| |
| |||||||
Log-Analyse und Auswertung: Vermutlich infiziertes Dokument geöffnet - mehrere Stunden kein Zugriff auf E-Mail AccountsWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
04.10.2017, 23:46
| #1 |
| |  Vermutlich infiziertes Dokument geöffnet - mehrere Stunden kein Zugriff auf E-Mail Accounts Hallo zusammen. Zuerst muss ich sagen, dass ich nicht sonderlich bewandert in der Materie bin. Ich habe zwar ein Anti-Virus Programm auf dem Rechner (Kaspersky) und lasse auch immer mal den Scanner drüber laufen aber ansonsten nutze ich kaum Sicherheitsmaßnahmen. Normalerweise klicke ich aber nie auf irgendwas was mir auch nur entfernt merkwürdig erscheint. Diesmal dann leider schon. Ich habe auf meine Uni E-Mail Adresse eine Word Datei geschickt bekommen mit der Beschreibung "gescanntes Dokument". Diese Mail kam von einer offiziellen Uni E-Mail Adresse und ich habe dringend auf eine Antwort gewartet. Also habe ich unbedacht das Dokument angeklickt, doch dabei handelte es sich nur um eine Kopie des Textes aus der E-Mail. In der E-Mail selbst war auch noch ein Link den ich aber nicht angeklickt habe. Kurze Zeit später hat die Uni eine Rundmail rausgegeben, dass offizielle E-Mail Adressen benutzt werden würden, um anhand von Word Dokumenten Schadsoftware unter die Leute zu bringen. Heute konnte ich dann im Laufe des Tages mehrere Stunden lang nicht auf meine beiden web.de E-Mail Accounts zugreifen und es wurde mir immer wieder gesagt, dass das Passwort falsch wäre (was es nicht war). Inzwischen geht der Zugriff auf diese Konten wieder. Anbei die Files der Scans von FRST und Malwarebytes. Der Log von AdwCleaner ist der erste von heute. Hab danach alles entfernt und der zweite hat nichts gefunden. Bin für jede Hilfe dankbar! Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 03-10-2017 01
durchgeführt von Lasse (Administrator) auf LASSE-PC (05-10-2017 00:32:02)
Gestartet von C:\Users\Lasse\Desktop
Geladene Profile: Lasse & postgres (Verfügbare Profile: Lasse & postgres & DefaultAppPool)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\pg_ctl.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(CyberGhost S.A.) C:\Program Files\CyberGhost 6\CyberGhost.Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Octoshape ApS) C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
(Spotify Ltd) C:\Users\Lasse\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(ROCCAT GmbH Co., Ltd.) C:\Program Files (x86)\ROCCAT\Ryos Keyboard\Ryos MK Monitor.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
() C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE
() C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7611608 2014-05-27] (Realtek Semiconductor)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-08-28] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [CheckNDISPort54ac04] => C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe [474504 2015-09-16] ()
HKLM-x32\...\Run: [CancelAutoPlay_df] => C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe [446344 2015-09-16] ()
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-04-19] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Octoshape Streaming Services] => C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [500016 2014-08-01] (Octoshape ApS)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Spotify] => C:\Users\Lasse\AppData\Roaming\Spotify\Spotify.exe [20803184 2017-10-04] (Spotify Ltd)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Spotify Web Helper] => C:\Users\Lasse\AppData\Roaming\Spotify\SpotifyWebHelper.exe [777840 2017-10-04] (Spotify Ltd)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\MountPoints2: {8c4e4d7b-1c66-11e7-b759-74d435fed1e4} - "G:\AutoRun.exe"
HKU\S-1-5-21-2533615570-3755426884-238519182-1002\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2016-07-16] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ryos Driver.lnk [2015-06-10]
ShortcutTarget: Ryos Driver.lnk -> C:\Program Files (x86)\ROCCAT\Ryos Keyboard\Ryos MK Monitor.exe (ROCCAT GmbH Co., Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2017-05-21]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)
Startup: C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2017-08-13]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.8.1
Tcpip\..\Interfaces\{2fecfc21-6e41-481d-aecf-b1d0260b00b8}: [DhcpNameServer] 192.168.8.1
Internet Explorer:
==================
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-09-19] (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-09-19] (Oracle Corporation)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default [2017-09-26]
FF user.js: detected! => C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default\user.js [2015-07-21]
FF Extension: (Adblock Plus) - C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-05-30]
FF Extension: (Site Deployment Checker) - C:\Program Files (x86)\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi [2017-03-24] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2017-07-25]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-08-23] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-23] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-09-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-09-19] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-19] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2015-09-09] (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2533615570-3755426884-238519182-1000: @octoshape.com/Octoshape Streaming Services,version=1.0 -> C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1702150-0-npoctoshape.dll [2017-02-15] (Octoshape ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2016-07-19] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Lasse\AppData\Roaming\mozilla\plugins\npoctoshape.dll [2016-02-16] (Octoshape ApS)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&ts=1429129023&from=cor&uid=CrucialXCT256MX100SSD1_14460DD089940DD08994
CHR StartupUrls: Default -> "hxxps://www.google.de/"
CHR NewTab: Default -> Active:"chrome-extension://llaficoajjainaijghjlofdfmbjpebpa/newtab.html"
CHR Profile: C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default [2017-10-05]
CHR Extension: (Google Präsentationen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-10]
CHR Extension: (Google Docs) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-10]
CHR Extension: (Google Drive) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Pushbullet) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2017-10-03]
CHR Extension: (Steam Inventory Helper) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2017-10-03]
CHR Extension: (Google-Suche) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Tampermonkey) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-09-25]
CHR Extension: (Google Tabellen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-10]
CHR Extension: (Google Docs Offline) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-09-22]
CHR Extension: (Speed Dial [FVD] - New Tab Page, 3D, Sync...) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\llaficoajjainaijghjlofdfmbjpebpa [2017-08-27]
CHR Extension: (Dingit Infinite HD App) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\llnhnfikffkjbdnfallfpgikamegbbag [2016-01-29]
CHR Extension: (Ghostery) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2017-09-01]
CHR Extension: (LocalChromecast Player) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmladpigjlinmngadjgfogblnmddndcp [2015-06-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Enhanced Steam) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\okadibdjfemgnhjiembecghcbfknbfhg [2017-09-01]
CHR Extension: (Google Mail) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-10]
CHR Extension: (Chrome Media Router) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27]
CHR Extension: (OPDeals - Find the best deals on OPSkins.com) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnmifmjgoddkicidifnaenlagjcofomn [2016-06-30]
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AVP17.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1533448 2017-09-16] ()
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [232528 2017-08-31] (CyberGhost S.A.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2014-10-03] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [156960 2015-02-25] (Intel Corporation)
S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe [77328 2016-06-28] (AO Kaspersky Lab)
R2 KSDE1.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2120712 2016-06-08] (Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1450824 2017-09-10] (Overwolf LTD)
R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-04-19] (Geek Software GmbH)
R2 postgresql-8.4; c:\postgreSQL\bin\pg_ctl.exe [66048 2014-02-18] (PostgreSQL Global Development Group) [Datei ist nicht signiert]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-03-04] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [238936 2016-06-10] (AO Kaspersky Lab)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [27552 2017-06-03] (REALiX(tm))
R0 kl1; C:\WINDOWS\System32\DRIVERS\kl1.sys [554416 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [63920 2016-06-07] (AO Kaspersky Lab)
R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [86352 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [28792 2016-03-31] (AO Kaspersky Lab)
R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [197312 2017-07-25] (AO Kaspersky Lab)
R1 klhk; C:\WINDOWS\System32\drivers\klhk.sys [520152 2017-07-25] (AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP17.0.0\Bases\klids.sys [186696 2017-10-05] (AO Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1021624 2017-07-25] (AO Kaspersky Lab)
R1 KLIM6; C:\WINDOWS\system32\DRIVERS\klim6.sys [57424 2017-03-30] (AO Kaspersky Lab)
R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [52136 2016-05-19] (AO Kaspersky Lab)
R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [45488 2016-05-31] (AO Kaspersky Lab)
R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project)
R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [229288 2017-06-28] (AO Kaspersky Lab)
R3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [87584 2017-10-03] (AO Kaspersky Lab)
S3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [251656 2017-08-01] (AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [112912 2017-06-28] (AO Kaspersky Lab)
R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [173144 2017-08-01] (AO Kaspersky Lab)
R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [85320 2016-06-18] (AO Kaspersky Lab)
R1 Klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [136416 2017-03-30] (AO Kaspersky Lab)
R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [199640 2017-07-25] (AO Kaspersky Lab)
R0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [252232 2017-10-05] (Malwarebytes)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2015-02-25] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_b67dc924fff8de6d\nvlddmkm.sys [14199224 2017-01-04] (NVIDIA Corporation)
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [46440 2017-04-06] (SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [45896 2017-05-12] (SteelSeries ApS)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 vpnva; C:\WINDOWS\System32\DRIVERS\vpnva64-6.sys [52592 2015-07-24] (Cisco Systems, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U3 idsvc; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-10-05 00:21 - 2017-10-05 00:21 - 000055996 _____ C:\Users\Lasse\Desktop\Addition.txt
2017-10-05 00:20 - 2017-10-05 00:32 - 000025120 _____ C:\Users\Lasse\Desktop\FRST.txt
2017-10-05 00:20 - 2017-10-05 00:32 - 000000000 ____D C:\FRST
2017-10-05 00:13 - 2017-10-05 00:20 - 000000000 ____D C:\AdwCleaner
2017-10-05 00:08 - 2017-10-05 00:08 - 000252232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2017-10-05 00:08 - 2017-10-05 00:08 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-10-05 00:08 - 2017-10-05 00:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-10-05 00:08 - 2017-10-05 00:08 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-10-05 00:08 - 2017-10-05 00:08 - 000000000 ____D C:\Program Files\Malwarebytes
2017-10-05 00:08 - 2017-09-27 09:37 - 000077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-10-05 00:06 - 2017-10-05 00:06 - 002399744 _____ (Farbar) C:\Users\Lasse\Desktop\FRST64.exe
2017-10-05 00:06 - 2017-10-05 00:03 - 008250832 _____ (Malwarebytes) C:\Users\Lasse\Desktop\AdwCleaner_7.0.3.1.exe
2017-10-03 11:48 - 2017-10-03 11:48 - 000087584 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys
2017-09-30 22:42 - 2017-09-30 22:42 - 000439668 _____ C:\Users\Lasse\Downloads\ROU1Z4.pdf
2017-09-30 22:40 - 2017-09-30 22:40 - 000461469 _____ C:\Users\Lasse\Downloads\ELLPVD.pdf
2017-09-28 09:10 - 2017-09-28 09:10 - 000050091 _____ C:\Users\Lasse\Downloads\PB_KAZ_KtoNr_0784600600_06-04-2017_0712.pdf
2017-09-27 10:26 - 2017-09-27 10:26 - 001300888 _____ C:\Users\Lasse\Downloads\AW_ AW_ AW_ AW_ AW_ Bescheinigung f__r HerrnLasse****.zip
2017-09-26 04:58 - 2017-09-26 04:58 - 000290500 _____ C:\Users\Lasse\Desktop\bescheinigung_ausserfachliche_medienanalyse.pdf
2017-09-26 04:52 - 2017-09-26 04:50 - 000201219 _____ C:\Users\Lasse\Desktop\Die Auswirkungen von Premediation auf die Berichterstattung der Anschläge des 11. September 2001 - Lasse ****.pdf
2017-09-20 10:45 - 2017-09-20 10:45 - 001601996 _____ C:\Users\Lasse\Desktop\grusin-richard-premediation-affect-and-mediality-after-911.pdf
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-10-05 00:23 - 2016-09-23 18:35 - 002984726 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-10-05 00:23 - 2016-07-17 00:51 - 001268550 _____ C:\WINDOWS\system32\perfh007.dat
2017-10-05 00:23 - 2016-07-17 00:51 - 000321202 _____ C:\WINDOWS\system32\perfc007.dat
2017-10-05 00:21 - 2015-06-10 06:10 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2017-10-05 00:19 - 2015-06-10 23:15 - 000000000 ____D C:\Users\Lasse\AppData\Local\Spotify
2017-10-05 00:19 - 2015-06-10 23:14 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\Spotify
2017-10-05 00:18 - 2016-09-23 18:41 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-10-05 00:18 - 2016-09-23 18:35 - 000000000 ____D C:\Users\postgres
2017-10-05 00:18 - 2016-09-23 18:34 - 000000000 ____D C:\ProgramData\NVIDIA
2017-10-05 00:18 - 2016-07-16 08:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2017-10-05 00:16 - 2015-08-13 13:43 - 000000000 ____D C:\Users\Lasse\AppData\Local\Downloaded Installations
2017-10-05 00:12 - 2016-09-23 18:34 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-10-03 22:53 - 2015-06-12 00:10 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\TS3Client
2017-10-03 13:40 - 2016-07-16 13:45 - 000000000 ____D C:\WINDOWS\INF
2017-10-02 00:31 - 2016-09-23 18:35 - 000000000 ____D C:\Users\Lasse
2017-09-27 22:28 - 2015-11-10 23:00 - 000000000 ____D C:\Users\Lasse\AppData\Local\Battle.net
2017-09-27 12:06 - 2015-06-10 06:57 - 000000000 ____D C:\Users\Lasse\AppData\Local\PokerStars.EU
2017-09-27 08:56 - 2015-06-10 05:59 - 000002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-09-26 08:55 - 2017-02-07 16:43 - 000000000 ____D C:\Users\Lasse\AppData\LocalLow\Mozilla
2017-09-26 04:09 - 2015-06-10 06:20 - 000000000 ____D C:\Users\Lasse\Documents\Uni
2017-09-24 22:03 - 2017-07-24 21:31 - 000000000 ____D C:\Users\Lasse\AppData\Local\Overwolf
2017-09-22 23:40 - 2017-07-27 09:39 - 000003362 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2533615570-3755426884-238519182-1000
2017-09-22 23:40 - 2016-05-03 13:25 - 000002383 _____ C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-09-22 23:40 - 2016-05-03 13:25 - 000000000 ___RD C:\Users\Lasse\OneDrive
2017-09-19 13:00 - 2015-11-10 23:13 - 000000000 ____D C:\Program Files (x86)\Hearthstone
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HearthSim
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\HearthstoneDeckTracker
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Local\HearthstoneDeckTracker
2017-09-19 12:59 - 2016-02-02 00:52 - 000000000 ____D C:\Users\Lasse\AppData\Local\SquirrelTemp
2017-09-19 11:46 - 2015-12-04 10:59 - 000097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\ProgramData\Oracle
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\Program Files (x86)\Java
2017-09-17 19:32 - 2015-06-16 01:41 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\vlc
2017-09-16 17:18 - 2015-06-10 05:21 - 000000000 ____D C:\Users\Lasse\AppData\Local\VirtualStore
2017-09-15 09:32 - 2017-07-24 21:32 - 000000000 ____D C:\Program Files (x86)\Overwolf
2017-09-10 22:25 - 2017-09-03 21:12 - 000000000 ____D C:\Users\Lasse\Desktop\subs
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-03-13 14:46 - 2016-03-13 15:09 - 000002438 _____ () C:\Users\Lasse\AppData\Roaming\SpeedRunnersLog.txt
2016-09-23 18:34 - 2016-09-23 18:34 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
Einige Dateien in TEMP:
====================
2016-12-15 12:26 - 2016-12-15 12:26 - 000737856 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u111-windows-au.exe
2017-02-07 16:44 - 2017-02-07 16:44 - 000739904 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u121-windows-au.exe
2017-05-21 13:13 - 2017-05-21 13:13 - 000739904 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u131-windows-au.exe
2017-09-19 11:45 - 2017-09-19 11:45 - 000740416 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u144-windows-au.exe
2016-09-25 16:02 - 2016-07-16 13:42 - 000616048 _____ (Microsoft Corporation) C:\Users\Lasse\AppData\Local\Temp\kernel32.dll
2017-03-21 00:57 - 2016-03-09 22:39 - 004839768 ____N (Conexant Systems, Inc.) C:\Users\Lasse\AppData\Local\Temp\KUIU.EXE
2016-10-26 12:38 - 2016-10-26 12:38 - 000040448 ____N () C:\Users\Lasse\AppData\Local\Temp\proxy_vole4284622008590521579.dll
2016-10-26 12:38 - 2016-10-26 12:38 - 000040448 ____N () C:\Users\Lasse\AppData\Local\Temp\proxy_vole9072781731305077584.dll
2016-12-06 14:14 - 2016-12-06 14:14 - 077105961 _____ () C:\Users\Lasse\AppData\Local\Temp\setup.exe
2017-03-23 19:32 - 2017-03-23 19:32 - 014456872 _____ (Microsoft Corporation) C:\Users\Lasse\AppData\Local\Temp\vc_redist.x86.exe
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2017-10-04 23:57
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 03-10-2017 01
durchgeführt von Lasse (05-10-2017 00:32:21)
Gestartet von C:\Users\Lasse\Desktop
Windows 10 Home Version 1607 (X64) (2016-09-23 16:42:05)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2533615570-3755426884-238519182-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2533615570-3755426884-238519182-503 - Limited - Disabled)
Gast (S-1-5-21-2533615570-3755426884-238519182-501 - Limited - Disabled)
Lasse (S-1-5-21-2533615570-3755426884-238519182-1000 - Administrator - Enabled) => C:\Users\Lasse
postgres (S-1-5-21-2533615570-3755426884-238519182-1002 - Limited - Enabled) => C:\Users\postgres
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Kaspersky Internet Security (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Internet Security (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
1&1 Surf-Stick (HKLM-x32\...\{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD}) (Version: 1.0.0.3 - ZTE Corporation)
888poker (HKLM-x32\...\888poker) (Version: - )
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version: - Hidden Path Entertainment, Ensemble Studios)
Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version: - Ensemble Studios)
Brother MFL-Pro Suite MFC-J4510DW (HKLM-x32\...\{DD98C438-D769-4677-AA87-3481FA32D20C}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5931 - CDBurnerXP)
CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version: - CyberGhost S.R.L.)
Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version: - Red Hook Studios)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
DiRT 3 Complete Edition (HKLM\...\Steam App 321040) (Version: - Codemasters Racing Studio)
Discord (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Discord) (Version: 0.0.290 - Hammer & Chisel, Inc.)
Don't Starve (HKLM-x32\...\Steam App 219740) (Version: - Klei Entertainment)
FUSSBALL MANAGER 13 (HKLM-x32\...\{80AF0300-866F-400F-A350-D53E3C3E34E0}) (Version: 1.0.4.0 - Electronic Arts)
Golf With Your Friends (HKLM\...\Steam App 431240) (Version: - Blacklight Interactive)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Hearthstone Deck Tracker (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\HearthstoneDeckTracker) (Version: 1.4.3 - HearthSim)
Holdem Manager 2 (HKLM-x32\...\HoldemManager2) (Version: - )
Hotline Miami (HKLM-x32\...\Steam App 219150) (Version: - Dennaton Games)
HWiNFO64 Version 5.52 (HKLM\...\HWiNFO64_is1) (Version: 5.52 - Martin Malík - REALiX)
Infinite HD™ App (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Octoshape Streaming Services) (Version: - Octoshape ApS)
InputMapper (HKLM-x32\...\{1A44056A-C7D8-4561-BC43-A0AA7D7AAA64}) (Version: 1.5.31.0 - DSDCS)
Insurgency (HKLM-x32\...\Steam App 222880) (Version: - New World Interactive)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.39.1003 - Intel Corporation)
Intel(R) Network Connections 18.8.136.0 (HKLM\...\PROSetDX) (Version: 18.8.136.0 - Intel)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.4.65 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}) (Version: 10.0.27 - Intel(R) Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Kaspersky Internet Security (HKLM-x32\...\{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Secure Connection (HKLM-x32\...\{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab)
Keep Talking and Nobody Explodes (HKLM\...\Steam App 341800) (Version: - Steel Crate Games)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version: - DONTNOD Entertainment)
Malwarebytes Version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50905.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Monaco (HKLM-x32\...\Steam App 113020) (Version: - Pocketwatch Games)
Mozilla Firefox 52.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 52.0.2 (x86 de)) (Version: 52.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.2 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Mumble 1.2.11 (HKLM-x32\...\{2C0B4F07-7DD2-4D69-9A97-77AE3A37280F}) (Version: 1.2.11 - Thorvald Natvig)
NBA 2K17 (HKLM\...\Steam App 385760) (Version: - Visual Concepts)
Nero 2016 (HKLM-x32\...\{049045D5-0C46-4E78-A83F-83E993D91A7F}) (Version: 17.0.02300 - Nero AG)
Nero Info (HKLM-x32\...\{F030BFE8-8476-4C08-A553-233DE80A2BE1}) (Version: 16.0.2000 - Nero AG)
NetBet Poker (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Netbet Poker) (Version: 1.1.1.33 - NetBet Poker)
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.61.7 - Black Tree Gaming)
Nidhogg (HKLM-x32\...\Steam App 94400) (Version: - Messhof)
No Man's Sky (HKLM\...\Steam App 275850) (Version: - Hello Games)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 376.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.53 - NVIDIA Corporation)
NVIDIA Grafiktreiber 376.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.53 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Orcs Must Die! (HKLM-x32\...\Steam App 102600) (Version: - Robot Entertainment)
Orcs Must Die! 2 (HKLM-x32\...\Steam App 201790) (Version: - Robot Entertainment)
Origin (HKLM-x32\...\Origin) (Version: 9.0.11.77 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.107.36.0 - Overwolf Ltd.)
Party Hard (HKLM\...\Steam App 356570) (Version: - Pinokl Games)
PDF24 Creator 8.1.4 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
PLAYERUNKNOWN'S BATTLEGROUNDS (HKLM\...\Steam App 578080) (Version: - Bluehole, Inc.)
Poker at bet365 (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\bet365poker) (Version: 1.1.1.32 - Poker at bet365)
PokerStrategy.com Equilab (HKLM-x32\...\{86D09F48-CDAB-4B4C-8806-F6C16F17935A}) (Version: 1.2.8.0 - PokerStrategy.com)
PostgreSQL 8.4 (HKLM-x32\...\PostgreSQL 8.4) (Version: 8.4 - PostgreSQL Global Development Group)
Prerequisite installer (HKLM-x32\...\{5F284483-EE8D-447E-BEBE-2BF13B08C4BF}) (Version: 17.0.0002 - Nero AG) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7256 - Realtek Semiconductor Corp.)
Remember Me (HKLM-x32\...\Steam App 228300) (Version: - DONTNOD Entertainment)
ROCCAT Ryos Keyboard Driver (HKLM-x32\...\{70F3EF93-44F4-446A-90B8-33DAB2799AF1}) (Version: 1.29.0006 - Roccat GmbH)
Rocket League (HKLM-x32\...\Steam App 252950) (Version: - Psyonix)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
SpeedRunners (HKLM\...\Steam App 207140) (Version: - DoubleDutch Games)
Spotify (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Spotify) (Version: 1.0.64.399.g4637b02a - Spotify AB)
Stashimi Stub Installer (HKLM-x32\...\{910B539D-F257-46C8-9CB8-6C95EFF9CF22}) (Version: 18.001.1 - Nero AG) Hidden
SteelSeries Engine 3.10.2 (HKLM\...\SteelSeries Engine 3) (Version: 3.10.2 - SteelSeries ApS)
Sunless Sea (HKLM-x32\...\Steam App 304650) (Version: - Failbetter Games)
SUPERHOT (HKLM\...\Steam App 322500) (Version: - SUPERHOT Team)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Sims(TM) 3 (HKLM-x32\...\Steam App 47890) (Version: - The Sims Studio)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.0.0 - GOG.com)
The Wolf Among Us (HKLM-x32\...\Steam App 250320) (Version: - Telltale Games)
To the Moon (HKLM-x32\...\Steam App 206440) (Version: - Freebird Games)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version: - Crystal Dynamics)
Undertale (HKLM-x32\...\Steam App 391540) (Version: - tobyfox)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{5D2260D6-DB16-41DC-915B-A39BF4F66362}) (Version: - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Windows Driver Package - Microsoft (xusb21) XnaComposite (08/13/2009 2.1.0.1349) (HKLM\...\0AEBEF6F936CFE16E003F7E141631FAB754D9816) (Version: 08/13/2009 2.1.0.1349 - Microsoft)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Xenonauts (HKLM\...\Steam App 223830) (Version: - Goldhawk Interactive)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2015-04-15] ()
ContextMenuHandlers1: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext32.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers2: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers4: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Keine Datei
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-29] (NVIDIA Corporation)
ContextMenuHandlers6: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext32.dll [2015-02-20] (Alexander Roshal)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0EA79F79-E1A5-4A0A-9EB4-34A0F7599D7A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {1E2ED6AF-44DD-4BD9-92B4-158C8C364963} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2015-06-04] (Nero AG)
Task: {20619094-6457-425B-A945-0C4FDB1693EB} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {24849D53-6FDE-4375-9849-A131708F6A6B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {27018E8B-CD23-4488-8A1A-B7F8E98989BC} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {2738848A-4A4F-46DA-927F-8C2C9DF0BC8C} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {28CB3FFB-904C-47A0-ABCB-9235400956E9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {297B2EE0-39D1-47A0-A923-E93BBB750EFB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {33A617CB-993D-4FA3-AB13-921058F47898} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {346CA78B-8395-4144-8B90-67B4E73505C4} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {38708F88-5274-46F9-A4FA-C6B8D1965177} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {406CB1B8-07F8-4C0D-8242-932A7202ACA7} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {422893B7-EFA5-4D9A-9E12-347E25F452FE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {4736970E-099A-4720-B7F9-6AA0BC9F8D23} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2017-09-10] (Overwolf LTD)
Task: {48F971F9-1011-494E-9C14-978135E38E0F} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {4D665A95-C820-484E-ACEA-CCA24CD7B7E9} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5907DFEF-F5E3-43D6-A652-4EFE2297BB75} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [2017-08-23] (Adobe Systems Incorporated)
Task: {70967EA7-6DC1-4D1C-B266-85A70912B2AF} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {719E802E-99AD-4D2D-93DD-DD40BB975F4A} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {744885B0-6690-4DBF-AFD2-D14D64B73594} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {7C28B565-DF69-4859-BF78-11D1793D2530} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {80BFF415-92DD-4AFD-A317-820EC45E4F40} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {835CACB0-B38D-4B5F-86E4-40A82DCF9296} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8EFE6846-5634-4A31-9D17-188267D1ED8E} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Lasse\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {907543A2-0FD5-44B9-BD78-3210741E547F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {9F6A05A9-B92A-463B-ABDF-2F07A2BAFB72} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {A5FAC33E-1E4D-45CF-9D2F-58914E30A741} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {A7C6D38F-1AB6-4E8B-A2AE-ED60967D762A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {AAD71ED8-2D79-426B-B5E7-1025A792E8EA} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {ADBFE664-7464-4ED6-B6B2-A7FE31575F7B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-10] (Google Inc.)
Task: {B13712F9-EC32-40D6-A54E-AE60165AC92A} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B839D35A-EA53-4A6F-B98F-924FAD8C3E28} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B9DB4DE2-A818-45E0-8885-7D97263146DC} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {D5FE55D7-F207-4A0E-867A-5CA9233DD728} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {D6B9F221-05EA-419A-85EA-BFB06B828E4D} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D9155530-53E3-470B-84CD-93D046C63435} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {DDEAB283-6AA4-460A-8060-C5DEB323E4E4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E58146F5-C22A-4338-A1E7-8A3B3092E1FE} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {E6E8A738-3413-4665-8CB8-024753F4DF68} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-10] (Google Inc.)
Task: {E71C6EB0-1F0C-4E22-B5B4-E785515F4C04} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {EB878804-4C78-4588-A598-2490EB14D64E} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {EDCE56E6-E9E9-4DA4-9E12-B676852DF3D2} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F20B98FA-5E1C-4827-A90C-4C4E90FE908C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {F6C8B48F-CC1B-4545-AEB7-97195522EF85} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F84C18D9-CEFF-40B9-8D8B-5E49D490CFEB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FEE482F9-F169-4C25-A082-C5A31777D0FF} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
ShortcutWithArgument: C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Dingit Infinite HD App.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=llnhnfikffkjbdnfallfpgikamegbbag
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2016-07-16 13:42 - 2016-07-16 13:42 - 000231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-03-15 08:17 - 2017-03-04 09:19 - 002681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-10-05 00:08 - 2017-09-27 09:37 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2016-09-23 18:34 - 2016-12-29 14:44 - 000134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-09-23 19:32 - 2016-09-23 19:32 - 000134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-15 08:16 - 2017-03-04 08:31 - 000474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-15 08:17 - 2017-03-04 08:12 - 009760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 001401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 000757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 001033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 002424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-03-15 08:17 - 2017-03-04 08:08 - 004853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 000077312 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-04-10 09:18 - 2017-04-10 09:18 - 000189952 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 042507264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 002334184 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\skypert.dll
2017-04-10 21:19 - 2015-09-16 13:20 - 000474504 _____ () C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe
2017-04-10 21:19 - 2015-09-16 13:20 - 000446344 _____ () C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe
2017-09-27 08:56 - 2017-09-21 09:29 - 004022616 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll
2017-09-27 08:56 - 2017-09-21 09:29 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll
2016-06-28 00:19 - 2016-06-28 00:19 - 000865232 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\kpcengine.2.3.dll
2015-06-10 15:44 - 2014-02-18 10:11 - 000172032 _____ () c:\postgreSQL\bin\LIBPQ.dll
2015-06-10 15:44 - 2012-08-14 15:19 - 000999424 _____ () c:\postgreSQL\bin\libxml2.dll
2015-12-19 13:34 - 2009-02-27 17:38 - 000139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-02-25 14:15 - 2015-02-25 14:15 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2009-06-10 23:00 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Lasse\Pictures\Wallpaper\04071_posbanksunrise_1920x1080.jpg
HKU\S-1-5-21-2533615570-3755426884-238519182-1002\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.8.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
HKLM\...\StartupApproved\Run: => "XboxStat"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{1E466E5F-2A71-492E-98D2-EA93CF6E40F0}] => (Allow) E:\Spiele\Steam\steamapps\common\NBA 2K17\NBA2K17.exe
FirewallRules: [{617272FE-4F9E-43EE-A885-ECC015C336EB}] => (Allow) E:\Spiele\Steam\steamapps\common\NBA 2K17\NBA2K17.exe
FirewallRules: [{7321E602-C543-400C-A004-CA8FFC3D5A4A}] => (Allow) E:\Spiele\Steam\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{8BE67DB3-DECC-470C-9D2F-9B91BCD744F3}] => (Allow) E:\Spiele\Steam\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{B328988F-EE12-4BA0-8426-6BB569B74BC4}] => (Allow) E:\Spiele\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe
FirewallRules: [{BC4B85F6-039D-4A60-BD60-B2F949795A4F}] => (Allow) E:\Spiele\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe
FirewallRules: [{93196552-2B76-40A2-8AC6-5ED3AC385EDE}] => (Allow) E:\Spiele\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{1713722F-A2E5-4B13-9B34-9D373D32D19A}] => (Allow) E:\Spiele\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{7C6252FF-2BD1-48B1-8EE7-11F01095F6AF}] => (Allow) E:\Spiele\Steam\steamapps\common\Party Hard\PartyHardGame.exe
FirewallRules: [{B03C27A8-503B-4E29-AF88-ECA2874F8115}] => (Allow) E:\Spiele\Steam\steamapps\common\Party Hard\PartyHardGame.exe
FirewallRules: [{95BB5D24-AAE4-48CD-AD4A-7BEACA31E040}] => (Allow) E:\Spiele\FM 13\FIFA Manager 13\Manager13.exe
FirewallRules: [{71917C83-B5B8-44D3-9885-2DAA51520195}] => (Allow) E:\Spiele\FM 13\FIFA Manager 13\Manager13.exe
FirewallRules: [{7A259C44-2035-48D3-B803-527BAA84A00C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{136B8D0E-9CD0-428D-BD45-E959117A0B7D}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{3FE9E163-9DF9-468A-80A6-2FD24C996685}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{7AA6E0A5-3A86-4DA6-9E6B-65B9F088E2C5}] => (Allow) E:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{0AC559E6-B66A-415D-8C96-E010240CD25B}] => (Allow) E:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{F812826A-D8DA-481B-AA3C-AA6496CF7407}] => (Allow) LPort=5432
FirewallRules: [{6EE59405-4FE7-4C34-802B-B7864025000D}] => (Allow) E:\Spiele\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{775E93DD-299A-452D-85DF-E003378F4AF7}] => (Allow) E:\Spiele\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{02B8BFE5-921E-4436-BD44-241093836FEF}C:\users\lasse\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{0F3B6A72-A0CD-4A76-A613-4E72B693D499}C:\users\lasse\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{DA383AC0-382E-4E96-8E85-FC514F9973E0}] => (Block) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{97944202-EB96-4692-A1F6-6873242A53B4}] => (Block) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{B63764EC-EAD8-46F6-96B0-5F565BD408A0}] => (Allow) E:\Spiele\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{86AAD87C-259E-4DEE-8BA6-A346EAFF9741}] => (Allow) E:\Spiele\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{4E8CBBD0-5190-4B1F-B1F0-E41EBE21BF35}] => (Allow) E:\Spiele\Steam\steamapps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{D68A69E0-F93A-41CB-8C82-CC8FC9244415}] => (Allow) E:\Spiele\Steam\steamapps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{449BA439-FA7E-4220-8AE5-9556A9903CCE}] => (Allow) E:\Spiele\Steam\steamapps\common\Monaco\MONACO.exe
FirewallRules: [{4D3B8DD6-EC48-4E8C-BC21-CE661B0B5E4D}] => (Allow) E:\Spiele\Steam\steamapps\common\Monaco\MONACO.exe
FirewallRules: [{B1443441-3CDD-4C3B-9FAA-A41F3811F3F7}] => (Allow) E:\Spiele\Steam\steamapps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{F1844A71-6B17-40DD-93DF-B3157B18E2AB}] => (Allow) E:\Spiele\Steam\steamapps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{8CE98A1F-DE86-4B9A-A961-380B3B186EA5}] => (Allow) E:\Spiele\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{87B91361-539F-4F9A-972F-5E442B183014}] => (Allow) E:\Spiele\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{B10831ED-E1AF-492C-8522-6F71149DC361}] => (Allow) E:\Spiele\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{DAE8C590-F8F2-4B5A-80B6-190CFD231643}] => (Allow) E:\Spiele\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{CE280E12-EBAC-4749-9C33-F713917762C6}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{ABB850C5-C8AB-4762-B0E5-4233A38BBAD5}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{23CAB5A6-90E7-4B5F-A251-201EFF4BF363}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{71B33882-60FC-414E-A619-8C841C227CEB}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{D6275B97-7CCA-4D72-B2D0-C59B191646A2}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{56BB1E53-FB77-4022-AE31-73BA33CB027A}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{73E5AEA7-7F8C-4C16-A9A7-11036BDEC1BB}] => (Allow) E:\Spiele\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{E66552C8-DFC4-4173-9CCD-4D836FF27FBE}] => (Allow) E:\Spiele\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{4C9D1A88-DD80-42F3-AA6F-539B9BB5B6FE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{472BE848-3445-4146-8188-B73DDA3AAFE1}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{2B2E3DDE-228A-4A83-9184-B2D1D91B5831}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{684B6BB3-1B8C-413A-82D8-49B1DE5A167B}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{829113CB-AC94-496A-9478-43FC86DA0BB0}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{A5CAA5D9-3DC2-41C2-8690-312E4557E940}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{FDA27D14-8297-4859-AD36-8AB3888B1AD6}] => (Allow) E:\Spiele\Steam\steamapps\common\The Escapists\TheEscapists.exe
FirewallRules: [{C18FFD8B-AA4C-477D-BE31-74383408BF4C}] => (Allow) E:\Spiele\Steam\steamapps\common\The Escapists\TheEscapists.exe
FirewallRules: [{6136A26E-CA75-4D67-B0BD-423A5666AF3D}] => (Allow) E:\Spiele\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{A43A680C-6633-4B88-8D76-F71E264CEB5C}] => (Allow) E:\Spiele\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{034A7BAD-CDD6-402A-ACAD-E51AD4034DB5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DE323322-04AA-4F55-831E-22940A60FF86}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{402959E9-2213-474B-A27A-4853495C516B}] => (Allow) E:\Spiele\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{ED531946-64C5-4EBC-8702-B6B9F2535128}] => (Allow) E:\Spiele\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{F87CE81F-BEEA-47A4-8241-BA4756C8A4CD}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\StartNBR.exe
FirewallRules: [{3A6300B7-00E8-46D5-8ECC-E375FA61CF51}] => (Allow) C:\Program Files (x86)\Nero\KM\NMDllHost.exe
FirewallRules: [{06FA67C8-0226-49B3-8BFC-6A324C6143B9}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\nero.exe
FirewallRules: [{70A1D115-776E-442D-B635-5C48A609F090}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{0AB8CE89-EF32-4D06-8D03-B4E96B91C4FE}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{7D12B200-A0E1-43A1-8DAF-7684F1C4E052}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{B73CDADE-D09D-48D6-8DB4-F69A42D9D261}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{9F531F4E-7F68-40D3-B6F9-816F81A7DBF0}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{2C339AA4-48F4-4C83-B6C1-270D763B206E}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{C712039D-7FCB-49A8-8026-DE07D1DC526B}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{AA18F165-E99F-48B1-98DB-49483B35AFC3}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{F5C55161-49AB-46E1-9BF1-3E7D6F91AD9C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D3EBB153-CF95-4ADF-9168-72C1EB5100AE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E356CA51-EDA0-4C07-80DD-DA34E318F06A}] => (Allow) E:\Spiele\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{3872A773-8FC2-4E44-A3E5-4DD5B4BC6BFE}] => (Allow) E:\Spiele\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{0FB8E1B1-89A5-4C44-BE8B-A8E3F68AA798}] => (Allow) E:\Spiele\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{AF6BF9E6-3314-4E1C-A503-CCFCF433A9AF}] => (Allow) E:\Spiele\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{A5C30CBE-BC7B-4342-B07B-9641D65AC6E2}] => (Allow) E:\Spiele\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{482A1B91-7A81-4341-BCA1-89982A5B36B8}] => (Allow) E:\Spiele\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{321B2ABA-4D8C-42E0-B90E-94FE2C10A424}] => (Allow) E:\Spiele\Steam\steamapps\common\SunlessSea\Sunless Sea.exe
FirewallRules: [{A11501AC-13EA-48D4-97D0-9C28A15232AC}] => (Allow) E:\Spiele\Steam\steamapps\common\SunlessSea\Sunless Sea.exe
FirewallRules: [{84492F8B-869B-4EBD-9DB0-208FAB7BAC53}] => (Allow) E:\Spiele\Steam\steamapps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{1948B0EB-9995-4EFD-9F73-4F8ED8C87359}] => (Allow) E:\Spiele\Steam\steamapps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{222C045E-D37F-4F00-9435-BCA8B826A4CD}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{58AF54BA-C7A7-414E-B218-AE69F0C79E58}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{16E91255-C63D-419F-B7F3-D2E65802C2C6}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die!\Build\release\OrcsMustDie.exe
FirewallRules: [{3BF145A6-1208-469D-9D96-47AF98A34F13}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die!\Build\release\OrcsMustDie.exe
FirewallRules: [{109621AB-AD42-4F9D-9CBB-B095B91EA0FD}] => (Allow) E:\Spiele\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{B428F1DB-5C9A-43F5-973F-E189FCF0055D}] => (Allow) E:\Spiele\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{5F05E05B-43ED-4A1F-8906-5961EF90204C}] => (Allow) E:\Spiele\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{8D81F410-E273-4F9D-B4D5-2E76F5ED5033}] => (Allow) E:\Spiele\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{80951455-24EE-4165-A983-75CC2AB8EF3C}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{8301D091-8FA9-47EF-A5F7-A6D5B57E77CC}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{B0753FA3-A1E2-404F-97BA-8B12F6FC297A}] => (Allow) E:\Spiele\Steam\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{2FAA2F4D-F5F7-49FF-8BE4-AEEA611C8444}] => (Allow) E:\Spiele\Steam\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{45EDBFE7-40CA-4DC9-A617-9B7735681291}] => (Allow) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{3E2DDB12-63CA-45B1-928C-F9686A7431BC}] => (Allow) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{3524D57A-C4F3-4BA5-ACC3-4953B9C7E4CC}] => (Allow) E:\Spiele\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{1DAD5E35-3E81-4B12-AD86-DFA84D8BF100}] => (Allow) E:\Spiele\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{9F2DFE30-98A1-42BB-81AE-F228F3112A7A}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency_BE.exe
FirewallRules: [{B762F452-7752-452E-915A-B786911457C3}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency_BE.exe
FirewallRules: [{EE98545F-F4D4-439A-BA33-2D2F643333C5}] => (Allow) E:\Spiele\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{68C4579D-5BA7-4FAF-956E-7510959F6B97}] => (Allow) E:\Spiele\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{01BE84CD-D4C6-4424-AEF6-4C8FD2100925}] => (Allow) E:\Spiele\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{21CC6D64-6E55-4F88-82E0-58D1F8878439}] => (Allow) E:\Spiele\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{87C66560-B3E5-4749-847D-05D0527F82DE}] => (Allow) E:\Spiele\Steam\steamapps\common\SUPERHOT\SUPERHOT.exe
FirewallRules: [{8627AAF7-3098-4C1E-B206-137676FBA7E7}] => (Allow) E:\Spiele\Steam\steamapps\common\SUPERHOT\SUPERHOT.exe
FirewallRules: [{99FF5CAA-8EFF-4B75-9BCC-98A059C4A22C}] => (Allow) E:\Spiele\Steam\steamapps\common\Xenonauts\Xenonauts.exe
FirewallRules: [{8112DE72-765F-4B1D-B539-D29754768198}] => (Allow) E:\Spiele\Steam\steamapps\common\Xenonauts\Xenonauts.exe
FirewallRules: [{9313420C-23DA-4C55-B1BA-5454242C11C1}] => (Allow) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{65031DE8-8599-410E-8005-157880B32F6E}] => (Allow) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{4AE4DBCB-745F-441A-8B57-9551B1B2C79B}] => (Allow) E:\Spiele\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{9722A8B6-D401-4A0F-BC59-B705696159F0}] => (Allow) E:\Spiele\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{A41C77B0-CEF3-4AAA-8275-F47BAC21A52E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Wiederherstellungspunkte =========================
18-09-2017 18:45:39 Geplanter Prüfpunkt
26-09-2017 04:03:04 Geplanter Prüfpunkt
04-10-2017 23:58:05 Geplanter Prüfpunkt
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (10/05/2017 12:15:37 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (10/04/2017 11:58:08 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (10/04/2017 11:20:13 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (10/04/2017 12:23:07 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Lasse-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (10/03/2017 11:29:45 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (10/01/2017 11:35:40 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Lasse-PC)
Description: Bei der Aktivierung der App „Microsoft.SkypeApp_kzf8qxf38zg5c!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023174. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (10/01/2017 10:53:06 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (09/30/2017 07:51:37 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (09/29/2017 07:50:39 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (09/28/2017 09:14:51 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Lasse-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2147024865. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Systemfehler:
=============
Error: (10/05/2017 12:23:52 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (10/05/2017 12:18:53 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kaspersky Secure Connection Service 1.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Nero Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "BrYNSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PDF24" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "CyberGhost 6 Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "postgresql-8.4 - PostgreSQL Server 8.4" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (10/05/2017 12:18:27 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Message Queuing" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
CodeIntegrity:
===================================
Date: 2017-06-01 11:20:03.507
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-06-01 11:20:03.488
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-05-31 15:48:53.894
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-05-31 15:48:53.857
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-05-31 10:59:25.975
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-05-24 12:31:13.218
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-03-17 15:15:49.745
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
Date: 2017-03-17 15:15:49.731
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
Date: 2017-03-17 15:15:49.710
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.
Date: 2017-03-17 15:15:49.666
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz
Prozentuale Nutzung des RAM: 18%
Installierter physikalischer RAM: 16314.86 MB
Verfügbarer physikalischer RAM: 13314.24 MB
Summe virtueller Speicher: 32698.86 MB
Verfügbarer virtueller Speicher: 29441.46 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:237.93 GB) (Free:62.04 GB) NTFS
Drive e: (Volume) (Fixed) (Total:476.94 GB) (Free:61.92 GB) NTFS
Drive f: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive i: () (Removable) (Total:28.64 GB) (Free:28.45 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: D6DE4E1F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=237.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 476.9 GB) (Disk ID: 7931B67B)
Partition 1: (Not Active) - (Size=476.9 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (Size: 28.6 GB) (Disk ID: E9408431)
Partition 1: (Not Active) - (Size=28.6 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
Code:
ATTFilter Malwarebytes
www.malwarebytes.com
-Protokolldetails-
Scan-Datum: 05.10.17
Scan-Zeit: 00:08
Protokolldatei: 95726b86-a950-11e7-8a73-74d435fed1e4.json
Administrator: Ja
-Softwaredaten-
Version: 3.2.2.2029
Komponentenversion: 1.0.207
Version des Aktualisierungspakets: 1.0.2899
Lizenz: Kostenlos
-Systemdaten-
Betriebssystem: Windows 10 (Build 14393.953)
CPU: x64
Dateisystem: NTFS
Benutzer: Lasse-PC\Lasse
-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 492756
Erkannte Bedrohungen: 1
In die Quarantäne verschobene Bedrohungen: 1
Abgelaufene Zeit: 3 Min., 0 Sek.
-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung
-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)
Modul: 0
(keine bösartigen Elemente erkannt)
Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)
Registrierungswert: 0
(keine bösartigen Elemente erkannt)
Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)
Daten-Stream: 0
(keine bösartigen Elemente erkannt)
Ordner: 0
(keine bösartigen Elemente erkannt)
Datei: 1
PUP.Optional.DownloadSponsor, C:\USERS\LASSE\DOWNLOADS\NETSPEEDMONITOR 64 BIT - CHIP-INSTALLER.EXE, In Quarantäne, [517], [413936],1.0.2899
Physischer Sektor: 0
(keine bösartigen Elemente erkannt)
(end)
Code:
ATTFilter # AdwCleaner 7.0.3.1 - Logfile created on Wed Oct 04 22:14:20 2017
# Updated on 2017/29/09 by Malwarebytes
# Database: 09-29-2017.1
# Running on Windows 10 Home (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support
***** [ Services ] *****
PUP.Optional.Chip, chip1click
***** [ Folders ] *****
PUP.Optional.Legacy, C:\Users\Lasse\AppData\Local\StormFall
PUP.Optional.Chip, C:\Program Files (x86)\Chip Digital GmbH
PUP.Optional.Chip, C:\Users\Lasse\AppData\Local\Downloaded Installations\{DAD82379-C684-4D04-83D5-2B9934A9C362}
PUP.Optional.Chip, C:\Windows\Installer\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}
***** [ Files ] *****
PUP.Optional.Legacy, C:\Users\Lasse\AppData\Local\Temp\Utils.dll
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.watch4.de
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\04A063A0BBEACF54EAEF493C49D9E3F6
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\04A063A0BBEACF54EAEF493C49D9E3F6
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E49AC3054380EEC4DA29AB71FAE408A9
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Classes\Installer\Features\E49AC3054380EEC4DA29AB71FAE408A9
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Classes\Installer\Products\E49AC3054380EEC4DA29AB71FAE408A9
PUP.Optional.Chip, [Key] - HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\chip 1-click download service
PUP.Optional.Vittalia, [Key] - HKU\S-1-5-21-2533615570-3755426884-238519182-1000\Software\Vittalia
PUP.Optional.Vittalia, [Key] - HKCU\Software\Vittalia
PUP.Optional.SlimCleanerPlus, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
PUP.Optional.SlimCleanerPlus, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries.
*************************
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########
|
|
07.10.2017, 23:25
| #2 |
| Ruhe in Frieden † 2019     | Vermutlich infiziertes Dokument geöffnet - mehrere Stunden kein Zugriff auf E-Mail Accounts Mein Name ist Elisa und ich werde Dir bei Deinem Problem behilflich sein.
Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der schnellere und bei einem Befall durch Malware immer der sicherste Weg. Adware lässt sich in den allermeisten Fällen problemlos entfernen. Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist. Hast du die Passwörter von einem anderen Rechner geändert, wenn nicht, dann bitte nachholen. Hast du die .doc noch? Schritt 1 Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers Schritt 2 Downloade dir bitte  TDSSKiller.exe und speichere diese Datei auf dem Desktop
__________________ |
|
08.10.2017, 13:23
| #3 |
| | Vermutlich infiziertes Dokument geöffnet - mehrere Stunden kein Zugriff auf E-Mail Accounts Wurde bei beiden nichts gefunden.
__________________Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org
Database version:
main: v2017.10.08.03
rootkit: v2017.09.13.01
Windows 10 x64 NTFS
Internet Explorer 11.953.14393.0
Lasse :: LASSE-PC [administrator]
08.10.2017 13:08:30
mbar-log-2017-10-08 (13-08-30).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 414137
Time elapsed: 13 minute(s), 24 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
Code:
ATTFilter 13:22:17.0993 0x17a0 TDSS rootkit removing tool 3.1.0.15 Apr 18 2017 11:34:02
13:22:20.0948 0x17a0 ============================================================
13:22:20.0948 0x17a0 Current date / time: 2017/10/08 13:22:20.0948
13:22:20.0948 0x17a0 SystemInfo:
13:22:20.0948 0x17a0
13:22:20.0948 0x17a0 OS Version: 10.0.14393 ServicePack: 0.0
13:22:20.0948 0x17a0 Product type: Workstation
13:22:20.0949 0x17a0 ComputerName: LASSE-PC
13:22:20.0949 0x17a0 UserName: Lasse
13:22:20.0949 0x17a0 Windows directory: C:\WINDOWS
13:22:20.0949 0x17a0 System windows directory: C:\WINDOWS
13:22:20.0949 0x17a0 Running under WOW64
13:22:20.0949 0x17a0 Processor architecture: Intel x64
13:22:20.0949 0x17a0 Number of processors: 8
13:22:20.0949 0x17a0 Page size: 0x1000
13:22:20.0949 0x17a0 Boot type: Normal boot
13:22:20.0949 0x17a0 CodeIntegrityOptions = 0x00000001
13:22:20.0949 0x17a0 ============================================================
13:22:21.0036 0x17a0 KLMD registered as C:\WINDOWS\system32\drivers\86543705.sys
13:22:21.0036 0x17a0 KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.953, osProperties = 0x19
13:22:21.0206 0x17a0 System UUID: {77232110-8D79-4BBE-AF98-8E6241CA0269}
13:22:21.0552 0x17a0 Drive \Device\Harddisk0\DR0 - Size: 0x3B9E656000 ( 238.47 Gb ), SectorSize: 0x200, Cylinders: 0x799A, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
13:22:21.0552 0x17a0 Drive \Device\Harddisk1\DR1 - Size: 0x773C256000 ( 476.94 Gb ), SectorSize: 0x200, Cylinders: 0xF334, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
13:22:21.0574 0x17a0 Drive \Device\Harddisk3\DR3 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
13:22:25.0541 0x17a0 ============================================================
13:22:25.0541 0x17a0 \Device\Harddisk0\DR0:
13:22:25.0541 0x17a0 MBR partitions:
13:22:25.0541 0x17a0 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
13:22:25.0541 0x17a0 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x1DBDE800
13:22:25.0541 0x17a0 \Device\Harddisk1\DR1:
13:22:25.0542 0x17a0 MBR partitions:
13:22:25.0542 0x17a0 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x3B9E0000
13:22:25.0542 0x17a0 \Device\Harddisk3\DR3:
13:22:25.0542 0x17a0 MBR partitions:
13:22:25.0542 0x17a0 \Device\Harddisk3\DR3\Partition1: MBR, Type 0x7, StartLBA 0x2, BlocksNum 0x3A38602E
13:22:25.0542 0x17a0 ============================================================
13:22:25.0544 0x17a0 C: <-> \Device\Harddisk0\DR0\Partition2
13:22:25.0545 0x17a0 E: <-> \Device\Harddisk1\DR1\Partition1
13:22:25.0546 0x17a0 F: <-> \Device\Harddisk0\DR0\Partition1
13:22:25.0549 0x17a0 G: <-> \Device\Harddisk3\DR3\Partition1
13:22:25.0549 0x17a0 ============================================================
13:22:25.0550 0x17a0 Initialize success
13:22:25.0550 0x17a0 ============================================================
13:22:46.0683 0x3040 ============================================================
13:22:46.0683 0x3040 Scan started
13:22:46.0683 0x3040 Mode: Manual; SigCheck; TDLFS;
13:22:46.0683 0x3040 ============================================================
13:22:46.0683 0x3040 KSN ping started
13:22:46.0803 0x3040 KSN ping finished: true
13:22:47.0987 0x3040 ================ Scan system memory ========================
13:22:47.0987 0x3040 System memory - ok
13:22:47.0987 0x3040 ================ Scan services =============================
13:22:48.0056 0x3040 [ A7901875F89D011C38CF52C98ACF5B29, 782141AB1DD7ACDE6EA08B5BAFDE8BADD05B81D38C18E097D6D9C46102056EB1 ] 1394ohci C:\WINDOWS\System32\drivers\1394ohci.sys
13:22:48.0125 0x3040 1394ohci - ok
13:22:48.0136 0x3040 [ EE1CCC54F75C24727A218F98FC5349DA, 0B0D26640BFA0F551B7087027E572D0BF2C5EAF50A4187C5A7D839180B7FF589 ] 3ware C:\WINDOWS\system32\drivers\3ware.sys
13:22:48.0146 0x3040 3ware - ok
13:22:48.0159 0x3040 [ 73C73E1AA0D4D727A04AAAB120B7F56A, 5D311F11022994410DF5C67914D38B1F0D813EFD181EA234750286A272D67A1A ] ACPI C:\WINDOWS\system32\drivers\ACPI.sys
13:22:48.0177 0x3040 ACPI - ok
13:22:48.0181 0x3040 [ 0935496EF9624B46B935CB35ECE1F205, A22A2A29195505A65E8626D60B00C86C23E0CABC1EB8345EA5ED523516CC21C0 ] AcpiDev C:\WINDOWS\System32\drivers\AcpiDev.sys
13:22:48.0192 0x3040 AcpiDev - ok
13:22:48.0196 0x3040 [ D6794C31F4077B71433988787BAA926E, F16365C2F195AAE94D4740E6C3DF4C0CECEC6393CAD65425DCCD28CDBA6EC51A ] acpiex C:\WINDOWS\system32\Drivers\acpiex.sys
13:22:48.0206 0x3040 acpiex - ok
13:22:48.0209 0x3040 [ FE5F656D6B35089DA39112E74EC6A85A, 5D81EE63998232A5B36DE47FE15B9D04D5BD02234CA133A2462AECA8C60A22ED ] acpipagr C:\WINDOWS\System32\drivers\acpipagr.sys
13:22:48.0220 0x3040 acpipagr - ok
13:22:48.0223 0x3040 [ 2F242941E4DFF69B883D77A16F039557, 45C388365317C720654A659A9326B2BC0E9D84929C704654985597D5D620101C ] AcpiPmi C:\WINDOWS\System32\drivers\acpipmi.sys
13:22:48.0234 0x3040 AcpiPmi - ok
13:22:48.0236 0x3040 [ C247E35A21682DA8D0DC3AF9F025FCC5, 455415EE3166B3043AD8A4DD50B688DB74242267FB555642441251EFA823E971 ] acpitime C:\WINDOWS\System32\drivers\acpitime.sys
13:22:48.0245 0x3040 acpitime - ok
13:22:48.0250 0x3040 [ 9B112FDA1D5FB7B75627461001AC692A, 2EDF7C8FD59CD5FCD19FA528F60CBD6DDB9A8076AE0280B11D8EA8EAF7D39958 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
13:22:48.0257 0x3040 AdobeARMservice - ok
13:22:48.0276 0x3040 [ 49B9DB97AFC85DCCBDACDAB2E90085B7, 2A6C2A09F74EA15044F442CCFB54A0F24F105ADB915E5C78F02F59652DC29152 ] ADP80XX C:\WINDOWS\system32\drivers\ADP80XX.SYS
13:22:48.0301 0x3040 ADP80XX - ok
13:22:48.0313 0x3040 [ 323AA1953ED9C01E23F740FA891FE064, 4CED6E3D61749316CDE28965C913E7ED462539DAAD637A29484F62AF47AD650D ] AFD C:\WINDOWS\system32\drivers\afd.sys
13:22:48.0330 0x3040 AFD - ok
13:22:48.0338 0x3040 [ 23522E5D581F7722B1B5B86737CAE39C, FB81ABD304376A1E87B65F5E1B34477B628CEDB2091C5D754DE97464B6050C5B ] ahcache C:\WINDOWS\system32\DRIVERS\ahcache.sys
13:22:48.0354 0x3040 ahcache - ok
13:22:48.0357 0x3040 [ D0905D4A945D01D4B28DB9E1BD5985F7, CF389CBCD3B99D1BAE34A42F723F1005C32213A394F691978076D3DF1727715C ] AJRouter C:\WINDOWS\System32\AJRouter.dll
13:22:48.0368 0x3040 AJRouter - ok
13:22:48.0372 0x3040 [ 8FD51B3B35707A66080D7C8CB05E792D, FE52F3DC280D208FDDC75F6E3294B8D601E0D86F9BD3DB1ACC8FC296AC74C23B ] ALG C:\WINDOWS\System32\alg.exe
13:22:48.0385 0x3040 ALG - ok
13:22:48.0389 0x3040 [ DF21E05E41E5AC3F13F304D91457649A, 7F48F2AD1DBE89A261113C76D7C23AD7D87D5599BCC31F8A558A8A10B81BF521 ] AmdK8 C:\WINDOWS\System32\drivers\amdk8.sys
13:22:48.0402 0x3040 AmdK8 - ok
13:22:48.0406 0x3040 [ 45D0AA4BB90B821DF92E8F19ABED0C5E, EA87A6E98DB3C5A88A844C04C6934E870B7004E783AA5211722115382A211B90 ] AmdPPM C:\WINDOWS\System32\drivers\amdppm.sys
13:22:48.0418 0x3040 AmdPPM - ok
13:22:48.0421 0x3040 [ 74FFBC43B4B899C9A8CA06A892F2CE73, 8D599363C7F3D373F1859BAA4D06DD0F40BE78B56BE52B74DE6EA6EF99452004 ] amdsata C:\WINDOWS\system32\drivers\amdsata.sys
13:22:48.0429 0x3040 amdsata - ok
13:22:48.0435 0x3040 [ AAB0F1D8D7E54761ABAB13AF161F1680, CF847990EFFA2828F5B1DB1A68F08A6C2C918E9612EDFFCF95C36BCABBBEA272 ] amdsbs C:\WINDOWS\system32\drivers\amdsbs.sys
13:22:48.0447 0x3040 amdsbs - ok
13:22:48.0450 0x3040 [ F91BAAC4237C40352A807000F3B716F9, F7EFA08E5067C3D419C9D21EDB880BA08883A80DDF35F8B42EC3AB293FE5E03E ] amdxata C:\WINDOWS\system32\drivers\amdxata.sys
13:22:48.0458 0x3040 amdxata - ok
13:22:48.0461 0x3040 [ 5B0F4FB165256DE463A51E3A3127969E, 6751ADFFE95FA671C584427A9624EEB79518DE08132FD7A83148700B75487316 ] AppHostSvc C:\WINDOWS\system32\inetsrv\apphostsvc.dll
13:22:48.0475 0x3040 AppHostSvc - ok
13:22:48.0480 0x3040 [ BC121C099C6C659126AD2102AFDFF8CF, 42B5EE293BDD7ADCE48173A01B30D8452564B9DA225EAF25E9292FE77C0FCF3E ] AppID C:\WINDOWS\system32\drivers\appid.sys
13:22:48.0489 0x3040 AppID - ok
13:22:48.0493 0x3040 [ 74A24CF946279111D7F203B36569EC02, FD67D36804744B4FE3E20BA891852575E6C2DA6515643B2F4B4210118B0FCCDA ] AppIDSvc C:\WINDOWS\System32\appidsvc.dll
13:22:48.0509 0x3040 AppIDSvc - ok
13:22:48.0513 0x3040 [ 79A87DD43331290A276C02DC396BF530, D0781DC027EE60C94831A2C9C3DD741F8F2100A253CD847E7FCFA59919014278 ] Appinfo C:\WINDOWS\System32\appinfo.dll
13:22:48.0526 0x3040 Appinfo - ok
13:22:48.0529 0x3040 [ 68190E2BADF23BD782344970E5B5DE9E, 95D30EC12C7FDF5822CED8BC2F17669A6687A2FB262B4F0D15C8DCFF4E9AB33D ] applockerfltr C:\WINDOWS\system32\drivers\applockerfltr.sys
13:22:48.0541 0x3040 applockerfltr - ok
13:22:48.0552 0x3040 [ 32155E028491267CF2DB6085A0B7E359, 562831841293E4849CD01992DECE39B9B3C0835DCD352994CA2E2FE1C76A7CB3 ] AppReadiness C:\WINDOWS\system32\AppReadiness.dll
13:22:48.0575 0x3040 AppReadiness - ok
13:22:48.0611 0x3040 [ 465CD915B245BB6B788A38BE19D47950, 36FA30C67D581FF158EF1D621938CF93102110635AC9298C6E002E7B87900EBD ] AppXSvc C:\WINDOWS\system32\appxdeploymentserver.dll
13:22:48.0673 0x3040 AppXSvc - ok
13:22:48.0679 0x3040 [ E6AB1F0B4C3D4E0D2A88332D76FECD03, 0D3003EB979DA4546DCDD055011E24F13E34F683F02C9801CAC564D1809F11D2 ] arcsas C:\WINDOWS\system32\drivers\arcsas.sys
13:22:48.0689 0x3040 arcsas - ok
13:22:48.0700 0x3040 [ 5EE26734A882478AF6696092E2E0F352, 6CACFF521B3B839F73EBEB6EFBFDCCA8A8BC319DDB254BE3EFE29A39040B2C26 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
13:22:48.0708 0x3040 aspnet_state - ok
13:22:48.0717 0x3040 [ 61C5A480C43E7E8E49C42869F49D0D3E, E610F0E4315ABA1D90AD4A1D7A68ABA2ACBB7FCA89E9D1798470365D52592D55 ] AsyncMac C:\WINDOWS\System32\drivers\asyncmac.sys
13:22:48.0729 0x3040 AsyncMac - ok
13:22:48.0732 0x3040 [ A10F989A812B57B9695F6C305907C9C6, E2B292610079AA1A10696138DE8130905A8A834B75A8DED7EBF8B6732B77A0F4 ] atapi C:\WINDOWS\system32\drivers\atapi.sys
13:22:48.0739 0x3040 atapi - ok
13:22:48.0746 0x3040 [ 2DC3D53FFA0D10EB8C911AE2DB7BF4CF, 8E0A4B5D610D487A216E70396A99ACC1BEA12C46A6681B1A39CD0FD01EDD406A ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll
13:22:48.0763 0x3040 AudioEndpointBuilder - ok
13:22:48.0779 0x3040 [ 7B993290E7691C446C16A56A431669BA, 004551934E27E9FC1A939C9BD1DEB850A216CBED9B18CB3317920F5656D9F6BF ] Audiosrv C:\WINDOWS\System32\Audiosrv.dll
13:22:48.0807 0x3040 Audiosrv - ok
13:22:48.0816 0x3040 [ 03B45C52179E8DAE51A0F685C30D06D6, E06F066B4BFE5344BBF5749B9B8B8CFBA0C02920FD2B9C73BDDA7E34F1785DA7 ] AVP17.0.0 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
13:22:48.0827 0x3040 AVP17.0.0 - ok
13:22:48.0831 0x3040 [ 6D90FDA2DC364B8EA1420F2F81585CC3, 10E6F23A213CFE49BE04BB7D366ADD4028D61D7114FEC67C30B5467DF6B36D4F ] AxInstSV C:\WINDOWS\System32\AxInstSV.dll
13:22:48.0843 0x3040 AxInstSV - ok
13:22:48.0853 0x3040 [ 61BAC67048CA5C1D08C48FCC8012B613, 71B2A466FC38DA1029B471FBD2541D8FE359751A7B212AE0F420DB3645916450 ] b06bdrv C:\WINDOWS\system32\drivers\bxvbda.sys
13:22:48.0869 0x3040 b06bdrv - ok
13:22:48.0873 0x3040 [ 68F72B05EBC6D1779C0D60A147C7CA0B, AA1C857BEE34865C6B901157FC22570D4CF45D950708BAD7AA333F120F2B474C ] BasicDisplay C:\WINDOWS\System32\drivers\BasicDisplay.sys
13:22:48.0884 0x3040 BasicDisplay - ok
13:22:48.0887 0x3040 [ 23156E7EDAF613D839E2839746B168D3, CAEF8F9C7D3A338BD747AC9D5BFBE730D77B911E87BCF532EBB75E1F80916AFA ] BasicRender C:\WINDOWS\System32\drivers\BasicRender.sys
13:22:48.0900 0x3040 BasicRender - ok
13:22:48.0906 0x3040 [ 3F5523DCEFE42B385659C5CB46A6B810, CA24A3DF002B19E7BDEDE9B5EB60623F299D0E78B2E4F58DCFC028D76DEFE52D ] bcmfn C:\WINDOWS\System32\drivers\bcmfn.sys
13:22:48.0923 0x3040 bcmfn - ok
13:22:48.0927 0x3040 [ 0B750A6A6D847E73CA48ADD7A0F5A393, 6A43020F23846EFB1AFA3C070465B0059E9DF60DEB16899E09559462DF30939F ] bcmfn2 C:\WINDOWS\System32\drivers\bcmfn2.sys
13:22:48.0943 0x3040 bcmfn2 - ok
13:22:48.0957 0x3040 [ 2B4D3AEAAD02954F8C191BC2D67949AD, 8237C9AD556CFAF7442FF60F78608104BC17CE3134C89D986D49C38CC60B1518 ] BDESVC C:\WINDOWS\System32\bdesvc.dll
13:22:48.0980 0x3040 BDESVC - ok
13:22:48.0983 0x3040 [ 0A508274355745EEF01C6BE3198D02C4, E2DB08AEE2368FA95FDB357BB31EA4EBF31679C3E72E109DB3D7CD1B5F7B828E ] Beep C:\WINDOWS\system32\drivers\Beep.sys
13:22:48.0993 0x3040 Beep - ok
13:22:49.0019 0x3040 [ F2926650190022DB0700549B09FB7BD3, 70BDD5DCD7660436A413E3D41125DAA93A991058377DEE7C0028C2CFCB024C44 ] BEService C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
13:22:49.0059 0x3040 BEService - ok
13:22:49.0072 0x3040 [ 5125CBB61AC81168366BEB290399CB8E, B2A3095D45E2114DE2BD0E5A3AE20B3CE95EE517A35B9E1EAD05E231F38DBDCF ] BFE C:\WINDOWS\System32\bfe.dll
13:22:49.0099 0x3040 BFE - ok
13:22:49.0116 0x3040 [ D876C567AB767258036F05E4766189FD, DE8BA67325CB64495BD454B8F9DDCAE82636253844FC68B360C7E1CF5D51DD0E ] BITS C:\WINDOWS\System32\qmgr.dll
13:22:49.0156 0x3040 BITS - ok
13:22:49.0161 0x3040 [ 9CD2A4821DE379305CACB2E99AD8953A, 89D700DFC3C59ACBBADB48954A28C0EBF8D6A11A9E63837689DD891868E43188 ] bowser C:\WINDOWS\system32\DRIVERS\bowser.sys
13:22:49.0173 0x3040 bowser - ok
13:22:49.0187 0x3040 [ 6A15C5140B6F7D9479A32276AC2BA108, 0A8C6DB88148C6DB61226DD2FF816BDF3FED9E7A60EF17CCA17FA7D9EEC01C71 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll
13:22:49.0215 0x3040 BrokerInfrastructure - ok
13:22:49.0219 0x3040 [ B3F32C630DD3F2F6A6091B89CFF13641, 7A9C53EF9AB9FF1DC392FD711B194A101DB36CA5BC799E817BEB446741089B76 ] Browser C:\WINDOWS\System32\browser.dll
13:22:49.0232 0x3040 Browser - ok
13:22:49.0238 0x3040 [ DB109DA005B6FE2A350C5DD7CA768DFD, 241A0BFAEFB1B165C00EE75E8CA382B5935F5DF447DAD5AE9022B2B78317668E ] BrYNSvc C:\Program Files (x86)\Browny02\BrYNSvc.exe
13:22:49.0248 0x3040 BrYNSvc - detected UnsignedFile.Multi.Generic ( 1 )
13:22:49.0471 0x3040 Detect skipped due to KSN trusted
13:22:49.0471 0x3040 BrYNSvc - ok
13:22:49.0484 0x3040 [ 722036C26D2C4E50EC2A2EC5FD678846, 999468038AE01F0FF6881F4B2A2CB67BC636641188E95F10729E08ADBC3CB3DE ] BthAvrcpTg C:\WINDOWS\System32\drivers\BthAvrcpTg.sys
13:22:49.0525 0x3040 BthAvrcpTg - ok
13:22:49.0531 0x3040 [ C2E31BE025D46D189E38DD1EDF07837A, 656528DCAAAF485EC57EE5C3021E96736634DE3B9C39CBCD2728E055ABD4C0A5 ] BthHFEnum C:\WINDOWS\System32\drivers\bthhfenum.sys
13:22:49.0549 0x3040 BthHFEnum - ok
13:22:49.0555 0x3040 [ F7CD605FC0B0B22F3F6F247595E3A655, 1CD9140DE5415DDBEACD8667E63E5C95FD64D693B56302A0474E693E578BEAB0 ] bthhfhid C:\WINDOWS\System32\drivers\BthHFHid.sys
13:22:49.0571 0x3040 bthhfhid - ok
13:22:49.0584 0x3040 [ B157D72BDA6A6DD6E9DC6BF338CD0CF8, B2AC26AE214151E5AD93DED78256BC0295DBF0133C854E7DEE4CD776D9C9A349 ] BthHFSrv C:\WINDOWS\System32\BthHFSrv.dll
13:22:49.0614 0x3040 BthHFSrv - ok
13:22:49.0617 0x3040 [ 535DC41A33630AE4C262406F9E981C03, 599332589AA28D04189E19B87A4AE6FEEB60B40A7BC6E3B11240DA363A981C29 ] BTHMODEM C:\WINDOWS\System32\drivers\bthmodem.sys
13:22:49.0628 0x3040 BTHMODEM - ok
13:22:49.0634 0x3040 [ 96932F631F5CB9F5D1C8F99A71568EF3, 5E4C8955A2EE9DC76B4EBC383653EB753D76D6B017E1A5DD553AC16094D7F12A ] bthserv C:\WINDOWS\system32\bthserv.dll
13:22:49.0648 0x3040 bthserv - ok
13:22:49.0651 0x3040 [ 23F9EF739F685E07482116425E7879AA, 0EBDF96A49A319C0BCF6F51FB6C8C392C017E1738B950C19C91FF43E14D73143 ] buttonconverter C:\WINDOWS\System32\drivers\buttonconverter.sys
13:22:49.0663 0x3040 buttonconverter - ok
13:22:49.0667 0x3040 [ 60EB6A4CE3E21887D302350631C16F26, 4270EFA22285C1A9336CF1220761E416950D2DA9C6A40D1D8452686CD5040DAB ] CapImg C:\WINDOWS\System32\drivers\capimg.sys
13:22:49.0681 0x3040 CapImg - ok
13:22:49.0684 0x3040 [ F8FB51B9EF6372610E9B31A1D86B62FC, 7461584A8B39AC549AD7BAFFA509D4CD81EEE542808BC8EFC285863A0AE6432D ] cdfs C:\WINDOWS\system32\DRIVERS\cdfs.sys
13:22:49.0697 0x3040 cdfs - ok
13:22:49.0706 0x3040 [ 2E6612376D257F74781F2EF1F869D8C3, 908B0DECB9F098F7F11B029A03C06C67FB52E5E8BEA42033A2B579D3B3686AB8 ] CDPSvc C:\WINDOWS\System32\CDPSvc.dll
13:22:49.0725 0x3040 CDPSvc - ok
13:22:49.0733 0x3040 [ A93C9B9EBE2FDE5A536000D72CC17F7F, 9793CFAE8BE8C6B5B39A1D276577965FBB2CE131325A410B7C68BD23492ADAAF ] CDPUserSvc C:\WINDOWS\System32\CDPUserSvc.dll
13:22:49.0749 0x3040 CDPUserSvc - ok
13:22:49.0757 0x3040 [ 613D0137C269187FA298A157E3D14A18, 84BC268525F14BB27202CE242BF94D9E83BC91B50A0335908574F31B29A2F04D ] cdrom C:\WINDOWS\System32\drivers\cdrom.sys
13:22:49.0768 0x3040 cdrom - ok
13:22:49.0773 0x3040 [ E189727B3C9909A85B33A16B290E192E, 2C273A9F44EDC5E5435904E9681973854B2F3EBB6100021BB139FF0CCCE9BF20 ] CertPropSvc C:\WINDOWS\System32\certprop.dll
13:22:49.0786 0x3040 CertPropSvc - ok
13:22:49.0793 0x3040 [ 4DDD2AAF1814BE22C2305AED2EE91DB0, 5576A57CC661DDA2A816E613A2AA638140526FB2117C4EA0D7420525EC520DFA ] CG6Service C:\Program Files\CyberGhost 6\CyberGhost.Service.exe
13:22:49.0804 0x3040 CG6Service - ok
13:22:49.0811 0x3040 [ 0AED948DA8D5F08B3D6F12E4E2089736, 95E538E81DDBC83492C5F3820C82C78F050B4D74ACF12D7970EC84F93581AE29 ] cht4iscsi C:\WINDOWS\system32\drivers\cht4sx64.sys
13:22:49.0823 0x3040 cht4iscsi - ok
13:22:49.0855 0x3040 [ 0002A0FDE087C1657AB31CE73077539C, 4DD6210B67E9633AB3240371590869DC833A4C986C74FC12A5D4FFFFD361848A ] cht4vbd C:\WINDOWS\System32\drivers\cht4vx64.sys
13:22:49.0896 0x3040 cht4vbd - ok
13:22:49.0900 0x3040 [ 6B4F90A287D75CCD78694F6790C911B2, 73D7C31E9F475FA3FD568FCA9A953F968729AA114F63C06F38BF5198DAD67BD8 ] circlass C:\WINDOWS\System32\drivers\circlass.sys
13:22:49.0910 0x3040 circlass - ok
13:22:49.0917 0x3040 [ B72D26074E72A757D788FB1BEF8B2F2E, 36847C5315AFB9A5EC66AD3EF2A09C24C0FAF669FDF0831F78600F4609352CB4 ] CLFS C:\WINDOWS\system32\drivers\CLFS.sys
13:22:49.0930 0x3040 CLFS - ok
13:22:49.0942 0x3040 [ E133CFCBFABB3CB517BE9F42FEA5887C, DA699CDD5F3CC427354540C907BD24CCA7BAC3112C53918EB611CB4EEC7611DA ] ClipSVC C:\WINDOWS\System32\ClipSVC.dll
13:22:49.0967 0x3040 ClipSVC - ok
13:22:49.0971 0x3040 [ EEC3A4A98AE1A337E3CD1483AD6F2E15, 764DA329984A95E092F5C15116DA34FA7FC27216C0862365D4BF10ADC97EC5C5 ] clreg C:\WINDOWS\System32\drivers\registry.sys
13:22:49.0983 0x3040 clreg - ok
13:22:49.0989 0x3040 [ 429623E266EF067A44E8CF148E9DFB9B, A48AA85ACC52C7AD73DB2D6148B3F9FB5EAC33C8F8C5BB6D7D0A9D84B7C08E11 ] CmBatt C:\WINDOWS\System32\drivers\CmBatt.sys
13:22:49.0997 0x3040 CmBatt - ok
13:22:50.0003 0x3040 [ B29A764A1E76473CD9D64C9438705C19, CD0497EB84DE60E1E491CA495AF981A8DFC4949BB373C1978CAF1BCF4321D30E ] cm_km C:\WINDOWS\system32\DRIVERS\cm_km.sys
13:22:50.0011 0x3040 cm_km - ok
13:22:50.0023 0x3040 [ 43D1405674332A7883A68C27ACE08359, 789ACBF3A50904B47C847D9262F1BA00F837A7EF705BCC29EA85216DBC965288 ] CNG C:\WINDOWS\system32\Drivers\cng.sys
13:22:50.0040 0x3040 CNG - ok
13:22:50.0043 0x3040 [ 3DB10C59405931E2C72EFB82C1AF97D1, 100B5450A70988DB1C1F8A5FDBB3553AF1A0D47B42A5AC71460DB92E26010CE6 ] cnghwassist C:\WINDOWS\system32\DRIVERS\cnghwassist.sys
13:22:50.0050 0x3040 cnghwassist - ok
13:22:50.0065 0x3040 [ 34C935AF2A414572B412B3556586D783, 912981B88B0796576ECCD5EBE0C4728EC02D5D6A96B039447DCBA59B2583F25E ] CompositeBus C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys
13:22:50.0073 0x3040 CompositeBus - ok
13:22:50.0075 0x3040 COMSysApp - ok
13:22:50.0078 0x3040 [ 44EEEB2382F566999287E13F2067693C, 53A4A0C85EAD38030FF2078C67465E3710ECD03A08FF34E1E67B2E3E1CC70043 ] condrv C:\WINDOWS\system32\drivers\condrv.sys
13:22:50.0086 0x3040 condrv - ok
13:22:50.0105 0x3040 [ 0E965F9D654C64EAA8970DE25AF32839, 91709A4561A9536B4A9B00BAB8D7B63D5B904065375AF37598C2B0A2C5A8E47C ] CoreMessagingRegistrar C:\WINDOWS\system32\coremessaging.dll
13:22:50.0134 0x3040 CoreMessagingRegistrar - ok
13:22:50.0140 0x3040 [ 5F06CAC4B09250CDDDD0180A08162924, A2EB0A57225E65FC264CFC9FAD858D8B54A015CDAE3DC904B1C4E9AAB40B1F06 ] CryptSvc C:\WINDOWS\system32\cryptsvc.dll
13:22:50.0151 0x3040 CryptSvc - ok
13:22:50.0155 0x3040 [ 3BBD0073265DA6D3EFBA54B26E5D8236, 3C10C8BEC0D8AC41A3FBD589F41A83D6345C1FDD04B8B99063B2F5670CF10B18 ] dam C:\WINDOWS\system32\drivers\dam.sys
13:22:50.0163 0x3040 dam - ok
13:22:50.0179 0x3040 [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
13:22:50.0208 0x3040 DcomLaunch - ok
13:22:50.0213 0x3040 [ AE9F09F87755C18904656CB4F59F351D, B352A43B3B68B497D87B49C302AF3F37F36D56D49878AE3785C3D43597E5DC57 ] DcpSvc C:\WINDOWS\system32\dcpsvc.dll
13:22:50.0228 0x3040 DcpSvc - ok
13:22:50.0238 0x3040 [ ABBD3EE724117242E28D31F19FBCFF03, 68EA91A969DD80A5DE28B0A8EAEB308837183713559C2C2FAEF991858C971393 ] defragsvc C:\WINDOWS\System32\defragsvc.dll
13:22:50.0261 0x3040 defragsvc - ok
13:22:50.0269 0x3040 [ DD74F18227ACC837D9856E24282D446D, 6A760E44CD897952538CDFA8895FE11263D51AAA79CFF24C01F3862E919DA478 ] DeviceAssociationService C:\WINDOWS\system32\das.dll
13:22:50.0289 0x3040 DeviceAssociationService - ok
13:22:50.0293 0x3040 [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] DeviceInstall C:\WINDOWS\system32\umpnpmgr.dll
13:22:50.0307 0x3040 DeviceInstall - ok
13:22:50.0310 0x3040 [ CDF1B1B5C5951111791C236B2696C7F8, BF6C4BA545C8827B40DB69890DB4D2B2F9C583C5E3CFBDFD370B05891141458D ] DevQueryBroker C:\WINDOWS\system32\DevQueryBroker.dll
13:22:50.0321 0x3040 DevQueryBroker - ok
13:22:50.0326 0x3040 [ 4BC21E937E9F9F408672D2C2CBE4A153, 2F27560D09D184ABB7B4415146F5B8DE56C84FF74A4042596635EF896E39CBC4 ] Dfsc C:\WINDOWS\system32\Drivers\dfsc.sys
13:22:50.0341 0x3040 Dfsc - ok
13:22:50.0346 0x3040 [ 9593475FBC857A05D93BFF4FA7323C2B, D2A958AF5EFDC6136A6ABB7F8D5FE1F84C967E79BEA96C5BE3661A0145DEB907 ] dg_ssudbus C:\WINDOWS\system32\DRIVERS\ssudbus.sys
13:22:50.0353 0x3040 dg_ssudbus - ok
13:22:50.0361 0x3040 [ F0D4400BA0F08610D9A551B15BF10B76, 83EB8FB272FC2DD2CC0659C2FB90AD0DAE88A88AB3951E03BCD933A25B601E10 ] Dhcp C:\WINDOWS\system32\dhcpcore.dll
13:22:50.0377 0x3040 Dhcp - ok
13:22:50.0382 0x3040 [ CA7FEDDFCF61EF15A09C54DA2C07C49F, 346EF7709BA9E6BD48592B86FA46F9D956C847EF91F4980EEAD98269D0F0EF67 ] diagnosticshub.standardcollector.service C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
13:22:50.0394 0x3040 diagnosticshub.standardcollector.service - ok
13:22:50.0424 0x3040 [ A9122954D36E4EDFA3E3DB35DCA9E048, 350692BEE164CED1E0BD1A71D1BC90D5B6E0B0A5D1CB6633D115C58FF8A09B92 ] DiagTrack C:\WINDOWS\system32\diagtrack.dll
13:22:50.0476 0x3040 DiagTrack - ok
13:22:50.0481 0x3040 [ 35B9D46560339A5A7F0CAC6ED702C817, F70480B01533B7029F90E2DE297E9E829660300DDE7A7D009B0AC2684E7691A7 ] disk C:\WINDOWS\system32\drivers\disk.sys
13:22:50.0489 0x3040 disk - ok
13:22:50.0498 0x3040 [ 00DF9E7ACB0376294E3D602AB6625B3E, 1D53DF89826A71FEC48B7602DD2F3E3B09024782B3CC5C787517DC374CC586C8 ] DmEnrollmentSvc C:\WINDOWS\system32\Windows.Internal.Management.dll
13:22:50.0518 0x3040 DmEnrollmentSvc - ok
13:22:50.0521 0x3040 [ 815F45161A4571C2C44491564F3D5968, 32E7AE8414A178CE429C0CDFCF718E3C11C705FB3155EA5CA0EAD48AAE507B01 ] dmvsc C:\WINDOWS\System32\drivers\dmvsc.sys
13:22:50.0532 0x3040 dmvsc - ok
13:22:50.0535 0x3040 [ 6E5EE6E420FECD64DE463C5F01CBFE71, F173C56895E80AA03D70CD78B3AB659C2EEAACFF43BE3B6EF3939D6F4AD4F62D ] dmwappushservice C:\WINDOWS\system32\dmwappushsvc.dll
13:22:50.0548 0x3040 dmwappushservice - ok
13:22:50.0555 0x3040 [ 86E507EE1457D7FA463BBF05BA76EB1E, 2D2D05CED57C22F41684DC6DD00ACECDF708407493286B2D4007068154E436FF ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
13:22:50.0569 0x3040 Dnscache - ok
13:22:50.0576 0x3040 [ 8F46B4C3F9BA19C26A26D0A11137B20B, BA0A66DBA98D77FD85A7CD2D4593F2B2A1A3B4D32BBECBCFFBEB5A54DCB0D8ED ] dot3svc C:\WINDOWS\System32\dot3svc.dll
13:22:50.0592 0x3040 dot3svc - ok
13:22:50.0597 0x3040 [ CA09EAEE92C6FDDC6B05057F11A0372D, 14DB5C186B69644AA93C445BF31CC9670204F95A47B77B6EACB19B4A316378AD ] DPS C:\WINDOWS\system32\dps.dll
13:22:50.0611 0x3040 DPS - ok
13:22:50.0614 0x3040 [ AE6BD4C879A8C849E53947C92DF3B3A0, 8C29774CB2D30D901C54AAC0C8ACE709351EE40E5C8FB9951B2A18B4A03F28B7 ] drmkaud C:\WINDOWS\system32\DRIVERS\drmkaud.sys
13:22:50.0621 0x3040 drmkaud - ok
13:22:50.0626 0x3040 [ 7433474BE77F065D2FA628671FE31A3E, 063ADDC68F48036749E6EC7B2F66284DB29F90F62E9468D16B4EF5A0FDC45E35 ] DsmSvc C:\WINDOWS\System32\DeviceSetupManager.dll
13:22:50.0644 0x3040 DsmSvc - ok
13:22:50.0648 0x3040 [ 5FCA45C24501DA7390065D3706A9FC3F, 093FD840F1502ECC6F05B9723CA523B3F15CF39A5D2B9106E1267739B3F2C52C ] DsSvc C:\WINDOWS\System32\DsSvc.dll
13:22:50.0662 0x3040 DsSvc - ok
13:22:50.0698 0x3040 [ 928E2749E01AEB9948F5D548B1F0C116, FBBC525306E6CE387BAF3DDD8145FD8AADDEFB2DC93E5692A8ED7F116C3EDD08 ] DXGKrnl C:\WINDOWS\System32\drivers\dxgkrnl.sys
13:22:50.0739 0x3040 DXGKrnl - ok
13:22:50.0751 0x3040 [ 83E4A14F851341C933C3235BFB882ECA, 152EDEF6B566D010FE519FE4B046050A5281069B48AFF8A2395D7D2BD0519701 ] e1iexpress C:\WINDOWS\System32\drivers\e1i63x64.sys
13:22:50.0772 0x3040 e1iexpress - ok
13:22:50.0776 0x3040 [ 9FCE4EF7D5E274F862D9A2526B5F4779, 81D42D5475C2801C8E0C233A0BA827569D8A70590017C91C665C8B232D9BFAA9 ] EapHost C:\WINDOWS\System32\eapsvc.dll
13:22:50.0790 0x3040 EapHost - ok
13:22:50.0857 0x3040 [ 7EC6FC0266D74BD47ABB130A328B70EC, 3856790AF967AB03B1A89F97328DC4D5A6854ACDA6169681A9AFB03D7CF791F9 ] ebdrv C:\WINDOWS\system32\drivers\evbda.sys
13:22:50.0918 0x3040 ebdrv - ok
13:22:50.0924 0x3040 [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] EFS C:\WINDOWS\System32\lsass.exe
13:22:50.0932 0x3040 EFS - ok
13:22:50.0935 0x3040 [ 8D74B8B5D6F7C5BC4C525BAF2B083FF1, DA5656F745B3911F96871887FDFDC40F4D9C820622A0AA27EFE4BA93662833CA ] EhStorClass C:\WINDOWS\system32\drivers\EhStorClass.sys
13:22:50.0944 0x3040 EhStorClass - ok
13:22:50.0948 0x3040 [ 2A9817B5A9260D8F60D52E36BEF10443, AC1A0203221AFAF584C71317FA07AA1B6E61BE619E918B3B1E4AD57CCED1CF03 ] EhStorTcgDrv C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
13:22:50.0957 0x3040 EhStorTcgDrv - ok
13:22:50.0961 0x3040 [ 80A7999DE02CE678B865832E1CE78CD6, 2576EBB6E4D630A906DE724F125099E52A962B5B68B9F9BCA849A7B29D8C8689 ] embeddedmode C:\WINDOWS\System32\embeddedmodesvc.dll
13:22:50.0974 0x3040 embeddedmode - ok
13:22:50.0981 0x3040 [ 3CE2B6AECB9AF8BC159299EEC46A35CA, E933B28BB6E4D01FCCDF8FBBB134C244B28DA3ECBDFA13333F0D4C24B2551780 ] EntAppSvc C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
13:22:50.0998 0x3040 EntAppSvc - ok
13:22:51.0003 0x3040 [ 77B60DEC7DCB4233E4A69D3F52E5DB24, 3A5C905E37A93899051497C90E5BA8E1D003B56C6906CADFD2F1CDF52052D248 ] ErrDev C:\WINDOWS\System32\drivers\errdev.sys
13:22:51.0025 0x3040 ErrDev - ok
13:22:51.0040 0x3040 [ F89083AB8B9F51C0031C1CBD0A9A7E35, 9EE973A25134960E62D1A6A1E34AD9B3F7690E71C1AD31A23FA2081A73438754 ] EventSystem C:\WINDOWS\system32\es.dll
13:22:51.0067 0x3040 EventSystem - ok
13:22:51.0076 0x3040 [ FCD2C63754C2E739A8EEAD9BC63F9DDC, C57A72ABA4C0BD71F914B9C8FF965DCFF585A205498F19A4584A4BAF7674839D ] exfat C:\WINDOWS\system32\drivers\exfat.sys
13:22:51.0095 0x3040 exfat - ok
13:22:51.0103 0x3040 [ FA918EC296EB410FF02867D008D02421, 23D164A24CB0D212778FA9592A046B6BA1F3628003E04181744A1F891B5B3E5A ] fastfat C:\WINDOWS\system32\drivers\fastfat.sys
13:22:51.0115 0x3040 fastfat - ok
13:22:51.0126 0x3040 [ 77CE56471AF984800F318F3734D768C7, 72D540072374A56C2C497F0532A50705D3F0637F2C0C96B1D715F2EDFCA3AA2D ] Fax C:\WINDOWS\system32\fxssvc.exe
13:22:51.0150 0x3040 Fax - ok
13:22:51.0154 0x3040 [ 99598ECA5E41996E005D5B9D9FF1EFA2, 91345CD50EF02431B69093505C1C5F5DC6A1AA6BF192EE9392ED4D5626B60462 ] fdc C:\WINDOWS\System32\drivers\fdc.sys
13:22:51.0163 0x3040 fdc - ok
13:22:51.0165 0x3040 [ EF0DD43A4CBAB367BCA1AFBDC9971E4F, 73E161C45D63FDDE71EE2438137913724DC513860539D1E7F6BD861F5D1B33F3 ] fdPHost C:\WINDOWS\system32\fdPHost.dll
13:22:51.0177 0x3040 fdPHost - ok
13:22:51.0180 0x3040 [ 34DAC585994CD3B4E910DE11C584EF3D, A6C6A4CB5413EA61F1A54E2D3AD71A311CEA2C26218544D2D2D4A5CFEC52DE8C ] FDResPub C:\WINDOWS\system32\fdrespub.dll
13:22:51.0191 0x3040 FDResPub - ok
13:22:51.0196 0x3040 [ B68DA1FE3CA2311AFD38DD6905CA7F71, 4B395DFB1B47D2507CA4D9DC996A70D0A3BDB1A245CD6DA6C42B2A299AFCCF37 ] fhsvc C:\WINDOWS\system32\fhsvc.dll
13:22:51.0209 0x3040 fhsvc - ok
13:22:51.0214 0x3040 [ F44F666B0EACC3181544FFCF8CA0FFC7, 83F771CF9DAE1C504B30731EEC55355EA1253174252DA2192ADF1D228B3735C3 ] FileCrypt C:\WINDOWS\system32\drivers\filecrypt.sys
13:22:51.0226 0x3040 FileCrypt - ok
13:22:51.0229 0x3040 [ 78A210DDFDF2C9EC884631D2DAA573F0, 5D39C6EF4AC690A9749EEDBE2478FFF15A22877A2861EDA103C7BF1607B0C1BD ] FileInfo C:\WINDOWS\system32\drivers\fileinfo.sys
13:22:51.0237 0x3040 FileInfo - ok
13:22:51.0240 0x3040 [ 1A97DB5E701A186989F3795223C3BE39, F7982220D4DF7E104955E63CACE352394E2577DEF49506EA126127F820EB62DF ] Filetrace C:\WINDOWS\system32\drivers\filetrace.sys
13:22:51.0251 0x3040 Filetrace - ok
13:22:51.0254 0x3040 [ 46626665F0E5906E45619B4EFD6186B8, 37FDD3B8AD49FD29E54DA5567EA77F28A53498AE56348F7A2628E5E5549D638B ] flpydisk C:\WINDOWS\System32\drivers\flpydisk.sys
13:22:51.0263 0x3040 flpydisk - ok
13:22:51.0271 0x3040 [ FDA72ACA14D516D18C33AFCD0FD9260F, 6509612DEC82EA74614B5C9A7B432305A1A468C97B88BED9E141DF2929B621B1 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
13:22:51.0283 0x3040 FltMgr - ok
13:22:51.0311 0x3040 [ 2E193D24CE8460A9C703D0F193192BEF, CD95928BC240D556DFEA265A09A655FFE157A36D2230CD10BBAD4CA15CB98412 ] FontCache C:\WINDOWS\system32\FntCache.dll
13:22:51.0360 0x3040 FontCache - ok
13:22:51.0365 0x3040 [ 59241194DBDF30A2B4029E402F377900, 47A92E9CD8494C403B377799D395670A393766647E24CD83B15338CE2AA50266 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
13:22:51.0372 0x3040 FontCache3.0.0.0 - ok
13:22:51.0385 0x3040 [ CD7CD19E72EA2F597D01FC68ECD2F28E, 4E8BAA4AEF28B043780E2FEFFEB5E4DF4E2FB3211CE617D2DBAFB6C7B7DBBDFD ] FrameServer C:\WINDOWS\system32\FrameServer.dll
13:22:51.0412 0x3040 FrameServer - ok
13:22:51.0417 0x3040 [ D152CCBFC8251670BF0AAFE00D6BC782, 9DE82D8FC4E1DAF8FF23EE08C0B7CB5051A9224E64544D262CFA4996A41B04E1 ] FsDepends C:\WINDOWS\system32\drivers\FsDepends.sys
13:22:51.0424 0x3040 FsDepends - ok
13:22:51.0427 0x3040 [ 6D6BB5C7363CD35FA715E826F3D029EE, C214F791EB39E8B25CE57ED9D6C1D56EE1AF6021BCB380980BD42A6338A6C9F7 ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
13:22:51.0434 0x3040 Fs_Rec - ok
13:22:51.0445 0x3040 [ 8EEC4925C03E375C4EC496E45C44139A, 06C5C7BCC28D3E435675F0759A09CAB726E971DF4BFC1DC3DCF503EABCDCCCC6 ] fvevol C:\WINDOWS\system32\DRIVERS\fvevol.sys
13:22:51.0463 0x3040 fvevol - ok
13:22:51.0466 0x3040 [ EF78034773CE506323655A868C949144, DF195BEEE6704FBCC6D2D9E1BF6723E52ED502A1459F495B7D18481E6A79B5BC ] gencounter C:\WINDOWS\System32\drivers\vmgencounter.sys
13:22:51.0476 0x3040 gencounter - ok
13:22:51.0479 0x3040 [ B55FEBC6A00DAA1FE074F020B6907516, 67071FBAC2ABA47AB71358A5F08E92E034A55343878F00137E90B3B1F7362976 ] genericusbfn C:\WINDOWS\System32\drivers\genericusbfn.sys
13:22:51.0489 0x3040 genericusbfn - ok
13:22:51.0494 0x3040 [ DDD8A8CDDC7F13EF57D1DAAE71865936, 9D472A8689F72F24D40D5B94849690F53C67849FDF6162A94EF4FB330A3DA566 ] GPIOClx0101 C:\WINDOWS\system32\Drivers\msgpioclx.sys
13:22:51.0503 0x3040 GPIOClx0101 - ok
13:22:51.0524 0x3040 [ 8997353398C8466ECD183942D5FCC65B, C73FD5FFD71003F7FDDC17F59812BD6860992FA35EC0ECC8DE37D935606B485B ] gpsvc C:\WINDOWS\System32\gpsvc.dll
13:22:51.0569 0x3040 gpsvc - ok
13:22:51.0572 0x3040 [ 7ACD8F69B5D6EC97E6D2C006E19BED88, FC69214C9308EA64B88EF4C3C95800586DDBB44C8540846B79A161BAD8203B6E ] GpuEnergyDrv C:\WINDOWS\system32\drivers\gpuenergydrv.sys
13:22:51.0582 0x3040 GpuEnergyDrv - ok
13:22:51.0586 0x3040 [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
13:22:51.0606 0x3040 gupdate - ok
13:22:51.0609 0x3040 [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
13:22:51.0613 0x3040 gupdatem - ok
13:22:51.0617 0x3040 [ 10E3515FE5DBA6656FA62C29342EC4A1, 2051F10F74ED712B1766EB61E87FADE25AB3D0970BABFD320600D1B0D6377F26 ] HDAudBus C:\WINDOWS\System32\drivers\HDAudBus.sys
13:22:51.0629 0x3040 HDAudBus - ok
13:22:51.0631 0x3040 [ B90D284B97CD4CA9DE7430AAAD887A56, 2F14F985C39B7801ED64590979CF2114924E9547F5B11D2B37A74DBFFDD9E7C5 ] HidBatt C:\WINDOWS\System32\drivers\HidBatt.sys
13:22:51.0638 0x3040 HidBatt - ok
13:22:51.0642 0x3040 [ B2FE11643CC6ACDEE6C247DD36018FDB, 5796613C7DBF8B2A9E860E006FF1A245B6BE7D10E3F6685AD142B48E5C237B8C ] HidBth C:\WINDOWS\System32\drivers\hidbth.sys
13:22:51.0652 0x3040 HidBth - ok
13:22:51.0655 0x3040 [ D24355488A2D4D2323518EC1AC7A6D9E, ED2176A2093726087EDDA25B86E9CDD4BA35F4E748E3A6DE0B15C4C97646B5C7 ] hidi2c C:\WINDOWS\System32\drivers\hidi2c.sys
13:22:51.0665 0x3040 hidi2c - ok
13:22:51.0668 0x3040 [ 0AF9ABBA4F3F55C6C803890D64BC3C29, D3DE6FA308F8E7CD4F16387F46AE4B2F7EC9BBA07BF87652B660A0D645710571 ] hidinterrupt C:\WINDOWS\System32\drivers\hidinterrupt.sys
13:22:51.0675 0x3040 hidinterrupt - ok
13:22:51.0680 0x3040 [ CDBCF8E9AB06D88A1E1191D32F320C5D, F76963AB7CF2BAB3A220013879AECD3976BFD851CFB66B5A69A9EA2541048861 ] HidIr C:\WINDOWS\System32\drivers\hidir.sys
13:22:51.0689 0x3040 HidIr - ok
13:22:51.0693 0x3040 [ C900FE0DD6A1E2220084B8F1C427790C, 802194EBEDA1A50EDA300078B0888AAC1F17A42E67147B7B3B9C50AD8D4E5C89 ] hidserv C:\WINDOWS\system32\hidserv.dll
13:22:51.0704 0x3040 hidserv - ok
13:22:51.0707 0x3040 [ D8536CB438CC4CCDAE047B768EED22B2, 4F666BFA3554F9ACA6B9D436BFA64474D5F30FB3E78F4E66068CCDF283D9867F ] HidUsb C:\WINDOWS\System32\drivers\hidusb.sys
13:22:51.0718 0x3040 HidUsb - ok
13:22:51.0725 0x3040 [ 0AC1BD5A28FAA371EF34859FE703E515, 1DD1C33AF8D6EBE7C36FCD051F066E4039D2B47ABAECF7C68BC3933D567930B2 ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll
13:22:51.0741 0x3040 HomeGroupListener - ok
13:22:51.0750 0x3040 [ 86161A89F16851728802590EC7C92608, 3A3B05BB4E115410D27063B30C0EF3F18295F542050F329F1E466C81A9E23A46 ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll
13:22:51.0771 0x3040 HomeGroupProvider - ok
13:22:51.0774 0x3040 [ F5CA18197B4646E04DB9EB2D6642CC4D, 5BA3342DDF1BCB67E4156169FE9A33E7BC2641C729E9F1A80C0E80953C6AB114 ] HpSAMD C:\WINDOWS\system32\drivers\HpSAMD.sys
13:22:51.0782 0x3040 HpSAMD - ok
13:22:51.0800 0x3040 [ A10C7C1E69FC90620C7BF2E51302A01F, D725AEAE38255CED73F4922A10F226215528706580B06D01C228488F93AC0397 ] HTTP C:\WINDOWS\system32\drivers\HTTP.sys
13:22:51.0824 0x3040 HTTP - ok
13:22:51.0828 0x3040 [ 0C84C250F80EAEC2C9768464CC1A9626, 212E1003B78F9B98FEB084FD1FDB59B26A9DE4C9120F24D4361FBBF0F3C035E7 ] HvHost C:\WINDOWS\System32\hvhostsvc.dll
13:22:51.0840 0x3040 HvHost - ok
13:22:51.0843 0x3040 [ 74FC79C52395B10FFD0B55CF22CF88FC, 94D977DA2092EE8C2A598AC48758A84BB22CB6378BD114C2D3B4172A07A9CACC ] hvservice C:\WINDOWS\system32\drivers\hvservice.sys
13:22:51.0852 0x3040 hvservice - ok
13:22:51.0854 0x3040 [ EF558A02D734A1403583E95CCEEC2487, F0D052DAF48A62E4A90D067BFCB5EE9563804DE68D0EA82E0E11C8D16AD19D29 ] HWiNFO32 C:\WINDOWS\system32\drivers\HWiNFO64A.SYS
13:22:51.0861 0x3040 HWiNFO32 - ok
13:22:51.0864 0x3040 [ 771EDDA9830A3079F996F34D681FB6E5, F452AD656872A1C8B2D6DCE232CE01EBD456C46F4934A7601E78470F2A2CBF38 ] hwpolicy C:\WINDOWS\system32\drivers\hwpolicy.sys
13:22:51.0871 0x3040 hwpolicy - ok
13:22:51.0873 0x3040 [ 3B9F315E7FA72CC25228EB097DD9C694, B26F1E494428EF197A0C97645C05BB3CA093827A005D35C987F1D6778BC4E52C ] hyperkbd C:\WINDOWS\System32\drivers\hyperkbd.sys
13:22:51.0881 0x3040 hyperkbd - ok
13:22:51.0885 0x3040 [ B54B30992620C97230013A74461C8517, CAF09BDCDD6DE2A39CB8AE2C65E6F8FE12D8E93D84BBEF6C6A98F872BF54A4E3 ] i8042prt C:\WINDOWS\System32\drivers\i8042prt.sys
13:22:51.0899 0x3040 i8042prt - ok
13:22:51.0902 0x3040 [ C6B8743B213F06AA60943D8366FE968F, 758954F70B810063914B243115B2C753B2BCE40190F95C30ACBA0BF04EBD5B33 ] iagpio C:\WINDOWS\System32\drivers\iagpio.sys
13:22:51.0911 0x3040 iagpio - ok
13:22:51.0915 0x3040 [ 9A2A2F3C69B9A30B6E78536F6D258BAD, 5E28E132A7300E6F5E0C6439D6BA00F1AEF66D729FF671FDA91274A25A921463 ] iai2c C:\WINDOWS\System32\drivers\iai2c.sys
13:22:51.0925 0x3040 iai2c - ok
13:22:51.0928 0x3040 [ 5A0E850F8CD17791A3E6A3CF81D0CA28, 10A965A49D53360DD250E0758B6BB142872298A21C732EB026ACB93492C5C6CF ] iaLPSS2i_GPIO2 C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys
13:22:51.0938 0x3040 iaLPSS2i_GPIO2 - ok
13:22:51.0943 0x3040 [ 7508F1096803385D6376BFD0BD473AC4, 1F32EC23CDC94DCB9710E6663B5C3BD83568545DDC2C741CFC13550A4E4DD2BE ] iaLPSS2i_I2C C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys
13:22:51.0952 0x3040 iaLPSS2i_I2C - ok
13:22:51.0956 0x3040 [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys
13:22:51.0962 0x3040 iaLPSSi_GPIO - ok
13:22:51.0966 0x3040 [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys
13:22:51.0977 0x3040 iaLPSSi_I2C - ok
13:22:51.0989 0x3040 [ 97E553D03219D3D51705C7235D9EAEBD, 5D4578C8804AF32D1DC0868E34D6538138DC15F9568CA7E21051B1C82C0D8D55 ] iaStorAV C:\WINDOWS\system32\drivers\iaStorAV.sys
13:22:52.0007 0x3040 iaStorAV - ok
13:22:52.0015 0x3040 [ 8350FE3BCDE3428BC040877BB7E9EAEB, 77F9456351CA640C6B7862907C0580627E761EC807B551976A95657EB4D6CC20 ] iaStorV C:\WINDOWS\system32\drivers\iaStorV.sys
13:22:52.0028 0x3040 iaStorV - ok
13:22:52.0039 0x3040 [ 3BA03F7C7700DDF4C383DDE9252F5817, 3E90F69D0010E7764349D9AE865D577E431FEBC67DA554B400BC808DD286E203 ] ibbus C:\WINDOWS\System32\drivers\ibbus.sys
13:22:52.0054 0x3040 ibbus - ok
13:22:52.0059 0x3040 [ 937AC47F7356554DA05D9722C356EB55, 9EABC9F19B4E1193B669D2674967F5C6F03FAD348EDF0615E3F78554FF9A83CC ] icssvc C:\WINDOWS\System32\tetheringservice.dll
13:22:52.0075 0x3040 icssvc - ok
13:22:52.0092 0x3040 [ F2934208C0E50C0B971A7981AB90BED2, B936BFBBD71E731CC2CDB8B47D262F2EF09726FF921C2DA0841910CA2401423D ] IKEEXT C:\WINDOWS\System32\ikeext.dll
13:22:52.0120 0x3040 IKEEXT - ok
13:22:52.0124 0x3040 [ 2A01C96DF5802D3434634E55C91232D8, A3ABEF36E2FD2CF5C371ADBF92566A09669A1D990ABE4677370F57F2EEAF8121 ] IndirectKmd C:\WINDOWS\System32\drivers\IndirectKmd.sys
13:22:52.0135 0x3040 IndirectKmd - ok
13:22:52.0194 0x3040 [ 1747CAA9AB414DEC0FF38CDEBD3A7418, 0B647EF6FFF1E02DAD8B4C764A4A00430898BD089304D52BC05E0D99E80F1236 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys
13:22:52.0253 0x3040 IntcAzAudAddService - ok
13:22:52.0271 0x3040 [ 5E7F2CE9E9BF48521298D1C6729145C5, 0FD2350D5A26EDEA4F83F2E3D22FD0047AEA4623096C6FF7A70F8248B185FBC8 ] Intel(R) Capability Licensing Service TCP IP Interface C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
13:22:52.0288 0x3040 Intel(R) Capability Licensing Service TCP IP Interface - ok
13:22:52.0295 0x3040 [ FA6094444A7DC90449800F964E0A8668, A6DCF395649FA185596D55713888922BA2A61D96AD0D5E7860FD47EE30B7E4CF ] Intel(R) PROSet Monitoring Service C:\Windows\system32\IProsetMonitor.exe
13:22:52.0303 0x3040 Intel(R) PROSet Monitoring Service - ok
13:22:52.0306 0x3040 [ 9F7E87F6595D065A8A200A291043045E, 6944F72F73EADC6C9B7691F2C1C6DF1898F22C88EFA78EC0BA8CB5FFD9CE057B ] intelide C:\WINDOWS\system32\drivers\intelide.sys
13:22:52.0313 0x3040 intelide - ok
13:22:52.0316 0x3040 [ A6BD2E20AE1BC5CB2776C87C28E4F4CA, BD8BE67CED9A4982D785CE9ECBEFE868C3A2E37DF7F9592B9F9049B807A1554B ] intelpep C:\WINDOWS\system32\drivers\intelpep.sys
13:22:52.0324 0x3040 intelpep - ok
13:22:52.0328 0x3040 [ 2A48DA39542636DB0FA3BA915385D1B3, 6CA0916F5F4B1E81AE6A6233276320599BFA7C129267177703E3BB6468FB4683 ] intelppm C:\WINDOWS\System32\drivers\intelppm.sys
13:22:52.0339 0x3040 intelppm - ok
13:22:52.0342 0x3040 [ DB32758F3A7F6CCE81A5430080A2EA65, 36A26BAA884E96804F8EA0B12BB3E81BBE6D4EE704809904091445F36CAB5A29 ] iorate C:\WINDOWS\system32\drivers\iorate.sys
13:22:52.0350 0x3040 iorate - ok
13:22:52.0353 0x3040 [ FE85D0A86CA7A5A99CF8CD04DE7F80AE, 544C01FC01EE728EB5667158207E5F4418FE77A88BA318192A834722DB766F4E ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
13:22:52.0364 0x3040 IpFilterDriver - ok
13:22:52.0380 0x3040 [ 68C50E8E4265698BE6835156F4DD5008, 5B9CBBCE99315E5569E6733F13E91A687A36F536A68A2B670CC24C4BCC4EAFF4 ] iphlpsvc C:\WINDOWS\System32\iphlpsvc.dll
13:22:52.0412 0x3040 iphlpsvc - ok
13:22:52.0417 0x3040 [ 10D01A3657AC8E8004C83D613163DE1E, F9389F1BF87A2D28899F50D270DA6F48B0912CFAF06CEE566697B041DBE92F9C ] IPMIDRV C:\WINDOWS\System32\drivers\IPMIDrv.sys
13:22:52.0426 0x3040 IPMIDRV - ok
13:22:52.0432 0x3040 [ F1DAECC3B3D6399875D4F10529D6A77C, 6533D2F858816BE6570C998510919FCA2904EC6EF806F61C1FD325E88133111B ] IPNAT C:\WINDOWS\system32\drivers\ipnat.sys
13:22:52.0446 0x3040 IPNAT - ok
13:22:52.0451 0x3040 [ 7475A2903BB704B446AA6309E34D3362, C94643A1626A9716015EBA7041A1224098501EB7DAA704CBFCAD3DC6F3CFC6AF ] irda C:\WINDOWS\system32\drivers\irda.sys
13:22:52.0465 0x3040 irda - ok
13:22:52.0468 0x3040 [ 9725E7F0C64CE9916A5CDABE8D6E13C3, 04AF9E48FEF208A2850DF28352E8FDCBF4018982C72C0F67EE12C048C4070116 ] IRENUM C:\WINDOWS\system32\drivers\irenum.sys
13:22:52.0476 0x3040 IRENUM - ok
13:22:52.0479 0x3040 [ 8C604213A2E73088BFFE6CD2E6F1AE53, B4C4FEE4D398A29F72EC27D5668071D7E68CD943FFFC38624DD5DF5BEBDF46D3 ] irmon C:\WINDOWS\System32\irmon.dll
13:22:52.0489 0x3040 irmon - ok
13:22:52.0492 0x3040 [ 58040898883A96160D41739C80328BBF, 7F85C91C905811416E266A263DDEFCDCB0B45376AAE51B551AB636C16577DB9F ] isapnp C:\WINDOWS\system32\drivers\isapnp.sys
13:22:52.0500 0x3040 isapnp - ok
13:22:52.0506 0x3040 [ C9FD02D62E09337B67B0C61EC8CA38CC, DC77E935ECC8474BE9018F0937CB11C137073582B20A0EE107CE247FD9E1F9C1 ] iScsiPrt C:\WINDOWS\System32\drivers\msiscsi.sys
13:22:52.0517 0x3040 iScsiPrt - ok
13:22:52.0522 0x3040 [ 1C3EF75B521DB60E951711440648B0D5, 95F594ADB6CCDE5CB7E0601B90A611D3A39485419D078CEB6DB84FFC0AC7E6A7 ] jhi_service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
13:22:52.0529 0x3040 jhi_service - ok
13:22:52.0533 0x3040 [ 210808437570BDDEE71A43535E3A2D30, EF5DE6EE4FF58F44CDE4D4E7F298ABBC9086EC05CC3AE4903060DA878115AC1E ] kbdclass C:\WINDOWS\System32\drivers\kbdclass.sys
13:22:52.0540 0x3040 kbdclass - ok
13:22:52.0543 0x3040 [ 0B779E9FC426CA2268D28181FA6C222F, 83292023A688C3044D096F22242EB954B7F7511BE8341D45FF0AFBD9CB9BCB4E ] kbdhid C:\WINDOWS\System32\drivers\kbdhid.sys
13:22:52.0555 0x3040 kbdhid - ok
13:22:52.0558 0x3040 [ 813BA3EB2CE038F2A5382DDD75CAD60B, 99FA444027CAC247B54317730D54AB0C4C000AE076B97E47470FDA9834594312 ] kdnic C:\WINDOWS\System32\drivers\kdnic.sys
13:22:52.0568 0x3040 kdnic - ok
13:22:52.0571 0x3040 [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] KeyIso C:\WINDOWS\system32\lsass.exe
13:22:52.0579 0x3040 KeyIso - ok
13:22:52.0589 0x3040 [ 97E3E8F35632EECD0ABD2DE6519A9666, ABE96FDEB1076E380D7FB4975C020B43ED4E821097EFC6AFE8C75D764167D6E8 ] kl1 C:\WINDOWS\system32\DRIVERS\kl1.sys
13:22:52.0602 0x3040 kl1 - ok
13:22:52.0606 0x3040 [ B01AD8DA034EE42D4C2282F77FDB03AE, 3FF55F3CEE4A0E5D559F04F5A639297EA0F36580720E94CF9DD56DEBF2E98F39 ] klbackupdisk C:\WINDOWS\system32\DRIVERS\klbackupdisk.sys
13:22:52.0612 0x3040 klbackupdisk - ok
13:22:52.0616 0x3040 [ 10549B5BFD9A3DCF4FFA6287236FA959, 6BDFA335A8E3A69425CB23230660D3168CB82911ACB3AAAF85C19263511EAF51 ] klbackupflt C:\WINDOWS\system32\DRIVERS\klbackupflt.sys
13:22:52.0622 0x3040 klbackupflt - ok
13:22:52.0625 0x3040 [ 7DAA9047F50BF5A3F8C147719FC520AF, 0740387075AF46DB1E9AEE3B12C65A06EDFE58EADB8B562C36CB1FEFF9905C26 ] kldisk C:\WINDOWS\system32\DRIVERS\kldisk.sys
13:22:52.0631 0x3040 kldisk - ok
13:22:52.0634 0x3040 [ 5766A27C85EE813029831D125D2EFB45, BB5BAFD5A58E80C7F0B8D24121352E0386B3422FFC16B56F1D1B1C6A482AC9F0 ] klelam C:\WINDOWS\system32\DRIVERS\klelam.sys
13:22:52.0643 0x3040 klelam - ok
13:22:52.0648 0x3040 [ 10F22365381D41EBD3BB08A7BEA15CDD, 02ACFF8E88307076AB97B937081296ABCDEF05BB1AEAA359E60148BA70B4A0BB ] klflt C:\WINDOWS\system32\DRIVERS\klflt.sys
13:22:52.0656 0x3040 klflt - ok
13:22:52.0667 0x3040 [ 368E5BE52E16307F41C014EE850EE67F, 89125F851D75779535CAE46C9985FDA4AA23E6C5A1CA485A6195F950E730A018 ] klhk C:\WINDOWS\System32\drivers\klhk.sys
13:22:52.0679 0x3040 klhk - ok
13:22:52.0687 0x3040 [ BD140112BE2AE22B9912206407AD76A4, 63BC0ADFE54BF101DC197C95168980E7E79C5280CB112400C5BD60DA904D7A10 ] klids C:\ProgramData\Kaspersky Lab\AVP17.0.0\Bases\klids.sys
13:22:52.0695 0x3040 klids - ok
13:22:52.0712 0x3040 [ A1DF9BDEDC9105F6085751CC2168F664, 61DC8F730A3721D5B5EF9440FED4E43EC651AB1D051535D9A2C960DD420B3C8A ] KLIF C:\WINDOWS\system32\DRIVERS\klif.sys
13:22:52.0731 0x3040 KLIF - ok
13:22:52.0735 0x3040 [ 6357C533C30650361110DBAF59A25DF8, FA8CF6292CCBC7E23527D968E54CD773706CF091E35563B0CF9F8A1DF0B724B9 ] KLIM6 C:\WINDOWS\system32\DRIVERS\klim6.sys
13:22:52.0741 0x3040 KLIM6 - ok
13:22:52.0744 0x3040 [ 5480CC93737F48282552C84FA7EBA59B, B7D92424399B647132F6B9409FE75EAA310C984F796FC0B65BBE2EA180110968 ] klkbdflt C:\WINDOWS\system32\DRIVERS\klkbdflt.sys
13:22:52.0750 0x3040 klkbdflt - ok
13:22:52.0753 0x3040 [ FD47C92A63B6EADEA830BFA96C06EAEE, C15C39B6FA53CBD01A2F95243845C4B706B4229F8FFB75C7128819B9CEE5B2CB ] klmouflt C:\WINDOWS\system32\DRIVERS\klmouflt.sys
13:22:52.0759 0x3040 klmouflt - ok
13:22:52.0763 0x3040 [ 6B0C605591C892CBB683F63EA47822DC, E74C0A0501A1B4B56B417402108521F34DA6A23FCD1C05E4E524E41EBA0906FF ] klpd C:\WINDOWS\system32\DRIVERS\klpd.sys
13:22:52.0768 0x3040 klpd - ok
13:22:52.0771 0x3040 [ 828B042A95F055648DA190DF6C7AB1B6, 0457B0EF03BCB4CC1297EB25A25C162937F456BF406EC7B1A5E9A0AA13A9BCD7 ] kltap C:\WINDOWS\System32\drivers\kltap.sys
13:22:52.0777 0x3040 kltap - ok
13:22:52.0783 0x3040 [ 097D722294B9C1FA6E514A088F2E6B6E, FB0492CAF45FDF7F656CFF6662309435679C946269577ECF76A3077B7D7F940B ] klupd_klif_arkmon C:\WINDOWS\system32\Drivers\klupd_klif_arkmon.sys
13:22:52.0791 0x3040 klupd_klif_arkmon - ok
13:22:52.0795 0x3040 [ A7E26109DE0E310EEE5CFEEA9E821DCA, D81C23CA254F9B96AF59A719BE8F7FB822D6272CF9A8DADACAC39C24008FDC00 ] klupd_klif_kimul C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys
13:22:52.0801 0x3040 klupd_klif_kimul - ok
13:22:52.0806 0x3040 [ 6A80ECDC10138AC34E48A4BE684E06F9, DF8BD9139B82614614D9E1B5DAEA74E4DF4D5CE95F11ED503FD3B8E07722A1CA ] klupd_klif_klark C:\WINDOWS\system32\Drivers\klupd_klif_klark.sys
13:22:52.0815 0x3040 klupd_klif_klark - ok
13:22:52.0819 0x3040 [ EBC5ACF5F373981161752650BC17DD4E, 892A6758F5C7589D38A6A01D08F7B3F6D144591E0D3337C0E4B2CA9B66C70C37 ] klupd_klif_klbg C:\WINDOWS\system32\Drivers\klupd_klif_klbg.sys
13:22:52.0826 0x3040 klupd_klif_klbg - ok
13:22:52.0830 0x3040 [ D0B29808F37C6F6373AB16B716D9A1F8, 82E5760F0A313E43E3B9AF44E2A811021B84E7954CB5DC1462C7033AAEA8AF4B ] klupd_klif_mark C:\WINDOWS\system32\Drivers\klupd_klif_mark.sys
13:22:52.0838 0x3040 klupd_klif_mark - ok
13:22:52.0845 0x3040 [ D7F0B46844565E2ED68AC99AF0F4263F, AB419CBC29F96703237127AC4178A5365D4CCA010BAB1BD66D100D635E6E89B8 ] klvssbrigde64 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe
13:22:52.0851 0x3040 klvssbrigde64 - ok
13:22:52.0855 0x3040 [ 4C5305295B51BA72FC9C8CDAB32F95C3, 0E5850AC4CA14D971E7B04FED23CB2F6CEEE2796E905AADA0104677982ECD58A ] klwfp C:\WINDOWS\system32\DRIVERS\klwfp.sys
13:22:52.0862 0x3040 klwfp - ok
13:22:52.0866 0x3040 [ 4799405773BB400A2FF96663CF0EE4A2, F7650B80AC388675724D9A43D709FF9CCDE99374D7C5E3B900F61FC61D6816D2 ] Klwtp C:\WINDOWS\system32\DRIVERS\klwtp.sys
13:22:52.0873 0x3040 Klwtp - ok
13:22:52.0878 0x3040 [ 2426B9215884C60F7E021AA94827DC57, 7030B40B3AD6012CB4B6B42D36F5A69C146A7A4B948FB2D29E9AFF6DF46202CA ] kneps C:\WINDOWS\system32\DRIVERS\kneps.sys
13:22:52.0886 0x3040 kneps - ok
13:22:52.0892 0x3040 [ EFF5EA6088DB81C6EF6EDCDA5EE79909, 4D364B0BF012C335FA3B25BDF042D4AF672D961B9B48CB7C5BE34FCFD1D64979 ] KSDE1.0.0 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
13:22:52.0900 0x3040 KSDE1.0.0 - ok
13:22:52.0904 0x3040 [ 705C0F8BCCEF6E7CB704CCB454192D7E, FC608C708E2C3BF7A66E57B95E19E71E5F5C87EF359D8BC1A817500B45DF9338 ] KSecDD C:\WINDOWS\system32\Drivers\ksecdd.sys
13:22:52.0913 0x3040 KSecDD - ok
13:22:52.0918 0x3040 [ 55AD13E2BAFC5AB53A10F8C271F5D242, 058BEF14DCB95574BCAB985F04737BA89483937E8D8A74F7B4CEAFB7400C2397 ] KSecPkg C:\WINDOWS\system32\Drivers\ksecpkg.sys
13:22:52.0928 0x3040 KSecPkg - ok
13:22:52.0930 0x3040 [ 4ED115CD1A1099705F56B5E0FFF97CC6, 9CC49DF2CD6AAAE405BA661D13EFC1E05111D1DE3D1E50C39C425AF1F075610B ] ksthunk C:\WINDOWS\system32\drivers\ksthunk.sys
13:22:52.0943 0x3040 ksthunk - ok
13:22:52.0951 0x3040 [ 8125BDF7ADC261F75EF0CAD92456E350, 184797AA1D58C4FF743BA60D48590B88B781EE7779205E45E0679DEC79F3E185 ] KtmRm C:\WINDOWS\system32\msdtckrm.dll
13:22:52.0970 0x3040 KtmRm - ok
13:22:52.0976 0x3040 [ 8CCAB08815B50AD78B823DB3F96C8604, 265E6D582EB7207B5CC577D61CB7BC3646F613047F168CD69BB776C37780EBF5 ] LanmanServer C:\WINDOWS\system32\srvsvc.dll
13:22:52.0992 0x3040 LanmanServer - ok
13:22:52.0999 0x3040 [ 33DBBCF71F68EA97D9FD34E4C9AB5AC6, 104F04A1560E75EB224A3825707CE51E8798ABD764F5CC3B854FFFC93A39AF60 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll
13:22:53.0014 0x3040 LanmanWorkstation - ok
13:22:53.0018 0x3040 [ F8EBAA1FE6D3BF84752931DE1BFA0E2A, 2F3C512712BA709BBBBD779D9E792DBE324876C402CDCEF0345B8B7ABE1D232A ] lfsvc C:\WINDOWS\System32\lfsvc.dll
13:22:53.0029 0x3040 lfsvc - ok
13:22:53.0031 0x3040 [ 5A23E4BE0CCF49663C4CF7EB74C20278, 9DF91014B13B7CED1C3D409F90858FD03EFC5C4347C98901B4DF0AFF2B77845D ] LicenseManager C:\WINDOWS\system32\LicenseManagerSvc.dll
13:22:53.0043 0x3040 LicenseManager - ok
13:22:53.0046 0x3040 [ 5933A6673F00D8255C52957E40C2D601, 0AA1281F8B3F97E360592D1B35EE7D3D614F1AB46007F9884CFFB1C5E647575E ] lltdio C:\WINDOWS\system32\drivers\lltdio.sys
13:22:53.0059 0x3040 lltdio - ok
13:22:53.0065 0x3040 [ 88A3C935725FA6EA1A228DCC26CF9C6F, 9B1F70644EEFA1EE7CE151A8A970430087339B7A6345F2E0252370929D4AFAC6 ] lltdsvc C:\WINDOWS\System32\lltdsvc.dll
13:22:53.0079 0x3040 lltdsvc - ok
13:22:53.0082 0x3040 [ 3F858E28AEE6545FA1B64134DFD5C2CE, FFD7B4FB0A7B61BC6B76A172134673842F2CF00E96FA3ED4A8273DC525B6BB92 ] lmhosts C:\WINDOWS\System32\lmhsvc.dll
13:22:53.0092 0x3040 lmhosts - ok
13:22:53.0100 0x3040 [ 631ABC3E8FF50F9B70B9A52568B1F5F6, 9F3286C95A2D2BFA0D7082F648E2FBBA339C06188F950AE1FE3A797B644AD813 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
13:22:53.0111 0x3040 LMS - ok
13:22:53.0116 0x3040 [ 8E1B0946948CCC0BC1FA3CB70374A795, 0B894C129A35E223FF9594725AC90916CBD597FAD2211A18FC2AE03EA8679597 ] LSI_SAS C:\WINDOWS\system32\drivers\lsi_sas.sys
13:22:53.0125 0x3040 LSI_SAS - ok
13:22:53.0129 0x3040 [ 4F68163FC04C973500DC4DA0946917B0, DF060C29109EB3978CEDFE781999B0C4C1E8C0FDB133428058D8400C53315EEC ] LSI_SAS2i C:\WINDOWS\system32\drivers\lsi_sas2i.sys
13:22:53.0137 0x3040 LSI_SAS2i - ok
13:22:53.0141 0x3040 [ E5AC5F2815938651CDCC27F425474673, 3AF0598982153C36A766506FA088F7B84333CC96FEBB050402547AFC613AF9F7 ] LSI_SAS3i C:\WINDOWS\system32\drivers\lsi_sas3i.sys
13:22:53.0149 0x3040 LSI_SAS3i - ok
13:22:53.0153 0x3040 [ CCF6EC9FB9B8F18E05B4253E81013E48, EBE8D77FEE8B99BD8C29702404774D554673C96DF3FDF3DCEA9C99E22C2709FC ] LSI_SSS C:\WINDOWS\system32\drivers\lsi_sss.sys
13:22:53.0162 0x3040 LSI_SSS - ok
13:22:53.0174 0x3040 [ D5EFC0BAEC21EDE6FE03D377D403B421, 41BE71AF7C896FD4C51EF7E3871AAB769164DFB8050DA43E48C7A100711414B4 ] LSM C:\WINDOWS\System32\lsm.dll
13:22:53.0198 0x3040 LSM - ok
13:22:53.0203 0x3040 [ C9579D32219E5B936AC3A48D470117EC, E61A77191B6BA25D29B1221FEBBE826BBC11F825C0E35A72B4CEFFF8B7FE59A8 ] luafv C:\WINDOWS\system32\drivers\luafv.sys
13:22:53.0216 0x3040 luafv - ok
13:22:53.0219 0x3040 [ 9F699136FA1A8A170C2C05D7790A5FC0, 4363C527BD2FC9FD8937E9866CA200809AC87B64EA57084491BAB6DEB8ED9E87 ] MapsBroker C:\WINDOWS\System32\moshost.dll
13:22:53.0232 0x3040 MapsBroker - ok
13:22:53.0339 0x3040 [ FEAF4E98C93BC3512B8108D2F534A3BA, 6D93EF21DB9BFFACC1241E823F9BB7719B9395D64BBF952874CFF015B7930D92 ] MBAMService C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
13:22:53.0427 0x3040 MBAMService - ok
13:22:53.0438 0x3040 [ EAC1189D80DE42C84066BA51DAC1A3C0, FA6E28AEE1DF43D4276461A91DEA8BE6937F07C818EA015594911CE5FB393808 ] MBAMSwissArmy C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
13:22:53.0447 0x3040 MBAMSwissArmy - ok
13:22:53.0450 0x3040 [ C3CDCCF07486BD2616A7B82946E07AC0, 1EF95DAB2DA856BC7D7573B2EB2D9006DF337F827F0B56A161D0C97F45DB755E ] megasas C:\WINDOWS\system32\drivers\megasas.sys
13:22:53.0458 0x3040 megasas - ok
13:22:53.0461 0x3040 [ 2CF0CB2A0ED68C5455371E84C16F9627, 1C9166B52140145F1968E83E52BFF041250811B23C770FE181A18A4BA060CA81 ] megasas2i C:\WINDOWS\system32\drivers\MegaSas2i.sys
13:22:53.0469 0x3040 megasas2i - ok
13:22:53.0479 0x3040 [ FADB2FE017E69EECE0E1BA78661C2E8C, BE99B49031D8B4B670B6F6B6E829E54406779CF6F1D8AFE8AB79A73E6764AB2F ] megasr C:\WINDOWS\system32\drivers\megasr.sys
13:22:53.0509 0x3040 megasr - ok
13:22:53.0515 0x3040 [ 1BC9159CF58BABD89419072EA180A8F6, 6C9AB779C2355A341800A8F93AAAF9B19FAFF444CD6A7BD27C63D53F379A75EF ] MEIx64 C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys
13:22:53.0522 0x3040 MEIx64 - ok
13:22:53.0525 0x3040 [ 55A417C3E41F2A98666CF929EC19108E, A38C262B2863C87E4151525BF26D6AC16E7982D370E2C6998EB15C88C4BC8254 ] MessagingService C:\WINDOWS\System32\MessagingService.dll
13:22:53.0536 0x3040 MessagingService - ok
13:22:53.0551 0x3040 [ FD60818B66B2E8A5415EA840E99A9D8F, 5D2F22909354534B821D958FBEF6A40EB4F642F53C7B509D00949096EF716F36 ] mlx4_bus C:\WINDOWS\System32\drivers\mlx4_bus.sys
13:22:53.0571 0x3040 mlx4_bus - ok
13:22:53.0575 0x3040 [ 68F6977F1CFBAAC770D940A8C0326FA1, 90EE1E7DAC680EAA5AD50E9B0B9FD8FCE8DD6A02D5EF941B5AA5084CBD40BB80 ] MMCSS C:\WINDOWS\system32\drivers\mmcss.sys
13:22:53.0586 0x3040 MMCSS - ok
13:22:53.0589 0x3040 [ 0D50B3F3AB32D416786B58D4553859CE, 9DA4D7A30982E8B31C45BDB721AEF5240EAD9DA6839CF34FDDBCF123BF104F2C ] Modem C:\WINDOWS\system32\drivers\modem.sys
13:22:53.0601 0x3040 Modem - ok
13:22:53.0604 0x3040 [ 9CCCB7FC3EDADEBA461D78615A6011A6, C120B58F25E8CCFD971EB78645C0682F367AD56DC15F2D8C1980CE75B04719DF ] monitor C:\WINDOWS\System32\drivers\monitor.sys
13:22:53.0613 0x3040 monitor - ok
13:22:53.0616 0x3040 [ 27A07B2FB2E3057DA8DAEA4F25D843C7, 09D2B39E6B9AAEC879E5871DD6BCFF2AEF0B894F3B44649665A685F8B3CA6F27 ] mouclass C:\WINDOWS\System32\drivers\mouclass.sys
13:22:53.0624 0x3040 mouclass - ok
13:22:53.0627 0x3040 [ 7BD6E7F7C9001AB21B8362CFFEE80B25, C470C3363EEF3A60409A5934988BFB9B72AE7C2BB63CC2C2D006D7EB1C797F6A ] mouhid C:\WINDOWS\System32\drivers\mouhid.sys
13:22:53.0638 0x3040 mouhid - ok
13:22:53.0641 0x3040 [ F5BDAEE4B7D369D4C74668DCFBA3FF10, 100F39288E56AFE0D39D1CC235BDC9F3727C873CD3114E092DA7A08810BD3EB2 ] mountmgr C:\WINDOWS\system32\drivers\mountmgr.sys
13:22:53.0650 0x3040 mountmgr - ok
13:22:53.0654 0x3040 [ D57B7C101A8216E7769B14645AFEB276, 38BF427F81589173D3CD823A7BD3CA84B0FADD6747467E7AEADB72D1F4E1404B ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
13:22:53.0662 0x3040 MozillaMaintenance - ok
13:22:53.0666 0x3040 [ 30844BD376F9D01E62C820BEF446F1F8, 910D672EDB544A20AEB4450B4D89830F46EDD28CE0021156176315C5D068A1B4 ] mpsdrv C:\WINDOWS\system32\drivers\mpsdrv.sys
13:22:53.0677 0x3040 mpsdrv - ok
13:22:53.0693 0x3040 [ A231E1861F7AA9CCC24B97176BBA838D, CDAB9A25CC55B71E8A83E50504B12E948D7A88F035918E4F94E3624E4AA0A28D ] MpsSvc C:\WINDOWS\system32\mpssvc.dll
13:22:53.0721 0x3040 MpsSvc - ok
13:22:53.0727 0x3040 [ 4FC62380457DE25B69011D3542E954AC, D212DDD2446618A6215CF9FC370FA2634F027BC92D1D4999E019BEF8A86AA6EB ] MQAC C:\WINDOWS\system32\drivers\mqac.sys
13:22:53.0742 0x3040 MQAC - ok
13:22:53.0746 0x3040 [ 25D32BE04FE0A23FDF57FD5382757672, 64E39E3E21D9173FB1116B989D80C244C49DA827698A05AF5CC5CD1C6AE155DE ] MRxDAV C:\WINDOWS\system32\drivers\mrxdav.sys
13:22:53.0760 0x3040 MRxDAV - ok
13:22:53.0769 0x3040 [ D559FF28B1AD9B1E15A4186E785E61F6, 4B22A740E86CA10B1B43E36CBE9A50B53D1E5504C25694C8FF3A514DF699E99C ] mrxsmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
13:22:53.0783 0x3040 mrxsmb - ok
13:22:53.0789 0x3040 [ D4D12BC29DE0F09280868FDCA65B3474, A6FE89ABD52087FEE52FDF31DDF4CB627ED400E94FDA86BEBF1D4763F1E42518 ] mrxsmb10 C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys
13:22:53.0806 0x3040 mrxsmb10 - ok
13:22:53.0811 0x3040 [ 0698B15E21EA1B8742F2E7BB3142B754, 0DB79841E863F08452F895DA47CEEF6CA4D527A616EB616FDFF5F7431487E5F7 ] mrxsmb20 C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys
13:22:53.0822 0x3040 mrxsmb20 - ok
13:22:53.0831 0x3040 [ 74C9D21523DAE0C18F413C196DF0058A, 3DB4B8CA368D9DD82FAE2C2BC828A21142C8D29780A7C8667188C447519FF702 ] MsBridge C:\WINDOWS\system32\drivers\bridge.sys
13:22:53.0842 0x3040 MsBridge - ok
13:22:53.0846 0x3040 [ 308F08347923DEEDE7BC03EC7D485841, 72DB45CA11FE635DF9F8273C38CBEFB8DF5362ADA0CBF6D2B1E570365DC700C0 ] MSDTC C:\WINDOWS\System32\msdtc.exe
13:22:53.0858 0x3040 MSDTC - ok
13:22:53.0863 0x3040 [ F01B849D9D4A8CEAF32D4FDBD0B83C92, D2473AC4C6E6C03DEF13EA73EC78FB878BDC95C047651BF79A16C9DEA82AD046 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
13:22:53.0872 0x3040 Msfs - ok
13:22:53.0875 0x3040 [ 22ECD8F5D1DFADF2011BBB1700CB871D, 8F9EFF51137394EFA5471B8A29C541710063B65806B075B4925A84D5B6BC3BBB ] msgpiowin32 C:\WINDOWS\System32\drivers\msgpiowin32.sys
13:22:53.0883 0x3040 msgpiowin32 - ok
13:22:53.0885 0x3040 [ FD870F6968A145E4D2BA8A8842686B03, 34B8F601F3B5E42B4D0A41E2AF7DB4EB4E5B627DA8DA9A2A2D46B153AF23AEB1 ] mshidkmdf C:\WINDOWS\System32\drivers\mshidkmdf.sys
13:22:53.0894 0x3040 mshidkmdf - ok
13:22:53.0897 0x3040 [ 30364757963A028CE5DF0FBAAC270173, C72588A6A52FF8E418A15D2C407A4DB7EA768585423720145F8253D5CA519DC2 ] mshidumdf C:\WINDOWS\System32\drivers\mshidumdf.sys
13:22:53.0907 0x3040 mshidumdf - ok
13:22:53.0910 0x3040 [ 6BB0FEDDAE7135FA37FFAFF4D9E0E876, B41A3C0FFDFC493D6325ED493445AFCED04EC9DFF2B38125616FC5419AD1ACC4 ] msisadrv C:\WINDOWS\system32\drivers\msisadrv.sys
13:22:53.0917 0x3040 msisadrv - ok
13:22:53.0921 0x3040 [ 07E3E54734B14F43A4A95A849C0A0DE2, 314AA02EA84D267B32DBAEBEA6C1AC1A266DED1E8D35A17B41D1D2AC75E8049E ] MSiSCSI C:\WINDOWS\system32\iscsiexe.dll
13:22:53.0936 0x3040 MSiSCSI - ok
13:22:53.0938 0x3040 msiserver - ok
13:22:53.0941 0x3040 [ 4586CDA25B7866DD9505CEECF9DB3C74, B94CE1A7C1B6FFEF7AA33AEC30C27E01E44E6E56A4274705684BFBB738F95BCF ] MSKSSRV C:\WINDOWS\system32\DRIVERS\MSKSSRV.sys
13:22:53.0952 0x3040 MSKSSRV - ok
13:22:53.0955 0x3040 [ 642CDE46351D5D2D90311E77072AB46D, B2D3033E607BA2F6E6B9CFB1CBF154CD0CE910EA473C56343EC81B9B94044CCA ] MsLldp C:\WINDOWS\system32\drivers\mslldp.sys
13:22:53.0967 0x3040 MsLldp - ok
13:22:53.0970 0x3040 [ F3EF38D07A4ADCDF922EEEAF0FED7D4D, B9D436BFA29AA0A7B00889D96C4F8BC33C1809E19B7A71A69AB2E534E9794BF0 ] MSMQ C:\WINDOWS\system32\mqsvc.exe
13:22:53.0979 0x3040 MSMQ - ok
13:22:53.0982 0x3040 [ F2302A5CE63CA7673200FAFCEEEDB6AF, B8C44FC2DC0332183DE325CDBF511101F3307225295EDD428CE575A8DE15C223 ] MSPCLOCK C:\WINDOWS\system32\DRIVERS\MSPCLOCK.sys
13:22:53.0994 0x3040 MSPCLOCK - ok
13:22:53.0997 0x3040 [ 6114512EA26E835BA522C63635429DB5, 0F91CE41B4555316A79AEF3047C152D538CC9C7C329987C9FD0E3D961AFC87C8 ] MSPQM C:\WINDOWS\system32\DRIVERS\MSPQM.sys
13:22:54.0009 0x3040 MSPQM - ok
13:22:54.0016 0x3040 [ AA538E16E644D00E3BA5349BBA9598EC, 64A68B06883FE7ED34E04AB119BA819753F1222923EDD4E802C35D402B89D075 ] MsRPC C:\WINDOWS\system32\drivers\MsRPC.sys
13:22:54.0029 0x3040 MsRPC - ok
13:22:54.0033 0x3040 [ 0543BEFD41EC4D25C7F7CF36409CEC7D, 631622CFEC49952C0470531B23FFFFF483DC0EFFEF7A97B1179A600392C05DDD ] mssmbios C:\WINDOWS\System32\drivers\mssmbios.sys
13:22:54.0041 0x3040 mssmbios - ok
13:22:54.0043 0x3040 [ C1569E4DB8EFE3617847BF041A3C842F, 99ADE5E7F50E04CAEC737F7F90741CCA8EE628996BA5EB6C6BC62184884429B6 ] MSTEE C:\WINDOWS\system32\DRIVERS\MSTEE.sys
13:22:54.0056 0x3040 MSTEE - ok
13:22:54.0059 0x3040 [ 130B16970154BA9876B09E5C4BAC63BE, BE3AF8FC5A26AB9C9DBA9C015C2E1FD3C4CD9CB423A2BBDABA91428BF8620553 ] MTConfig C:\WINDOWS\System32\drivers\MTConfig.sys
13:22:54.0068 0x3040 MTConfig - ok
13:22:54.0072 0x3040 [ 15D987C8F6CCD4AC94E070C5986762CB, 452FB0C48B86C7F8F53794CC2DDBF2B900B03A0383B2DE8F6A830F8CB0AFBAD8 ] Mup C:\WINDOWS\system32\Drivers\mup.sys
13:22:54.0080 0x3040 Mup - ok
13:22:54.0084 0x3040 [ 3D2C5B4995CA0751D32DEA0DE9FDFE44, A26958785FD9E05E2CA97078C9BB277CD44222BF5F7D9E8DC2F3F6AAAFFC6483 ] mvumis C:\WINDOWS\system32\drivers\mvumis.sys
13:22:54.0092 0x3040 mvumis - ok
13:22:54.0103 0x3040 [ A5FA29F748BBF38FC3FAE4B54FA20A93, 8912F08967CFDD2A74593C9D23F43D6487D1920969C380B39BA8EA4672B24C3B ] NativeWifiP C:\WINDOWS\system32\DRIVERS\nwifi.sys
13:22:54.0123 0x3040 NativeWifiP - ok
13:22:54.0137 0x3040 [ 4DF6F43F761A600208F90A55D05F9B7E, AC93B4497FB428F7EC42DCF5956A2A61B951394E555BF6C89E55943E0B681586 ] NAUpdate C:\Program Files (x86)\Nero\Update\NASvc.exe
13:22:54.0151 0x3040 NAUpdate - ok
13:22:54.0157 0x3040 [ C3D9870E680D9D843B18F4626C3858FE, 43596CAC9FB488F810FBA954C52BC4D13F7D32028C40ACFE33DFD7EE36A65C17 ] NcaSvc C:\WINDOWS\System32\ncasvc.dll
13:22:54.0171 0x3040 NcaSvc - ok
13:22:54.0178 0x3040 [ 04CE2C0F0759EACD886BA4B658B60D5D, E34D0976FC5936C8629800D826DB127072D1DFC3D350EFACA3AA1B8119551762 ] NcbService C:\WINDOWS\System32\ncbservice.dll
13:22:54.0195 0x3040 NcbService - ok
13:22:54.0199 0x3040 [ E6094065008FE423377294050E7CEA2D, 86E200227256407530E2C28243DEFBC3CB6E9497644404D9AD79DA242286DF7B ] NcdAutoSetup C:\WINDOWS\System32\NcdAutoSetup.dll
13:22:54.0215 0x3040 NcdAutoSetup - ok
13:22:54.0219 0x3040 [ 629CB21AC49C8867E0F29DF1C16DB7B4, 20663E68C69D0A1A2FE99A0C2A9DEFABF49786A1DC8F7F4E1699458AF57D7E79 ] ndfltr C:\WINDOWS\System32\drivers\ndfltr.sys
13:22:54.0227 0x3040 ndfltr - ok
13:22:54.0247 0x3040 [ 3B41B4CF8F3F7C4041AC516830561533, 1EA616164AF9EA6B5DEC569DD255CB81C9EC3D4288E214CD8EE72C334ADEA3B8 ] NDIS C:\WINDOWS\system32\drivers\ndis.sys
13:22:54.0273 0x3040 NDIS - ok
13:22:54.0277 0x3040 [ 6DD605338FAAF6BA17662AA874E0D162, 636607829F5D7C3B7A4683C0A2DD594360D72F2AA3F8710153BE32575AE34A15 ] NdisCap C:\WINDOWS\system32\drivers\ndiscap.sys
13:22:54.0287 0x3040 NdisCap - ok
13:22:54.0292 0x3040 [ E34196F285F8B8879E1FF36C31F7179E, 77A4F24F995D4C0689C43F9956E08DCEC62517E4F8B1B9EAA1852B5293DB5B9A ] NdisImPlatform C:\WINDOWS\system32\drivers\NdisImPlatform.sys
13:22:54.0303 0x3040 NdisImPlatform - ok
13:22:54.0306 0x3040 [ 1FAD2398673F30CEC616B89C46B7DCBA, 70302049E6AE2BC6B3A7A9DE54D3F940AD6A9771CC2EBCCEC65994E67A25ECB5 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
13:22:54.0318 0x3040 NdisTapi - ok
13:22:54.0321 0x3040 [ AEB8ECBE66CC46854066CB1F5623E179, 2F650A85A9DAE38887610C0B876621035616CEDB65D4BBBD7F1405616D218AAF ] Ndisuio C:\WINDOWS\system32\drivers\ndisuio.sys
13:22:54.0332 0x3040 Ndisuio - ok
13:22:54.0335 0x3040 [ 7340104C2BF2F126714F7CDE85E63610, 45B64EC6F3A4C43F7D74806789067658C6EF0D44D36B841F4D26E1EBC95AF66C ] NdisVirtualBus C:\WINDOWS\System32\drivers\NdisVirtualBus.sys
13:22:54.0353 0x3040 NdisVirtualBus - ok
13:22:54.0358 0x3040 [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] NdisWan C:\WINDOWS\System32\drivers\ndiswan.sys
13:22:54.0374 0x3040 NdisWan - ok
13:22:54.0379 0x3040 [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] ndiswanlegacy C:\WINDOWS\system32\DRIVERS\ndiswan.sys
13:22:54.0394 0x3040 ndiswanlegacy - ok
13:22:54.0397 0x3040 [ 78A12E3DF035B5D054986949B19BE43C, AD9B34F89B9F27D473BD5FCE6694A40FCCB808B61ABEDD6F70F1AF6C7E73ABF8 ] ndproxy C:\WINDOWS\system32\DRIVERS\NDProxy.sys
13:22:54.0410 0x3040 ndproxy - ok
13:22:54.0414 0x3040 [ 04C8859355C1DC9C0FA198D1894D71C2, E7C67E73009341B5D402470C686781B3C7BBE2531CE26665E08E711B990B1A77 ] Ndu C:\WINDOWS\system32\drivers\Ndu.sys
13:22:54.0430 0x3040 Ndu - ok
13:22:54.0433 0x3040 [ 6C76780A01FC2B885BD6E957B5C36B02, DB7834F03A765F65C773E772D8051AFADB22CA4B5074180AA397857A0C47A068 ] NetAdapterCx C:\WINDOWS\system32\drivers\NetAdapterCx.sys
13:22:54.0446 0x3040 NetAdapterCx - ok
13:22:54.0449 0x3040 [ 5D1513BD6430307C9DB86C6E351372ED, D2AB709CF7CFA5B857B084AFC821914A975B7DDDCE154229981F19448973BD6D ] NetBIOS C:\WINDOWS\system32\drivers\netbios.sys
13:22:54.0457 0x3040 NetBIOS - ok
13:22:54.0464 0x3040 [ 6FEBB0A847FFD5F057B9AC8889F1B9A7, 558BCC64C59079E6569F61CCE1219A124B3313FC4E6CB5CBCC94124D202FF19D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
13:22:54.0480 0x3040 NetBT - ok
13:22:54.0483 0x3040 [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] Netlogon C:\WINDOWS\system32\lsass.exe
13:22:54.0491 0x3040 Netlogon - ok
13:22:54.0497 0x3040 [ D3BF2DA9216A4CF22A97820A50A67EFF, D00CBE0A7ECFB449D9B48967A01EE56141404EBE229893D5A1710781AD5F2551 ] Netman C:\WINDOWS\System32\netman.dll
13:22:54.0512 0x3040 Netman - ok
13:22:54.0520 0x3040 [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetMsmqActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
13:22:54.0529 0x3040 NetMsmqActivator - ok
13:22:54.0533 0x3040 [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetPipeActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
13:22:54.0540 0x3040 NetPipeActivator - ok
13:22:54.0550 0x3040 [ F2645D51DD8AABC8BC72358409410437, 8CB97628923D6CEA6EFAD7E666BE92C154060BD108C28D46287A520A14B18ADA ] netprofm C:\WINDOWS\System32\netprofmsvc.dll
13:22:54.0572 0x3040 netprofm - ok
13:22:54.0578 0x3040 [ D65F295A049473E6A39EA9A0EA76CA32, 274FC0BA044EB2D14093AB0E561F7FACEE06A3F433C81343C8B926FA2F9BD251 ] NetSetupSvc C:\WINDOWS\System32\NetSetupSvc.dll
13:22:54.0595 0x3040 NetSetupSvc - ok
13:22:54.0599 0x3040 [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetTcpActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
13:22:54.0606 0x3040 NetTcpActivator - ok
13:22:54.0610 0x3040 [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
13:22:54.0617 0x3040 NetTcpPortSharing - ok
13:22:54.0625 0x3040 [ E79E364AF827EB1F141BE000ABB8727D, 96218EB8B7C9E0F614AB9EAEAEC41BD4DB0E9EFE5C1D87EC749B9CB71653CEB1 ] NgcCtnrSvc C:\WINDOWS\System32\NgcCtnrSvc.dll
13:22:54.0643 0x3040 NgcCtnrSvc - ok
13:22:54.0659 0x3040 [ 54C31C2B815E2E26BB8158022F837C9C, CED660D1A58F635C6452F82FCB2EF8ACEEB7785E31617B2ADFD9EE69A2BDF2B8 ] NgcSvc C:\WINDOWS\system32\ngcsvc.dll
13:22:54.0688 0x3040 NgcSvc - ok
13:22:54.0697 0x3040 [ 9B9F520C72EE33EAEC857124BB800243, DFA9386B272F4D86F3E4BE861A2FC4617261E1AA40576DDA610FC24AB4961A63 ] NlaSvc C:\WINDOWS\System32\nlasvc.dll
13:22:54.0714 0x3040 NlaSvc - ok
13:22:54.0717 0x3040 [ 001CBD7A2CD45C4EB39C01C3C677EF73, F4AAF4D60DB1232921C7811A62287B55C7C098B7A1FF9A40D88AF58A5ABECBA2 ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
13:22:54.0727 0x3040 Npfs - ok
13:22:54.0730 0x3040 [ 90F5DC9802AAA00CD0B6E2AD9E7FFADC, 71C0777829299DECA6ACD42F38802DBE3C29A42CFBD8A396F39DFA44D1F55B6C ] npsvctrig C:\WINDOWS\System32\drivers\npsvctrig.sys
13:22:54.0741 0x3040 npsvctrig - ok
13:22:54.0744 0x3040 [ 1993C85962692EF7024501E7FE92D466, F5BCAA8308495EBF8BB061C2015E07C202A779668D171364D7E312975BC18B10 ] nsi C:\WINDOWS\system32\nsisvc.dll
13:22:54.0754 0x3040 nsi - ok
13:22:54.0757 0x3040 [ 0C6218321A09A7B51BA7FFAFBA4CCB21, 330B3FA793A78410B28DFC8250BBF24442E3BB80434A7938BB96F02337614E0D ] nsiproxy C:\WINDOWS\system32\drivers\nsiproxy.sys
13:22:54.0766 0x3040 nsiproxy - ok
13:22:54.0802 0x3040 [ 98BBD81DC481E9D58EEB31C81EBDEFF5, 28FAAFCB90721C557C37D18533681C274428BC97AB3C3AAFCC75212074E9F2CA ] NTFS C:\WINDOWS\system32\drivers\NTFS.sys
13:22:54.0846 0x3040 NTFS - ok
13:22:54.0850 0x3040 [ 6E6DD6F9DD2A034CF85E94047DBDB992, 63D0A0756F551B7668D1CBAB24B29FD462C706E8A81690BC248D6C92061FE215 ] Null C:\WINDOWS\system32\drivers\Null.sys
13:22:54.0859 0x3040 Null - ok
13:22:54.0866 0x3040 [ 302A57479E9A2A95CE723521A7ED1BD0, CEF8E26DBCA2E840ED32378193127FDC321828D28941AE42C5AA800613A85E91 ] NVHDA C:\WINDOWS\system32\drivers\nvhda64v.sys
13:22:54.0874 0x3040 NVHDA - ok
13:22:55.0133 0x3040 [ E0854DA823FBC14F750BFD46E690F60F, BAACD13006B7EA377BC57CA502D342097E327486957F905DD720C870C1B4C67C ] nvlddmkm C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_b67dc924fff8de6d\nvlddmkm.sys
13:22:55.0334 0x3040 nvlddmkm - ok
13:22:55.0350 0x3040 [ D261DF41F0840F734856A2B4F5E072C7, 2E703556D0C919375D0B7770513456844B13362190643D5524663EC8546E0FF5 ] nvraid C:\WINDOWS\system32\drivers\nvraid.sys
13:22:55.0359 0x3040 nvraid - ok
13:22:55.0363 0x3040 [ 23B702B555EB0436B9DAA0BC63DA65CE, D454F80D9657CFEC852F022C12D7B2C1A2D7D247ECC591EDB07B9369DFD8C99E ] nvstor C:\WINDOWS\system32\drivers\nvstor.sys
13:22:55.0373 0x3040 nvstor - ok
13:22:55.0380 0x3040 [ 17997DC2441F7E29CDFC6458E0392764, 636CCE2DA1EF8195B33F8D6D5C8CC151D58EBF08DC9AD8ACCCE7ABD41A69639F ] OneSyncSvc C:\WINDOWS\System32\APHostService.dll
13:22:55.0398 0x3040 OneSyncSvc - ok
13:22:55.0431 0x3040 [ 7D006FC340B301A1DEAFB5878C078A12, 245A4647DEB2CD5D0C3FF07B45D50D6EE039733000C7F7FEC0A1B58162594B9D ] Origin Client Service C:\Program Files (x86)\Origin\OriginClientService.exe
13:22:55.0465 0x3040 Origin Client Service - ok
13:22:55.0472 0x3040 [ 11E0B35479C895888BA3D7F619DCFFF3, 6ED82C19898101EC00BD64A9F90595C3D20AD2D2902AA8765B740FB3B9312DDF ] ose64 C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
13:22:55.0480 0x3040 ose64 - ok
13:22:55.0557 0x3040 [ FE9C0029E1AF26350D9985D00520E5C8, 967079CCF7B2CBD4B48C9F076675C26AF93A1CEC26C96811F279414E34004EE6 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
13:22:55.0633 0x3040 osppsvc - ok
13:22:55.0661 0x3040 [ 62C94E9FE432791CDBB516BEE6198FA2, E9DDFC36243F0B6197C75349D4C03D318F415E9E1D904CE17698F71647EB3415 ] OverwolfUpdater C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe
13:22:55.0692 0x3040 OverwolfUpdater - ok
13:22:55.0701 0x3040 [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] p2pimsvc C:\WINDOWS\system32\pnrpsvc.dll
13:22:55.0721 0x3040 p2pimsvc - ok
13:22:55.0730 0x3040 [ 2BBCED66D7AFC968BDBB0E4D8524DF0A, 762D916390F9DE69B3EA1D31244224F910645F8E5CEF4C505B76B215BFDFCD9A ] p2psvc C:\WINDOWS\system32\p2psvc.dll
13:22:55.0750 0x3040 p2psvc - ok
13:22:55.0754 0x3040 [ 6B81BF7853D161DB8AC62CD8B9C2DE6B, B2DC06D135FD2501217DDA7349556EB873309E02188D4C3901807BA24FAB30C7 ] Parport C:\WINDOWS\System32\drivers\parport.sys
13:22:55.0766 0x3040 Parport - ok
13:22:55.0771 0x3040 [ 0553ECB742278C8F4CFA28B43FF20EAD, ACD7F5BC36573BCEC2C3413DEA687034ECC101EDD3C1544B264BBA29EFCE3425 ] partmgr C:\WINDOWS\system32\drivers\partmgr.sys
13:22:55.0780 0x3040 partmgr - ok
13:22:55.0790 0x3040 [ CDD8EDF4C35BE6D6137112F5CC7A70DA, 80EECA6BC2E668E5652A5CA9B119CCCE2A2E421F0EED1FD0EAC20C42E77C02ED ] PcaSvc C:\WINDOWS\System32\pcasvc.dll
13:22:55.0807 0x3040 PcaSvc - ok
13:22:55.0814 0x3040 [ 29AF16726F4DD84376ECA85AB6AFF2C6, BEF9EA10637065365ED343C4EBA51191B9BEADD8F1F3362D3EFE75F40BE9A027 ] pci C:\WINDOWS\system32\drivers\pci.sys
13:22:55.0827 0x3040 pci - ok
13:22:55.0830 0x3040 [ 214DCC87E3898F738075D1341252A552, E721FBBC3510DDB848A8CAEA3B6031EE988F42252DBC3BF7BDB6ABD9A0D9FABD ] pciide C:\WINDOWS\system32\drivers\pciide.sys
13:22:55.0838 0x3040 pciide - ok
13:22:55.0843 0x3040 [ AED76A3333B3A31536E430020E0226FC, EC255B79B0908E3C142D92E35B79D90A3F2594BA012CA2B1B04A6A8745153430 ] pcmcia C:\WINDOWS\system32\drivers\pcmcia.sys
13:22:55.0852 0x3040 pcmcia - ok
13:22:55.0856 0x3040 [ E63FB38B6E75B39467492FBAD2CD512A, DB406C92BA2460C833A49B98EB5BD58348E868F643A0123B0C9B5315FFC6A124 ] pcw C:\WINDOWS\system32\drivers\pcw.sys
13:22:55.0863 0x3040 pcw - ok
13:22:55.0867 0x3040 [ CA979960D3A580C78EDB4BBD6BD3ABCC, 2A136BC562235D26F6421027B158D406FB1D08FE7D70A50DD3E4D344B0E27205 ] pdc C:\WINDOWS\system32\drivers\pdc.sys
13:22:55.0876 0x3040 pdc - ok
13:22:55.0881 0x3040 [ 1A0E9F4E16BD62779CECA24110804DEB, A18065DF92B8CD34637D3D6D791E07EF053F5BEFEFFCDE00ACA5BD429028E6EF ] PDF24 C:\Program Files (x86)\PDF24\pdf24.exe
13:22:55.0889 0x3040 PDF24 - ok
13:22:55.0902 0x3040 [ 1509A77F840AA9E72CF8247D0CF2FBDE, 2D47AD4D8F5C2D871E603FB6D72D25EFD0E63FA3A542DAADAB9D82ED074C0E0B ] PEAUTH C:\WINDOWS\system32\drivers\peauth.sys
13:22:55.0928 0x3040 PEAUTH - ok
13:22:55.0932 0x3040 [ 540116170E2135FCD5DDE77702166B67, CBEC51C2D47532F1781B3255040F303263420B204C2F8BB2B5D1EC342F57B285 ] percsas2i C:\WINDOWS\system32\drivers\percsas2i.sys
13:22:55.0939 0x3040 percsas2i - ok
13:22:55.0943 0x3040 [ 8356F87553BF49C703CF382033815898, 245EB941566D848F134629690BF271B1CBEAB6440771D3D8D7AED3756835354E ] percsas3i C:\WINDOWS\system32\drivers\percsas3i.sys
13:22:55.0951 0x3040 percsas3i - ok
13:22:55.0971 0x3040 [ CB5343FF52A702A9ACFAAE6BE972FE09, EAA5362D91D05D382DF4EBBAA3FD575456F23CAD531CC6F1270F8254892DBF02 ] PerfHost C:\WINDOWS\SysWow64\perfhost.exe
13:22:55.0982 0x3040 PerfHost - ok
13:22:55.0999 0x3040 [ D0D57322ABC7473E54472D8374169CC5, BD14A13D6908C8669E56EF9401FD8A3D7C618E8B6556B36E634864E733BCA4B2 ] PhoneSvc C:\WINDOWS\System32\PhoneService.dll
13:22:56.0024 0x3040 PhoneSvc - ok
13:22:56.0030 0x3040 [ C7A94D99CDF054248EFBD9B93D096DA6, F59F0EB5B17DC078E47D044B1126A786D67DC149AC9614CDA6AA1226EEE3EF55 ] PimIndexMaintenanceSvc C:\WINDOWS\System32\PimIndexMaintenance.dll
13:22:56.0045 0x3040 PimIndexMaintenanceSvc - ok
13:22:56.0068 0x3040 [ F931F21E4287FE3ECCF09B54A232BBA2, CEB7AB3236E5F30214027092B7B695ED35F7A1E007DF4046797D1E4DFEF49EC8 ] pla C:\WINDOWS\system32\pla.dll
13:22:56.0111 0x3040 pla - ok
13:22:56.0116 0x3040 [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] PlugPlay C:\WINDOWS\system32\umpnpmgr.dll
13:22:56.0130 0x3040 PlugPlay - ok
13:22:56.0133 0x3040 [ 56D7A89423325121C4A9BD5C326414F3, 649048C23D1973C3504E26B35362AC99DFE9BF31FFE73F45B43306A212AEA34C ] PNRPAutoReg C:\WINDOWS\system32\pnrpauto.dll
13:22:56.0142 0x3040 PNRPAutoReg - ok
13:22:56.0149 0x3040 [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] PNRPsvc C:\WINDOWS\system32\pnrpsvc.dll
13:22:56.0165 0x3040 PNRPsvc - ok
13:22:56.0173 0x3040 [ F70CAC34B455D05EAA04B2F8FB58E1CB, 295BFFB3DA03C5CE5462C11D3240024B68AC06E8DEA9062A739BE2CCEE19EB5D ] PolicyAgent C:\WINDOWS\System32\ipsecsvc.dll
13:22:56.0190 0x3040 PolicyAgent - ok
13:22:56.0199 0x3040 [ 4671F353D0DF74C3B0D2D00DE676F56C, 0F75009DD36B2E18212CE855FB7CA7D273E5749D8F2F451655ED81AA5E86BA9F ] postgresql-8.4 c:\postgreSQL\bin\pg_ctl.exe
13:22:56.0204 0x3040 postgresql-8.4 - detected UnsignedFile.Multi.Generic ( 1 )
13:22:56.0381 0x3040 Detect skipped due to KSN trusted
13:22:56.0381 0x3040 postgresql-8.4 - ok
13:22:56.0396 0x3040 [ 60C8376B48BA96F07AEA536527433D44, EB988C119C3E71169B91ED2A744C71933DD35447DC4A8249E80EC24E9E7077D4 ] Power C:\WINDOWS\system32\umpo.dll
13:22:56.0435 0x3040 Power - ok
|
|
08.10.2017, 13:24
| #4 |
| | Vermutlich infiziertes Dokument geöffnet - mehrere Stunden kein Zugriff auf E-Mail AccountsCode:
ATTFilter 13:22:56.0442 0x3040 [ 5645B9D9788CCA2C88B9534996ED2D6D, 4988942DF163DB5B9B1A08CE6B628D2C47C2E2EAA30AEAE4EFE21C8CF4C8DC5D ] PptpMiniport C:\WINDOWS\System32\drivers\raspptp.sys
13:22:56.0470 0x3040 PptpMiniport - ok
13:22:56.0530 0x3040 [ 77ABF70C71922873BC160933571B3F83, 7FCFBB4B42E7A92FCF11388CD5B600EA79A7C134F13A8A88CF8DCD3DB96C3F5A ] PrintNotify C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
13:22:56.0617 0x3040 PrintNotify - ok
13:22:56.0624 0x3040 [ 372913E12677A8CBBBABDD8311894F9D, A5233D95A0D22D2A9DB214E7CB79A99D389B67189FF6A87D0AD4610A333A637F ] Processor C:\WINDOWS\System32\drivers\processr.sys
13:22:56.0635 0x3040 Processor - ok
13:22:56.0644 0x3040 [ 1F115AF75EFBAC28479B4F94A3F8D4A3, BE8D8C50D985F6AF9DDC0F13BDBE2D55D600E1F5E344982536538B14EC484AA6 ] ProfSvc C:\WINDOWS\system32\profsvc.dll
13:22:56.0662 0x3040 ProfSvc - ok
13:22:56.0667 0x3040 [ FC98407B85A31161851FDE245517574F, 2CCD706CF243934FCDA32B24CE0C385EA2E67F206E0306FA584496F583A20CD1 ] Psched C:\WINDOWS\system32\drivers\pacer.sys
13:22:56.0677 0x3040 Psched - ok
13:22:56.0683 0x3040 [ 7A68710BAC9B6809314B86C0CB1CBC4A, C02D97993D1F6FE6EFBA5B1366B3A4FE8CE1136A95F3A2DA07BA59554C163501 ] QWAVE C:\WINDOWS\system32\qwave.dll
13:22:56.0700 0x3040 QWAVE - ok
13:22:56.0703 0x3040 [ 819602BBBFDB0BD46DEA3715BF0DD452, D4007FF1E5296316B53436CA3598D6B1CF4F60AB77D5B02F3E595081EDD5D879 ] QWAVEdrv C:\WINDOWS\system32\drivers\qwavedrv.sys
13:22:56.0712 0x3040 QWAVEdrv - ok
13:22:56.0714 0x3040 [ CDF47037A0939F56D11F699629C276AD, A63F2A3FE80FB8084E3870E907505694B79EE1D9E56E292C01D481FEFD2534B0 ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
13:22:56.0723 0x3040 RasAcd - ok
13:22:56.0727 0x3040 [ 28C2EA278070EE12701D0EDF8CB0EC36, F10288C1C6835840026DB30285345EF892DE989F43C948E7F4760B8895FF675F ] RasAgileVpn C:\WINDOWS\System32\drivers\AgileVpn.sys
13:22:56.0740 0x3040 RasAgileVpn - ok
13:22:56.0744 0x3040 [ 7B82197BF35CC3BE59AEF8B706AB8A16, AB0216164A548A48CD21F5F035E57E867584A96890B9887EC08F8DABDD89F990 ] RasAuto C:\WINDOWS\System32\rasauto.dll
13:22:56.0755 0x3040 RasAuto - ok
13:22:56.0758 0x3040 [ 17E565710172ED71B8531D8822E1C5D1, 0CA39ABD9E544DDAD9D9D7D1FC50444274C31E18F9BF73069051D9F62833698F ] Rasl2tp C:\WINDOWS\System32\drivers\rasl2tp.sys
13:22:56.0773 0x3040 Rasl2tp - ok
13:22:56.0784 0x3040 [ 989DBF4805124A31610947E502501696, BCB73879AEC0588D0BFAB915D1F6EB637333A24D2030ED6572B3A3C03865AE93 ] RasMan C:\WINDOWS\System32\rasmans.dll
13:22:56.0809 0x3040 RasMan - ok
13:22:56.0812 0x3040 [ 9387DF155233D45D4E010F4F2FB52A57, CABC25DA4E512809AED0085767BDD94BF3C1DA792BFF8A009B5465D9110E7060 ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
13:22:56.0823 0x3040 RasPppoe - ok
13:22:56.0826 0x3040 [ F0F4EEDEEBEE7A4244FAFB96A16B5712, F64717E601BD5EB674003009507B8CDD6F69F00E8670D6895EC64786166A0E8D ] RasSstp C:\WINDOWS\System32\drivers\rassstp.sys
13:22:56.0840 0x3040 RasSstp - ok
13:22:56.0850 0x3040 [ 6132B142C5A1FA4C05F06FE43DE5E55E, CCF64C9A778501635B8B5E20BB617D39D0298329FD6911DC125FC8B31FEFEDE1 ] rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
13:22:56.0863 0x3040 rdbss - ok
13:22:56.0867 0x3040 [ 79A415E6FA915EFC00297DAB16EC2635, 47BB49F6D756214193D38A4AB182B541AAC180381C3111FF7F9B0AD4C44D8733 ] rdpbus C:\WINDOWS\System32\drivers\rdpbus.sys
13:22:56.0877 0x3040 rdpbus - ok
13:22:56.0882 0x3040 [ 7135785C21CA79D270D11037C43D3F19, 654A3C65CF891ED8C82A740D10CF607FC7D709185E664DE03288CEB5B25F03A6 ] RDPDR C:\WINDOWS\system32\drivers\rdpdr.sys
13:22:56.0894 0x3040 RDPDR - ok
13:22:56.0898 0x3040 [ 97A61A3CB2B5CB4FC32B3224EF333448, E4F2E8BCEE3639BE57BBC8A8E67FDE42C3A5158F1204684B0ECD216F4AA044A3 ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
13:22:56.0906 0x3040 RdpVideoMiniport - ok
13:22:56.0912 0x3040 [ 69BB204AE07EE84ECFAB1BF13C4BD04B, 1CA832CBF4AE4821EEA2A19F9519C2D1D00406B8CCE2A86FE3B33A5F293DB218 ] rdyboost C:\WINDOWS\system32\drivers\rdyboost.sys
13:22:56.0924 0x3040 rdyboost - ok
13:22:56.0939 0x3040 [ 940D6F5A2B0A61EE4170DF84F6C95C20, F8EE846DC8015EDFE7CB5BEEDC977EAA9C586BAC2216DE69D8ECCBDBC7408649 ] ReFSv1 C:\WINDOWS\system32\drivers\ReFSv1.sys
13:22:56.0962 0x3040 ReFSv1 - ok
13:22:56.0972 0x3040 [ 13F6B64235C60167052364BF7D99E4CA, BC12EE00775F7456FB922FBD684BF3F0CFABA5BEBB6E162C23B41DED5C20A978 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
13:22:56.0998 0x3040 RemoteAccess - ok
13:22:57.0003 0x3040 [ 3183B161B1F05333F6C325577FEF3596, D6A89B2A021377B6F371E5B9EFC36FF018822B28F0ED41F8CD2F00C5C8605707 ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
13:22:57.0019 0x3040 RemoteRegistry - ok
13:22:57.0031 0x3040 [ CE44FB62412C9B78008BE740B0E16D11, 4FA01F54EE3924EEE0953FB27336FFB01069F2248859B4984030E5D364807335 ] RetailDemo C:\WINDOWS\system32\RDXService.dll
13:22:57.0055 0x3040 RetailDemo - ok
13:22:57.0060 0x3040 [ 5DAA644F17780FC4E3F4820A46D38FEC, 32C27FFA0A4608B164F4E709CD0D998AB73CA9713BE3E47F9DBC7B3D1B6C7453 ] RmSvc C:\WINDOWS\System32\RMapi.dll
13:22:57.0072 0x3040 RmSvc - ok
13:22:57.0076 0x3040 [ 672724C8B21B7DC56646045DE4D5B860, 79986E80A92C949C543959F1E35647A9788DAB2892AC20B6DEA5C0BBC0CEDE9E ] RpcEptMapper C:\WINDOWS\System32\RpcEpMap.dll
13:22:57.0087 0x3040 RpcEptMapper - ok
13:22:57.0089 0x3040 [ 109C1D609951E886D3643B15C1EDD1C2, 347D8E7C50EC7F96217C7421D9BC8A42C9DF50B94169CB58DCF857A63C33C2EA ] RpcLocator C:\WINDOWS\system32\locator.exe
13:22:57.0098 0x3040 RpcLocator - ok
13:22:57.0113 0x3040 [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] RpcSs C:\WINDOWS\system32\rpcss.dll
13:22:57.0141 0x3040 RpcSs - ok
13:22:57.0146 0x3040 [ 5FF28F097C9699097B473F8FC7C1AA7D, 695560F1DBD85073F3D6CB1FF16F16504CA044EA62E940E463A16BBA8B86E2FA ] rspndr C:\WINDOWS\system32\drivers\rspndr.sys
13:22:57.0156 0x3040 rspndr - ok
13:22:57.0159 0x3040 [ B5DAEE69BACA64D2BB004568E22D8756, C0072CF6B438ED756435A182D55AC55F3AD356ACBD483DE06A94893D3CA8CCC5 ] s3cap C:\WINDOWS\System32\drivers\vms3cap.sys
13:22:57.0167 0x3040 s3cap - ok
13:22:57.0171 0x3040 [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] SamSs C:\WINDOWS\system32\lsass.exe
13:22:57.0179 0x3040 SamSs - ok
13:22:57.0183 0x3040 [ 5E73FB63E2DBC75FE0C17DEB0010CE0E, 9DAC47486262397D03BC01F7438CAB62CF33BD7B5283F5B9548C770A3D6D0ADC ] sbp2port C:\WINDOWS\system32\drivers\sbp2port.sys
13:22:57.0192 0x3040 sbp2port - ok
13:22:57.0198 0x3040 [ 3CD0130FFDEAEACF0905B482F3934EA3, 1EC355B63135FD2563093EBB206741C0C4CCE0551A662F6DC86C875146A88B06 ] SCardSvr C:\WINDOWS\System32\SCardSvr.dll
13:22:57.0213 0x3040 SCardSvr - ok
13:22:57.0218 0x3040 [ 5E8ECCE130A72107B6DFDBE26185A7FB, 811E2CE485BC14161FF629069BCCF53B2B8C6F8B1E1A6B3A3C86DBE4F85A5577 ] ScDeviceEnum C:\WINDOWS\System32\ScDeviceEnum.dll
13:22:57.0231 0x3040 ScDeviceEnum - ok
13:22:57.0235 0x3040 [ 3D9A82B03C92D1FEC42CB171D6F57778, DC027F02F5EB5F1D10DB6F405FB0C15D4D5C922445F5F3C916624113278AF072 ] scfilter C:\WINDOWS\system32\DRIVERS\scfilter.sys
13:22:57.0244 0x3040 scfilter - ok
13:22:57.0261 0x3040 [ D4DB6B318A0A0C74A90260725A228C0B, 57BA2EF9D880488C785C806ABF9EE753A48E589129442D72F815CD6EFFA07B22 ] Schedule C:\WINDOWS\system32\schedsvc.dll
13:22:57.0294 0x3040 Schedule - ok
13:22:57.0299 0x3040 [ 9055ADDFBA4C8B914C914CE693B55C0A, DB213AC36E14D856B81D2AFE46815402537A2ABEEA15032A9FF436F953129441 ] scmbus C:\WINDOWS\system32\drivers\scmbus.sys
13:22:57.0307 0x3040 scmbus - ok
13:22:57.0311 0x3040 [ B6F2363584E62960846F7C3F00124A4F, 252189FF9D623CF69BF415FF7C7FE74B0BBF756B632420578BFAFF6595616CF7 ] scmdisk0101 C:\WINDOWS\System32\drivers\scmdisk0101.sys
13:22:57.0323 0x3040 scmdisk0101 - ok
13:22:57.0328 0x3040 [ E189727B3C9909A85B33A16B290E192E, 2C273A9F44EDC5E5435904E9681973854B2F3EBB6100021BB139FF0CCCE9BF20 ] SCPolicySvc C:\WINDOWS\System32\certprop.dll
13:22:57.0340 0x3040 SCPolicySvc - ok
13:22:57.0343 0x3040 [ 0447065A6E10774EFCECFDD0EB970A79, 384A9AC72E756F96D43EE4B144A466564476AFD8778092C979116BB29A514433 ] ScpVBus C:\WINDOWS\System32\drivers\ScpVBus.sys
13:22:57.0348 0x3040 ScpVBus - ok
13:22:57.0354 0x3040 [ 7C3D10BEC8B0DBA00A78C78EB10B3AE2, A671C9CB97977613576D70607E106C7A29B9EA9E875C7C5AF293EE5903D7AD0A ] sdbus C:\WINDOWS\System32\drivers\sdbus.sys
13:22:57.0366 0x3040 sdbus - ok
13:22:57.0370 0x3040 [ F3714DBAA42C15F78FFCDFE4273214EB, 2D018970B92C5F0744FAE10A2FC298F3DCEA5C2EDEB760F4F0651337B9878ABF ] SDRSVC C:\WINDOWS\System32\SDRSVC.dll
13:22:57.0384 0x3040 SDRSVC - ok
13:22:57.0412 0x3040 [ B4337BA6754438CD2699D8A17DD8A359, 48A2F020D8DE2CC97CB7C69FCCFD36EDE66D291A9EFCEF83521EF5BE6AEA4BCE ] SDScannerService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
13:22:57.0442 0x3040 SDScannerService - ok
13:22:57.0448 0x3040 [ 120DFCB71D6C502613A9E2D50E16850C, 2C294010AD1C9C380CD5221A37720544178B7358C8C8553AF44055E4CEE5DAF5 ] sdstor C:\WINDOWS\System32\drivers\sdstor.sys
13:22:57.0456 0x3040 sdstor - ok
13:22:57.0488 0x3040 [ 30696A220D11270F4FC65C2D74CEE4D1, DDA8AFFFB20702C7FDAFA01B2EF8931AD098D97710421B880F2169CD4BCF62D3 ] SDUpdateService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
13:22:57.0523 0x3040 SDUpdateService - ok
13:22:57.0530 0x3040 [ FDEF8DC6871B96BBBD39A648994F60D1, 86CDB6D102CD67E3BC378D7F00C27B6A8C171E60D576D77DDA9F4B67C45D906D ] SDWSCService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
13:22:57.0538 0x3040 SDWSCService - ok
13:22:57.0541 0x3040 [ EFD644DD091E1D94555FC3BBC95EA66D, FBDDA6680BEC378CCF12A32D9186020E884DA15A1E789D1531B1E687FC7B54B1 ] seclogon C:\WINDOWS\system32\seclogon.dll
13:22:57.0554 0x3040 seclogon - ok
13:22:57.0558 0x3040 [ F48535714BED7DD784853889B4594B26, 9B4AB7E7293E79A8F6CC46C84F23E62AD3BD6E958FCE078CDBB125A69FAC7E50 ] SENS C:\WINDOWS\System32\sens.dll
13:22:57.0569 0x3040 SENS - ok
13:22:57.0591 0x3040 [ CF2AEB951CFC56D4F6CF2D66218B673C, CEA0B0E0251EA198893830080EE4CB8A9F18ADBF1F6FEFFC9C7E8AB4588D0639 ] SensorDataService C:\WINDOWS\System32\SensorDataService.exe
13:22:57.0628 0x3040 SensorDataService - ok
13:22:57.0637 0x3040 [ C09A42163878A082C3F0D0A3DFE95714, 8033DC38D0EDED3758DA6BF8C1955BE5FFE48863C079C589660B37D0E461300F ] SensorService C:\WINDOWS\system32\SensorService.dll
13:22:57.0658 0x3040 SensorService - ok
13:22:57.0662 0x3040 [ E6F00415DADCEEC860E7AB42BFD19A65, 274CAF22F93D43B6DB6953730E3DF8DA94776B24EEE74B80AB4CD780BC1366A9 ] SensrSvc C:\WINDOWS\system32\sensrsvc.dll
13:22:57.0677 0x3040 SensrSvc - ok
13:22:57.0680 0x3040 [ 401D706DDC0A7AF18C3DD228ADF74551, 27C0B38D7C2E3F6FF06201124E63483931F6071954B2B99EC0143C464238C0B7 ] SerCx C:\WINDOWS\system32\drivers\SerCx.sys
13:22:57.0688 0x3040 SerCx - ok
13:22:57.0693 0x3040 [ 7084D11083F0CDCA8B5C76F9846ABF5D, F639920882B0E784D8CFAF0D4C0F0C411937B6831E5DD99B0ABFBFE06BA4742F ] SerCx2 C:\WINDOWS\system32\drivers\SerCx2.sys
13:22:57.0702 0x3040 SerCx2 - ok
13:22:57.0705 0x3040 [ 3FF478A8ED32A83C36581425F6282B6C, 787646A17098EA7CF36064D0A950C1D470D4A280C8C5AC40023D566E53860EAE ] Serenum C:\WINDOWS\System32\drivers\serenum.sys
13:22:57.0713 0x3040 Serenum - ok
13:22:57.0717 0x3040 [ 92509187AA171A80521528B36F753E1D, FE0DA272B8A155ECC161E99586C4AE7EE17B1C84BC330DA1566C83B8E03FA825 ] Serial C:\WINDOWS\System32\drivers\serial.sys
13:22:57.0726 0x3040 Serial - ok
13:22:57.0729 0x3040 [ 433D38FF6D08B993847EA2A10EB8CB52, 29BA75DB6D1AC761BBDFB5AC8874FC7D763E1CD10D290E369063B34CE951270F ] sermouse C:\WINDOWS\System32\drivers\sermouse.sys
13:22:57.0738 0x3040 sermouse - ok
13:22:57.0749 0x3040 [ 82CF273F0E8F243789683DEB40757569, 5433D93A41C4BF04494E6158931C6AC3154888F7CD3A417253EC02FF7EA6D00E ] SessionEnv C:\WINDOWS\system32\sessenv.dll
13:22:57.0767 0x3040 SessionEnv - ok
13:22:57.0771 0x3040 [ 697D3EE0740AEAB62B66ABCA1C83D13B, FCF54A0071ED04AD3FC8551C67FE5FD49089DC0510F753052CAC5972A65C9E3D ] sfloppy C:\WINDOWS\System32\drivers\sfloppy.sys
13:22:57.0780 0x3040 sfloppy - ok
13:22:57.0790 0x3040 [ E38BE81F0F6D9C74E420A82BC6A02AFE, 25D7594FD1BE0B303F9777ACBA702ACD0C27B00D21F82659989C40636851A330 ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
13:22:57.0812 0x3040 SharedAccess - ok
13:22:57.0823 0x3040 [ 482E6BE8A07832E824080D352075ACA1, 4123A76C8E805AF4FE229C53E9C174095C0937913BA81A63FE9B45C44AA5B15F ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
13:22:57.0862 0x3040 ShellHWDetection - ok
13:22:57.0868 0x3040 [ CF3BDF9EAD8D3EF671E9339B44B185BA, C17EC6D5B00F49D9C8B5B6C262A85F34ED71C58450659F006B3632AA84F68E23 ] shpamsvc C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll
13:22:57.0882 0x3040 shpamsvc - ok
13:22:57.0885 0x3040 [ A34CE1830E45DA98932295FDE4B7908A, FC553ECF4D64B4B10B7FDE5352707785517A18D487A80665BAFC7261E3F35CDC ] SiSRaid2 C:\WINDOWS\system32\drivers\SiSRaid2.sys
13:22:57.0892 0x3040 SiSRaid2 - ok
13:22:57.0896 0x3040 [ A7B5C670770E908DA5FEF5BF1136E933, 8D3BB6FF65E631C34BE8EA766481B2FDB2E1E916A4FD67F86705A8975A136E6C ] SiSRaid4 C:\WINDOWS\system32\drivers\sisraid4.sys
13:22:57.0904 0x3040 SiSRaid4 - ok
13:22:57.0911 0x3040 [ B72B80E6FF423C5011E745CB76DA9A08, 18A6B9D46E91AD4D463EB5CB832702392D2E162577F90C328B515FCE69FABD15 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
13:22:57.0925 0x3040 SkypeUpdate - ok
13:22:57.0928 0x3040 [ D233EAE2A9D48485321816486ED635EF, 03AB49BE9CF15EB7EDC50C400E673B4DF0E5BFDA9A7811E157F2AF2F3CF38D49 ] smphost C:\WINDOWS\System32\smphost.dll
13:22:57.0939 0x3040 smphost - ok
13:22:57.0951 0x3040 [ 0B217141AC1283655402CDB356577735, 6EFA4CA46CFC8B7156CE7E5CA89B7F7073E16D66C2FC13F4DB95FEB78CCF698F ] SmsRouter C:\WINDOWS\system32\SmsRouterSvc.dll
13:22:57.0973 0x3040 SmsRouter - ok
13:22:57.0980 0x3040 [ 6F4CE07D420FB657B5936F71101ABD41, CEC52984C56E578E0FFE12BE1B8148335F788B7D1751F2D0E79B944A41113C20 ] SNMPTRAP C:\WINDOWS\System32\snmptrap.exe
13:22:57.0989 0x3040 SNMPTRAP - ok
13:22:58.0000 0x3040 [ 8BDB9E47D84144110F05AB757E630374, 8A49004895B8AD17C877AA8E7B6A0F14936BDDCBB88F0E5FB880DD0D816AEAB4 ] spaceport C:\WINDOWS\system32\drivers\spaceport.sys
13:22:58.0017 0x3040 spaceport - ok
13:22:58.0021 0x3040 [ E03264C4C25B568F92ED1656AD541E64, D42942BFFBC7213D204FAF84F4FE015FC23A6ACB29B5E752834EDBC17A3AC20D ] SpbCx C:\WINDOWS\system32\drivers\SpbCx.sys
13:22:58.0029 0x3040 SpbCx - ok
13:22:58.0044 0x3040 [ 1DFE222F8D6A422B7ADC909E0C8840DA, 96761691CF4447710D65573044A1005F2F0F89443DF581A30B97D7944940BB70 ] Spooler C:\WINDOWS\System32\spoolsv.exe
13:22:58.0071 0x3040 Spooler - ok
13:22:58.0171 0x3040 [ 23529A00195CE71252FEBF647E56E27D, 8ADF7A1C96DAE005E9A974D90BE8954F88D49B6848252B88513C49E0A3BD9774 ] sppsvc C:\WINDOWS\system32\sppsvc.exe
13:22:58.0269 0x3040 sppsvc - ok
13:22:58.0281 0x3040 [ FD3C05C412BE1C9FA477AD9CF9B2AADB, 19BEF5B3A0DAF8227200C2294547A497021F0B2558211345BFFFD13678522592 ] srv C:\WINDOWS\system32\DRIVERS\srv.sys
13:22:58.0297 0x3040 srv - ok
13:22:58.0310 0x3040 [ 55CA5329D1ADEB8F8034045930147AE4, D4F31BC82700D166564C7F9CDCEA3ABAB4A37B55137C34572768DF46FDA9320A ] srv2 C:\WINDOWS\system32\DRIVERS\srv2.sys
13:22:58.0335 0x3040 srv2 - ok
13:22:58.0342 0x3040 [ F13EE0DB1FB1D6946AC3228D7EFCFC8F, 109A809F0338FAB0F4045FA5EE33C6F0A994A9F586B2FBD8920A6AABA0E0EF66 ] srvnet C:\WINDOWS\system32\DRIVERS\srvnet.sys
13:22:58.0354 0x3040 srvnet - ok
13:22:58.0357 0x3040 [ 7E3B28642700820E782818918E7B0B03, 0F099B2AF504D84AA62669F77462374CC206F6A31E8D80116FCC3C42DD97B08B ] ssdevfactory C:\WINDOWS\System32\drivers\ssdevfactory.sys
13:22:58.0364 0x3040 ssdevfactory - ok
13:22:58.0369 0x3040 [ 44758105AB3EA34E815D4B6CA1153311, 7F223A20D2538C123BAC6F75BE0E126876A116F09502FD980C05B8916E26E1B7 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
13:22:58.0385 0x3040 SSDPSRV - ok
13:22:58.0388 0x3040 [ 392BB410D26B66CBBE4D702AEF755351, 83762BBF1111FACFDE42087E641301A8C154943CE7C1C0F40CBCFD813E10CF83 ] sshid C:\WINDOWS\System32\drivers\sshid.sys
13:22:58.0394 0x3040 sshid - ok
13:22:58.0401 0x3040 [ B97C7EC07218A8002323718202BF5E77, 39D3254383E3F49FD3E2DFF8212F4B5744D8D5E0A6BB320516C5EE525AD211EB ] SstpSvc C:\WINDOWS\system32\sstpsvc.dll
13:22:58.0415 0x3040 SstpSvc - ok
13:22:58.0420 0x3040 [ 592FF34A2FD6C6351B8A3AA76B2C0A9E, 152B7472DE531AC45492F562DD470B2CE33F1EEF13BC78F26046AE5ABF54E32F ] ssudmdm C:\WINDOWS\system32\DRIVERS\ssudmdm.sys
13:22:58.0427 0x3040 ssudmdm - ok
13:22:58.0487 0x3040 [ 4E330AD1EED4A5D582EE415FD55953A2, 2C02E1F45F74D250110BA5117AA942495CB2EBAC7F2CCECC284B4FB8F47B13E1 ] StateRepository C:\WINDOWS\system32\windows.staterepository.dll
13:22:58.0585 0x3040 StateRepository - ok
13:22:58.0612 0x3040 [ 84C35116595C43487B9B4FA5BF8D3524, 0F741A14A9CDD1B5A9FABF05D65615FE8ECD0199A84396AEC5723A9F28C21CDA ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
13:22:58.0657 0x3040 Steam Client Service - ok
13:22:58.0660 0x3040 [ 29D26E1347AE1BBD4201014E19880B2C, 9E2153AD96CE4F189EEE43BB02515532C619FB1CA02D8F6DEF517AC3347AAA14 ] stexstor C:\WINDOWS\system32\drivers\stexstor.sys
13:22:58.0668 0x3040 stexstor - ok
13:22:58.0680 0x3040 [ 91CB95B35481155BFE29C217CD237F27, CA66957DF1441D991453BEF02D768D44E5D9A484BC23C8874E8A7AC20904CB06 ] stisvc C:\WINDOWS\System32\wiaservc.dll
13:22:58.0705 0x3040 stisvc - ok
13:22:58.0710 0x3040 [ 6BC6023E866489D22CE30E18846B80D9, FD0D13332F3E267524A9FA7FEC128298D4905722807C172AE8E3DFE445C28DB1 ] storahci C:\WINDOWS\system32\drivers\storahci.sys
13:22:58.0718 0x3040 storahci - ok
13:22:58.0722 0x3040 [ C5E0ACE4771F5575D9D5B457ABF3AD03, 365880BC5AC313F25C313EFB7758301F98D9B2BF4C5FC9499F98C2B7F8407D96 ] storflt C:\WINDOWS\system32\drivers\vmstorfl.sys
13:22:58.0729 0x3040 storflt - ok
13:22:58.0733 0x3040 [ B66D8C75C9BC59D637177AB3B1C569A6, 76252A631F03EEBF5FDC7693F6B0A5E73838CDBE3157114CC96B8BBE88B476BF ] stornvme C:\WINDOWS\system32\drivers\stornvme.sys
13:22:58.0742 0x3040 stornvme - ok
13:22:58.0745 0x3040 [ BEBF85EB4D90E6996047DA027D0ED26E, DF109CF0F07CDD1B9B702C2A076D4DD5366DAAD971CC9359AF0358E79981706F ] storqosflt C:\WINDOWS\system32\drivers\storqosflt.sys
13:22:58.0757 0x3040 storqosflt - ok
13:22:58.0765 0x3040 [ B91FBE7CB4633FEB32AFBD0B48576396, 9EFDD92E8096CE5555F8DC3C870864E5515469603C2373B99B3607234633CA66 ] StorSvc C:\WINDOWS\system32\storsvc.dll
13:22:58.0785 0x3040 StorSvc - ok
13:22:58.0788 0x3040 [ 8E73037A6F8938475692FFCC26EBF385, F78C5CD1A3CD17AA831EEC82426B14006B4DDBC9085A4814E04E8C37FD6B05F7 ] storufs C:\WINDOWS\system32\drivers\storufs.sys
13:22:58.0795 0x3040 storufs - ok
13:22:58.0798 0x3040 [ 9D9DED47DA10E845EFF2DD57C94C809B, 520D0CE7A867051B80C8141E351FE5A5BCE3C99776093F234DB77D3407B1F104 ] storvsc C:\WINDOWS\system32\drivers\storvsc.sys
13:22:58.0805 0x3040 storvsc - ok
13:22:58.0808 0x3040 [ 224C92E442B1B8C20C274332F1ACF00D, CDE5DCFB7A21089464A6E2ABB29BBE08B184C3433C218756AA5902A8F67C0B2C ] svsvc C:\WINDOWS\system32\svsvc.dll
13:22:58.0819 0x3040 svsvc - ok
13:22:58.0822 0x3040 [ 505E0C40B5D0ADDCBB414640F59BD2E0, DF4B5E65FE6FF2224F298A2A2FAC9B648C082DFF8463148633647580A9FAD34D ] swenum C:\WINDOWS\System32\drivers\swenum.sys
13:22:58.0829 0x3040 swenum - ok
13:22:58.0838 0x3040 [ 2EE27411B5904C63D723BEA391819F58, C88C11D460E90398E16011B8A2CED5EE5626084F24790EA6115532F8F70060C6 ] swprv C:\WINDOWS\System32\swprv.dll
13:22:58.0859 0x3040 swprv - ok
13:22:58.0862 0x3040 [ 32F46FB0F290D16DAA452B289C985795, 73F88AAAA6026DB4C27F1D054145216DCC3F1960946FB2A7A90518DD1D5737CB ] Synth3dVsc C:\WINDOWS\System32\drivers\Synth3dVsc.sys
13:22:58.0873 0x3040 Synth3dVsc - ok
13:22:58.0890 0x3040 [ FED48B19D6F55D7A3AB498D85729D1BA, FA5E0E02BC2E2DE108C55991E3B063CC947072228B53539F42F922661510DE7C ] SysMain C:\WINDOWS\system32\sysmain.dll
13:22:58.0921 0x3040 SysMain - ok
13:22:58.0930 0x3040 [ D9FEA79BF6AF136F8E656AE045C2FEC8, E6F08A93348E035185F0F1C6B6277E636F4F25D1136E3ACCA63488DAEEC7114B ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll
13:22:58.0947 0x3040 SystemEventsBroker - ok
13:22:58.0953 0x3040 [ 86E7FD5C8DBEC1EB51C4368561402B75, 86EE61414CD5854E39E33F67BF5DA4377B569B3ED4D18882C470BC6784891DA1 ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
13:22:58.0965 0x3040 TabletInputService - ok
13:22:58.0968 0x3040 [ 3C32FF010F869BC184DF71290477384E, 55CFCEC7F026C6E2E96A2FBE846AB513BB12BB0348735274FE1B71AF019C837B ] tap0901 C:\WINDOWS\System32\drivers\tap0901.sys
13:22:58.0974 0x3040 tap0901 - ok
13:22:58.0981 0x3040 [ 3929C8FC134AC672C4F3F85160956257, CD3195CA58BA6F55EA0DDA2BE6AB58280AD1CA488D7AAA1539DD05FB99374F36 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
13:22:58.0997 0x3040 TapiSrv - ok
13:22:59.0035 0x3040 [ 2011413864620317C8F931219CAF09C3, 640B39A8F355145CFA8174A1767B7DFCCF6DDC6A03AE0D54E346D8EEA9039415 ] Tcpip C:\WINDOWS\system32\drivers\tcpip.sys
13:22:59.0084 0x3040 Tcpip - ok
13:22:59.0123 0x3040 [ 2011413864620317C8F931219CAF09C3, 640B39A8F355145CFA8174A1767B7DFCCF6DDC6A03AE0D54E346D8EEA9039415 ] Tcpip6 C:\WINDOWS\system32\drivers\tcpip.sys
13:22:59.0169 0x3040 Tcpip6 - ok
13:22:59.0175 0x3040 [ EC9450227A4C661513661F1F9C1F7DD6, 4DB122DECEA7C76BD20A6682958609A40CA2C9EDD236DFA19E9B31C57114DA3A ] tcpipreg C:\WINDOWS\system32\drivers\tcpipreg.sys
13:22:59.0187 0x3040 tcpipreg - ok
13:22:59.0192 0x3040 [ 0B237F8A96952BF95A14865030E131F2, 263089672218D3A768A6FC9D28DBEFE113D6757A9ECBAB4D364A62AC5DDA8AAE ] tdx C:\WINDOWS\system32\DRIVERS\tdx.sys
13:22:59.0201 0x3040 tdx - ok
13:22:59.0204 0x3040 [ 06130AFFECEB94525FC2352936576B70, 10EBE2C8FDC087D29E2FFB328F0F7905A5374AB8CC9FAE8699E7676DBC8CBF91 ] terminpt C:\WINDOWS\System32\drivers\terminpt.sys
13:22:59.0212 0x3040 terminpt - ok
13:22:59.0228 0x3040 [ FB68E5F02316C42BE7282DA492351C6F, AC31D841FEA58B776127E138DB20F8D48E26FD8C00CE2FA9695EA14EBF159A0A ] TermService C:\WINDOWS\System32\termsrv.dll
13:22:59.0259 0x3040 TermService - ok
13:22:59.0263 0x3040 [ 2AF438EC0D361A7BBB70E604A686602C, 4BE6A0461EB2CB94288614434A1CEC81C2ED46241721FD5BBD8ABE0680F7C804 ] Themes C:\WINDOWS\system32\themeservice.dll
13:22:59.0278 0x3040 Themes - ok
13:22:59.0284 0x3040 [ 1482B8ED5CACA87992A882B853B83CEE, 613247F0E362A109090E8563D977DECC50C64D45D6962905FA84A2D59329045C ] TieringEngineService C:\WINDOWS\system32\TieringEngineService.exe
13:22:59.0301 0x3040 TieringEngineService - ok
13:22:59.0312 0x3040 [ 3B3C607C3C62DFBEF61938DA2CAB94DF, E5EEA7F45A7BBFDF6F0003CD77E39958C451DD1B4B401876B5619A3C20F5C370 ] tiledatamodelsvc C:\WINDOWS\system32\tileobjserver.dll
13:22:59.0335 0x3040 tiledatamodelsvc - ok
13:22:59.0341 0x3040 [ C1F8CBE2D4843E0CCC3EFEA2EC60D4AB, 9D07527D982066922318C77AECE99280DE55034C375ACE145E827A6BEB5C3B70 ] TimeBrokerSvc C:\WINDOWS\System32\TimeBrokerServer.dll
13:22:59.0353 0x3040 TimeBrokerSvc - ok
13:22:59.0359 0x3040 [ 46171262D0E806779DEEDFCAB2F830CC, 7F4A4658B8BA217D99E5B5C0E01600C20DC96ECBCA32A5BA7FBE17D2A7B8BFD8 ] TPM C:\WINDOWS\System32\drivers\tpm.sys
13:22:59.0369 0x3040 TPM - ok
13:22:59.0373 0x3040 [ 3B91F35089240F6187AD681A5EC28BDE, 3D035CB73BC8E7831DCD0FB7D9DAD91CE51D3D0F9D9C8B866A0009BD508B6702 ] TrkWks C:\WINDOWS\System32\trkwks.dll
13:22:59.0386 0x3040 TrkWks - ok
13:22:59.0389 0x3040 [ 09440FA30C020B4443391FAFCF4876E3, 208C7725F70C75D8C96CCAF5B22F83B8B1C66D8C9FFF48465B1C9F4A77425569 ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe
13:22:59.0402 0x3040 TrustedInstaller - ok
13:22:59.0406 0x3040 [ A6F4025664C9D4BC2A9EDAB4092706D7, 89808A1679C0E716F86F06EE7701DCC289200894F0FA1F120DA2AC3A45FDB312 ] tsusbflt C:\WINDOWS\system32\drivers\TsUsbFlt.sys
13:22:59.0417 0x3040 tsusbflt - ok
13:22:59.0420 0x3040 [ 37A96AD493E110C0BF1EE0AC0F9E7DBD, F2A6894A4AEE18DF2B92222CDB0801A13AEEB7212071F0431430788339B30E23 ] TsUsbGD C:\WINDOWS\System32\drivers\TsUsbGD.sys
13:22:59.0429 0x3040 TsUsbGD - ok
13:22:59.0433 0x3040 [ 79E264287F17D56D768440B0270466DE, ABF9DC95C5E939B30BFD9BF9EDFDB3BD78A9DFCB055B945965303B6A60E6D7A7 ] tunnel C:\WINDOWS\System32\drivers\tunnel.sys
13:22:59.0447 0x3040 tunnel - ok
13:22:59.0451 0x3040 [ 13781908186770ABE9F8EBCC2B45B138, 4BEC8466254E0C6492CC55CE344A6173878CFA040238C6BE5842E5209F066DEE ] tzautoupdate C:\WINDOWS\system32\tzautoupdate.dll
13:22:59.0464 0x3040 tzautoupdate - ok
13:22:59.0468 0x3040 [ AA65954F512BA097DD190790876DD991, C1BB2B8F54F064D01190327B5E7949EBBDA21D6FC6F94D9FCD20F685C2F855FA ] UASPStor C:\WINDOWS\System32\drivers\uaspstor.sys
13:22:59.0478 0x3040 UASPStor - ok
13:22:59.0481 0x3040 [ AB6268022C3A5B529075A39C33904DA6, 2717F1704640201F2681711543EA39A74C3E89C7DB232EC5DD89FD8AA6F07846 ] UcmCx0101 C:\WINDOWS\system32\Drivers\UcmCx.sys
13:22:59.0493 0x3040 UcmCx0101 - ok
13:22:59.0497 0x3040 [ 7ED2EDA43D21C7A5F589A7960E265C52, 7DB8A595236FBB8A264D7AB155201357212855050ABB5B1036EF32F1223FDCC2 ] UcmTcpciCx0101 C:\WINDOWS\system32\Drivers\UcmTcpciCx.sys
13:22:59.0507 0x3040 UcmTcpciCx0101 - ok
13:22:59.0510 0x3040 [ 169351463039B45F5CDED9768879F712, 990C8C4AEF9ED7FF6BCEAE67F7BDAA037777B142B8D96A74F8715C941A5C63C6 ] UcmUcsi C:\WINDOWS\System32\drivers\UcmUcsi.sys
13:22:59.0519 0x3040 UcmUcsi - ok
13:22:59.0525 0x3040 [ 08A9E3AD29B215484FBB68CDC175DF3A, 3EFFF99C3BC4A1454E3D2B5177AE587ED3041AB4CE2A95BA7E28A2124E38E1E5 ] Ucx01000 C:\WINDOWS\system32\drivers\ucx01000.sys
13:22:59.0535 0x3040 Ucx01000 - ok
13:22:59.0538 0x3040 [ DA70AEE267491AA56BC63AA0C0C96CA2, 0A0AADB27607F9292BB3CE000CFDDB19BD4CA09EAAD926C4925CB43B17817AD9 ] UdeCx C:\WINDOWS\system32\drivers\udecx.sys
13:22:59.0549 0x3040 UdeCx - ok
13:22:59.0555 0x3040 [ FBC5ECF6D5A868D0B116C2DBB02B8168, 945AA76C60ABAD6075B5C8F9172C018F75BCF393A1CB8B329F5E68E664627775 ] udfs C:\WINDOWS\system32\DRIVERS\udfs.sys
13:22:59.0573 0x3040 udfs - ok
13:22:59.0576 0x3040 [ B918E40FAA9CD118CCA4AD388B748C98, 4B539B7B656F02C5E5BAEE52A677757B05CC11C5500D619850A564C28FAB8115 ] UEFI C:\WINDOWS\System32\drivers\UEFI.sys
13:22:59.0583 0x3040 UEFI - ok
13:22:59.0589 0x3040 [ 0FD75222C1AD2687AB365BEBEA400DD4, AD10DBCA59EB7D34FD8F963CE267F36774A9BC613F8D637903B12AC88C328E8A ] Ufx01000 C:\WINDOWS\system32\drivers\ufx01000.sys
13:22:59.0600 0x3040 Ufx01000 - ok
13:22:59.0603 0x3040 [ C1A78C53E01C641AE41BFA65797819F5, 0B9FE1BD724B3315199A1B1DA2F03255E4FE744DA3CE6CD0F77699A8E42E9359 ] UfxChipidea C:\WINDOWS\System32\drivers\UfxChipidea.sys
13:22:59.0612 0x3040 UfxChipidea - ok
13:22:59.0616 0x3040 [ 767307212110EBEFB93EC9A5BE9E85B9, 368797400FE54802CE74F34B773CE2AF09EB8DEA6C035B55419A52F0B5A6FAD0 ] ufxsynopsys C:\WINDOWS\System32\drivers\ufxsynopsys.sys
13:22:59.0625 0x3040 ufxsynopsys - ok
13:22:59.0630 0x3040 [ 8578F83EC5175920F2D8586FFF9DCE47, 049A16AC87F93E761150C8286633FFCA62EE85F5645DDE77D36BD0EB6481FF83 ] UI0Detect C:\WINDOWS\system32\UI0Detect.exe
13:22:59.0641 0x3040 UI0Detect - ok
13:22:59.0644 0x3040 [ DC460AAA18CA2342FBBFB2DF9B044472, 14D45E059C596AE97506D26705F248CA1C2269160B31A60341060E8A93146CBD ] umbus C:\WINDOWS\System32\drivers\umbus.sys
13:22:59.0654 0x3040 umbus - ok
13:22:59.0659 0x3040 [ C3CF0377917ECE6D65D7623E1E61568F, 4909695E04CBC86BFCFFBC15F332C367521054B7B4D3C141C7CA6B2E40E090B9 ] UmPass C:\WINDOWS\System32\drivers\umpass.sys
13:22:59.0668 0x3040 UmPass - ok
13:22:59.0675 0x3040 [ 640CF093C1CF16D5FD317616CA348F31, BEC34D1AACA83BF5A84CE01F6A668E3CA5A33C56A446DC42EFFF7C43D22E1AE6 ] UmRdpService C:\WINDOWS\System32\umrdp.dll
13:22:59.0690 0x3040 UmRdpService - ok
13:22:59.0711 0x3040 [ 4B956444AF2A352366CF59C3A4A87C64, B5FFAF5908DCF78DDA27EA1ABF2AFDD2BDD43FFC0259D847A7107B1597E22BD6 ] UnistoreSvc C:\WINDOWS\System32\unistore.dll
13:22:59.0744 0x3040 UnistoreSvc - ok
13:22:59.0755 0x3040 [ 6CDA3536F6BAB7896A57EAB7DC07F379, 8FBE6457ECD1ABB518D9800EBA8A017774FFAA8EABD2EDC0825181A12FE9AEF6 ] upnphost C:\WINDOWS\System32\upnphost.dll
13:22:59.0777 0x3040 upnphost - ok
13:22:59.0780 0x3040 [ 6B46FC140C9AF68E6E7697D66D59CB4D, F018B4784D65F1A8140A6EA69C35D6A7ECE01738694052FD54AFD2B81A8F2FF8 ] UrsChipidea C:\WINDOWS\System32\drivers\urschipidea.sys
13:22:59.0788 0x3040 UrsChipidea - ok
13:22:59.0791 0x3040 [ B4402E7F0923F660270442CE76877ABE, 1C2DD26EAB71F75EA576E8DAABAF71FD7DC3DF807CF025617C774CEF33C0B718 ] UrsCx01000 C:\WINDOWS\system32\drivers\urscx01000.sys
13:22:59.0798 0x3040 UrsCx01000 - ok
13:22:59.0801 0x3040 [ 9DD431F1B94789CFB527E5D19261F124, 8F5A249A97C5B14B282E3147DD21951D2AD34B651E762814C12F4C26D74EC70C ] UrsSynopsys C:\WINDOWS\System32\drivers\urssynopsys.sys
13:22:59.0808 0x3040 UrsSynopsys - ok
13:22:59.0813 0x3040 [ C87E32B90F085970D9637FBAD45EF6FE, C180EACD2EE479277DA5DBF39E43B428BD7945141B2451CB3946B0C1E495E76F ] usbccgp C:\WINDOWS\System32\drivers\usbccgp.sys
13:22:59.0822 0x3040 usbccgp - ok
13:22:59.0826 0x3040 [ 0B663856474AC41924D9E9112203858F, 9E09F2A6279B48CAC09F8C7AA1F1BE02864D540C2ED1460CBA9FABCF0A546A1E ] usbcir C:\WINDOWS\System32\drivers\usbcir.sys
13:22:59.0836 0x3040 usbcir - ok
13:22:59.0840 0x3040 [ F83D2250256203AC5DA5E8601C1AFDD7, AC0D90E2DB3051798B9D287CF3D0E92FED4000822E65A82775A29CF896B76F04 ] usbehci C:\WINDOWS\System32\drivers\usbehci.sys
13:22:59.0848 0x3040 usbehci - ok
13:22:59.0857 0x3040 [ 7FFD26742321919590ED77FCA556D65F, F7FAB63C36F8519F5A7B9091C507F3CB580C390322FAF9155CCE7F66C965B968 ] usbhub C:\WINDOWS\System32\drivers\usbhub.sys
13:22:59.0872 0x3040 usbhub - ok
13:22:59.0883 0x3040 [ 7A749B2863B5561BE34B39E8E249AD8F, E5B67DFAF5407007FD0CC408D6B4BA19DF59584819FC715E9F9E0FBF3EA00AAB ] USBHUB3 C:\WINDOWS\System32\drivers\UsbHub3.sys
13:22:59.0899 0x3040 USBHUB3 - ok
13:22:59.0902 0x3040 [ D2109F1F4FEBF1DAC415CDC5DE876479, C8A871EBD0E5EF004BA622A73DAC36C03608CD317FDCD0A6A98608DF4CC10D55 ] usbohci C:\WINDOWS\System32\drivers\usbohci.sys
13:22:59.0912 0x3040 usbohci - ok
13:22:59.0915 0x3040 [ 29C9572F2D061CFC3C0BD48A3163E343, 2527DCC9E6D421F5DC40051C787A5270EB077746785465C9AA2A2AEEF47307D5 ] usbprint C:\WINDOWS\System32\drivers\usbprint.sys
13:22:59.0926 0x3040 usbprint - ok
13:22:59.0930 0x3040 [ 429477D6DEF3321FF7D3EF23CAAADA00, BB7D2AFE99736AAFFA8B0B2DABF7D6A6D5CB9563B1DE6A7E86CE7DC9D27F31C0 ] usbser C:\WINDOWS\System32\drivers\usbser.sys
13:22:59.0943 0x3040 usbser - ok
13:22:59.0948 0x3040 [ 0CC16F7B91C57AE9A4E44425A295FDAA, 7CEE11955E5742DA390601F565412C14A7481B8747C495CCD246696C56B426DC ] USBSTOR C:\WINDOWS\System32\drivers\USBSTOR.SYS
13:22:59.0957 0x3040 USBSTOR - ok
13:22:59.0960 0x3040 [ C917D09064CDBD18F75ADC9B2C48F847, A7F6223346CCD7E84186CD0C0715014F8E3A4398298925A43290224678620D23 ] usbuhci C:\WINDOWS\System32\drivers\usbuhci.sys
13:22:59.0968 0x3040 usbuhci - ok
13:22:59.0977 0x3040 [ 95BCCEFBC40D06484CF16144FE79B8A5, 8ABA73C5FFEDD319FB96B807AD08716698E557522478DF1A2C5D662675636AE0 ] USBXHCI C:\WINDOWS\System32\drivers\USBXHCI.SYS
13:22:59.0989 0x3040 USBXHCI - ok
13:22:59.0993 0x3040 [ 836828E40B9EEFBC77B3032DB677555C, 8AC045B43086E800B03412895D4DBCF506D1B729791CF24EB2ECA3F0F1C9BDEB ] usb_rndisx C:\WINDOWS\System32\drivers\usb8023x.sys
13:23:00.0003 0x3040 usb_rndisx - ok
13:23:00.0027 0x3040 [ A39AFDD26E6F2E5595FF2D3997D7E1FE, 30DE54033DE437C16A069602529E63FF971AF0ABB383885E47B4DF5E0F8483AE ] UserDataSvc C:\WINDOWS\System32\userdataservice.dll
13:23:00.0068 0x3040 UserDataSvc - ok
13:23:00.0087 0x3040 [ AA24C61D88E36BA1144072227922173D, 2EBBC827E740F72EA2E75745E585378189BC0DEE91CACD7FA31BDBC5EFCF8733 ] UserManager C:\WINDOWS\System32\usermgr.dll
13:23:00.0119 0x3040 UserManager - ok
13:23:00.0130 0x3040 [ B6911F3CBA01ECC637B3891DFE5099DC, E3ECF7BE729E38C236716B4A4147A29CA7B2CD7CEC17AE50E18437E995D30781 ] UsoSvc C:\WINDOWS\system32\usocore.dll
13:23:00.0166 0x3040 UsoSvc - ok
13:23:00.0170 0x3040 [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] VaultSvc C:\WINDOWS\system32\lsass.exe
13:23:00.0178 0x3040 VaultSvc - ok
13:23:00.0181 0x3040 [ 0CBDE344FB48E42D78E29469F202ADBC, A1C3FBA5409DD3BBEAF1D3CE2583D6C8A621C0E4F534155EC540AFD67BC9E8CA ] vdrvroot C:\WINDOWS\system32\drivers\vdrvroot.sys
13:23:00.0189 0x3040 vdrvroot - ok
13:23:00.0200 0x3040 [ 2C5D96D0BB7EDEF9F2F8966A31007CCE, A8FB02E9E1B8ED5F2026534360C229DA7FC11BA209DE9C3222C65D0A9652FD3C ] vds C:\WINDOWS\System32\vds.exe
13:23:00.0225 0x3040 vds - ok
13:23:00.0230 0x3040 [ 723195568C8755CAD57F7933C5F2C5C2, 5C403799F67223605F825BC16D217C1EF5E1A0DDF00AC6380FE8976339B67D9B ] VerifierExt C:\WINDOWS\system32\drivers\VerifierExt.sys
13:23:00.0240 0x3040 VerifierExt - ok
13:23:00.0253 0x3040 [ 3BB8D153A9A514EC9FFCB586251A1925, 5E4B46511F9791699826DC63B35528544347166BDE9981FB93F1F7F2A09599C7 ] vhdmp C:\WINDOWS\System32\drivers\vhdmp.sys
13:23:00.0272 0x3040 vhdmp - ok
13:23:00.0275 0x3040 [ 7929228F0E8B0C2FA0495A17A4FC27F6, 1F1667B10A96B1D85ED165F62A5C0EF28C37F828B8280EA08BFCC1BAC03F2C90 ] vhf C:\WINDOWS\System32\drivers\vhf.sys
13:23:00.0284 0x3040 vhf - ok
13:23:00.0288 0x3040 [ AEE432ED868831B1F068E373598F6D93, BAE91F47B0CB94B826CA010B490AD924D7B715911DF3FCE62F9165F3B571105C ] vmbus C:\WINDOWS\system32\drivers\vmbus.sys
13:23:00.0296 0x3040 vmbus - ok
13:23:00.0299 0x3040 [ 9444B23FC694B5F90F21B0FC7F10D8DD, 86F92856F5C985DD8E5993B51E85E1F47EF8C9B2FB37468998C94266963BB4BD ] VMBusHID C:\WINDOWS\System32\drivers\VMBusHID.sys
13:23:00.0307 0x3040 VMBusHID - ok
13:23:00.0310 0x3040 [ 4D0287F566B36536DD812A54C015FC4A, 01D6508CA59CF04A47902B1F7C202FD14A81240E0B447588D919DD1072B040CF ] vmgid C:\WINDOWS\System32\drivers\vmgid.sys
13:23:00.0319 0x3040 vmgid - ok
13:23:00.0326 0x3040 [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicguestinterface C:\WINDOWS\System32\icsvc.dll
13:23:00.0344 0x3040 vmicguestinterface - ok
13:23:00.0350 0x3040 [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicheartbeat C:\WINDOWS\System32\icsvc.dll
13:23:00.0364 0x3040 vmicheartbeat - ok
13:23:00.0370 0x3040 [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmickvpexchange C:\WINDOWS\System32\icsvc.dll
13:23:00.0384 0x3040 vmickvpexchange - ok
13:23:00.0392 0x3040 [ F70DCCE72343449F0D12A0A92282B019, 3EFA99519387BE38C1CB482F1BFC9ED449BE9A5BD86883A1002725B8D4A5ECC1 ] vmicrdv C:\WINDOWS\System32\icsvcext.dll
13:23:00.0410 0x3040 vmicrdv - ok
13:23:00.0416 0x3040 [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicshutdown C:\WINDOWS\System32\icsvc.dll
13:23:00.0431 0x3040 vmicshutdown - ok
13:23:00.0437 0x3040 [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmictimesync C:\WINDOWS\System32\icsvc.dll
13:23:00.0451 0x3040 vmictimesync - ok
13:23:00.0458 0x3040 [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicvmsession C:\WINDOWS\System32\icsvc.dll
13:23:00.0472 0x3040 vmicvmsession - ok
13:23:00.0480 0x3040 [ F70DCCE72343449F0D12A0A92282B019, 3EFA99519387BE38C1CB482F1BFC9ED449BE9A5BD86883A1002725B8D4A5ECC1 ] vmicvss C:\WINDOWS\System32\icsvcext.dll
13:23:00.0495 0x3040 vmicvss - ok
13:23:00.0499 0x3040 [ 29075915F9BDC3437F8BED71C067D399, 2C7718080C11DFDD4C9A2085537F78F5633369B4A27D9C64168F0249594A4AA2 ] volmgr C:\WINDOWS\system32\drivers\volmgr.sys
13:23:00.0507 0x3040 volmgr - ok
13:23:00.0514 0x3040 [ 6BDB6CE6D2D9E3D3F28F1C97E12B62E2, 5E77D7AF858D7B90FF395F39B86D6F96413D1DDEA28BC9FB40C5524A4DF6DAD0 ] volmgrx C:\WINDOWS\system32\drivers\volmgrx.sys
13:23:00.0527 0x3040 volmgrx - ok
13:23:00.0535 0x3040 [ BF2546583BB75F01DDA60A7921DFB230, 579BD0BC55F4F03CD8D1FCDAC3975A1649C688820F2F7FC1AD354132D9E3BEE9 ] volsnap C:\WINDOWS\system32\drivers\volsnap.sys
13:23:00.0548 0x3040 volsnap - ok
13:23:00.0551 0x3040 [ AC2E20A74D09D24485BE8396CE04F07B, 23FCE8BEE01B89E5CDCA536D75DBA6DCE3E92E13178A66836CEB7829310A89D1 ] volume C:\WINDOWS\system32\drivers\volume.sys
13:23:00.0558 0x3040 volume - ok
13:23:00.0561 0x3040 [ 92F6E3E6D3F1795263EB34B37F74AEF7, 33AB1ECCA1216AF1995E1DB4F11E48156FF62391D7C176C8A4CC1037B9CB3A27 ] vpci C:\WINDOWS\System32\drivers\vpci.sys
13:23:00.0569 0x3040 vpci - ok
13:23:00.0572 0x3040 [ 0F42C39016F82F345C0F2DB2D5B90EB4, 2E957E72BB8D0293F61FA7385BA9400DF7759E1E3D35FE24F3877A6460988F4D ] vpnva C:\WINDOWS\system32\DRIVERS\vpnva64-6.sys
13:23:00.0578 0x3040 vpnva - ok
13:23:00.0583 0x3040 [ FD9BCB8920973CEAD4D49DC7A6D8A618, 34AB4A485FB40DF737600006D8323BE927FB0BDA2BC170F4C123BE775EAE7CC8 ] vsmraid C:\WINDOWS\system32\drivers\vsmraid.sys
13:23:00.0593 0x3040 vsmraid - ok
13:23:00.0616 0x3040 [ 6DBB20053A67EFE5D8114CE93D12BEB3, B48997FADA4A600FEBFE36B249684E9CAF01570BAD36ED1FC9DA99F2D100638E ] VSS C:\WINDOWS\system32\vssvc.exe
13:23:00.0656 0x3040 VSS - ok
13:23:00.0665 0x3040 [ 0C111F220798CCE80484026E06822379, B98A5E44D3ABA67E6DE99E18BF3C2C606923E6269E262665C721F672ACBBED2A ] VSTXRAID C:\WINDOWS\system32\drivers\vstxraid.sys
13:23:00.0677 0x3040 VSTXRAID - ok
13:23:00.0680 0x3040 [ 607639716E9DB1CEF4E18B5B229293B4, 1D997177093F907EFE8A04AD10443BB9C355C0D7657DBD449E7EE7FCABC3ECBC ] vwifibus C:\WINDOWS\System32\drivers\vwifibus.sys
13:23:00.0691 0x3040 vwifibus - ok
13:23:00.0694 0x3040 [ B1ED64E628763148BF84FBE23F2AD711, 6182A39675E6049BC3DD353694720795A8E3D0331509AA8ABA4883D5C569AD5E ] vwififlt C:\WINDOWS\system32\drivers\vwififlt.sys
13:23:00.0703 0x3040 vwififlt - ok
13:23:00.0713 0x3040 [ 76C1CC611352499326001F25A3ED15F8, 228BFA8A01BB1B3868576D509A2EA6F3D37FEDC8F12D4DC4E0A84CE926C6D1B1 ] W32Time C:\WINDOWS\system32\w32time.dll
13:23:00.0736 0x3040 W32Time - ok
13:23:00.0741 0x3040 [ 4053FB949F48647A327BC18DFEEA4374, 52511C35854A673ADCD9084FEF9BC6A339BCA0290374B81140A371D67B13A8FB ] w3logsvc C:\WINDOWS\system32\inetsrv\w3logsvc.dll
13:23:00.0752 0x3040 w3logsvc - ok
13:23:00.0762 0x3040 [ 85461F6AD65CCE84A7BC6D9F2A5861B3, 0C9A662F1BADF429B1DF62E91F4626DE996F84945D3A42D26A0FA09EC15CC9D7 ] W3SVC C:\WINDOWS\system32\inetsrv\iisw3adm.dll
13:23:00.0782 0x3040 W3SVC - ok
13:23:00.0786 0x3040 [ 55D00B785A7587F4263D125817871283, B92400B229099C1E243F2B149881A1423A2E9C8CA2D77D868B9B923BFDEC7FF2 ] WacomPen C:\WINDOWS\System32\drivers\wacompen.sys
13:23:00.0794 0x3040 WacomPen - ok
13:23:00.0803 0x3040 [ 1483BE4D0135C378CB61D3CD73AB3E03, B7309C9E4F370860C507BF52D17234CDF4A7FAE95D2D822714E07EF5DEC0249B ] WalletService C:\WINDOWS\system32\WalletService.dll
13:23:00.0823 0x3040 WalletService - ok
13:23:00.0826 0x3040 [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
13:23:00.0840 0x3040 wanarp - ok
13:23:00.0843 0x3040 [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarpv6 C:\WINDOWS\system32\DRIVERS\wanarp.sys
13:23:00.0856 0x3040 wanarpv6 - ok
13:23:00.0867 0x3040 [ 85461F6AD65CCE84A7BC6D9F2A5861B3, 0C9A662F1BADF429B1DF62E91F4626DE996F84945D3A42D26A0FA09EC15CC9D7 ] WAS C:\WINDOWS\system32\inetsrv\iisw3adm.dll
13:23:00.0887 0x3040 WAS - ok
13:23:00.0911 0x3040 [ 68CC5E83B6F220F5BD7B5BC394917505, 24A793E1293608D1D1DB9396627DBF5FE66C9EFD1D49CCCD832CF1762B4E0E7D ] wbengine C:\WINDOWS\system32\wbengine.exe
13:23:00.0954 0x3040 wbengine - ok
13:23:00.0970 0x3040 [ 8C521D161445C3E1F38A494E7649E70D, F00990B2FE1FB52C74A2057E6480C5EBF2BDBC32955CC03C6B63360F20A49A18 ] WbioSrvc C:\WINDOWS\System32\wbiosrvc.dll
13:23:00.0999 0x3040 WbioSrvc - ok
13:23:01.0003 0x3040 [ E330144B97D493AA886000DCAAA8DAF5, ED86F46F5A76FD8F06CA98BD61B174ADB9AD4B065394356872708DF8B614E4F9 ] wcifs C:\WINDOWS\system32\drivers\wcifs.sys
13:23:01.0012 0x3040 wcifs - ok
13:23:01.0025 0x3040 [ CA10C91D802ABE6E5136E2168C2CD2B4, 5979FF9ED783ED3154257ED0507C7BBAF8C77C081CC30AE835EA8AF7508AAD08 ] Wcmsvc C:\WINDOWS\System32\wcmsvc.dll
13:23:01.0050 0x3040 Wcmsvc - ok
13:23:01.0060 0x3040 [ D50645235A507B0546B1B5CF7D0B8849, 19F5FE10C953B8EE8EEDA9A9F7F2E97AA193BB085E7FC364066686089ADD1C9F ] wcncsvc C:\WINDOWS\System32\wcncsvc.dll
13:23:01.0082 0x3040 wcncsvc - ok
13:23:01.0085 0x3040 [ AEA1093B751339267D8C8C1EF3D669CF, 8F3325E7FB16BD856A0593C36F2E3E018909038C52CD5F92E116E0C1366F31CB ] wcnfs C:\WINDOWS\system32\drivers\wcnfs.sys
13:23:01.0095 0x3040 wcnfs - ok
13:23:01.0098 0x3040 [ D520B1B849B6D4D707AB31722B952C2D, 149BABB7BD63C1F212ADD9306C84FFB2A5CE6DC435BD3213EAB787E9B222C61F ] WdBoot C:\WINDOWS\system32\drivers\WdBoot.sys
13:23:01.0106 0x3040 WdBoot - ok
13:23:01.0120 0x3040 [ 5030C76047D756263093A47B82970868, E772F15973F6DE36851DD230F1F4190746CD81CA1E7284DC074711C4BF45CAF0 ] Wdf01000 C:\WINDOWS\system32\drivers\Wdf01000.sys
13:23:01.0139 0x3040 Wdf01000 - ok
13:23:01.0146 0x3040 [ 29FF9199EDEB4F5470BB134D1A2563D2, 94713F98A6EA6042203D5DD0DE6758F5F0F331F7D4BB05E91EF20CEEEBD6780F ] WdFilter C:\WINDOWS\system32\drivers\WdFilter.sys
13:23:01.0157 0x3040 WdFilter - ok
13:23:01.0161 0x3040 [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiServiceHost C:\WINDOWS\system32\wdi.dll
13:23:01.0182 0x3040 WdiServiceHost - ok
13:23:01.0185 0x3040 [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiSystemHost C:\WINDOWS\system32\wdi.dll
13:23:01.0197 0x3040 WdiSystemHost - ok
13:23:01.0209 0x3040 [ EDC08B8D3E67F96688774841C247B82A, DB5AFAF87C74431B8EB5420DBF5428691F291B63C2FDE8282EE2E399C76F63F3 ] wdiwifi C:\WINDOWS\system32\DRIVERS\wdiwifi.sys
13:23:01.0232 0x3040 wdiwifi - ok
13:23:01.0237 0x3040 [ 17CF416CFF408190F5A4CBD79AB12E55, E376C8865C7EA633AE20D2CF940E4C7584AC783BAAF7941780FB6C4C84802F33 ] WdNisDrv C:\WINDOWS\system32\Drivers\WdNisDrv.sys
13:23:01.0246 0x3040 WdNisDrv - ok
13:23:01.0248 0x3040 WdNisSvc - ok
13:23:01.0254 0x3040 [ 3570C4E14F85CE0B537D126727ACA91C, A474C9E6B6E4E5945C63367C1D3D24D4782C4A4FEB00FAE15DFED099D8283078 ] WebClient C:\WINDOWS\System32\webclnt.dll
13:23:01.0270 0x3040 WebClient - ok
13:23:01.0275 0x3040 [ 1785F9C96A0BDEC1F6E0C79EF412F342, D6D4EDA69457BEDDA69C2F60FC4C2FAC97D46CD8E9C1804CCD68F169383583E3 ] Wecsvc C:\WINDOWS\system32\wecsvc.dll
13:23:01.0293 0x3040 Wecsvc - ok
13:23:01.0296 0x3040 [ B9175D63527B05131F2FA504CF0265F2, 1E43A17788F1B6A29E2889C81E0BE100D64BD3A9DEE7C154D9581F01D2D7D05F ] WEPHOSTSVC C:\WINDOWS\system32\wephostsvc.dll
13:23:01.0307 0x3040 WEPHOSTSVC - ok
13:23:01.0310 0x3040 [ 5C58EC0C9D4DE04DCDE56F6DCEA62080, 8ED386EDF4C39C339CE0BB2AC7E199C38705E5A6B3F56A4987B9A8ABD19BB59F ] wercplsupport C:\WINDOWS\System32\wercplsupport.dll
13:23:01.0323 0x3040 wercplsupport - ok
13:23:01.0328 0x3040 [ F899B355CC95AF26AB36E84E8A0DD685, C400F2F80FFF6473FEF066943C4A2AFF0FFE988A4F755757A2E5005C2A10DAD8 ] WerSvc C:\WINDOWS\System32\WerSvc.dll
13:23:01.0342 0x3040 WerSvc - ok
13:23:01.0346 0x3040 [ E1785942AC51FEE6826CDF02075C5AA9, 56FE7017684086F4F9C3A2C0D3AC00369BA0938BA3987EEBEE9A75B8E3CA0AE1 ] WFPLWFS C:\WINDOWS\system32\drivers\wfplwfs.sys
13:23:01.0356 0x3040 WFPLWFS - ok
13:23:01.0360 0x3040 [ B154618505A6A9026EFA6AB8C4123BF1, 713648D71AA027B4472E7E75B942630DBE7383687984B02A5E99C9E4192C95EB ] WiaRpc C:\WINDOWS\System32\wiarpc.dll
13:23:01.0371 0x3040 WiaRpc - ok
13:23:01.0374 0x3040 [ 0CF79A0EACFFBB75A50A469A27696D02, E112BF7B5A8D0B0AD2EA0E7B9FD4E8CFEC9371C8E94A60248292D688AFE715C4 ] WIMMount C:\WINDOWS\system32\drivers\wimmount.sys
13:23:01.0383 0x3040 WIMMount - ok
13:23:01.0384 0x3040 WinDefend - ok
13:23:01.0391 0x3040 [ 0DE131733317EB4BE67028366B0CAAC6, AC7DADBF03A3752B4D33CA19F03DBCEDD6F56893C2DA25C98B0AB07063D990E3 ] WindowsTrustedRT C:\WINDOWS\system32\drivers\WindowsTrustedRT.sys
13:23:01.0399 0x3040 WindowsTrustedRT - ok
13:23:01.0402 0x3040 [ 92EB5D38BDF10C790450F3E46BF93A0E, 0FC027398DBD43EDC1F7D703C0B6DB20294DF34E67C9288442039B1A5663CE1B ] WindowsTrustedRTProxy C:\WINDOWS\system32\drivers\WindowsTrustedRTProxy.sys
13:23:01.0409 0x3040 WindowsTrustedRTProxy - ok
13:23:01.0424 0x3040 [ 4AB1AC1E60118443A14C241F91AC8FC9, 2B9237AC124874664E31B4F313BAAF8059BD0749653496784B4B89B4B7F66784 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll
13:23:01.0450 0x3040 WinHttpAutoProxySvc - ok
13:23:01.0454 0x3040 [ F95DE20312ACCA7761446DE152BD1F7C, F6C5ACA500C2182437F4A7402BD81C3A2B77C0BBD78BA31FB574DC1997FCBFE6 ] WinMad C:\WINDOWS\System32\drivers\winmad.sys
13:23:01.0461 0x3040 WinMad - ok
13:23:01.0471 0x3040 [ CD49CA8E3280ACEEC5ECF431A59F5EFD, 75F48EFC6DEE9E06B490703EE47602AFDEA51505285B02D2CF884601E71857CC ] Winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
13:23:01.0486 0x3040 Winmgmt - ok
13:23:01.0526 0x3040 [ B8C0D620219ECAA23A2AC841EAF454D1, FB527C4D36929D7FAE2A837727C557B7823A72069EBCAB7D16C49E8B21E8D952 ] WinRM C:\WINDOWS\system32\WsmSvc.dll
13:23:01.0596 0x3040 WinRM - ok
13:23:01.0605 0x3040 [ 4EFB346BFDAEEB29316AA52BBB9852B1, 4BC5554F44BD9549D0A929D77BD410FA3EB502A7D0170303D369268672505494 ] WINUSB C:\WINDOWS\System32\drivers\WinUSB.SYS
13:23:01.0615 0x3040 WINUSB - ok
13:23:01.0618 0x3040 [ 8B9AFF5F08E66A6F1F1063DEC9457FB6, 98F2AF6988D125521FD34CAA48B9652922F0C8ECFAE9B0C1DF4B3CE6B9CF500F ] WinVerbs C:\WINDOWS\System32\drivers\winverbs.sys
13:23:01.0626 0x3040 WinVerbs - ok
13:23:01.0638 0x3040 [ 78EA65739A50969CD5FC2E71B9B7697A, C442BE91CE5D4F301368915CFBE055233DD1FB8BDBEBD51CD00DC2C7770C8EE3 ] wisvc C:\WINDOWS\system32\flightsettings.dll
13:23:01.0669 0x3040 wisvc - ok
13:23:01.0706 0x3040 [ 5A7AA8198156DC2BFF9F064E29D11AF5, 9CBAF1B99B54CDE087E0FC0A2601B3F056F81F2F5AF63B5BB71C7389247E496A ] WlanSvc C:\WINDOWS\System32\wlansvc.dll
13:23:01.0765 0x3040 WlanSvc - ok
13:23:01.0798 0x3040 [ E15711970C5BE05E8D70B294D0AFF621, 30670CFC4DA57B4A3E0E895E4111100D847BB8041A258A303524CD96DC566482 ] wlidsvc C:\WINDOWS\system32\wlidsvc.dll
13:23:01.0853 0x3040 wlidsvc - ok
13:23:01.0858 0x3040 [ 6F4F4F5A007D1710BD76FB311DA97C07, FC0FEA4364F6BA4E31DBC82735D09D429CA3BE9AFCFF5D5E1263D8B27FC2CE3E ] WmiAcpi C:\WINDOWS\System32\drivers\wmiacpi.sys
13:23:01.0866 0x3040 WmiAcpi - ok
13:23:01.0873 0x3040 [ 3CDDFF6CAD962C5EF1C52FD667C358B6, F6F09145E9461EB17172988D26749FCF36920A1A683459334D04A6D072B31A92 ] wmiApSrv C:\WINDOWS\system32\wbem\WmiApSrv.exe
13:23:01.0885 0x3040 wmiApSrv - ok
13:23:01.0887 0x3040 WMPNetworkSvc - ok
13:23:01.0893 0x3040 [ 43C8D087B31C592163B33A4BDA540E40, 3A6C4E5E56931B29321DCC723585F2F0E804EF4DCDEAB2A8687F30FC3AE70E43 ] Wof C:\WINDOWS\system32\drivers\Wof.sys
13:23:01.0903 0x3040 Wof - ok
13:23:01.0933 0x3040 [ 5820CC51AB1C368F29ECCA713397D006, AA0CC2BC4DF7DBFB144FF47C3508BEEF00467C9D312C135AFB3406E42C6CD821 ] workfolderssvc C:\WINDOWS\system32\workfolderssvc.dll
13:23:01.0982 0x3040 workfolderssvc - ok
13:23:01.0987 0x3040 [ F02930EB91596042F2221397D60AFCE5, 10E2AB0993B67CBAA9E11C68280608965064EC9F7E0C570F5B453FACADB8AB5D ] WPDBusEnum C:\WINDOWS\system32\wpdbusenum.dll
13:23:02.0349 0x3040 WPDBusEnum - ok
13:23:02.0361 0x3040 [ 75A9284F01FE7CB1A7D5EAE5C1EB4F33, 390EF23AEA06D8711555F7979FF8BE0620B53C1A551638C4EC6FB7C6678965B3 ] WpdUpFltr C:\WINDOWS\system32\drivers\WpdUpFltr.sys
13:23:02.0377 0x3040 WpdUpFltr - ok
13:23:02.0388 0x3040 [ 60E2EB3E7B7F15C25E02462159F90707, D8344B529EEC0D4922CAC3E6897CC9F191ACF1376017BE38ED6BF6019F1ED181 ] WpnService C:\WINDOWS\system32\WpnService.dll
13:23:02.0407 0x3040 WpnService - ok
13:23:02.0411 0x3040 [ C7C91FB86A3C6CD7619725A88ED1884C, 132C43C518F37BF303D768BD5FB0AB835F693C43FE693937D804A34E940D770F ] WpnUserService C:\WINDOWS\System32\WpnUserService.dll
13:23:02.0422 0x3040 WpnUserService - ok
13:23:02.0426 0x3040 [ 36D7B73ADC3E10607ED6EC874AFB5D1E, 1737B3E4D2CA76BB27903BF460E4960E6A0BC32D35069AC7C5E4B07F625F3282 ] ws2ifsl C:\WINDOWS\system32\drivers\ws2ifsl.sys
13:23:02.0436 0x3040 ws2ifsl - ok
13:23:02.0441 0x3040 [ 9A0E0B836413EB0BC885532D2A5389D6, AFEE4A0578D5581E4D72999A33C0DEA6253BD891F611AFF9AFDE4160A60105F3 ] wscsvc C:\WINDOWS\System32\wscsvc.dll
13:23:02.0456 0x3040 wscsvc - ok
13:23:02.0459 0x3040 [ 696EC2EAA2A42A137CCBB9A84D6917C0, 424089F4F373962AF8357C5D4D43F35948989BE3F58EAD3690F565F4C1BBC66F ] WSDPrintDevice C:\WINDOWS\System32\drivers\WSDPrint.sys
13:23:02.0467 0x3040 WSDPrintDevice - ok
13:23:02.0470 0x3040 [ 46E4A69825A7554A5DB784A55F8AD203, 7F347054FCDD5DEF93083D420E56EBE5EEBBAE2BD2FED9B2E75E85149DE52780 ] WSDScan C:\WINDOWS\system32\DRIVERS\WSDScan.sys
13:23:02.0479 0x3040 WSDScan - ok
13:23:02.0481 0x3040 WSearch - ok
13:23:02.0518 0x3040 [ 10C4A0CDACAD054C90288D718615B4BA, 76CD5BF3B97DC306B17AB65E1CD841180C6FD147F2CC9EE6A757C27E3AB2D231 ] wuauserv C:\WINDOWS\system32\wuaueng.dll
13:23:02.0587 0x3040 wuauserv - ok
13:23:02.0593 0x3040 [ AED7FE551E8672B824A56324076183EB, FFE543AAEFDEFFE6B20C244DB141A9425BDA88ED36F4870F0B70FEC433BDF0C1 ] WudfPf C:\WINDOWS\system32\drivers\WudfPf.sys
13:23:02.0604 0x3040 WudfPf - ok
13:23:02.0609 0x3040 [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFRd C:\WINDOWS\system32\drivers\WudfRd.sys
13:23:02.0622 0x3040 WUDFRd - ok
13:23:02.0627 0x3040 [ 47F6450F28BAA32B2AB0D6BE00996249, C8A47D6ADF89AD613AB685C6224B9099DCEFDCD8ABCF703542AFDC356404116E ] wudfsvc C:\WINDOWS\System32\WUDFSvc.dll
13:23:02.0638 0x3040 wudfsvc - ok
13:23:02.0644 0x3040 [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFWpdFs C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
13:23:02.0656 0x3040 WUDFWpdFs - ok
13:23:02.0661 0x3040 [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFWpdMtp C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
13:23:02.0673 0x3040 WUDFWpdMtp - ok
13:23:02.0694 0x3040 [ D313FF382A26D1295B212A66EE3E52A8, 59FEF2AF611507BCB6FE036A7D4F1595F3449B76F9B055CDC67DC1BE1D90EEB8 ] WwanSvc C:\WINDOWS\System32\wwansvc.dll
13:23:02.0732 0x3040 WwanSvc - ok
13:23:02.0750 0x3040 [ 7EF75102A793AAA6AAA45A4F7C15FF4D, A3FB68905F3E3A7DE52B85FAD966ABCB787FAC7E709964CE9BF2A4F9AC8B0653 ] XblAuthManager C:\WINDOWS\System32\XblAuthManager.dll
13:23:02.0781 0x3040 XblAuthManager - ok
13:23:02.0802 0x3040 [ 765FF96467A26C4C03281ECA426EC2D9, 2526B03C518D72F429C29BA4D4F11707AF277BF71520A1A92238A932950AE161 ] XblGameSave C:\WINDOWS\System32\XblGameSave.dll
13:23:02.0838 0x3040 XblGameSave - ok
13:23:02.0845 0x3040 [ DB77764B46D02DCB9777D9E00A3F7D63, 469491E3A57FBB0CB0482A2493823B57410E24A5BD4C1C96D79FE9888F7827BB ] xboxgip C:\WINDOWS\System32\drivers\xboxgip.sys
13:23:02.0860 0x3040 xboxgip - ok
13:23:02.0877 0x3040 [ 1A8D9EA4DD1A3E276B85EDB05B42BEC7, 23FC10AC29BDF917AEDB3AAF82537EC2C72453E52B41836FD83643054FA4F0BE ] XboxNetApiSvc C:\WINDOWS\system32\XboxNetApiSvc.dll
13:23:02.0910 0x3040 XboxNetApiSvc - ok
13:23:02.0915 0x3040 [ 63088A3361D9A308F328F11E9099DD87, E03FDB932FC57F199C8F8A8EADA338BDF7D2F9C6CB8FAB679A92B48B1E5AFE8A ] xinputhid C:\WINDOWS\System32\drivers\xinputhid.sys
13:23:02.0923 0x3040 xinputhid - ok
13:23:02.0928 0x3040 [ 80D89A9C089F1FADCDFD3C593B67E9EF, 88E0C708C0BFCC140AD7763F6BE586EFEF1CADDDAD7850A4065AF6507CD7A672 ] xusb22 C:\WINDOWS\System32\drivers\xusb22.sys
13:23:02.0940 0x3040 xusb22 - ok
13:23:02.0941 0x3040 ================ Scan global ===============================
13:23:02.0944 0x3040 [ 0C710DB449712EE13ACE733695DB7780, BBC7875B38D318CE4E88979D083AC72E8993254A466A8A6882DDE9E0C3B687A3 ] C:\WINDOWS\system32\basesrv.dll
13:23:02.0949 0x3040 [ 1429740F64D4B84EC4F81C07F21EB3C6, CAD89934800F011736BB964126EFB75169B64AD6349859C3009F35C13371C44D ] C:\WINDOWS\system32\winsrv.dll
13:23:02.0955 0x3040 [ 1EE06E957B0B2CA52D26DA7861E160EF, 4B743A1C7010138F5F6684BBCF7CAD6FD05F49920BDD3FDB776347AA6B44AB94 ] C:\WINDOWS\system32\sxssrv.dll
13:23:02.0964 0x3040 [ 3C69CC28665854F1AAB4B4005005FA31, 2750F5ECCD448C07E3402AA64EA625D27C6BC1D000A3FFE57C03D62428BB46C4 ] C:\WINDOWS\system32\services.exe
13:23:02.0970 0x3040 [ Global ] - ok
13:23:02.0970 0x3040 ================ Scan MBR ==================================
13:23:02.0971 0x3040 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
13:23:03.0083 0x3040 \Device\Harddisk0\DR0 - ok
13:23:03.0090 0x3040 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
13:23:03.0122 0x3040 \Device\Harddisk1\DR1 - ok
13:23:03.0429 0x3040 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk3\DR3
13:23:03.0526 0x3040 \Device\Harddisk3\DR3 - ok
13:23:03.0527 0x3040 ================ Scan VBR ==================================
13:23:03.0532 0x3040 [ 1E2F45C9B0DA8DC01A959E217FD59CD8 ] \Device\Harddisk0\DR0\Partition1
13:23:03.0535 0x3040 \Device\Harddisk0\DR0\Partition1 - ok
13:23:03.0540 0x3040 [ B244F314F06281C047B521D92BA14696 ] \Device\Harddisk0\DR0\Partition2
13:23:03.0543 0x3040 \Device\Harddisk0\DR0\Partition2 - ok
13:23:03.0548 0x3040 [ 57F6D4FD6D165F9B97B188CB9361F03D ] \Device\Harddisk1\DR1\Partition1
13:23:03.0552 0x3040 \Device\Harddisk1\DR1\Partition1 - ok
13:23:03.0557 0x3040 [ 02D76FEC0638AD86D9520FDF63F8DFB1 ] \Device\Harddisk3\DR3\Partition1
13:23:03.0560 0x3040 \Device\Harddisk3\DR3\Partition1 - ok
13:23:03.0561 0x3040 ================ Scan generic autorun ======================
13:23:03.0710 0x3040 [ FEFB41BB37B9C41F8AD9CB07533C43EF, E7D78E186E6C1FCD144ABA986EEDB06FB700D9A5C4666A090DE6CF48B748855D ] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
13:23:03.0815 0x3040 RTHDVCPL - ok
13:23:03.0833 0x3040 [ ED43758BF94B8A5221D69F1B7F63F13D, F6E7418823E45085F4D4F50DD25A55ED517C0A335C6C2F69A1139B30677D3DA9 ] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
13:23:03.0849 0x3040 XboxStat - ok
13:23:03.0851 0x3040 USB3MON - ok
13:23:03.0855 0x3040 [ 1DF3DCE54EDF5E85D15BA381ED98FAC3, 91CDEC8ADD48A40AB4D4E49B5AF0CEB01AA7A063B6C2103E16038D46C417868F ] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe
13:23:03.0861 0x3040 ControlCenter4 - detected UnsignedFile.Multi.Generic ( 1 )
13:23:04.0061 0x3040 Detect skipped due to KSN trusted
13:23:04.0061 0x3040 ControlCenter4 - ok
13:23:04.0146 0x3040 [ 63E9C23A386FFFA84B5E03BFF9B628F0, A370962791EFC4B10548AAD31F89A2B288FBD5BDBF5749323C2D98C14DFB8B49 ] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
13:23:04.0215 0x3040 BrStsMon00 - detected UnsignedFile.Multi.Generic ( 1 )
13:23:04.0404 0x3040 Detect skipped due to KSN trusted
13:23:04.0404 0x3040 BrStsMon00 - ok
13:23:04.0435 0x3040 [ F8CF642281FD012EB0631645A09FC4A1, B94E800CAAE16F8F8521664FD3D2E66C7D99AC3755D269EA60EBFA321BC2D451 ] C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe
13:23:04.0461 0x3040 CheckNDISPort54ac04 - ok
13:23:04.0471 0x3040 [ 5ABC6113AB85DFE1D40C643064B9B2E4, 12F6336A2E0FF8714FB4C93D0C0023D25A6C5C71F0F4289E0B45AC6A5ADA4A06 ] C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe
13:23:04.0481 0x3040 CancelAutoPlay_df - ok
13:23:04.0486 0x3040 [ 1A0E9F4E16BD62779CECA24110804DEB, A18065DF92B8CD34637D3D6D791E07EF053F5BEFEFFCDE00ACA5BD429028E6EF ] C:\Program Files (x86)\PDF24\pdf24.exe
13:23:04.0494 0x3040 PDFPrint - ok
13:23:04.0503 0x3040 [ 9CE467BFF974344FB989F83D600B0A80, 40AEBDFEB9380ED5F3A6995F108C9D8D3D1433778C835B75FAE3B1A3534794DF ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
13:23:04.0515 0x3040 SunJavaUpdateSched - ok
13:23:04.0575 0x3040 [ 0EB54CE79A43ECFF46B6DAF7743E56F1, 9F06EFCC5B364463716616F28C52731A92BE4E0DD4D6202D6DAAAED2367FD850 ] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
13:23:04.0638 0x3040 SDTray - ok
13:23:04.0805 0x3040 [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
13:23:04.0929 0x3040 OneDriveSetup - ok
13:23:05.0087 0x3040 [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
13:23:05.0211 0x3040 OneDriveSetup - ok
13:23:05.0228 0x3040 [ 614FEE71F590258B37787E264CD52013, 61B401518CB92F43D76DE72C928005A7E3233FF26406E073313BA0753CF4C31E ] C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
13:23:05.0239 0x3040 Octoshape Streaming Services - ok
13:23:05.0264 0x3040 [ EE2826CAAF139688445D93C7C6613EE3, A343D94D748F8A2C06EA45566ECCCE1FCDC7660E0A2DBFF92E9741904FE0D559 ] C:\Users\Lasse\AppData\Local\Microsoft\OneDrive\OneDrive.exe
13:23:05.0292 0x3040 OneDrive - ok
13:23:05.0615 0x3040 [ 1BE084E0E6E7B2E826F6B2A85909688B, 026BF182F148F4E994F8ABB06002D141007B80E58F23DBCDCA397EFC4D0F7D0E ] C:\Users\Lasse\AppData\Roaming\Spotify\Spotify.exe
13:23:05.0907 0x3040 Spotify - ok
13:23:05.0932 0x3040 [ DCE78713EC70B718AB6BB44A0385D903, EB7ABD0EBF7F4D1BBBA5EDF0DCDDAA3288AA9BA01F5527815B83FCB58BB662D9 ] C:\Users\Lasse\AppData\Roaming\Spotify\SpotifyWebHelper.exe
13:23:05.0948 0x3040 Spotify Web Helper - ok
13:23:06.0072 0x3040 [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
13:23:06.0197 0x3040 OneDriveSetup - ok
13:23:06.0211 0x3040 [ 2781E6EF593909A8B73FE1AD397F778A, E892D6C57F8903E20129E75A9B877690229280FD8106B5C7F96173175EA1AC4E ] C:\Program Files (x86)\Windows Mail\wab.exe
13:23:06.0233 0x3040 WAB Migrate - ok
13:23:06.0377 0x3040 [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
13:23:06.0500 0x3040 OneDriveSetup - ok
13:23:06.0514 0x3040 [ 2781E6EF593909A8B73FE1AD397F778A, E892D6C57F8903E20129E75A9B877690229280FD8106B5C7F96173175EA1AC4E ] C:\Program Files (x86)\Windows Mail\wab.exe
13:23:06.0532 0x3040 WAB Migrate - ok
13:23:06.0537 0x3040 Waiting for KSN requests completion. In queue: 257
13:23:07.0571 0x3040 AV detected via SS2: Kaspersky Internet Security, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\wmiav.exe ( 17.0.0.817 ), 0x41000 ( enabled : updated )
13:23:07.0574 0x3040 AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x60100 ( disabled : updated )
13:23:07.0577 0x3040 FW detected via SS2: Kaspersky Internet Security, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\wmiav.exe ( 17.0.0.817 ), 0x41010 ( enabled )
13:23:07.0729 0x3040 ============================================================
13:23:07.0729 0x3040 Scan finished
13:23:07.0729 0x3040 ============================================================
13:23:07.0749 0x32d0 Detected object count: 0
13:23:07.0749 0x32d0 Actual detected object count: 0
|
|
08.10.2017, 19:37
| #5 |
| Ruhe in Frieden † 2019 | Vermutlich infiziertes Dokument geöffnet - mehrere Stunden kein Zugriff auf E-Mail Accounts Hallo, gut.  Nichts gefunden.Was ist mit den Passwörtern? Schritt 1 Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 2 Downloade Dir bitte  Malwarebytes Anti-Malware
Schritt 3Starte noch einmal FRST.
|
|
08.10.2017, 20:17
| #6 |
| | Vermutlich infiziertes Dokument geöffnet - mehrere Stunden kein Zugriff auf E-Mail AccountsCode:
ATTFilter # AdwCleaner 7.0.3.1 - Logfile created on Sun Oct 08 18:57:21 2017
# Updated on 2017/29/09 by Malwarebytes
# Database: 10-04-2017.1
# Running on Windows 10 Home (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
No malicious folders found.
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
No malicious registry entries found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries.
*************************
C:/AdwCleaner/AdwCleaner[C0].txt - [2588 B] - [2017/10/4 22:18:28]
C:/AdwCleaner/AdwCleaner[S0].txt - [2636 B] - [2017/10/4 22:14:20]
C:/AdwCleaner/AdwCleaner[S1].txt - [1081 B] - [2017/10/4 22:20:9]
C:/AdwCleaner/AdwCleaner[S2].txt - [1148 B] - [2017/10/6 21:18:42]
########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt ##########
Code:
ATTFilter Malwarebytes
www.malwarebytes.com
-Protokolldetails-
Scan-Datum: 08.10.17
Scan-Zeit: 21:09
Protokolldatei: 3d289770-ac5c-11e7-90f9-74d435fed1e4.json
Administrator: Ja
-Softwaredaten-
Version: 3.2.2.2029
Komponentenversion: 1.0.207
Version des Aktualisierungspakets: 1.0.2976
Lizenz: Kostenlos
-Systemdaten-
Betriebssystem: Windows 10 (Build 14393.953)
CPU: x64
Dateisystem: NTFS
Benutzer: Lasse-PC\Lasse
-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 495124
Erkannte Bedrohungen: 0
(keine bösartigen Elemente erkannt)
In die Quarantäne verschobene Bedrohungen: 0
(keine bösartigen Elemente erkannt)
Abgelaufene Zeit: 3 Min., 16 Sek.
-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung
-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)
Modul: 0
(keine bösartigen Elemente erkannt)
Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)
Registrierungswert: 0
(keine bösartigen Elemente erkannt)
Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)
Daten-Stream: 0
(keine bösartigen Elemente erkannt)
Ordner: 0
(keine bösartigen Elemente erkannt)
Datei: 0
(keine bösartigen Elemente erkannt)
Physischer Sektor: 0
(keine bösartigen Elemente erkannt)
(end)
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 08-10-2017
durchgeführt von Lasse (Administrator) auf LASSE-PC (08-10-2017 21:14:55)
Gestartet von C:\Users\Lasse\Downloads
Geladene Profile: Lasse & postgres (Verfügbare Profile: Lasse & postgres & DefaultAppPool)
Platform: Windows 10 Home Version 1607 14393.953.amd64fre.rs1_release_inmarket.170303-1614 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\pg_ctl.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(CyberGhost S.A.) C:\Program Files\CyberGhost 6\CyberGhost.Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Octoshape ApS) C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
(Spotify Ltd) C:\Users\Lasse\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(ROCCAT GmbH Co., Ltd.) C:\Program Files (x86)\ROCCAT\Ryos Keyboard\Ryos MK Monitor.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
() C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe
() C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1703.601.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7611608 2014-05-27] (Realtek Semiconductor)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-08-28] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [CheckNDISPort54ac04] => C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe [474504 2015-09-16] ()
HKLM-x32\...\Run: [CancelAutoPlay_df] => C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe [446344 2015-09-16] ()
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-04-19] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4174464 2017-05-23] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Octoshape Streaming Services] => C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [500016 2014-08-01] (Octoshape ApS)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Spotify] => C:\Users\Lasse\AppData\Roaming\Spotify\Spotify.exe [20803184 2017-10-04] (Spotify Ltd)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Spotify Web Helper] => C:\Users\Lasse\AppData\Roaming\Spotify\SpotifyWebHelper.exe [777840 2017-10-04] (Spotify Ltd)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\RunOnce: [FlashPlayerUpdate] => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [1281024 2017-08-23] (Adobe Systems Incorporated)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\MountPoints2: {8c4e4d7b-1c66-11e7-b759-74d435fed1e4} - "G:\AutoRun.exe"
HKU\S-1-5-21-2533615570-3755426884-238519182-1002\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2016-07-16] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ryos Driver.lnk [2015-06-10]
ShortcutTarget: Ryos Driver.lnk -> C:\Program Files (x86)\ROCCAT\Ryos Keyboard\Ryos MK Monitor.exe (ROCCAT GmbH Co., Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2017-05-21]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)
Startup: C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2017-08-13]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\..\Interfaces\{2fecfc21-6e41-481d-aecf-b1d0260b00b8}: [DhcpNameServer] 192.168.8.1
Internet Explorer:
==================
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-09-19] (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-09-19] (Oracle Corporation)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default [2017-10-08]
FF user.js: detected! => C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default\user.js [2015-07-21]
FF Extension: (Adblock Plus) - C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-05-30]
FF Extension: (Site Deployment Checker) - C:\Program Files (x86)\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi [2017-03-24] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2017-07-25]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-08-23] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-23] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-09-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-09-19] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-19] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2015-09-09] (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2533615570-3755426884-238519182-1000: @octoshape.com/Octoshape Streaming Services,version=1.0 -> C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1702150-0-npoctoshape.dll [2017-02-15] (Octoshape ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2016-07-19] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Lasse\AppData\Roaming\mozilla\plugins\npoctoshape.dll [2016-02-16] (Octoshape ApS)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&ts=1429129023&from=cor&uid=CrucialXCT256MX100SSD1_14460DD089940DD08994
CHR StartupUrls: Default -> "hxxps://www.google.de/"
CHR NewTab: Default -> Active:"chrome-extension://llaficoajjainaijghjlofdfmbjpebpa/newtab.html"
CHR Profile: C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default [2017-10-08]
CHR Extension: (Google Präsentationen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-10]
CHR Extension: (Google Docs) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-10]
CHR Extension: (Google Drive) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Pushbullet) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2017-10-08]
CHR Extension: (Steam Inventory Helper) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2017-10-06]
CHR Extension: (Google-Suche) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Tampermonkey) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-09-25]
CHR Extension: (Google Tabellen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-10]
CHR Extension: (Google Docs Offline) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-10-06]
CHR Extension: (Speed Dial [FVD] - New Tab Page, 3D, Sync...) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\llaficoajjainaijghjlofdfmbjpebpa [2017-08-27]
CHR Extension: (Dingit Infinite HD App) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\llnhnfikffkjbdnfallfpgikamegbbag [2016-01-29]
CHR Extension: (Ghostery) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2017-09-01]
CHR Extension: (LocalChromecast Player) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmladpigjlinmngadjgfogblnmddndcp [2015-06-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Enhanced Steam) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\okadibdjfemgnhjiembecghcbfknbfhg [2017-09-01]
CHR Extension: (Google Mail) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-10]
CHR Extension: (Chrome Media Router) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27]
CHR Extension: (OPDeals - Find the best deals on OPSkins.com) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnmifmjgoddkicidifnaenlagjcofomn [2016-06-30]
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AVP17.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1533448 2017-09-16] ()
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [232528 2017-08-31] (CyberGhost S.A.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2014-10-03] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [156960 2015-02-25] (Intel Corporation)
S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe [77328 2016-06-28] (AO Kaspersky Lab)
R2 KSDE1.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2120712 2016-06-08] (Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1450824 2017-09-10] (Overwolf LTD)
R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-04-19] (Geek Software GmbH)
R2 postgresql-8.4; c:\postgreSQL\bin\pg_ctl.exe [66048 2014-02-18] (PostgreSQL Global Development Group) [Datei ist nicht signiert]
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1776864 2017-05-23] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2131760 2017-05-23] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [233936 2017-05-23] (Safer-Networking Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-03-04] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [238936 2016-06-10] (AO Kaspersky Lab)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [27552 2017-06-03] (REALiX(tm))
R0 kl1; C:\WINDOWS\System32\DRIVERS\kl1.sys [554416 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [63920 2016-06-07] (AO Kaspersky Lab)
R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [86352 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [28792 2016-03-31] (AO Kaspersky Lab)
R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [197312 2017-07-25] (AO Kaspersky Lab)
R1 klhk; C:\WINDOWS\System32\drivers\klhk.sys [520152 2017-07-25] (AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP17.0.0\Bases\klids.sys [186696 2017-10-05] (AO Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1021624 2017-07-25] (AO Kaspersky Lab)
R1 KLIM6; C:\WINDOWS\system32\DRIVERS\klim6.sys [57424 2017-03-30] (AO Kaspersky Lab)
R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [52136 2016-05-19] (AO Kaspersky Lab)
R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [45488 2016-05-31] (AO Kaspersky Lab)
R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project)
R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [229288 2017-06-28] (AO Kaspersky Lab)
R3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [87584 2017-10-03] (AO Kaspersky Lab)
R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [251656 2017-08-01] (AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [112912 2017-06-28] (AO Kaspersky Lab)
R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [173144 2017-08-01] (AO Kaspersky Lab)
R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [85320 2016-06-18] (AO Kaspersky Lab)
R1 Klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [136416 2017-03-30] (AO Kaspersky Lab)
R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [199640 2017-07-25] (AO Kaspersky Lab)
R0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [252232 2017-10-05] (Malwarebytes)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2015-02-25] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_b67dc924fff8de6d\nvlddmkm.sys [14199224 2017-01-04] (NVIDIA Corporation)
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [46440 2017-04-06] (SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [45896 2017-05-12] (SteelSeries ApS)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 vpnva; C:\WINDOWS\System32\DRIVERS\vpnva64-6.sys [52592 2015-07-24] (Cisco Systems, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U3 idsvc; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-10-08 21:14 - 2017-10-08 21:15 - 000026233 _____ C:\Users\Lasse\Downloads\FRST.txt
2017-10-08 21:14 - 2017-10-08 21:14 - 002401792 _____ (Farbar) C:\Users\Lasse\Downloads\FRST64.exe
2017-10-08 21:14 - 2017-10-08 21:14 - 002401792 _____ (Farbar) C:\Users\Lasse\Downloads\FRST64 (1).exe
2017-10-08 21:13 - 2017-10-08 21:13 - 001797632 _____ (Farbar) C:\Users\Lasse\Downloads\FRST.exe
2017-10-08 20:54 - 2017-10-08 20:54 - 008250832 _____ (Malwarebytes) C:\Users\Lasse\Downloads\AdwCleaner_7.0.3.1.exe
2017-10-08 18:53 - 2017-10-08 18:58 - 336529408 _____ C:\Users\Lasse\Downloads\kav_rescue_10.iso
2017-10-08 16:47 - 2017-10-08 16:47 - 3646816256 _____ C:\Users\Lasse\Desktop\Windows.iso
2017-10-08 16:00 - 2017-10-08 17:14 - 000000000 ____D C:\ESD
2017-10-08 15:59 - 2017-10-08 15:59 - 000000000 ___HD C:\$Windows.~WS
2017-10-08 15:59 - 2017-10-08 15:59 - 000000000 ____D C:\$WINDOWS.~BT
2017-10-08 14:03 - 2017-10-08 14:04 - 018357776 _____ (Microsoft Corporation) C:\Users\Lasse\Downloads\MediaCreationTool (1).exe
2017-10-08 13:22 - 2017-10-08 14:28 - 000278182 _____ C:\TDSSKiller.3.1.0.15_08.10.2017_13.22.17_log.txt
2017-10-08 13:12 - 2017-10-08 13:12 - 004922400 _____ (AO Kaspersky Lab) C:\Users\Lasse\Downloads\tdsskiller.exe
2017-10-08 13:08 - 2017-10-08 13:22 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-10-08 13:08 - 2017-10-08 13:08 - 000109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2017-10-08 13:07 - 2017-10-08 13:22 - 000000000 ____D C:\Users\Lasse\Desktop\mbar
2017-10-08 13:07 - 2017-10-08 13:07 - 016563352 _____ (Malwarebytes Corp.) C:\Users\Lasse\Downloads\mbar-1.09.3.1001.exe
2017-10-06 23:15 - 2017-10-06 23:15 - 018357776 _____ (Microsoft Corporation) C:\Users\Lasse\Downloads\MediaCreationTool.exe
2017-10-06 23:03 - 2017-10-06 23:04 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2017-10-06 23:03 - 2017-10-06 23:03 - 000001460 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2017-10-06 23:03 - 2017-10-06 23:03 - 000000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2017-10-06 23:03 - 2017-10-06 23:03 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2017-10-06 23:03 - 2017-10-06 23:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2017-10-06 23:03 - 2017-05-23 09:22 - 000032240 _____ (Safer-Networking Ltd.) C:\WINDOWS\system32\sdnclean64.exe
2017-10-06 22:56 - 2017-10-06 22:57 - 051725936 _____ (Safer-Networking Ltd. ) C:\Users\Lasse\Downloads\spybotsd-2.6.46.exe
2017-10-06 22:18 - 2017-10-06 22:18 - 000928176 _____ (Magical Jelly Bean ) C:\Users\Lasse\Downloads\KeyFinderInstaller.exe
2017-10-06 22:18 - 2017-10-06 22:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyFinder
2017-10-06 22:18 - 2017-10-06 22:18 - 000000000 ____D C:\Program Files (x86)\Magical Jelly Bean
2017-10-05 00:20 - 2017-10-08 21:14 - 000000000 ____D C:\FRST
2017-10-05 00:13 - 2017-10-08 20:57 - 000000000 ____D C:\AdwCleaner
2017-10-05 00:08 - 2017-10-08 13:08 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-10-05 00:08 - 2017-10-05 00:08 - 000252232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2017-10-05 00:08 - 2017-10-05 00:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-10-05 00:08 - 2017-10-05 00:08 - 000000000 ____D C:\Program Files\Malwarebytes
2017-10-05 00:08 - 2017-09-27 09:37 - 000077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-10-03 11:48 - 2017-10-03 11:48 - 000087584 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys
2017-09-30 22:42 - 2017-09-30 22:42 - 000439668 _____ C:\Users\Lasse\Downloads\ROU1Z4.pdf
2017-09-30 22:40 - 2017-09-30 22:40 - 000461469 _____ C:\Users\Lasse\Downloads\ELLPVD.pdf
2017-09-28 09:10 - 2017-09-28 09:10 - 000050091 _____ C:\Users\Lasse\Downloads\PB_KAZ_KtoNr_0784600600_06-04-2017_0712.pdf
2017-09-27 10:26 - 2017-09-27 10:26 - 001300888 _____ C:\Users\Lasse\Downloads\AW_ AW_ AW_ AW_ AW_ Bescheinigung f__r HerrnLasse****.zip
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-10-08 19:16 - 2015-06-10 06:10 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2017-10-08 19:08 - 2017-02-07 16:43 - 000000000 ____D C:\Users\Lasse\AppData\LocalLow\Mozilla
2017-10-08 18:48 - 2015-06-12 00:10 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\TS3Client
2017-10-08 17:14 - 2016-09-23 19:34 - 000000000 ___DC C:\WINDOWS\Panther
2017-10-08 16:02 - 2015-11-10 23:00 - 000000000 ____D C:\Users\Lasse\AppData\Local\Battle.net
2017-10-08 14:33 - 2016-09-23 18:35 - 000000000 ____D C:\Users\Lasse
2017-10-08 12:54 - 2015-06-10 23:14 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\Spotify
2017-10-08 00:53 - 2016-09-23 18:34 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-10-07 23:54 - 2017-04-12 15:40 - 000000000 ____D C:\Users\Lasse\Documents\Bewerbungen
2017-10-07 23:54 - 2015-06-10 06:20 - 000000000 ____D C:\Users\Lasse\Documents\Uni
2017-10-07 23:54 - 2015-06-10 06:19 - 000000000 ____D C:\Users\Lasse\Documents\Sicherheit
2017-10-07 23:51 - 2015-06-10 06:16 - 000000000 ____D C:\Users\Lasse\Documents\FFS
2017-10-06 22:45 - 2016-07-16 13:47 - 000000000 ___HD C:\Program Files\WindowsApps
2017-10-06 22:45 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-10-06 22:45 - 2016-05-03 13:23 - 000000000 ____D C:\Users\Lasse\AppData\Local\Packages
2017-10-05 09:07 - 2015-06-10 23:15 - 000000000 ____D C:\Users\Lasse\AppData\Local\Spotify
2017-10-05 00:23 - 2016-09-23 18:35 - 002984726 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-10-05 00:23 - 2016-07-17 00:51 - 001268550 _____ C:\WINDOWS\system32\perfh007.dat
2017-10-05 00:23 - 2016-07-17 00:51 - 000321202 _____ C:\WINDOWS\system32\perfc007.dat
2017-10-05 00:18 - 2016-09-23 18:41 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-10-05 00:18 - 2016-09-23 18:35 - 000000000 ____D C:\Users\postgres
2017-10-05 00:18 - 2016-09-23 18:34 - 000000000 ____D C:\ProgramData\NVIDIA
2017-10-05 00:18 - 2016-07-16 08:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2017-10-05 00:16 - 2015-08-13 13:43 - 000000000 ____D C:\Users\Lasse\AppData\Local\Downloaded Installations
2017-10-03 13:40 - 2016-07-16 13:45 - 000000000 ____D C:\WINDOWS\INF
2017-09-27 12:06 - 2015-06-10 06:57 - 000000000 ____D C:\Users\Lasse\AppData\Local\PokerStars.EU
2017-09-27 08:56 - 2015-06-10 05:59 - 000002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-09-24 22:03 - 2017-07-24 21:31 - 000000000 ____D C:\Users\Lasse\AppData\Local\Overwolf
2017-09-22 23:40 - 2017-07-27 09:39 - 000003362 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2533615570-3755426884-238519182-1000
2017-09-22 23:40 - 2016-05-03 13:25 - 000002383 _____ C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-09-22 23:40 - 2016-05-03 13:25 - 000000000 ___RD C:\Users\Lasse\OneDrive
2017-09-19 13:00 - 2015-11-10 23:13 - 000000000 ____D C:\Program Files (x86)\Hearthstone
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HearthSim
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\HearthstoneDeckTracker
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Local\HearthstoneDeckTracker
2017-09-19 12:59 - 2016-02-02 00:52 - 000000000 ____D C:\Users\Lasse\AppData\Local\SquirrelTemp
2017-09-19 11:46 - 2015-12-04 10:59 - 000097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\ProgramData\Oracle
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\Program Files (x86)\Java
2017-09-17 19:32 - 2015-06-16 01:41 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\vlc
2017-09-16 17:18 - 2015-06-10 05:21 - 000000000 ____D C:\Users\Lasse\AppData\Local\VirtualStore
2017-09-15 09:32 - 2017-07-24 21:32 - 000000000 ____D C:\Program Files (x86)\Overwolf
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-03-13 14:46 - 2016-03-13 15:09 - 000002438 _____ () C:\Users\Lasse\AppData\Roaming\SpeedRunnersLog.txt
2016-09-23 18:34 - 2016-09-23 18:34 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
Einige Dateien in TEMP:
====================
2016-12-15 12:26 - 2016-12-15 12:26 - 000737856 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u111-windows-au.exe
2017-02-07 16:44 - 2017-02-07 16:44 - 000739904 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u121-windows-au.exe
2017-05-21 13:13 - 2017-05-21 13:13 - 000739904 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u131-windows-au.exe
2017-09-19 11:45 - 2017-09-19 11:45 - 000740416 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u144-windows-au.exe
2016-09-25 16:02 - 2016-07-16 13:42 - 000616048 _____ (Microsoft Corporation) C:\Users\Lasse\AppData\Local\Temp\kernel32.dll
2017-03-21 00:57 - 2016-03-09 22:39 - 004839768 ____N (Conexant Systems, Inc.) C:\Users\Lasse\AppData\Local\Temp\KUIU.EXE
2016-10-26 12:38 - 2016-10-26 12:38 - 000040448 ____N () C:\Users\Lasse\AppData\Local\Temp\proxy_vole4284622008590521579.dll
2016-10-26 12:38 - 2016-10-26 12:38 - 000040448 ____N () C:\Users\Lasse\AppData\Local\Temp\proxy_vole9072781731305077584.dll
2016-12-06 14:14 - 2016-12-06 14:14 - 077105961 _____ () C:\Users\Lasse\AppData\Local\Temp\setup.exe
2017-03-23 19:32 - 2017-03-23 19:32 - 014456872 _____ (Microsoft Corporation) C:\Users\Lasse\AppData\Local\Temp\vc_redist.x86.exe
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2017-10-04 23:57
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 08-10-2017
durchgeführt von Lasse (08-10-2017 21:15:17)
Gestartet von C:\Users\Lasse\Downloads
Windows 10 Home Version 1607 14393.953.amd64fre.rs1_release_inmarket.170303-1614 (X64) (2016-09-23 16:42:05)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2533615570-3755426884-238519182-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2533615570-3755426884-238519182-503 - Limited - Disabled)
Gast (S-1-5-21-2533615570-3755426884-238519182-501 - Limited - Disabled)
Lasse (S-1-5-21-2533615570-3755426884-238519182-1000 - Administrator - Enabled) => C:\Users\Lasse
postgres (S-1-5-21-2533615570-3755426884-238519182-1002 - Limited - Enabled) => C:\Users\postgres
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Kaspersky Internet Security (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {4C1D9672-63FE-5C90-371E-8FDA591C5B75}
AS: Kaspersky Internet Security (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
1&1 Surf-Stick (HKLM-x32\...\{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD}) (Version: 1.0.0.3 - ZTE Corporation)
888poker (HKLM-x32\...\888poker) (Version: - )
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version: - Hidden Path Entertainment, Ensemble Studios)
Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version: - Ensemble Studios)
Brother MFL-Pro Suite MFC-J4510DW (HKLM-x32\...\{DD98C438-D769-4677-AA87-3481FA32D20C}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5931 - CDBurnerXP)
CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version: - CyberGhost S.R.L.)
Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version: - Red Hook Studios)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
DiRT 3 Complete Edition (HKLM\...\Steam App 321040) (Version: - Codemasters Racing Studio)
Discord (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Discord) (Version: 0.0.290 - Hammer & Chisel, Inc.)
Don't Starve (HKLM-x32\...\Steam App 219740) (Version: - Klei Entertainment)
FUSSBALL MANAGER 13 (HKLM-x32\...\{80AF0300-866F-400F-A350-D53E3C3E34E0}) (Version: 1.0.4.0 - Electronic Arts)
Golf With Your Friends (HKLM\...\Steam App 431240) (Version: - Blacklight Interactive)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Hearthstone Deck Tracker (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\HearthstoneDeckTracker) (Version: 1.4.3 - HearthSim)
Holdem Manager 2 (HKLM-x32\...\HoldemManager2) (Version: - )
Hotline Miami (HKLM-x32\...\Steam App 219150) (Version: - Dennaton Games)
HWiNFO64 Version 5.52 (HKLM\...\HWiNFO64_is1) (Version: 5.52 - Martin Malík - REALiX)
Infinite HD™ App (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Octoshape Streaming Services) (Version: - Octoshape ApS)
InputMapper (HKLM-x32\...\{1A44056A-C7D8-4561-BC43-A0AA7D7AAA64}) (Version: 1.5.31.0 - DSDCS)
Insurgency (HKLM-x32\...\Steam App 222880) (Version: - New World Interactive)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.39.1003 - Intel Corporation)
Intel(R) Network Connections 18.8.136.0 (HKLM\...\PROSetDX) (Version: 18.8.136.0 - Intel)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.4.65 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}) (Version: 10.0.27 - Intel(R) Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Kaspersky Internet Security (HKLM-x32\...\{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Secure Connection (HKLM-x32\...\{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab)
Keep Talking and Nobody Explodes (HKLM\...\Steam App 341800) (Version: - Steel Crate Games)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version: - DONTNOD Entertainment)
Magical Jelly Bean KeyFinder (HKLM-x32\...\KeyFinder_is1) (Version: 2.0.10.12 - Magical Jelly Bean)
Malwarebytes Version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50905.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Monaco (HKLM-x32\...\Steam App 113020) (Version: - Pocketwatch Games)
Mozilla Firefox 52.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 52.0.2 (x86 de)) (Version: 52.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.2 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Mumble 1.2.11 (HKLM-x32\...\{2C0B4F07-7DD2-4D69-9A97-77AE3A37280F}) (Version: 1.2.11 - Thorvald Natvig)
NBA 2K17 (HKLM\...\Steam App 385760) (Version: - Visual Concepts)
Nero 2016 (HKLM-x32\...\{049045D5-0C46-4E78-A83F-83E993D91A7F}) (Version: 17.0.02300 - Nero AG)
Nero Info (HKLM-x32\...\{F030BFE8-8476-4C08-A553-233DE80A2BE1}) (Version: 16.0.2000 - Nero AG)
NetBet Poker (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Netbet Poker) (Version: 1.1.1.33 - NetBet Poker)
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.61.7 - Black Tree Gaming)
Nidhogg (HKLM-x32\...\Steam App 94400) (Version: - Messhof)
No Man's Sky (HKLM\...\Steam App 275850) (Version: - Hello Games)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 376.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.53 - NVIDIA Corporation)
NVIDIA Grafiktreiber 376.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.53 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Orcs Must Die! (HKLM-x32\...\Steam App 102600) (Version: - Robot Entertainment)
Orcs Must Die! 2 (HKLM-x32\...\Steam App 201790) (Version: - Robot Entertainment)
Origin (HKLM-x32\...\Origin) (Version: 9.0.11.77 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.107.36.0 - Overwolf Ltd.)
Party Hard (HKLM\...\Steam App 356570) (Version: - Pinokl Games)
PDF24 Creator 8.1.4 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
PLAYERUNKNOWN'S BATTLEGROUNDS (HKLM\...\Steam App 578080) (Version: - Bluehole, Inc.)
Poker at bet365 (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\bet365poker) (Version: 1.1.1.32 - Poker at bet365)
PokerStrategy.com Equilab (HKLM-x32\...\{86D09F48-CDAB-4B4C-8806-F6C16F17935A}) (Version: 1.2.8.0 - PokerStrategy.com)
PostgreSQL 8.4 (HKLM-x32\...\PostgreSQL 8.4) (Version: 8.4 - PostgreSQL Global Development Group)
Prerequisite installer (HKLM-x32\...\{5F284483-EE8D-447E-BEBE-2BF13B08C4BF}) (Version: 17.0.0002 - Nero AG) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7256 - Realtek Semiconductor Corp.)
Remember Me (HKLM-x32\...\Steam App 228300) (Version: - DONTNOD Entertainment)
ROCCAT Ryos Keyboard Driver (HKLM-x32\...\{70F3EF93-44F4-446A-90B8-33DAB2799AF1}) (Version: 1.29.0006 - Roccat GmbH)
Rocket League (HKLM-x32\...\Steam App 252950) (Version: - Psyonix)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
SpeedRunners (HKLM\...\Steam App 207140) (Version: - DoubleDutch Games)
Spotify (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Spotify) (Version: 1.0.64.399.g4637b02a - Spotify AB)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.6.46 - Safer-Networking Ltd.)
Stashimi Stub Installer (HKLM-x32\...\{910B539D-F257-46C8-9CB8-6C95EFF9CF22}) (Version: 18.001.1 - Nero AG) Hidden
SteelSeries Engine 3.10.2 (HKLM\...\SteelSeries Engine 3) (Version: 3.10.2 - SteelSeries ApS)
Sunless Sea (HKLM-x32\...\Steam App 304650) (Version: - Failbetter Games)
SUPERHOT (HKLM\...\Steam App 322500) (Version: - SUPERHOT Team)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Sims(TM) 3 (HKLM-x32\...\Steam App 47890) (Version: - The Sims Studio)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.0.0 - GOG.com)
The Wolf Among Us (HKLM-x32\...\Steam App 250320) (Version: - Telltale Games)
To the Moon (HKLM-x32\...\Steam App 206440) (Version: - Freebird Games)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version: - Crystal Dynamics)
Undertale (HKLM-x32\...\Steam App 391540) (Version: - tobyfox)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{5D2260D6-DB16-41DC-915B-A39BF4F66362}) (Version: - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Windows Driver Package - Microsoft (xusb21) XnaComposite (08/13/2009 2.1.0.1349) (HKLM\...\0AEBEF6F936CFE16E003F7E141631FAB754D9816) (Version: 08/13/2009 2.1.0.1349 - Microsoft)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Xenonauts (HKLM\...\Steam App 223830) (Version: - Goldhawk Interactive)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2015-04-15] ()
ContextMenuHandlers1: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd.)
ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext32.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers2: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers4: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Keine Datei
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-29] (NVIDIA Corporation)
ContextMenuHandlers6: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd.)
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext32.dll [2015-02-20] (Alexander Roshal)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0EA79F79-E1A5-4A0A-9EB4-34A0F7599D7A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {1E2ED6AF-44DD-4BD9-92B4-158C8C364963} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2015-06-04] (Nero AG)
Task: {20619094-6457-425B-A945-0C4FDB1693EB} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {24849D53-6FDE-4375-9849-A131708F6A6B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {27018E8B-CD23-4488-8A1A-B7F8E98989BC} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {2738848A-4A4F-46DA-927F-8C2C9DF0BC8C} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {28CB3FFB-904C-47A0-ABCB-9235400956E9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {297B2EE0-39D1-47A0-A923-E93BBB750EFB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {33A617CB-993D-4FA3-AB13-921058F47898} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {346CA78B-8395-4144-8B90-67B4E73505C4} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {38708F88-5274-46F9-A4FA-C6B8D1965177} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {406CB1B8-07F8-4C0D-8242-932A7202ACA7} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {422893B7-EFA5-4D9A-9E12-347E25F452FE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {4736970E-099A-4720-B7F9-6AA0BC9F8D23} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2017-09-10] (Overwolf LTD)
Task: {48F971F9-1011-494E-9C14-978135E38E0F} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {4D665A95-C820-484E-ACEA-CCA24CD7B7E9} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5907DFEF-F5E3-43D6-A652-4EFE2297BB75} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [2017-08-23] (Adobe Systems Incorporated)
Task: {672CBA70-B858-497D-8199-09B86CE1EAA4} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2017-05-23] (Safer-Networking Ltd.)
Task: {70967EA7-6DC1-4D1C-B266-85A70912B2AF} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {719E802E-99AD-4D2D-93DD-DD40BB975F4A} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {744885B0-6690-4DBF-AFD2-D14D64B73594} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {7C28B565-DF69-4859-BF78-11D1793D2530} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7D8A1940-66E8-4227-BECD-673D47C32407} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2017-05-23] (Safer-Networking Ltd.)
Task: {7DD14D66-8EA0-4B48-BC7B-C3E965279DF5} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2017-05-23] (Safer-Networking Ltd.)
Task: {80BFF415-92DD-4AFD-A317-820EC45E4F40} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {835CACB0-B38D-4B5F-86E4-40A82DCF9296} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8EFE6846-5634-4A31-9D17-188267D1ED8E} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Lasse\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {907543A2-0FD5-44B9-BD78-3210741E547F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {9F6A05A9-B92A-463B-ABDF-2F07A2BAFB72} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {A5FAC33E-1E4D-45CF-9D2F-58914E30A741} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {A7C6D38F-1AB6-4E8B-A2AE-ED60967D762A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {AAD71ED8-2D79-426B-B5E7-1025A792E8EA} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {ADBFE664-7464-4ED6-B6B2-A7FE31575F7B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-10] (Google Inc.)
Task: {B13712F9-EC32-40D6-A54E-AE60165AC92A} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B839D35A-EA53-4A6F-B98F-924FAD8C3E28} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B9DB4DE2-A818-45E0-8885-7D97263146DC} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {D5FE55D7-F207-4A0E-867A-5CA9233DD728} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {D6B9F221-05EA-419A-85EA-BFB06B828E4D} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D9155530-53E3-470B-84CD-93D046C63435} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {DDEAB283-6AA4-460A-8060-C5DEB323E4E4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E58146F5-C22A-4338-A1E7-8A3B3092E1FE} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {E6E8A738-3413-4665-8CB8-024753F4DF68} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-10] (Google Inc.)
Task: {E71C6EB0-1F0C-4E22-B5B4-E785515F4C04} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {EB878804-4C78-4588-A598-2490EB14D64E} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {EDCE56E6-E9E9-4DA4-9E12-B676852DF3D2} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F20B98FA-5E1C-4827-A90C-4C4E90FE908C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {F6C8B48F-CC1B-4545-AEB7-97195522EF85} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F84C18D9-CEFF-40B9-8D8B-5E49D490CFEB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FEE482F9-F169-4C25-A082-C5A31777D0FF} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
ShortcutWithArgument: C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Dingit Infinite HD App.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=llnhnfikffkjbdnfallfpgikamegbbag
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2017-10-05 00:08 - 2017-09-27 09:37 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-03-15 08:17 - 2017-03-04 09:19 - 002681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-09-23 18:34 - 2016-12-29 14:44 - 000134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-04-15 22:13 - 2015-04-15 22:13 - 000222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2016-09-23 19:32 - 2016-09-23 19:32 - 000134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-15 08:16 - 2017-03-04 08:31 - 000474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-15 08:17 - 2017-03-04 08:12 - 009760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 001401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 000757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 001033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 002424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-03-15 08:17 - 2017-03-04 08:08 - 004853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 000077312 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-04-10 09:18 - 2017-04-10 09:18 - 000189952 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 042507264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 002334184 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\skypert.dll
2017-04-10 21:19 - 2015-09-16 13:20 - 000474504 _____ () C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe
2017-04-10 21:19 - 2015-09-16 13:20 - 000446344 _____ () C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe
2017-09-27 08:56 - 2017-09-21 09:29 - 004022616 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll
2017-09-27 08:56 - 2017-09-21 09:29 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 000019456 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2017-04-04 06:54 - 2017-04-04 06:55 - 022723584 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 000448512 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.AGM.Native.Windows.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 005427200 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2016-06-03 08:38 - 2016-06-03 08:38 - 000680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 000435712 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 001062400 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll
2016-05-03 13:48 - 2016-05-03 13:48 - 000291328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2017-03-14 11:35 - 2017-03-14 11:35 - 003879424 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1703.601.0_x64__8wekyb3d8bbwe\Calculator.exe
2017-03-15 08:17 - 2017-03-04 08:04 - 000114176 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll
2016-06-28 00:19 - 2016-06-28 00:19 - 000865232 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\kpcengine.2.3.dll
2015-06-10 15:44 - 2014-02-18 10:11 - 000172032 _____ () c:\postgreSQL\bin\LIBPQ.dll
2015-06-10 15:44 - 2012-08-14 15:19 - 000999424 _____ () c:\postgreSQL\bin\libxml2.dll
2015-12-19 13:34 - 2009-02-27 17:38 - 000139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-02-25 14:15 - 2015-02-25 14:15 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2017-10-06 23:03 - 2016-09-13 14:00 - 000109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2017-10-06 23:03 - 2016-09-13 14:00 - 000167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2017-10-06 23:03 - 2016-09-13 14:00 - 000416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2017-10-06 23:03 - 2017-05-12 11:36 - 000507464 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2009-06-10 23:00 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Lasse\Pictures\Wallpaper\04071_posbanksunrise_1920x1080.jpg
HKU\S-1-5-21-2533615570-3755426884-238519182-1002\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.8.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
HKLM\...\StartupApproved\Run: => "XboxStat"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{1E466E5F-2A71-492E-98D2-EA93CF6E40F0}] => (Allow) E:\Spiele\Steam\steamapps\common\NBA 2K17\NBA2K17.exe
FirewallRules: [{617272FE-4F9E-43EE-A885-ECC015C336EB}] => (Allow) E:\Spiele\Steam\steamapps\common\NBA 2K17\NBA2K17.exe
FirewallRules: [{7321E602-C543-400C-A004-CA8FFC3D5A4A}] => (Allow) E:\Spiele\Steam\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{8BE67DB3-DECC-470C-9D2F-9B91BCD744F3}] => (Allow) E:\Spiele\Steam\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{B328988F-EE12-4BA0-8426-6BB569B74BC4}] => (Allow) E:\Spiele\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe
FirewallRules: [{BC4B85F6-039D-4A60-BD60-B2F949795A4F}] => (Allow) E:\Spiele\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe
FirewallRules: [{93196552-2B76-40A2-8AC6-5ED3AC385EDE}] => (Allow) E:\Spiele\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{1713722F-A2E5-4B13-9B34-9D373D32D19A}] => (Allow) E:\Spiele\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{7C6252FF-2BD1-48B1-8EE7-11F01095F6AF}] => (Allow) E:\Spiele\Steam\steamapps\common\Party Hard\PartyHardGame.exe
FirewallRules: [{B03C27A8-503B-4E29-AF88-ECA2874F8115}] => (Allow) E:\Spiele\Steam\steamapps\common\Party Hard\PartyHardGame.exe
FirewallRules: [{95BB5D24-AAE4-48CD-AD4A-7BEACA31E040}] => (Allow) E:\Spiele\FM 13\FIFA Manager 13\Manager13.exe
FirewallRules: [{71917C83-B5B8-44D3-9885-2DAA51520195}] => (Allow) E:\Spiele\FM 13\FIFA Manager 13\Manager13.exe
FirewallRules: [{7A259C44-2035-48D3-B803-527BAA84A00C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{136B8D0E-9CD0-428D-BD45-E959117A0B7D}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{3FE9E163-9DF9-468A-80A6-2FD24C996685}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{7AA6E0A5-3A86-4DA6-9E6B-65B9F088E2C5}] => (Allow) E:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{0AC559E6-B66A-415D-8C96-E010240CD25B}] => (Allow) E:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{F812826A-D8DA-481B-AA3C-AA6496CF7407}] => (Allow) LPort=5432
FirewallRules: [{6EE59405-4FE7-4C34-802B-B7864025000D}] => (Allow) E:\Spiele\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{775E93DD-299A-452D-85DF-E003378F4AF7}] => (Allow) E:\Spiele\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{02B8BFE5-921E-4436-BD44-241093836FEF}C:\users\lasse\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{0F3B6A72-A0CD-4A76-A613-4E72B693D499}C:\users\lasse\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{DA383AC0-382E-4E96-8E85-FC514F9973E0}] => (Block) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{97944202-EB96-4692-A1F6-6873242A53B4}] => (Block) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{B63764EC-EAD8-46F6-96B0-5F565BD408A0}] => (Allow) E:\Spiele\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{86AAD87C-259E-4DEE-8BA6-A346EAFF9741}] => (Allow) E:\Spiele\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{4E8CBBD0-5190-4B1F-B1F0-E41EBE21BF35}] => (Allow) E:\Spiele\Steam\steamapps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{D68A69E0-F93A-41CB-8C82-CC8FC9244415}] => (Allow) E:\Spiele\Steam\steamapps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{449BA439-FA7E-4220-8AE5-9556A9903CCE}] => (Allow) E:\Spiele\Steam\steamapps\common\Monaco\MONACO.exe
FirewallRules: [{4D3B8DD6-EC48-4E8C-BC21-CE661B0B5E4D}] => (Allow) E:\Spiele\Steam\steamapps\common\Monaco\MONACO.exe
FirewallRules: [{B1443441-3CDD-4C3B-9FAA-A41F3811F3F7}] => (Allow) E:\Spiele\Steam\steamapps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{F1844A71-6B17-40DD-93DF-B3157B18E2AB}] => (Allow) E:\Spiele\Steam\steamapps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{8CE98A1F-DE86-4B9A-A961-380B3B186EA5}] => (Allow) E:\Spiele\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{87B91361-539F-4F9A-972F-5E442B183014}] => (Allow) E:\Spiele\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{B10831ED-E1AF-492C-8522-6F71149DC361}] => (Allow) E:\Spiele\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{DAE8C590-F8F2-4B5A-80B6-190CFD231643}] => (Allow) E:\Spiele\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{CE280E12-EBAC-4749-9C33-F713917762C6}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{ABB850C5-C8AB-4762-B0E5-4233A38BBAD5}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{23CAB5A6-90E7-4B5F-A251-201EFF4BF363}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{71B33882-60FC-414E-A619-8C841C227CEB}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{D6275B97-7CCA-4D72-B2D0-C59B191646A2}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{56BB1E53-FB77-4022-AE31-73BA33CB027A}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{73E5AEA7-7F8C-4C16-A9A7-11036BDEC1BB}] => (Allow) E:\Spiele\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{E66552C8-DFC4-4173-9CCD-4D836FF27FBE}] => (Allow) E:\Spiele\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{4C9D1A88-DD80-42F3-AA6F-539B9BB5B6FE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{472BE848-3445-4146-8188-B73DDA3AAFE1}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{2B2E3DDE-228A-4A83-9184-B2D1D91B5831}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{684B6BB3-1B8C-413A-82D8-49B1DE5A167B}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{829113CB-AC94-496A-9478-43FC86DA0BB0}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{A5CAA5D9-3DC2-41C2-8690-312E4557E940}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{FDA27D14-8297-4859-AD36-8AB3888B1AD6}] => (Allow) E:\Spiele\Steam\steamapps\common\The Escapists\TheEscapists.exe
FirewallRules: [{C18FFD8B-AA4C-477D-BE31-74383408BF4C}] => (Allow) E:\Spiele\Steam\steamapps\common\The Escapists\TheEscapists.exe
FirewallRules: [{6136A26E-CA75-4D67-B0BD-423A5666AF3D}] => (Allow) E:\Spiele\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{A43A680C-6633-4B88-8D76-F71E264CEB5C}] => (Allow) E:\Spiele\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{034A7BAD-CDD6-402A-ACAD-E51AD4034DB5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DE323322-04AA-4F55-831E-22940A60FF86}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{402959E9-2213-474B-A27A-4853495C516B}] => (Allow) E:\Spiele\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{ED531946-64C5-4EBC-8702-B6B9F2535128}] => (Allow) E:\Spiele\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{F87CE81F-BEEA-47A4-8241-BA4756C8A4CD}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\StartNBR.exe
FirewallRules: [{3A6300B7-00E8-46D5-8ECC-E375FA61CF51}] => (Allow) C:\Program Files (x86)\Nero\KM\NMDllHost.exe
FirewallRules: [{06FA67C8-0226-49B3-8BFC-6A324C6143B9}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\nero.exe
FirewallRules: [{70A1D115-776E-442D-B635-5C48A609F090}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{0AB8CE89-EF32-4D06-8D03-B4E96B91C4FE}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{7D12B200-A0E1-43A1-8DAF-7684F1C4E052}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{B73CDADE-D09D-48D6-8DB4-F69A42D9D261}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{9F531F4E-7F68-40D3-B6F9-816F81A7DBF0}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{2C339AA4-48F4-4C83-B6C1-270D763B206E}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{C712039D-7FCB-49A8-8026-DE07D1DC526B}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{AA18F165-E99F-48B1-98DB-49483B35AFC3}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{F5C55161-49AB-46E1-9BF1-3E7D6F91AD9C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D3EBB153-CF95-4ADF-9168-72C1EB5100AE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E356CA51-EDA0-4C07-80DD-DA34E318F06A}] => (Allow) E:\Spiele\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{3872A773-8FC2-4E44-A3E5-4DD5B4BC6BFE}] => (Allow) E:\Spiele\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{0FB8E1B1-89A5-4C44-BE8B-A8E3F68AA798}] => (Allow) E:\Spiele\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{AF6BF9E6-3314-4E1C-A503-CCFCF433A9AF}] => (Allow) E:\Spiele\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{A5C30CBE-BC7B-4342-B07B-9641D65AC6E2}] => (Allow) E:\Spiele\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{482A1B91-7A81-4341-BCA1-89982A5B36B8}] => (Allow) E:\Spiele\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{321B2ABA-4D8C-42E0-B90E-94FE2C10A424}] => (Allow) E:\Spiele\Steam\steamapps\common\SunlessSea\Sunless Sea.exe
FirewallRules: [{A11501AC-13EA-48D4-97D0-9C28A15232AC}] => (Allow) E:\Spiele\Steam\steamapps\common\SunlessSea\Sunless Sea.exe
FirewallRules: [{84492F8B-869B-4EBD-9DB0-208FAB7BAC53}] => (Allow) E:\Spiele\Steam\steamapps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{1948B0EB-9995-4EFD-9F73-4F8ED8C87359}] => (Allow) E:\Spiele\Steam\steamapps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{222C045E-D37F-4F00-9435-BCA8B826A4CD}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{58AF54BA-C7A7-414E-B218-AE69F0C79E58}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{16E91255-C63D-419F-B7F3-D2E65802C2C6}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die!\Build\release\OrcsMustDie.exe
FirewallRules: [{3BF145A6-1208-469D-9D96-47AF98A34F13}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die!\Build\release\OrcsMustDie.exe
FirewallRules: [{109621AB-AD42-4F9D-9CBB-B095B91EA0FD}] => (Allow) E:\Spiele\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{B428F1DB-5C9A-43F5-973F-E189FCF0055D}] => (Allow) E:\Spiele\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{5F05E05B-43ED-4A1F-8906-5961EF90204C}] => (Allow) E:\Spiele\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{8D81F410-E273-4F9D-B4D5-2E76F5ED5033}] => (Allow) E:\Spiele\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{80951455-24EE-4165-A983-75CC2AB8EF3C}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{8301D091-8FA9-47EF-A5F7-A6D5B57E77CC}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{B0753FA3-A1E2-404F-97BA-8B12F6FC297A}] => (Allow) E:\Spiele\Steam\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{2FAA2F4D-F5F7-49FF-8BE4-AEEA611C8444}] => (Allow) E:\Spiele\Steam\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{45EDBFE7-40CA-4DC9-A617-9B7735681291}] => (Allow) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{3E2DDB12-63CA-45B1-928C-F9686A7431BC}] => (Allow) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{9F2DFE30-98A1-42BB-81AE-F228F3112A7A}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency_BE.exe
FirewallRules: [{B762F452-7752-452E-915A-B786911457C3}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency_BE.exe
FirewallRules: [{EE98545F-F4D4-439A-BA33-2D2F643333C5}] => (Allow) E:\Spiele\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{68C4579D-5BA7-4FAF-956E-7510959F6B97}] => (Allow) E:\Spiele\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{01BE84CD-D4C6-4424-AEF6-4C8FD2100925}] => (Allow) E:\Spiele\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{21CC6D64-6E55-4F88-82E0-58D1F8878439}] => (Allow) E:\Spiele\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{87C66560-B3E5-4749-847D-05D0527F82DE}] => (Allow) E:\Spiele\Steam\steamapps\common\SUPERHOT\SUPERHOT.exe
FirewallRules: [{8627AAF7-3098-4C1E-B206-137676FBA7E7}] => (Allow) E:\Spiele\Steam\steamapps\common\SUPERHOT\SUPERHOT.exe
FirewallRules: [{99FF5CAA-8EFF-4B75-9BCC-98A059C4A22C}] => (Allow) E:\Spiele\Steam\steamapps\common\Xenonauts\Xenonauts.exe
FirewallRules: [{8112DE72-765F-4B1D-B539-D29754768198}] => (Allow) E:\Spiele\Steam\steamapps\common\Xenonauts\Xenonauts.exe
FirewallRules: [{9313420C-23DA-4C55-B1BA-5454242C11C1}] => (Allow) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{65031DE8-8599-410E-8005-157880B32F6E}] => (Allow) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{A41C77B0-CEF3-4AAA-8275-F47BAC21A52E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{0F2C788C-80BD-41BC-B2E2-CFD86DA18444}] => (Allow) E:\Spiele\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{95476250-87A8-4FC0-9957-C37277752147}] => (Allow) E:\Spiele\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{ECF5E114-4D40-4339-B42E-9B0B854912A8}] => (Allow) E:\Spiele\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{CC130A07-29A0-4281-AC98-57CB7848095E}] => (Allow) E:\Spiele\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Wiederherstellungspunkte =========================
18-09-2017 18:45:39 Geplanter Prüfpunkt
26-09-2017 04:03:04 Geplanter Prüfpunkt
04-10-2017 23:58:05 Geplanter Prüfpunkt
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (10/08/2017 12:58:42 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Windows\System32\sdnclean64.exe". Fehler in Manifest- oder Richtliniendatei "C:\Windows\System32\sdnclean64.exe" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/08/2017 12:58:41 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTasks.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTasks.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/08/2017 12:58:41 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDResources.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDResources.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/08/2017 12:58:41 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\Tools.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\Tools.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/08/2017 12:58:41 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWinLogon.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWinLogon.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/08/2017 12:58:38 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLicense.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLicense.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/08/2017 12:58:38 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunizeLibrary.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunizeLibrary.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/08/2017 12:58:38 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLists.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLists.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/08/2017 12:58:38 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFileScanLibrary.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFileScanLibrary.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/08/2017 12:58:38 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFileScanHelper.exe". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFileScanHelper.exe" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Systemfehler:
=============
Error: (10/08/2017 02:30:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.
Error: (10/08/2017 02:30:43 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
Error: (10/08/2017 12:54:34 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (10/07/2017 10:23:25 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (10/06/2017 09:50:14 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (10/06/2017 08:14:23 AM) (Source: DCOM) (EventID: 10010) (User: Lasse-PC)
Description: Der Server "App.AppXryc2qd338f5728r9gzzazav8206ba77s.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (10/06/2017 08:12:02 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (10/05/2017 10:01:24 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (10/05/2017 09:11:36 AM) (Source: DCOM) (EventID: 10010) (User: Lasse-PC)
Description: Der Server "App.AppXwdz8g2fxr36xz0tdtagygnvemf85s7gg.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (10/05/2017 09:11:36 AM) (Source: DCOM) (EventID: 10010) (User: Lasse-PC)
Description: Der Server "App.AppXwdz8g2fxr36xz0tdtagygnvemf85s7gg.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
CodeIntegrity:
===================================
Date: 2017-06-01 11:20:03.507
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-06-01 11:20:03.488
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-05-31 15:48:53.894
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-05-31 15:48:53.857
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-05-31 10:59:25.975
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-05-24 12:31:13.218
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-03-17 15:15:49.745
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
Date: 2017-03-17 15:15:49.731
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
Date: 2017-03-17 15:15:49.710
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.
Date: 2017-03-17 15:15:49.666
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz
Prozentuale Nutzung des RAM: 22%
Installierter physikalischer RAM: 16314.86 MB
Verfügbarer physikalischer RAM: 12572.31 MB
Summe virtueller Speicher: 32698.86 MB
Verfügbarer virtueller Speicher: 28515.1 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:237.93 GB) (Free:59.44 GB) NTFS
Drive e: (Volume) (Fixed) (Total:476.94 GB) (Free:61.87 GB) NTFS
Drive f: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive g: (BFG) (Fixed) (Total:465.75 GB) (Free:217.07 GB) exFAT
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: D6DE4E1F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=237.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 476.9 GB) (Disk ID: 7931B67B)
Partition 1: (Not Active) - (Size=476.9 GB) - (Type=07 NTFS)
========================================================
Disk: 3 (Size: 465.8 GB) (Disk ID: A86C4D51)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
09.10.2017, 21:08
| #8 |
| | Vermutlich infiziertes Dokument geöffnet - mehrere Stunden kein Zugriff auf E-Mail Accounts Sorry, das schein ich jedes Mal überlesen zu haben. Ja, ich habe die Passwörter am Abend an dem ich tagsüber nicht in meine Accounts reinkam alle von einem dritten Rechner geändert. Die Datei habe ich noch in dem Papierkorb meines Unimail Accounts. |
|
10.10.2017, 20:49
| #9 |
| Ruhe in Frieden † 2019 | Vermutlich infiziertes Dokument geöffnet - mehrere Stunden kein Zugriff auf E-Mail Accounts Ah, ok, das war mir wirklich wichtig, das zu wissen. Gut, gibt es denn Probleme? Schritt 1 Da der Scan mit Eset sehr gründlich ist, kann er unter Umständen mehrere Stunden dauern  ESET Online Scanner
Schritt 2 Starte noch einmal FRST.
|
|
10.10.2017, 21:50
| #10 |
| | Vermutlich infiziertes Dokument geöffnet - mehrere Stunden kein Zugriff auf E-Mail Accounts Nein, seit dem Ändern der Passwörter am selben Abend keinerlei Probleme. Da der ESET Scan mehrere Stunden dauert, kann ich diesen leider erst frühestens morgen Abend, vielleicht erst Donnerstag durchführen. Ich poste dann hier die Logs sobald ich den Scan beendet habe. Vielen Dank schon mal für die Hilfe! |
|
12.10.2017, 13:07
| #12 |
| | Vermutlich infiziertes Dokument geöffnet - mehrere Stunden kein Zugriff auf E-Mail Accounts ESET hat 17 infizierte Dateien gefunden. Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=e13da5883c47f24b8d6441f768bc24a2
# end=init
# utc_time=2017-10-12 09:09:56
# local_time=2017-10-12 11:09:56 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=41221
Update Finalize
Updated modules version: 0
Old modules - leave modules
Update Init
Update Download
Update Init
Update Download
Update Finalize
Updated modules version: 35037
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=e13da5883c47f24b8d6441f768bc24a2
# end=updated
# utc_time=2017-10-12 09:52:30
# local_time=2017-10-12 11:52:30 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=e13da5883c47f24b8d6441f768bc24a2
# engine=35037
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2017-10-12 11:43:40
# local_time=2017-10-12 01:43:40 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='Kaspersky Internet Security'
# compatibility_mode=1313 16777213 100 100 9435 40742754 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 11506413 39139234 0 0
# scanned=798854
# found=17
# cleaned=0
# scan_time=6669
sh=A03235A9C4A36444BD8F256B0354995F4F35A2E6 ft=1 fh=5f27f88a2b2ca712 vn="Variante von Win32/Toolbar.CrossRider.DS eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\AppData\Local\NetBet Poker\internalSetupPoker (1)Uninstall1478520825814_na_en.exe"
sh=449E318D1DDA81355DCC2FE29DD2E0CA067FCB1E ft=1 fh=a0c5b07652b48850 vn="Variante von Win32/Toolbar.CrossRider.DS eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\AppData\Local\Poker at bet365\internalSetupPokerUninstall1484516496026_407fae_de.exe"
sh=A09D2624D8DD1872B9A723F4EB11837C7E667ED7 ft=1 fh=64c97ace1b9f3668 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\AppData\Local\Temp\DMR\dmr_72.exe"
sh=DD74FF46C5F39AA6C601668A4B45ABDE2B7E69C2 ft=1 fh=8152e1469a5cb1f9 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\Downloads\Notepad - CHIP-Installer.exe"
sh=8EAE9D820DB63EF3F0490E2B1ACF19E1A36ADD3C ft=1 fh=502ecb1bb3a155fa vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\Downloads\OpenOffice - CHIP-Installer.exe"
sh=A78C022F18456728C8038990A4DD11DC671D0E73 ft=1 fh=0dc4886b25645ca6 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\Downloads\PDF24 Creator - CHIP-Installer.exe"
sh=6C436F353C8B059F3CFE970FF4D30B47B472E941 ft=1 fh=807ecb843ae99813 vn="Win32/Toolbar.CrossRider.DS eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\Downloads\SetupPoker.exe"
sh=D27731D0B5535AE44064F8B7DFD8283A7D56A889 ft=1 fh=67c99e8768efa646 vn="Win32/Toolbar.CrossRider.DS eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\Downloads\SetupPoker_407fae.exe"
sh=48F424070CCD3DA3FAD3767EFF405244CE5C62D6 ft=1 fh=c1b54205dc4a3f79 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\Downloads\TeamSpeak 3 64 Bit - CHIP-Installer.exe"
sh=A56663828E9F70E08DE2442CD0025C3E94975BD8 ft=1 fh=a3f30eff576d0b85 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Lasse\Downloads\VLC media player 64 Bit - CHIP-Installer.exe"
sh=DD74FF46C5F39AA6C601668A4B45ABDE2B7E69C2 ft=1 fh=8152e1469a5cb1f9 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="G:\Downloads\Notepad - CHIP-Installer.exe"
sh=8EAE9D820DB63EF3F0490E2B1ACF19E1A36ADD3C ft=1 fh=502ecb1bb3a155fa vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="G:\Downloads\OpenOffice - CHIP-Installer.exe"
sh=A78C022F18456728C8038990A4DD11DC671D0E73 ft=1 fh=0dc4886b25645ca6 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="G:\Downloads\PDF24 Creator - CHIP-Installer.exe"
sh=6C436F353C8B059F3CFE970FF4D30B47B472E941 ft=1 fh=807ecb843ae99813 vn="Win32/Toolbar.CrossRider.DS eventuell unerwünschte Anwendung" ac=I fn="G:\Downloads\SetupPoker.exe"
sh=D27731D0B5535AE44064F8B7DFD8283A7D56A889 ft=1 fh=67c99e8768efa646 vn="Win32/Toolbar.CrossRider.DS eventuell unerwünschte Anwendung" ac=I fn="G:\Downloads\SetupPoker_407fae.exe"
sh=48F424070CCD3DA3FAD3767EFF405244CE5C62D6 ft=1 fh=c1b54205dc4a3f79 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="G:\Downloads\TeamSpeak 3 64 Bit - CHIP-Installer.exe"
sh=A56663828E9F70E08DE2442CD0025C3E94975BD8 ft=1 fh=a3f30eff576d0b85 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="G:\Downloads\VLC media player 64 Bit - CHIP-Installer.exe"
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 11-10-2017
durchgeführt von Lasse (Administrator) auf LASSE-PC (12-10-2017 14:05:18)
Gestartet von C:\Users\Lasse\Downloads
Geladene Profile: Lasse & postgres (Verfügbare Profile: Lasse & postgres & DefaultAppPool)
Platform: Windows 10 Home Version 1607 170303-1614 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\pg_ctl.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(PostgreSQL Global Development Group) C:\postgreSQL\bin\postgres.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Octoshape ApS) C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
(Spotify Ltd) C:\Users\Lasse\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(ROCCAT GmbH Co., Ltd.) C:\Program Files (x86)\ROCCAT\Ryos Keyboard\Ryos MK Monitor.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
() C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE
() C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1703.601.0_x64__8wekyb3d8bbwe\Calculator.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(TeamSpeak Systems GmbH) C:\Program Files (x86)\Teamspeak 3\ts3client_win64.exe
(Valve Corporation) E:\Spiele\Steam\Steam.exe
(Valve Corporation) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
(BattlEye Innovations) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
() C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
(Bluehole GinnoGames, Inc.) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame.exe
(Valve Corporation) E:\Spiele\Steam\GameOverlayUI.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Valve Corporation) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Farbar) C:\Users\Lasse\Downloads\FRST64 (2).exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7611608 2014-05-27] (Realtek Semiconductor)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-08-28] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [CheckNDISPort54ac04] => C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe [474504 2015-09-16] ()
HKLM-x32\...\Run: [CancelAutoPlay_df] => C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe [446344 2015-09-16] ()
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-04-19] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4174464 2017-05-23] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Octoshape Streaming Services] => C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [500016 2014-08-01] (Octoshape ApS)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Spotify] => C:\Users\Lasse\AppData\Roaming\Spotify\Spotify.exe [20803184 2017-10-04] (Spotify Ltd)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Run: [Spotify Web Helper] => C:\Users\Lasse\AppData\Roaming\Spotify\SpotifyWebHelper.exe [777840 2017-10-04] (Spotify Ltd)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\MountPoints2: {8c4e4d7b-1c66-11e7-b759-74d435fed1e4} - "G:\AutoRun.exe"
HKU\S-1-5-21-2533615570-3755426884-238519182-1002\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2016-07-16] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ryos Driver.lnk [2015-06-10]
ShortcutTarget: Ryos Driver.lnk -> C:\Program Files (x86)\ROCCAT\Ryos Keyboard\Ryos MK Monitor.exe (ROCCAT GmbH Co., Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2017-05-21]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)
Startup: C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2017-08-13]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.8.1
Tcpip\..\Interfaces\{2fecfc21-6e41-481d-aecf-b1d0260b00b8}: [DhcpNameServer] 192.168.8.1
Internet Explorer:
==================
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-09-19] (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-09-19] (Oracle Corporation)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-30] (AO Kaspersky Lab)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default [2017-10-09]
FF user.js: detected! => C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default\user.js [2015-07-21]
FF Extension: (Adblock Plus) - C:\Users\Lasse\AppData\Roaming\Mozilla\Firefox\Profiles\wgk7bu3s.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-05-30]
FF Extension: (Site Deployment Checker) - C:\Program Files (x86)\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi [2017-03-24] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2017-07-25]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-08-23] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-23] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-09-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-09-19] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-19] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2015-09-09] (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2533615570-3755426884-238519182-1000: @octoshape.com/Octoshape Streaming Services,version=1.0 -> C:\Users\Lasse\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1702150-0-npoctoshape.dll [2017-02-15] (Octoshape ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2016-07-19] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Lasse\AppData\Roaming\mozilla\plugins\npoctoshape.dll [2016-02-16] (Octoshape ApS)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&ts=1429129023&from=cor&uid=CrucialXCT256MX100SSD1_14460DD089940DD08994
CHR StartupUrls: Default -> "hxxps://www.google.de/"
CHR NewTab: Default -> Active:"chrome-extension://llaficoajjainaijghjlofdfmbjpebpa/newtab.html"
CHR Profile: C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default [2017-10-12]
CHR Extension: (Google Präsentationen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-10]
CHR Extension: (Google Docs) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-10]
CHR Extension: (Google Drive) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Pushbullet) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\chlffgpmiacpedhhbkiomidkjlcfhogd [2017-10-08]
CHR Extension: (Steam Inventory Helper) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2017-10-10]
CHR Extension: (Google-Suche) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Tampermonkey) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2017-09-25]
CHR Extension: (Google Tabellen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-10]
CHR Extension: (Google Docs Offline) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-10-06]
CHR Extension: (Speed Dial [FVD] - New Tab Page, 3D, Sync...) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\llaficoajjainaijghjlofdfmbjpebpa [2017-08-27]
CHR Extension: (Dingit Infinite HD App) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\llnhnfikffkjbdnfallfpgikamegbbag [2016-01-29]
CHR Extension: (Ghostery) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2017-09-01]
CHR Extension: (LocalChromecast Player) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmladpigjlinmngadjgfogblnmddndcp [2015-06-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Enhanced Steam) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\okadibdjfemgnhjiembecghcbfknbfhg [2017-09-01]
CHR Extension: (Google Mail) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-10]
CHR Extension: (Chrome Media Router) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27]
CHR Extension: (OPDeals - Find the best deals on OPSkins.com) - C:\Users\Lasse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnmifmjgoddkicidifnaenlagjcofomn [2016-06-30]
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AVP17.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
R3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1548808 2017-10-11] ()
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [Datei ist nicht signiert]
S2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [232528 2017-08-31] (CyberGhost S.A.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2014-10-03] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [156960 2015-02-25] (Intel Corporation)
S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe [77328 2016-06-28] (AO Kaspersky Lab)
R2 KSDE1.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2120712 2016-06-08] (Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1450824 2017-09-10] (Overwolf LTD)
R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-04-19] (Geek Software GmbH)
R2 postgresql-8.4; c:\postgreSQL\bin\pg_ctl.exe [66048 2014-02-18] (PostgreSQL Global Development Group) [Datei ist nicht signiert]
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1776864 2017-05-23] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2131760 2017-05-23] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [233936 2017-05-23] (Safer-Networking Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-03-04] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 BEDaisy; C:\Program Files (x86)\Common Files\BattlEye\BEDaisy.sys [401896 2017-10-12] ()
R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [238936 2016-06-10] (AO Kaspersky Lab)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [27552 2017-06-03] (REALiX(tm))
R0 kl1; C:\WINDOWS\System32\DRIVERS\kl1.sys [554416 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [63920 2016-06-07] (AO Kaspersky Lab)
R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [86352 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [28792 2016-03-31] (AO Kaspersky Lab)
R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [197312 2017-07-25] (AO Kaspersky Lab)
R1 klhk; C:\WINDOWS\System32\drivers\klhk.sys [520152 2017-07-25] (AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP17.0.0\Bases\klids.sys [186184 2017-10-10] (AO Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1021624 2017-07-25] (AO Kaspersky Lab)
R1 KLIM6; C:\WINDOWS\system32\DRIVERS\klim6.sys [57424 2017-03-30] (AO Kaspersky Lab)
R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [52136 2016-05-19] (AO Kaspersky Lab)
R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [45488 2016-05-31] (AO Kaspersky Lab)
R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project)
R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [229288 2017-06-28] (AO Kaspersky Lab)
R3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [87584 2017-10-03] (AO Kaspersky Lab)
R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [251656 2017-08-01] (AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [112912 2017-06-28] (AO Kaspersky Lab)
R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [173144 2017-08-01] (AO Kaspersky Lab)
R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [85320 2016-06-18] (AO Kaspersky Lab)
R1 Klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [136416 2017-03-30] (AO Kaspersky Lab)
R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [199640 2017-07-25] (AO Kaspersky Lab)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [252232 2017-10-10] (Malwarebytes)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2015-02-25] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_b67dc924fff8de6d\nvlddmkm.sys [14199224 2017-01-04] (NVIDIA Corporation)
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [46440 2017-04-06] (SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [45896 2017-05-12] (SteelSeries ApS)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 vpnva; C:\WINDOWS\System32\DRIVERS\vpnva64-6.sys [52592 2015-07-24] (Cisco Systems, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U3 idsvc; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-10-12 14:05 - 2017-10-12 14:05 - 002401792 _____ (Farbar) C:\Users\Lasse\Downloads\FRST64 (2).exe
2017-10-12 11:08 - 2017-10-12 11:09 - 002870984 _____ (ESET) C:\Users\Lasse\Downloads\esetsmartinstaller_deu.exe
2017-10-08 21:15 - 2017-10-08 21:15 - 000064297 _____ C:\Users\Lasse\Downloads\Addition.txt
2017-10-08 21:14 - 2017-10-12 14:05 - 000027480 _____ C:\Users\Lasse\Downloads\FRST.txt
2017-10-08 21:14 - 2017-10-08 21:14 - 002401792 _____ (Farbar) C:\Users\Lasse\Downloads\FRST64.exe
2017-10-08 21:14 - 2017-10-08 21:14 - 002401792 _____ (Farbar) C:\Users\Lasse\Downloads\FRST64 (1).exe
2017-10-08 21:13 - 2017-10-08 21:13 - 001797632 _____ (Farbar) C:\Users\Lasse\Downloads\FRST.exe
2017-10-08 20:54 - 2017-10-08 20:54 - 008250832 _____ (Malwarebytes) C:\Users\Lasse\Downloads\AdwCleaner_7.0.3.1.exe
2017-10-08 18:53 - 2017-10-08 18:58 - 336529408 _____ C:\Users\Lasse\Downloads\kav_rescue_10.iso
2017-10-08 16:47 - 2017-10-08 16:47 - 3646816256 _____ C:\Users\Lasse\Desktop\Windows.iso
2017-10-08 16:00 - 2017-10-08 17:14 - 000000000 ____D C:\ESD
2017-10-08 15:59 - 2017-10-08 15:59 - 000000000 ___HD C:\$Windows.~WS
2017-10-08 15:59 - 2017-10-08 15:59 - 000000000 ____D C:\$WINDOWS.~BT
2017-10-08 14:03 - 2017-10-08 14:04 - 018357776 _____ (Microsoft Corporation) C:\Users\Lasse\Downloads\MediaCreationTool (1).exe
2017-10-08 13:22 - 2017-10-08 14:28 - 000278182 _____ C:\TDSSKiller.3.1.0.15_08.10.2017_13.22.17_log.txt
2017-10-08 13:12 - 2017-10-08 13:12 - 004922400 _____ (AO Kaspersky Lab) C:\Users\Lasse\Downloads\tdsskiller.exe
2017-10-08 13:08 - 2017-10-08 13:22 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-10-08 13:08 - 2017-10-08 13:08 - 000109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2017-10-08 13:07 - 2017-10-08 13:22 - 000000000 ____D C:\Users\Lasse\Desktop\mbar
2017-10-08 13:07 - 2017-10-08 13:07 - 016563352 _____ (Malwarebytes Corp.) C:\Users\Lasse\Downloads\mbar-1.09.3.1001.exe
2017-10-06 23:15 - 2017-10-06 23:15 - 018357776 _____ (Microsoft Corporation) C:\Users\Lasse\Downloads\MediaCreationTool.exe
2017-10-06 23:03 - 2017-10-06 23:04 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2017-10-06 23:03 - 2017-10-06 23:03 - 000001460 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2017-10-06 23:03 - 2017-10-06 23:03 - 000000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2017-10-06 23:03 - 2017-10-06 23:03 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2017-10-06 23:03 - 2017-10-06 23:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2017-10-06 23:03 - 2017-05-23 09:22 - 000032240 _____ (Safer-Networking Ltd.) C:\WINDOWS\system32\sdnclean64.exe
2017-10-06 22:56 - 2017-10-06 22:57 - 051725936 _____ (Safer-Networking Ltd. ) C:\Users\Lasse\Downloads\spybotsd-2.6.46.exe
2017-10-06 22:18 - 2017-10-06 22:18 - 000928176 _____ (Magical Jelly Bean ) C:\Users\Lasse\Downloads\KeyFinderInstaller.exe
2017-10-06 22:18 - 2017-10-06 22:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyFinder
2017-10-06 22:18 - 2017-10-06 22:18 - 000000000 ____D C:\Program Files (x86)\Magical Jelly Bean
2017-10-05 00:20 - 2017-10-12 14:05 - 000000000 ____D C:\FRST
2017-10-05 00:13 - 2017-10-08 20:57 - 000000000 ____D C:\AdwCleaner
2017-10-05 00:08 - 2017-10-10 09:25 - 000252232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2017-10-05 00:08 - 2017-10-10 09:25 - 000077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-10-05 00:08 - 2017-10-08 13:08 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-10-05 00:08 - 2017-10-05 00:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-10-05 00:08 - 2017-10-05 00:08 - 000000000 ____D C:\Program Files\Malwarebytes
2017-10-03 11:48 - 2017-10-03 11:48 - 000087584 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys
2017-09-30 22:42 - 2017-09-30 22:42 - 000439668 _____ C:\Users\Lasse\Downloads\ROU1Z4.pdf
2017-09-30 22:40 - 2017-09-30 22:40 - 000461469 _____ C:\Users\Lasse\Downloads\ELLPVD.pdf
2017-09-28 09:10 - 2017-09-28 09:10 - 000050091 _____ C:\Users\Lasse\Downloads\PB_KAZ_KtoNr_0784600600_06-04-2017_0712.pdf
2017-09-27 10:26 - 2017-09-27 10:26 - 001300888 _____ C:\Users\Lasse\Downloads\AW_ AW_ AW_ AW_ AW_ Bescheinigung f__r HerrnLasseKonz.zip
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-10-12 14:05 - 2015-06-12 00:10 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\TS3Client
2017-10-12 13:38 - 2015-06-10 06:10 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2017-10-12 11:06 - 2015-06-10 23:14 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\Spotify
2017-10-12 00:42 - 2016-09-23 18:34 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-10-10 00:53 - 2016-09-23 18:35 - 000000000 ____D C:\Users\Lasse
2017-10-09 23:50 - 2017-02-07 16:43 - 000000000 ____D C:\Users\Lasse\AppData\LocalLow\Mozilla
2017-10-08 17:14 - 2016-09-23 19:34 - 000000000 ___DC C:\WINDOWS\Panther
2017-10-08 16:02 - 2015-11-10 23:00 - 000000000 ____D C:\Users\Lasse\AppData\Local\Battle.net
2017-10-07 23:54 - 2017-04-12 15:40 - 000000000 ____D C:\Users\Lasse\Documents\Bewerbungen
2017-10-07 23:54 - 2015-06-10 06:20 - 000000000 ____D C:\Users\Lasse\Documents\Uni
2017-10-07 23:54 - 2015-06-10 06:19 - 000000000 ____D C:\Users\Lasse\Documents\Sicherheit
2017-10-07 23:51 - 2015-06-10 06:16 - 000000000 ____D C:\Users\Lasse\Documents\FFS
2017-10-06 22:45 - 2016-07-16 13:47 - 000000000 ___HD C:\Program Files\WindowsApps
2017-10-06 22:45 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-10-06 22:45 - 2016-05-03 13:23 - 000000000 ____D C:\Users\Lasse\AppData\Local\Packages
2017-10-05 09:07 - 2015-06-10 23:15 - 000000000 ____D C:\Users\Lasse\AppData\Local\Spotify
2017-10-05 00:23 - 2016-09-23 18:35 - 002984726 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-10-05 00:23 - 2016-07-17 00:51 - 001268550 _____ C:\WINDOWS\system32\perfh007.dat
2017-10-05 00:23 - 2016-07-17 00:51 - 000321202 _____ C:\WINDOWS\system32\perfc007.dat
2017-10-05 00:18 - 2016-09-23 18:41 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-10-05 00:18 - 2016-09-23 18:35 - 000000000 ____D C:\Users\postgres
2017-10-05 00:18 - 2016-09-23 18:34 - 000000000 ____D C:\ProgramData\NVIDIA
2017-10-05 00:18 - 2016-07-16 08:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2017-10-05 00:16 - 2015-08-13 13:43 - 000000000 ____D C:\Users\Lasse\AppData\Local\Downloaded Installations
2017-10-03 13:40 - 2016-07-16 13:45 - 000000000 ____D C:\WINDOWS\INF
2017-09-27 12:06 - 2015-06-10 06:57 - 000000000 ____D C:\Users\Lasse\AppData\Local\PokerStars.EU
2017-09-27 08:56 - 2015-06-10 05:59 - 000002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-09-24 22:03 - 2017-07-24 21:31 - 000000000 ____D C:\Users\Lasse\AppData\Local\Overwolf
2017-09-22 23:40 - 2017-07-27 09:39 - 000003362 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2533615570-3755426884-238519182-1000
2017-09-22 23:40 - 2016-05-03 13:25 - 000002383 _____ C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-09-22 23:40 - 2016-05-03 13:25 - 000000000 ___RD C:\Users\Lasse\OneDrive
2017-09-19 13:00 - 2015-11-10 23:13 - 000000000 ____D C:\Program Files (x86)\Hearthstone
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HearthSim
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\HearthstoneDeckTracker
2017-09-19 12:59 - 2016-11-06 01:27 - 000000000 ____D C:\Users\Lasse\AppData\Local\HearthstoneDeckTracker
2017-09-19 12:59 - 2016-02-02 00:52 - 000000000 ____D C:\Users\Lasse\AppData\Local\SquirrelTemp
2017-09-19 11:46 - 2015-12-04 10:59 - 000097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\ProgramData\Oracle
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-09-19 11:46 - 2015-12-04 10:59 - 000000000 ____D C:\Program Files (x86)\Java
2017-09-17 19:32 - 2015-06-16 01:41 - 000000000 ____D C:\Users\Lasse\AppData\Roaming\vlc
2017-09-16 17:18 - 2015-06-10 05:21 - 000000000 ____D C:\Users\Lasse\AppData\Local\VirtualStore
2017-09-15 09:32 - 2017-07-24 21:32 - 000000000 ____D C:\Program Files (x86)\Overwolf
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-03-13 14:46 - 2016-03-13 15:09 - 000002438 _____ () C:\Users\Lasse\AppData\Roaming\SpeedRunnersLog.txt
2016-09-23 18:34 - 2016-09-23 18:34 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
Einige Dateien in TEMP:
====================
2016-12-15 12:26 - 2016-12-15 12:26 - 000737856 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u111-windows-au.exe
2017-02-07 16:44 - 2017-02-07 16:44 - 000739904 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u121-windows-au.exe
2017-05-21 13:13 - 2017-05-21 13:13 - 000739904 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u131-windows-au.exe
2017-09-19 11:45 - 2017-09-19 11:45 - 000740416 _____ (Oracle Corporation) C:\Users\Lasse\AppData\Local\Temp\jre-8u144-windows-au.exe
2016-09-25 16:02 - 2016-07-16 13:42 - 000616048 _____ (Microsoft Corporation) C:\Users\Lasse\AppData\Local\Temp\kernel32.dll
2017-03-21 00:57 - 2016-03-09 22:39 - 004839768 ____N (Conexant Systems, Inc.) C:\Users\Lasse\AppData\Local\Temp\KUIU.EXE
2016-10-26 12:38 - 2016-10-26 12:38 - 000040448 ____N () C:\Users\Lasse\AppData\Local\Temp\proxy_vole4284622008590521579.dll
2016-10-26 12:38 - 2016-10-26 12:38 - 000040448 ____N () C:\Users\Lasse\AppData\Local\Temp\proxy_vole9072781731305077584.dll
2016-12-06 14:14 - 2016-12-06 14:14 - 077105961 _____ () C:\Users\Lasse\AppData\Local\Temp\setup.exe
2017-03-23 19:32 - 2017-03-23 19:32 - 014456872 _____ (Microsoft Corporation) C:\Users\Lasse\AppData\Local\Temp\vc_redist.x86.exe
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2017-10-04 23:57
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 11-10-2017
durchgeführt von Lasse (12-10-2017 14:05:51)
Gestartet von C:\Users\Lasse\Downloads
Windows 10 Home Version 1607 170303-1614 (X64) (2016-09-23 16:42:05)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2533615570-3755426884-238519182-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2533615570-3755426884-238519182-503 - Limited - Disabled)
Gast (S-1-5-21-2533615570-3755426884-238519182-501 - Limited - Disabled)
Lasse (S-1-5-21-2533615570-3755426884-238519182-1000 - Administrator - Enabled) => C:\Users\Lasse
postgres (S-1-5-21-2533615570-3755426884-238519182-1002 - Limited - Enabled) => C:\Users\postgres
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Kaspersky Internet Security (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {4C1D9672-63FE-5C90-371E-8FDA591C5B75}
AS: Kaspersky Internet Security (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
1&1 Surf-Stick (HKLM-x32\...\{AEFF9E60-3E93-41EE-9895-311F7D1C5FFD}) (Version: 1.0.0.3 - ZTE Corporation)
888poker (HKLM-x32\...\888poker) (Version: - )
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version: - Hidden Path Entertainment, Ensemble Studios)
Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version: - Ensemble Studios)
Brother MFL-Pro Suite MFC-J4510DW (HKLM-x32\...\{DD98C438-D769-4677-AA87-3481FA32D20C}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5931 - CDBurnerXP)
CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version: - CyberGhost S.R.L.)
Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version: - Red Hook Studios)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
DiRT 3 Complete Edition (HKLM\...\Steam App 321040) (Version: - Codemasters Racing Studio)
Discord (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Discord) (Version: 0.0.290 - Hammer & Chisel, Inc.)
Don't Starve (HKLM-x32\...\Steam App 219740) (Version: - Klei Entertainment)
FUSSBALL MANAGER 13 (HKLM-x32\...\{80AF0300-866F-400F-A350-D53E3C3E34E0}) (Version: 1.0.4.0 - Electronic Arts)
Golf With Your Friends (HKLM\...\Steam App 431240) (Version: - Blacklight Interactive)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Hearthstone Deck Tracker (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\HearthstoneDeckTracker) (Version: 1.4.3 - HearthSim)
Holdem Manager 2 (HKLM-x32\...\HoldemManager2) (Version: - )
Hotline Miami (HKLM-x32\...\Steam App 219150) (Version: - Dennaton Games)
HWiNFO64 Version 5.52 (HKLM\...\HWiNFO64_is1) (Version: 5.52 - Martin Malík - REALiX)
Infinite HD™ App (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Octoshape Streaming Services) (Version: - Octoshape ApS)
InputMapper (HKLM-x32\...\{1A44056A-C7D8-4561-BC43-A0AA7D7AAA64}) (Version: 1.5.31.0 - DSDCS)
Insurgency (HKLM-x32\...\Steam App 222880) (Version: - New World Interactive)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.39.1003 - Intel Corporation)
Intel(R) Network Connections 18.8.136.0 (HKLM\...\PROSetDX) (Version: 18.8.136.0 - Intel)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.4.65 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}) (Version: 10.0.27 - Intel(R) Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Kaspersky Internet Security (HKLM-x32\...\{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{E27B1D7B-3B34-43A2-9FC0-9828D5DF46E2}) (Version: 17.0.0.611 - Kaspersky Lab)
Kaspersky Secure Connection (HKLM-x32\...\{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{1CF84962-50F8-48CA-9082-B70F3A02C686}) (Version: 17.0.0.611 - Kaspersky Lab)
Keep Talking and Nobody Explodes (HKLM\...\Steam App 341800) (Version: - Steel Crate Games)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version: - DONTNOD Entertainment)
Magical Jelly Bean KeyFinder (HKLM-x32\...\KeyFinder_is1) (Version: 2.0.10.12 - Magical Jelly Bean)
Malwarebytes Version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50905.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Monaco (HKLM-x32\...\Steam App 113020) (Version: - Pocketwatch Games)
Mozilla Firefox 52.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 52.0.2 (x86 de)) (Version: 52.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.2 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Mumble 1.2.11 (HKLM-x32\...\{2C0B4F07-7DD2-4D69-9A97-77AE3A37280F}) (Version: 1.2.11 - Thorvald Natvig)
NBA 2K17 (HKLM\...\Steam App 385760) (Version: - Visual Concepts)
Nero 2016 (HKLM-x32\...\{049045D5-0C46-4E78-A83F-83E993D91A7F}) (Version: 17.0.02300 - Nero AG)
Nero Info (HKLM-x32\...\{F030BFE8-8476-4C08-A553-233DE80A2BE1}) (Version: 16.0.2000 - Nero AG)
NetBet Poker (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Netbet Poker) (Version: 1.1.1.33 - NetBet Poker)
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.61.7 - Black Tree Gaming)
Nidhogg (HKLM-x32\...\Steam App 94400) (Version: - Messhof)
No Man's Sky (HKLM\...\Steam App 275850) (Version: - Hello Games)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 376.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.53 - NVIDIA Corporation)
NVIDIA Grafiktreiber 376.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.53 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Orcs Must Die! (HKLM-x32\...\Steam App 102600) (Version: - Robot Entertainment)
Orcs Must Die! 2 (HKLM-x32\...\Steam App 201790) (Version: - Robot Entertainment)
Origin (HKLM-x32\...\Origin) (Version: 9.0.11.77 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.107.36.0 - Overwolf Ltd.)
Party Hard (HKLM\...\Steam App 356570) (Version: - Pinokl Games)
PDF24 Creator 8.1.4 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
PLAYERUNKNOWN'S BATTLEGROUNDS (HKLM\...\Steam App 578080) (Version: - Bluehole, Inc.)
Poker at bet365 (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\bet365poker) (Version: 1.1.1.32 - Poker at bet365)
PokerStrategy.com Equilab (HKLM-x32\...\{86D09F48-CDAB-4B4C-8806-F6C16F17935A}) (Version: 1.2.8.0 - PokerStrategy.com)
PostgreSQL 8.4 (HKLM-x32\...\PostgreSQL 8.4) (Version: 8.4 - PostgreSQL Global Development Group)
Prerequisite installer (HKLM-x32\...\{5F284483-EE8D-447E-BEBE-2BF13B08C4BF}) (Version: 17.0.0002 - Nero AG) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7256 - Realtek Semiconductor Corp.)
Remember Me (HKLM-x32\...\Steam App 228300) (Version: - DONTNOD Entertainment)
ROCCAT Ryos Keyboard Driver (HKLM-x32\...\{70F3EF93-44F4-446A-90B8-33DAB2799AF1}) (Version: 1.29.0006 - Roccat GmbH)
Rocket League (HKLM-x32\...\Steam App 252950) (Version: - Psyonix)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
SpeedRunners (HKLM\...\Steam App 207140) (Version: - DoubleDutch Games)
Spotify (HKU\S-1-5-21-2533615570-3755426884-238519182-1000\...\Spotify) (Version: 1.0.64.399.g4637b02a - Spotify AB)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.6.46 - Safer-Networking Ltd.)
Stashimi Stub Installer (HKLM-x32\...\{910B539D-F257-46C8-9CB8-6C95EFF9CF22}) (Version: 18.001.1 - Nero AG) Hidden
SteelSeries Engine 3.10.2 (HKLM\...\SteelSeries Engine 3) (Version: 3.10.2 - SteelSeries ApS)
Sunless Sea (HKLM-x32\...\Steam App 304650) (Version: - Failbetter Games)
SUPERHOT (HKLM\...\Steam App 322500) (Version: - SUPERHOT Team)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Sims(TM) 3 (HKLM-x32\...\Steam App 47890) (Version: - The Sims Studio)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.0.0 - GOG.com)
The Wolf Among Us (HKLM-x32\...\Steam App 250320) (Version: - Telltale Games)
To the Moon (HKLM-x32\...\Steam App 206440) (Version: - Freebird Games)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version: - Crystal Dynamics)
Undertale (HKLM-x32\...\Steam App 391540) (Version: - tobyfox)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{5D2260D6-DB16-41DC-915B-A39BF4F66362}) (Version: - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Windows Driver Package - Microsoft (xusb21) XnaComposite (08/13/2009 2.1.0.1349) (HKLM\...\0AEBEF6F936CFE16E003F7E141631FAB754D9816) (Version: 08/13/2009 2.1.0.1349 - Microsoft)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Xenonauts (HKLM\...\Steam App 223830) (Version: - Goldhawk Interactive)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2015-04-15] ()
ContextMenuHandlers1: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd.)
ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext32.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers2: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers4: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Keine Datei
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-29] (NVIDIA Corporation)
ContextMenuHandlers6: [Kaspersky Anti-Virus 17.0.0] -> {39C9FA89-7012-4573-A92D-BFD1F8CA542D} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\shellex.dll [2017-03-30] (AO Kaspersky Lab)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd.)
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-05-23] (Safer-Networking Ltd.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-20] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext32.dll [2015-02-20] (Alexander Roshal)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0EA79F79-E1A5-4A0A-9EB4-34A0F7599D7A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {1E2ED6AF-44DD-4BD9-92B4-158C8C364963} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2015-06-04] (Nero AG)
Task: {20619094-6457-425B-A945-0C4FDB1693EB} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {24849D53-6FDE-4375-9849-A131708F6A6B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {27018E8B-CD23-4488-8A1A-B7F8E98989BC} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {2738848A-4A4F-46DA-927F-8C2C9DF0BC8C} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {28CB3FFB-904C-47A0-ABCB-9235400956E9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {297B2EE0-39D1-47A0-A923-E93BBB750EFB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {33A617CB-993D-4FA3-AB13-921058F47898} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {346CA78B-8395-4144-8B90-67B4E73505C4} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {38708F88-5274-46F9-A4FA-C6B8D1965177} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {406CB1B8-07F8-4C0D-8242-932A7202ACA7} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {422893B7-EFA5-4D9A-9E12-347E25F452FE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {4736970E-099A-4720-B7F9-6AA0BC9F8D23} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2017-09-10] (Overwolf LTD)
Task: {48F971F9-1011-494E-9C14-978135E38E0F} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {4D665A95-C820-484E-ACEA-CCA24CD7B7E9} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5907DFEF-F5E3-43D6-A652-4EFE2297BB75} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [2017-08-23] (Adobe Systems Incorporated)
Task: {672CBA70-B858-497D-8199-09B86CE1EAA4} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2017-05-23] (Safer-Networking Ltd.)
Task: {70967EA7-6DC1-4D1C-B266-85A70912B2AF} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {719E802E-99AD-4D2D-93DD-DD40BB975F4A} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {744885B0-6690-4DBF-AFD2-D14D64B73594} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {7C28B565-DF69-4859-BF78-11D1793D2530} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7D8A1940-66E8-4227-BECD-673D47C32407} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2017-05-23] (Safer-Networking Ltd.)
Task: {7DD14D66-8EA0-4B48-BC7B-C3E965279DF5} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2017-05-23] (Safer-Networking Ltd.)
Task: {80BFF415-92DD-4AFD-A317-820EC45E4F40} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {835CACB0-B38D-4B5F-86E4-40A82DCF9296} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8EFE6846-5634-4A31-9D17-188267D1ED8E} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Lasse\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {907543A2-0FD5-44B9-BD78-3210741E547F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {9F6A05A9-B92A-463B-ABDF-2F07A2BAFB72} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {A5FAC33E-1E4D-45CF-9D2F-58914E30A741} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {A7C6D38F-1AB6-4E8B-A2AE-ED60967D762A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {AAD71ED8-2D79-426B-B5E7-1025A792E8EA} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {ADBFE664-7464-4ED6-B6B2-A7FE31575F7B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-10] (Google Inc.)
Task: {B13712F9-EC32-40D6-A54E-AE60165AC92A} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B839D35A-EA53-4A6F-B98F-924FAD8C3E28} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B9DB4DE2-A818-45E0-8885-7D97263146DC} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {D5FE55D7-F207-4A0E-867A-5CA9233DD728} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {D6B9F221-05EA-419A-85EA-BFB06B828E4D} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D9155530-53E3-470B-84CD-93D046C63435} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {DDEAB283-6AA4-460A-8060-C5DEB323E4E4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E58146F5-C22A-4338-A1E7-8A3B3092E1FE} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {E6E8A738-3413-4665-8CB8-024753F4DF68} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-10] (Google Inc.)
Task: {E71C6EB0-1F0C-4E22-B5B4-E785515F4C04} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {EB878804-4C78-4588-A598-2490EB14D64E} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG
Task: {EDCE56E6-E9E9-4DA4-9E12-B676852DF3D2} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F20B98FA-5E1C-4827-A90C-4C4E90FE908C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {F6C8B48F-CC1B-4545-AEB7-97195522EF85} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F84C18D9-CEFF-40B9-8D8B-5E49D490CFEB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FEE482F9-F169-4C25-A082-C5A31777D0FF} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
ShortcutWithArgument: C:\Users\Lasse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Dingit Infinite HD App.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=llnhnfikffkjbdnfallfpgikamegbbag
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2017-10-05 00:08 - 2017-10-10 09:25 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-03-15 08:17 - 2017-03-04 09:19 - 002681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-09-23 18:34 - 2016-12-29 14:44 - 000134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-09-23 19:32 - 2016-09-23 19:32 - 000134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-15 08:16 - 2017-03-04 08:31 - 000474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-15 08:17 - 2017-03-04 08:12 - 009760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 001401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 000757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 001033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-03-15 08:17 - 2017-03-04 08:05 - 002424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-03-15 08:17 - 2017-03-04 08:08 - 004853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-04-10 21:19 - 2015-09-16 13:20 - 000474504 _____ () C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CheckNDISPort_df.exe
2017-04-10 21:19 - 2015-09-16 13:20 - 000446344 _____ () C:\Program Files (x86)\4G Hostless Modem\1&1 Surf-Stick\CancelAutoPlay_df.exe
2017-09-27 08:56 - 2017-09-21 09:29 - 004022616 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll
2017-09-27 08:56 - 2017-09-21 09:29 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 000019456 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2017-04-04 06:54 - 2017-04-04 06:55 - 022723584 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 000448512 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.AGM.Native.Windows.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 005427200 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2016-06-03 08:38 - 2016-06-03 08:38 - 000680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 000435712 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2017-04-04 06:54 - 2017-04-04 06:55 - 001062400 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll
2016-05-03 13:48 - 2016-05-03 13:48 - 000291328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2017-03-14 11:35 - 2017-03-14 11:35 - 003879424 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1703.601.0_x64__8wekyb3d8bbwe\Calculator.exe
2014-02-28 11:14 - 2017-08-23 20:41 - 000173848 _____ () C:\Program Files (x86)\Teamspeak 3\quazip.dll
2017-01-24 12:48 - 2017-07-20 22:05 - 000019736 _____ () C:\Program Files (x86)\Teamspeak 3\libEGL.DLL
2017-01-24 12:48 - 2017-07-20 22:05 - 001980696 _____ () C:\Program Files (x86)\Teamspeak 3\libGLESv2.dll
2014-08-04 15:43 - 2017-08-23 20:41 - 000124696 _____ () C:\Program Files (x86)\Teamspeak 3\soundbackends\directsound_win64.dll
2014-08-04 15:43 - 2017-08-23 20:41 - 000149784 _____ () C:\Program Files (x86)\Teamspeak 3\soundbackends\windowsaudiosession_win64.dll
2017-03-14 12:19 - 2017-07-18 15:18 - 000157696 _____ () C:\Users\Lasse\AppData\Roaming\TS3Client\plugins\gamepad_joystick_win64.dll
2017-03-29 10:36 - 2017-07-23 00:39 - 000345880 _____ () C:\Users\Lasse\AppData\Roaming\TS3Client\plugins\clientquery_plugin_win64.dll
2015-09-01 23:33 - 2017-10-11 20:01 - 001548808 _____ () C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
2017-04-10 09:18 - 2017-04-10 09:18 - 000077312 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-04-10 09:18 - 2017-04-10 09:18 - 000189952 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 042507264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-04-10 09:18 - 2017-04-10 09:18 - 002334184 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\skypert.dll
2017-03-15 08:17 - 2017-03-04 08:04 - 000114176 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll
2016-06-28 00:19 - 2016-06-28 00:19 - 000865232 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\kpcengine.2.3.dll
2015-06-10 15:44 - 2014-02-18 10:11 - 000172032 _____ () c:\postgreSQL\bin\LIBPQ.dll
2015-06-10 15:44 - 2012-08-14 15:19 - 000999424 _____ () c:\postgreSQL\bin\libxml2.dll
2015-12-19 13:34 - 2009-02-27 17:38 - 000139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2015-02-25 14:15 - 2015-02-25 14:15 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2017-10-06 23:03 - 2016-09-13 14:00 - 000109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2017-10-06 23:03 - 2016-09-13 14:00 - 000167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2017-10-06 23:03 - 2016-09-13 14:00 - 000416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2017-10-06 23:03 - 2017-05-12 11:36 - 000507464 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2015-04-13 18:02 - 2017-08-04 23:19 - 000678176 _____ () E:\Spiele\Steam\SDL2.dll
2015-04-13 18:02 - 2016-09-01 03:02 - 004969248 _____ () E:\Spiele\Steam\v8.dll
2015-04-13 18:02 - 2017-10-05 01:49 - 002507552 _____ () E:\Spiele\Steam\video.dll
2015-04-13 18:02 - 2016-01-27 09:49 - 002549760 _____ () E:\Spiele\Steam\libavcodec-56.dll
2015-04-13 18:02 - 2016-01-27 09:49 - 000491008 _____ () E:\Spiele\Steam\libavformat-56.dll
2015-04-13 18:02 - 2016-01-27 09:49 - 000332800 _____ () E:\Spiele\Steam\libavresample-2.dll
2015-04-13 18:02 - 2016-01-27 09:49 - 000442880 _____ () E:\Spiele\Steam\libavutil-54.dll
2015-04-13 18:02 - 2016-01-27 09:49 - 000485888 _____ () E:\Spiele\Steam\libswscale-3.dll
2015-04-13 18:02 - 2016-09-01 03:02 - 001563936 _____ () E:\Spiele\Steam\icui18n.dll
2015-04-13 18:02 - 2016-09-01 03:02 - 001195296 _____ () E:\Spiele\Steam\icuuc.dll
2015-04-13 18:02 - 2017-10-05 01:49 - 000885024 _____ () E:\Spiele\Steam\bin\chromehtml.DLL
2016-03-09 10:12 - 2016-07-05 00:17 - 000266560 _____ () E:\Spiele\Steam\openvr_api.dll
2016-12-13 09:18 - 2017-07-18 00:50 - 073115424 _____ () E:\Spiele\Steam\bin\cef\cef.win7\libcef.dll
2017-06-09 12:44 - 2017-05-17 03:54 - 000678176 _____ () E:\Spiele\Steam\bin\cef\cef.win7\SDL2.dll
2015-04-13 18:02 - 2015-09-25 01:52 - 000119208 _____ () E:\Spiele\Steam\winh264.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2009-06-10 23:00 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2533615570-3755426884-238519182-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Lasse\Pictures\Wallpaper\04071_posbanksunrise_1920x1080.jpg
HKU\S-1-5-21-2533615570-3755426884-238519182-1002\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.8.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
HKLM\...\StartupApproved\Run: => "XboxStat"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{1E466E5F-2A71-492E-98D2-EA93CF6E40F0}] => (Allow) E:\Spiele\Steam\steamapps\common\NBA 2K17\NBA2K17.exe
FirewallRules: [{617272FE-4F9E-43EE-A885-ECC015C336EB}] => (Allow) E:\Spiele\Steam\steamapps\common\NBA 2K17\NBA2K17.exe
FirewallRules: [{7321E602-C543-400C-A004-CA8FFC3D5A4A}] => (Allow) E:\Spiele\Steam\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{8BE67DB3-DECC-470C-9D2F-9B91BCD744F3}] => (Allow) E:\Spiele\Steam\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{B328988F-EE12-4BA0-8426-6BB569B74BC4}] => (Allow) E:\Spiele\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe
FirewallRules: [{BC4B85F6-039D-4A60-BD60-B2F949795A4F}] => (Allow) E:\Spiele\Steam\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe
FirewallRules: [{93196552-2B76-40A2-8AC6-5ED3AC385EDE}] => (Allow) E:\Spiele\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{1713722F-A2E5-4B13-9B34-9D373D32D19A}] => (Allow) E:\Spiele\Steam\steamapps\common\Keep Talking and Nobody Explodes\ktane.exe
FirewallRules: [{7C6252FF-2BD1-48B1-8EE7-11F01095F6AF}] => (Allow) E:\Spiele\Steam\steamapps\common\Party Hard\PartyHardGame.exe
FirewallRules: [{B03C27A8-503B-4E29-AF88-ECA2874F8115}] => (Allow) E:\Spiele\Steam\steamapps\common\Party Hard\PartyHardGame.exe
FirewallRules: [{95BB5D24-AAE4-48CD-AD4A-7BEACA31E040}] => (Allow) E:\Spiele\FM 13\FIFA Manager 13\Manager13.exe
FirewallRules: [{71917C83-B5B8-44D3-9885-2DAA51520195}] => (Allow) E:\Spiele\FM 13\FIFA Manager 13\Manager13.exe
FirewallRules: [{7A259C44-2035-48D3-B803-527BAA84A00C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{136B8D0E-9CD0-428D-BD45-E959117A0B7D}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{3FE9E163-9DF9-468A-80A6-2FD24C996685}] => (Allow) E:\Spiele\Steam\Steam.exe
FirewallRules: [{7AA6E0A5-3A86-4DA6-9E6B-65B9F088E2C5}] => (Allow) E:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{0AC559E6-B66A-415D-8C96-E010240CD25B}] => (Allow) E:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{F812826A-D8DA-481B-AA3C-AA6496CF7407}] => (Allow) LPort=5432
FirewallRules: [{6EE59405-4FE7-4C34-802B-B7864025000D}] => (Allow) E:\Spiele\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{775E93DD-299A-452D-85DF-E003378F4AF7}] => (Allow) E:\Spiele\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{02B8BFE5-921E-4436-BD44-241093836FEF}C:\users\lasse\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{0F3B6A72-A0CD-4A76-A613-4E72B693D499}C:\users\lasse\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{DA383AC0-382E-4E96-8E85-FC514F9973E0}] => (Block) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{97944202-EB96-4692-A1F6-6873242A53B4}] => (Block) C:\users\lasse\appdata\roaming\spotify\spotify.exe
FirewallRules: [{B63764EC-EAD8-46F6-96B0-5F565BD408A0}] => (Allow) E:\Spiele\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{86AAD87C-259E-4DEE-8BA6-A346EAFF9741}] => (Allow) E:\Spiele\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{4E8CBBD0-5190-4B1F-B1F0-E41EBE21BF35}] => (Allow) E:\Spiele\Steam\steamapps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{D68A69E0-F93A-41CB-8C82-CC8FC9244415}] => (Allow) E:\Spiele\Steam\steamapps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{449BA439-FA7E-4220-8AE5-9556A9903CCE}] => (Allow) E:\Spiele\Steam\steamapps\common\Monaco\MONACO.exe
FirewallRules: [{4D3B8DD6-EC48-4E8C-BC21-CE661B0B5E4D}] => (Allow) E:\Spiele\Steam\steamapps\common\Monaco\MONACO.exe
FirewallRules: [{B1443441-3CDD-4C3B-9FAA-A41F3811F3F7}] => (Allow) E:\Spiele\Steam\steamapps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{F1844A71-6B17-40DD-93DF-B3157B18E2AB}] => (Allow) E:\Spiele\Steam\steamapps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{8CE98A1F-DE86-4B9A-A961-380B3B186EA5}] => (Allow) E:\Spiele\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{87B91361-539F-4F9A-972F-5E442B183014}] => (Allow) E:\Spiele\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{B10831ED-E1AF-492C-8522-6F71149DC361}] => (Allow) E:\Spiele\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{DAE8C590-F8F2-4B5A-80B6-190CFD231643}] => (Allow) E:\Spiele\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{CE280E12-EBAC-4749-9C33-F713917762C6}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{ABB850C5-C8AB-4762-B0E5-4233A38BBAD5}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\To the Moon\To the Moon.exe
FirewallRules: [{23CAB5A6-90E7-4B5F-A251-201EFF4BF363}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{71B33882-60FC-414E-A619-8C841C227CEB}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_1\Sigmund Holiday Special 1\Siggy - Holiday Special.exe
FirewallRules: [{D6275B97-7CCA-4D72-B2D0-C59B191646A2}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{56BB1E53-FB77-4022-AE31-73BA33CB027A}] => (Allow) E:\Spiele\Steam\steamapps\common\To the Moon\Minisode_2\Sigmund Holiday Special 2\SigCorp Minisode 2.exe
FirewallRules: [{73E5AEA7-7F8C-4C16-A9A7-11036BDEC1BB}] => (Allow) E:\Spiele\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{E66552C8-DFC4-4173-9CCD-4D836FF27FBE}] => (Allow) E:\Spiele\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{4C9D1A88-DD80-42F3-AA6F-539B9BB5B6FE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{472BE848-3445-4146-8188-B73DDA3AAFE1}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{2B2E3DDE-228A-4A83-9184-B2D1D91B5831}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{684B6BB3-1B8C-413A-82D8-49B1DE5A167B}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{829113CB-AC94-496A-9478-43FC86DA0BB0}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{A5CAA5D9-3DC2-41C2-8690-312E4557E940}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{FDA27D14-8297-4859-AD36-8AB3888B1AD6}] => (Allow) E:\Spiele\Steam\steamapps\common\The Escapists\TheEscapists.exe
FirewallRules: [{C18FFD8B-AA4C-477D-BE31-74383408BF4C}] => (Allow) E:\Spiele\Steam\steamapps\common\The Escapists\TheEscapists.exe
FirewallRules: [{6136A26E-CA75-4D67-B0BD-423A5666AF3D}] => (Allow) E:\Spiele\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{A43A680C-6633-4B88-8D76-F71E264CEB5C}] => (Allow) E:\Spiele\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{034A7BAD-CDD6-402A-ACAD-E51AD4034DB5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DE323322-04AA-4F55-831E-22940A60FF86}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{402959E9-2213-474B-A27A-4853495C516B}] => (Allow) E:\Spiele\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{ED531946-64C5-4EBC-8702-B6B9F2535128}] => (Allow) E:\Spiele\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{F87CE81F-BEEA-47A4-8241-BA4756C8A4CD}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\StartNBR.exe
FirewallRules: [{3A6300B7-00E8-46D5-8ECC-E375FA61CF51}] => (Allow) C:\Program Files (x86)\Nero\KM\NMDllHost.exe
FirewallRules: [{06FA67C8-0226-49B3-8BFC-6A324C6143B9}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\nero.exe
FirewallRules: [{70A1D115-776E-442D-B635-5C48A609F090}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{0AB8CE89-EF32-4D06-8D03-B4E96B91C4FE}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{7D12B200-A0E1-43A1-8DAF-7684F1C4E052}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{B73CDADE-D09D-48D6-8DB4-F69A42D9D261}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{9F531F4E-7F68-40D3-B6F9-816F81A7DBF0}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{2C339AA4-48F4-4C83-B6C1-270D763B206E}] => (Allow) E:\Spiele\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{C712039D-7FCB-49A8-8026-DE07D1DC526B}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{AA18F165-E99F-48B1-98DB-49483B35AFC3}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{F5C55161-49AB-46E1-9BF1-3E7D6F91AD9C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D3EBB153-CF95-4ADF-9168-72C1EB5100AE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E356CA51-EDA0-4C07-80DD-DA34E318F06A}] => (Allow) E:\Spiele\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{3872A773-8FC2-4E44-A3E5-4DD5B4BC6BFE}] => (Allow) E:\Spiele\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe
FirewallRules: [{0FB8E1B1-89A5-4C44-BE8B-A8E3F68AA798}] => (Allow) E:\Spiele\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{AF6BF9E6-3314-4E1C-A503-CCFCF433A9AF}] => (Allow) E:\Spiele\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{A5C30CBE-BC7B-4342-B07B-9641D65AC6E2}] => (Allow) E:\Spiele\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{482A1B91-7A81-4341-BCA1-89982A5B36B8}] => (Allow) E:\Spiele\Steam\steamapps\common\Undertale\UNDERTALE.exe
FirewallRules: [{321B2ABA-4D8C-42E0-B90E-94FE2C10A424}] => (Allow) E:\Spiele\Steam\steamapps\common\SunlessSea\Sunless Sea.exe
FirewallRules: [{A11501AC-13EA-48D4-97D0-9C28A15232AC}] => (Allow) E:\Spiele\Steam\steamapps\common\SunlessSea\Sunless Sea.exe
FirewallRules: [{84492F8B-869B-4EBD-9DB0-208FAB7BAC53}] => (Allow) E:\Spiele\Steam\steamapps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{1948B0EB-9995-4EFD-9F73-4F8ED8C87359}] => (Allow) E:\Spiele\Steam\steamapps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{222C045E-D37F-4F00-9435-BCA8B826A4CD}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{58AF54BA-C7A7-414E-B218-AE69F0C79E58}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{16E91255-C63D-419F-B7F3-D2E65802C2C6}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die!\Build\release\OrcsMustDie.exe
FirewallRules: [{3BF145A6-1208-469D-9D96-47AF98A34F13}] => (Allow) E:\Spiele\Steam\steamapps\common\Orcs Must Die!\Build\release\OrcsMustDie.exe
FirewallRules: [{109621AB-AD42-4F9D-9CBB-B095B91EA0FD}] => (Allow) E:\Spiele\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{B428F1DB-5C9A-43F5-973F-E189FCF0055D}] => (Allow) E:\Spiele\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{5F05E05B-43ED-4A1F-8906-5961EF90204C}] => (Allow) E:\Spiele\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{8D81F410-E273-4F9D-B4D5-2E76F5ED5033}] => (Allow) E:\Spiele\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{80951455-24EE-4165-A983-75CC2AB8EF3C}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{8301D091-8FA9-47EF-A5F7-A6D5B57E77CC}] => (Allow) E:\Spiele\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe
FirewallRules: [{B0753FA3-A1E2-404F-97BA-8B12F6FC297A}] => (Allow) E:\Spiele\Steam\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{2FAA2F4D-F5F7-49FF-8BE4-AEEA611C8444}] => (Allow) E:\Spiele\Steam\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{45EDBFE7-40CA-4DC9-A617-9B7735681291}] => (Allow) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{3E2DDB12-63CA-45B1-928C-F9686A7431BC}] => (Allow) E:\Spiele\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{9F2DFE30-98A1-42BB-81AE-F228F3112A7A}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency_BE.exe
FirewallRules: [{B762F452-7752-452E-915A-B786911457C3}] => (Allow) E:\Spiele\Steam\steamapps\common\insurgency2\insurgency_BE.exe
FirewallRules: [{EE98545F-F4D4-439A-BA33-2D2F643333C5}] => (Allow) E:\Spiele\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{68C4579D-5BA7-4FAF-956E-7510959F6B97}] => (Allow) E:\Spiele\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{01BE84CD-D4C6-4424-AEF6-4C8FD2100925}] => (Allow) E:\Spiele\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{21CC6D64-6E55-4F88-82E0-58D1F8878439}] => (Allow) E:\Spiele\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{87C66560-B3E5-4749-847D-05D0527F82DE}] => (Allow) E:\Spiele\Steam\steamapps\common\SUPERHOT\SUPERHOT.exe
FirewallRules: [{8627AAF7-3098-4C1E-B206-137676FBA7E7}] => (Allow) E:\Spiele\Steam\steamapps\common\SUPERHOT\SUPERHOT.exe
FirewallRules: [{99FF5CAA-8EFF-4B75-9BCC-98A059C4A22C}] => (Allow) E:\Spiele\Steam\steamapps\common\Xenonauts\Xenonauts.exe
FirewallRules: [{8112DE72-765F-4B1D-B539-D29754768198}] => (Allow) E:\Spiele\Steam\steamapps\common\Xenonauts\Xenonauts.exe
FirewallRules: [{9313420C-23DA-4C55-B1BA-5454242C11C1}] => (Allow) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{65031DE8-8599-410E-8005-157880B32F6E}] => (Allow) E:\Spiele\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{A41C77B0-CEF3-4AAA-8275-F47BAC21A52E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{0F2C788C-80BD-41BC-B2E2-CFD86DA18444}] => (Allow) E:\Spiele\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{95476250-87A8-4FC0-9957-C37277752147}] => (Allow) E:\Spiele\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{ECF5E114-4D40-4339-B42E-9B0B854912A8}] => (Allow) E:\Spiele\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{CC130A07-29A0-4281-AC98-57CB7848095E}] => (Allow) E:\Spiele\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Wiederherstellungspunkte =========================
26-09-2017 04:03:04 Geplanter Prüfpunkt
04-10-2017 23:58:05 Geplanter Prüfpunkt
12-10-2017 11:16:35 Geplanter Prüfpunkt
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Windows\System32\sdnclean64.exe". Fehler in Manifest- oder Richtliniendatei "C:\Windows\System32\sdnclean64.exe" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTasks.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTasks.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDResources.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDResources.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\Tools.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\Tools.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWinLogon.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWinLogon.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLicense.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLicense.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunizeLibrary.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunizeLibrary.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLists.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLists.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFileScanLibrary.dll". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFileScanLibrary.dll" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (10/12/2017 02:03:43 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFileScanHelper.exe". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFileScanHelper.exe" in Zeile 2.
Das Stammelement der Manifestdatei muss assembliert sein.
Systemfehler:
=============
Error: (10/12/2017 11:52:23 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (10/12/2017 11:52:23 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Lasse\AppData\Local\Temp\ehdrv.sys
Error: (10/12/2017 11:52:22 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (10/12/2017 11:52:22 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Lasse\AppData\Local\Temp\ehdrv.sys
Error: (10/12/2017 11:52:22 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (10/12/2017 11:52:22 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Lasse\AppData\Local\Temp\ehdrv.sys
Error: (10/12/2017 11:33:09 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (10/12/2017 11:33:09 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Lasse\AppData\Local\Temp\ehdrv.sys
Error: (10/12/2017 11:33:08 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (10/12/2017 11:33:08 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Lasse\AppData\Local\Temp\ehdrv.sys
CodeIntegrity:
===================================
Date: 2017-06-01 11:20:03.507
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-06-01 11:20:03.488
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-05-31 15:48:53.894
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-05-31 15:48:53.857
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-05-31 10:59:25.975
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-05-24 12:31:13.218
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-03-17 15:15:49.745
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
Date: 2017-03-17 15:15:49.731
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
Date: 2017-03-17 15:15:49.710
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.
Date: 2017-03-17 15:15:49.666
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz
Prozentuale Nutzung des RAM: 43%
Installierter physikalischer RAM: 16314.86 MB
Verfügbarer physikalischer RAM: 9200.59 MB
Summe virtueller Speicher: 32698.86 MB
Verfügbarer virtueller Speicher: 22185.04 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:237.93 GB) (Free:59.61 GB) NTFS
Drive e: (Volume) (Fixed) (Total:476.94 GB) (Free:61.77 GB) NTFS
Drive f: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive g: (BFG) (Fixed) (Total:465.75 GB) (Free:217.07 GB) exFAT
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: D6DE4E1F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=237.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 476.9 GB) (Disk ID: 7931B67B)
Partition 1: (Not Active) - (Size=476.9 GB) - (Type=07 NTFS)
========================================================
Disk: 3 (Size: 465.8 GB) (Disk ID: A86C4D51)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
15.10.2017, 20:57
| #13 |
| Ruhe in Frieden † 2019 | Vermutlich infiziertes Dokument geöffnet - mehrere Stunden kein Zugriff auf E-Mail Accounts Hallo, ja das sind allesamt Dateien von Chip. Dazu folgendes: Chip installiert gerne mit seinen Downloadern andere Programme. Wenn du dazu noch was lesen möchtest: Hier Hier Hier Auch versuchen sich immer mehr Programme durch Installationsroutinen auf den PC "durchzumogeln". Das klappt ganz gut, weil viele Anwender sich diese nicht genau durchlesen und schnell durchklicken. Manchmal steht auch in den Lizenzvereinbarungen, dass ein Programm, was eigentlich als Freeware angepriesen wird, nur genutzt werden kann, wenn man sich bestimmte Toolbars oder andere Programme mitinstallieren lässt. Da hilft es nur aufmerksam zu sein. Bitte verschiebe FRST aus dem Downloadordner auf den Desktop, ansonsten funktioniert der Fix nicht. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&ts=1429129023&from=cor&uid=CrucialXCT256MX100SSD1_14460DD089940DD08994
C:\Users\Lasse\AppData\Local\NetBet Poker\internalSetupPoker (1)Uninstall1478520825814_na_en.exe
C:\Users\Lasse\AppData\Local\Poker at bet365\internalSetupPokerUninstall1484516496026_407fae_de.exe
C:\Users\Lasse\AppData\Local\Temp\DMR\dmr_72.exe
C:\Users\Lasse\Downloads\Notepad - CHIP-Installer.exe
C:\Users\Lasse\Downloads\OpenOffice - CHIP-Installer.exe
C:\Users\Lasse\Downloads\PDF24 Creator - CHIP-Installer.exe
C:\Users\Lasse\Downloads\SetupPoker.exe
C:\Users\Lasse\Downloads\SetupPoker_407fae.exe
C:\Users\Lasse\Downloads\TeamSpeak 3 64 Bit - CHIP-Installer.exe
C:\Users\Lasse\Downloads\VLC media player 64 Bit - CHIP-Installer.exe
G:\Downloads\Notepad - CHIP-Installer.exe
G:\Downloads\OpenOffice - CHIP-Installer.exe
G:\Downloads\PDF24 Creator - CHIP-Installer.exe
G:\Downloads\SetupPoker.exe
G:\Downloads\SetupPoker_407fae.exe
G:\Downloads\TeamSpeak 3 64 Bit - CHIP-Installer.exe
G:\Downloads\VLC media player 64 Bit - CHIP-Installer.exe
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
OK So wie ich es sehe, haben wir damit alles Schadhafte entfernt. Deine Logs sind sauber. Abschließend räumen wir noch etwas auf, führen Updates durch und dann bekommst du noch etwas Lesestoff von mir. Schritt 1 Falls Du Malwarebytes-Antimalware und den ESET-Onlinescan nicht mehr benötigst, kannst Du beide Programme einfach über die Programmdeinstallation deinstallieren. Ich empfehle Dir aber zumindest Malwarebytes zu behalten, und damit einmal die Woche einen Kontrollscan zu machen. Updates / Programme aktualisieren
Stelle sicher, dass dein FlashPlayer nach Updates sucht. Den FlashPlayer kann man direkt bei der Installation so konfigurieren, dass er nach Updates automatisch sucht, nachträglich kann man das über folgenden Link machen: Adobe - Flash Player: Einstellungsmanager - Globale Benachrichtigungseinstellungen
Nun zum Schluss noch ein paar Tipps zur Absicherung deines Systems. Ändere regelmäßig alle deine Passwörter, jetzt, nach der Bereinigung ist ein idealer Zeitpunkt dafür
Aktualität des Systems Es ist extrem wichtig, dass sowohl dein System als auch die darauf installierte sicherheitsrelevante Software (Flash Player, PDF-Reader und besonders Java, sofern vorhanden) aktuell sind.
Sofern du Java nicht zwingend benötigst, solltest du es komplett deinstallieren. Windows Vista Gehe auf: Start --> Systemsteuerung -- > Programme --> Programme deinstallieren --> Javaversionen suchen --> entfernen Windows 7 Dazu gehe auf: den Windowsbutton in der Taskleiste --> Systemsteuerung --> Programme (Unterpunkt Programme deinstallieren) --> Programm auswählen --> entfernen Windows 8 Dazu drücke auf: Windowstaste und X dann: Programme und Funktionen -->Javaversionen auswählen --> entfernen Falls du Java doch unbedingt benötigst, dann
Dazu:
Hier findest du eine Anleitung dazu. Antivirensoftware
Zusätzlicher Schutz
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der Internet Explorer, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Systemleistung Lösche regelmäßig deine temporären Dateien. Ich empfehle hierzu die Datenträgerbereinigung von Windows. Windows Vista
Windows 7
Windows 8
Windows 10
Halte dich fern von jeglichen Registry Cleanern. Diese schaden deinem System mehr als dass sie es schneller machen. Verhaltensregeln zum sichereren Surfen
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen. Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind. Falls Du Lob oder Kritik abgeben möchtest, kannst Du das sehr gerne hier tun. Wenn Du etwas für das Forum und unsere Arbeit spenden möchtest, so kannst Du das hier tun. |
|
15.10.2017, 22:57
| #14 |
| | Vermutlich infiziertes Dokument geöffnet - mehrere Stunden kein Zugriff auf E-Mail AccountsCode:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15-10-2017
durchgeführt von Lasse (15-10-2017 23:43:42) Run:1
Gestartet von C:\Users\Lasse\Desktop
Geladene Profile: Lasse & postgres (Verfügbare Profile: Lasse & postgres & DefaultAppPool)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
CHR HomePage: Default -> hxxp://www.mystartsearch.com/?type=hp&ts=1429129023&from=cor&uid=CrucialXCT256MX100SSD1_14460DD089940DD08994
C:\Users\Lasse\AppData\Local\NetBet Poker\internalSetupPoker (1)Uninstall1478520825814_na_en.exe
C:\Users\Lasse\AppData\Local\Poker at bet365\internalSetupPokerUninstall1484516496026_407fae_de.exe
C:\Users\Lasse\AppData\Local\Temp\DMR\dmr_72.exe
C:\Users\Lasse\Downloads\Notepad - CHIP-Installer.exe
C:\Users\Lasse\Downloads\OpenOffice - CHIP-Installer.exe
C:\Users\Lasse\Downloads\PDF24 Creator - CHIP-Installer.exe
C:\Users\Lasse\Downloads\SetupPoker.exe
C:\Users\Lasse\Downloads\SetupPoker_407fae.exe
C:\Users\Lasse\Downloads\TeamSpeak 3 64 Bit - CHIP-Installer.exe
C:\Users\Lasse\Downloads\VLC media player 64 Bit - CHIP-Installer.exe
G:\Downloads\Notepad - CHIP-Installer.exe%
G:\Downloads\OpenOffice - CHIP-Installer.exe
G:\Downloads\PDF24 Creator - CHIP-Installer.exe
G:\Downloads\SetupPoker.exe
G:\Downloads\SetupPoker_407fae.exe
G:\Downloads\TeamSpeak 3 64 Bit - CHIP-Installer.exe
G:\Downloads\VLC media player 64 Bit - CHIP-Installer.exe
*****************
Chrome HomePage => erfolgreich entfernt
C:\Users\Lasse\AppData\Local\NetBet Poker\internalSetupPoker (1)Uninstall1478520825814_na_en.exe => erfolgreich verschoben
C:\Users\Lasse\AppData\Local\Poker at bet365\internalSetupPokerUninstall1484516496026_407fae_de.exe => erfolgreich verschoben
C:\Users\Lasse\AppData\Local\Temp\DMR\dmr_72.exe => erfolgreich verschoben
C:\Users\Lasse\Downloads\Notepad - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Lasse\Downloads\OpenOffice - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Lasse\Downloads\PDF24 Creator - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Lasse\Downloads\SetupPoker.exe => erfolgreich verschoben
C:\Users\Lasse\Downloads\SetupPoker_407fae.exe => erfolgreich verschoben
C:\Users\Lasse\Downloads\TeamSpeak 3 64 Bit - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\Lasse\Downloads\VLC media player 64 Bit - CHIP-Installer.exe => erfolgreich verschoben
G:\Downloads\Notepad - CHIP-Installer.exe => erfolgreich verschoben
G:\Downloads\OpenOffice - CHIP-Installer.exe => erfolgreich verschoben
G:\Downloads\PDF24 Creator - CHIP-Installer.exe => erfolgreich verschoben
G:\Downloads\SetupPoker.exe => erfolgreich verschoben
G:\Downloads\SetupPoker_407fae.exe => erfolgreich verschoben
G:\Downloads\TeamSpeak 3 64 Bit - CHIP-Installer.exe => erfolgreich verschoben
G:\Downloads\VLC media player 64 Bit - CHIP-Installer.exe => erfolgreich verschoben
==== Ende von Fixlog 23:43:52 ====
"Beim Installieren von Updates sind Probleme aufgetreten. Wir versuchen es allerdings später noch einmal. Falls dieser Fehler weiterhin auftritt und Sie Informationen im Web suchen oder sich an den Support wenden möchten, kann dieser Fehlercode hilfreich sein: (0x80070422)." |
|
22.10.2017, 19:59
| #15 |
| | Vermutlich infiziertes Dokument geöffnet - mehrere Stunden kein Zugriff auf E-Mail Accounts Warte noch auf eine Antwort, ob das Normal ist bzw. wie man das ändern kann. Danke |
|
| Themen zu Vermutlich infiziertes Dokument geöffnet - mehrere Stunden kein Zugriff auf E-Mail Accounts |
| chromium, cpu, defender, dringend, e-mail, explorer, flash player, google, home, homepage, kaspersky, logfile, mozilla, neustart, programm, proxy, prozesse, realtek, registry, scan, security, services.exe, system, udp, usb, windows, windowsapps |
Linear-Darstellung
