad45f9c4ec40b94d 2017-05-03 11:12 - 2017-05-03 11:12 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsigna302598dcc265858 2017-05-02 16:47 - 2017-05-02 16:47 - 00055680 _____ C:\Users\domin\Downloads\spectraltv_2015.pdf 2017-05-02 16:37 - 2017-05-02 16:37 - 00081304 _____ C:\Users\domin\Downloads\Notenspiegel.pdf 2017-05-02 16:33 - 2017-05-02 16:33 - 00330080 _____ C:\Users\domin\Downloads\Scan0002.pdf 2017-05-02 16:33 - 2017-05-02 16:33 - 00311798 _____ C:\Users\domin\Downloads\Scan0003.pdf 2017-05-02 16:33 - 2017-05-02 16:33 - 00309352 _____ C:\Users\domin\Downloads\Scan0004.pdf 2017-05-02 16:33 - 2017-05-02 16:33 - 00230340 _____ C:\Users\domin\Downloads\Scan0001.pdf 2017-05-02 15:13 - 2017-05-02 15:13 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign4dd5a41980f7b222 2017-05-02 14:15 - 2017-05-02 14:15 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign5bcd651a93348321 2017-05-02 14:14 - 2017-05-02 14:14 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignb3c9019758418673 2017-05-02 14:14 - 2017-05-02 14:14 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign23c4f14dd7919872 2017-05-02 14:14 - 2017-05-02 14:14 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign118fb23b92c79e72 2017-05-02 13:17 - 2017-05-02 13:17 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsigndf9efdac10e6419a 2017-05-02 13:17 - 2017-05-02 13:17 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign59c0dcd2e018bde1 2017-05-02 11:10 - 2017-05-02 11:10 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignd9c26cec73ccbc85 2017-05-02 11:10 - 2017-05-02 11:10 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign4629dfd27c987a5b 2017-05-02 10:18 - 2017-05-02 10:18 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignfbaa67b2543d8105 2017-05-02 10:18 - 2017-05-02 10:18 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignd3df66248f0c8439 2017-05-01 23:09 - 2017-05-01 23:09 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign348497c4d3644f14 2017-05-01 22:41 - 2017-05-01 22:41 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignd8c5946bd8471231 2017-05-01 22:41 - 2017-05-01 22:41 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign102dcae11f66e60a 2017-05-01 21:53 - 2017-05-01 21:53 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign96c74e2bc988c5a7 2017-05-01 21:53 - 2017-05-01 21:53 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign852f1da14ef4f373 2017-05-01 21:50 - 2017-05-01 21:50 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsigncbaaf610d46027e6 2017-05-01 21:49 - 2017-05-01 21:49 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign2dcefa28e6a9e4d9 2017-05-01 19:50 - 2017-05-01 19:50 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignd8968fdd3d199c20 2017-05-01 19:50 - 2017-05-01 19:50 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign56380ec421f989c9 2017-05-01 16:23 - 2017-05-01 16:23 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign891ff72ab39465df 2017-05-01 16:23 - 2017-05-01 16:23 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign7183851ea98d9d27 2017-05-01 16:23 - 2017-05-01 16:23 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign509d176e75af28d4 2017-05-01 14:50 - 2017-05-01 14:50 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignd1e393881f11130b 2017-05-01 14:50 - 2017-05-01 14:50 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsigna229812f18ea70a2 2017-05-01 12:26 - 2017-05-01 12:26 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignde629d34d0821b1f 2017-05-01 12:25 - 2017-05-01 12:25 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign0975732401a2cbf5 2017-04-30 23:46 - 2017-04-30 23:46 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignd58f5b14eebc0781 2017-04-30 23:45 - 2017-04-30 23:45 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignd472444143712dc8 2017-04-30 23:45 - 2017-04-30 23:45 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign8ca3b0c0b33cf690 2017-04-30 23:45 - 2017-04-30 23:45 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign71b93b78b2deb9c8 2017-04-30 23:35 - 2017-04-30 23:43 - 00000033 _____ C:\Users\domin\AppData\Roaming\AdobeWLCMCache.dat 2017-04-30 23:31 - 2017-04-30 23:31 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsigne512ebe1fc33ef98 2017-04-30 23:31 - 2017-04-30 23:31 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign28ba9cab6f098cd2 2017-04-30 22:01 - 2017-04-30 22:01 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignc315768461549da9 2017-04-30 22:01 - 2017-04-30 22:01 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign7c3327e1ac229c86 2017-04-30 12:58 - 2017-05-01 20:15 - 00000000 ___RD C:\Users\domin\Dropbox 2017-04-30 12:58 - 2017-04-30 12:58 - 00001267 _____ C:\Users\domin\Desktop\Dropbox.lnk 2017-04-30 12:54 - 2017-05-17 23:50 - 00000000 ____D C:\Program Files (x86)\Dropbox 2017-04-30 12:54 - 2017-05-05 23:16 - 00001244 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job 2017-04-30 12:54 - 2017-05-05 23:16 - 00001240 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job 2017-04-30 12:54 - 2017-04-30 14:55 - 00000000 ____D C:\Users\domin\AppData\Local\Dropbox 2017-04-30 12:54 - 2017-04-30 12:54 - 00000000 ____D C:\Users\domin\AppData\Roaming\Dropbox 2017-04-30 12:54 - 2017-04-30 12:54 - 00000000 ____D C:\ProgramData\Dropbox 2017-04-30 12:09 - 2017-04-30 12:09 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsigne3f32dbb237f0601 2017-04-30 12:09 - 2017-04-30 12:09 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign9edb1aff6cb30fec 2017-04-30 11:03 - 2017-04-30 11:03 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignecbb31d8542e2eb0 2017-04-30 11:03 - 2017-04-30 11:03 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignebf45c67431d1cfe 2017-04-29 18:40 - 2017-04-29 18:40 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignbc071ef0c6cb84f6 2017-04-29 18:40 - 2017-04-29 18:40 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign1df39fc9f64795e5 2017-04-28 16:13 - 2017-04-28 16:13 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignd730042ddddec3e5 2017-04-28 16:13 - 2017-04-28 16:13 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign446894df9215e9c6 2017-04-28 12:04 - 2017-04-28 12:04 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignbae795fbe2104dff 2017-04-28 12:02 - 2017-04-28 12:02 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign714890d7ac706a57 2017-04-27 19:47 - 2017-04-27 19:47 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignf654a5af599920f9 2017-04-27 19:47 - 2017-04-27 19:47 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign65b6fb534dd2cd41 2017-04-27 19:46 - 2017-04-27 19:46 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign130b67559f30d5b5 2017-04-26 16:07 - 2017-04-26 16:07 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign501c40200757693b 2017-04-26 16:05 - 2017-04-26 16:05 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsignb460bd2106048f00 2017-04-26 16:05 - 2017-04-26 16:05 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign81a35f7afe51898e 2017-04-26 16:05 - 2017-04-26 16:05 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign0b78e863da192c0f 2017-04-24 09:56 - 2017-04-24 09:56 - 00000000 ____D C:\Users\Public\Documents\AdobeInstalledCodecs 2017-04-24 09:55 - 2017-04-24 09:55 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign2985581370d54040 2017-04-24 09:54 - 2017-04-24 09:54 - 00000000 ____D C:\Users\domin\AppData\Local\Tempzxpsign57f4a2e95f9a0819 ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-05-23 17:26 - 2016-11-19 02:34 - 00000000 ____D C:\Users\domin\AppData\LocalLow\Mozilla 2017-05-23 17:07 - 2017-03-20 06:35 - 00886296 _____ C:\WINDOWS\system32\perfh007.dat 2017-05-23 17:07 - 2017-03-20 06:35 - 00185564 _____ C:\WINDOWS\system32\perfc007.dat 2017-05-23 17:01 - 2017-04-21 12:52 - 00000000 ___RD C:\Users\domin\Creative Cloud Files 2017-05-23 17:01 - 2016-12-09 13:47 - 00000000 ____D C:\ProgramData\boost_interprocess 2017-05-23 17:01 - 2016-08-19 20:41 - 00000000 ____D C:\Users\domin\AppData\Local\Adobe 2017-05-23 17:00 - 2017-03-18 13:40 - 01048576 _____ C:\WINDOWS\system32\config\BBI 2017-05-23 17:00 - 2017-01-19 19:21 - 00000142 _____ C:\WINDOWS\ODBC.INI 2017-05-23 17:00 - 2016-06-30 12:05 - 00000000 __SHD C:\Users\domin\IntelGraphicsProfiles 2017-05-23 16:27 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps 2017-05-23 16:27 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-05-23 15:09 - 2017-03-18 23:01 - 00000000 ____D C:\WINDOWS\INF 2017-05-22 23:40 - 2016-12-21 16:11 - 00000000 ____D C:\ProgramData\Origin 2017-05-22 23:39 - 2016-12-21 16:14 - 00000000 ____D C:\Users\domin\AppData\Roaming\Origin 2017-05-22 20:49 - 2017-03-18 13:40 - 00032768 _____ C:\WINDOWS\system32\config\ELAM 2017-05-22 20:49 - 2016-12-17 16:56 - 00532136 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2017-05-22 20:47 - 2016-11-19 01:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-05-22 20:47 - 2016-08-18 22:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-05-22 20:36 - 2016-03-27 15:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbolt(TM) Software 2017-05-22 19:39 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Help 2017-05-22 16:44 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\appcompat 2017-05-21 10:59 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2017-05-21 00:46 - 2017-01-17 23:22 - 00000000 ____D C:\AdwCleaner 2017-05-21 00:32 - 2017-03-18 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-05-20 14:39 - 2016-08-18 22:12 - 00000000 ____D C:\Users\domin\AppData\Local\Packages 2017-05-20 14:36 - 2016-08-18 22:14 - 00000000 ____D C:\Users\domin\AppData\Local\Comms 2017-05-20 14:25 - 2016-08-18 22:14 - 00002391 _____ C:\Users\domin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-05-20 14:25 - 2016-06-30 12:06 - 00000000 ___RD C:\Users\domin\OneDrive 2017-05-20 14:24 - 2016-08-18 22:12 - 00000000 ____D C:\Users\domin\AppData\Local\ConnectedDevicesPlatform 2017-05-20 14:23 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-05-20 14:23 - 2015-11-04 10:35 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-05-20 12:31 - 2017-03-18 23:03 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2017-05-20 12:30 - 2017-03-18 23:06 - 00000000 ____D C:\WINDOWS\Setup 2017-05-20 12:29 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2017-05-20 12:29 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\F12 2017-05-20 12:29 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2017-05-20 12:29 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-05-20 12:29 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\appraiser 2017-05-20 12:29 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-05-20 12:29 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Provisioning 2017-05-20 12:29 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2017-05-20 12:29 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-05-20 12:29 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Dism 2017-05-20 12:26 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2017-05-20 12:26 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\MUI 2017-05-20 12:26 - 2017-03-18 22:56 - 00465408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll 2017-05-20 12:26 - 2017-03-18 22:56 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll 2017-05-20 12:26 - 2017-03-18 22:56 - 00217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll 2017-05-20 12:26 - 2017-03-18 22:56 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll 2017-05-20 12:26 - 2017-03-18 22:56 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll 2017-05-20 12:26 - 2017-03-18 22:56 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll 2017-05-20 12:26 - 2017-03-18 22:56 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe 2017-05-20 12:26 - 2017-03-18 22:56 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll 2017-05-20 12:26 - 2017-03-18 22:56 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe 2017-05-20 12:26 - 2017-03-18 22:56 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe 2017-05-20 12:26 - 2017-03-18 22:56 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll 2017-05-20 12:26 - 2017-03-18 22:56 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll 2017-05-20 12:26 - 2017-03-18 22:56 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll 2017-05-20 12:26 - 2017-03-18 22:56 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll 2017-05-20 12:26 - 2017-03-18 22:56 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll 2017-05-20 12:26 - 2017-03-18 22:56 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll 2017-05-20 12:26 - 2017-03-18 22:56 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll 2017-05-20 12:26 - 2017-03-18 22:56 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll 2017-05-20 11:42 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\rescache 2017-05-20 11:42 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\USOPrivate 2017-05-20 11:42 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows NT 2017-05-20 11:41 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2017-05-20 11:40 - 2016-08-18 22:53 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2017-05-20 11:39 - 2017-03-20 06:37 - 00000000 ____D C:\WINDOWS\HoloShell 2017-05-20 11:39 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Registration 2017-05-20 11:39 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-05-20 11:38 - 2017-03-18 23:03 - 00000000 __RHD C:\Users\Public\Libraries 2017-05-20 11:38 - 2016-08-18 22:08 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat 2017-05-20 11:37 - 2016-12-21 17:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\STAR WARS Battlefront 2017-05-20 11:37 - 2016-11-08 17:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby 2017-05-20 11:37 - 2016-10-06 13:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2017-05-20 11:37 - 2016-10-06 13:20 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe 2017-05-20 11:37 - 2016-10-06 13:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Production Premium CS6 2017-05-20 11:37 - 2016-08-28 11:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools 2017-05-20 11:37 - 2016-08-18 22:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller 2017-05-20 11:37 - 2016-03-27 15:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PhantomPDF 2017-05-20 11:37 - 2016-03-27 15:24 - 00000000 ____D C:\WINDOWS\system32\ihvmanager 2017-05-20 11:37 - 2015-11-04 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer 2017-05-20 11:35 - 2017-03-20 06:36 - 00000000 ____D C:\WINDOWS\OCR 2017-05-20 11:35 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-05-20 11:35 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\spool 2017-05-20 11:35 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\oobe 2017-05-20 11:35 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-05-20 11:35 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\Macromed 2017-05-20 11:35 - 2016-08-18 22:12 - 00000000 ____D C:\WINDOWS\oem 2017-05-20 11:34 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2017-05-20 11:34 - 2017-01-19 19:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos 2017-05-20 11:34 - 2016-12-09 12:28 - 00000000 ____D C:\Users\domin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEDION 2017-05-20 11:34 - 2016-08-18 23:05 - 00000000 ____D C:\Users\domin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft 2017-05-20 11:34 - 2015-11-04 10:37 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2017-05-20 11:33 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2017-05-20 11:19 - 2017-03-20 07:06 - 00000000 ___HD C:\$WINDOWS.~BT 2017-05-19 09:00 - 2016-08-19 12:19 - 00000000 ____D C:\Users\domin\AppData\Local\CrashDumps 2017-05-16 13:38 - 2016-08-25 11:07 - 00000000 ____D C:\Users\domin\AppData\Roaming\Skype 2017-05-11 20:26 - 2016-08-19 00:40 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-05-11 20:21 - 2016-08-19 00:40 - 156335152 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-05-10 09:42 - 2017-03-10 13:10 - 00000000 ____D C:\Users\domin\Desktop\Neuer Ordner 2017-05-07 12:25 - 2016-12-26 15:30 - 00000000 ____D C:\Users\domin\AppData\Local\NVIDIA Corporation 2017-05-07 12:08 - 2016-08-12 16:43 - 00000000 ____D C:\Users\domin\Documents\Assassin's Creed Unity 2017-05-07 12:00 - 2016-08-18 23:05 - 00000000 ____D C:\Users\domin\AppData\Local\Ubisoft Game Launcher 2017-05-03 23:38 - 2016-08-18 22:12 - 00000000 ____D C:\Users\domin\AppData\Local\VirtualStore 2017-05-02 16:32 - 2016-10-06 22:41 - 00000000 ____D C:\Users\domin\AppData\LocalLow\Adobe 2017-05-02 16:32 - 2016-08-18 22:12 - 00000000 ____D C:\Users\domin\AppData\Roaming\Adobe 2017-04-29 03:05 - 2017-03-18 23:06 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-04-29 03:05 - 2017-03-18 23:06 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2017-04-30 23:35 - 2017-04-30 23:43 - 0000033 _____ () C:\Users\domin\AppData\Roaming\AdobeWLCMCache.dat 2017-05-20 11:33 - 2017-05-20 11:33 - 0000102 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.64.bc 2016-12-17 16:50 - 2017-01-19 16:28 - 0003320 _____ () C:\ProgramData\NvTelemetryContainer.log 2016-12-17 16:50 - 2017-01-17 23:26 - 0003320 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1 ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2017-05-20 11:32 ==================== Ende von FRST.txt ============================ |
Themen zu Seltsame Probleme mit Google: Captchas gegen zu viele Anfragen von meinem Netzwerk |
adware, anfrage, captcha, computer, erfahrungen, euren, frage, fragen, gefährlich, gen, geschichte, gesendet, google, hallo zusammen, jahre, laptop, leitet, netzwerk, neue, neuen, nichts, probleme, robot, scan, scanner, sophos, systeme, virenscanner |