| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: 98% CPU Auslastung durch "Systemunterbrechung/Leerlauf" - Virus?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
19.03.2019, 05:03
| #1 |
| |  98% CPU Auslastung durch "Systemunterbrechung/Leerlauf" - Virus? Mir ist heute aufgefallen das bei mir CPU Auslastung durch "Systemunterbrechung/Leerlauf" - bei 98% liegt. Seit gefühlt 1-2 Tagen ist mein Rechner langsamer geworden und hat micro freezer. Programme lassen sich kaum mehr verwenden. Könnte das ein Virus sein ? Bin für jede Hilfe dankbar! Hier die Logs: Frst.txt Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2019
durchgeführt von salexes@salexes.de (Administrator) auf salexes-PC (19-03-2019 04:45:33)
Gestartet von C:\Users\salexes\Desktop
Geladene Profile: salexes@salexes.de & postgres & (Verfügbare Profile: salexes@salexes.de & postgres)
Platform: Windows 10 Pro Version 1809 17763.379 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Chrome
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LsaIso.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\vsserv.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\73.0.3683.67\remoting_host.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe
(Adobe Systems Incorporated -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(IQ OPTION EUROPE LTD -> ) D:\Program Files (x86)\IQ Option\IQOptionUpdater.exe
(Flexera Software LLC -> Flexera Software LLC) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe
(Adobe Systems Incorporated -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) D:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe
(OpenVPN Technologies, Inc. -> The OpenVPN Project) D:\Program Files\OpenVPN\bin\openvpnserv.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vmms.exe
(TEFINCOM S.A. -> ) C:\Program Files (x86)\NordVPN\nordvpn-service.exe
() [Datei ist nicht signiert] C:\rclone\nssm.exe
() [Datei ist nicht signiert] C:\rclone\nssm.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Navimatics Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\WinFsp\bin\launcher-x64.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(South River Technologies -> South River Technologies, Inc.) D:\Program Files\WebDrive\wdService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\73.0.3683.67\remoting_host.exe
() [Datei ist nicht signiert] C:\rclone\rclone.exe
() [Datei ist nicht signiert] C:\rclone\rclone.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vmcompute.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\OSD\x64\MsiGamingOSD_x64.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\OSD\x86\MsiGamingOSD_x86.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Windows\SysWOW64\muachost.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Gaming APP\MSI_LED.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\VideoCardMonitorII.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\EyeRest.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\TriggerModeMonitor.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\NahimicMonitor.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler64.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.10314.31700.1000_x64__8wekyb3d8bbwe\Office16\OfficeHubTaskHost.exe
() [Datei ist nicht signiert] C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19011.11311.0_x64__8wekyb3d8bbwe\Video.UI.exe
() [Datei ist nicht signiert] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20388.0_x64__8wekyb3d8bbwe\YourPhone.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\vmwp.exe
konnte nicht auf den Prozess zugreifen -> vmmem
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(A-Volute -> A-Volute) C:\Program Files\Nahimic\Nahimic VR\Foundation\NahimicVRSvc32.exe
(A-Volute -> A-Volute) C:\Program Files\Nahimic\Nahimic VR\Foundation\x64\NahimicVRSvc64.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(onlineth) [Datei ist nicht signiert] C:\Users\salexes\AppData\Roaming\onlineth\Spotlight Desktop\Spotlight Desktop.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxag.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ESET, spol. s r.o. -> ESET spol. s r.o.) C:\Users\salexes\Desktop\esetonlinescanner_deu.exe
() [Datei ist nicht signiert] C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.17710.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Adobe Systems, Incorporated -> Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\odscanui.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9269352 2019-03-12] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [NahimicVRSvc32] => C:\Program Files\Nahimic\Nahimic VR\Foundation\NahimicVRSvc32.exe [985784 2017-04-04] (A-Volute -> A-Volute)
HKLM\...\Run: [NahimicVRSvc64] => C:\Program Files\Nahimic\Nahimic VR\Foundation\x64\NahimicVRSvc64.exe [1142456 2017-04-04] (A-Volute -> A-Volute)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2675176 2018-12-13] (Adobe Systems Incorporated -> Adobe Systems, Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => D:\Program Files\iTunes\iTunesHelper.exe [301880 2018-11-15] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [Live Update] => D:\Program Files (x86)\MSI\Live Update\Live Update.exe [26129592 2018-05-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [Command Center] => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [835768 2018-04-12] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [4810224 2019-02-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601928 2018-12-15] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [3146016 2019-03-06] (Valve -> Valve Corporation)
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\Run: [Spotify] => C:\Users\salexes\AppData\Roaming\Spotify\Spotify.exe [24528272 2018-08-16] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\Run: [WebDriveTray] => D:\Program Files\WebDrive\webdrive.exe [18210824 2017-11-21] (South River Technologies -> South River Technologies, Inc.)
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\Run: [OpenVPN-GUI] => D:\Program Files\OpenVPN\bin\openvpn-gui.exe [665216 2018-03-01] (OpenVPN Technologies, Inc. -> )
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [53540200 2019-03-07] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\Run: [com.squirrel.WhatsApp.WhatsApp] => C:\Users\salexes\AppData\Local\WhatsApp\Update.exe [2206648 2019-03-09] (WhatsApp, Inc. -> )
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [19645800 2019-02-07] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\Run: [NordVPN] => C:\Program Files (x86)\NordVPN\NordVPN.exe [3036112 2018-11-06] (TEFINCOM S.A. -> NordVPN)
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\Run: [com.squirrel.slack.slack] => C:\Users\salexes\AppData\Local\slack\Update.exe [1559056 2019-03-13] (Slack Technologies, Inc. -> )
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\Policies\Explorer: []
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\MountPoints2: {d3870c80-a01c-11e8-9350-309c231e50ef} - "G:\OnePlus_setup.exe" /s
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [3146016 2019-03-06] (Valve -> Valve Corporation)
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\Run: [Spotify] => C:\Users\salexes\AppData\Roaming\Spotify\Spotify.exe [24528272 2018-08-16] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\Run: [WebDriveTray] => D:\Program Files\WebDrive\webdrive.exe [18210824 2017-11-21] (South River Technologies -> South River Technologies, Inc.)
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\Run: [OpenVPN-GUI] => D:\Program Files\OpenVPN\bin\openvpn-gui.exe [665216 2018-03-01] (OpenVPN Technologies, Inc. -> )
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [53540200 2019-03-07] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\Run: [com.squirrel.WhatsApp.WhatsApp] => C:\Users\salexes\AppData\Local\WhatsApp\Update.exe [2206648 2019-03-09] (WhatsApp, Inc. -> )
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [19645800 2019-02-07] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\Run: [NordVPN] => C:\Program Files (x86)\NordVPN\NordVPN.exe [3036112 2018-11-06] (TEFINCOM S.A. -> NordVPN)
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\Run: [com.squirrel.slack.slack] => C:\Users\salexes\AppData\Local\slack\Update.exe [1559056 2019-03-13] (Slack Technologies, Inc. -> )
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\Policies\Explorer: []
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\MountPoints2: {d3870c80-a01c-11e8-9350-309c231e50ef} - "G:\OnePlus_setup.exe" /s
HKU\S-1-5-21-2799860837-106215957-2616225106-1005\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-2799860837-106215957-2616225106-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230762\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\72.0.3626.121\Installer\chrmstp.exe [2019-03-05] (Google LLC -> Google Inc.)
Startup: C:\Users\salexes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Bitwarden.lnk [2019-02-11]
ShortcutTarget: Bitwarden.lnk -> C:\Program Files\Bitwarden\Bitwarden.exe (8bit Solutions LLC -> 8bit Solutions LLC)
Startup: C:\Users\salexes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IQTray.lnk [2018-09-07]
ShortcutTarget: IQTray.lnk -> D:\Program Files (x86)\IQ Option\iqtray.exe (IQ OPTION EUROPE LTD -> )
Startup: C:\Users\salexes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\JD2.lnk [2018-09-14]
ShortcutTarget: JD2.lnk -> C:\Users\salexes\AppData\Local\JDownloader2\JDownloader2.exe (Appwork GmbH -> AppWork GmbH)
Startup: C:\Users\salexes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NzbDrone.lnk [2019-03-10]
ShortcutTarget: NzbDrone.lnk -> C:\ProgramData\NzbDrone\bin\NzbDrone.exe (Keine Datei)
Startup: C:\Users\salexes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OLB Onlinebanking Starter.lnk [2019-02-09]
ShortcutTarget: OLB Onlinebanking Starter.lnk -> C:\Users\salexes\AppData\Local\OLBSignlet\SignletOLB.exe (B+S Banksysteme Aktiengesellschaft -> )
Startup: C:\Users\salexes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sonarr.lnk [2019-03-10]
ShortcutTarget: Sonarr.lnk -> C:\ProgramData\Sonarr\bin\Sonarr.exe (sonarr.tv) [Datei ist nicht signiert]
Startup: C:\Users\salexes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Spotlight Desktop.lnk [2019-01-03]
ShortcutTarget: Spotlight Desktop.lnk -> C:\Users\salexes\AppData\Roaming\onlineth\Spotlight Desktop\Spotlight Desktop.exe (onlineth) [Datei ist nicht signiert]
Startup: C:\Users\salexes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Telegram.lnk [2018-09-14]
ShortcutTarget: Telegram.lnk -> C:\Users\salexes\AppData\Roaming\Telegram Desktop\Telegram.exe (Telegram Messenger LLP -> Telegram Messenger LLP)
GroupPolicy: Beschränkung ? <==== ACHTUNG
GroupPolicy\User: Beschränkung ? <==== ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{088f5baf-67c7-4f42-83cb-62e745b994db}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{36008fbc-30e5-42fb-9491-639737a90d3d}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{d25ff688-817d-45fa-b3ca-f71a9a194598}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=620947&OCID=AVRES000&pc=UE00
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=620947&OCID=AVRES000&pc=UE00
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
SearchScopes: HKU\S-1-5-21-2799860837-106215957-2616225106-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE00
SearchScopes: HKU\S-1-5-21-2799860837-106215957-2616225106-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE00
SearchScopes: HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE00
SearchScopes: HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE00
BHO: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2019-03-01] (Bitdefender SRL -> Bitdefender)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2019-03-14] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_201\bin\ssv.dll [2019-01-17] (Oracle America, Inc. -> Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-05-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-01-17] (Oracle America, Inc. -> Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-05-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2019-03-01] (Bitdefender SRL -> Bitdefender)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-03-14] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-05-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-05-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2018-05-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2019-03-01] (Bitdefender SRL -> Bitdefender)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2018-05-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2019-03-01] (Bitdefender SRL -> Bitdefender)
Toolbar: HKU\S-1-5-21-2799860837-106215957-2616225106-1002 -> Kein Name - {C500C267-63BF-451F-8797-4D720C9A2ED9} - Keine Datei
Toolbar: HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076 -> Kein Name - {C500C267-63BF-451F-8797-4D720C9A2ED9} - Keine Datei
DPF: HKLM-x32 {C752FF21-A8EF-468E-B507-5BBAFB84359E} hxxps://hbciweb.olb.de/financebrowser5/plugin/Signlet-Plugin-1.0.49.0.CAB
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-03-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-03-14] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-03-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-03-14] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-03-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-03-14] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-03-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-03-14] (Microsoft Corporation -> Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\salexes\AppData\Roaming\Mozilla\Firefox\Profiles\h5lth6m5.default [2019-03-19]
FF Extension: (Kantu Browser Automation) - C:\Users\salexes\AppData\Roaming\Mozilla\Firefox\Profiles\h5lth6m5.default\Extensions\{190d04a6-e387-4f5b-9751-e0d222cf8275}.xpi [2018-09-14]
FF Extension: (iMacros for Firefox) - C:\Users\salexes\AppData\Roaming\Mozilla\Firefox\Profiles\h5lth6m5.default\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}.xpi [2018-08-14]
FF Extension: (Katalon Recorder (Selenium IDE for FF55+)) - C:\Users\salexes\AppData\Roaming\Mozilla\Firefox\Profiles\h5lth6m5.default\Extensions\{91f05833-bab1-4fb1-b9e4-187091a4d75d}.xpi [2018-10-11]
FF Extension: (Selenium IDE) - C:\Users\salexes\AppData\Roaming\Mozilla\Firefox\Profiles\h5lth6m5.default\Extensions\{a6fd85ed-e919-4a43-a5af-8da18bda539f}.xpi [2019-01-09]
FF Extension: (Telemetry coverage) - C:\Users\salexes\AppData\Roaming\Mozilla\Firefox\Profiles\h5lth6m5.default\features\{0f78de42-426f-47de-b1d1-e170a44e1f14}\telemetry-coverage-bug1487578@mozilla.org.xpi [2018-10-14] [Legacy]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2018-09-20]
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi [2019-03-01]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext [2018-12-20] [Legacy] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Plugin: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-01-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-01-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-03-14] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN)
FF Plugin-x32: @alibaba.com/nptrademanager;version=1.0 -> C:\Program Files (x86)\TradeManager\nptrademanager.dll [Keine Datei]
FF Plugin-x32: @alibaba.com/npwangwang;version=1.0 -> C:\Program Files (x86)\TradeManager\npwangwang.dll [Keine Datei]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-03-14] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-03-14] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2019-03-01] (NVIDIA Corporation -> NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2019-03-01] (NVIDIA Corporation -> NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-18] (Google Inc -> Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-18] (Google Inc -> Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2019-02-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2799860837-106215957-2616225106-1002: @alibaba.com/npAliSSOLogin;version=1.0 -> C:\Program Files (x86)\TradeManager\npAliSSOLogin.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-2799860837-106215957-2616225106-1002: @alibaba.com/nptrademanager;version=1.0 -> "C:\Program Files (x86)\TradeManager\nptrademanager.dll" [Keine Datei]
FF Plugin HKU\S-1-5-21-2799860837-106215957-2616225106-1002: @alibaba.com/npwangwang;version=1.0 -> "C:\Program Files (x86)\TradeManager\npwangwang.dll" [Keine Datei]
FF Plugin HKU\S-1-5-21-2799860837-106215957-2616225106-1002: @zoom.us/ZoomVideoPlugin -> C:\Users\salexes\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2017-12-14] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FF Plugin HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076: @alibaba.com/npAliSSOLogin;version=1.0 -> C:\Program Files (x86)\TradeManager\npAliSSOLogin.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076: @alibaba.com/nptrademanager;version=1.0 -> "C:\Program Files (x86)\TradeManager\nptrademanager.dll" [Keine Datei]
FF Plugin HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076: @alibaba.com/npwangwang;version=1.0 -> "C:\Program Files (x86)\TradeManager\npwangwang.dll" [Keine Datei]
FF Plugin HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076: @zoom.us/ZoomVideoPlugin -> C:\Users\salexes\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2017-12-14] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
Chrome:
=======
CHR DefaultProfile: "},
CHR Profile: C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default [2019-03-19]
CHR Extension: (Präsentationen) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-11-15]
CHR Extension: (Flash Video Downloader) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiimdkdngfcipjohbjenkahhlhccpdbc [2019-02-01]
CHR Extension: (Docs) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-11-15]
CHR Extension: (Google Drive) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-17]
CHR Extension: (ColorZilla) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2018-06-15]
CHR Extension: (YouTube) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-11-15]
CHR Extension: (Honey) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2019-02-15]
CHR Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-03-15]
CHR Extension: (Dark Reader) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\eimadpbcbfnmbkopoojfekhnkhdbieeh [2019-03-18]
CHR Extension: (Facebook Pixel Helper) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdgfkebogiimcoedlicjlajpkdmockpc [2019-02-14]
CHR Extension: (Full Page Screen Capture) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2018-09-16]
CHR Extension: (Tabellen) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-11-15]
CHR Extension: (Readium) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\fepbnnnkkadjhjahcafoaglimekefifl [2018-10-18]
CHR Extension: (Chrome Remote Desktop) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2019-03-05]
CHR Extension: (Google Docs Offline) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-20]
CHR Extension: (SimilarWeb - Traffic Rank & Website Analysis) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\hoklmmgfnpapgjgcpechhaamimifchmp [2019-02-18]
CHR Extension: (Copy Css Selector) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\kemkenbgbgodoglfkkejbdcpojnodnkg [2019-01-22]
CHR Extension: (Copy Folder) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfbicpdhiofpicipfggljdhjokjblnhl [2019-03-19]
CHR Extension: (Turbo Ad Finder) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjbjojolojmokicddfeaamkodihccdcl [2019-01-10]
CHR Extension: (BrowserStack Local) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfiddfehmfdojjfdpfngagldgaaafcfo [2018-12-08]
CHR Extension: (Dsers - AliExpress.com Product Importer) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmanaflgaempokjfbeeabkadnkoidjam [2019-03-04]
CHR Extension: (Import reviews from Aliexpress and Amazon) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncpflmbgdjcmcakiafemoiicigmlgcph [2019-03-18]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]
CHR Extension: (Bitwarden - Kostenloser Passwortmanager) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\nngceckbapebfimnlniiiahkandclblb [2019-03-18]
CHR Extension: (Calendar Tools) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\olhcpoodgmaocbmdiaojdpcjaijkknnd [2018-03-08]
CHR Extension: (Google Mail) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-11-15]
CHR Extension: (Chrome Media Router) - C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-02-15]
CHR Profile: C:\Users\salexes\AppData\Local\Google\Chrome\User Data\Guest Profile [2018-10-07]
CHR Profile: C:\Users\salexes\AppData\Local\Google\Chrome\User Data\System Profile [2018-10-07]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl] - hxxps://clients2.google.com/service/update2/crx
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2917864 2018-12-13] (Adobe Systems Incorporated -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2709480 2018-12-13] (Adobe Systems Incorporated -> Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2018-07-05] (Apple Inc. -> Apple Inc.)
R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [779152 2019-03-01] (Bitdefender SRL -> Bitdefender)
R2 BDProtSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [779152 2019-03-01] (Bitdefender SRL -> Bitdefender)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2195320 2018-03-22] (Bitdefender SRL -> Bitdefender)
S2 BidCoS-Service; C:\Program Files (x86)\BidCoS Service\rfd.exe [598016 2015-12-07] () [Datei ist nicht signiert]
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\73.0.3683.67\remoting_host.exe [73200 2019-03-05] (Google LLC -> Google Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11129928 2019-03-06] (Microsoft Corporation -> Microsoft Corporation)
R2 DevMgmtService; C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe [95520 2019-02-01] (Bitdefender SRL -> Bitdefender)
R2 GamingApp_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe [47056 2017-02-17] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 GamingHotkey_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe [2019792 2016-10-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
S3 HgClientService; C:\WINDOWS\system32\hgclientservice.dll [149504 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
R3 hns; C:\WINDOWS\System32\HostNetSvc.dll [2871296 2019-03-15] (Microsoft Windows -> Microsoft Corporation)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21744 2015-07-09] (Microsoft Corporation -> Microsoft Corporation)
R2 IQOptionUpdater; D:\Program Files (x86)\IQ Option\\IQOptionUpdater.exe [2745472 2019-03-15] (IQ OPTION EUROPE LTD -> )
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService_x64.exe [2669240 2018-01-12] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2343608 2018-01-12] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService_x64.exe [2725048 2017-12-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [2252472 2017-12-29] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2506424 2018-01-12] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2136248 2018-03-29] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [2667192 2018-04-19] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSI_ActiveX_Service; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe [75192 2017-04-05] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_LiveUpdate_Service; D:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2306232 2018-05-03] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2013-05-16] (Hewlett-Packard) [Datei ist nicht signiert]
R2 nordvpn-service; C:\Program Files (x86)\NordVPN\nordvpn-service.exe [437200 2018-11-06] (TEFINCOM S.A. -> )
R3 nvagent; C:\WINDOWS\System32\NvAgent.dll [41272 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [790920 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [790920 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation)
S3 OpenVPNService; D:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2018-03-01] ( ) [Datei ist nicht signiert]
R2 OpenVPNServiceInteractive; D:\Program Files\OpenVPN\bin\openvpnserv.exe [75392 2018-03-01] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 OpenVPNServiceLegacy; D:\Program Files\OpenVPN\bin\openvpnserv.exe [75392 2018-03-01] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2013-05-16] (Hewlett-Packard) [Datei ist nicht signiert]
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1293936 2018-11-15] (Bitdefender SRL -> Bitdefender)
R2 RClone Multimedia; C:\rclone\nssm.exe [331264 2014-08-31] () [Datei ist nicht signiert]
R2 RClone salexes PC; C:\rclone\nssm.exe [331264 2014-08-31] () [Datei ist nicht signiert]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5381128 2019-03-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [11665240 2019-02-26] (TeamViewer GmbH -> TeamViewer GmbH)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [114192 2019-03-01] (Bitdefender SRL -> Bitdefender)
R3 vmcompute; C:\WINDOWS\system32\vmcompute.exe [3321144 2019-03-15] (Microsoft Windows -> Microsoft Corporation)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\vsserv.exe [816616 2019-03-01] (Bitdefender SRL -> Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3830128 2019-03-15] (Microsoft Corporation -> Microsoft Corporation)
R2 WebDriveService; D:\Program Files\WebDrive\wdService.exe [16785928 2017-11-21] (South River Technologies -> South River Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [110944 2018-09-15] (Microsoft Corporation -> Microsoft Corporation)
R2 WinFsp.Launcher; C:\Program Files (x86)\WinFsp\bin\launcher-x64.exe [24064 2018-12-10] (Navimatics Corporation) [Datei ist nicht signiert]
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvTelemetry\plugins" -r
|
|
19.03.2019, 05:04
| #2 |
| | 98% CPU Auslastung durch "Systemunterbrechung/Leerlauf" - Virus? Rest der frst.txt
__________________Code:
ATTFilter ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R3 amdgpio2; C:\WINDOWS\System32\drivers\amdgpio2.sys [34568 2019-01-20] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc) R3 amdgpio3; C:\WINDOWS\System32\drivers\amdgpio3.sys [24288 2019-01-20] (AMD PMP-PE CB Code Signer v20160415 -> Advanced Micro Devices, Inc) S3 amdkmcsp; C:\WINDOWS\system32\DRIVERS\amdkmcsp.sys [101232 2017-06-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc. ) R3 AMDPCIDev; C:\WINDOWS\System32\drivers\AMDPCIDev.sys [31704 2019-01-20] (Advanced Micro Devices Inc. -> Advanced Micro Devices) R0 amdpsp; C:\WINDOWS\System32\drivers\amdpsp.sys [137688 2019-01-20] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc. ) R2 AMDRyzenMasterDriver1.0.0; C:\Program Files\AMD\RyzenMaster\bin\AMDRyzenMasterDriver.sys [70312 2017-03-27] (Advanced Micro Devices, Inc. -> Advanced Micro Devices) R0 amd_sata; C:\WINDOWS\System32\drivers\amd_sata.sys [93240 2017-11-15] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices) R0 amd_xata; C:\WINDOWS\System32\drivers\amd_xata.sys [33336 2017-11-15] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices) R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1423680 2019-03-01] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA) R2 BdDci; C:\WINDOWS\System32\DRIVERS\bddci.sys [367096 2019-03-01] (Bitdefender SRL -> Bitdefender) S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [23032 2018-04-19] (Microsoft Windows Early Launch Anti-Malware Publisher -> Bitdefender) R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [45728 2018-09-17] (Bitdefender SRL -> © Bitdefender SRL) R1 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [96448 2018-04-27] (Bitdefender SRL -> BitDefender) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153328 2019-01-08] (Malwarebytes Corporation -> Malwarebytes) R0 Gemma; C:\WINDOWS\System32\DRIVERS\Gemma.sys [374632 2019-03-01] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA) R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [201000 2019-03-01] (Bitdefender SRL -> BitDefender LLC) R3 hvsocketcontrol; C:\WINDOWS\system32\drivers\hvsocketcontrol.sys [36384 2018-09-15] (Microsoft Windows -> Microsoft Corporation) R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-11-15] (Martin Malik - REALiX -> REALiX(tm)) R3 I2cHkBurn; C:\WINDOWS\system32\drivers\I2cHkBurn.sys [41760 2015-07-27] (Feature Integration Technology -> FINTEK Corp.) R2 Ignis; C:\WINDOWS\system32\DRIVERS\ignis.sys [196352 2018-10-26] (Bitdefender SRL -> Bitdefender) S3 l2bridge; C:\WINDOWS\System32\drivers\l2bridge.sys [40248 2018-09-15] (Microsoft Windows -> Microsoft Corporation) R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [198512 2019-03-19] (Malwarebytes Corporation -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [127136 2019-03-19] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [72864 2019-03-19] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [274416 2019-03-19] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [114040 2019-03-19] (Malwarebytes Corporation -> Malwarebytes) R3 NTIOLib_MBAPI; C:\Program Files (x86)\MSI\Gaming APP\Lib\NTIOLib_X64.sys [14288 2017-03-08] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_9c0cfd0baad9a756\nvlddmkm.sys [20736440 2019-03-11] (NVIDIA Corporation -> NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2019-01-16] (NVIDIA Corporation -> NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [70024 2019-01-20] (NVIDIA Corporation -> NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [66792 2018-10-03] (NVIDIA Corporation -> NVIDIA Corporation) S3 pcip; C:\WINDOWS\System32\drivers\pcip.sys [57856 2018-09-15] (Microsoft Windows -> Microsoft Corporation) S3 ramparser; C:\WINDOWS\System32\drivers\ramparser.sys [41984 2018-09-15] (Microsoft Windows -> Microsoft Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [1137928 2019-03-02] (Realtek Semiconductor Corp. -> Realtek ) R3 SteamStreamingMicrophone; C:\WINDOWS\system32\drivers\SteamStreamingMicrophone.sys [40736 2017-07-28] (Valve Corp. -> ) R3 SteamStreamingSpeakers; C:\WINDOWS\system32\drivers\SteamStreamingSpeakers.sys [40736 2017-07-21] (Valve Corp. -> ) R3 Synth3dVsp; C:\WINDOWS\System32\drivers\synth3dvsp.sys [107008 2018-09-15] (Microsoft Windows -> Microsoft Corporation) S3 tap-tb-0901; C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656 2018-05-16] (TunnelBear, Inc. -> The OpenVPN Project) R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project) R3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [44896 2018-06-13] (TEFINCOM S.A. -> The OpenVPN Project) R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [610640 2019-03-01] (Bitdefender SRL -> Bitdefender) S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-06-17] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.) S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [24576 2018-09-15] (Microsoft Windows -> Microsoft Corporation) R3 VBoxNetAdp; C:\WINDOWS\System32\drivers\VBoxNetAdp6.sys [213216 2018-10-15] (Oracle Corporation -> Oracle Corporation) R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [223000 2018-10-15] (Oracle Corporation -> Oracle Corporation) R1 VfpExt; C:\WINDOWS\System32\drivers\vfpext.sys [1410048 2019-02-15] (Microsoft Windows -> Microsoft Corporation) S3 vhusb3hc; C:\WINDOWS\System32\drivers\vhusb3hc.sys [66048 2018-01-22] (VirtualHere Pty. Ltd. -> VirtualHere Pty. Ltd.) R0 VMSNPXY; C:\WINDOWS\System32\drivers\VmsProxyHNic.sys [37920 2018-09-15] (Microsoft Windows -> Microsoft Corporation) R3 VMSNPXYMP; C:\WINDOWS\System32\drivers\VmsProxyHNic.sys [37920 2018-09-15] (Microsoft Windows -> Microsoft Corporation) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46584 2018-09-15] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation) S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [340008 2018-09-15] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [61992 2018-09-15] (Microsoft Windows -> Microsoft Corporation) R2 WebDriveFSD; D:\Program Files\WebDrive\wdfsd.sys [100488 2017-11-21] (South River Technologies -> South River Technologies, Inc.) R2 WIBUKEY; C:\WINDOWS\System32\DRIVERS\WibuKey64.sys [106760 2017-10-19] (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) R3 WinFsp; C:\Program Files (x86)\WinFsp\bin\winfsp-x64.sys [140416 2018-12-10] (Navimatics Corporation -> Navimatics Corporation) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) NETSVC: nvagent -> C:\Windows\System32\NvAgent.dll (Microsoft Corporation) NETSVC: hns -> C:\Windows\System32\HostNetSvc.dll (Microsoft Corporation) NETSVC: HgClientService -> C:\Windows\system32\hgclientservice.dll (Microsoft Corporation) ==================== Ein Monat (erstellte) ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2019-03-19 04:45 - 2019-03-19 04:49 - 000055475 _____ C:\Users\salexes\Desktop\FRST.txt 2019-03-19 04:45 - 2019-03-19 04:45 - 000000000 ____D C:\FRST 2019-03-19 04:43 - 2019-03-19 04:43 - 002434048 _____ (Farbar) C:\Users\salexes\Desktop\FRST64.exe 2019-03-19 04:15 - 2019-03-19 04:15 - 000000000 ____D C:\Users\salexes\AppData\Local\ESET 2019-03-19 04:02 - 2019-03-19 04:02 - 007667832 _____ (ESET spol. s r.o.) C:\Users\salexes\Desktop\esetonlinescanner_deu.exe 2019-03-19 03:44 - 2019-03-19 03:44 - 000003180 _____ C:\WINDOWS\System32\Tasks\Driver Booster Scheduler 2019-03-19 03:30 - 2019-03-19 03:30 - 000042904 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS 2019-03-19 03:29 - 2019-03-19 03:29 - 014178840 _____ (Malwarebytes Corp.) C:\Users\salexes\Desktop\mbar-1.10.3.1001.exe 2019-03-19 03:29 - 2019-03-19 03:29 - 001828569 _____ C:\Users\salexes\Desktop\processexplorer.zip 2019-03-19 03:29 - 2019-03-19 03:29 - 000000000 ____D C:\Users\salexes\Desktop\processexplorer 2019-03-19 03:19 - 2019-03-19 03:19 - 000274416 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2019-03-19 03:19 - 2019-03-19 03:19 - 000127136 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2019-03-19 03:19 - 2019-03-19 03:19 - 000114040 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2019-03-19 03:19 - 2019-03-19 03:19 - 000072864 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2019-03-19 03:16 - 2019-03-19 03:18 - 000000000 ____D C:\AdwCleaner 2019-03-19 03:16 - 2019-03-19 03:16 - 007316688 _____ (Malwarebytes) C:\Users\salexes\Desktop\adwcleaner_7.2.7.0.exe 2019-03-19 03:12 - 2019-03-19 03:12 - 000198512 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys 2019-03-19 03:12 - 2019-03-19 03:12 - 000001947 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2019-03-19 03:12 - 2019-03-19 03:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2019-03-19 03:12 - 2019-03-19 03:12 - 000000000 ____D C:\ProgramData\Malwarebytes 2019-03-19 03:12 - 2019-03-19 03:12 - 000000000 ____D C:\Program Files\Malwarebytes 2019-03-19 03:12 - 2019-02-01 11:20 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys 2019-03-19 03:12 - 2019-01-08 15:32 - 000153328 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2019-03-19 02:56 - 2019-03-19 02:56 - 000000000 ____D C:\Users\salexes\AppData\Local\mbamtray 2019-03-19 02:56 - 2019-03-19 02:56 - 000000000 ____D C:\Users\salexes\AppData\Local\mbam 2019-03-19 02:54 - 2019-03-19 02:54 - 000000000 ____D C:\Users\salexes\AppData\Roaming\Obsidium 2019-03-19 02:50 - 2019-03-19 02:50 - 062177776 _____ (Malwarebytes ) C:\Users\salexes\Desktop\mb3-setup-consumer-3.7.1.2839-1.0.538-1.0.9712.exe 2019-03-18 16:50 - 2019-03-18 16:50 - 000024030 _____ C:\Users\salexes\Downloads\#1 mat order price list 3-18.xlsx 2019-03-17 05:09 - 2019-03-17 05:09 - 000131842 _____ C:\Users\salexes\Downloads\#3-17 order price list.xlsx 2019-03-15 19:07 - 2019-03-15 19:07 - 000009176 _____ C:\Users\salexes\Desktop\201903012 (1).pdf 2019-03-15 18:41 - 2019-03-01 08:14 - 000133432 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe 2019-03-15 18:38 - 2019-03-11 07:19 - 001006800 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll 2019-03-15 18:38 - 2019-03-11 07:19 - 001006800 _____ C:\WINDOWS\system32\vulkan-1.dll 2019-03-15 18:38 - 2019-03-11 07:19 - 000870096 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll 2019-03-15 18:38 - 2019-03-11 07:19 - 000870096 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2019-03-15 18:38 - 2019-03-11 07:19 - 000552328 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2019-03-15 18:38 - 2019-03-11 07:19 - 000456904 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2019-03-15 18:38 - 2019-03-11 07:19 - 000286416 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe 2019-03-15 18:38 - 2019-03-11 07:19 - 000286416 _____ C:\WINDOWS\system32\vulkaninfo.exe 2019-03-15 18:38 - 2019-03-11 07:19 - 000260304 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe 2019-03-15 18:38 - 2019-03-11 07:19 - 000260304 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2019-03-15 18:38 - 2019-03-11 07:17 - 001464736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2019-03-15 18:38 - 2019-03-11 07:17 - 001130400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2019-03-15 18:38 - 2019-03-11 07:17 - 000668664 _____ C:\WINDOWS\system32\nvofapi64.dll 2019-03-15 18:38 - 2019-03-11 07:17 - 000631440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2019-03-15 18:38 - 2019-03-11 07:17 - 000534936 _____ C:\WINDOWS\SysWOW64\nvofapi.dll 2019-03-15 18:38 - 2019-03-11 07:17 - 000522144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 040234912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 035140488 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 010319896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 008785128 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 005274584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 004625552 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 002033240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 001734560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6441935.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 001535960 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 001471624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 001468048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6441935.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 001462024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 001169144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 001152032 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 001145536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 000915304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 000822784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 000794656 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 000752728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 000638384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2019-03-15 18:38 - 2019-03-11 07:16 - 000611920 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll 2019-03-15 18:38 - 2019-03-11 07:15 - 020106384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2019-03-15 18:38 - 2019-03-11 07:15 - 017434264 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2019-03-15 18:19 - 2019-03-15 18:20 - 000000000 ____D C:\Users\salexes\Desktop\holzbenady 2019-03-15 16:57 - 2019-03-15 16:57 - 000009176 _____ C:\Users\salexes\Desktop\201903012.pdf 2019-03-15 15:56 - 2019-03-15 15:56 - 007939824 _____ (Tim Kosse) C:\Users\salexes\Downloads\FileZilla_3.41.1_win64-setup.exe 2019-03-15 15:26 - 2019-03-15 15:26 - 003130514 _____ C:\Users\salexes\Desktop\holz_benady_de.sql 2019-03-15 15:24 - 2019-03-15 15:31 - 1245036811 _____ C:\Users\salexes\Desktop\holzbenady.zip 2019-03-15 02:41 - 2019-03-17 01:55 - 000093208 _____ C:\Users\salexes\Desktop\NINGMI-Women-Slimming-Legging-High-Waist-Trainer-Modeling-Body-Shaper-Elastic-Tight-Slim-Leg-Tummy-Control.webp 2019-03-15 01:00 - 2019-03-15 01:00 - 026810368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 024616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 023440896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 022114960 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 020814848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 019284480 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 019023872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 015224320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 012857856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 012151296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 009683256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2019-03-15 01:00 - 2019-03-15 01:00 - 009670656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 008875008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 007897088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 007883776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 007882240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 007647256 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 007645392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 007556392 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 007251456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 006548168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 006440960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 006309040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 006069760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 005915936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 005588184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 005566464 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 005436184 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 005296640 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 004920832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 004883968 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 004719104 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvgm.exe 2019-03-15 01:00 - 2019-03-15 01:00 - 004689408 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 004588744 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2019-03-15 01:00 - 2019-03-15 01:00 - 003983360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 003923456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 003761664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 003744256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 003729808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2019-03-15 01:00 - 2019-03-15 01:00 - 003660288 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 003652656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 003566080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 003551408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 003504128 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 003427840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 003399168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 003382272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 003378488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 003179008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d12SDKLayers.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 003108864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002942464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002926904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 002871312 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2019-03-15 01:00 - 2019-03-15 01:00 - 002842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002776712 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002752360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002700792 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002689536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002637312 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe 2019-03-15 01:00 - 2019-03-15 01:00 - 002626360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 002488320 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 002476544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d12SDKLayers.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002469440 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002447360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002437344 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002323688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002278240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002275680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002187776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002073240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002044416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 002001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001994760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001969464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 001969152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSvc.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001899160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001884672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001860608 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001844448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001782272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001760768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001715712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001711616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001701376 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001697744 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2019-03-15 01:00 - 2019-03-15 01:00 - 001656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001644048 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001641400 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001604096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001590072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001572176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001563336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdrecordcpu.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001481488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001479480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001468440 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2019-03-15 01:00 - 2019-03-15 01:00 - 001457544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001360696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 001341880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2019-03-15 01:00 - 2019-03-15 01:00 - 001332224 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001309696 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001294856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001289192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001272552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdrecordcpu.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001267712 _____ (Microsoft Corporation) C:\WINDOWS\system32\APMon.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001258808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2019-03-15 01:00 - 2019-03-15 01:00 - 001256448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001221944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001200920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001180248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001179168 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2019-03-15 01:00 - 2019-03-15 01:00 - 001176064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001098128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001087800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001078072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001077912 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001072720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001072640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001056272 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001054200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2019-03-15 01:00 - 2019-03-15 01:00 - 001052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001047040 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 001001472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl 2019-03-15 01:00 - 2019-03-15 01:00 - 000981816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000918032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl 2019-03-15 01:00 - 2019-03-15 01:00 - 000902144 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000888120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000866152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000860160 _____ C:\WINDOWS\system32\MBR2GPT.EXE 2019-03-15 01:00 - 2019-03-15 01:00 - 000840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000836096 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000833064 _____ C:\WINDOWS\system32\InputHost.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000808464 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000793088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000782968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000775168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000772608 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000772408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000769536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 000764216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000762880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000748032 _____ C:\WINDOWS\system32\hgattest.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000735760 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000732160 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCacheProvider.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000726416 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000714240 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000684032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000655160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 000652824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000649272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000626176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000619832 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000591832 _____ C:\WINDOWS\SysWOW64\InputHost.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000572416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000553784 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000548864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe 2019-03-15 01:00 - 2019-03-15 01:00 - 000519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2019-03-15 01:00 - 2019-03-15 01:00 - 000497664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsound.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourceMapper.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000474936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2019-03-15 01:00 - 2019-03-15 01:00 - 000460304 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000453944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 000449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000435712 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000427520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000421688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSh.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2019-03-15 01:00 - 2019-03-15 01:00 - 000411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000383288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageHandlers.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDistSh.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000330464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdwriter.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000322576 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MbbCx.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 000279376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000272648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdwriter.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000271360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000263360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000262456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 000246584 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCleaner.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\smbwmiv2.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDist.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDist.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistWSDDiscoProv.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000180736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngctasks.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000147256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2019-03-15 01:00 - 2019-03-15 01:00 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe 2019-03-15 01:00 - 2019-03-15 01:00 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageLiveTileTask.exe 2019-03-15 01:00 - 2019-03-15 01:00 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 000120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe 2019-03-15 01:00 - 2019-03-15 01:00 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe 2019-03-15 01:00 - 2019-03-15 01:00 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys 2019-03-15 01:00 - 2019-03-15 01:00 - 000071184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecureBioSysprep.dll 2019-03-15 01:00 - 2019-03-15 01:00 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys 2019-03-15 00:59 - 2019-03-15 01:00 - 017520640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 015296824 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmms.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 007688088 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 006369080 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmchipset.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 004245280 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 003321144 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmcompute.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 002871296 _____ (Microsoft Corporation) C:\WINDOWS\system32\HostNetSvc.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 002766648 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 002720768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 002630656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 002495208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmwp.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 002199864 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 002141184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.ModernAppAgent.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 002043392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmswitch.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 002021584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 002013696 _____ C:\WINDOWS\system32\rdpnano.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 001931264 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 001893888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 001751352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 001742104 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 001672704 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 001612600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 001522488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 001496064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 001403920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 001331536 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 001296576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 001259320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 001253688 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 001221120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 001208320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 001199104 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 001191512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 001177088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.CommonBridge.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 001121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplySettingsTemplateCatalog.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 001043256 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 001022616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 001008128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000955392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000895048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000871792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000865568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000850760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000831288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 000817464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000790328 _____ (Microsoft Corporation) C:\WINDOWS\system32\upshared.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.PrinterCustomActions.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000757664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000745984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000741888 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000680184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000651576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 000649528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000646632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000640312 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmcompute.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000605496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000604336 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsound.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000589624 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsconfig.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2019-03-15 00:59 - 2019-03-15 00:59 - 000511800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000508216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 000505656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000492856 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmDataStore.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000484976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000463672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000449368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000444728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 000443704 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmusrv.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000419128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 000404792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 000402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 000395064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000387832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000386872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000383288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000355360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000336744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BioCredProv.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000250168 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsif.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ptpprov.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 000202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecureTimeAggregator.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000202552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000195896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000177464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationVdev.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000174392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\AppvVemgr.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 000169784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000156984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 000147256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpcivsp.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 000138960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000115152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnsdiag.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storqosflt.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 000090424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Common.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UevAppMonitor.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rndismp6.sys 2019-03-15 00:59 - 2019-03-15 00:59 - 000035640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2019-03-15 00:59 - 2019-03-15 00:59 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rfxvmt.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2019-03-15 00:59 - 2019-03-15 00:59 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin 2019-03-15 00:59 - 2019-03-15 00:59 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin 2019-03-15 00:59 - 2019-03-15 00:59 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin 2019-03-15 00:59 - 2019-03-15 00:59 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin 2019-03-15 00:59 - 2019-03-15 00:59 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin 2019-03-15 00:59 - 2019-03-15 00:59 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin 2019-03-15 00:59 - 2019-03-15 00:59 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin 2019-03-15 00:59 - 2019-03-15 00:59 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin 2019-03-14 02:16 - 2019-03-14 05:31 - 000000000 ____D C:\Users\salexes\AppData\Roaming\FileBot 2019-03-14 02:06 - 2019-03-14 02:06 - 015997612 _____ (Tweaking4All ) C:\Users\salexes\Desktop\RenameMyTVSeries-2.0.5-Windows-32bit-setup.exe 2019-03-14 01:15 - 2019-03-14 01:16 - 000383420 _____ C:\Users\salexes\Desktop\theme_export__dreckwegmatte-de-narrative__14MAR2019-0115am.zip 2019-03-14 01:06 - 2019-03-15 16:06 - 021111296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe 2019-03-14 00:57 - 2019-03-14 00:58 - 000039279 _____ C:\Users\salexes\Desktop\test - Kopie.html 2019-03-13 15:35 - 2019-03-13 15:35 - 000041410 _____ C:\Users\salexes\Desktop\statement_EUR_2019-02-10_2019-03-14.pdf 2019-03-13 15:19 - 2019-03-19 03:37 - 000000000 ____D C:\Users\salexes\AppData\Roaming\Slack 2019-03-13 15:19 - 2019-03-13 15:19 - 078258192 _____ (Slack Technologies) C:\Users\salexes\Desktop\SlackSetup.exe 2019-03-13 15:19 - 2019-03-13 15:19 - 000002223 _____ C:\Users\salexes\Desktop\Slack.lnk 2019-03-13 15:19 - 2019-03-13 15:19 - 000000000 ____D C:\Users\salexes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Slack Technologies 2019-03-13 15:19 - 2019-03-13 15:19 - 000000000 ____D C:\Users\salexes\AppData\Local\slack 2019-03-13 15:02 - 2019-03-13 15:02 - 007475448 _____ (TeamViewer) C:\Users\salexes\Desktop\fonial_support_pc.exe 2019-03-13 14:56 - 2019-03-13 14:56 - 002734812 _____ C:\Users\salexes\Desktop\Flexiaid_2.wav 2019-03-13 14:40 - 2019-03-13 14:40 - 000031701 _____ C:\Users\salexes\Desktop\AuthInfo.pdf 2019-03-12 18:09 - 2019-03-12 18:09 - 000000000 ____D C:\Users\salexes\Desktop\panyhose 2019-03-12 01:58 - 2019-03-12 01:58 - 001734240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6441917.dll 2019-03-12 01:58 - 2019-03-12 01:58 - 001468184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6441917.dll 2019-03-12 01:58 - 2019-03-11 07:15 - 004301480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 072520816 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat 2019-03-12 01:57 - 2019-03-12 01:57 - 024335604 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT 2019-03-12 01:57 - 2019-03-12 01:57 - 015218712 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE3.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 007178576 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 007101832 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 006270280 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 005347096 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 003677264 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl 2019-03-12 01:57 - 2019-03-12 01:57 - 003417904 _____ (DTS, Inc.) C:\WINDOWS\system32\slcnt64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 003319520 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 003306904 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 003283864 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 003159512 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 003128704 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 002992288 _____ (Audyssey Labs) C:\WINDOWS\system32\AudysseyEfx.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 002930256 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 002444816 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 002198064 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001971472 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001965256 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001788064 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001611064 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyAPOv251gm.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001598504 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001544360 _____ (Dolby Laboratories) C:\WINDOWS\system32\DAX3APOProp.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001516376 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001435232 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001396064 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001382320 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001372488 _____ (Dolby Laboratories) C:\WINDOWS\system32\DAX3APOv251.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001353424 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001337728 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tossaeapo64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001318744 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDHF64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001287728 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyAPOvlldpgm.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001282448 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001259840 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOvlldp.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001180416 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001159272 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001073560 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 001027720 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SEHDHF32.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000994576 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000964920 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000884576 _____ (ICEpower a/s) C:\WINDOWS\system32\ICEsoundAPO64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000873552 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000852224 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tosasfapo64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000751408 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000734880 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000715752 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000692264 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000604888 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tossaemaxapo64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000541208 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000511752 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000467248 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000453384 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000452840 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000448712 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000447264 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\toseaeapo64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000416592 _____ (Harman) C:\WINDOWS\system32\HMUI.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000406584 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2APIPCLL.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000392976 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000381496 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000378472 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000367720 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000366224 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\HMAPO.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000360448 _____ (Harman) C:\WINDOWS\system32\HMClariFi.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000343600 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000341240 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000341240 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000333112 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000327376 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000327376 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000316088 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000278376 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000266656 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000261344 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000261304 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000260312 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000231808 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000230792 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000220496 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000218360 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000203944 _____ (Harman) C:\WINDOWS\system32\HMHVS.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000191040 _____ (Harman) C:\WINDOWS\system32\HMEQ_Voice.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000191040 _____ (Harman) C:\WINDOWS\system32\HMEQ.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000179704 _____ (Harman) C:\WINDOWS\system32\HMLimiter.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000175856 _____ (ASUSTeK COMPUTER INC.) C:\WINDOWS\system32\ATKWMI.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000175032 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000158784 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000157448 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000154448 _____ (Harman) C:\WINDOWS\system32\HarmanAudioInterface.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000139856 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000122408 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000118680 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000116648 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000105392 _____ C:\WINDOWS\system32\audioLibVc.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000094008 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000090808 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000090272 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000088216 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000083520 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll 2019-03-12 01:57 - 2019-03-12 01:57 - 000075624 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll 2019-03-11 16:59 - 2019-03-11 16:59 - 000000000 ____D C:\Users\salexes\Desktop\Stackposts - Social Marketing Tool Version 4.6 2019-03-11 16:58 - 2019-03-11 16:58 - 017610372 _____ C:\Users\salexes\Desktop\Stackposts - Social Marketing Tool Version 4.6.zip 2019-03-11 16:53 - 2019-03-11 16:54 - 000424982 _____ C:\Users\salexes\Desktop\tellowsscore7-9_20190307.xml 2019-03-11 16:52 - 2019-03-11 16:52 - 000032204 _____ C:\Users\salexes\Desktop\message.wav 2019-03-11 04:30 - 2019-03-11 05:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git 2019-03-11 04:13 - 2019-03-11 04:15 - 000000000 ____D C:\Premiumizer 2019-03-11 04:08 - 2019-03-11 04:08 - 000014296 _____ C:\Users\salexes\Desktop\Setup Log 2019-03-11 #009.txt 2019-03-11 04:03 - 2019-03-11 04:03 - 000014295 _____ C:\Users\salexes\Desktop\Setup Log 2019-03-11 #008.txt 2019-03-11 04:02 - 2019-03-11 04:02 - 000014294 _____ C:\Users\salexes\Desktop\Setup Log 2019-03-11 #007.txt 2019-03-11 04:01 - 2019-03-11 04:01 - 010938079 _____ C:\Users\salexes\Desktop\PremiumizerInstaller-0.71.zip 2019-03-11 03:57 - 2019-03-11 03:57 - 000140311 _____ C:\Users\salexes\Desktop\innounp047.rar 2019-03-11 03:57 - 2019-03-11 03:57 - 000014295 _____ C:\Users\salexes\Desktop\Setup Log 2019-03-11 #006.txt 2019-03-11 03:53 - 2019-03-11 03:53 - 000014294 _____ C:\Users\salexes\Desktop\Setup Log 2019-03-11 #005.txt 2019-03-11 03:48 - 2019-03-11 03:48 - 000000000 ____D C:\Users\salexes\Desktop\PremiumizerInstahller 2019-03-11 03:47 - 2019-03-11 03:47 - 000014297 _____ C:\Users\salexes\Desktop\Setup Log 2019-03-11 #004.txt 2019-03-11 03:27 - 2019-03-11 03:27 - 000014295 _____ C:\Users\salexes\Desktop\Setup Log 2019-03-11 #003.txt 2019-03-11 03:25 - 2019-03-11 03:25 - 000014297 _____ C:\Users\salexes\Desktop\Setup Log 2019-03-11 #002.txt 2019-03-11 03:23 - 2019-03-11 03:23 - 000221662 _____ C:\Users\salexes\Desktop\MicrosoftProgram_Install_and_Uninstall.meta.diagcab 2019-03-11 03:20 - 2019-03-11 03:20 - 000014295 _____ C:\Users\salexes\Desktop\Setup Log 2019-03-11 #001.txt 2019-03-10 20:19 - 2019-03-13 04:58 - 000000000 ____D C:\Users\salexes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.7 2019-03-10 20:19 - 2019-03-11 04:29 - 000000000 ____D C:\Users\salexes\AppData\Local\Package Cache 2019-03-10 20:18 - 2019-03-10 20:18 - 000014294 _____ C:\Users\salexes\Desktop\Setup Log 2019-03-10 #003.txt 2019-03-10 20:15 - 2019-03-10 20:15 - 000072610 _____ C:\ProgramData\dm.update.1552245320.bdinstall.bin 2019-03-10 20:15 - 2019-03-10 20:15 - 000034859 _____ C:\ProgramData\dm.uninstall.1552245325.bdinstall.bin 2019-03-10 20:05 - 2019-03-10 20:05 - 025365744 _____ (Python Software Foundation) C:\Users\salexes\Desktop\python-3.7.2.exe 2019-03-10 20:04 - 2019-03-10 20:04 - 046327744 _____ (The Git Development Community ) C:\Users\salexes\Desktop\Git-2.21.0-64-bit.exe 2019-03-10 20:04 - 2019-03-10 20:04 - 000014298 _____ C:\Users\salexes\Desktop\Setup Log 2019-03-10 #002.txt 2019-03-10 20:04 - 2019-03-10 20:04 - 000014295 _____ C:\Users\salexes\Desktop\Setup Log 2019-03-10 #001.txt 2019-03-10 19:51 - 2019-03-10 19:51 - 000014295 _____ C:\Users\salexes\Desktop\Setup Log 2019-03-10 #006.txt 2019-03-10 19:50 - 2019-03-10 19:50 - 000014295 _____ C:\Users\salexes\Desktop\Setup Log 2019-03-10 #005.txt 2019-03-10 19:49 - 2019-03-10 19:49 - 000014295 _____ C:\Users\salexes\Desktop\Setup Log 2019-03-10 #004.txt 2019-03-10 18:55 - 2019-03-19 03:37 - 000000000 ____D C:\ProgramData\Sonarr 2019-03-10 18:55 - 2019-03-10 18:55 - 009646656 _____ (Team Sonarr ) C:\Users\salexes\Desktop\Sonarr.phantom-develop.3.0.1.403.windows.exe 2019-03-10 18:30 - 2019-03-10 19:08 - 000000000 ____D C:\ProgramData\Jackett 2019-03-10 18:30 - 2019-03-10 18:30 - 007952005 _____ (Jackett ) C:\Users\salexes\Desktop\Jackett.Installer.Windows.exe 2019-03-10 18:18 - 2019-03-10 18:55 - 000000912 _____ C:\Users\Public\Desktop\Sonarr.lnk 2019-03-10 18:18 - 2019-03-10 18:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sonarr 2019-03-10 18:18 - 2019-03-10 18:18 - 008109198 _____ (Team Sonarr ) C:\Users\salexes\Desktop\NzbDrone.master.exe 2019-03-10 03:49 - 2019-03-10 03:49 - 011486391 _____ (Premiumizer ) C:\Users\salexes\Desktop\PremiumizerInstahller.exe 2019-03-09 21:03 - 2019-03-09 21:14 - 000000000 ____D C:\Users\salexes\AppData\Local\IrScrutinizer 2019-03-09 21:03 - 2019-03-09 21:03 - 004904017 _____ (Bengt Martensson ) C:\Users\salexes\Desktop\IrScrutinizer-1.4.2.exe 2019-03-09 21:03 - 2019-03-09 21:03 - 000001275 _____ C:\Users\Public\Desktop\IrScrutinizer.lnk 2019-03-09 21:03 - 2019-03-09 21:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrScrutinizer 2019-03-09 21:03 - 2019-03-09 21:03 - 000000000 ____D C:\Program Files (x86)\IrScrutinizer 2019-03-09 20:59 - 2019-03-09 20:59 - 000105005 _____ C:\Users\salexes\Desktop\index 2019-03-09 02:09 - 2019-03-09 02:09 - 000001523 _____ C:\Users\salexes\Desktop\Alpha Console.lnk 2019-03-09 02:08 - 2019-03-09 02:08 - 034234584 _____ (AlphaConsole ) C:\Users\salexes\Desktop\AlphaConsole_Setup_9.9.8.0.exe 2019-03-07 16:21 - 2019-03-06 21:30 - 000252982 _____ C:\Users\salexes\Desktop\46610500_1783376088457218_6956329740718309376_n.mp4 2019-03-06 17:27 - 2019-03-07 02:18 - 000000000 ____D C:\Users\salexes\Desktop\Neuer Ordner (2) 2019-03-05 16:55 - 2019-03-05 16:55 - 000095791 _____ C:\Users\salexes\Downloads\#3-05 order price list.xlsx 2019-03-05 03:12 - 2019-03-18 14:49 - 000000000 ____D C:\Users\salexes\Desktop\exposure 2019-03-04 03:38 - 2019-03-04 03:38 - 003822906 _____ C:\Users\salexes\Desktop\46456162_2218745318367481_474099187579879424_n.psd 2019-03-04 03:07 - 2019-03-04 03:07 - 000186329 _____ C:\Users\salexes\Desktop\MyFonts Order M10196560.zip 2019-03-04 03:06 - 2019-03-04 03:38 - 002542148 _____ C:\Users\salexes\Desktop\2-kokosnuss-schalen-classic-schalen-comboo-350923_1024x1024_bd344c66-83c4-4c6a-950a-4ae2aec847ca_1024x1024.psd 2019-03-04 03:06 - 2019-03-04 03:38 - 002020153 _____ C:\Users\salexes\Desktop\kokosnuss-schale-classic-schalen-comboo-313893_1024x1024_001e887d-13d3-46b3-bbb5-97018338fd91_1024x1024.psd 2019-03-04 03:01 - 2019-03-04 03:01 - 000751096 _____ C:\Users\salexes\Desktop\coconut_punch.zip 2019-03-04 02:50 - 2019-03-04 02:50 - 000037486 _____ C:\Users\salexes\Desktop\streamster.zip 2019-03-04 01:58 - 2019-03-04 01:58 - 000004978 _____ C:\Users\salexes\Desktop\47195.txt 2019-03-02 19:17 - 2019-03-02 19:17 - 001734104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6441891.dll 2019-03-02 19:17 - 2019-03-02 19:17 - 001468048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6441891.dll 2019-03-02 19:17 - 2019-03-02 19:17 - 000047592 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll 2019-03-02 18:38 - 2019-03-02 18:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MKVToolNix 2019-03-02 18:38 - 2019-03-02 18:38 - 000000000 ____D C:\Program Files\MKVToolNix 2019-03-02 18:35 - 2019-03-02 18:35 - 033062028 _____ C:\Users\salexes\Desktop\mkvtoolnix31.0.0-setup.zip 2019-03-02 18:26 - 2008-11-20 01:28 - 574277346 _____ C:\Users\salexes\Desktop\Becker.S01E01.Aertze.sollten.nett.sein.GERMAN.720p.HDTV.x264.mkv 2019-03-02 13:30 - 2019-03-02 13:30 - 000080040 _____ C:\Users\salexes\Desktop\fw8bendone.pdf 2019-03-02 13:28 - 2019-03-02 13:28 - 000079333 _____ C:\Users\salexes\Desktop\fw8ben1.pdf 2019-03-02 13:19 - 2019-03-02 13:19 - 000347807 _____ C:\Users\salexes\Desktop\W-8BEN-E.pdf 2019-03-02 13:19 - 2019-03-02 13:19 - 000062553 _____ C:\Users\salexes\Desktop\fw8ben.pdf 2019-03-01 15:27 - 2019-03-01 15:27 - 008489146 _____ C:\Users\salexes\Desktop\cities500.xlsx 2019-03-01 15:20 - 2019-03-01 02:32 - 030799442 _____ C:\Users\salexes\Desktop\cities500.txt 2019-03-01 15:19 - 2019-03-01 15:19 - 010007596 _____ C:\Users\salexes\Desktop\cities500.zip 2019-03-01 15:13 - 2019-03-01 15:13 - 039979646 _____ C:\Users\salexes\Desktop\GeoLite2-City-CSV_20190226.zip 2019-03-01 15:08 - 2019-03-01 15:08 - 000021318 _____ C:\Users\salexes\Desktop\Workshop in India 3.xlsx 2019-03-01 14:43 - 2019-03-01 14:43 - 000001983 _____ C:\Users\Public\Desktop\Bitdefender.lnk 2019-03-01 01:33 - 2019-03-01 01:33 - 000088647 _____ C:\Users\salexes\Desktop\Facebook-Application-Transfer-Acknowledgment-FORM (1).pdf 2019-02-28 18:56 - 2019-02-28 18:56 - 000088647 _____ C:\Users\salexes\Desktop\Facebook-Application-Transfer-Acknowledgment-FORM.pdf 2019-02-28 15:18 - 2019-03-09 20:10 - 000002244 _____ C:\Users\salexes\Desktop\JDownloaderPasswordList.html 2019-02-27 19:34 - 2019-02-27 19:34 - 000063999 _____ C:\Users\salexes\Desktop\RE-0786a.pdf 2019-02-27 02:48 - 2019-02-27 03:08 - 000180243 _____ C:\Users\salexes\Downloads\Voov Media Partnership Agreement (Direct to Client).pdf 2019-02-26 15:02 - 2019-02-26 15:02 - 000090075 _____ C:\Users\salexes\Downloads\NEW#2 order price list.xlsx 2019-02-26 14:32 - 2019-02-26 14:32 - 000087609 _____ C:\Users\salexes\Downloads\#2 order price list.xlsx 2019-02-24 15:23 - 2019-02-24 15:23 - 000147966 _____ C:\Users\salexes\Desktop\orders_export.zip 2019-02-23 18:55 - 2019-02-23 18:55 - 000185979 _____ C:\Users\salexes\Desktop\sepa_mandate (1).pdf 2019-02-23 18:54 - 2019-02-23 18:55 - 000200753 _____ C:\Users\salexes\Desktop\sepa_mandate.pdf 2019-02-23 04:01 - 2019-02-23 04:01 - 110434526 _____ C:\Users\salexes\Desktop\PlexMediaServer-1.15.1.707-d893009fb-x86_64.qpkg 2019-02-23 02:39 - 2019-02-23 02:39 - 000338304 _____ C:\Users\salexes\Desktop\xOk1emwnzbytTsaamn6@@sd.mp4 2019-02-22 15:22 - 2019-02-22 15:22 - 000368505 _____ C:\Users\salexes\Desktop\VI-Quan-Tu.zip 2019-02-21 02:25 - 2019-02-21 15:21 - 000027061 _____ C:\Users\salexes\Desktop\automation_rules.json 2019-02-21 02:25 - 2019-02-21 02:25 - 000027100 _____ C:\Users\salexes\Desktop\automationa_rules.json 2019-02-20 19:49 - 2019-02-20 19:50 - 000428562 _____ C:\Users\salexes\Desktop\tellowsscore7-9_20190218.xml 2019-02-19 18:30 - 2019-02-19 18:30 - 000061274 _____ C:\Users\salexes\Desktop\trackingnumbers.pdf 2019-02-19 18:21 - 2019-02-19 18:21 - 000038828 _____ C:\Users\salexes\Desktop\social.pdf 2019-02-19 15:20 - 2019-02-19 15:20 - 001580338 _____ C:\Users\salexes\Desktop\USPs_Mobile.zip 2019-02-19 14:48 - 2019-02-19 14:48 - 000000000 ____D C:\Users\salexes\Desktop\Neuer Ordner 2019-02-19 00:44 - 2019-02-19 00:44 - 003931407 _____ C:\Users\salexes\Desktop\Taillienhose.7z 2019-02-18 16:01 - 2019-02-18 18:46 - 000003886 _____ C:\Users\salexes\Desktop\szchrttallie.html 2019-02-18 15:20 - 2019-02-18 15:20 - 000000000 ____D C:\Users\salexes\Desktop\Steuer 2019 2019-02-17 03:49 - 2019-02-17 03:49 - 000088093 _____ C:\Users\salexes\Desktop\org.openhab.binding.harmonyhub-2.5.0-SNAPSHOT.zip ==================== Ein Monat (geänderte) ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2019-03-19 04:43 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2019-03-19 04:24 - 2019-01-12 02:14 - 000000000 ____D C:\rclone 2019-03-19 03:56 - 2017-11-14 23:49 - 000000000 ____D C:\WINDOWS\system32\MRT 2019-03-19 03:47 - 2017-11-14 23:49 - 127411920 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2019-03-19 03:37 - 2018-04-08 19:30 - 000000000 ____D C:\Users\salexes\AppData\Local\JDownloader2 2019-03-19 03:26 - 2019-01-08 20:58 - 000000000 ___DC C:\WINDOWS\Panther 2019-03-19 03:26 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2019-03-19 03:26 - 2018-09-15 08:31 - 000000000 ____D C:\WINDOWS\INF 2019-03-19 03:26 - 2018-01-03 18:57 - 000000000 ____D C:\Users\salexes\AppData\Roaming\TeamViewer 2019-03-19 03:26 - 2018-01-03 18:57 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2019-03-19 03:26 - 2017-11-21 01:04 - 000000000 ____D C:\Users\salexes\AppData\Local\CrashDumps 2019-03-19 03:25 - 2019-01-20 03:11 - 001723292 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2019-03-19 03:25 - 2018-09-15 18:37 - 000743888 _____ C:\WINDOWS\system32\perfh007.dat 2019-03-19 03:25 - 2018-09-15 18:37 - 000150212 _____ C:\WINDOWS\system32\perfc007.dat 2019-03-19 03:24 - 2018-09-15 07:09 - 000065536 _____ C:\WINDOWS\system32\config\ELAM 2019-03-19 03:21 - 2017-11-15 18:13 - 000000000 ____D C:\ProgramData\NVIDIA 2019-03-19 03:20 - 2019-02-11 02:20 - 000000000 ____D C:\Users\salexes\AppData\Roaming\Bitwarden 2019-03-19 03:20 - 2018-10-13 14:03 - 000000000 ____D C:\Users\salexes\AppData\Roaming\WhatsApp 2019-03-19 03:20 - 2018-09-07 18:41 - 000000439 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics 2019-03-19 03:20 - 2017-11-15 20:13 - 000000000 ____D C:\Users\salexes\AppData\Roaming\Telegram Desktop 2019-03-19 03:19 - 2019-01-20 03:15 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2019-03-19 03:19 - 2019-01-09 00:51 - 000005824 _____ C:\bdlog.txt 2019-03-19 03:19 - 2018-09-15 07:09 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2019-03-19 03:18 - 2017-11-15 18:38 - 000000000 ____D C:\Users\salexes\AppData\Roaming\IObit 2019-03-19 03:18 - 2017-11-15 18:38 - 000000000 ____D C:\Users\salexes\AppData\LocalLow\IObit 2019-03-19 03:18 - 2017-11-15 18:38 - 000000000 ____D C:\ProgramData\IObit 2019-03-19 03:18 - 2017-11-15 18:38 - 000000000 ____D C:\Program Files (x86)\IObit 2019-03-19 03:12 - 2018-09-15 08:33 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2019-03-19 03:08 - 2019-01-20 03:07 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2019-03-19 02:12 - 2017-11-15 20:03 - 000000000 ____D C:\Users\salexes\AppData\Roaming\discord 2019-03-19 02:00 - 2017-11-16 19:37 - 000000000 ____D C:\Users\salexes\AppData\Local\Adobe 2019-03-18 20:35 - 2018-03-30 01:45 - 000000000 ____D C:\Users\salexes\AppData\Local\PlexMediaPlayer 2019-03-18 18:13 - 2018-09-15 08:23 - 000000000 ____D C:\WINDOWS\CbsTemp 2019-03-18 16:34 - 2017-11-16 20:28 - 000000000 ____D C:\Users\salexes\AppData\Roaming\vlc 2019-03-18 14:15 - 2019-01-20 03:15 - 000004172 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{CD122CBD-53D5-4332-B32D-14487452A7E3} 2019-03-17 05:33 - 2017-11-17 14:54 - 000000000 ____D C:\Users\salexes\AppData\Roaming\FileZilla 2019-03-17 05:33 - 2017-11-16 04:59 - 000000600 _____ C:\Users\salexes\AppData\Local\PUTTY.RND 2019-03-17 04:41 - 2017-11-15 19:54 - 000000000 ____D C:\Users\salexes\AppData\Local\NVIDIA 2019-03-15 18:41 - 2018-05-28 17:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2019-03-15 18:41 - 2017-11-15 18:13 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2019-03-15 18:41 - 2017-11-15 18:13 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2019-03-15 18:41 - 2017-11-15 18:08 - 000000000 ____D C:\Users\salexes\AppData\Local\VirtualStore 2019-03-15 18:40 - 2017-11-15 18:13 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2019-03-15 18:34 - 2017-12-15 18:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2019-03-15 18:34 - 2017-12-15 18:11 - 000000000 ____D C:\Program Files\Java 2019-03-15 16:06 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2019-03-15 16:06 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\Macromed 2019-03-15 14:33 - 2019-01-20 03:09 - 000000000 ____D C:\Users\salexes 2019-03-15 14:33 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\AppReadiness 2019-03-15 14:32 - 2019-01-20 03:07 - 000525832 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2019-03-15 14:32 - 2019-01-20 02:55 - 000000000 ____D C:\Program Files\Hyper-V 2019-03-15 14:32 - 2018-09-15 18:39 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2019-03-15 14:32 - 2018-09-15 08:33 - 000000000 ___RD C:\Program Files\Windows Defender 2019-03-15 14:32 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\TextInput 2019-03-15 14:32 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\oobe 2019-03-15 14:32 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\appraiser 2019-03-15 14:32 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\ShellExperiences 2019-03-15 14:32 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\bcastdvr 2019-03-15 00:59 - 2019-01-20 03:10 - 002865152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2019-03-14 15:18 - 2018-04-19 17:42 - 000000000 ____D C:\Users\salexes\Downloads\Telegram Desktop 2019-03-14 04:18 - 2018-09-15 08:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2019-03-14 04:17 - 2017-11-16 19:42 - 000000000 ____D C:\Program Files\Microsoft Office 2019-03-13 16:19 - 2017-11-15 20:03 - 000000000 ____D C:\Users\salexes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc 2019-03-13 16:19 - 2017-11-15 20:03 - 000000000 ____D C:\Users\salexes\AppData\Local\Discord 2019-03-13 15:55 - 2019-02-12 14:08 - 000001414 _____ C:\Users\Public\Desktop\Skype.lnk 2019-03-13 15:55 - 2018-09-19 00:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2019-03-13 15:19 - 2017-11-15 20:03 - 000000000 ____D C:\Users\salexes\AppData\Local\SquirrelTemp 2019-03-13 03:51 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\NDF 2019-03-12 01:57 - 2018-09-23 16:12 - 006486608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys 2019-03-12 01:57 - 2018-09-23 16:12 - 003762704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll 2019-03-12 01:57 - 2018-09-23 16:12 - 000193088 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll 2019-03-12 01:57 - 2018-09-23 16:12 - 000023800 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll 2019-03-12 01:57 - 2017-11-15 21:09 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2019-03-12 01:57 - 2017-11-15 21:09 - 000000000 ____D C:\WINDOWS\system32\DAX3 2019-03-12 01:57 - 2017-11-15 21:09 - 000000000 ____D C:\WINDOWS\system32\DAX2 2019-03-12 01:51 - 2019-01-20 03:15 - 000003976 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-03-12 01:51 - 2019-01-20 03:15 - 000003940 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-03-12 01:51 - 2017-11-15 19:54 - 000000000 ____D C:\Users\salexes\AppData\Local\NVIDIA Corporation 2019-03-12 01:50 - 2019-01-20 03:15 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-03-12 01:50 - 2019-01-20 03:15 - 000004106 _____ C:\WINDOWS\System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-03-12 01:50 - 2019-01-20 03:15 - 000003926 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-03-12 01:50 - 2019-01-20 03:15 - 000003926 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-03-12 01:50 - 2019-01-20 03:15 - 000003926 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-03-12 01:50 - 2019-01-20 03:15 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-03-12 01:50 - 2019-01-20 03:15 - 000003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-03-12 01:50 - 2019-01-20 03:15 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-03-12 01:50 - 2019-01-20 03:15 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-03-11 19:42 - 2018-05-31 17:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plex Media Player 2019-03-11 19:42 - 2017-11-15 19:34 - 000000000 ____D C:\ProgramData\Package Cache 2019-03-11 07:15 - 2018-10-24 14:03 - 005042904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2019-03-11 05:04 - 2018-07-02 19:00 - 000000000 ____D C:\ProgramData\Git 2019-03-11 04:17 - 2018-07-02 18:59 - 000000000 ____D C:\Program Files\Git 2019-03-11 03:25 - 2017-11-16 00:59 - 000000000 ____D C:\Users\salexes\AppData\Local\ElevatedDiagnostics 2019-03-10 19:45 - 2018-07-02 19:00 - 000000000 ____D C:\Users\salexes\bin 2019-03-10 03:58 - 2018-07-02 19:07 - 000001148 _____ C:\Users\salexes\.bash_history 2019-03-09 15:59 - 2018-10-13 14:03 - 000002291 _____ C:\Users\salexes\Desktop\WhatsApp.lnk 2019-03-09 15:59 - 2018-10-13 14:03 - 000000000 ____D C:\Users\salexes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp 2019-03-09 15:59 - 2018-10-13 14:03 - 000000000 ____D C:\Users\salexes\AppData\Local\WhatsApp 2019-03-09 15:43 - 2019-01-20 03:15 - 000003362 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2799860837-106215957-2616225106-1002 2019-03-09 15:43 - 2019-01-20 03:09 - 000002411 _____ C:\Users\salexes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2019-03-09 15:43 - 2017-11-15 18:09 - 000000000 ___RD C:\Users\salexes\OneDrive 2019-03-05 02:12 - 2017-11-15 18:24 - 000002328 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-03-04 17:45 - 2019-02-15 16:04 - 000001075 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 14.lnk 2019-03-03 15:33 - 2018-12-03 10:00 - 000000000 ____D C:\WINDOWS\files 2019-03-03 01:45 - 2018-09-15 08:36 - 000835480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2019-03-03 01:45 - 2018-09-15 08:36 - 000179608 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2019-03-02 19:17 - 2018-10-11 03:04 - 001682392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll 2019-03-02 19:17 - 2018-10-11 03:04 - 000228768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys 2019-03-02 19:16 - 2018-10-11 03:04 - 001137928 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys 2019-03-02 18:34 - 2018-04-29 16:37 - 000000000 ____D C:\Users\salexes\AppData\Roaming\HandBrake 2019-03-01 15:19 - 2017-11-15 18:08 - 000000000 ____D C:\Users\salexes\AppData\Local\Packages 2019-03-01 14:43 - 2019-01-08 20:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender Security 2019-03-01 14:40 - 2019-01-08 20:31 - 000201000 _____ (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys 2019-03-01 14:39 - 2019-01-08 20:31 - 001423680 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\atc.sys 2019-03-01 14:39 - 2019-01-08 20:31 - 000610640 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\trufos.sys 2019-03-01 14:39 - 2019-01-08 20:31 - 000374632 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\gemma.sys 2019-03-01 14:39 - 2019-01-08 20:31 - 000367096 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bddci.sys 2019-03-01 11:36 - 2018-10-24 14:03 - 000049834 _____ C:\WINDOWS\system32\nvinfo.pb 2019-03-01 11:36 - 2017-11-15 19:54 - 000001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat 2019-03-01 08:15 - 2017-11-15 18:14 - 005364592 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2019-03-01 08:15 - 2017-11-15 18:14 - 002625008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2019-03-01 08:15 - 2017-11-15 18:14 - 001767920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2019-03-01 08:15 - 2017-11-15 18:14 - 000651248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2019-03-01 08:15 - 2017-11-15 18:14 - 000450872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2019-03-01 08:15 - 2017-11-15 18:14 - 000125424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2019-03-01 08:15 - 2017-11-15 18:14 - 000082800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2019-02-27 17:50 - 2017-11-15 18:13 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2019-02-27 17:38 - 2019-01-10 02:18 - 000001456 _____ C:\Users\salexes\AppData\Local\Adobe Save for Web 13.0 Prefs 2019-02-26 11:36 - 2017-11-15 18:14 - 008514902 _____ C:\WINDOWS\system32\nvcoproc.bin 2019-02-23 15:33 - 2018-07-01 20:20 - 000002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk 2019-02-21 20:25 - 2018-06-15 13:35 - 000000000 ____D C:\Users\salexes\Documents\Adobe 2019-02-21 20:25 - 2017-11-15 18:08 - 000000000 ____D C:\Users\salexes\AppData\Roaming\Adobe 2019-02-21 17:27 - 2018-09-15 07:09 - 000000000 ____D C:\WINDOWS\servicing ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2018-08-01 12:48 - 2019-01-31 01:28 - 000000033 _____ () C:\Users\salexes\AppData\Roaming\AdobeWLCMCache.dat 2018-03-14 00:22 - 2018-03-14 00:22 - 000000600 _____ () C:\Users\salexes\AppData\Roaming\PUTTY.RND 2018-03-17 18:30 - 2018-05-31 16:43 - 000000175 _____ () C:\Users\salexes\AppData\Roaming\vhui.ini 2019-01-10 02:18 - 2019-02-27 17:38 - 000001456 _____ () C:\Users\salexes\AppData\Local\Adobe Save for Web 13.0 Prefs 2018-09-28 14:20 - 2018-09-28 14:20 - 000000000 _____ () C:\Users\salexes\AppData\Local\oobelibMkey.log 2017-11-16 04:59 - 2019-03-17 05:33 - 000000600 _____ () C:\Users\salexes\AppData\Local\PUTTY.RND 2018-06-19 14:06 - 2018-06-19 14:06 - 000001225 _____ () C:\Users\salexes\AppData\Local\recently-used.xbel 2017-11-16 14:40 - 2017-12-18 19:48 - 000007605 _____ () C:\Users\salexes\AppData\Local\Resmon.ResmonCfg Einige Dateien in TEMP: ==================== 2019-03-19 02:55 - 2019-02-05 09:52 - 064309056 _____ (Malwarebytes ) C:\Users\salexes\AppData\Local\Temp\mb3-setup-consumer-3.7.1.2839-1.0.538-1.0.9074.exe ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\dllhost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\dllhost.exe => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert ==================== Ende von FRST.txt ============================ |
|
19.03.2019, 05:06
| #3 |
| | 98% CPU Auslastung durch "Systemunterbrechung/Leerlauf" - Virus? Addition.txt
__________________Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 17.03.2019
durchgeführt von salexes@salexes.de (19-03-2019 04:51:04)
Gestartet von C:\Users\salexes\Desktop
Windows 10 Pro Version 1809 17763.379 (X64) (2019-01-20 02:15:54)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2799860837-106215957-2616225106-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2799860837-106215957-2616225106-503 - Limited - Disabled)
Gast (S-1-5-21-2799860837-106215957-2616225106-501 - Limited - Disabled)
postgres (S-1-5-21-2799860837-106215957-2616225106-1005 - Limited - Enabled) => C:\Users\postgres
salexes@salexes.de (S-1-5-21-2799860837-106215957-2616225106-1002 - Administrator - Enabled) => C:\Users\salexes
WDAGUtilityAccount (S-1-5-21-2799860837-106215957-2616225106-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: Bitdefender Virenschutz (Enabled - Up to date) {0E17DB7D-A20F-62CE-B95B-17DB0CDFE318}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {B5763A99-8435-6D40-83EB-2CA97758A9A5}
FW: Bitdefender Firewall (Enabled) {362C5A58-E860-6396-9204-BEEEF20CA463}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
64 Bit HP CIO Components Installer (HKLM\...\{345F3F90-0505-4EDF-B7A9-5E3AC1AC6CE4}) (Version: 15.2.1 - Hewlett-Packard) Hidden
7-Zip 18.05 (x64) (HKLM\...\7-Zip) (Version: 18.05 - Igor Pavlov)
Abenteuer Auf der LEGO Insel (HKLM-x32\...\LEGOIsland) (Version: - )
ACA & MEP 2019 Object Enabler (HKLM\...\{28B89EEF-2004-0000-5102-CF3F3A09B77D}) (Version: 8.1.48.0 - Autodesk) Hidden
Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 19.010.20098 - Adobe Systems Incorporated)
Adobe After Effects CC 2018 (HKLM-x32\...\AEFT_15_1_2) (Version: 15.1.2 - Adobe Systems Incorporated)
Adobe Illustrator CC 2018 (HKLM-x32\...\ILST_22_1) (Version: 22.1 - Adobe Systems Incorporated)
Adobe InDesign CC 2018 (HKLM-x32\...\IDSN_13_1) (Version: 13.1 - Adobe Systems Incorporated)
Adobe Media Encoder CC 2018 (HKLM-x32\...\AME_12_1_1) (Version: 12.1.1 - Adobe Systems Incorporated)
Adobe Muse CC 2018 (HKLM-x32\...\MUSE_2018_1_0) (Version: 2018.1.0.266 - Adobe Systems Incorporated)
Adobe Photoshop CC 2018 (HKLM-x32\...\PHSP_19_1_5) (Version: 19.1.5 - Adobe Systems Incorporated)
Adobe Premiere Pro CC 2018 (HKLM-x32\...\PPRO_12_1_1) (Version: 12.1.1 - Adobe Systems Incorporated)
Advanced Renamer (HKLM-x32\...\Advanced Renamer_is1) (Version: 3.84 - Hulubulu Software)
Alpari MT4 (HKLM-x32\...\Alpari MT4) (Version: 4.00 - MetaQuotes Software Corp.)
Alpari MT4 (HKLM-x32\...\Alpari MT42) (Version: 4.00 - MetaQuotes Software Corp.)
AlphaConsole version 9.9.8.0 (HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\{CCCDBFCF-CD8B-4728-915A-DCB71C1118BE}_is1) (Version: 9.9.8.0 - AlphaConsole)
AlphaConsole version 9.9.8.0 (HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\{CCCDBFCF-CD8B-4728-915A-DCB71C1118BE}_is1) (Version: 9.9.8.0 - AlphaConsole)
AMD Ryzen Master (HKLM\...\{03213877-8001-4F2C-8917-26B127DE1540}) (Version: 1.0.1.0239 - Advanced Micro Devices, Inc.)
AMD Ryzen Master SDK (HKLM\...\{716F53C3-0B3F-4FB7-9AD7-9BC7DB7134A1}) (Version: 1.3.0.0617 - Advanced Micro Devices, Inc.)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 17.7 - Advanced Micro Devices, Inc.)
APOInstallerMSISetup (HKLM\...\{BA0ED0D9-A18E-4722-9351-799A04EF64C5}) (Version: 1.0.7 - Nahimic) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{80B42CAA-28C0-4FBD-A46E-D61F45E2F9FC}) (Version: 7.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{466D00D0-E7DE-47C2-8FE5-54A8009F5850}) (Version: 7.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C29B636B-9015-4ED1-A12F-6375A337F23B}) (Version: 11.4.1.46 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
Application Verifier x64 External Package (HKLM\...\{62CB44B2-8007-DBB2-1CBA-5CB7309EB3C3}) (Version: 10.1.17134.12 - Microsoft) Hidden
Application Verifier x64 External Package (HKLM\...\{B27BC1FC-8474-9E32-73C2-6F7CD58AD1E3}) (Version: 10.1.17763.132 - Microsoft) Hidden
AudioDeviceFXPluginSampleUIMSISetup (HKLM\...\{2EDC8C4A-A125-4D46-81E8-782B9A94B0C9}) (Version: 1.0.701 - Nahimic) Hidden
AutoCAD 2019 Language Pack - Deutsch (German) (HKLM\...\{28B89EEF-2001-0407-1102-CF3F3A09B77D}) (Version: 23.0.46.0 - Autodesk) Hidden
AutoCAD Architecture 2019 (HKLM\...\{28B89EEF-2004-0000-3102-CF3F3A09B77D}) (Version: 8.1.48.0 - Autodesk) Hidden
AutoCAD Architecture 2019 Core (HKLM\...\{28B89EEF-2004-0000-0102-CF3F3A09B77D}) (Version: 8.1.48.0 - Autodesk) Hidden
AutoCAD Architecture 2019 Language Core - Deutsch (German) (HKLM\...\{28B89EEF-2004-0407-1102-CF3F3A09B77D}) (Version: 8.1.48.0 - Autodesk) Hidden
AutoCAD Architecture 2019 Language Shared - Deutsch (German) (HKLM\...\{28B89EEF-2004-0407-4102-CF3F3A09B77D}) (Version: 8.1.48.0 - Autodesk) Hidden
AutoCAD Architecture 2019 Shared (HKLM\...\{28B89EEF-2004-0000-4102-CF3F3A09B77D}) (Version: 8.1.48.0 - Autodesk) Hidden
Autodesk Advanced Material Library Low Resolution Image Library 2019 (HKLM-x32\...\{ACC0DD09-7E20-4792-87D5-BDBE40206584}) (Version: 17.11.3.0 - Autodesk)
Autodesk Material Library 2019 (HKLM-x32\...\{8F69EE2C-DC34-4746-9B47-7511147BD4B0}) (Version: 17.11.3.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2019 (HKLM-x32\...\{3AAA4C1B-51DA-487D-81A3-4234DBB9A8F9}) (Version: 17.11.3.0 - Autodesk)
Autodesk Material Library Low Resolution Image Library 2019 (HKLM-x32\...\{77F779B8-3262-4014-97E9-36D6933A1904}) (Version: 17.11.3.0 - Autodesk)
Autodesk Single Sign On Component (HKLM\...\{7D4DA6F4-7498-4946-ABA3-8010F2FB8405}) (Version: 9.27.0.600 - Autodesk)
Autodesk Workflows 2019 (HKLM\...\{F9857F69-9B57-4DF2-8930-7A4D5F8D5635}) (Version: 17.11.1.0 - Autodesk, Inc.)
AviSynth+ 0.1.0 r2508 (HKLM-x32\...\{AC78780F-BACA-4805-8D4F-AE1B52B7E7D3}_is1) (Version: 0.1.0.2508 - The Public)
Backuptrans Android iPhone WhatsApp Transfer + (x64) 3.2.108 (HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\Backuptrans Android iPhone WhatsApp Transfer + (x64)) (Version: 3.2.108 - Backuptrans)
Backuptrans Android iPhone WhatsApp Transfer + (x64) 3.2.108 (HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\Backuptrans Android iPhone WhatsApp Transfer + (x64)) (Version: 3.2.108 - Backuptrans)
Backuptrans iPhone WhatsApp Transfer (x64) 3.2.108 (HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\Backuptrans iPhone WhatsApp Transfer (x64)) (Version: 3.2.108 - Backuptrans)
Backuptrans iPhone WhatsApp Transfer (x64) 3.2.108 (HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\Backuptrans iPhone WhatsApp Transfer (x64)) (Version: 3.2.108 - Backuptrans)
Balanced (HKLM-x32\...\{EFD0705E-598B-46D4-8D5B-4539431764B8}) (Version: 2.02.0000 - Ihr Firmenname) Hidden
Base64 (HKLM-x32\...\Base64) (Version: 1.4.0.18 - MCPat.com)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 23.0.8.132 - Bitdefender)
Bitdefender Device Management (HKLM\...\Bitdefender Device Management) (Version: 23.0.19.85 - Bitdefender)
Bitdefender Total Security (HKLM\...\Bitdefender) (Version: 23.0.16.72 - Bitdefender)
Bitwarden (HKLM\...\173a9bac-6f0d-50c4-8202-4744c69d091a) (Version: 1.12.0 - 8bit Solutions LLC)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Bulk Rename Utility 3.0.0.1 (64-bit) (HKLM\...\Bulk Rename Utility Installation_is1) (Version: - TGRMN Software)
calibre 64bit (HKLM\...\{8CD5399E-7215-4BAB-A9F0-EB44B787F7D8}) (Version: 3.39.1 - Kovid Goyal)
CCleaner (HKLM\...\CCleaner) (Version: 5.45 - Piriform)
Chrome Remote Desktop Host (HKLM-x32\...\{519CE4A6-64D0-4955-A17B-751645E1163B}) (Version: 73.0.3683.67 - Google Inc.)
CPUID CPU-Z MSI 1.78 (HKLM\...\CPUID CPU-Z MSI_is1) (Version: 1.78 - CPUID, Inc.)
CPUID HWMonitor 1.35 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.35 - CPUID, Inc.)
CrystalDiskInfo 7.6.0 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.6.0 - Crystal Dew World)
DB Browser for SQLite (HKLM-x32\...\DB Browser for SQLite) (Version: 3.10.1 - DB Browser for SQLite Team)
DDBAC Signlet (HKLM-x32\...\{CF663216-EBF0-400B-8664-C1BC2FACABA3}) (Version: 1.0.49.0 - B+S Banksysteme Aktiengesellschaft)
Discord (HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\Discord) (Version: 0.0.305 - Discord Inc.)
Discord (HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\Discord) (Version: 0.0.305 - Discord Inc.)
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 419.35 - NVIDIA Corporation) Hidden
dreamboxEDIT -- The one and only settings editor for your Dreambox (HKLM-x32\...\dreamboxEDIT) (Version: - )
Driver Booster 6.0.1.434 (HKLM-x32\...\Driver Booster_is1) (Version: 6.0.1.434 - IObit)
EndpointMonitoringMSISetup (HKLM\...\{0503C5BC-407F-4CD5-8BBB-7DEDB0B7E52C}) (Version: 1.0.701 - Nahimic) Hidden
FileZilla Client 3.39.0 (HKLM-x32\...\FileZilla Client) (Version: 3.39.0 - Tim Kosse)
Git version 2.21.0 (HKLM\...\Git_is1) (Version: 2.21.0 - The Git Development Community)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 72.0.3626.121 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
Gothic 2 Gold Edition MULTi6 - ElAmigos Version 2.60 (HKLM-x32\...\{C3BF8D77-BA8C-47F7-AE11-26A8B19A8CD1}_is1) (Version: 2.60 - JoWood)
GOTHIC2 - Die Nacht des Raben - 'System-Paket' (HKLM-x32\...\GOTHIC2 - Die Nacht des Raben - 'System-Paket') (Version: 1.7 - World of Gothic RU © 2017)
HandBrake 1.1.0 (HKLM-x32\...\HandBrake) (Version: 1.1.0 - )
Hotfix für Microsoft Visual C++ 2010 Express - DEU (KB2565057) (HKLM-x32\...\{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}.KB2565057) (Version: 1 - Microsoft Corporation)
Hotfix für Microsoft Visual C++ 2010 Express - DEU (KB2635973) (HKLM-x32\...\{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}.KB2635973) (Version: 1 - Microsoft Corporation)
inAudible (HKLM-x32\...\{CCD146B4-EC8F-443D-A6F5-0E1ABC1133A3}) (Version: 1.197 - The GUN) Hidden
inAudible (HKLM-x32\...\inAudible 1.197) (Version: 1.197 - The GUN)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
Intellisense Lang Pack Mobile Extension SDK 10.0.10240.0 (HKLM-x32\...\{3C06680E-B0F3-4C36-A648-8DCCAE530298}) (Version: 10.0.10240.0 - Microsoft Corporation) Hidden
IQ Option (HKLM-x32\...\IQ Option) (Version: 1.1 - IQOption)
IrScrutinizer version 1.4.2 (HKLM-x32\...\{AC1B3ACE-5FFD-A379-472A-D97CE9ED3DE9}_is1) (Version: 1.4.2 - Bengt Martensson)
iTunes (HKLM\...\{552960A4-02C6-466D-BBEB-E4C4C0A82EF3}) (Version: 12.9.2.6 - Apple Inc.)
Java 8 Update 201 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180201F0}) (Version: 8.0.2010.9 - Oracle Corporation)
Kits Configuration Installer (HKLM-x32\...\{0275DC52-C83E-3142-D2EF-70877F885663}) (Version: 10.0.26624 - Microsoft) Hidden
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - )
LEGO Insel 2 (HKLM-x32\...\{85967580-EBC2-11D4-AEA3-0050046A88ED}) (Version: - )
LEGO Island (HKLM-x32\...\{C5B7CBC7-1A71-4F6B-83F4-9CD71E6F762A}_is1) (Version: 1.1.0.0 - LEGO)
Malwarebytes Version 3.7.1.2839 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.7.1.2839 - Malwarebytes)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 1.1 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.1 Language Pack - DEU) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Office Professional Plus 2019 - de-de (HKLM\...\Proplus2019Retail - de-de) (Version: 16.0.11328.20158 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\OneDriveSetup.exe) (Version: 19.012.0121.0011 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\OneDriveSetup.exe) (Version: 19.012.0121.0011 - Microsoft Corporation)
Microsoft Project Professional 2019 - de-de (HKLM\...\ProjectPro2019Retail - de-de) (Version: 16.0.11328.20158 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visio Professional 2019 - de-de (HKLM\...\VisioPro2019Retail - de-de) (Version: 16.0.11328.20158 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - DEU (HKLM-x32\...\Microsoft Visual C++ 2010 Express - DEU) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40649 (HKLM-x32\...\{5d0723d3-cff7-4e07-8d0b-ada737deb5e6}) (Version: 12.0.40649.5 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.16.27024 (HKLM-x32\...\{5fb2083a-f3cc-4b78-93ff-bd9788b5de01}) (Version: 14.16.27024.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.16.27024 (HKLM-x32\...\{2ff11a2a-f7ac-4a6c-8cd4-c7bb974f3642}) (Version: 14.16.27024.1 - Microsoft Corporation)
Microsoft Visual C++ Build Tools (HKLM-x32\...\{a9528995-e130-4501-ae19-bbfaddb779cc}) (Version: 14.0.25420.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.31007 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.31007 - Microsoft Corporation)
Microsoft Visual Studio Code (HKLM\...\{EA457B21-F73E-494C-ACAB-524FDE069978}_is1) (Version: 1.18.1 - Microsoft Corporation)
Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 1.18.1089.1204 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
MKVToolNix 31.0.0 (64-bit) (HKLM-x32\...\MKVToolNix) (Version: 31.0.0 - Moritz Bunkus)
Mozilla Firefox 64.0 (x64 en-US) (HKLM\...\Mozilla Firefox 64.0 (x64 en-US)) (Version: 64.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 60.0 - Mozilla)
Mp3tag v2.91 (HKLM-x32\...\Mp3tag) (Version: 2.91 - Florian Heidenreich)
MSI Command Center (HKLM-x32\...\{85A2564E-9ED9-448A-91E4-B9211EE58A08}_is1) (Version: 3.0.0.65 - MSI)
MSI Development Tools (HKLM-x32\...\{1E406B46-65F4-91CE-65DA-DB66D5443B68}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
MSI Development Tools (HKLM-x32\...\{6C961B30-A670-8A05-3BFE-3947E84DD4E4}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 6.2.0.10 - MSI)
MSI Live Update 6 (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.2.0.35 - MSI)
MyHarmony (HKLM-x32\...\{2AD8F8A1-ECE5-4890-BCC2-B4396370A0D4}) (Version: 1.0.308 - Logitech)
Nahimic VR (HKLM-x32\...\{cb762380-efd6-408a-9f90-0c66625b1799}) (Version: 1.0.7 - Nahimic)
NineEarsSettingsConfigurator (HKLM\...\{1CC2FA3D-7EF1-4A00-BB3E-B25D07AA9A44}) (Version: 1.0.701 - Nahimic) Hidden
NordVPN (HKLM-x32\...\{A19C08C0-A154-4055-ADC1-F36BE5758EA6}) (Version: 6.18.9 - NordVPN) Hidden
NordVPN (HKLM-x32\...\NordVPN 6.18.9) (Version: 6.18.9 - NordVPN)
NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.5.9 - Notepad++ Team)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.13 - NVIDIA Corporation) Hidden
NVIDIA 3D Vision Controller-Treiber 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 419.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 419.35 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.17.0.126 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.17.0.126 - NVIDIA Corporation)
NVIDIA Grafiktreiber 419.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 419.35 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.38.13 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.13 - NVIDIA Corporation)
NVIDIA mental ray and IRay feature plugins for 3ds Max 2019 (HKLM\...\{4A02A23C-8BBF-4429-84AA-6DBFC4AC64DF}) (Version: 21.0.0.0 - Autodesk)
NVIDIA PhysX-Systemsoftware 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
OEM Application Profile (HKLM-x32\...\{7F5DCD33-1039-C3B2-9538-B645B65BBA63}) (Version: 1.00.0000 - Ihr Firmenname)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.11328.20158 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.11328.20158 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.11328.20158 - Microsoft Corporation) Hidden
OLB Onlinebanking Starter (HKLM-x32\...\{03870827-A3B1-40E5-9607-586077D4A8D2}) (Version: 5.7.17.0 - B+S Banksysteme Aktiengesellschaft)
OnePlus USB Drivers 1.00 (HKLM-x32\...\OnePlus USB Drivers 1.00) (Version: 1.00 - OnePlus, Inc)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenVPN 2.4.5-I601 (HKLM\...\OpenVPN) (Version: 2.4.5-I601 - OpenVPN Technologies, Inc.)
Oracle VM VirtualBox 5.2.20 (HKLM\...\{2152C273-E767-483D-B1B9-DF1C1AB5441D}) (Version: 5.2.20 - Oracle Corporation)
Plex Media Player (HKLM\...\{FF736E8F-0901-49DB-8346-A0E18A5233AA}) (Version: 2.29.1 - Plex) Hidden
Plex Media Player (HKLM-x32\...\{515cbef1-30f0-4019-8e31-aa80bf887e68}) (Version: 2.29.1 - Plex)
ProductDaemonSetup (HKLM\...\{B7C3A849-F487-4239-9CC4-92EFA7E094AD}) (Version: 1.0.701 - Nahimic) Hidden
PuTTY release 0.70 (64-bit) (HKLM\...\{45B3032F-22CC-40CD-9E97-4DA7095FA5A2}) (Version: 0.70.0.0 - Simon Tatham)
Python 3.7.2 (32-bit) (HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\{0f40e78b-67e1-4e0c-a2fd-e9325d9dfc82}) (Version: 3.7.2150.0 - Python Software Foundation)
Python 3.7.2 (32-bit) (HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\{0f40e78b-67e1-4e0c-a2fd-e9325d9dfc82}) (Version: 3.7.2150.0 - Python Software Foundation)
Python 3.7.2 (64-bit) (HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\{c0f1e976-f585-48f8-968d-48c870496d4e}) (Version: 3.7.2150.0 - Python Software Foundation)
Python 3.7.2 (64-bit) (HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\{c0f1e976-f585-48f8-968d-48c870496d4e}) (Version: 3.7.2150.0 - Python Software Foundation)
Python 3.7.2 Add to Path (32-bit) (HKLM-x32\...\{A0253733-D4C4-4964-AB97-C5C80FCD580F}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 Core Interpreter (32-bit) (HKLM-x32\...\{3A09B849-4D48-41AA-9461-112E6CEC405D}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 Core Interpreter (64-bit) (HKLM\...\{8BDA6D6E-234F-4DD8-A7CA-6DB55F6B609E}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 Development Libraries (32-bit) (HKLM-x32\...\{A14E7090-5888-460B-9003-1C3DA5AD3D35}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 Development Libraries (64-bit) (HKLM\...\{D2CC67CD-ED4E-40BC-94FD-3EA65A6824D6}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 Documentation (32-bit) (HKLM-x32\...\{D2FA452F-4742-4805-BEB1-AC81ED48F4A8}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 Documentation (64-bit) (HKLM\...\{1A91F9E1-13CE-4D8B-9257-61376EC9ED92}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 Executables (32-bit) (HKLM-x32\...\{D6FF50CC-E41E-4FFB-B7B9-72D71BF00C55}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 Executables (64-bit) (HKLM\...\{24260BC9-6F83-4F8F-96AE-6D654621DDF7}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 pip Bootstrap (32-bit) (HKLM-x32\...\{0D2B3674-3B1E-4281-B5FD-37D700602129}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 pip Bootstrap (64-bit) (HKLM\...\{E33F2815-DA54-4554-87A2-FD25EAB1A963}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 Standard Library (32-bit) (HKLM-x32\...\{667226B8-23CA-47C1-A070-D3B85E8C9292}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 Standard Library (64-bit) (HKLM\...\{BE46C9B8-DD8E-4835-B686-644EA6415FEE}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 Tcl/Tk Support (32-bit) (HKLM-x32\...\{34AD493A-01AA-4D6A-9229-BF0406F22D14}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 Tcl/Tk Support (64-bit) (HKLM\...\{1ED81958-CE51-4748-ABFA-583227794FDB}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 Test Suite (32-bit) (HKLM-x32\...\{F0B6A6E9-C7E1-4730-A29D-71C02B800028}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 Test Suite (64-bit) (HKLM\...\{C1CA4559-3153-4EF9-8B74-CC804965E441}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 Utility Scripts (32-bit) (HKLM-x32\...\{06CE3F8B-A658-462C-AD3D-FA7142297E97}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python 3.7.2 Utility Scripts (64-bit) (HKLM\...\{259C5D04-A6E0-47F3-AB23-91F2E9828466}) (Version: 3.7.2150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{FA2A3867-8965-4CF7-83E2-C8960652F5AD}) (Version: 3.7.6565.0 - Python Software Foundation)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.25.119.2018 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8581 - Realtek Semiconductor Corp.)
SDK ARM Additions (HKLM-x32\...\{0B5D6FB7-05A5-271B-5B99-82384219A471}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
SDK ARM Redistributables (HKLM-x32\...\{4A5F6E94-7967-A333-8231-CA9AF35E03BD}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
Skype Version 8.41 (HKLM-x32\...\Skype_is1) (Version: 8.41 - Skype Technologies S.A.)
Slack (HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\slack) (Version: 3.3.8 - Slack Technologies)
Slack (HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\slack) (Version: 3.3.8 - Slack Technologies)
South Park - The Fractured but Whole (HKLM-x32\...\Uplay Install 3088) (Version: - Ubisoft)
Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)
Speedtest by Ookla (HKLM\...\{F4853943-B2AA-4912-9E25-4E4F0E824B56}) (Version: 1.0.14.001 - Ookla)
Spine (HKLM-x32\...\Spine) (Version: 1.14.3 - Clockwork Origins)
Spotify (HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\Spotify) (Version: 1.0.87.491.ge2a121fc - Spotify AB)
Spotify (HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\Spotify) (Version: 1.0.87.491.ge2a121fc - Spotify AB)
Spotlight Desktop (HKLM-x32\...\{79DB3355-E6BE-45F2-83BA-99F69F5EB22F}) (Version: 2.0.1 - onlineth)
SSAudioDaemonMSISetup (HKLM\...\{AA2D2D37-8929-4788-9F30-7F3D3C482818}) (Version: 1.0.7 - Nahimic) Hidden
Star Wars™ Episode I - Racer™ (HKLM-x32\...\1288119483_is1) (Version: 1.0 - GOG.com)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TAP-NordVPN 9.21.2 (HKLM\...\TAP-NordVPN) (Version: 9.21.2 - NordVPN.com)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
TeamViewer 14 (HKLM-x32\...\TeamViewer) (Version: 14.1.18533 - TeamViewer)
Telegram Desktop version 1.6 (HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.6 - Telegram Messenger LLP)
Telegram Desktop version 1.6 (HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.6 - Telegram Messenger LLP)
TreeSize Free V4.1.2 (HKLM-x32\...\TreeSize Free_is1) (Version: 4.1.2 - JAM Software)
Universal CRT Extension SDK (HKLM-x32\...\{18ABFDF6-23D9-87E6-015E-FFE3C7F153D5}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Extension SDK (HKLM-x32\...\{1FBCBC17-4527-2340-0832-B1D49C41FF67}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal CRT Extension SDK (HKLM-x32\...\{7D225043-6CC5-7B56-11DD-AFF90E4C1C0C}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{0D6B41AF-D117-8944-A059-3F9346A896C5}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{8BFBEC30-33CC-13B4-849F-3B036F27466A}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{CB19DBA2-C210-5646-9522-695A1317CD34}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{5F577A45-3C65-352B-061D-D6A57F05402C}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{B6273353-8B54-1F89-1A16-5940925104CE}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal CRT Tools x64 (HKLM\...\{3B588BBE-EB02-D1B2-5CD5-7DB85AD8A3E7}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
Universal CRT Tools x86 (HKLM-x32\...\{D2DC1EDF-EE04-9B5F-BDD7-06645D859EC3}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{6AFD985C-21B7-8F2D-86B2-19A0563A1195}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{775886B8-DEE1-CB20-8A94-FC09FA54ECF6}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{CE83D0BD-418A-F3D1-D6CE-687E96D1EBD0}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{F814D094-197F-43C8-87FA-3210BB780486}) (Version: 2.53.0.0 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 49.0 - Ubisoft)
vcpp_crt.redist.clickonce (HKLM-x32\...\{77B667B9-36B3-4712-AD45-28EA1A278D8B}) (Version: 14.16.27012 - Microsoft Corporation) Hidden
Verfügbare Autodesk-Apps 2016-2019 (HKLM-x32\...\{79F5747D-A961-4CCD-88B0-41F004D79AEB}) (Version: 2.5.0 - Autodesk)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{6DA2B636-698A-3294-BF4A-B5E11B238CDD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{14866AAD-1F23-39AC-A62B-7091ED1ADE64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual Studio Build Tools 2017 (HKLM-x32\...\72a31979) (Version: 15.9.28307.280 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.6 - VideoLAN)
vs_FileTracker_Singleton (HKLM-x32\...\{A41E138F-5A3F-443C-B72D-957AB994FB5A}) (Version: 15.9.28128 - Microsoft Corporation) Hidden
WebDrive (HKLM\...\{F08E87FD-F62B-4BAC-A2D6-A94755653F30}) (Version: 17.00.4894 - South River Technologies)
WhatsApp (HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\WhatsApp) (Version: 0.3.2386 - WhatsApp)
WhatsApp (HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\WhatsApp) (Version: 0.3.2386 - WhatsApp)
WibuKey Setup (WibuKey Remove) (HKLM\...\{00060000-0000-1004-8002-0000C06B5161}) (Version: Version 6.32 of 2015-Jul-21 (Build 1504) (Setup) - WIBU-SYSTEMS AG)
WinAppDeploy (HKLM-x32\...\{5AD4A604-B476-1578-2A20-6B02FC6258BE}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinAppDeploy (HKLM-x32\...\{716AE8F2-1BE3-7657-DF6B-F23DEEC75AF9}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinAppDeploy (HKLM-x32\...\{FAD0F79E-5EA4-542B-76A3-46093E52C1F5}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
Windows Mobile Connectivity Tools 10.0.15254.0 - Desktop x86 (HKLM-x32\...\{833F02C5-2C39-49F6-BD64-91D351081274}) (Version: 10.1.15254.1 - Microsoft Corporation)
Windows SDK AddOn (HKLM-x32\...\{E77C2F78-6089-48F8-89DF-DDF2850DFFD9}) (Version: 10.1.0.0 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.17134.12 (HKLM-x32\...\{5f83ccda-0498-4b97-a298-16a642bf49f2}) (Version: 10.1.17134.12 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.17763.132 (HKLM-x32\...\{5fe95b9d-9219-4d8b-a031-71323ae48a81}) (Version: 10.1.17763.132 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.26624 (HKLM-x32\...\{e7a0c8b6-b0e9-41e2-8a0a-a6784f88d1d4}) (Version: 10.0.26624 - Microsoft Corporation)
Windows-Treiberpaket - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)
WinFsp 2018.2 B4 (HKLM-x32\...\{9D8B77D7-99B8-4D63-BA50-BE3CA39136FE}) (Version: 1.4.18344 - Navimatics Corporation)
WinMerge 2.16.0.0 x64 (HKLM\...\WinMerge_is1) (Version: 2.16.0.0 - Thingamahoochie Software)
WinRAR 5.60 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.60.0 - win.rar GmbH)
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{00B12DF9-5428-9406-DE2C-8E8A1A062B05}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{389D182F-0ADA-5C7E-FF32-2573A821592C}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{4B51AEB6-6809-14FF-9BED-0CA4562E7C29}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{C3776B36-B34E-00E2-3009-95A6F1870B58}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{C7EDFCB3-6341-A239-4626-499461403BC1}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{E82A4A6C-C21C-35FE-B805-3E44318F6D63}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{7E898893-9C42-A572-7F57-FDE55CE812F7}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{965D1746-D94A-49B9-2A48-A14914CA3B57}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{AC7E3FD3-018B-5DD8-2C2B-3AE87B283E48}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{35CC86CF-B9E6-6E9D-7DFF-F2C4A7668A57}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{84C6B91B-67DA-DDE3-86F1-87A3E307E8C1}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{E8B1CB29-5C24-D882-3CEF-F8A7263BC63D}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{3755CD99-C62E-3312-DDD3-29A4F259270D}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{F6F11150-93DE-0507-FCA0-F746E0207017}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{311BF490-B346-3B34-80BD-B892C4835026}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{729DA966-8590-2C1F-2178-16C1D32FD7FD}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{8329C3A0-8582-D1C2-67FF-800654BFDF45}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{2F157523-39A0-B488-8BD7-60B25186B5EB}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{771C9DEF-7C0B-85DA-6426-7A20F06BEC94}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{F1C18506-3168-A9D9-E2D9-D23A512A326E}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{4095D263-6A13-78D3-DEDA-AA3452011F6E}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{AF110624-9E71-3F58-0992-C12DBEE79BA7}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{B047C746-63E8-41C7-A5C0-7ABD390CF3E6}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{0063AF94-397B-9C64-1C71-D404B27C5D96}) (Version: 10.1.17763.132 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{8F542B99-CF59-6042-48B8-549B60E66232}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{C3243E23-2EB6-4419-2692-40944923B112}) (Version: 10.1.17134.12 - Microsoft Corporation) Hidden
WinRT Intellisense Xbox Live Extension SDK - en-us (HKLM-x32\...\{91F4F520-25FB-AB44-610A-B8D53C4BF25D}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense Xbox Live Extension SDK - Other Languages (HKLM-x32\...\{1C47EFF0-EDFE-BBA3-0BB5-8345E002C0D8}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
YI Home (HKLM-x32\...\YI Home) (Version: 1.0.0.0_201712251000 - XiaoYi)
Zoom (HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\ZoomUMX) (Version: 4.1 - Zoom Video Communications, Inc.)
Zoom (HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\ZoomUMX) (Version: 4.1 - Zoom Video Communications, Inc.)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2019\de-DE\acadficn.dll (Autodesk Development Sarl -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2799860837-106215957-2616225106-1002_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-2799860837-106215957-2616225106-1002_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2019\de-DE\acadficn.dll (Autodesk Development Sarl -> Autodesk, Inc.)
ShellIconOverlayIdentifiers: [ WebDrive] -> {37D70BD3-073C-4180-ADD9-C032EA5A7204} => C:\Windows\system32\wdShellExt.dll [2017-11-21] (South River Technologies, Inc.) [Datei ist nicht signiert]
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2018-10-14] (Notepad++ -> )
ContextMenuHandlers1: [BRUMenuHandler] -> [CC]{5D924130-4CB1-11DB-B0DE-0800200C9A66} => -> Keine Datei
ContextMenuHandlers1: [WebDrive] -> {04466240-beb3-11d1-be1c-00aa006b77f4} => C:\Windows\system32\wdShellExt.dll [2017-11-21] (South River Technologies, Inc.) [Datei ist nicht signiert]
ContextMenuHandlers1: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files\WinMerge\ShellExtensionX64.dll [2018-02-19] (hxxp://winmerge.org) [Datei ist nicht signiert]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-06-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-06-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [BRUMenuHandler] -> [CC]{5D924130-4CB1-11DB-B0DE-0800200C9A66} => -> Keine Datei
ContextMenuHandlers2: [WebDrive] -> {04466240-beb3-11d1-be1c-00aa006b77f4} => C:\Windows\system32\wdShellExt.dll [2017-11-21] (South River Technologies, Inc.) [Datei ist nicht signiert]
ContextMenuHandlers2: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files\WinMerge\ShellExtensionX64.dll [2018-02-19] (hxxp://winmerge.org) [Datei ist nicht signiert]
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers3: [WebDrive] -> {04466240-beb3-11d1-be1c-00aa006b77f4} => C:\Windows\system32\wdShellExt.dll [2017-11-21] (South River Technologies, Inc.) [Datei ist nicht signiert]
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [BRUMenuHandler] -> [CC]{5D924130-4CB1-11DB-B0DE-0800200C9A66} => -> Keine Datei
ContextMenuHandlers4: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files\WinMerge\ShellExtensionX64.dll [2018-02-19] (hxxp://winmerge.org) [Datei ist nicht signiert]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2019-03-01] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers5: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files\WinMerge\ShellExtensionX64.dll [2018-02-19] (hxxp://winmerge.org) [Datei ist nicht signiert]
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WebDrive] -> {04466240-beb3-11d1-be1c-00aa006b77f4} => C:\Windows\system32\wdShellExt.dll [2017-11-21] (South River Technologies, Inc.) [Datei ist nicht signiert]
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-06-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-06-24] (win.rar GmbH -> Alexander Roshal)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0A412234-DA9A-4021-B518-923B6843D864} - \IQOptionUpdateTask -> Keine Datei <==== ACHTUNG
Task: {0B8BF76D-CA9B-4759-B47E-4FB07D3F33A9} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_142_pepper.exe
Task: {157FDBAD-64E6-4109-B1F8-73141CAE08AD} - System32\Tasks\Driver Booster SkipUAC (salexes@salexes.de) => D:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe (IObit Information Technology -> IObit) [Datei ist nicht signiert]
Task: {21FF7FCB-08B0-4C23-A578-327A306F1111} - System32\Tasks\MSIOSDx64_Host => C:\Program Files (x86)\MSI\Gaming APP\OSD\x64\MsiGamingOSD_x64.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
Task: {22D3A2D2-DB1F-4C0A-AC3F-D246739B4104} - \AutoPico Daily Restart -> Keine Datei <==== ACHTUNG
Task: {2E316026-AFCE-4E7E-8CFE-6839E29F1640} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {35668678-C3FB-4CA7-9610-C9D58D3F972B} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {363BD24C-9072-4753-B4C5-7EB7B0E43FDE} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4199D295-DB8B-4F0A-87CF-102046696530} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {44CFA676-57D7-41A4-A4C8-C80023380D4A} - System32\Tasks\R@1n-KMS\Windows64Professional => wmic path SoftwareLicensingProduct where (ID="2de67392-b7a7-462a-b1ca-108dd189f588") call Activate
Task: {49334ECE-B153-4695-ACD7-4917E8CDF14E} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {4A46A317-E33D-4780-845E-B913BBABDA42} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {558D9D44-83C5-4CB2-8EA0-C6F55A564FCC} - System32\Tasks\NahimicVRSvc32Run => C:\Program Files\Nahimic\Nahimic VR\Foundation\NahimicVRSvc32.exe (A-Volute -> A-Volute)
Task: {5704AE78-AA8F-48BC-B336-6646A223E8F0} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5B255904-38DB-476B-A9AE-F07684206AAC} - System32\Tasks\AdobeGCInvoker-1.0-MicrosoftAccount-salexes@salexes.de => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe (Adobe Systems Incorporated -> Adobe Systems, Incorporated)
Task: {5F5FE258-B8AB-475C-B253-DE089632E6C5} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe
Task: {622EC9E3-B061-4DFB-A17B-135355DAA805} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {6E01B615-42DD-498A-8F52-E03BFCFD52DD} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {6E02418B-3D41-42EA-9FFD-DCD9D3B789DB} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6F35B458-5B25-4A02-A47D-3711B919D8D2} - System32\Tasks\NahimicVRSvc64Run => C:\Program Files\Nahimic\Nahimic VR\Foundation\x64\NahimicVRSvc64.exe (A-Volute -> A-Volute)
Task: {6FA93564-E181-4E22-B5C6-1C61BB3A2A80} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {7FDE02DE-079C-4CEB-8A89-87B391DFB409} - System32\Tasks\Driver Booster Scheduler => D:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe (IObit Information Technology -> IObit)
Task: {835AA8AB-7DD9-430D-B39A-7AC0475D0DAA} - System32\Tasks\Driver Booster SkipUAC (salexes) => C:\Program Files (x86)\IObit\Driver Booster\5.0.3\DriverBooster.exe
Task: {8FC57038-6C00-40A6-B2A6-3834BFA749A1} - System32\Tasks\PDVDServ12 Task => C:\Program Files (x86)\CyberLink\PowerDVD12\PDVD12Serv.exe
Task: {9997A82A-6F84-4A6B-9C89-D819B40DB902} - System32\Tasks\MSIOSDx86_Host => C:\Program Files (x86)\MSI\Gaming APP\OSD\x86\MsiGamingOSD_x86.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
Task: {9AB4CF8F-DA03-4E28-919E-D7A8B668DA61} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-salexes@salexes.de => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {9D86559E-540A-403D-B0A8-F81C5BD9E7DC} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A1C204F1-0CCD-49B6-8A44-9625AB1640F6} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe (Bitdefender SRL -> Bitdefender)
Task: {B876648B-0D25-4D1E-9AD6-A4CA796B2070} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B8D24391-FE23-4813-9789-6952539E00D0} - System32\Tasks\MSIGH_Host => C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
Task: {BD7C1D01-4719-4909-B54E-3DBDA89C44F4} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {C1D993AD-75DC-41EB-A087-3B28F4739A09} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe (Bitdefender SRL -> Bitdefender)
Task: {D4D5044E-7EF7-4D49-92A0-5AD885725CE9} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DB8232DE-8476-4016-8AC2-2562721568CF} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DD8BCC61-01C4-46D2-AD96-227C109D2DB1} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {DF299E7B-9324-4A1E-9941-BF5C0CD4D21D} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {E2AAEDDC-AAF1-45E7-94D6-169CE25D0A8A} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E983F511-AE49-4920-B421-E6333A9A3661} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe (NVIDIA Corporation -> NVIDIA Corporation)
Task: {EC0126D6-BA81-4C6C-94BE-8DDFEE3DE41C} - System32\Tasks\MSISW_Host => C:\Windows\SysWOW64\muachost.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
Task: {F1279C8F-509C-4BD4-9CE9-F454F87B51FB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {F6A14B73-458B-4B98-B1BC-0E858EDB4E4A} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
Task: {F6CEF7FE-0C12-4E8B-9C5C-273B9A6E015D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {FC0E934E-2202-4082-8B89-4EC6E3F0A170} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe (Piriform Software Ltd -> Piriform Software Ltd)
Task: {FE472889-E5D0-4DE1-A1A0-29FF055FF61B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\MSISW_Host.job => C:\WINDOWS\SysWOW64\muachost.exe
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
ShortcutWithArgument: C:\Users\salexes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\BrowserStack Local.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=mfiddfehmfdojjfdpfngagldgaaafcfo
ShortcutWithArgument: C:\Users\salexes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Readium.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=fepbnnnkkadjhjahcafoaglimekefifl
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2017-11-21 01:30 - 2017-11-21 01:30 - 012875776 _____ (South River Technologies, Inc.) [Datei ist nicht signiert] C:\WINDOWS\system32\wdHelper.dll
2017-11-21 01:35 - 2017-11-21 01:35 - 002266624 _____ (South River Technologies) [Datei ist nicht signiert] C:\WINDOWS\system32\wdResDll.dll
2017-11-21 01:30 - 2017-11-21 01:30 - 001157120 _____ (South River Technologies, Inc.) [Datei ist nicht signiert] C:\WINDOWS\system32\wdUIResDll.dll
2013-05-16 06:52 - 2013-05-16 06:52 - 000050688 _____ (Hewlett-Packard) [Datei ist nicht signiert] c:\windows\system32\hpzinw12.dll
2013-05-16 06:52 - 2013-05-16 06:52 - 000066048 _____ (Hewlett-Packard) [Datei ist nicht signiert] c:\windows\system32\hpzipm12.dll
2019-01-12 02:12 - 2014-08-31 16:34 - 000331264 _____ () [Datei ist nicht signiert] C:\rclone\nssm.exe
2018-12-10 09:38 - 2018-12-10 09:38 - 000024064 _____ (Navimatics Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\WinFsp\bin\launcher-x64.exe
2018-12-10 09:38 - 2018-12-10 09:38 - 000147968 _____ (Navimatics Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\WinFsp\bin\winfsp-x64.dll
2019-01-12 02:14 - 2019-02-09 11:55 - 026878464 _____ () [Datei ist nicht signiert] C:\rclone\rclone.exe
2017-11-15 21:19 - 2016-06-14 16:35 - 000187392 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\MSI\Gaming APP\OSD\x64\D3D11FontDraw.dll
2018-10-23 01:43 - 2018-10-23 01:43 - 000459264 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\WINDOWS\SYSTEM32\D3DREF9.DLL
2017-11-21 01:31 - 2017-11-21 01:31 - 016783360 _____ (South River Technologies, Inc.) [Datei ist nicht signiert] C:\WINDOWS\SYSTEM32\wdShellExt.dll
2015-03-17 00:34 - 2015-03-17 00:34 - 000013312 _____ (Adobe Systems Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\locale\de_de\Acrobat Elements\ContextMenuShim64.deu
2018-06-18 15:09 - 2018-04-30 13:00 - 000075776 _____ (Igor Pavlov) [Datei ist nicht signiert] D:\Program Files\7-Zip\7-zip.dll
2019-02-16 11:59 - 2018-02-19 02:02 - 000202240 _____ (hxxp://winmerge.org) [Datei ist nicht signiert] C:\Program Files\WinMerge\ShellExtensionX64.dll
2018-04-01 01:06 - 2018-04-01 01:06 - 000379904 _____ (onlineth) [Datei ist nicht signiert] C:\Users\salexes\AppData\Roaming\onlineth\Spotlight Desktop\Spotlight Desktop.exe
2018-05-30 19:27 - 2005-07-18 12:43 - 000160256 _____ () [Datei ist nicht signiert] D:\Program Files (x86)\MSI\Live Update\unrar.dll
2017-11-15 21:19 - 2015-06-23 16:41 - 000082432 _____ (Fintek) [Datei ist nicht signiert] C:\Program Files (x86)\MSI\Gaming APP\Lib\FintekUSBDll.dll
2018-05-24 13:45 - 2018-05-24 13:45 - 000250368 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\NordVPN\x86\Liberation.Native.Firewall.dll
2017-11-15 21:19 - 2016-06-14 16:35 - 000163328 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\MSI\Gaming APP\OSD\x86\D3D11FontDraw.dll
2017-11-15 21:19 - 2016-10-03 13:43 - 000399872 _____ (TODO: <公司名稱>) [Datei ist nicht signiert] C:\Program Files (x86)\MSI\Gaming APP\Lib\SDKDLL.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 003084800 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Quick.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 004571648 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Widgets.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 000438272 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5WinExtras.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 005139968 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Gui.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 002950144 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Qml.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 002234880 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Network.dll
2019-03-19 03:12 - 2019-02-01 09:55 - 005010944 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 001181184 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\platforms\qwindows.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 000124928 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\styles\qwindowsvistastyle.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 000026112 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\imageformats\qico.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 000020992 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\imageformats\qsvg.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 000259584 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Svg.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 000014848 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick.2\qtquick2plugin.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 000729088 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Controls\qtquickcontrolsplugin.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 000073216 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Layouts\qquicklayoutsplugin.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 000179712 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Dialogs\dialogplugin.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 000014848 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Window.2\windowplugin.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 000014848 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQml\Models.2\modelsplugin.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 000101888 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\PrivateWidgets\widgetsplugin.dll
2017-04-04 11:58 - 2017-04-04 11:58 - 000172544 _____ () [Datei ist nicht signiert] C:\Program Files\Nahimic\Nahimic VR\AnalogDriver\EndpointMonitoring.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 000086016 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtWinExtras\qml_winextras.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 000037888 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Dialogs\Private\dialogsprivateplugin.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 000047104 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt\labs\folderlistmodel\qmlfolderlistmodelplugin.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 000027136 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt\labs\settings\qmlsettingsplugin.dll
2019-03-19 03:12 - 2019-02-01 09:56 - 000035328 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\iconengines\qsvgicon.dll
2019-03-19 04:15 - 2019-03-19 04:15 - 001121280 _____ (ESET) [Datei ist nicht signiert] C:\Users\salexes\AppData\Local\ESET\ESETOnlineScanner\esets_apiW_a.DLL
2015-03-17 00:34 - 2015-03-17 00:34 - 000010240 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\locale\de_de\AcroTray.deu
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\Software\Classes\.scr: AutoCADScriptFile =>
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\alipay.com -> hxxps://alipay.com
IE trusted site: HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\alipay.com -> hxxp://alipay.com
IE trusted site: HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\alisoft.com -> hxxps://alisoft.com
IE trusted site: HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\alisoft.com -> hxxp://alisoft.com
IE trusted site: HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\taobao.com -> hxxps://taobao.com
IE trusted site: HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\taobao.com -> hxxp://taobao.com
IE trusted site: HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\alipay.com -> hxxps://alipay.com
IE trusted site: HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\alipay.com -> hxxp://alipay.com
IE trusted site: HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\alisoft.com -> hxxps://alisoft.com
IE trusted site: HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\alisoft.com -> hxxp://alisoft.com
IE trusted site: HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\taobao.com -> hxxps://taobao.com
IE trusted site: HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\taobao.com -> hxxp://taobao.com
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2017-11-15 19:26 - 2019-03-19 02:52 - 000001274 ____R C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 test.com
2018-09-07 18:41 - 2019-03-19 03:20 - 000000439 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
172.18.29.145 salexes-PC.mshome.net # 2024 3 0 17 2 20 16 359
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Common Files\Intel\Shared Libraries\redist\intel64\compiler;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\PuTTY\;C:\Program Files\Calibre2\;C:\Program Files (x86)\FFmpeg\bin;C:\Program Files (x86)\eSpeak\command_line;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Android;C:\Users\salexes\AppData\Local\Microsoft\WindowsApps;C:;C:\Program Files\Common Files\Autodesk Shared\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;D:\Downloads\Sonstiges\Premiumizer\Git\cmd;D:\Downloads\Sonstiges\Premiumizer\Git\mingw64\bin;D:\Downloads\Sonstiges\Premiumizer\Git\usr\bin;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230037\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230057\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\salexes\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\310ff4bb7bc7a7943b347031ebe08bd2a3e9ba5b3000b582006c723aaede71d5
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\Control Panel\Desktop\\Wallpaper -> C:\Users\salexes\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Assets\310ff4bb7bc7a7943b347031ebe08bd2a3e9ba5b3000b582006c723aaede71d5
HKU\S-1-5-21-2799860837-106215957-2616225106-1005\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-21-2799860837-106215957-2616225106-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230762\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.
HKLM\...\StartupApproved\StartupFolder: => "HandyAndy.lnk"
HKLM\...\StartupApproved\Run: => "Acronis Scheduler2 Service"
HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run: => "pac"
HKLM\...\StartupApproved\Run32: => "AcronisTibMounterMonitor"
HKLM\...\StartupApproved\Run32: => "TrueImageMonitor.exe"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run32: => "Acronis Scheduler2 Service"
HKLM\...\StartupApproved\Run32: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run32: => "Live Update"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\StartupApproved\StartupFolder: => "Straks.lnk"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\StartupApproved\StartupFolder: => "ShareX.lnk"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\StartupApproved\StartupFolder: => "OLB Onlinebanking Starter.lnk"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\StartupApproved\Run: => "NordVPN"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\StartupApproved\Run: => "ApplePhotoStreams"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\StartupApproved\Run: => "iCloudPhotos"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\StartupApproved\Run: => "NGenuity"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\StartupApproved\Run: => "OpenVPN-GUI"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\StartupApproved\Run: => "Skype for Desktop"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002\...\StartupApproved\Run: => "Docker for Windows"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\StartupApproved\StartupFolder: => "Straks.lnk"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\StartupApproved\StartupFolder: => "ShareX.lnk"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\StartupApproved\StartupFolder: => "OLB Onlinebanking Starter.lnk"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\StartupApproved\Run: => "NordVPN"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\StartupApproved\Run: => "ApplePhotoStreams"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\StartupApproved\Run: => "iCloudPhotos"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\StartupApproved\Run: => "NGenuity"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\StartupApproved\Run: => "OpenVPN-GUI"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\StartupApproved\Run: => "Skype for Desktop"
HKU\S-1-5-21-2799860837-106215957-2616225106-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03192019032230076\...\StartupApproved\Run: => "Docker for Windows"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [VIRT-MIGL-In-TCP-NoScope] => (Allow) %systemroot%\system32\vmms.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [VIRT-REMOTEDESKTOP-In-TCP-NoScope] => (Allow) %systemroot%\system32\vmms.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{2149CBE3-9A96-470E-9BF8-A80379A72D6F}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Broken Sword 2\BrokenSword2.exe () [Datei ist nicht signiert]
FirewallRules: [{4C194732-70EE-45AC-98BA-B1201C5FD7B1}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Broken Sword 2\BrokenSword2.exe () [Datei ist nicht signiert]
FirewallRules: [{30D12F5D-3D29-462A-817B-A18F81C794D4}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Syberia3\Syberia3.exe () [Datei ist nicht signiert]
FirewallRules: [{F473D20E-0B6E-4B4A-AAF9-665200976282}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Syberia3\Syberia3.exe () [Datei ist nicht signiert]
FirewallRules: [{9B665A5F-2A9E-4A25-B273-0AE05BE9AD4A}] => (Allow) D:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{B778A618-B62B-4E28-AE75-BA2BA3C1D740}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{72331945-B001-42E5-B96A-F7091D6E2D50}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3B8D9E1E-C544-48E4-BF22-D2F2F99E2AB5}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5E9C922C-00B4-4854-B6BD-B36B157524E2}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{32EA5FE7-AB48-4ECE-8782-A5485DB9B9D5}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5DAF7A25-B9D9-4434-826B-0354ED8D1889}] => (Allow) LPort=8920
FirewallRules: [{D2AB4A64-5050-4B3B-95EB-3F39064E7507}] => (Allow) LPort=8096
FirewallRules: [{D8236798-816C-409F-BE7D-00F26E29CED5}] => (Allow) LPort=7359
FirewallRules: [DNS Server Forward Rule - UDP - f32a6cbe-36b3-4d8c-bb73-93c2a3641f88 - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - TCP - f32a6cbe-36b3-4d8c-bb73-93c2a3641f88 - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - UDP - 88ecf2df-8ad3-4c20-88b1-cc0098645035 - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - TCP - 88ecf2df-8ad3-4c20-88b1-cc0098645035 - 0] => (Allow) LPort=53
FirewallRules: [{37C41038-73C6-4A26-ABBB-5FED88CA1427}] => (Allow) D:\Program Files\WebDrive\wdService.exe (South River Technologies -> South River Technologies, Inc.)
FirewallRules: [{000ED498-F647-451D-B4C0-2EF9B608E607}] => (Allow) D:\Program Files\WebDrive\wdService.exe (South River Technologies -> South River Technologies, Inc.)
FirewallRules: [{289642C0-C132-404F-9D6C-00B6AE7A7CC7}] => (Allow) D:\Program Files\WebDrive\WebDrive.exe (South River Technologies -> South River Technologies, Inc.)
FirewallRules: [{7C985DA3-059D-4DB8-B834-5685CD0FC127}] => (Allow) D:\Program Files\WebDrive\WebDrive.exe (South River Technologies -> South River Technologies, Inc.)
FirewallRules: [{B3F534D6-6ADC-4596-BE34-C1F542F5C80B}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, Inc) [Datei ist nicht signiert]
FirewallRules: [{95DC2849-39AC-4A83-9778-7CC196BD1E28}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, Inc) [Datei ist nicht signiert]
FirewallRules: [{6B04927E-D991-43A1-915A-89EAEE46985C}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{316DBC5F-1BE5-426F-ABEE-019E7E781C4F}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{EBF453D7-E05C-48D5-81D2-23CF4A94B096}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{98B19255-B9B7-49F8-BEB1-D56303138FAF}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{B7B2EA48-1CA8-4F1B-B1FA-FEB46BFB6F69}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{70B06B73-00A0-455F-8716-C069ACFDF9DA}] => (Allow) LPort=1689
FirewallRules: [{FA26F70A-3CA8-4657-A5C5-C04FAAFA95CA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{3330CA93-7540-4916-8425-7AAF2395D5C3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F595BEE8-4677-439F-AB4D-C9167E8090A8}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{12759A00-5F54-47EA-9B60-24E173304411}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{60A1167B-BF82-46BE-96A9-E2BC13EDB821}] => (Allow) LPort=26789
FirewallRules: [{2364AC70-6157-4F34-B05F-ED228F2E08A0}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{264AD8CA-8DF7-417F-ACCA-1553609DE068}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{3EAE5D52-A51B-4B8B-A522-9A6291D162F4}C:\users\salexes\appdata\roaming\telegram desktop\telegram.exe] => (Allow) C:\users\salexes\appdata\roaming\telegram desktop\telegram.exe (Telegram Messenger LLP -> Telegram Messenger LLP)
FirewallRules: [UDP Query User{E2243A36-74A9-45CC-93AE-ADBA00B92196}C:\users\salexes\appdata\roaming\telegram desktop\telegram.exe] => (Allow) C:\users\salexes\appdata\roaming\telegram desktop\telegram.exe (Telegram Messenger LLP -> Telegram Messenger LLP)
FirewallRules: [{DFD3699D-BABE-471A-ABE0-B2DDADF4C683}] => (Allow) C:\Program Files (x86)\BidCoS Service\lanif_config_gui.exe () [Datei ist nicht signiert]
FirewallRules: [{22313B70-C2DC-410A-BCF1-77667280EB4D}] => (Allow) C:\Program Files (x86)\BidCoS Service\lanif_config_gui.exe () [Datei ist nicht signiert]
FirewallRules: [{DE3658EC-1FD2-45F3-9D1C-2722AC1ECD81}] => (Allow) C:\Program Files (x86)\BidCoS Service\lanif_config.exe () [Datei ist nicht signiert]
FirewallRules: [{16F15EBE-FB09-4DA4-98EC-5509409B6914}] => (Allow) C:\Program Files (x86)\BidCoS Service\lanif_config.exe () [Datei ist nicht signiert]
FirewallRules: [{B8082494-3D83-4042-82B7-0D2A37F9DAB7}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\The Forest\TheForest.exe () [Datei ist nicht signiert]
FirewallRules: [{7F4C9A5A-9863-40BE-82EF-08AF74D371B4}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\The Forest\TheForest.exe () [Datei ist nicht signiert]
FirewallRules: [{C580C1A6-EA04-4213-8D26-BAA07EABE0BC}] => (Allow) LPort=1689
FirewallRules: [{B8C7DB3E-3CC1-41D7-A1FF-7234EA924B5F}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Gothic\system\GOTHIC.EXE (Piranha Bytes) [Datei ist nicht signiert]
FirewallRules: [{E145EDD1-9750-4519-BAFF-FAF137451DF8}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Gothic\system\GOTHIC.EXE (Piranha Bytes) [Datei ist nicht signiert]
FirewallRules: [{7407C33B-8128-46D3-9D0D-992B101239C5}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{3800E138-3024-4D35-8CC4-23CAAB21B11C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{7867EA59-7F71-4C80-A645-A8CE2CD08FD3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{40A1E770-7227-4FE1-BD9F-73801290BFE9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{66D85556-AE3E-498E-9E15-05016AB96EF3}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, Inc) [Datei ist nicht signiert]
FirewallRules: [{600238C8-0D77-4319-90D0-DDC146475FA2}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, Inc) [Datei ist nicht signiert]
FirewallRules: [{31E9E421-2982-4C5F-B53E-A7A38BA1554D}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\The Forest\TheForestVR.exe () [Datei ist nicht signiert]
FirewallRules: [{0E22C76A-6D83-48B9-A127-99909C5EE081}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\The Forest\TheForestVR.exe () [Datei ist nicht signiert]
FirewallRules: [DNS Server Forward Rule - TCP - 48CBC8F0-FBDC-49AA-A78A-B3050334DA58 - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - UDP - 48CBC8F0-FBDC-49AA-A78A-B3050334DA58 - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - TCP - 4A30AB6C-83F2-47F3-8103-3F3AF043CF4E - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - UDP - 4A30AB6C-83F2-47F3-8103-3F3AF043CF4E - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - TCP - 88BE57CD-0E48-47BE-94AC-8E903BD6D0AB - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - UDP - 88BE57CD-0E48-47BE-94AC-8E903BD6D0AB - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - TCP - 060FBB9B-365F-4DBD-BB40-8B7E755C12E8 - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - UDP - 060FBB9B-365F-4DBD-BB40-8B7E755C12E8 - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - TCP - 875D4F94-3DB3-4CF1-BBBC-212EE3CC8D7B - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - UDP - 875D4F94-3DB3-4CF1-BBBC-212EE3CC8D7B - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - TCP - 93C4D1A4-71DB-420B-BEE7-315137D6D947 - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - UDP - 93C4D1A4-71DB-420B-BEE7-315137D6D947 - 0] => (Allow) LPort=53
FirewallRules: [{FB05F337-2842-494C-B7E5-0A33DEAC7A17}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{5FA48F08-21E5-4931-AEC4-448ABF5328DF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{92F40439-AAB4-4DD8-90FF-4AEFA5B40B98}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{605C573F-705F-4AC9-8FFF-AEEBFC51AA8A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [DNS Server Forward Rule - TCP - A64FF9CA-808E-4AB9-9340-037F2956AEFB - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - UDP - A64FF9CA-808E-4AB9-9340-037F2956AEFB - 0] => (Allow) LPort=53
FirewallRules: [{29451F6B-50B2-4D7D-B2EA-6F160115FBD8}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)
FirewallRules: [{9E9E4FE9-65AB-4B54-823E-0DF87500B1FC}] => (Allow) LPort=8989
FirewallRules: [DNS Server Forward Rule - TCP - E4875CEB-BC00-42D2-AF0C-6D4A694F3E1C - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - UDP - E4875CEB-BC00-42D2-AF0C-6D4A694F3E1C - 0] => (Allow) LPort=53
FirewallRules: [TCP Query User{03D07FE5-8ACD-4049-850D-5A9C6FA42655}C:\users\salexes\appdata\local\programs\python\python37-32\python.exe] => (Allow) C:\users\salexes\appdata\local\programs\python\python37-32\python.exe (Python Software Foundation -> Python Software Foundation)
FirewallRules: [UDP Query User{265D2011-32A0-4029-8B88-5AD953CEA33A}C:\users\salexes\appdata\local\programs\python\python37-32\python.exe] => (Allow) C:\users\salexes\appdata\local\programs\python\python37-32\python.exe (Python Software Foundation -> Python Software Foundation)
FirewallRules: [{ECE56E11-36D7-45AE-8CB0-8BB606730CA2}] => (Allow) C:\Program Files\Plex\Plex Media Player\PlexMediaPlayer.exe (Plex, Inc -> )
FirewallRules: [{7CE27FA7-AEFA-4E2F-866D-289639AFE33E}] => (Allow) C:\Program Files\Plex\Plex Media Player\PMPHelper.exe () [Datei ist nicht signiert]
FirewallRules: [{594704EF-39C4-420C-95B1-D93394DF764B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{27226960-F71F-4BA5-AE82-5E6E7B5D8340}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{E3B5969F-90F6-4585-85AA-D8679BD7DB07}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{DFC9F2E1-46CF-4878-9F2B-35DCBDFE45A1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{E9B4009A-B12B-42CD-AB0E-298DB60406F4}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\73.0.3683.67\remoting_host.exe (Google LLC -> Google Inc.)
FirewallRules: [{3FD5F26C-2489-4C42-9977-12FFCF9CBE95}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{6C051087-4375-4728-AA20-901DF2EB7BDA}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [DNS Server Forward Rule - TCP - 5E496601-BFF7-4720-A109-08CF46E852D7 - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - UDP - 5E496601-BFF7-4720-A109-08CF46E852D7 - 0] => (Allow) LPort=53
FirewallRules: [{FF635CDE-5B08-490F-AA79-8415839ABC7F}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, Inc) [Datei ist nicht signiert]
FirewallRules: [{9A777509-5A66-4423-B838-F65AD76EE678}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, Inc) [Datei ist nicht signiert]
FirewallRules: [DNS Server Forward Rule - TCP - 8053998A-A933-4F26-826E-45E1F6C7103F - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - UDP - 8053998A-A933-4F26-826E-45E1F6C7103F - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - TCP - 0588CB1C-7D36-42B8-A123-C6BEE55BF0C4 - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - UDP - 0588CB1C-7D36-42B8-A123-C6BEE55BF0C4 - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - TCP - 1D318E33-5FF1-4977-A26E-10338F0DEE94 - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - UDP - 1D318E33-5FF1-4977-A26E-10338F0DEE94 - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - TCP - 540652A2-6A23-43CD-8C50-473BDA9A38D3 - 0] => (Allow) LPort=53
FirewallRules: [DNS Server Forward Rule - UDP - 540652A2-6A23-43CD-8C50-473BDA9A38D3 - 0] => (Allow) LPort=53
==================== Wiederherstellungspunkte =========================
10-03-2019 20:02:23 Removed Python Launcher
12-03-2019 01:56:22 Driver Booster : NVIDIA GeForce GTX 1080 Ti
14-03-2019 02:14:09 Installed FileBot
18-03-2019 18:13:43 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (03/19/2019 03:19:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname salexes-PC.local already in use; will try salexes-PC-2.local instead
Error: (03/19/2019 03:19:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 salexes-PC.local. Addr 192.168.1.106
Error: (03/19/2019 03:19:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.1.106:5353 16 salexes-PC.local. AAAA 2A02:8106:0015:E600:948D:01F1:0932:49D4
Error: (03/19/2019 03:13:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Bitwarden.exe, Version: 1.12.0.0, Zeitstempel: 0x5c17fe5a
Name des fehlerhaften Moduls: Bitwarden.exe, Version: 1.12.0.0, Zeitstempel: 0x5c17fe5a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000001873ae4
ID des fehlerhaften Prozesses: 0x3c60
Startzeit der fehlerhaften Anwendung: 0x01d4ddf94110795a
Pfad der fehlerhaften Anwendung: C:\Program Files\Bitwarden\Bitwarden.exe
Pfad des fehlerhaften Moduls: C:\Program Files\Bitwarden\Bitwarden.exe
Berichtskennung: 480277d8-efa0-4e5c-b903-d7d40d67f3ce
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (03/19/2019 03:12:19 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname salexes-PC.local already in use; will try salexes-PC-2.local instead
Error: (03/19/2019 03:12:19 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 1; will deregister 4 salexes-PC.local. Addr 192.168.1.106
Error: (03/19/2019 03:12:19 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.1.106:5353 16 salexes-PC.local. AAAA 2A02:8106:0015:E600:948D:01F1:0932:49D4
Error: (03/19/2019 03:10:37 AM) (Source: SecurityCenter) (EventID: 17) (User: )
Description: Das Sicherheitscenter konnte den Aufrufer nicht überprüfen. Der Fehler %1 ist aufgetreten.
Systemfehler:
=============
Error: (03/19/2019 04:16:53 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (03/19/2019 04:16:53 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\salexes\AppData\Local\Temp\ehdrv.sys
Error: (03/19/2019 04:16:53 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (03/19/2019 04:16:53 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\salexes\AppData\Local\Temp\ehdrv.sys
Error: (03/19/2019 04:16:53 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (03/19/2019 04:16:53 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\salexes\AppData\Local\Temp\ehdrv.sys
Error: (03/19/2019 04:16:52 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (03/19/2019 04:16:52 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\salexes\AppData\Local\Temp\ehdrv.sys
CodeIntegrity:
===================================
Date: 2019-03-19 04:19:34.282
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-03-19 04:19:28.975
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-03-19 04:19:27.683
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-03-19 04:19:01.802
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-03-19 04:19:01.379
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-03-19 04:12:25.005
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-03-19 04:12:24.648
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-03-19 04:12:24.289
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: AMD Ryzen 7 1700 Eight-Core Processor
Prozentuale Nutzung des RAM: 65%
Installierter physikalischer RAM: 16338.14 MB
Verfügbarer physikalischer RAM: 5646.31 MB
Summe virtueller Speicher: 28114.14 MB
Verfügbarer virtueller Speicher: 15129.56 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:232.28 GB) (Free:76.86 GB) NTFS
Drive d: (Volume) (Fixed) (Total:931.51 GB) (Free:103.31 GB) NTFS
Drive s: (GDrive Multimedia) (Fixed) (Total:1048576 GB) (Free:1030328.64 GB) FUSE-rclone
Drive t: (GDrive salexes) (Fixed) (Total:1048576 GB) (Free:1030328.64 GB) FUSE-rclone
Drive z: (Multimedia) (Network) (Total:16267.79 GB) (Free:2398.75 GB) NTFS
\\?\Volume{5177a286-2080-45e8-9fee-1ec3379c86d0}\ (Wiederherstellung) (Fixed) (Total:0.49 GB) (Free:0.07 GB) NTFS
\\?\Volume{e3e318f6-471a-465b-85aa-8a2a00e3fb4d}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 232.9 GB) (Disk ID: 40A5D4E0)
Partition: GPT.
========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 5B0AC041)
Partition: GPT.
==================== Ende von Addition.txt ============================
Code:
ATTFilter Malwarebytes
www.malwarebytes.com
-Protokolldetails-
Scan-Datum: 19.03.19
Scan-Zeit: 02:56
Protokolldatei: 3d89c090-49ea-11e9-9dd9-309c231e50ef.json
-Softwaredaten-
Version: 3.7.1.2839
Komponentenversion: 1.0.538
Version des Aktualisierungspakets: 1.0.9740
Lizenz: Premium
-Systemdaten-
Betriebssystem: Windows 10 (Build 17763.379)
CPU: x64
Dateisystem: NTFS
Benutzer: salexes-PC\salexes@salexes.de
-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 379107
Erkannte Bedrohungen: 4
In die Quarantäne verschobene Bedrohungen: 4
Abgelaufene Zeit: 2 Min., 46 Sek.
-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung
-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)
Modul: 0
(keine bösartigen Elemente erkannt)
Registrierungsschlüssel: 1
Trojan.Agent.CK, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{523A90E6-BCE8-41FE-AE60-5A351A1169CD}, In Quarantäne, [4445], [400549],1.0.9740
Registrierungswert: 1
Trojan.Agent.CK, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{523A90E6-BCE8-41FE-AE60-5A351A1169CD}|PATH, In Quarantäne, [4445], [400549],1.0.9740
Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)
Daten-Stream: 0
(keine bösartigen Elemente erkannt)
Ordner: 0
(keine bösartigen Elemente erkannt)
Datei: 4
Trojan.Agent.CK, C:\WINDOWS\SYSTEM32\TASKS\OINSTALL, In Quarantäne, [4445], [400551],1.0.9740
RiskWare.SecurityXploded, C:\USERS\salexes\DESKTOP\JDOWNLOADERPASSWORDDECRYPTOR.ZIP, Keine Aktion durch Benutzer, [8166], [342260],1.0.9740
CrackTool.Agent, C:\USERS\salexes\DESKTOP\AMTEMU.V0.9.2-PAINTER.EXE, In Quarantäne, [6112], [445980],1.0.9740
Physischer Sektor: 0
(keine bösartigen Elemente erkannt)
WMI: 0
(keine bösartigen Elemente erkannt)
(end)
|
|
19.03.2019, 09:24
| #4 | |
| /// Winkelfunktion /// TB-Süch-Tiger™   | 98% CPU Auslastung durch "Systemunterbrechung/Leerlauf" - Virus?Zitat:
Für dich geht es mit der Neuinstallation von einem legal gekauften Windows weiter.
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
19.03.2019, 11:15
| #5 |
| | 98% CPU Auslastung durch "Systemunterbrechung/Leerlauf" - Virus? Habe den Rechner über Kleinanzeigen gekauft. Wie kann ich das zu normalem Windows wechseln? Edit: Habe jetzt das hier befolgt: https://forums.malwarebytes.com/topic/230128-how-to-remove-kms-r1n/ und mir einen Key gekauft. Wie kann ich prüfen ob das jetzt alles weg ist? viele grüße Geändert von salexes (19.03.2019 um 11:34 Uhr) |
|
19.03.2019, 11:38
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | 98% CPU Auslastung durch "Systemunterbrechung/Leerlauf" - Virus? Meinen Beitrag richtig gelesen? Du musst dir ein legales Windows 10 kaufen und dann eine Neuinstallation durchführen. GGf beschwerst du dich beim Verkäufer weil er dir ja offensichtlich ein illegales Windows aufgespielt hat.
__________________ --> 98% CPU Auslastung durch "Systemunterbrechung/Leerlauf" - Virus? |
|
19.03.2019, 17:25
| #7 | |
| /// TB-Ausbilder | 98% CPU Auslastung durch "Systemunterbrechung/Leerlauf" - Virus?Zitat:
AUF KEINEN FALL verwendet man ein System vom "Vorbesitzter" weiter... du weißt doch nie, was der alles damit "gemacht" hat. |
|
19.03.2019, 18:29
| #8 |
| | 98% CPU Auslastung durch "Systemunterbrechung/Leerlauf" - Virus? Hallo, habe soeben die Neuinstallation gemacht/alle festplatten formatiert, aber der Leerlaufprozess ist dennoch bei 98% was jetzt ?  |
|
19.03.2019, 21:23
| #9 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | 98% CPU Auslastung durch "Systemunterbrechung/Leerlauf" - Virus? Ohman....  ....keine Ahnung aber im Taskmanager rumwühlen und kontrollieren wollen... Was sagt uns denn der BegriffLeerlauf? Irgendeine Idee?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu 98% CPU Auslastung durch "Systemunterbrechung/Leerlauf" - Virus? |
| auslastung, cpu, cpu auslastung, dankbar, heute, hilfe, langsamer, micro, node.js, programme, rechner, tagen, virus, virus?, windowsapps |
