PC startet ohne Vorwarnung neu. Kein Bluescreen. Viele Logfiles für euch. Hallo Gemeinde,
ich habe ein Problem mit dem PC. Er startet öfter mal ohne Vorwarnung neu. Er geht quasi komplett aus (Als wenn ich den Stecker ziehe) und startet dann selbstständig wieder neu.
Die Temperaturen der GPU und CPU sind in Ordnung.
Ich habe nichts übertaktet und Windows 10 ist nur zwei Wochen alt.
Antimalwarebytes findet auch nichts.
PC: Code:
CPUID HWMonitor Report
-------------------------------------------------------------------------
Binaries
-------------------------------------------------------------------------
HWMonitor version 1.2.8.0
Monitoring
-------------------------------------------------------------------------
Mainboard Model Z68 Pro3 (0x0000024C - 0x00B15DC4)
LPCIO
-------------------------------------------------------------------------
LPCIO Vendor Nuvoton
LPCIO Model NCT6776
LPCIO Vendor ID 0x5CA3
LPCIO Chip ID 0xC3
LPCIO Revision ID 0x33
Config Mode I/O address 0x2E
Config Mode LDN 0xB
Config Mode registers
00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00 FF FF 00 FF FF FF FF 0B FF FF FF FF FF FF FF FF
10 FF FF FF FF FF FF FF FF FF FF F8 0E 80 00 FF FF
20 C3 33 FF 00 5C 00 00 80 00 FF 62 00 80 00 00 01
30 E1 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
40 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
50 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
60 02 90 00 00 FF FF FF FF FF FF FF FF FF FF FF FF
70 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Register space LPC, base address = 0x0290
Hardware Monitors
-------------------------------------------------------------------------
Hardware monitor Nuvoton NCT6776
Voltage 0 1.02 Volts [0x80] (CPU VCORE)
Voltage 1 1.87 Volts [0xEA] (VIN1)
Voltage 2 3.39 Volts [0xD4] (AVCC)
Voltage 3 3.39 Volts [0xD4] (3VCC)
Voltage 4 0.14 Volts [0x11] (VIN4)
Voltage 5 1.70 Volts [0xD4] (VIN5)
Voltage 6 1.18 Volts [0x94] (VIN6)
Temperature 0 37°C (98°F) [0x25] (SYSTIN)
Temperature 1 41°C (105°F) [0x52] (CPUTIN)
Temperature 2 34°C (93°F) [0x44] (AUXTIN)
Temperature 3 48°C (118°F) [0x30] (TMPIN3)
Hardware registers
Register space LPC, base address = 0x0290
bank 0
00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00 04 FF 04 FF 00 FF FF FF FF FF FF FF FF FF FF FF
10 04 FF 00 00 00 00 FF FF 40 00 00 00 00 85 00 00
20 86 EA D4 D4 15 D4 94 25 FF FF FF DA 00 00 00 00
30 00 00 00 00 00 00 00 00 00 00 00 FF FF FF FF FF
40 03 DE 5F FF FF 80 3F FF 2D FF FF FF 18 05 00 A3
50 FF FF FF FF FF FF FF FF C1 FF FF FF FF 00 00 FF
60 00 FF FF FF FF 01 00 FF FF FF FF FF FF FF FF FF
70 00 0A 00 25 00 30 00 21 80 FF FF FF FF FF FF FF
80 FF 03 1F 0F FF 3C 3C 3C 00 00 00 00 00 00 00 00
90 0A 00 00 00 00 0A 0A 0A 0A AA EF 80 FF 40 46 C4
A0 0E 01 00 00 FF 00 00 FF 00 00 80 66 66 06 01 01
B0 00 00 00 00 00 00 30 00 1C 00 00 34 28 80 C4 FF
C0 01 00 00 00 00 00 00 00 00 0F 07 FF FF FF FF FF
D0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
E0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
F0 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
bank 1
80 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
bank 2
80 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
bank 3
80 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
bank 4
80 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
bank 5
80 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
bank 6
80 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
bank 7
80 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Hardware monitor Intel I/O
Clock Speed 0 847.98 MHz [0x34F] (Graphics)
Hardware monitor NVIDIA NVAPI
Voltage 0 0.84 Volts [0x34B] (VIN0)
Power 0 9.27 pc (GPU)
Temperature 0 32°C (89°F) [0x20] (TMPIN0)
Fan 0 700 RPM [0x2BC] (FANIN0)
Fan PWM 0 22 pc [0x16] (FANPWMIN0)
Clock Speed 0 405.00 MHz [0x195] (Graphics)
Clock Speed 1 405.00 MHz [0x195] (Memory)
Processors
-------------------------------------------------------------------------
Number of processors 1
Number of threads 4
APICs
-------------------------------------------------------------------------
Processor 0
-- Core 0
-- Thread 0 0
-- Core 1
-- Thread 0 2
-- Core 2
-- Thread 0 4
-- Core 3
-- Thread 0 6
Timers
-------------------------------------------------------------------------
ACPI timer 3.580 MHz
HPET timer 14.318 MHz
Perf timer 3.215 MHz
Sys timer 1.000 KHz
Processors Information
-------------------------------------------------------------------------
Processor 1 ID = 0
Number of cores 4 (max 8)
Number of threads 4 (max 16)
Name Intel Core i5 2500K
Codename Sandy Bridge
Specification Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz
Package (platform ID) Socket 1155 LGA (0x1)
CPUID 6.A.7
Extended CPUID 6.2A
Core Stepping D2
Technology 32 nm
TDP Limit 95.0 Watts
Tjmax 98.0 °C
Core Speed 1596.2 MHz
Multiplier x Bus Speed 16.0 x 99.8 MHz
Stock frequency 3300 MHz
Instructions sets MMX, SSE, SSE2, SSE3, SSSE3, SSE4.1, SSE4.2, EM64T, VT-x, AES, AVX
L1 Data cache 4 x 32 KBytes, 8-way set associative, 64-byte line size
L1 Instruction cache 4 x 32 KBytes, 8-way set associative, 64-byte line size
L2 cache 4 x 256 KBytes, 8-way set associative, 64-byte line size
L3 cache 6 MBytes, 12-way set associative, 64-byte line size
FID/VID Control yes
Turbo Mode supported, enabled
Max non-turbo ratio 33x
Max turbo ratio 37x
Max efficiency ratio 16x
Min Power 60 Watts
O/C bins unlimited
Ratio 1 core 37x
Ratio 2 cores 36x
Ratio 3 cores 35x
Ratio 4 cores 34x
TSC 3292.4 MHz
APERF 3475.2 MHz
MPERF 3217.8 MHz
Temperature 0 49°C (120°F) [0x31] (Core #0)
Temperature 1 49°C (120°F) [0x31] (Package)
Power 0 26.27 W (Package)
Power 1 20.44 W (IA Cores)
Power 2 0.54 W (GT)
Power 3 5.28 W (Uncore)
Voltage 0 1.00 Volts (VID)
Thread dumps
-------------------------------------------------------------------------
CPU Thread 0
APIC ID 0
Topology Processor ID 0, Core ID 0, Thread ID 0
Type 01020105h
Max CPUID level 0000000Dh
Max CPUID ext. level 80000008h
Cache descriptor Level 1, D, 32 KB, 2 thread(s)
Cache descriptor Level 1, I, 32 KB, 2 thread(s)
Cache descriptor Level 2, U, 256 KB, 2 thread(s)
Cache descriptor Level 3, U, 6 MB, 16 thread(s)
CPUID
0x00000000 0x0000000D 0x756E6547 0x6C65746E 0x49656E69
0x00000001 0x000206A7 0x00100800 0x1F9AE3BF 0xBFEBFBFF
0x00000002 0x76035A01 0x00F0B0FF 0x00000000 0x00CA0000
0x00000003 0x00000000 0x00000000 0x00000000 0x00000000
0x00000004 0x1C004121 0x01C0003F 0x0000003F 0x00000000
0x00000004 0x1C004122 0x01C0003F 0x0000003F 0x00000000
0x00000004 0x1C004143 0x01C0003F 0x000001FF 0x00000000
0x00000004 0x1C03C163 0x02C0003F 0x00001FFF 0x00000006
0x00000005 0x00000040 0x00000040 0x00000003 0x00001120
0x00000006 0x00000077 0x00000002 0x00000009 0x00000000
0x00000007 0x00000000 0x00000000 0x00000000 0x00000000
0x00000008 0x00000000 0x00000000 0x00000000 0x00000000
0x00000009 0x00000000 0x00000000 0x00000000 0x00000000
0x0000000A 0x07300803 0x00000000 0x00000000 0x00000603
0x0000000B 0x00000001 0x00000001 0x00000100 0x00000000
0x0000000B 0x00000004 0x00000004 0x00000201 0x00000000
0x0000000C 0x00000000 0x00000000 0x00000000 0x00000000
0x0000000D 0x00000007 0x00000340 0x00000340 0x00000000
0x80000000 0x80000008 0x00000000 0x00000000 0x00000000
0x80000001 0x00000000 0x00000000 0x00000001 0x28100800
0x80000002 0x20202020 0x49202020 0x6C65746E 0x20295228
0x80000003 0x65726F43 0x294D5428 0x2D356920 0x30303532
0x80000004 0x5043204B 0x20402055 0x30332E33 0x007A4847
0x80000005 0x00000000 0x00000000 0x00000000 0x00000000
0x80000006 0x00000000 0x00000000 0x01006040 0x00000000
0x80000007 0x00000000 0x00000000 0x00000000 0x00000100
0x80000008 0x00003024 0x00000000 0x00000000 0x00000000
MSR 0x0000001B 0x00000000 0xFEE00900
MSR 0x0000003A 0x00000000 0x00000005
MSR 0x000001A0 0x00000000 0x00850089
MSR 0x000000CE 0x00001000 0x70012100
MSR 0x00000017 0x00040000 0x00000000
MSR 0x00000035 0x00000000 0x00040004
MSR 0x000000C1 0x00000000 0x00000000
MSR 0x000000C2 0x00000000 0x00000000
MSR 0x000000C3 0x00000000 0x00000000
MSR 0x000000C4 0x00000000 0x00000000
MSR 0x00000186 0x00000000 0x00000000
MSR 0x00000187 0x00000000 0x00000000
MSR 0x000001AD 0x00000000 0x22232425
MSR 0x00000194 0x00000000 0x000F0000
MSR 0x0000019A 0x00000000 0x00000000
MSR 0x000001A4 0x00000000 0x00000000
MSR 0x000001FC 0x00000000 0x0004005F
MSR 0x00000601 0x18141494 0x000004B0
MSR 0x00000602 0x18141494 0x00000104
MSR 0x00000606 0x00000000 0x000A1003
MSR 0x00000610 0x800083B6 0x001482F8
MSR 0x00000611 0x00000000 0xDE6DDE45
MSR 0x00000639 0x00000000 0xA7E87E98
MSR 0x00000641 0x00000000 0x05183191
MSR 0x00000614 0x00000000 0x01E002F8
MSR 0x0000019C 0x00000000 0x88310000
MSR 0x000001A2 0x00000000 0x00621200
MSR 0x000001B1 0x00000000 0x88310000
MSR 0x00000198 0x0000254F 0x00002200
MSR 0x00000199 0x00000000 0x00002500
CPU Thread 1
APIC ID 2
Topology Processor ID 0, Core ID 1, Thread ID 0
Type 01020105h
Max CPUID level 0000000Dh
Max CPUID ext. level 80000008h
Cache descriptor Level 1, D, 32 KB, 2 thread(s)
Cache descriptor Level 1, I, 32 KB, 2 thread(s)
Cache descriptor Level 2, U, 256 KB, 2 thread(s)
Cache descriptor Level 3, U, 6 MB, 16 thread(s)
CPUID
0x00000000 0x0000000D 0x756E6547 0x6C65746E 0x49656E69
0x00000001 0x000206A7 0x02100800 0x1F9AE3BF 0xBFEBFBFF
0x00000002 0x76035A01 0x00F0B0FF 0x00000000 0x00CA0000
0x00000003 0x00000000 0x00000000 0x00000000 0x00000000
0x00000004 0x1C004121 0x01C0003F 0x0000003F 0x00000000
0x00000004 0x1C004122 0x01C0003F 0x0000003F 0x00000000
0x00000004 0x1C004143 0x01C0003F 0x000001FF 0x00000000
0x00000004 0x1C03C163 0x02C0003F 0x00001FFF 0x00000006
0x00000005 0x00000040 0x00000040 0x00000003 0x00001120
0x00000006 0x00000077 0x00000002 0x00000009 0x00000000
0x00000007 0x00000000 0x00000000 0x00000000 0x00000000
0x00000008 0x00000000 0x00000000 0x00000000 0x00000000
0x00000009 0x00000000 0x00000000 0x00000000 0x00000000
0x0000000A 0x07300803 0x00000000 0x00000000 0x00000603
0x0000000B 0x00000001 0x00000001 0x00000100 0x00000002
0x0000000B 0x00000004 0x00000004 0x00000201 0x00000002
0x0000000C 0x00000000 0x00000000 0x00000000 0x00000000
0x0000000D 0x00000007 0x00000340 0x00000340 0x00000000
0x80000000 0x80000008 0x00000000 0x00000000 0x00000000
0x80000001 0x00000000 0x00000000 0x00000001 0x28100800
0x80000002 0x20202020 0x49202020 0x6C65746E 0x20295228
0x80000003 0x65726F43 0x294D5428 0x2D356920 0x30303532
0x80000004 0x5043204B 0x20402055 0x30332E33 0x007A4847
0x80000005 0x00000000 0x00000000 0x00000000 0x00000000
0x80000006 0x00000000 0x00000000 0x01006040 0x00000000
0x80000007 0x00000000 0x00000000 0x00000000 0x00000100
0x80000008 0x00003024 0x00000000 0x00000000 0x00000000
MSR 0x0000001B 0x00000000 0xFEE00800
MSR 0x0000003A 0x00000000 0x00000005
MSR 0x000001A0 0x00000000 0x00850089
MSR 0x000000CE 0x00001000 0x70012100
MSR 0x00000017 0x00040000 0x00000000
MSR 0x00000035 0x00000000 0x00040004
MSR 0x000000C1 0x00000000 0x00000000
MSR 0x000000C2 0x00000000 0x00000000
MSR 0x000000C3 0x00000000 0x00000000
MSR 0x000000C4 0x00000000 0x00000000
MSR 0x00000186 0x00000000 0x00000000
MSR 0x00000187 0x00000000 0x00000000
MSR 0x000001AD 0x00000000 0x22232425
MSR 0x00000194 0x00000000 0x000F0000
MSR 0x0000019A 0x00000000 0x00000000
MSR 0x000001A4 0x00000000 0x00000000
MSR 0x000001FC 0x00000000 0x0004005F
MSR 0x00000601 0x18141494 0x000004B0
MSR 0x00000602 0x18141494 0x00000104
MSR 0x00000606 0x00000000 0x000A1003
MSR 0x00000610 0x800083B6 0x001482F8
MSR 0x00000611 0x00000000 0xDE6EB8E8
MSR 0x00000639 0x00000000 0xA7E92DAE
MSR 0x00000641 0x00000000 0x05183596
MSR 0x00000614 0x00000000 0x01E002F8
MSR 0x0000019C 0x00000000 0x88320000
MSR 0x000001A2 0x00000000 0x00621200
MSR 0x000001B1 0x00000000 0x882E0000
MSR 0x00000198 0x00002645 0x00002300
MSR 0x00000199 0x00000000 0x00002500
CPU Thread 2
APIC ID 4
Topology Processor ID 0, Core ID 2, Thread ID 0
Type 01020105h
Max CPUID level 0000000Dh
Max CPUID ext. level 80000008h
Cache descriptor Level 1, D, 32 KB, 2 thread(s)
Cache descriptor Level 1, I, 32 KB, 2 thread(s)
Cache descriptor Level 2, U, 256 KB, 2 thread(s)
Cache descriptor Level 3, U, 6 MB, 16 thread(s)
CPUID
0x00000000 0x0000000D 0x756E6547 0x6C65746E 0x49656E69
0x00000001 0x000206A7 0x04100800 0x1F9AE3BF 0xBFEBFBFF
0x00000002 0x76035A01 0x00F0B0FF 0x00000000 0x00CA0000
0x00000003 0x00000000 0x00000000 0x00000000 0x00000000
0x00000004 0x1C004121 0x01C0003F 0x0000003F 0x00000000
0x00000004 0x1C004122 0x01C0003F 0x0000003F 0x00000000
0x00000004 0x1C004143 0x01C0003F 0x000001FF 0x00000000
0x00000004 0x1C03C163 0x02C0003F 0x00001FFF 0x00000006
0x00000005 0x00000040 0x00000040 0x00000003 0x00001120
0x00000006 0x00000077 0x00000002 0x00000009 0x00000000
0x00000007 0x00000000 0x00000000 0x00000000 0x00000000
0x00000008 0x00000000 0x00000000 0x00000000 0x00000000
0x00000009 0x00000000 0x00000000 0x00000000 0x00000000
0x0000000A 0x07300803 0x00000000 0x00000000 0x00000603
0x0000000B 0x00000001 0x00000001 0x00000100 0x00000004
0x0000000B 0x00000004 0x00000004 0x00000201 0x00000004
0x0000000C 0x00000000 0x00000000 0x00000000 0x00000000
0x0000000D 0x00000007 0x00000340 0x00000340 0x00000000
0x80000000 0x80000008 0x00000000 0x00000000 0x00000000
0x80000001 0x00000000 0x00000000 0x00000001 0x28100800
0x80000002 0x20202020 0x49202020 0x6C65746E 0x20295228
0x80000003 0x65726F43 0x294D5428 0x2D356920 0x30303532
0x80000004 0x5043204B 0x20402055 0x30332E33 0x007A4847
0x80000005 0x00000000 0x00000000 0x00000000 0x00000000
0x80000006 0x00000000 0x00000000 0x01006040 0x00000000
0x80000007 0x00000000 0x00000000 0x00000000 0x00000100
0x80000008 0x00003024 0x00000000 0x00000000 0x00000000
MSR 0x0000001B 0x00000000 0xFEE00800
MSR 0x0000003A 0x00000000 0x00000005
MSR 0x000001A0 0x00000000 0x00850089
MSR 0x000000CE 0x00001000 0x70012100
MSR 0x00000017 0x00040000 0x00000000
MSR 0x00000035 0x00000000 0x00040004
MSR 0x000000C1 0x00000000 0x00000000
MSR 0x000000C2 0x00000000 0x00000000
MSR 0x000000C3 0x00000000 0x00000000
MSR 0x000000C4 0x00000000 0x00000000
MSR 0x00000186 0x00000000 0x00000000
MSR 0x00000187 0x00000000 0x00000000
MSR 0x000001AD 0x00000000 0x22232425
MSR 0x00000194 0x00000000 0x000F0000
MSR 0x0000019A 0x00000000 0x00000000
MSR 0x000001A4 0x00000000 0x00000000
MSR 0x000001FC 0x00000000 0x0004005F
MSR 0x00000601 0x18141494 0x000004B0
MSR 0x00000602 0x18141494 0x00000104
MSR 0x00000606 0x00000000 0x000A1003
MSR 0x00000610 0x800083B6 0x001482F8
MSR 0x00000611 0x00000000 0xDE6F8D88
MSR 0x00000639 0x00000000 0xA7E9D6F9
MSR 0x00000641 0x00000000 0x0518399B
MSR 0x00000614 0x00000000 0x01E002F8
MSR 0x0000019C 0x00000000 0x883A0000
MSR 0x000001A2 0x00000000 0x00621200
MSR 0x000001B1 0x00000000 0x88320000
MSR 0x00000198 0x0000261C 0x00002300
MSR 0x00000199 0x00000000 0x00002500
CPU Thread 3
APIC ID 6
Topology Processor ID 0, Core ID 3, Thread ID 0
Type 01020105h
Max CPUID level 0000000Dh
Max CPUID ext. level 80000008h
Cache descriptor Level 1, D, 32 KB, 2 thread(s)
Cache descriptor Level 1, I, 32 KB, 2 thread(s)
Cache descriptor Level 2, U, 256 KB, 2 thread(s)
Cache descriptor Level 3, U, 6 MB, 16 thread(s)
CPUID
0x00000000 0x0000000D 0x756E6547 0x6C65746E 0x49656E69
0x00000001 0x000206A7 0x06100800 0x1F9AE3BF 0xBFEBFBFF
0x00000002 0x76035A01 0x00F0B0FF 0x00000000 0x00CA0000
0x00000003 0x00000000 0x00000000 0x00000000 0x00000000
0x00000004 0x1C004121 0x01C0003F 0x0000003F 0x00000000
0x00000004 0x1C004122 0x01C0003F 0x0000003F 0x00000000
0x00000004 0x1C004143 0x01C0003F 0x000001FF 0x00000000
0x00000004 0x1C03C163 0x02C0003F 0x00001FFF 0x00000006
0x00000005 0x00000040 0x00000040 0x00000003 0x00001120
0x00000006 0x00000077 0x00000002 0x00000009 0x00000000
0x00000007 0x00000000 0x00000000 0x00000000 0x00000000
0x00000008 0x00000000 0x00000000 0x00000000 0x00000000
0x00000009 0x00000000 0x00000000 0x00000000 0x00000000
0x0000000A 0x07300803 0x00000000 0x00000000 0x00000603
0x0000000B 0x00000001 0x00000001 0x00000100 0x00000006
0x0000000B 0x00000004 0x00000004 0x00000201 0x00000006
0x0000000C 0x00000000 0x00000000 0x00000000 0x00000000
0x0000000D 0x00000007 0x00000340 0x00000340 0x00000000
0x80000000 0x80000008 0x00000000 0x00000000 0x00000000
0x80000001 0x00000000 0x00000000 0x00000001 0x28100800
0x80000002 0x20202020 0x49202020 0x6C65746E 0x20295228
0x80000003 0x65726F43 0x294D5428 0x2D356920 0x30303532
0x80000004 0x5043204B 0x20402055 0x30332E33 0x007A4847
0x80000005 0x00000000 0x00000000 0x00000000 0x00000000
0x80000006 0x00000000 0x00000000 0x01006040 0x00000000
0x80000007 0x00000000 0x00000000 0x00000000 0x00000100
0x80000008 0x00003024 0x00000000 0x00000000 0x00000000
MSR 0x0000001B 0x00000000 0xFEE00800
MSR 0x0000003A 0x00000000 0x00000005
MSR 0x000001A0 0x00000000 0x00850089
MSR 0x000000CE 0x00001000 0x70012100
MSR 0x00000017 0x00040000 0x00000000
MSR 0x00000035 0x00000000 0x00040004
MSR 0x000000C1 0x00000000 0x00000000
MSR 0x000000C2 0x00000000 0x00000000
MSR 0x000000C3 0x00000000 0x00000000
MSR 0x000000C4 0x00000000 0x00000000
MSR 0x00000186 0x00000000 0x00000000
MSR 0x00000187 0x00000000 0x00000000
MSR 0x000001AD 0x00000000 0x22232425
MSR 0x00000194 0x00000000 0x000F0000
MSR 0x0000019A 0x00000000 0x00000000
MSR 0x000001A4 0x00000000 0x00000000
MSR 0x000001FC 0x00000000 0x0004005F
MSR 0x00000601 0x18141494 0x000004B0
MSR 0x00000602 0x18141494 0x00000104
MSR 0x00000606 0x00000000 0x000A1003
MSR 0x00000610 0x800083B6 0x001482F8
MSR 0x00000611 0x00000000 0xDE706812
MSR 0x00000639 0x00000000 0xA7EA87D0
MSR 0x00000641 0x00000000 0x05183D7D
MSR 0x00000614 0x00000000 0x01E002F8
MSR 0x0000019C 0x00000000 0x88350000
MSR 0x000001A2 0x00000000 0x00621200
MSR 0x000001B1 0x00000000 0x88310000
MSR 0x00000198 0x00002645 0x00002300
MSR 0x00000199 0x00000000 0x00002500
Storage
-------------------------------------------------------------------------
Drive 0
Device Path \\?\ide#disksamsung_hd103sj_________________________1aj10001#5&13e7d980&0&1.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Type Fixed
Name SAMSUNG HD103SJ
Capacity 931.5 GB
SMART Support Yes
Drive 1
Device Path \\?\ide#disksamsung_hd753lj_________________________1aa01109#5&3a954a5d&0&0.1.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Type Fixed
Name SAMSUNG HD753LJ
Capacity 698.6 GB
SMART Support Yes
USB Devices
-------------------------------------------------------------------------
USB Device Generic USB Hub, class=0x09, subclass=0x00, vendor=0x8087, product=0x0024
USB Device Generischer USB-Hub, class=0x09, subclass=0x00, vendor=0x05E3, product=0x0607
USB Device Logitech Download Assistant, class=0x00, subclass=0x00, vendor=0x046D, product=0xC22B
USB Device USB-Verbundgerät, class=0x00, subclass=0x00, vendor=0x046D, product=0xC22A
USB Device Logitech Download Assistant, class=0x00, subclass=0x00, vendor=0x046D, product=0xC245
USB Device Generic USB Hub, class=0x09, subclass=0x00, vendor=0x8087, product=0x0024
Graphic APIs
-------------------------------------------------------------------------
API NVIDIA I/O
API NVIDIA NVAPI
API Intel I/O
Display Adapters
-------------------------------------------------------------------------
Display adapter 0
Display name \\.\DISPLAY5
Name Intel(R) HD Graphics 3000
Board Manufacturer ASRock Inc.
Codename Sandy Bridge
Technology 32 nm
PCI device bus 0 (0x0), device 2 (0x2), function 0 (0x0)
Vendor ID 0x8086 (0x1849)
Model ID 0x0112 (0x0112)
Performance Level 0
Core clock 848.0 MHz
Display adapter 1
Name NVIDIA GeForce GTX 960
Board Manufacturer GIGABYTE Technology
Revision A1
Memory size 4 GB
Memory type GDDR5
PCI device bus 1 (0x1), device 0 (0x0), function 0 (0x0)
Vendor ID 0x10DE (0x1458)
Model ID 0x1401 (0x36D2)
Performance Level 2D Desktop
Core clock 405.0 MHz
Memory clock 405.0 MHz
Performance Level Default
Core clock 405.0 MHz
Memory clock 810.0 MHz
Performance Level 3D Applications
Core clock 540.0 MHz
Memory clock 3004.0 MHz
Performance Level 3D Applications
Core clock 540.0 MHz
Memory clock 3505.0 MHz
Monitor 0
Model BenQ GL2450 ()
ID BNQ78A5
Serial 9AF02887019
Manufacturing Date Week 41, Year 2015
Size 24.0 inches
Max Resolution 1920 x 1080 @ 60 Hz
Horizontal Freq. Range 30-83 kHz
Vertical Freq. Range 50-76 Hz
Max Pixel Clock 170 MHz
Gamma Factor 2.2
ACPI
-------------------------------------------------------------------------
ACPI Tree
_GPE
_L07
_L1B
_L1D
_L08
_L0B
_L0D
_L09
_L06
_PR_
SSDT
CSDT
NCST
NPSS
HNDL
CHDL
TNLP
CINT
PDCV
APSS
PTCI
TSSI
TSSM
C1ST
CMST
CIST
CST_
PDC_
OSC_
P000
_PDC
_OSC
_PCT
_PSS
_PPC
_PSD
_TPC
_PTC
_TSS
_CST
P001
_PDC
_OSC
_PCT
_PSS
_PPC
_PSD
_TPC
_PTC
_TSS
_CST
P002
_PDC
_OSC
_PCT
_PSS
_PPC
_PSD
_TPC
_PTC
_TSS
_CST
P003
_PDC
_OSC
_PCT
_PSS
_PPC
_PSD
_TPC
_PTC
_TSS
_CST
_SB_
PR00
AR00
PR20
AR20
PR11
AR11
PR12
AR12
PR13
AR13
PR15
AR15
PR16
AR16
PR17
AR17
PR18
AR18
PR01
AR01
PR02
AR02
PR03
AR03
PR04
AR04
PR21
AR21
PRSA
PRSB
PRSC
PRSD
PRSE
PRSF
PRSG
PRSH
PCI0
_HID
_CID
_ADR
_BBN
_UID
_PRT
_S3D
MCH_
_HID
_UID
MCHR
_CRS
NBNV
[ ]
NBSG
[ ]
PEXB
PEXL
MCHB
MCHL
VTDB
VTLN
NPTS
NWAK
CPRB
STAV
BRB_
BRL_
IOB_
IOL_
MBB_
MBL_
MABL
MABH
MALL
MALH
MAML
MAMH
CRS1
CRS2
_STA
_CRS
_OSC
SBRG
_ADR
SPTS
SWAK
APMP
[ ]
APMC
APMS
[ ]
[ ]
[ ]
BRTC
SMIE
[ ]
[ ]
PS1E
[ ]
PS1S
[ ]
SIO1
_HID
_UID
CRS_
_CRS
DCAT
MUT0
ENFG
EXFG
LPTM
UHID
IOID
[ ]
INDX
DATA
[ ]
[ ]
LDN_
[ ]
SCF1
SCF2
SCF3
SCF4
SCF5
SCF6
SCF7
[ ]
CKCF
[ ]
ACTR
[ ]
IOAH
IOAL
IOH2
IOL2
[ ]
INTR
[ ]
DMCH
[ ]
RGE0
RGE1
RGE2
RGE3
RGE4
RGE5
RGE6
RGE7
RGE8
[ ]
OPT0
OPT1
OPT2
OPT3
OPT4
OPT5
OPT6
OPT7
CGLD
DSTA
DCNT
CRS1
IRQM
DMAM
IO11
IO12
LEN1
CRS2
IRQE
DMAE
IO21
IO22
LEN2
IO31
IO32
LEN3
CRS4
IRQL
IOHL
IORL
ALMN
LENG
DCRS
DSRS
DSR2
SIOK
SLED
PMFG
SIOS
SIOW
UAR2
_UID
_HID
_STA
_DIS
_CRS
_SRS
_PRS
WIN2
[ ]
IND1
DAT1
[ ]
[ ]
LDN1
[ ]
MFP1
[ ]
MFP2
[ ]
GLO1
GLO2
[ ]
MFP3
[ ]
ACT1
[ ]
IOH1
IOL1
[ ]
INT1
[ ]
VBAT
ENF1
EXF1
CIR_
_HID
_STA
_DIS
_CRS
_SRS
IRST
NCAP
NRXL
NTXP
NLED
_PSW
_PRW
PIC_
_HID
_CRS
DMAD
_HID
_CRS
TMR_
_HID
_CRS
RTC0
_HID
_CRS
SPKR
_HID
_CRS
RMSC
_HID
_UID
CRS_
_CRS
COPR
_HID
_CRS
PS2K
_HID
_CID
_STA
_CRS
_PRS
_PSW
_PRW
PS2M
_HID
_CID
_STA
CRS1
CRS2
_CRS
_PRS
_PSW
_PRW
UAR1
_UID
_HID
_STA
_DIS
_CRS
_SRS
_PRS
_PRW
PIX0
SIOH
TPM_
_HID
_STR
_UID
_CRS
TMMB
[ ]
ACCS
[ ]
TSTA
TBCA
[ ]
TVID
TDID
_STA
TSMI
[ ]
INQ_
DAT_
_DSM
PCH_
_HID
_UID
_STA
ICHR
_CRS
CWDT
_HID
_CID
BUF0
_STA
_CRS
BR20
_ADR
_PRW
_PRT
SAT0
_ADR
REGF
_REG
TIM0
TMD0
PIO0
DMA0
PIO1
DMA1
CHNF
CFG2
[ ]
PMPT
PSPT
PMRI
[ ]
SMPT
SSPT
SMRI
[ ]
PSRI
SSRI
[ ]
PM3E
PS3E
SM3E
SS3E
[ ]
PMUT
[ ]
PSUT
[ ]
SMUT
[ ]
SSUT
[ ]
[ ]
PM6E
PS6E
SM6E
SS6E
PMCR
PSCR
SMCR
SSCR
[ ]
PMAE
PSAE
SMAE
SSAE
GMPT
GMUE
GMUT
GMCR
GSPT
GSUE
GSUT
GSCR
CHN0
_ADR
_GTM
_STM
DRV0
_ADR
_GTF
DRV1
_ADR
_GTF
CHN1
_ADR
_GTM
_STM
DRV0
_ADR
_GTF
DRV1
_ADR
_GTF
GTM_
STM_
AT01
AT02
AT03
AT04
ATA0
ATA1
ATA2
ATA3
ATAB
CMDC
GTFB
GTF_
RATA
NATA
SAT1
_ADR
REGF
_REG
TIM0
TMD0
PIO0
DMA0
PIO1
DMA1
CHNF
CFG2
[ ]
PMPT
PSPT
PMRI
[ ]
SMPT
SSPT
SMRI
[ ]
PSRI
SSRI
[ ]
PM3E
PS3E
SM3E
SS3E
[ ]
PMUT
[ ]
PSUT
[ ]
SMUT
[ ]
SSUT
[ ]
[ ]
PM6E
PS6E
SM6E
SS6E
PMCR
PSCR
SMCR
SSCR
[ ]
PMAE
PSAE
SMAE
SSAE
GMPT
GMUE
GMUT
GMCR
GSPT
GSUE
GSUT
GSCR
CHN0
_ADR
_GTM
_STM
DRV0
_ADR
_GTF
DRV1
_ADR
_GTF
CHN1
_ADR
_GTM
_STM
DRV0
_ADR
_GTF
DRV1
_ADR
_GTF
GTM_
STM_
AT01
AT02
AT03
AT04
ATA0
ATA1
ATA2
ATA3
ATAB
CMDC
GTFB
GTF_
RATA
SMB_
_ADR
SMIO
[ ]
HSTS
HCNT
HCMD
TSAD
HDT0
HDT1
HBDT
RSAD
RSDA
AUST
AUCT
SMLP
SMBP
SSTS
SCMD
NDAD
NDLB
NDHB
SMCS
EUSB
_ADR
_S4D
_S3D
_S2D
_S1D
HUBN
_ADR
PR10
_ADR
_UPC
_PLD
PR30
_ADR
_UPC
_PLD
PR31
_ADR
_UPC
_PLD
PR32
_ADR
_UPC
_PLD
PR33
_ADR
_UPC
_PLD
PR34
_ADR
_UPC
_PLD
PR35
_ADR
_UPC
_PLD
PR36
_ADR
_UPC
_PLD
PR37
_ADR
_UPC
_PLD
_PRW
USBE
_ADR
_S4D
_S3D
_S2D
_S1D
HUBN
_ADR
PR10
_ADR
_UPC
_PLD
PR30
_ADR
_UPC
_PLD
PR31
_ADR
_UPC
_PLD
PR32
_ADR
_UPC
_PLD
PR33
_ADR
_UPC
_PLD
PR34
_ADR
_UPC
_PLD
PR35
_ADR
_UPC
_PLD
_PRW
PEX0
_ADR
PXRC
[ ]
[ ]
[ ]
PMS_
PMP_
[ ]
[ ]
HPE_
PCE_
[ ]
HPS_
PCS_
CSS_
SPRT
WPRT
_PRW
_PRT
PEX1
_ADR
PXRC
[ ]
[ ]
[ ]
PMS_
PMP_
[ ]
[ ]
HPE_
PCE_
[ ]
HPS_
PCS_
CSS_
SPRT
WPRT
_PRW
_PRT
PEX2
_ADR
PXRC
[ ]
[ ]
[ ]
PMS_
PMP_
[ ]
[ ]
HPE_
PCE_
[ ]
HPS_
PCS_
CSS_
SPRT
WPRT
_PRW
_PRT
PEX3
_ADR
PXRC
[ ]
[ ]
[ ]
PMS_
PMP_
[ ]
[ ]
HPE_
PCE_
[ ]
HPS_
PCS_
CSS_
SPRT
WPRT
_PRW
PEX4
_ADR
PXRC
[ ]
[ ]
[ ]
PMS_
PMP_
[ ]
[ ]
HPE_
PCE_
[ ]
HPS_
PCS_
CSS_
SPRT
WPRT
_PRW
_PRT
PE2P
_ADR
_PRW
_PRT
PEX5
_ADR
PXRC
[ ]
[ ]
[ ]
PMS_
PMP_
[ ]
[ ]
HPE_
PCE_
[ ]
HPS_
PCS_
CSS_
SPRT
WPRT
_PRW
_PRT
PEX6
_ADR
PXRC
[ ]
[ ]
[ ]
PMS_
PMP_
[ ]
[ ]
HPE_
PCE_
[ ]
HPS_
PCS_
CSS_
SPRT
WPRT
_PRW
_PRT
PEX7
_ADR
PXRC
[ ]
[ ]
[ ]
PMS_
PMP_
[ ]
[ ]
HPE_
PCE_
[ ]
HPS_
PCS_
CSS_
SPRT
WPRT
_PRW
_PRT
P0P1
_ADR
_PRW
_PRT
P0P2
_ADR
_PRW
_PRT
P0P3
_ADR
_PRW
_PRT
P0P4
_ADR
_PRW
_PRT
HPET
_HID
CRS_
HCNT
[ ]
HPTS
[ ]
HPTE
_STA
_CRS
_INI
GFX0
_ADR
OPBS
OPBA
IGDP
[ ]
[ ]
[ ]
GIVD
[ ]
GUMA
[ ]
[ ]
GMFN
[ ]
[ ]
CDCT
[ ]
[ ]
GSSE
GSSB
GSES
[ ]
ASLS
M512
M1GB
IGDM
[ ]
SIGN
SIZE
OVER
SVER
VVER
GVER
MBOX
[ ]
KSV0
KSV1
[ ]
IBTT
IPSC
IPAT
IBIA
IBLC
ITVF
ITVM
IDVM
IDVS
ISSC
[ ]
DRDY
CSTS
CEVT
[ ]
DIDL
DDL2
DDL3
DDL4
DDL5
DDL6
DDL7
DDL8
CPDL
CPL2
CPL3
CPL4
CPL5
CPL6
CPL7
CPL8
CADL
CAL2
CAL3
CAL4
CAL5
CAL6
CAL7
CAL8
NADL
NDL2
NDL3
NDL4
NDL5
NDL6
NDL7
NDL8
ASLP
TIDX
CHPD
CLID
CDCK
SXSW
EVTS
CNOT
NRDY
[ ]
SCIE
GEFC
GXFC
GESF
[ ]
PARM
DSLP
[ ]
ARDY
ASLC
TCHE
ALSI
BCLP
PFIT
CBLV
BCLM
CPFM
EPFM
[ ]
GVD1
TCOI
[ ]
[ ]
[ ]
SCIS
[ ]
DBTB
GSCI
GBDA
SBCB
OPTS
OWAK
MCHP
[ ]
[ ]
TASM
[ ]
ITPD
[ ]
[ ]
TPDI
TVID
[ ]
VIDT
ITPM
_HID
_CID
_STR
_CRS
TSMI
[ ]
INQ_
DAT_
TPMR
[ ]
ACC0
_STA
_DSM
BN00
SLPS
PMS0
[ ]
[ ]
RTCS
[ ]
PEXS
WAKS
[ ]
PWBT
[ ]
SLPB
_HID
_STA
_PRW
PWRB
_HID
_UID
_STA
_PRW
BUFA
IRA0
LNKA
_HID
_UID
_STA
_PRS
_DIS
_CRS
_SRS
LNKB
_HID
_UID
_STA
_PRS
_DIS
_CRS
_SRS
LNKC
_HID
_UID
_STA
_PRS
_DIS
_CRS
_SRS
LNKD
_HID
_UID
_STA
_PRS
_DIS
_CRS
_SRS
LNKE
_HID
_UID
_STA
_PRS
_DIS
_CRS
_SRS
LNKF
_HID
_UID
_STA
_PRS
_DIS
_CRS
_SRS
LNKG
_HID
_UID
_STA
_PRS
_DIS
_CRS
_SRS
LNKH
_HID
_UID
_STA
_PRS
_DIS
_CRS
_SRS
RMEM
_HID
_UID
LUCD
_SI_
_TZ_
_REV
_OS_
_OSI
_GL_
SP1O
IO1B
IO1L
IOCB
IOCL
IOWB
IOWL
IOES
SL2P
TCBR
TCLT
SRCB
SRCL
SUSW
PMBS
PMLN
SMIP
APCB
APCL
PM30
SMBS
SMBL
HPTB
HPTC
GPBS
GPLN
PEBS
PELN
LAPB
VTDS
VTDL
ACPH
ASSB
AOTB
AAXB
PEHP
SHPC
PEPM
PEER
PECS
ITKE
DSSP
FHPP
TOBS
SUCC
NVLD
CRIT
NCRT
LDST
SMIT
OFST
TPMF
TMF1
TMF2
TMF3
PICM
_PIC
OSVR
OSFL
MCTH
PRWP
GPRW
WAKP
DEB0
[ ]
DBG8
DEB1
[ ]
DBG9
SS1_
SS2_
SS3_
SS4_
IOST
TOPM
ROMS
CRFG
KBFG
MSFG
FZTF
[ ]
PIRA
PIRB
PIRC
PIRD
[ ]
PIRE
PIRF
PIRG
PIRH
PSTE
TSTE
RRIO
RDMA
WOTB
WSSB
WAXB
_PTS
_WAK
OMSC
_HID
_UID
LEDM
[ ]
BILD
[ ]
RPR0
[ ]
GPR2
[ ]
[ ]
[ ]
GL15
[ ]
[ ]
[ ]
GB15
[ ]
LEDS
LEDW
_S0_
_S1_
_S3_
_S4_
_S5_
PTS_
WAK_ Hier die erforderlichen Scans: Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-06-2016 02
durchgeführt von rush_ (Administrator) auf DESKTOP-K0PFM97 (06-06-2016 12:38:40)
Gestartet von C:\Users\rush_\Desktop
Geladene Profile: rush_ & (Verfügbare Profile: rush_)
Platform: Windows 10 Pro Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(TeamViewer GmbH) F:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\Speech_OneCore\Common\SpeechRuntime.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Valve Corporation) F:\Program Files (x86)\Steam\Steam.exe
(Spotify Ltd) C:\Users\rush_\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\rush_\AppData\Roaming\Spotify\Spotify.exe
(Electronic Arts) F:\Program Files (x86)\Origin\Origin.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Wargaming.net) F:\Games\World_of_Tanks\WargamingGameUpdater.exe
(File-New-Project) F:\Program Files (x86)\Ear Trumpet\EarTrumpet.exe
(Creative Technology Ltd) C:\Windows\syswow64\Ctxfihlp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Disc Soft Ltd) F:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Valve Corporation) F:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Spotify Ltd) C:\Users\rush_\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Creative Technology Ltd) C:\Windows\syswow64\CTxfispi.exe
(Spotify Ltd) C:\Users\rush_\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\rush_\AppData\Roaming\Spotify\Spotify.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(TeamSpeak Systems GmbH) F:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(techPowerUp (www.techpowerup.com)) F:\Program Files (x86)\GPU-Z\GPU-Z.exe
(CPUID) F:\Program Files\CPUID\CPU-Z\cpuz.exe
(CPUID) F:\Program Files\CPUID\HWMonitor\HWMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes) F:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Mozilla Corporation) F:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-05-02] (NVIDIA Corporation)
HKLM-x32\...\Run: [CTxfiHlp] => CTXFIHLP.EXE
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [67840 2016-05-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [814608 2016-04-04] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [CtxfiReg] => CTXFIREG.exe /FAIL1
HKU\S-1-5-21-2987826118-164082447-866195739-1001\...\Run: [Steam] => F:\Program Files (x86)\Steam\steam.exe [3077712 2016-04-30] (Valve Corporation)
HKU\S-1-5-21-2987826118-164082447-866195739-1001\...\Run: [Spotify Web Helper] => C:\Users\rush_\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1554032 2016-05-30] (Spotify Ltd)
HKU\S-1-5-21-2987826118-164082447-866195739-1001\...\Run: [Spotify] => C:\Users\rush_\AppData\Roaming\Spotify\Spotify.exe [6859888 2016-05-30] (Spotify Ltd)
HKU\S-1-5-21-2987826118-164082447-866195739-1001\...\Run: [EADM] => F:\Program Files (x86)\Origin\Origin.exe [3639280 2016-06-01] (Electronic Arts)
HKU\S-1-5-21-2987826118-164082447-866195739-1001\...\Run: [DAEMON Tools Lite Automount] => F:\Program Files\DAEMON Tools Lite\DTAgent.exe [4299968 2016-05-30] (Disc Soft Ltd)
HKU\S-1-5-21-2987826118-164082447-866195739-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [465920 2016-02-13] (Microsoft Corporation)
HKU\S-1-5-21-2987826118-164082447-866195739-1001\...\Run: [World of Tanks] => F:\Games\World_of_Tanks\WargamingGameUpdater.exe [3095816 2016-05-11] (Wargaming.net)
HKU\S-1-5-21-2987826118-164082447-866195739-1001\...\MountPoints2: {fbeb8b52-272d-11e6-94f4-002522de4660} - "J:\setup.exe"
HKU\S-1-5-21-2987826118-164082447-866195739-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Steam] => F:\Program Files (x86)\Steam\steam.exe [3077712 2016-04-30] (Valve Corporation)
HKU\S-1-5-21-2987826118-164082447-866195739-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify Web Helper] => C:\Users\rush_\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1554032 2016-05-30] (Spotify Ltd)
HKU\S-1-5-21-2987826118-164082447-866195739-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify] => C:\Users\rush_\AppData\Roaming\Spotify\Spotify.exe [6859888 2016-05-30] (Spotify Ltd)
HKU\S-1-5-21-2987826118-164082447-866195739-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [EADM] => F:\Program Files (x86)\Origin\Origin.exe [3639280 2016-06-01] (Electronic Arts)
HKU\S-1-5-21-2987826118-164082447-866195739-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [DAEMON Tools Lite Automount] => F:\Program Files\DAEMON Tools Lite\DTAgent.exe [4299968 2016-05-30] (Disc Soft Ltd)
HKU\S-1-5-21-2987826118-164082447-866195739-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [465920 2016-02-13] (Microsoft Corporation)
HKU\S-1-5-21-2987826118-164082447-866195739-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [World of Tanks] => F:\Games\World_of_Tanks\WargamingGameUpdater.exe [3095816 2016-05-11] (Wargaming.net)
HKU\S-1-5-21-2987826118-164082447-866195739-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {fbeb8b52-272d-11e6-94f4-002522de4660} - "J:\setup.exe"
HKU\S-1-5-18\...\Run: [CtxfiReg] => CTXFIREG.exe /FAIL1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ear Trumpet.lnk [2016-06-02]
ShortcutTarget: Ear Trumpet.lnk -> F:\Program Files (x86)\Ear Trumpet\EarTrumpet.exe (File-New-Project)
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{5b5c8b28-4574-403f-b272-ba9ff7d52246}: [DhcpNameServer] 192.168.2.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-9c6f31ca
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-9c6f31ca
HKU\S-1-5-21-2987826118-164082447-866195739-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-9c6f31ca
HKU\S-1-5-21-2987826118-164082447-866195739-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-9c6f31ca
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {d4fee3d1-1014-4db8-a824-573bf9ab51c7} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-9c6f31ca&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2987826118-164082447-866195739-1001 -> DefaultScope {d4fee3d1-1014-4db8-a824-573bf9ab51c7} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-9c6f31ca&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2987826118-164082447-866195739-1001 -> {d4fee3d1-1014-4db8-a824-573bf9ab51c7} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-9c6f31ca&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2987826118-164082447-866195739-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {d4fee3d1-1014-4db8-a824-573bf9ab51c7} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-9c6f31ca&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2987826118-164082447-866195739-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {d4fee3d1-1014-4db8-a824-573bf9ab51c7} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-9c6f31ca&q={searchTerms}
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> F:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-02] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-02] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-02] (Microsoft Corporation)
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://files.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://files.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - F:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-02] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> F:\Program Files\Microsoft Office\Office15\NPSPWRAP.DLL [2012-10-02] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-02] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-05-20] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-05-20] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> f:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.)
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR Profile: C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-04-30]
CHR Extension: (Google Docs) - C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-04-30]
CHR Extension: (Google Drive) - C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-30]
CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2016-06-01]
CHR Extension: (MEGA) - C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2016-05-30]
CHR Extension: (YouTube) - C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-30]
CHR Extension: (Adblock Plus) - C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-06-01]
CHR Extension: (Tampermonkey) - C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2016-05-30]
CHR Extension: (Google Tabellen) - C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-04-30]
CHR Extension: (Avira Browserschutz) - C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-06-03]
CHR Extension: (Google Docs Offline) - C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-30]
CHR Extension: (MagicScroll eBook Reader) - C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgnmgfdoiplfmhgghbmlphanpfmjble [2016-04-30]
CHR Extension: (AdBlock) - C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-06-01]
CHR Extension: (Mibbit webchat) - C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbadbkkklnhamjjeagmknajgmbgcmnpi [2016-04-30]
CHR Extension: (Disconnect) - C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeoacafpbcihiomhlakheieifhpjdfeo [2016-04-30]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-30]
CHR Extension: (Google Mail) - C:\Users\rush_\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-30]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [970656 2016-04-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [467016 2016-04-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [467016 2016-04-04] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1435704 2016-04-04] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [285176 2016-05-19] (Avira Operations GmbH & Co. KG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1863688 2016-05-31] ()
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2016-06-01] (Creative Labs) [Datei ist nicht signiert]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [286720 2010-02-12] (Creative Technology Ltd) [Datei ist nicht signiert]
R3 Disc Soft Lite Bus Service; f:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1467072 2016-05-30] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [240416 2016-06-04] (EasyAntiCheat Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368 2016-05-02] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-05-02] (NVIDIA Corporation)
S3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-05-02] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-05-02] (NVIDIA Corporation)
S3 Origin Client Service; F:\Program Files (x86)\Origin\OriginClientService.exe [2120712 2016-06-01] (Electronic Arts)
R2 TeamViewer; f:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7032080 2016-05-12] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
S2 MBAMScheduler; "\mbamscheduler.exe" [X]
S2 MBAMService; "\mbamservice.exe" [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128664 2016-04-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [146712 2016-04-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [35488 2016-04-04] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [78208 2016-04-04] (Avira Operations GmbH & Co. KG)
R3 cpuz138; C:\Users\rush_\AppData\Local\Temp\cpuz138\cpuz138_x64.sys [27320 2016-06-06] (CPUID)
R3 cpuz139; C:\Users\rush_\AppData\Local\Temp\cpuz139\cpuz139_x64.sys [43328 2016-06-06] (CPUID)
S3 dc1-controller; C:\Windows\System32\drivers\dc1-controller.sys [57344 2015-10-30] (Microsoft Corp.)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2016-05-11] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2016-05-11] (Disc Soft Ltd)
R3 GPU-Z; C:\Users\rush_\AppData\Local\Temp\GPU-Z.sys [27008 2016-06-06] ()
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-06-06] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [202032 2016-01-19] (Intel Corporation)
S3 nuviocir; C:\Windows\system32\DRIVERS\nuviocir_x64.sys [40464 2015-05-07] (Nuvoton Technology Corp.)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-05-02] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek )
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R3 XSplit_Dummy; C:\Windows\system32\drivers\xspltspk.sys [26200 2015-05-25] (SplitmediaLabs Limited)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-06-06 12:38 - 2016-06-06 12:39 - 00022377 _____ C:\Users\rush_\Desktop\FRST.txt
2016-06-06 12:38 - 2016-06-06 12:38 - 02384896 _____ (Farbar) C:\Users\rush_\Desktop\FRST64.exe
2016-06-06 12:38 - 2016-06-06 12:38 - 00000000 ____D C:\FRST
2016-06-06 12:26 - 2016-06-06 12:26 - 00000846 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2016-06-06 12:23 - 2016-06-06 12:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2016-06-06 12:23 - 2016-06-06 12:23 - 00000803 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2016-06-06 01:32 - 2016-06-06 01:32 - 00000076 _____ C:\Users\rush_\Desktop\Master Overwatch — Vaux#2406 on PC (EU) — Profile Overview.url
2016-06-05 23:53 - 2016-06-05 23:53 - 00000141 _____ C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2016-06-05 23:53 - 2016-06-05 23:53 - 00000000 ____D C:\Users\rush_\AppData\Roaming\Fatshark
2016-06-04 16:23 - 2016-06-04 16:23 - 00000000 ____D C:\Users\rush_\AppData\Local\id Software
2016-06-04 14:44 - 2016-06-04 14:17 - 00240416 _____ (EasyAntiCheat Ltd) C:\WINDOWS\SysWOW64\EasyAntiCheat.exe
2016-06-04 14:08 - 2016-06-04 14:08 - 00000000 ____D C:\Users\rush_\AppData\Roaming\10tons
2016-06-04 13:01 - 2016-06-04 13:01 - 00000000 ____D C:\Users\rush_\AppData\LocalLow\Facepunch Studios
2016-06-03 18:31 - 2016-06-03 18:31 - 00000000 ____D C:\Users\rush_\AppData\Roaming\Avira
2016-06-03 18:30 - 2016-06-06 12:30 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-06-03 18:29 - 2016-06-03 18:29 - 00000861 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-06-03 18:29 - 2016-06-03 18:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-06-03 18:29 - 2016-06-03 18:29 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-06-03 18:29 - 2016-04-04 17:07 - 00146712 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2016-06-03 18:29 - 2016-04-04 17:07 - 00128664 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2016-06-03 18:29 - 2016-04-04 17:07 - 00078208 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2016-06-03 18:29 - 2016-04-04 17:07 - 00035488 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2016-06-03 18:29 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-06-03 18:29 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-06-03 18:29 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-06-03 18:27 - 2016-06-03 18:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-06-03 18:27 - 2016-06-03 18:29 - 00000000 ____D C:\ProgramData\Avira
2016-06-03 18:27 - 2016-06-03 18:29 - 00000000 ____D C:\Program Files (x86)\Avira
2016-06-03 14:51 - 2016-06-03 14:51 - 00000000 ____D C:\Users\rush_\AppData\Local\UnrealEngine
2016-06-03 14:51 - 2016-06-03 14:51 - 00000000 ____D C:\Users\rush_\AppData\Local\DreadGame
2016-06-03 11:59 - 2016-06-03 11:59 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2016-06-03 11:59 - 2016-06-03 11:59 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-06-03 11:59 - 2016-06-03 11:59 - 00000000 ____D C:\Program Files\MSBuild
2016-06-03 11:59 - 2016-06-03 11:59 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-06-03 11:59 - 2016-06-03 11:59 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-06-03 11:56 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2016-06-03 11:56 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-06-03 11:56 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2016-06-03 11:56 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-06-03 11:56 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2016-06-03 11:56 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-06-03 11:55 - 2016-06-03 11:55 - 00001069 _____ C:\Users\rush_\Desktop\Play Dreadnought.lnk
2016-06-03 11:55 - 2016-06-03 11:55 - 00000000 ____D C:\Users\rush_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dreadnought
2016-06-02 17:42 - 2016-06-02 17:42 - 00000862 _____ C:\Users\Public\Desktop\WoT OMC ModPack entfernen.lnk
2016-06-02 17:42 - 2016-06-02 17:42 - 00000000 ____D C:\Users\rush_\AppData\Roaming\Microsoft\Windows\Start Menu\OMC ModPack
2016-06-02 17:29 - 2016-06-02 17:42 - 00000876 _____ C:\Users\Public\Desktop\OMC ModPack Aktualisierung- Rekonfiguration.lnk
2016-06-02 17:29 - 2016-06-02 17:29 - 00000000 ____D C:\Users\rush_\AppData\Roaming\Microsoft\Windows\Start Menu\OMC ModPack Client
2016-06-02 17:27 - 2016-06-02 17:28 - 02887424 _____ (Odem Mortis ) C:\Users\rush_\Desktop\OMC_ModPack_Installer.exe
2016-06-02 12:27 - 2016-06-02 12:45 - 00000000 ____D C:\Users\rush_\Documents\DayZ
2016-06-02 12:27 - 2016-06-02 12:32 - 00000000 ____D C:\Users\rush_\AppData\Local\DayZ
2016-06-02 11:04 - 2016-06-02 11:04 - 00000000 ____D C:\Users\rush_\AppData\Local\DunDefLauncher
2016-06-02 10:12 - 2016-06-02 10:12 - 00000000 ____D C:\Users\rush_\AppData\Local\SplitmediaLabs
2016-06-02 10:03 - 2016-06-02 10:03 - 00001019 _____ C:\Users\Public\Desktop\XSplit Gamecaster.lnk
2016-06-02 10:03 - 2016-06-02 10:03 - 00000000 ____D C:\ProgramData\SplitMediaLabs
2016-06-02 10:03 - 2016-06-02 10:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XSplit
2016-06-02 10:02 - 2016-06-02 10:02 - 00000000 ____D C:\Users\rush_\AppData\Roaming\SplitmediaLabs
2016-06-02 09:36 - 2016-06-02 09:36 - 00000801 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Ear Trumpet.lnk
2016-06-01 22:05 - 2016-06-01 22:05 - 00000000 ____D C:\Users\rush_\AppData\Roaming\Wargaming.net
2016-06-01 22:03 - 2016-06-06 02:33 - 00000000 ____D C:\Users\rush_\AppData\Roaming\WhatsApp
2016-06-01 22:03 - 2016-06-01 22:03 - 00002234 _____ C:\Users\rush_\Desktop\WhatsApp.lnk
2016-06-01 22:03 - 2016-06-01 22:03 - 00000000 ____D C:\Users\rush_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2016-06-01 22:03 - 2016-06-01 22:03 - 00000000 ____D C:\Users\rush_\AppData\Local\WhatsApp
2016-06-01 22:03 - 2016-06-01 22:03 - 00000000 ____D C:\Users\rush_\AppData\Local\SquirrelTemp
2016-06-01 21:40 - 2016-06-01 21:40 - 00001258 _____ C:\Users\rush_\Desktop\reenshotsf12.lnk
2016-06-01 21:22 - 2016-06-01 21:22 - 00000000 ____D C:\ProgramData\Steam
2016-06-01 21:22 - 2016-06-01 21:22 - 00000000 ____D C:\ProgramData\Codemasters
2016-06-01 20:48 - 2016-06-01 21:11 - 00000000 ____D C:\Users\rush_\Documents\Overwatch
2016-06-01 20:46 - 2016-06-01 20:46 - 00000739 _____ C:\Users\rush_\Desktop\World of Tanks.lnk
2016-06-01 20:46 - 2016-06-01 20:46 - 00000000 ____D C:\Users\rush_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\World of Tanks
2016-06-01 19:27 - 2016-06-04 15:47 - 00000000 ____D C:\Users\rush_\AppData\Local\Arma 3
2016-06-01 19:27 - 2016-06-03 10:12 - 00000000 ____D C:\Users\rush_\Documents\Arma 3
2016-06-01 19:27 - 2016-06-01 19:27 - 00000000 ____D C:\ProgramData\Bohemia Interactive
2016-06-01 19:26 - 2016-06-01 20:43 - 00000000 ____D C:\Users\rush_\AppData\Local\Arma 3 Launcher
2016-06-01 19:26 - 2016-06-01 19:26 - 00000000 ____D C:\Users\rush_\AppData\Local\Bohemia_Interactive
2016-06-01 19:15 - 2016-06-06 12:18 - 00000744 _____ C:\Users\rush_\Desktop\TechPowerUp GPU-Z.lnk
2016-06-01 19:15 - 2016-06-02 11:04 - 00000000 ____D C:\Users\rush_\AppData\Roaming\NVIDIA
2016-06-01 19:15 - 2016-06-01 19:15 - 00000000 ____D C:\Users\rush_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z
2016-06-01 19:14 - 2016-06-01 19:14 - 01788712 _____ (techPowerUp (www.techpowerup.com)) C:\Users\rush_\Downloads\GPU-Z.0.8.8.exe
2016-06-01 18:33 - 2016-06-01 18:37 - 00000000 ____D C:\Users\rush_\AppData\LocalLow\Daybreak Game Company
2016-06-01 18:33 - 2016-06-01 18:33 - 00000000 ____D C:\Users\rush_\AppData\Local\SCE
2016-06-01 18:33 - 2016-06-01 18:33 - 00000000 ____D C:\Users\rush_\AppData\Local\Daybreak Game Company
2016-06-01 18:29 - 2016-06-05 17:11 - 00000000 ____D C:\Users\rush_\AppData\Local\CrashDumps
2016-06-01 18:14 - 2016-06-02 10:42 - 00000000 ____D C:\Users\rush_\AppData\Local\NVIDIA Corporation
2016-06-01 18:14 - 2016-06-01 18:14 - 00000000 ____D C:\Users\rush_\AppData\Local\NVIDIA
2016-06-01 18:14 - 2016-05-02 07:39 - 01377800 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2016-06-01 18:14 - 2016-05-02 07:39 - 01316184 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2016-06-01 18:14 - 2016-05-02 07:38 - 01767944 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2016-06-01 18:14 - 2016-05-02 07:38 - 01756608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2016-06-01 18:14 - 2016-05-02 07:38 - 00112032 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2016-06-01 18:13 - 2016-06-01 18:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-06-01 18:13 - 2016-06-01 18:13 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-06-01 18:13 - 2016-05-20 03:57 - 00113208 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2016-06-01 18:13 - 2016-05-04 04:23 - 00129824 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2016-06-01 18:13 - 2016-05-04 04:22 - 00130848 _____ C:\WINDOWS\system32\vulkan-1.dll
2016-06-01 18:13 - 2016-05-04 04:22 - 00045344 _____ C:\WINDOWS\system32\vulkaninfo.exe
2016-06-01 18:13 - 2016-05-04 04:22 - 00040224 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2016-06-01 18:12 - 2016-06-06 12:15 - 00000000 ____D C:\ProgramData\NVIDIA
2016-06-01 18:12 - 2016-06-01 18:14 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-06-01 18:12 - 2016-06-01 18:14 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-06-01 18:12 - 2016-05-20 10:03 - 00213952 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2016-06-01 18:12 - 2016-05-20 04:08 - 06348344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2016-06-01 18:12 - 2016-05-20 04:08 - 02454976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2016-06-01 18:12 - 2016-05-20 04:08 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2016-06-01 18:12 - 2016-05-20 04:08 - 01352760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2016-06-01 18:12 - 2016-05-20 04:08 - 00533560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2016-06-01 18:12 - 2016-05-20 04:08 - 00392128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2016-06-01 18:12 - 2016-05-20 04:08 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2016-06-01 18:12 - 2016-05-20 04:08 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2016-06-01 18:12 - 2016-05-18 10:37 - 06448223 _____ C:\WINDOWS\system32\nvcoproc.bin
2016-06-01 18:11 - 2016-05-21 23:09 - 01581624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco64.dll
2016-06-01 18:11 - 2016-05-21 23:09 - 00046024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 39977920 _____ C:\WINDOWS\system32\nvcompiler.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 35117112 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 31639096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 25401280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 21802816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 21346520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 20305768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 18145256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 17740664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 17662432 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 17379520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 14410024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 10642912 _____ C:\WINDOWS\system32\nvptxJitCompiler.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 08733280 _____ C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 03811440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 03371648 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 02791360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 02419768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 01922496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436822.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 01573432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436822.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00985024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00909760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00787200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00786360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00772152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00708032 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00669952 _____ C:\WINDOWS\system32\nvfatbinaryLoader.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00632664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00631104 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00601936 _____ C:\WINDOWS\system32\nvmcumd.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00565208 _____ C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00549240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00452616 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00423360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00385080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00379480 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00377792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00346560 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00315936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00178136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00155952 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00153416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00131768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2016-06-01 18:11 - 2016-05-20 10:03 - 00000594 _____ C:\WINDOWS\SysWOW64\nv-vk32.json
2016-06-01 18:11 - 2016-05-20 10:03 - 00000594 _____ C:\WINDOWS\system32\nv-vk64.json
2016-06-01 18:11 - 2016-04-14 07:38 - 00113216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2016-06-01 18:11 - 2016-04-14 07:38 - 00102976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2016-06-01 18:11 - 2016-04-14 07:38 - 00056384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2016-06-01 18:10 - 2016-06-01 18:14 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-06-01 18:09 - 2016-06-06 12:18 - 00061088 _____ C:\WINDOWS\system32\BMXStateBkp-{00000004-00000000-00000000-00001102-00000005-00291102}.rfx
2016-06-01 18:09 - 2016-06-06 12:18 - 00061088 _____ C:\WINDOWS\system32\BMXState-{00000004-00000000-00000000-00001102-00000005-00291102}.rfx
2016-06-01 18:09 - 2016-06-06 12:18 - 00000788 _____ C:\WINDOWS\system32\DVCState-{00000004-00000000-00000000-00001102-00000005-00291102}.rfx
2016-06-01 18:09 - 2016-06-01 18:09 - 00000000 ____D C:\NVIDIA
2016-06-01 16:25 - 2016-06-01 17:34 - 00001080 _____ C:\WINDOWS\system32\settingsbkup.sfm
2016-06-01 16:25 - 2016-06-01 17:34 - 00001080 _____ C:\WINDOWS\system32\settings.sfm
2016-06-01 15:40 - 2016-06-01 15:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
2016-06-01 15:40 - 2016-06-01 15:40 - 00000000 ___HD C:\Program Files (x86)\Creative Installation Information
2016-06-01 15:40 - 2003-06-12 23:25 - 00007062 _____ C:\WINDOWS\SysWOW64\audiopid.vxd
2016-06-01 15:39 - 2016-06-01 15:48 - 00000000 ____D C:\ProgramData\Creative
2016-06-01 15:39 - 2016-06-01 15:40 - 00000000 ____D C:\Program Files\Creative
2016-06-01 15:39 - 2016-06-01 15:39 - 00000159 ___RH C:\WINDOWS\ctfile.rfc
2016-06-01 15:39 - 2009-03-26 14:48 - 00190976 _____ C:\WINDOWS\system32\APOMgr64.DLL
2016-06-01 15:39 - 2009-03-26 14:46 - 00148480 _____ C:\WINDOWS\SysWOW64\APOMngr.DLL
2016-06-01 15:39 - 2009-02-06 18:53 - 00089088 _____ C:\WINDOWS\system32\CmdRtr64.DLL
2016-06-01 15:39 - 2009-02-06 18:52 - 00073728 _____ C:\WINDOWS\SysWOW64\CmdRtr.DLL
2016-06-01 15:38 - 2016-06-01 18:22 - 00000000 ____D C:\Program Files (x86)\Creative
2016-06-01 15:38 - 2006-06-09 15:20 - 00003072 _____ () C:\WINDOWS\SysWOW64\CTXFIGER.DLL
2016-06-01 15:38 - 2006-06-09 15:20 - 00003072 _____ () C:\WINDOWS\system32\CTXFIGER.DLL
2016-06-01 15:38 - 2004-07-30 14:46 - 00020480 _____ (Creative Technology Limited) C:\WINDOWS\SysWOW64\INRESGER.DLL
2016-06-01 15:38 - 2004-07-30 14:46 - 00020480 _____ (Creative Technology Limited) C:\WINDOWS\system32\INRESGER.DLL
2016-06-01 15:33 - 2016-06-01 15:52 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-06-01 15:08 - 2016-06-01 15:08 - 00000471 _____ C:\Users\Public\Desktop\DiRT Rally.lnk
2016-06-01 15:08 - 2016-06-01 15:08 - 00000471 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiRT Rally.lnk
2016-06-01 15:06 - 2016-06-01 15:06 - 00000901 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2016-06-01 15:06 - 2016-06-01 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2016-06-01 13:27 - 2016-06-01 15:37 - 00000000 ____D C:\Users\rush_\AppData\Roaming\Origin
2016-06-01 13:27 - 2016-06-01 13:28 - 00000000 ____D C:\Users\rush_\AppData\Local\Origin
2016-06-01 13:25 - 2016-06-06 12:18 - 00000000 ____D C:\ProgramData\Origin
2016-06-01 13:25 - 2016-06-04 15:41 - 00000000 ____D C:\ProgramData\Package Cache
2016-06-01 13:25 - 2016-06-01 13:25 - 00000756 _____ C:\Users\Public\Desktop\Origin.lnk
2016-06-01 13:25 - 2016-06-01 13:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2016-06-01 13:25 - 2016-06-01 13:25 - 00000000 ____D C:\ProgramData\Electronic Arts
2016-05-31 21:04 - 2016-05-31 21:04 - 02466968 _____ (Logitech, Inc.) C:\WINDOWS\system32\LdaCx2.dll
2016-05-31 14:36 - 2016-06-06 12:31 - 00000000 ____D C:\Users\rush_\AppData\Roaming\TS3Client
2016-05-31 14:35 - 2016-05-31 14:35 - 00000877 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2016-05-31 14:35 - 2016-05-31 14:35 - 00000827 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2016-05-30 23:08 - 2016-05-30 23:08 - 00000191 _____ C:\Users\rush_\Desktop\Schwab Online Shop - Mode, Möbel und Technik kaufen.url
2016-05-30 23:08 - 2016-05-30 23:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of the Storm
2016-05-30 23:06 - 2016-06-04 20:59 - 00000000 ____D C:\Users\rush_\Documents\My Games
2016-05-30 22:56 - 2016-06-01 21:17 - 00000000 ____D C:\Users\rush_\Documents\Heroes of the Storm
2016-05-30 22:52 - 2016-06-06 02:36 - 00000000 ____D C:\Users\rush_\AppData\Local\Battle.net
2016-05-30 22:52 - 2016-06-01 21:17 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2016-05-30 22:52 - 2016-05-30 22:52 - 00000871 _____ C:\Users\Public\Desktop\Battle.net.lnk
2016-05-30 22:52 - 2016-05-30 22:52 - 00000000 ____D C:\Users\rush_\AppData\Local\Blizzard Entertainment
2016-05-30 22:52 - 2016-05-30 22:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2016-05-30 22:49 - 2016-05-30 22:55 - 00000000 ____D C:\Users\rush_\AppData\Roaming\Battle.net
2016-05-30 22:49 - 2016-05-30 22:49 - 00000000 ____D C:\ProgramData\Battle.net
2016-05-29 23:55 - 2016-05-29 23:55 - 00004381 _____ C:\WINDOWS\diagwrn.xml
2016-05-29 23:55 - 2016-05-29 23:55 - 00002515 _____ C:\WINDOWS\diagerr.xml
2016-05-29 23:55 - 2016-05-29 23:55 - 00000000 ___HD C:\$Windows.~WS
2016-05-29 23:53 - 2016-05-29 23:53 - 00000000 ____D C:\$WINDOWS.~BT
2016-05-29 23:52 - 2016-05-29 23:52 - 00000731 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 10-Upgrade-Assistent.lnk
2016-05-29 23:52 - 2016-05-29 23:52 - 00000000 ____D C:\Windows10Upgrade
2016-05-25 09:50 - 2016-05-25 09:51 - 00000000 ____D C:\Users\rush_\AppData\Roaming\GHISLER
2016-05-25 09:50 - 2016-05-25 09:50 - 00000632 _____ C:\Users\rush_\Desktop\Total Commander 64 bit.lnk
2016-05-25 09:50 - 2016-05-25 09:50 - 00000000 ____D C:\Users\rush_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2016-05-24 11:37 - 2016-05-24 11:37 - 00025884 _____ C:\Users\rush_\Desktop\Otelo-Kuendigung.pdf
2016-05-20 23:13 - 2016-05-31 21:05 - 03941528 _____ (Logitech, Inc.) C:\WINDOWS\system32\LogiLDA.DLL
2016-05-17 13:12 - 2016-05-18 15:43 - 00000000 ____D C:\Users\rush_\AppData\Roaming\TeamViewer
2016-05-17 13:12 - 2016-05-17 13:12 - 00000796 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
2016-05-17 13:12 - 2016-05-17 13:12 - 00000796 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
2016-05-11 06:33 - 2016-06-03 09:39 - 00005358 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for DESKTOP-K0PFM97-rush_ DESKTOP-K0PFM97
2016-05-11 06:24 - 2016-04-23 06:26 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-05-11 06:24 - 2016-04-23 06:25 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-05-11 06:24 - 2016-04-23 06:18 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-05-11 06:24 - 2016-04-23 06:16 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-05-11 06:23 - 2016-05-06 06:53 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdport.sys
2016-05-11 06:23 - 2016-05-06 06:03 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-05-11 06:23 - 2016-05-06 05:53 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2016-05-11 06:23 - 2016-05-06 05:49 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2016-05-11 06:23 - 2016-05-06 05:44 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2016-05-11 06:23 - 2016-05-06 05:23 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2016-05-11 06:23 - 2016-04-30 08:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-05-11 06:23 - 2016-04-30 08:31 - 03591168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-05-11 06:23 - 2016-04-23 08:12 - 01401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-05-11 06:23 - 2016-04-23 08:12 - 01184960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-05-11 06:23 - 2016-04-23 08:12 - 00713920 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-05-11 06:23 - 2016-04-23 08:12 - 00514752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-05-11 06:23 - 2016-04-23 08:12 - 00294592 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-05-11 06:23 - 2016-04-23 08:12 - 00190144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-05-11 06:23 - 2016-04-23 08:12 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-05-11 06:23 - 2016-04-23 08:12 - 00046784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-05-11 06:23 - 2016-04-23 07:28 - 01557768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-05-11 06:23 - 2016-04-23 07:28 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-05-11 06:23 - 2016-04-23 07:26 - 00707608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2016-05-11 06:23 - 2016-04-23 07:24 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-05-11 06:23 - 2016-04-23 07:24 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-05-11 06:23 - 2016-04-23 07:24 - 01819208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-05-11 06:23 - 2016-04-23 07:24 - 00754664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2016-05-11 06:23 - 2016-04-23 07:24 - 00638816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2016-05-11 06:23 - 2016-04-23 07:24 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2016-05-11 06:23 - 2016-04-23 07:22 - 01161120 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2016-05-11 06:23 - 2016-04-23 07:13 - 00306832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2016-05-11 06:23 - 2016-04-23 07:12 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-05-11 06:23 - 2016-04-23 07:12 - 00451928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-05-11 06:23 - 2016-04-23 07:12 - 00413536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2016-05-11 06:23 - 2016-04-23 07:11 - 01092464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-05-11 06:23 - 2016-04-23 07:11 - 00498960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-05-11 06:23 - 2016-04-23 07:11 - 00390496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-05-11 06:23 - 2016-04-23 07:10 - 03673424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-05-11 06:23 - 2016-04-23 07:10 - 02919832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-05-11 06:23 - 2016-04-23 07:10 - 00330072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-05-11 06:23 - 2016-04-23 07:09 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-05-11 06:23 - 2016-04-23 07:09 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-05-11 06:23 - 2016-04-23 07:09 - 05240960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-05-11 06:23 - 2016-04-23 07:09 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-05-11 06:23 - 2016-04-23 07:09 - 00569744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2016-05-11 06:23 - 2016-04-23 07:09 - 00565600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-05-11 06:23 - 2016-04-23 07:09 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-05-11 06:23 - 2016-04-23 07:09 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-05-11 06:23 - 2016-04-23 07:09 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-05-11 06:23 - 2016-04-23 07:08 - 06605504 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-05-11 06:23 - 2016-04-23 07:08 - 04515256 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-05-11 06:23 - 2016-04-23 07:08 - 00725776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2016-05-11 06:23 - 2016-04-23 07:07 - 01848072 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2016-05-11 06:23 - 2016-04-23 07:07 - 01536088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2016-05-11 06:23 - 2016-04-23 07:07 - 00204048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2016-05-11 06:23 - 2016-04-23 07:07 - 00183904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2016-05-11 06:23 - 2016-04-23 07:06 - 00291360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2016-05-11 06:23 - 2016-04-23 07:02 - 00188256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-05-11 06:23 - 2016-04-23 07:01 - 01996640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-05-11 06:23 - 2016-04-23 07:01 - 00650304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-05-11 06:23 - 2016-04-23 07:01 - 00619296 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll
2016-05-11 06:23 - 2016-04-23 07:01 - 00577368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-05-11 06:23 - 2016-04-23 07:01 - 00522176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2016-05-11 06:23 - 2016-04-23 07:01 - 00513368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll
2016-05-11 06:23 - 2016-04-23 07:01 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-05-11 06:23 - 2016-04-23 07:01 - 00217440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2016-05-11 06:23 - 2016-04-23 07:00 - 01776768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-05-11 06:23 - 2016-04-23 07:00 - 01594920 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-05-11 06:23 - 2016-04-23 07:00 - 01522152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2016-05-11 06:23 - 2016-04-23 07:00 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-05-11 06:23 - 2016-04-23 07:00 - 01372304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-05-11 06:23 - 2016-04-23 07:00 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-05-11 06:23 - 2016-04-23 07:00 - 00550656 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll
2016-05-11 06:23 - 2016-04-23 07:00 - 00453472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll
2016-05-11 06:23 - 2016-04-23 07:00 - 00058208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwminit.dll
2016-05-11 06:23 - 2016-04-23 06:56 - 00534872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2016-05-11 06:23 - 2016-04-23 06:39 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-05-11 06:23 - 2016-04-23 06:35 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-05-11 06:23 - 2016-04-23 06:32 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-05-11 06:23 - 2016-04-23 06:32 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-05-11 06:23 - 2016-04-23 06:31 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-05-11 06:23 - 2016-04-23 06:31 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-05-11 06:23 - 2016-04-23 06:30 - 22379008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-05-11 06:23 - 2016-04-23 06:30 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-05-11 06:23 - 2016-04-23 06:30 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-05-11 06:23 - 2016-04-23 06:29 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-05-11 06:23 - 2016-04-23 06:29 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-05-11 06:23 - 2016-04-23 06:28 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-05-11 06:23 - 2016-04-23 06:28 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2016-05-11 06:23 - 2016-04-23 06:28 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2016-05-11 06:23 - 2016-04-23 06:26 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-05-11 06:23 - 2016-04-23 06:25 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-05-11 06:23 - 2016-04-23 06:25 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-05-11 06:23 - 2016-04-23 06:25 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2016-05-11 06:23 - 2016-04-23 06:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-05-11 06:23 - 2016-04-23 06:24 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-05-11 06:23 - 2016-04-23 06:24 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-05-11 06:23 - 2016-04-23 06:24 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2016-05-11 06:23 - 2016-04-23 06:24 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
2016-05-11 06:23 - 2016-04-23 06:23 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-05-11 06:23 - 2016-04-23 06:23 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2016-05-11 06:23 - 2016-04-23 06:22 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-05-11 06:23 - 2016-04-23 06:22 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-05-11 06:23 - 2016-04-23 06:21 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-05-11 06:23 - 2016-04-23 06:21 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-05-11 06:23 - 2016-04-23 06:20 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-05-11 06:23 - 2016-04-23 06:20 - 18676224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-05-11 06:23 - 2016-04-23 06:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-05-11 06:23 - 2016-04-23 06:20 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2016-05-11 06:23 - 2016-04-23 06:20 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-05-11 06:23 - 2016-04-23 06:20 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2016-05-11 06:23 - 2016-04-23 06:20 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-05-11 06:23 - 2016-04-23 06:20 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2016-05-11 06:23 - 2016-04-23 06:19 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-05-11 06:23 - 2016-04-23 06:19 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-05-11 06:23 - 2016-04-23 06:19 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-05-11 06:23 - 2016-04-23 06:19 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-05-11 06:23 - 2016-04-23 06:19 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-05-11 06:23 - 2016-04-23 06:18 - 24604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-05-11 06:23 - 2016-04-23 06:18 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-05-11 06:23 - 2016-04-23 06:18 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-05-11 06:23 - 2016-04-23 06:18 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-05-11 06:23 - 2016-04-23 06:18 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-05-11 06:23 - 2016-04-23 06:18 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-05-11 06:23 - 2016-04-23 06:18 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-05-11 06:23 - 2016-04-23 06:18 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-05-11 06:23 - 2016-04-23 06:18 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-05-11 06:23 - 2016-04-23 06:18 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-05-11 06:23 - 2016-04-23 06:17 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-05-11 06:23 - 2016-04-23 06:17 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-05-11 06:23 - 2016-04-23 06:17 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-05-11 06:23 - 2016-04-23 06:16 - 01319424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-05-11 06:23 - 2016-04-23 06:16 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-05-11 06:23 - 2016-04-23 06:15 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-05-11 06:23 - 2016-04-23 06:15 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-05-11 06:23 - 2016-04-23 06:15 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-05-11 06:23 - 2016-04-23 06:15 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-05-11 06:23 - 2016-04-23 06:15 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-05-11 06:23 - 2016-04-23 06:15 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-05-11 06:23 - 2016-04-23 06:15 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-05-11 06:23 - 2016-04-23 06:14 - 13383168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-05-11 06:23 - 2016-04-23 06:14 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2016-05-11 06:23 - 2016-04-23 06:14 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2016-05-11 06:23 - 2016-04-23 06:14 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-05-11 06:23 - 2016-04-23 06:14 - 00647680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-05-11 06:23 - 2016-04-23 06:14 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-05-11 06:23 - 2016-04-23 06:14 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-05-11 06:23 - 2016-04-23 06:14 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-05-11 06:23 - 2016-04-23 06:13 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-05-11 06:23 - 2016-04-23 06:13 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-05-11 06:23 - 2016-04-23 06:13 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2016-05-11 06:23 - 2016-04-23 06:13 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-05-11 06:23 - 2016-04-23 06:13 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-05-11 06:23 - 2016-04-23 06:12 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-05-11 06:23 - 2016-04-23 06:10 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-05-11 06:23 - 2016-04-23 06:10 - 00639488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2016-05-11 06:23 - 2016-04-23 06:09 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-05-11 06:23 - 2016-04-23 06:09 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-05-11 06:23 - 2016-04-23 06:08 - 05324288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-05-11 06:23 - 2016-04-23 06:08 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-05-11 06:23 - 2016-04-23 06:07 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-05-11 06:23 - 2016-04-23 06:07 - 02598912 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-05-11 06:23 - 2016-04-23 06:07 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-05-11 06:23 - 2016-04-23 06:07 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-05-11 06:23 - 2016-04-23 06:06 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-05-11 06:23 - 2016-04-23 06:05 - 05502976 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-05-11 06:23 - 2016-04-23 06:05 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-05-11 06:23 - 2016-04-23 06:05 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-05-11 06:23 - 2016-04-23 06:05 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-05-11 06:23 - 2016-04-23 06:05 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-05-11 06:23 - 2016-04-23 06:05 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-05-11 06:23 - 2016-04-23 06:04 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-05-11 06:23 - 2016-04-23 06:04 - 01731072 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-05-11 06:23 - 2016-04-23 06:03 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-05-11 06:23 - 2016-04-23 06:03 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-05-11 06:23 - 2016-04-23 06:03 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-05-11 06:23 - 2016-04-23 06:03 - 02000896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-05-11 06:23 - 2016-04-23 06:03 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-05-11 06:23 - 2016-04-23 06:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-05-11 06:23 - 2016-04-23 06:02 - 07832576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-05-11 06:23 - 2016-04-23 06:02 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-05-11 06:23 - 2016-04-23 06:01 - 04775424 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2016-05-11 06:23 - 2016-04-23 06:00 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-05-11 06:23 - 2016-04-23 06:00 - 00984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-05-11 06:23 - 2016-04-23 05:45 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2016-05-11 06:23 - 2016-04-23 04:10 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-05-11 06:22 - 2016-05-06 06:05 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-05-11 06:22 - 2016-05-06 05:43 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2016-05-11 06:22 - 2016-04-23 07:24 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-05-11 06:22 - 2016-04-23 07:18 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-05-11 06:22 - 2016-04-23 07:13 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-05-11 06:22 - 2016-04-23 07:13 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-05-11 06:22 - 2016-04-23 07:11 - 00696672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-05-11 06:22 - 2016-04-23 07:11 - 00131424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufxsynopsys.sys
2016-05-11 06:22 - 2016-04-23 07:11 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-05-11 06:22 - 2016-04-23 06:34 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2016-05-11 06:22 - 2016-04-23 06:34 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll
2016-05-11 06:22 - 2016-04-23 06:34 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2016-05-11 06:22 - 2016-04-23 06:33 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-05-11 06:22 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
2016-05-11 06:22 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
2016-05-11 06:22 - 2016-04-23 06:33 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe
2016-05-11 06:22 - 2016-04-23 06:32 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2016-05-11 06:22 - 2016-04-23 06:29 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-05-11 06:22 - 2016-04-23 06:29 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2016-05-11 06:22 - 2016-04-23 06:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\filecrypt.sys
2016-05-11 06:22 - 2016-04-23 06:29 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll
2016-05-11 06:22 - 2016-04-23 06:29 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe
2016-05-11 06:22 - 2016-04-23 06:29 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2016-05-11 06:22 - 2016-04-23 06:28 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2016-05-11 06:22 - 2016-04-23 06:28 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-05-11 06:22 - 2016-04-23 06:28 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll
2016-05-11 06:22 - 2016-04-23 06:27 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-05-11 06:22 - 2016-04-23 06:27 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2016-05-11 06:22 - 2016-04-23 06:26 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2016-05-11 06:22 - 2016-04-23 06:25 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-05-11 06:22 - 2016-04-23 06:24 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-05-11 06:22 - 2016-04-23 06:24 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
2016-05-11 06:22 - 2016-04-23 06:23 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-05-11 06:22 - 2016-04-23 06:23 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrowserSettingSync.dll
2016-05-11 06:22 - 2016-04-23 06:23 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2016-05-11 06:22 - 2016-04-23 06:22 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2016-05-11 06:22 - 2016-04-23 06:19 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2016-05-11 06:22 - 2016-04-23 06:19 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BrowserSettingSync.dll
2016-05-11 06:22 - 2016-04-23 06:18 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-05-11 06:22 - 2016-04-23 06:18 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2016-05-11 06:22 - 2016-04-23 06:17 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2016-05-11 06:22 - 2016-04-23 06:05 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-05-11 06:22 - 2016-04-23 06:05 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-05-11 06:22 - 2016-04-23 06:03 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2016-05-11 06:22 - 2016-04-23 04:10 - 00002186 _____ C:\WINDOWS\system32\AppxProvisioning.xml
2016-05-11 06:22 - 2016-04-19 00:30 - 00002186 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml
2016-05-11 02:53 - 2016-05-11 02:53 - 00000000 ____D C:\Users\rush_\AppData\Local\Disc_Soft_Ltd
2016-05-11 02:50 - 2016-05-11 02:50 - 00000000 ____D C:\Users\rush_\AppData\LocalLow\Adobe
2016-05-11 02:46 - 2016-06-03 00:26 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-05-11 02:46 - 2016-05-11 02:46 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-05-11 02:45 - 2016-05-11 02:51 - 00000000 ____D C:\Users\rush_\AppData\Local\Adobe
2016-05-11 02:45 - 2016-05-11 02:51 - 00000000 ____D C:\ProgramData\Adobe
2016-05-11 02:45 - 2016-05-11 02:45 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-05-11 02:39 - 2016-05-11 02:39 - 00000000 ____D C:\Users\rush_\Documents\Benutzerdefinierte Office-Vorlagen
2016-05-11 02:33 - 2016-06-04 12:31 - 00003808 _____ C:\WINDOWS\System32\Tasks\AutoKMS
2016-05-11 02:33 - 2016-05-11 06:02 - 00000000 ____D C:\WINDOWS\AutoKMS
2016-05-11 02:32 - 2016-05-11 02:32 - 00000000 ____D C:\ProgramData\Microsoft Toolkit
2016-05-11 02:31 - 2016-05-11 02:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-05-11 02:30 - 2016-05-11 02:30 - 00000000 ____D C:\WINDOWS\PCHEALTH
2016-05-11 02:30 - 2016-05-11 02:30 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2016-05-11 02:30 - 2016-05-11 02:30 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-05-11 02:30 - 2016-05-11 02:30 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2016-05-11 02:29 - 2016-05-11 02:29 - 00000000 ____D C:\Users\rush_\AppData\Local\Microsoft Help
2016-05-11 02:29 - 2016-05-11 02:29 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2016-05-11 02:29 - 2016-05-11 02:29 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-05-11 02:29 - 2016-05-11 02:29 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2016-05-11 02:25 - 2016-05-11 02:25 - 00000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2016-05-11 02:24 - 2016-05-11 02:27 - 00000000 ____D C:\Users\rush_\AppData\Roaming\DAEMON Tools Lite
2016-05-11 02:24 - 2016-05-11 02:24 - 00047672 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtliteusbbus.sys
2016-05-11 02:24 - 2016-05-11 02:24 - 00030264 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtlitescsibus.sys
2016-05-11 02:24 - 2016-05-11 02:24 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2016-05-11 02:23 - 2016-05-11 02:23 - 00692072 _____ (Disc Soft Ltd.) C:\Users\rush_\Downloads\DTLiteInstaller.exe
2016-05-10 00:31 - 2016-05-10 00:31 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-05-09 19:52 - 2016-05-09 19:52 - 00000000 ____D C:\Users\rush_\AppData\Roaming\Samsung
2016-05-09 19:51 - 2016-05-09 19:51 - 00199192 _____ C:\Users\rush_\Downloads\DHL_label_2016-5-9_10-52-16.pdf
2016-05-09 19:51 - 2016-05-09 19:51 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers
2016-05-09 19:50 - 2016-05-09 19:50 - 00000000 ____D C:\Program Files (x86)\Samsung
2016-05-09 19:50 - 2015-09-14 07:09 - 02073600 ____N C:\WINDOWS\SysWOW64\DlgSearchEngine.dll
2016-05-09 19:50 - 2015-03-12 04:43 - 00158016 _____ C:\WINDOWS\system32\us003ci.exe
2016-05-09 19:50 - 2015-03-12 04:43 - 00089600 _____ (SS) C:\WINDOWS\system32\us003ci.dll
2016-05-09 19:50 - 2015-03-12 04:43 - 00022528 _____ () C:\WINDOWS\system32\us003lm.dll
2016-05-09 19:49 - 2016-05-09 19:49 - 25121584 _____ C:\Users\rush_\Downloads\SamsungUniversalPrintDriver3.exe
2016-05-09 19:49 - 2016-05-09 19:49 - 00000000 ____D C:\ProgramData\Samsung
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-06-06 12:18 - 2016-04-30 07:12 - 00000000 ____D C:\Users\rush_\AppData\Roaming\Spotify
2016-06-06 12:17 - 2016-04-30 07:13 - 00000000 ____D C:\Users\rush_\AppData\Local\Spotify
2016-06-06 12:15 - 2016-04-30 05:30 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-06-06 10:21 - 2016-04-30 06:58 - 00000000 ____D C:\Users\rush_
2016-06-05 20:03 - 2016-04-30 05:35 - 01799166 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-06-05 20:03 - 2016-04-29 21:16 - 00775524 _____ C:\WINDOWS\system32\perfh007.dat
2016-06-05 20:03 - 2016-04-29 21:16 - 00155338 _____ C:\WINDOWS\system32\perfc007.dat
2016-06-05 20:03 - 2016-04-29 21:10 - 00000000 ____D C:\WINDOWS\INF
2016-06-05 19:54 - 2016-04-30 08:18 - 00000000 ____D C:\Users\rush_\AppData\Roaming\vlc
2016-06-05 14:24 - 2016-04-29 21:11 - 00000000 ___HD C:\Program Files\WindowsApps
2016-06-05 14:24 - 2016-04-29 21:11 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-06-04 14:48 - 2016-04-29 21:04 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2016-06-04 14:43 - 2016-04-30 07:43 - 00000302 _____ C:\WINDOWS\Tasks\{46678FB0-9F52-8338-E82F-2C35B4A7DEDC}.job
2016-06-04 14:19 - 2016-04-30 07:09 - 00001150 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-06-04 12:27 - 2016-04-30 07:59 - 00004168 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{34C35238-F3AC-42E8-A344-380A0E3ED0C6}
2016-06-04 12:25 - 2016-04-30 07:09 - 00001146 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-06-03 22:29 - 2016-04-29 21:06 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-06-03 19:45 - 2016-04-30 06:59 - 00000000 ____D C:\Users\rush_\AppData\Local\Packages
2016-06-03 19:23 - 2016-04-30 07:43 - 00000306 __RSH C:\ProgramData\ntuser.pol
2016-06-03 19:21 - 2016-04-30 05:22 - 00284840 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-06-03 19:20 - 2016-04-29 21:11 - 00000000 ____D C:\WINDOWS\L2Schemas
2016-06-03 18:30 - 2016-04-30 07:17 - 00000000 ____D C:\Users\rush_\AppData\Roaming\Mozilla
2016-06-03 11:59 - 2016-04-29 21:11 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2016-06-03 11:59 - 2016-04-29 21:11 - 00000000 ____D C:\WINDOWS\system32\MUI
2016-06-02 09:43 - 2016-05-04 03:43 - 00000213 _____ C:\Users\rush_\AppData\Roaming\WB.CFG
2016-06-01 20:44 - 2016-04-30 07:02 - 00002383 _____ C:\Users\rush_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-06-01 20:44 - 2016-04-30 07:02 - 00000000 ___RD C:\Users\rush_\OneDrive
2016-06-01 18:22 - 2016-04-29 21:11 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2016-06-01 18:12 - 2016-04-29 21:11 - 00000000 ____D C:\WINDOWS\Help
2016-06-01 17:34 - 2016-04-30 06:00 - 00061352 _____ C:\WINDOWS\system32\BMXStateBkp-{00000003-00000000-00000000-00001102-00000005-00291102}.rfx
2016-06-01 17:34 - 2016-04-30 06:00 - 00061352 _____ C:\WINDOWS\system32\BMXState-{00000003-00000000-00000000-00001102-00000005-00291102}.rfx
2016-06-01 17:34 - 2016-04-30 06:00 - 00000788 _____ C:\WINDOWS\system32\DVCState-{00000003-00000000-00000000-00001102-00000005-00291102}.rfx
2016-06-01 15:39 - 2016-04-30 05:26 - 00466520 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll
2016-06-01 15:39 - 2016-04-30 05:26 - 00445016 _____ (Creative Labs) C:\WINDOWS\SysWOW64\wrap_oal.dll
2016-06-01 15:39 - 2016-04-30 05:26 - 00123480 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\OpenAL32.dll
2016-06-01 15:39 - 2016-04-30 05:26 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\SysWOW64\OpenAL32.dll
2016-06-01 15:39 - 2016-04-30 05:24 - 00000000 ____D C:\WINDOWS\system32\data
2016-06-01 15:38 - 2016-04-30 05:24 - 00000000 ____D C:\WINDOWS\SysWOW64\data
2016-06-01 13:25 - 2016-04-29 21:11 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-05-29 23:55 - 2016-04-29 21:18 - 00000000 ___DC C:\WINDOWS\Panther
2016-05-22 23:02 - 2015-11-10 03:15 - 13509184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2016-05-21 23:09 - 2015-11-10 03:14 - 00141256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2016-05-20 10:03 - 2015-11-10 01:12 - 00040084 _____ C:\WINDOWS\system32\nvinfo.pb
2016-05-17 13:20 - 2016-04-30 07:10 - 00002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-17 13:20 - 2016-04-30 07:10 - 00002252 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-05-15 21:52 - 2016-04-30 06:59 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-05-12 12:55 - 2016-04-29 21:11 - 00000000 ____D C:\WINDOWS\rescache
2016-05-12 12:31 - 2016-04-29 21:11 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-05-12 12:31 - 2016-04-29 21:11 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-05-12 12:31 - 2016-04-29 21:11 - 00000000 ____D C:\WINDOWS\Provisioning
2016-05-12 12:31 - 2016-04-29 21:11 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-05-12 12:31 - 2016-04-29 21:11 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-12 12:30 - 2016-04-29 21:11 - 00015703 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2016-05-11 21:57 - 2016-04-29 21:13 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-05-11 21:57 - 2016-04-29 21:13 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-11 18:14 - 2016-04-30 07:09 - 00004208 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-11 18:14 - 2016-04-30 07:09 - 00003976 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-11 06:36 - 2016-04-30 07:16 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-05-11 06:26 - 2016-04-30 07:15 - 139319312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-05-11 02:50 - 2016-04-30 06:59 - 00000000 ____D C:\Users\rush_\AppData\Roaming\Adobe
2016-05-11 02:30 - 2016-04-29 21:11 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-05-11 02:29 - 2016-04-29 21:11 - 00000000 ____D C:\WINDOWS\ShellNew
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-05-04 03:43 - 2016-06-02 09:43 - 0000213 _____ () C:\Users\rush_\AppData\Roaming\WB.CFG
2016-06-05 23:53 - 2016-06-05 23:53 - 0000141 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Windows\Tasks\{46678FB0-9F52-8338-E82F-2C35B4A7DEDC}.job
Einige Dateien in TEMP:
====================
C:\Users\rush_\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-05-25 10:09
==================== Ende von FRST.txt ============================ |