search and new tab by yahoo

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 24-11-2017
durchgeführt von lem0th (Administrator) auf COMPUTER-128234 (24-11-2017 19:28:16)
Gestartet von C:\Users\lem0th\Downloads
Geladene Profile: lem0th & _ashbackuppb_ (Verfügbare Profile: lem0th & _ashbackuppb_ & Administrator & DefaultAppPool)
Platform: Windows 10 Pro Version 1709 16299.64 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Ransomware Tool for Business 1.1\anti_ransom.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
() C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
() C:\Program Files (x86)\NETGEAR\WNA3100M\WifiSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
() C:\Program Files\Ashampoo\Ashampoo Backup Pro 11\bin\backupService-abpb.exe
() C:\Program Files\Ashampoo\Ashampoo Backup Pro 11\bin\oxHelper.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Ransomware Tool for Business 1.1\anti_ransom_gui.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Ransomware Tool for Business 1.1\anti_ransom_gui.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Ransomware Tool for Business 1.1\anti_ransom_gui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Ashampoo\Ashampoo Backup Pro 11\bin\backupClient-abpb.exe
() C:\Program Files (x86)\puush\puush.exe
() C:\Program Files\Ashampoo\Ashampoo Backup Pro 11\bin\oxHelper.exe
() C:\Program Files (x86)\NETGEAR\WNA3100M\WNA3100M.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Discord Inc.) C:\Users\lem0th\AppData\Local\Discord\app-0.0.298\Discord.exe
(Discord Inc.) C:\Users\lem0th\AppData\Local\Discord\app-0.0.298\Discord.exe
(Discord Inc.) C:\Users\lem0th\AppData\Local\Discord\app-0.0.298\Discord.exe
(Dominik Reichl) C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(VideoLAN) C:\Program Files\VideoLAN\VLC\vlc.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11710.1001.27.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(Microsoft) C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Ashampoo Development GmbH & Co. KG) C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 7\UI7.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163800 2016-07-30] (IvoSoft)
HKLM\...\Run: [Ashampoo Backup PB] => C:\Program Files\Ashampoo\Ashampoo Backup Pro 11\bin\backupClient-abpb.exe [326040 2017-05-08] ()
HKLM\...\Run: [Everything] => C:\Program Files\Everything\Everything.exe [2197608 2017-06-07] ()
HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2004-06-14] (InstallShield Software Corporation)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3222448 2017-10-12] (Dominik Reichl)
HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [112104 2017-03-21] (VMware, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Beschränkung <==== ACHTUNG
HKU\S-1-5-21-624198674-977653023-2037852723-1040\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [568904 2015-05-30] ()
HKU\S-1-5-21-624198674-977653023-2037852723-1040\...\Run: [Discord] => C:\Users\lem0th\AppData\Local\Discord\app-0.0.298\Discord.exe [57477112 2017-08-08] (Discord Inc.)
HKU\S-1-5-21-624198674-977653023-2037852723-1040\...\Run: [ISUSPM Startup] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2004-06-14] (InstallShield Software Corporation)
HKU\S-1-5-21-624198674-977653023-2037852723-1040\...\Run: [Vivaldi Update Notifier] => C:\ProgramData\chocolatey\lib\Vivaldi\tools\vivaldi\Vivaldi-bin\update_notifier.exe [4716664 2017-09-20] (Vivaldi Technologies AS)
HKU\S-1-5-21-624198674-977653023-2037852723-1040\...\Policies\system: [DisableLockWorkstation] 1
HKU\S-1-5-21-624198674-977653023-2037852723-1052\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [519680 2017-09-29] (Microsoft Corporation)
AppInit_DLLs: prio.dll => Keine Datei
IFEO\utilman.exe: [Debugger] c:\windows\system32\cmd.exe
SSODL: EldosMountNotificator-cbfs6 - {73F8D53A-4E1F-4434-A7D0-7C1E3B50BB78} - C:\WINDOWS\system32\cbfsMntNtf6.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator-cbfs6 - {73F8D53A-4E1F-4434-A7D0-7C1E3B50BB78} - C:\WINDOWS\SysWOW64\cbfsMntNtf6.dll (EldoS Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WNA3100M Genie.lnk [2016-07-10]
ShortcutTarget: NETGEAR WNA3100M Genie.lnk -> C:\Program Files (x86)\NETGEAR\WNA3100M\WNA3100M.exe ()
GroupPolicy: Beschränkung <==== ACHTUNG
GroupPolicy\User: Beschränkung <==== ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{0a287408-cae2-4b64-9929-6ec5bb421193}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-624198674-977653023-2037852723-1040\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-624198674-977653023-2037852723-1040 -> {8CD4FD52-359A-4F3E-BEB3-D2114C31B19B} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&intl=de&fr=yset_ie_syc_oracle&type=orcl_default&partnerexternal-oracle=external-oracle
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_151\bin\ssv.dll [2017-10-28] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-28] (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2016-07-30] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2016-07-30] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)

FireFox:
========
FF DefaultProfile: 3am39cb5.default
FF ProfilePath: C:\Users\lem0th\AppData\Roaming\Mozilla\Firefox\Profiles\3am39cb5.default [2017-11-24]
FF NetworkProxy: Mozilla\Firefox\Profiles\3am39cb5.default -> backup.ftp&quot;, &quot;100.44.118.68&quot;
FF Extension: (No Resource URI Leak) - C:\Users\lem0th\AppData\Roaming\Mozilla\Firefox\Profiles\3am39cb5.default\Extensions\@no-resource-uri-leak.xpi [2016-12-24] [Lagacy]
FF Extension: (HTTPS Everywhere) - C:\Users\lem0th\AppData\Roaming\Mozilla\Firefox\Profiles\3am39cb5.default\Extensions\https-everywhere@eff.org.xpi [2017-11-23]
FF Extension: (uBlock Origin) - C:\Users\lem0th\AppData\Roaming\Mozilla\Firefox\Profiles\3am39cb5.default\Extensions\uBlock0@raymondhill.net.xpi [2017-11-08]
FF Extension: (uMatrix) - C:\Users\lem0th\AppData\Roaming\Mozilla\Firefox\Profiles\3am39cb5.default\Extensions\uMatrix@raymondhill.net.xpi [2017-11-23]
FF Extension: (User Agent Switcher) - C:\Users\lem0th\AppData\Roaming\Mozilla\Firefox\Profiles\3am39cb5.default\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi [2017-03-27] [Lagacy]
FF Extension: (O2 Service Suite) - C:\Users\lem0th\AppData\Roaming\Mozilla\Firefox\Profiles\3am39cb5.default\Extensions\{} [2017-01-17] [Lagacy] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll [2017-11-20] ()
FF Plugin: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-10-28] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-28] (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-11-20] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2015-01-09] (Adobe Systems, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-13] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-13] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Keine Datei]

Chrome: 
=======
CHR DefaultProfile: Profile 1
CHR StartupUrls: Profile 1 -> &quot;hxxps://www.youtube.com/feed/subscriptions&quot;,&quot;hxxps://twitter.com/&quot;
CHR DefaultSearchURL: Profile 1 -> hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_chr_syc_oracle&type=default
CHR DefaultSearchKeyword: Profile 1 -> Yahoo
CHR DefaultSuggestURL: Profile 1 -> hxxps://de.search.yahoo.com/sugg/ie?output=fxjson&command={searchTerms}&nResults=10
CHR Profile: C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default [2017-07-01]
CHR Extension: (Google Präsentationen) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-03-12]
CHR Extension: (Google Docs) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-03-12]
CHR Extension: (Google Drive) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-03-12]
CHR Extension: (YouTube) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-03-12]
CHR Extension: (Yahoo Partner) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabhkdeopjkcpkmofliimbjckmocfiom [2017-03-12]
CHR Extension: (Yahoo Partner) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdbpcigaolookbahgdofnimidinicfid [2017-06-30]
CHR Extension: (Google Tabellen) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-03-12]
CHR Extension: (Google Docs Offline) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-06-30]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2017-03-12]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-12]
CHR Extension: (Google Mail) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-03-12]
CHR Extension: (Chrome Media Router) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-06-30]
CHR Profile: C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default.old [2017-03-15] <==== ACHTUNG
CHR Extension: (Google Präsentationen) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default.old\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-01-17]
CHR Extension: (Google Docs) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default.old\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-17]
CHR Extension: (Google Drive) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default.old\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-17]
CHR Extension: (YouTube) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default.old\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-17]
CHR Extension: (Google Tabellen) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default.old\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-01-17]
CHR Extension: (Google Docs Offline) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default.old\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-17]
CHR Extension: (Blue Space) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default.old\Extensions\lgafflokkagpjiofcoodepkehnpldbge [2017-01-17]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default.old\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-17]
CHR Extension: (Google Mail) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Default.old\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-17]
CHR Profile: C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-11-24]
CHR Extension: (Google Präsentationen) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-01-17]
CHR Extension: (Google Docs) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-17]
CHR Extension: (Google Drive) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-17]
CHR Extension: (YouTube) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-17]
CHR Extension: (CryptUp: Encrypt Gmail with PGP) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bnjglocicdkmhmoohhfkfkbbkejdhdgc [2017-02-10]
CHR Extension: (uBlock Origin) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2017-01-17]
CHR Extension: (Google Tabellen) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-01-17]
CHR Extension: (HTTPS Everywhere) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2017-01-28]
CHR Extension: (Google Docs Offline) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-17]
CHR Extension: (Black blue shards) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hgoflmajhinnohnhkfeggflmmppiilck [2017-01-17]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-19]
CHR Extension: (uMatrix) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ogfcmafjalglgifnmanfmnieipoejdcf [2017-01-17]
CHR Extension: (Google Mail) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-17]
CHR Extension: (Chrome Media Router) - C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-28]
CHR Profile: C:\Users\lem0th\AppData\Local\Google\Chrome\User Data\System Profile [2017-01-17]
CHR HKU\S-1-5-21-624198674-977653023-2037852723-1040\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fabhkdeopjkcpkmofliimbjckmocfiom] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fdbpcigaolookbahgdofnimidinicfid] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated)
R2 AntiRansom; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Ransomware Tool for Business 1.1\anti_ransom.exe [693720 2016-07-19] (AO Kaspersky Lab)
R2 ashbackuppb; c:\Program Files\Ashampoo\Ashampoo Backup Pro 11\bin\backupService-abpb.exe [34712 2017-05-08] ()
R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [216576 2016-08-18] () [Datei ist nicht signiert]
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [145224 2016-11-08] (Seiko Epson Corporation)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [303360 2015-06-24] (Realtek Semiconductor)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4297920 2017-09-30] (Microsoft Corporation)
S2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [12482024 2017-03-21] ()
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-29] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105944 2017-09-29] (Microsoft Corporation)
R2 WSWNA3100M; C:\Program Files (x86)\NETGEAR\WNA3100M\WifiSvc.exe [316120 2014-08-18] ()

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2016-12-25] ()
S3 ampa; C:\WINDOWS\SysWOW64\ampa.sys [38320 2016-12-25] ()
R1 cbfs6; C:\WINDOWS\system32\drivers\cbfs6.sys [460992 2016-06-13] (EldoS Corporation)
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-09-17] (Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-09-17] (Disc Soft Ltd)
R0 kl1; C:\WINDOWS\System32\DRIVERS\kl1.sys [554416 2016-06-02] (AO Kaspersky Lab)
R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [191312 2016-06-26] (AO Kaspersky Lab)
R1 klhk; C:\WINDOWS\system32\DRIVERS\klhk.sys [413008 2016-06-28] (AO Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1012048 2016-06-26] (AO Kaspersky Lab)
R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [45488 2016-05-31] (AO Kaspersky Lab)
R1 Klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [126864 2016-06-02] (AO Kaspersky Lab)
S3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [102856 2016-12-22] (Malwarebytes)
S3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [43968 2016-12-22] (Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [253856 2017-09-02] (Malwarebytes)
S3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [91584 2016-12-23] (Malwarebytes)
R1 MpKsl0afd70c2; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{1069DB8A-8BBF-4770-ACD8-EF3DF934A9C1}\MpKsl0afd70c2.sys [58120 2017-11-21] (Microsoft Corporation)
R1 MpKsl12257a4f; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{51632064-DC69-4F45-B781-2E4779211AEF}\MpKsl12257a4f.sys [58120 2017-11-23] (Microsoft Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-09-29] (Realtek )
R3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [3859704 2015-10-16] (Realtek Semiconductor Corporation )
R3 taphss6; C:\WINDOWS\System32\drivers\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
R2 UI5IFS; C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 7\IFS64.sys [30016 2017-11-17] ()
S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [23040 2017-09-29] (Microsoft Corporation)
S3 VBAudioVACMME; C:\WINDOWS\system32\DRIVERS\vbaudio_cable64_win7.sys [41192 2016-01-29] (Windows (R) Win 7 DDK provider)
R1 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [131144 2016-12-20] (Oracle Corporation)
S3 VBoxUSB; C:\WINDOWS\System32\Drivers\VBoxUSB.sys [125008 2015-11-10] (Oracle Corporation)
R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [631200 2017-10-15] (IDRIX)
R3 vpnpbus; C:\WINDOWS\System32\drivers\vpnpbus.sys [18624 2016-06-13] (EldoS Corporation)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [37960 2016-11-14] (VMware, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44608 2017-09-29] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [309144 2017-09-29] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119192 2017-09-29] (Microsoft Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-11-24 19:28 - 2017-11-24 19:31 - 000025278 _____ C:\Users\lem0th\Downloads\FRST.txt
2017-11-24 19:27 - 2017-11-24 19:27 - 002393088 _____ (Farbar) C:\Users\lem0th\Downloads\FRST64.exe
2017-11-24 13:38 - 2017-11-24 13:38 - 000001285 _____ C:\Users\Public\Desktop\Ashampoo UnInstaller 7.lnk
2017-11-24 13:38 - 2017-11-24 13:38 - 000000221 _____ C:\Users\Public\Desktop\Ashampoo Deals.url
2017-11-24 13:38 - 2017-11-24 13:38 - 000000000 ____D C:\Users\lem0th\AppData\Local\Ashampoo
2017-11-24 13:37 - 2017-11-24 13:37 - 000000000 ____D C:\Program Files (x86)\Ashampoo
2017-11-24 13:35 - 2017-11-24 13:37 - 015879616 _____ (Ashampoo GmbH & Co. KG ) C:\Users\lem0th\Downloads\ashampoo_uninstaller_7_7.00.00_sm.exe
2017-11-23 20:09 - 2017-10-21 20:00 - 002916352 _____ C:\Users\lem0th\Desktop\main.db
2017-11-23 11:49 - 2017-11-23 11:50 - 059117240 _____ (Skype Technologies S.A. ) C:\Users\lem0th\Downloads\Skype-8.11.0.4.exe
2017-11-22 05:37 - 2017-11-22 05:37 - 000000022 _____ C:\WINDOWS\S.dirmngr
2017-11-22 05:37 - 2017-11-22 05:37 - 000000000 ____H C:\ProgramData\cm-lock
2017-11-22 05:27 - 2017-11-22 05:27 - 000000039 _____ C:\Users\lem0th\jeff stream.txt
2017-11-21 19:24 - 2017-11-21 19:24 - 000167296 _____ (Gibson Research Corp.) C:\Users\lem0th\Downloads\DNSBench.exe
2017-11-21 19:20 - 2017-11-21 19:21 - 000008653 _____ C:\Users\lem0th\Downloads\DNS Benchmarklist v1 by Möwe.ini
2017-11-21 02:18 - 2017-11-21 02:18 - 000000037 _____ C:\Users\lem0th\cities patar.txt
2017-11-20 01:46 - 2017-11-20 01:46 - 000001450 _____ C:\MediathekView.lnk
2017-11-20 01:44 - 2017-11-20 01:44 - 000004466 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-11-20 01:43 - 2017-11-20 01:43 - 000000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2017-11-20 01:43 - 2017-11-20 01:43 - 000000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2017-11-17 21:28 - 2017-10-25 10:11 - 017083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2017-11-17 21:28 - 2017-10-25 10:09 - 021753344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2017-11-17 21:28 - 2017-10-25 04:36 - 025246208 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-11-17 21:28 - 2017-10-25 04:16 - 023658496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-11-17 21:27 - 2017-10-25 10:11 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicRuntimes.dll
2017-11-17 21:27 - 2017-10-25 09:57 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2017-11-17 21:27 - 2017-10-25 09:57 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2017-11-17 21:27 - 2017-10-25 09:56 - 000665600 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2017-11-17 21:27 - 2017-10-25 07:36 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2017-11-17 21:27 - 2017-10-25 05:41 - 000362176 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe
2017-11-17 21:27 - 2017-10-25 05:40 - 001634288 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-11-17 21:27 - 2017-10-25 05:40 - 000612760 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-11-17 21:27 - 2017-10-25 05:40 - 000269696 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2017-11-17 21:27 - 2017-10-25 05:39 - 007831248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2017-11-17 21:27 - 2017-10-25 05:39 - 000479912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2017-11-17 21:27 - 2017-10-25 05:39 - 000285080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-11-17 21:27 - 2017-10-25 05:37 - 001954048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-11-17 21:27 - 2017-10-25 05:37 - 000610712 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-11-17 21:27 - 2017-10-25 05:36 - 008590744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-11-17 21:27 - 2017-10-25 05:36 - 002400664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-11-17 21:27 - 2017-10-25 05:36 - 000187288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-11-17 21:27 - 2017-10-25 05:34 - 002573208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-11-17 21:27 - 2017-10-25 05:34 - 000839928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-11-17 21:27 - 2017-10-25 05:34 - 000710920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-11-17 21:27 - 2017-10-25 05:32 - 000559512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-11-17 21:27 - 2017-10-25 05:32 - 000147864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2017-11-17 21:27 - 2017-10-25 05:31 - 000436120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-11-17 21:27 - 2017-10-25 05:31 - 000045464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2017-11-17 21:27 - 2017-10-25 05:30 - 004487968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-11-17 21:27 - 2017-10-25 05:30 - 000555416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-11-17 21:27 - 2017-10-25 05:29 - 002269080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2017-11-17 21:27 - 2017-10-25 05:29 - 001507736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-11-17 21:27 - 2017-10-25 05:29 - 000603920 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2017-11-17 21:27 - 2017-10-25 05:28 - 001170008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-11-17 21:27 - 2017-10-25 05:27 - 006791472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-11-17 21:27 - 2017-10-25 05:27 - 001970520 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-11-17 21:27 - 2017-10-25 05:27 - 001426152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-11-17 21:27 - 2017-10-25 05:27 - 000374032 _____ (Microsoft Corporation) C:\WINDOWS\system32\vac.exe
2017-11-17 21:27 - 2017-10-25 05:24 - 000428952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-11-17 21:27 - 2017-10-25 05:20 - 002717392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-11-17 21:27 - 2017-10-25 04:52 - 001615720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-11-17 21:27 - 2017-10-25 04:50 - 001528904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-11-17 21:27 - 2017-10-25 04:30 - 005615968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2017-11-17 21:27 - 2017-10-25 04:30 - 000354200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2017-11-17 21:27 - 2017-10-25 04:28 - 004648528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-11-17 21:27 - 2017-10-25 04:28 - 001246432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2017-11-17 21:27 - 2017-10-25 04:28 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-11-17 21:27 - 2017-10-25 04:27 - 001454568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2017-11-17 21:27 - 2017-10-25 04:27 - 001377080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-11-17 21:27 - 2017-10-25 04:27 - 001015008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-11-17 21:27 - 2017-10-25 04:24 - 000506256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2017-11-17 21:27 - 2017-10-25 04:22 - 006015200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-11-17 21:27 - 2017-10-25 04:22 - 002465848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-11-17 21:27 - 2017-10-25 04:19 - 003670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-11-17 21:27 - 2017-10-25 04:19 - 000097792 _____ C:\WINDOWS\system32\runexehelper.exe
2017-11-17 21:27 - 2017-10-25 04:18 - 000975872 _____ C:\WINDOWS\system32\FaceProcessor.dll
2017-11-17 21:27 - 2017-10-25 04:18 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2017-11-17 21:27 - 2017-10-25 04:18 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2017-11-17 21:27 - 2017-10-25 04:18 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2017-11-17 21:27 - 2017-10-25 04:18 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2017-11-17 21:27 - 2017-10-25 04:18 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcSpecfc.dll
2017-11-17 21:27 - 2017-10-25 04:16 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2017-11-17 21:27 - 2017-10-25 04:16 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
2017-11-17 21:27 - 2017-10-25 04:16 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-11-17 21:27 - 2017-10-25 04:15 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-11-17 21:27 - 2017-10-25 04:14 - 000541184 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2017-11-17 21:27 - 2017-10-25 04:14 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrleakdiag.exe
2017-11-17 21:27 - 2017-10-25 04:13 - 002972672 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2017-11-17 21:27 - 2017-10-25 04:12 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-11-17 21:27 - 2017-10-25 04:12 - 000599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-11-17 21:27 - 2017-10-25 04:12 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-11-17 21:27 - 2017-10-25 04:11 - 000768512 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-11-17 21:27 - 2017-10-25 04:10 - 008099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-11-17 21:27 - 2017-10-25 04:10 - 004742144 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-11-17 21:27 - 2017-10-25 04:10 - 001167360 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2017-11-17 21:27 - 2017-10-25 04:09 - 002862080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-11-17 21:27 - 2017-10-25 04:09 - 002106368 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-11-17 21:27 - 2017-10-25 04:09 - 001806336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-11-17 21:27 - 2017-10-25 04:09 - 000812032 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-11-17 21:27 - 2017-10-25 04:08 - 002905600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-11-17 21:27 - 2017-10-25 04:08 - 002781696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-11-17 21:27 - 2017-10-25 04:08 - 002633216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-11-17 21:27 - 2017-10-25 04:08 - 002392576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2017-11-17 21:27 - 2017-10-25 04:08 - 001667584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-11-17 21:27 - 2017-10-25 04:08 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-11-17 21:27 - 2017-10-25 04:08 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
2017-11-17 21:27 - 2017-10-25 04:08 - 000465408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-11-17 21:27 - 2017-10-25 04:07 - 018914304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-11-17 21:27 - 2017-10-25 04:07 - 003478016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2017-11-17 21:27 - 2017-10-25 04:07 - 001485824 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-11-17 21:27 - 2017-10-25 04:07 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-11-17 21:27 - 2017-10-25 04:07 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2017-11-17 21:27 - 2017-10-25 04:07 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll
2017-11-17 21:27 - 2017-10-25 04:06 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2017-11-17 21:27 - 2017-10-25 04:05 - 019339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-11-17 21:27 - 2017-10-25 04:05 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-11-17 21:27 - 2017-10-25 04:05 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcVSp1res.dll
2017-11-17 21:27 - 2017-10-25 04:04 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2017-11-17 21:27 - 2017-10-25 04:04 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdrleakdiag.exe
2017-11-17 21:27 - 2017-10-25 04:03 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2017-11-17 21:27 - 2017-10-25 04:02 - 000591872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-11-17 21:27 - 2017-10-25 04:01 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-11-17 21:27 - 2017-10-25 03:59 - 003679232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-11-17 21:27 - 2017-10-25 03:59 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2017-11-17 21:27 - 2017-10-25 03:58 - 002467840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-11-17 21:27 - 2017-10-25 03:58 - 001322496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2017-11-17 21:27 - 2017-10-25 03:58 - 001280000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2017-11-17 21:27 - 2017-10-25 03:57 - 006035968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-11-17 21:27 - 2017-10-25 03:55 - 002864640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2017-11-17 21:27 - 2017-10-25 03:54 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcVSp1res.dll
2017-11-17 21:27 - 2017-10-21 13:25 - 003313968 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2017-11-17 21:27 - 2017-10-20 15:17 - 002474584 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2017-11-17 21:27 - 2017-10-20 06:08 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-11-17 20:35 - 2017-11-17 20:35 - 000000000 _____ C:\Users\lem0th\AppData\Roaming\text.txt
2017-11-17 20:27 - 2017-11-17 20:27 - 000000000 ____D C:\Users\lem0th\AppData\Local\CrystalDiskMark5
2017-11-17 20:14 - 2017-11-17 20:14 - 000000000 ____D C:\WINDOWS\containers
2017-11-17 20:05 - 2017-11-17 20:07 - 000000000 ____D C:\WLAN
2017-11-17 19:59 - 2017-11-17 20:00 - 000000000 ____D C:\Program Files\CrystalDiskMark5
2017-11-17 19:58 - 2017-11-17 19:59 - 002783312 _____ (Crystal Dew World ) C:\Users\lem0th\Downloads\crystaldiskmark5_1_2-en.exe
2017-11-17 15:56 - 2017-11-17 15:56 - 000000000 _____ C:\WINDOWS\SysWOW64\last.dump
2017-11-17 15:45 - 2017-11-17 15:45 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2017-11-17 15:37 - 2017-11-17 15:43 - 000000000 ____D C:\ProgramData\AVAST Software
2017-11-17 15:34 - 2017-11-17 15:35 - 010849904 _____ (Piriform Ltd) C:\Users\lem0th\Downloads\ccsetup537.exe
2017-11-16 22:10 - 2017-11-16 22:10 - 000096646 _____ C:\sleepstudy-report.html
2017-11-16 20:01 - 2017-11-16 20:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WhoCrashed
2017-11-16 16:57 - 2017-11-16 16:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
2017-11-16 16:57 - 2017-11-16 16:57 - 000000000 ____D C:\Program Files (x86)\Windows Kits
2017-11-14 16:15 - 2017-11-14 16:15 - 000000016 _____ C:\Users\lem0th\uke termin.txt
2017-11-13 15:15 - 2017-11-13 15:15 - 000030518 _____ C:\Users\lem0th\tasklist.txt
2017-11-12 22:08 - 2017-10-10 08:14 - 000139672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2017-11-12 22:08 - 2017-10-10 08:11 - 000739696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2017-11-12 22:08 - 2017-10-10 08:10 - 001200024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-11-12 22:08 - 2017-10-10 08:01 - 005906264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-11-12 22:08 - 2017-10-10 08:00 - 001053592 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-11-12 22:08 - 2017-10-10 08:00 - 000373656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-11-12 22:08 - 2017-10-10 07:59 - 001641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-11-12 22:08 - 2017-10-10 07:59 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-11-12 22:08 - 2017-10-10 07:54 - 001463856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2017-11-12 22:08 - 2017-10-10 07:53 - 000464416 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2017-11-12 22:08 - 2017-10-10 07:53 - 000232344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-11-12 22:08 - 2017-10-10 07:51 - 000184984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-11-12 22:08 - 2017-10-10 07:49 - 001554216 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2017-11-12 22:08 - 2017-10-10 07:49 - 000060824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urscx01000.sys
2017-11-12 22:08 - 2017-10-10 07:48 - 000677280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-11-12 22:08 - 2017-10-10 07:44 - 000246168 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-11-12 22:08 - 2017-10-10 07:43 - 000418712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-11-12 22:08 - 2017-10-10 07:36 - 001436432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-11-12 22:08 - 2017-10-10 07:31 - 001323840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2017-11-12 22:08 - 2017-10-10 07:30 - 000123520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2017-11-12 22:08 - 2017-10-10 07:26 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-11-12 22:08 - 2017-10-10 07:11 - 000597160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2017-11-12 22:08 - 2017-10-10 07:07 - 001261864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2017-11-12 22:08 - 2017-10-10 07:06 - 000353688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-11-12 22:08 - 2017-10-10 06:46 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2017-11-12 22:08 - 2017-10-10 06:46 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2017-11-12 22:08 - 2017-10-10 06:43 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2017-11-12 22:08 - 2017-10-10 06:43 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2017-11-12 22:08 - 2017-10-10 06:42 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2017-11-12 22:08 - 2017-10-10 06:42 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2017-11-12 22:08 - 2017-10-10 06:37 - 002869248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-11-12 22:08 - 2017-10-10 06:37 - 001587200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2017-11-12 22:08 - 2017-10-10 06:37 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-11-12 22:08 - 2017-10-10 06:36 - 001664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2017-11-12 22:08 - 2017-10-10 06:36 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2017-11-12 22:08 - 2017-10-10 06:34 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2017-11-12 22:08 - 2017-10-10 06:34 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-11-12 22:08 - 2017-10-10 06:34 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2017-11-12 22:08 - 2017-10-10 06:33 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2017-11-12 22:08 - 2017-10-10 06:33 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-11-12 22:08 - 2017-10-10 06:32 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2017-11-12 22:08 - 2017-10-10 06:32 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2017-11-12 22:08 - 2017-10-10 06:31 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-11-12 22:08 - 2017-10-10 06:31 - 000478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-11-12 22:08 - 2017-10-10 06:30 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2017-11-12 22:08 - 2017-10-10 06:30 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2017-11-12 22:08 - 2017-10-10 06:27 - 001547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-11-12 22:08 - 2017-10-10 06:26 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-11-12 22:08 - 2017-10-10 06:26 - 001856000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2017-11-12 22:08 - 2017-10-10 06:25 - 001822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-11-12 22:08 - 2017-10-10 06:25 - 000925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-11-12 22:08 - 2017-10-10 06:24 - 000726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-11-12 22:08 - 2017-10-10 06:24 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-11-12 22:08 - 2017-10-10 06:24 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-11-12 22:08 - 2017-10-03 23:42 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-11-12 22:08 - 2017-10-03 23:42 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-11-05 23:06 - 2017-11-05 23:06 - 000000043 _____ C:\Users\lem0th\money glitch.txt
2017-11-04 00:38 - 2017-11-04 00:38 - 000000000 ____D C:\Users\lem0th\Documents\FeedbackHub
2017-11-03 21:22 - 2017-10-28 12:12 - 000110144 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-64.dll
2017-11-01 19:17 - 2017-11-01 19:17 - 000023610 _____ C:\Users\lem0th\Documents\my-umatrix-backup.txt
2017-11-01 19:12 - 2017-11-01 19:13 - 000015765 _____ C:\Users\lem0th\Documents\my-umatrix-rules.txt
2017-10-31 12:25 - 2017-10-31 12:26 - 058031933 _____ C:\Users\lem0th\Documents\TV-20171030-2347-5101.webxl.h264.mp4
2017-10-30 19:57 - 2017-11-23 11:59 - 000000000 ____D C:\Users\lem0th\AppData\Local\PlaceholderTileLogoFolder
2017-10-30 18:02 - 2017-09-29 14:41 - 001312504 _____ (Microsoft Corporation) C:\WINDOWS\Taskmgr.exe
2017-10-30 17:30 - 2017-10-30 17:31 - 000080083 _____ C:\Users\lem0th\Documents\Addition.txt
2017-10-30 17:28 - 2017-10-30 17:31 - 000115706 _____ C:\Users\lem0th\Documents\FRST.txt
2017-10-30 17:11 - 2017-11-24 19:28 - 000000000 ____D C:\FRST
2017-10-30 17:10 - 2017-10-30 17:11 - 002403328 _____ (Farbar) C:\Users\lem0th\Documents\FRST64.exe
2017-10-30 16:42 - 2017-10-30 16:42 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-10-30 16:41 - 2017-10-30 16:41 - 000000000 ___HD C:\Users\lem0th\MicrosoftEdgeBackups
2017-10-30 16:39 - 2017-10-30 16:39 - 000001160 __RSH C:\Users\lem0th\ntuser.pol
2017-10-30 16:39 - 2017-10-30 16:39 - 000000020 ___SH C:\Users\lem0th\ntuser.ini
2017-10-30 16:39 - 2017-10-30 16:39 - 000000000 ___RD C:\Users\lem0th\3D Objects
2017-10-30 16:33 - 2017-10-30 16:34 - 000019053 _____ C:\WINDOWS\diagwrn.xml
2017-10-30 16:33 - 2017-10-30 16:34 - 000019053 _____ C:\WINDOWS\diagerr.xml
2017-10-30 16:31 - 2017-11-23 23:17 - 000003658 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2017-10-30 16:31 - 2017-11-22 05:37 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-10-30 16:31 - 2017-11-13 20:15 - 000003628 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-10-30 16:31 - 2017-11-13 20:15 - 000003504 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-10-30 16:31 - 2017-10-30 16:32 - 000003502 _____ C:\WINDOWS\System32\Tasks\EPSON XP-540 Series Update {2AB6DE24-84C4-4AAB-BF4A-771C3BEF1053}
2017-10-30 16:31 - 2017-10-30 16:32 - 000003116 _____ C:\WINDOWS\System32\Tasks\klcp_update
2017-10-30 16:31 - 2017-10-30 16:32 - 000002484 _____ C:\WINDOWS\System32\Tasks\Defender tägliche Updates
2017-10-30 16:31 - 2017-10-30 16:31 - 000003502 _____ C:\WINDOWS\System32\Tasks\EPSON XP-540 Series Update {57EB58A9-FBFB-47E1-B238-BD9213EE8D07}
2017-10-30 16:31 - 2017-10-30 16:31 - 000002746 _____ C:\WINDOWS\System32\Tasks\Sperrbildschirm
2017-10-30 16:31 - 2017-10-30 16:31 - 000000000 ____D C:\WINDOWS\System32\Tasks\WPD
2017-10-30 16:31 - 2016-12-19 18:28 - 000002210 _____ C:\WINDOWS\System32\Tasks\Core Temp Autostart Tygan
2017-10-30 16:21 - 2017-10-30 16:21 - 000000020 ___SH C:\Users\_ashbackuppb_\ntuser.ini
2017-10-30 16:09 - 2017-11-24 13:42 - 000000000 ____D C:\Users\lem0th\AppData\Local\Packages
2017-10-30 16:09 - 2017-10-30 16:09 - 000000000 ____D C:\ProgramData\USOShared
2017-10-30 16:07 - 2017-11-22 05:27 - 000000000 ____D C:\Users\lem0th
2017-10-30 16:07 - 2017-11-01 17:08 - 000000000 ____D C:\Users\_ashbackuppb_
2017-10-30 16:07 - 2017-10-30 16:29 - 000000000 ____D C:\Users\DefaultAppPool
2017-10-30 16:07 - 2017-10-30 16:26 - 000000000 ____D C:\Users\Administrator
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\lem0th\Vorlagen
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\lem0th\Startmenü
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\lem0th\Netzwerkumgebung
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\lem0th\Lokale Einstellungen
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\lem0th\Eigene Dateien
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\lem0th\Druckumgebung
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\lem0th\Documents\Eigene Videos
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\lem0th\Documents\Eigene Musik
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\lem0th\Documents\Eigene Bilder
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\lem0th\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\lem0th\AppData\Local\Verlauf
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\lem0th\AppData\Local\Anwendungsdaten
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\lem0th\Anwendungsdaten
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Videos
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\Administrator\Vorlagen
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\Administrator\Startmenü
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\Administrator\Netzwerkumgebung
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\Administrator\Lokale Einstellungen
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\Administrator\Eigene Dateien
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\Administrator\Druckumgebung
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\Administrator\Documents\Eigene Videos
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\Administrator\AppData\Local\Anwendungsdaten
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\Administrator\Anwendungsdaten
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\_ashbackuppb_\Vorlagen
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\_ashbackuppb_\Startmenü
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\_ashbackuppb_\Netzwerkumgebung
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\_ashbackuppb_\Lokale Einstellungen
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\_ashbackuppb_\Eigene Dateien
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\_ashbackuppb_\Druckumgebung
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\_ashbackuppb_\Documents\Eigene Videos
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\_ashbackuppb_\Documents\Eigene Musik
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\_ashbackuppb_\Documents\Eigene Bilder
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\_ashbackuppb_\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\_ashbackuppb_\AppData\Local\Verlauf
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\_ashbackuppb_\AppData\Local\Anwendungsdaten
2017-10-30 16:07 - 2017-10-30 16:07 - 000000000 _SHDL C:\Users\_ashbackuppb_\Anwendungsdaten
2017-10-30 16:02 - 2017-11-11 15:12 - 002252414 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-10-30 16:01 - 2017-09-29 14:41 - 002241024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-10-30 15:58 - 2017-11-24 18:02 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-10-30 15:58 - 2017-11-22 05:37 - 000742728 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-10-30 15:35 - 2016-06-28 12:28 - 000413008 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys
2017-10-30 15:35 - 2016-06-26 15:14 - 001012048 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys
2017-10-30 15:35 - 2016-06-26 15:14 - 000191312 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klflt.sys
2017-10-30 15:35 - 2016-06-02 22:39 - 000126864 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klwtp.sys
2017-10-30 15:35 - 2016-06-02 03:43 - 000554416 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\kl1.sys
2017-10-30 15:35 - 2016-05-31 23:31 - 000045488 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klpd.sys
2017-10-30 15:34 - 2017-10-30 15:34 - 000000000 ___DL C:\Users\Public\Recorded TV (1)
2017-10-30 15:34 - 2017-10-30 15:34 - 000000000 ____D C:\Program Files\Common Files\SpeechEngines
2017-10-30 15:33 - 2017-10-30 15:54 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-10-30 15:30 - 2017-10-30 15:33 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-10-30 15:26 - 2017-10-30 15:54 - 000000000 ___SD C:\WINDOWS\system32\lxss
2017-10-30 15:26 - 2017-10-30 15:26 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2017-10-30 15:26 - 2017-10-30 15:26 - 000000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2017-10-30 15:26 - 2017-10-30 15:26 - 000000000 ____D C:\WINDOWS\system32\msmq
2017-10-30 15:26 - 2017-10-30 15:26 - 000000000 ____D C:\WINDOWS\system32\BestPractices
2017-10-30 15:26 - 2017-10-30 15:26 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-10-30 15:26 - 2017-10-30 15:26 - 000000000 ____D C:\Program Files\MSBuild
2017-10-30 15:26 - 2017-10-30 15:26 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-10-30 15:26 - 2017-10-30 15:26 - 000000000 ____D C:\Program Files (x86)\MSBuild
2017-10-30 15:26 - 2017-10-30 15:26 - 000000000 ____D C:\inetpub
2017-10-30 15:21 - 2017-09-22 18:19 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-10-30 15:21 - 2017-09-22 18:19 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-10-30 15:21 - 2017-09-22 18:19 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2017-10-30 15:20 - 2017-09-28 15:50 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-10-30 15:20 - 2017-09-28 15:50 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-10-30 15:20 - 2017-09-28 15:50 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-10-30 14:49 - 2017-10-30 14:49 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-10-30 14:13 - 2017-11-02 10:44 - 000000000 ___DC C:\WINDOWS\Panther
2017-10-30 14:07 - 2017-10-30 14:13 - 000000036 _____ C:\WINDOWS\progress.ini
2017-10-30 13:37 - 2017-10-30 16:36 - 000000000 ___HD C:\$GetCurrent
2017-10-28 09:38 - 2017-10-28 09:38 - 000195346 _____ C:\Users\lem0th\Documents\wu170509 (1).diagcab
2017-10-27 20:01 - 2017-10-27 20:01 - 000001440 _____ C:\Users\lem0th\Desktop\MediathekView.lnk
2017-10-27 19:58 - 2017-10-28 12:12 - 000110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2017-10-27 19:57 - 2017-10-28 12:14 - 000000000 ____D C:\Program Files\Java
2017-10-27 19:39 - 2017-10-27 19:39 - 000195346 _____ C:\Users\lem0th\Documents\wu170509.diagcab
2017-10-25 12:33 - 2017-10-25 12:33 - 000265976 _____ C:\Users\lem0th\Documents\lageplan_uke.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-11-24 19:33 - 2017-01-17 18:40 - 000000000 ____D C:\Users\lem0th\AppData\Roaming\NetSpeedMonitor
2017-11-24 19:26 - 2017-03-15 12:54 - 000000000 ____D C:\Users\lem0th\AppData\Local\Ashampoo Backup PB
2017-11-24 19:06 - 2017-01-17 17:29 - 000000000 ____D C:\Users\lem0th\AppData\LocalLow\Mozilla
2017-11-24 13:42 - 2017-09-29 14:46 - 000000000 ___HD C:\Program Files\WindowsApps
2017-11-24 13:42 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-11-24 13:38 - 2017-03-15 12:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2017-11-24 13:37 - 2017-03-15 12:52 - 000000000 ____D C:\ProgramData\Ashampoo
2017-11-23 23:58 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2017-11-22 13:41 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-11-22 05:36 - 2017-09-29 09:45 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2017-11-22 05:34 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-11-22 05:34 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\system32\F12
2017-11-22 05:34 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\TextInput
2017-11-22 05:34 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-11-22 05:34 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-11-22 05:34 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-11-22 05:34 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Dism
2017-11-22 05:33 - 2017-09-29 14:44 - 000000000 ____D C:\WINDOWS\INF
2017-11-21 21:01 - 2017-04-08 14:31 - 000000000 ____D C:\Users\lem0th\MediathekView
2017-11-21 21:00 - 2017-04-08 14:06 - 000000000 ____D C:\Users\lem0th\.mediathek3
2017-11-21 14:22 - 2010-11-21 04:27 - 000545440 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-11-20 01:44 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-11-20 01:44 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-11-18 23:09 - 2017-10-22 21:52 - 000000000 ____D C:\Users\lem0th\AppData\Roaming\vlc
2017-11-18 21:01 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\rescache
2017-11-18 04:32 - 2017-01-17 18:33 - 000000000 ____D C:\Users\lem0th\AppData\Roaming\KeePass
2017-11-17 21:32 - 2017-09-29 14:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-11-17 20:17 - 2016-08-25 11:17 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-11-17 20:17 - 2014-11-05 16:46 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\te-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\si-LK
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\or-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\km-KH
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\is-IS
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\id-ID
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\be-BY
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\as-IN
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\am-ET
2017-11-17 20:14 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2017-11-16 20:01 - 2017-09-03 02:54 - 000000000 ____D C:\Program Files\WhoCrashed
2017-11-16 16:56 - 2015-01-24 15:32 - 000000000 ____D C:\ProgramData\Package Cache
2017-11-14 15:41 - 2017-01-17 17:29 - 000000000 ____D C:\Users\lem0th\AppData\Roaming\Mozilla
2017-11-14 15:41 - 2016-07-23 17:08 - 000001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-11-14 01:22 - 2016-01-22 23:25 - 000002271 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-11-11 15:12 - 2017-09-30 15:34 - 000969320 _____ C:\WINDOWS\system32\perfh007.dat
2017-11-11 15:12 - 2017-09-30 15:34 - 000223032 _____ C:\WINDOWS\system32\perfc007.dat
2017-11-10 01:38 - 2017-06-21 16:11 - 000001056 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Core Temp.lnk
2017-11-07 12:33 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-11-04 02:25 - 2017-09-29 14:49 - 000835568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-11-04 02:25 - 2017-09-29 14:49 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-11-04 00:07 - 2017-01-17 17:43 - 000000000 ____D C:\Users\lem0th\AppData\Local\ElevatedDiagnostics
2017-11-03 21:29 - 2017-05-10 14:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-11-03 21:28 - 2017-03-08 18:48 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2017-11-03 21:26 - 2017-03-08 18:46 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2017-11-03 21:23 - 2015-04-07 10:25 - 000000000 ____D C:\ProgramData\Skype
2017-11-03 21:12 - 2017-01-17 18:22 - 000000000 ____D C:\Users\lem0th\AppData\Roaming\Skype
2017-11-02 02:08 - 2017-06-21 16:53 - 000000000 ____D C:\Users\lem0th\AppData\Roaming\Everything
2017-11-01 17:11 - 2016-04-04 22:51 - 000014030 __RSH C:\ProgramData\ntuser.pol
2017-10-31 12:18 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\appcompat
2017-10-30 16:51 - 2017-02-20 17:19 - 000002358 _____ C:\Users\lem0th\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vivaldi.lnk
2017-10-30 16:51 - 2017-02-20 17:19 - 000000000 ____D C:\Users\lem0th\AppData\Local\Vivaldi
2017-10-30 16:39 - 2017-01-17 16:59 - 000000000 ____D C:\Users\lem0th\AppData\Local\TileDataLayer
2017-10-30 16:39 - 2015-07-29 17:28 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-10-30 16:35 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\windows nt
2017-10-30 16:34 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Registration
2017-10-30 16:34 - 2017-09-29 09:45 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2017-10-30 16:32 - 2015-07-29 17:19 - 000023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-10-30 16:30 - 2017-09-29 14:46 - 000000000 __RSD C:\WINDOWS\media
2017-10-30 16:19 - 2017-10-15 17:36 - 000000000 ____D C:\Users\lem0th\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Everything
2017-10-30 16:19 - 2017-04-17 21:18 - 000000000 ____D C:\Users\lem0th\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paragon Partition Manager™ 14 Free
2017-10-30 16:19 - 2017-02-13 15:20 - 000000000 ___RD C:\Users\lem0th\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Test2
2017-10-30 16:12 - 2017-09-29 14:46 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-10-30 16:11 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2017-10-30 16:09 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\USOPrivate
2017-10-30 16:09 - 2017-02-26 20:44 - 000000000 ____D C:\Users\lem0th\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
2017-10-30 16:08 - 2015-11-19 15:54 - 000000000 ____D C:\Users\Administrator\AppData\Local\Packages
2017-10-30 16:02 - 2017-04-06 16:05 - 002003936 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2017-10-30 16:01 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-10-30 16:00 - 2017-04-06 16:04 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-10-30 15:57 - 2017-09-29 14:46 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-10-30 15:55 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-10-30 15:55 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-10-30 15:54 - 2017-10-15 17:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-10-30 15:54 - 2017-10-15 17:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2017-10-30 15:54 - 2017-10-15 17:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VeraCrypt
2017-10-30 15:54 - 2017-09-30 15:34 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2017-10-30 15:54 - 2017-09-30 15:34 - 000000000 ____D C:\WINDOWS\SysWOW64\sysprep
2017-10-30 15:54 - 2017-09-30 15:34 - 000000000 ____D C:\WINDOWS\system32\WCN
2017-10-30 15:54 - 2017-09-29 14:49 - 000000000 ____D C:\WINDOWS\Setup
2017-10-30 15:54 - 2017-09-29 14:46 - 000000000 __SHD C:\Program Files\Windows Sidebar
2017-10-30 15:54 - 2017-09-29 14:46 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar
2017-10-30 15:54 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-10-30 15:54 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2017-10-30 15:54 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2017-10-30 15:54 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\spool
2017-10-30 15:54 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\IME
2017-10-30 15:54 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2017-10-30 15:54 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\schemas
2017-10-30 15:54 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Resources
2017-10-30 15:54 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2017-10-30 15:54 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\IME
2017-10-30 15:54 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-10-30 15:54 - 2017-08-31 03:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMerge
2017-10-30 15:54 - 2017-08-30 17:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2017-10-30 15:54 - 2017-08-17 12:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2017-10-30 15:54 - 2017-04-17 21:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Partition Assistant Standard Edition 6.1
2017-10-30 15:54 - 2017-03-30 22:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.2
2017-10-30 15:54 - 2017-03-29 14:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware
2017-10-30 15:54 - 2017-03-28 23:15 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-10-30 15:54 - 2017-03-21 02:59 - 000000000 __RSD C:\WINDOWS\system32\WindowsDevicePortal
2017-10-30 15:54 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\catroot2.bak
2017-10-30 15:54 - 2017-03-11 00:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-10-30 15:54 - 2017-02-23 22:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2017-10-30 15:54 - 2017-01-21 23:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2017-10-30 15:54 - 2016-12-30 02:08 - 000000000 ____D C:\WINDOWS\SysWOW64\%ProductFolder%
2017-10-30 15:54 - 2016-12-30 00:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Ransomware Tool for Business
2017-10-30 15:54 - 2016-12-09 00:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-10-30 15:54 - 2016-09-02 00:41 - 000000000 ____D C:\WINDOWS\SysWOW64\Hotspot Shield
2017-10-30 15:54 - 2016-08-03 18:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2017-10-30 15:54 - 2016-08-03 18:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2017-10-30 15:54 - 2016-06-22 13:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gpg4win
2017-10-30 15:54 - 2016-05-31 12:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steuer 2015
2017-10-30 15:54 - 2015-10-27 01:05 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-10-30 15:54 - 2015-05-30 17:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\puush
2017-10-30 15:54 - 2015-02-21 23:13 - 000000000 ____D C:\WINDOWS\SysWOW64\Adobe
2017-10-30 15:54 - 2014-11-22 15:04 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2017-10-30 15:54 - 2014-11-03 18:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR WNA3100M Genie
2017-10-30 15:54 - 2014-01-23 19:41 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-10-30 15:45 - 2017-09-29 14:46 - 000000000 __RHD C:\Users\Public\Libraries
2017-10-30 15:36 - 2017-09-30 15:34 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-10-30 15:36 - 2017-09-30 15:34 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-10-30 15:36 - 2017-09-30 15:34 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-10-30 15:36 - 2017-09-30 15:34 - 000000000 ____D C:\WINDOWS\system32\winrm
2017-10-30 15:36 - 2017-09-30 15:34 - 000000000 ____D C:\WINDOWS\system32\slmgr
2017-10-30 15:36 - 2017-09-30 15:34 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-10-30 15:36 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-10-30 15:36 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\en-GB
2017-10-30 15:36 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-10-30 15:36 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-10-30 15:36 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\en-GB
2017-10-30 15:36 - 2017-04-06 16:04 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2017-10-30 15:36 - 2017-03-21 02:59 - 000000000 ___RD C:\WINDOWS\WebManagement
2017-10-30 15:35 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\system32\dsc
2017-10-30 15:35 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-10-30 15:34 - 2017-09-30 15:35 - 000000000 ____D C:\WINDOWS\OCR
2017-10-30 15:34 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Help
2017-10-30 15:34 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-10-30 15:34 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Common Files\system
2017-10-30 15:34 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-10-30 15:34 - 2017-08-17 12:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2017-10-30 15:34 - 2017-04-06 16:04 - 000000000 ____D C:\Program Files\Realtek
2017-10-30 15:34 - 2016-08-29 17:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\sixteen tons entertainment
2017-10-30 15:34 - 2016-01-30 19:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2017-10-30 15:34 - 2015-09-22 16:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2017-10-30 15:27 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2017-10-30 15:26 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-10-30 15:26 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\MUI
2017-10-30 15:25 - 2017-09-29 14:43 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2017-10-30 15:25 - 2017-09-29 14:43 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2017-10-30 15:25 - 2017-09-29 14:43 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2017-10-30 15:25 - 2017-09-29 14:43 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2017-10-30 15:25 - 2017-09-29 14:43 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2017-10-30 15:25 - 2017-09-29 14:43 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2017-10-30 15:25 - 2017-09-29 14:43 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2017-10-30 15:25 - 2017-09-29 14:43 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2017-10-30 15:25 - 2017-09-29 14:43 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2017-10-30 15:25 - 2017-09-29 14:43 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2017-10-30 15:25 - 2017-09-29 14:43 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2017-10-30 15:25 - 2017-09-29 14:43 - 000009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2017-10-30 15:25 - 2017-09-29 14:42 - 000054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2017-10-30 15:25 - 2017-09-29 14:42 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2017-10-30 15:25 - 2017-09-29 14:42 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2017-10-30 15:25 - 2017-09-29 14:42 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2017-10-30 15:25 - 2017-09-29 14:41 - 000980888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\lxcore.sys
2017-10-30 15:25 - 2017-09-29 14:41 - 000222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2017-10-30 15:25 - 2017-09-29 14:41 - 000218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2017-10-30 15:25 - 2017-09-29 14:41 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsif.dll
2017-10-30 15:25 - 2017-09-29 14:41 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2017-10-30 15:25 - 2017-09-29 14:41 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsl.exe
2017-10-30 15:25 - 2017-09-29 14:41 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2017-10-30 15:25 - 2017-09-29 14:41 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2017-10-30 15:25 - 2017-09-29 14:41 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2017-10-30 15:25 - 2017-09-29 14:41 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsifproxystub.dll
2017-10-30 15:24 - 2017-09-29 14:43 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2017-10-30 15:24 - 2017-09-29 14:43 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2017-10-30 15:24 - 2017-09-29 14:43 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2017-10-30 15:24 - 2017-09-29 14:43 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2017-10-30 15:24 - 2017-09-29 14:43 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\cngkeyhelper.dll
2017-10-30 15:24 - 2017-09-29 14:43 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cngkeyhelper.dll
2017-10-30 15:24 - 2017-09-29 14:41 - 001677824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmswitch.sys
2017-10-30 15:24 - 2017-09-29 14:41 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2017-10-30 15:24 - 2017-09-29 14:41 - 000747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wnv.sys
2017-10-30 15:24 - 2017-09-29 14:41 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2017-10-30 15:24 - 2017-09-29 14:41 - 000389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2017-10-30 15:24 - 2017-09-29 14:41 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2017-10-30 15:24 - 2017-09-29 14:41 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LxRun.exe
2017-10-30 15:24 - 2017-09-29 14:41 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2017-10-30 15:24 - 2017-09-29 14:41 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2017-10-30 15:24 - 2017-09-29 14:41 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2017-10-30 15:24 - 2017-09-29 14:41 - 000088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\nvspinfo.exe
2017-10-30 15:24 - 2017-09-29 14:41 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\bash.exe
2017-10-30 15:24 - 2017-09-29 14:41 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wnvapi.dll
2017-10-30 15:24 - 2017-09-29 14:41 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2017-10-30 15:24 - 2017-09-29 14:41 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2017-10-30 15:24 - 2017-09-29 14:41 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2017-10-30 15:24 - 2017-09-29 14:41 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wslapi.dll
2017-10-30 15:24 - 2017-09-29 14:41 - 000033688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmsproxy.sys
2017-10-30 15:24 - 2017-09-29 14:41 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2017-10-30 15:24 - 2017-09-29 14:41 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2017-10-30 15:24 - 2017-09-29 14:41 - 000009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2017-10-30 15:24 - 2017-09-29 14:41 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2017-10-30 15:24 - 2017-09-29 14:41 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2017-10-30 15:24 - 2017-09-29 14:41 - 000005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll
2017-10-30 15:24 - 2017-09-29 14:41 - 000005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll
2017-10-30 15:23 - 2017-09-29 14:43 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2017-10-30 15:23 - 2017-09-29 14:43 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2017-10-30 15:23 - 2017-09-29 14:41 - 001381888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2017-10-30 15:23 - 2017-09-29 14:41 - 000464896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2017-10-30 15:23 - 2017-09-29 14:41 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2017-10-30 15:23 - 2017-09-29 14:41 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2017-10-30 15:23 - 2017-09-29 14:41 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wslconfig.exe
2017-10-30 15:23 - 2017-09-29 14:41 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2017-10-30 15:23 - 2017-09-29 14:41 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2017-10-30 15:23 - 2017-09-29 14:41 - 000015768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\lxss.sys
2017-10-30 15:23 - 2017-09-29 14:41 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2017-10-30 15:23 - 2017-09-29 14:41 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2017-10-30 15:23 - 2017-09-29 14:41 - 000006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll
2017-10-30 15:23 - 2017-09-29 14:41 - 000006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll
2017-10-30 15:11 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2017-10-30 15:11 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2017-10-30 15:11 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2017-10-30 15:11 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2017-10-30 15:11 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2017-10-30 15:11 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2017-10-30 15:11 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\et-EE
2017-10-30 15:11 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\es-MX
2017-10-30 13:04 - 2017-08-31 13:31 - 000028574 _____ C:\Users\lem0th\Documents\NeueDatenbank.kdbx
2017-10-28 12:21 - 2016-04-05 13:15 - 000000000 ____D C:\Program Files\7-Zip
2017-10-28 12:19 - 2017-06-22 03:14 - 000000000 ____D C:\Users\lem0th\AppData\Local\Everything

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-05-28 21:40 - 2017-05-28 21:41 - 832691886 _____ () C:\Users\lem0th\AppData\Roaming\Factorio.zip
2017-02-17 23:26 - 2017-03-27 02:39 - 000000154 _____ () C:\Users\lem0th\AppData\Roaming\prio.ini
2017-04-30 18:56 - 2017-04-30 02:43 - 000000027 _____ () C:\Users\lem0th\AppData\Roaming\test.bat
2017-11-17 20:35 - 2017-11-17 20:35 - 000000000 _____ () C:\Users\lem0th\AppData\Roaming\text.txt
2017-01-17 17:42 - 2016-07-17 22:18 - 000007656 _____ () C:\Users\lem0th\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-11-19 18:21

==================== Ende von FRST.txt ============================