Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund) (https://www.trojaner-board.de/169622-windows-7-64-bit-betriebssystem-bluescreen-kein-ersichtlicher-grund.html)

MBB 11.08.2015 19:21

windows 7, 64 Bit-Betriebssystem: bluescreen (kein ersichtlicher Grund)
 
Liste der Anhänge anzeigen (Anzahl: 1)
Hallo,

mein Rechner friert unberechenbar ein und zeigt anschließend einen bluescreen:
Anhang 75483

Teilweise läuft der Rechner noch eine Stunde bevor der BSOD auftaucht.
Es waren bisher verschiedene bluescreens.
Beim Neustart kam auch schon die Meldung "no boot device found".

Da ich die Ursache nicht kenne habe ich folgende Schritte unternommen:

- Rechnergehäuse entstaubt
- Windows Update durchgeführt
- Java Update durchgeführt
- Windows Arbeitsspeicherdiagnosetool durchgeführt: keine Probleme
- Datenträgerprüfung durchgeführt: keine Probleme
- Windows im abgesicherten Modus gestartet und Avira Virenscan durchgeführt: nach einer Stunde - Abbruch durch freeze / bluescreen

FRST und GMER habe ich bereits runtergeladen und auf dem Desktop abgelegt.
Als ich aber FRST durchführen wollte kam die Meldung:
"Nicht genügend Systemressourcen, um den angeforderten Dienst auszuführen"
und zusätzlich der Sicherheitshinweis von Avira dass der Zugriff aufgrund eines unerwünschten Programms blockiert wurde.
In der Checkliste stand nicht explizit dass man den Scanner deaktivieren soll, daher war Avira noch aktiv.
Die weiteren Schritte der Checkliste habe ich daher erstmal nicht weiter durchgeführt.

Einen Avira Log kann ich dennoch anfügen:
Code:

Exportierte Ereignisse:

09.08.2015 22:12 [System-Scanner] Malware gefunden
      Die Datei 'C:\Program Files (x86)\Uninstall
      Information\ib_uninst_518\uninstall.exe'
      enthielt einen Virus oder unerwünschtes Programm 'PUA/InstallBrain.Gen5'
      [riskware].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '3aa70d0d.qua'
      verschoben!

09.08.2015 22:12 [System-Scanner] Malware gefunden
      Die Datei 'C:\Program Files (x86)\Uninstall
      Information\ib_uninst_519\uninstall.exe'
      enthielt einen Virus oder unerwünschtes Programm 'PUA/InstallBrain.Gen5'
      [riskware].
      Durchgeführte Aktion(en):
      Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '7f23203f.qua'
      verschoben!

09.08.2015 22:09 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Program Files (x86)\Uninstall
      Information\ib_uninst_518\uninstall.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/InstallBrain.Gen5' [riskware]
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

09.08.2015 22:09 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Program Files (x86)\Uninstall
      Information\ib_uninst_519\uninstall.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/InstallBrain.Gen5' [riskware]
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

04.08.2015 21:00 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Program Files (x86)\Uninstall
      Information\ib_uninst_518\uninstall.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/InstallBrain.Gen5' [riskware]
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

04.08.2015 21:00 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Program Files (x86)\Uninstall
      Information\ib_uninst_519\uninstall.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/InstallBrain.Gen5' [riskware]
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

04.08.2015 20:50 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Program Files (x86)\Uninstall
      Information\ib_uninst_518\uninstall.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/InstallBrain.Gen5' [riskware]
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

04.08.2015 20:50 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\Program Files (x86)\Uninstall
      Information\ib_uninst_519\uninstall.exe'
      wurde ein Virus oder unerwünschtes Programm 'PUA/InstallBrain.Gen5' [riskware]
      gefunden.
      Ausgeführte Aktion: Zugriff verweigern

Was kann ich tun?

Danke & Gruß,
MBB

schrauber 11.08.2015 20:01

Hi,

Rechner nochmal neu starten, Avira aus, dann FRST laufen lassen.

MBB 11.08.2015 20:17

Ok, ich muss separat posten.

Hier erstmal FRST:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:11-08-2015
durchgeführt von Fragster (Administrator) auf FRAGSTER-PC (11-08-2015 21:05:25)
Gestartet von C:\Users\Fragster\Desktop
Geladene Profile: Fragster (Verfügbare Profile: Fragster)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\System32\PnkBstrA.exe
(Wacom Technology, Corp.) C:\Windows\System32\Wacom_Tablet.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Wacom Technology, Corp.) C:\Windows\System32\WTablet\Wacom_TabletUser.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Wacom Technology, Corp.) C:\Windows\System32\Wacom_Tablet.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Akamai Technologies, Inc.) C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe
(Spotify Ltd) C:\Users\Fragster\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe
(Akamai Technologies, Inc.) C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Dropbox, Inc.) C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
() G:\Programme\Func Tastatur\KB-460_Core.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
() C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe
(NVIDIA Corporation) C:\Users\Fragster\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-05-30] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-06-07] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-04-18] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008 2015-07-30] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Func KB-460] => G:\Programme\Func Tastatur\KB-460_Core
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [134368 2015-07-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Steam] => "C:\Program Files (x86)\Steam\Steam.exe" -silent
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Google Update] => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-10-05] (Google Inc.)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Dropbox Update] => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-06] (Dropbox, Inc.)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Spotify Web Helper] => C:\Users\Fragster\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2020920 2015-05-08] (Spotify Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2012-08-26]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Netzwerk Server.lnk [2013-03-17]
ShortcutTarget: Netzwerk Server.lnk -> C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe (WIBU-SYSTEMS AG)
Startup: C:\Users\Fragster\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-03-30]
ShortcutTarget: Dropbox.lnk -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2049330118-253893184-3514707546-1000 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-08-11] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-11] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-08-11] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-11] (Oracle Corporation)
Toolbar: HKLM - Linkury Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
Toolbar: HKLM-x32 - Linkury Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll [2010-11-21] (Microsoft Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{4803DB8B-CB64-458F-8261-FEDB79E73BCE}: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Fragster\AppData\Roaming\Mozilla\Firefox\Profiles\uppe0zay.default-1409093548782
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-11] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-11] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2012-04-05] ()
FF Plugin-x32: @esn/esnlaunch,version=1.140.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.140.0\npesnlaunch.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-11] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-11] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll [2009-09-25] (Wacom, Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Fragster\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @talk.google.com/O1DPlugin -> C:\Users\Fragster\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Fragster\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-05-07] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll [2012-10-30] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2014-06-16] ()
FF Plugin ProgramFiles/Appdata: C:\Users\Fragster\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Fragster\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Extension: Adblock Plus - C:\Users\Fragster\AppData\Roaming\Mozilla\Firefox\Profiles\uppe0zay.default-1409093548782\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-29]
FF Extension: Kein Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-08-09]
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff

Chrome:
=======
CHR Profile: C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-02]
CHR Extension: (Google Docs) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-02]
CHR Extension: (Google Drive) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-02]
CHR Extension: (YouTube) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-02]
CHR Extension: (Google Search) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-02]
CHR Extension: (Savings Sidekick) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo [2015-04-02]
CHR Extension: (Google Sheets) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-02]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-02]
CHR Extension: (Gmail) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-02]
CHR HKLM-x32\...\Chrome\Extension: [dhdepfaagokllfmhfbcfmocaeigmoebo] - C:\Users\Fragster\AppData\Local\Savings Sidekick\Chrome\Savings Sidekick.crx [2012-06-15]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S4 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-07-30] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-07-30] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-07-30] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-07-30] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [218816 2015-07-02] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2012-05-15] (Macrovision Europe Ltd.) [Datei ist nicht signiert]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [289256 2015-06-26] (McAfee, Inc.)
S3 mi-raysat_3dsmax2015_64; G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe [86016 2011-09-15] () [Datei ist nicht signiert]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-07-27] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-07-21] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-01-02] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
R2 TabletServiceWacom; C:\Windows\system32\Wacom_Tablet.exe [6245744 2010-03-09] (Wacom Technology, Corp.)
S4 TomTomHOMEService; G:\Programme\TomTom HOME 2\TomTomHOMEService.exe [93040 2014-06-05] (TomTom)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162528 2015-07-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-07-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-12] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-10-28] (DT Soft Ltd)
R3 I1KBFLTR; C:\Windows\System32\drivers\I1KBFLTR.sys [29440 2013-07-31] ()
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [106760 2015-05-09] (WIBU-SYSTEMS AG)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-11 21:05 - 2015-08-11 21:05 - 00028727 _____ C:\Users\Fragster\Desktop\FRST.txt
2015-08-11 21:05 - 2015-08-11 21:05 - 00000000 ____D C:\Users\Fragster\Desktop\FRST-OlderVersion
2015-08-11 21:05 - 2015-08-11 21:05 - 00000000 ____D C:\FRST
2015-08-11 20:01 - 2015-08-11 20:09 - 00001111 _____ C:\Users\Fragster\Desktop\Neues Textdokument.txt
2015-08-11 19:07 - 2015-08-11 19:07 - 00380416 _____ C:\Users\Fragster\Desktop\Gmer-19357.exe
2015-08-11 19:04 - 2015-08-11 21:05 - 02172416 _____ (Farbar) C:\Users\Fragster\Desktop\FRST64.exe
2015-08-11 19:01 - 2015-08-11 19:01 - 00005312 _____ C:\Users\Fragster\Desktop\Avira_Ereignisse.txt
2015-08-09 22:18 - 2015-08-10 19:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-09 21:59 - 2015-06-11 19:57 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-08-09 21:59 - 2015-06-11 19:57 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-08-09 21:59 - 2015-06-11 19:57 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-08-09 21:59 - 2015-06-11 19:56 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-09 21:59 - 2015-06-11 19:56 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-08-09 21:59 - 2015-06-11 19:56 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-08-09 21:59 - 2015-06-11 15:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2015-08-09 21:59 - 2015-06-09 20:03 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-08-09 21:59 - 2015-06-09 20:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-08-09 21:59 - 2015-06-03 22:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-08-09 21:58 - 2014-12-11 19:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-08-04 20:35 - 2015-08-04 20:35 - 00000000 ____D C:\Users\Fragster\AppData\Local\GWX
2015-08-03 19:19 - 2015-08-03 19:21 - 00000000 ___SD C:\Windows\system32\GWX
2015-08-03 19:19 - 2015-08-03 19:19 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-08-03 19:19 - 2015-08-03 19:19 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-03 19:19 - 2015-08-03 19:19 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-03 19:18 - 2015-01-09 01:44 - 00419936 _____ C:\Windows\SysWOW64\locale.nls
2015-08-03 19:18 - 2015-01-09 01:43 - 00419936 _____ C:\Windows\system32\locale.nls
2015-08-03 19:17 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2015-08-03 19:17 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-08-03 19:17 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-08-03 19:17 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2015-08-03 19:17 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2015-08-03 19:17 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2015-08-03 19:17 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2015-08-03 19:17 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2015-08-03 19:17 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-08-03 19:17 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2015-08-03 19:16 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-08-03 19:16 - 2012-08-23 16:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2015-08-03 19:16 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2015-08-03 19:16 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2015-08-03 19:14 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-08-03 19:14 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2015-08-03 19:13 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-08-03 19:13 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-08-03 19:13 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-08-03 19:13 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-03 19:13 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-03 19:13 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-08-03 19:13 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-08-03 19:13 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-08-03 19:13 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-08-03 19:13 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-08-03 19:13 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-08-03 19:13 - 2015-06-03 22:16 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-08-03 19:13 - 2015-06-03 22:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-08-03 19:13 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-03 19:13 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-08-03 19:13 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-08-03 19:13 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-03 19:13 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-08-03 19:13 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-08-03 19:13 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-08-03 19:13 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-08-03 19:13 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-08-03 19:13 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-08-03 19:13 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-08-03 19:13 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-08-03 19:13 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-08-03 19:13 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-08-03 19:13 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-08-03 19:13 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-08-03 19:13 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-08-03 19:13 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-08-03 19:13 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-08-03 19:13 - 2015-03-14 05:21 - 01632768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-08-03 19:13 - 2015-03-14 05:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-08-03 19:13 - 2015-03-14 05:04 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-08-03 19:13 - 2015-03-14 05:04 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-08-03 19:13 - 2015-03-04 06:41 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-08-03 19:13 - 2015-03-04 06:41 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-08-03 19:13 - 2015-03-04 06:41 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-08-03 19:13 - 2015-03-04 06:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-08-03 19:13 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-08-03 19:13 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-08-03 19:13 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-08-03 19:13 - 2015-01-29 05:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-08-03 19:13 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-08-03 19:13 - 2015-01-09 05:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-08-03 19:13 - 2015-01-09 05:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-08-03 19:13 - 2015-01-09 05:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-08-03 19:13 - 2015-01-09 04:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-08-03 19:13 - 2014-11-26 05:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-08-03 19:13 - 2014-11-26 05:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-08-03 19:13 - 2014-11-11 03:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-08-03 19:13 - 2014-11-08 05:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-08-03 19:13 - 2014-11-08 04:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-08-03 19:13 - 2014-10-03 04:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-08-03 19:13 - 2014-10-03 03:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-08-03 19:13 - 2014-10-03 03:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2015-08-03 19:13 - 2014-10-03 03:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2015-08-03 19:13 - 2014-10-03 03:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2015-08-03 19:13 - 2014-10-03 03:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2015-08-03 19:13 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-08-03 19:13 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-08-03 19:13 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2015-08-03 19:13 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-08-03 19:13 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2015-08-03 19:13 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2015-08-03 19:13 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2015-08-03 19:13 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-08-03 19:13 - 2013-12-04 04:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2015-08-03 19:13 - 2013-12-04 04:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2015-08-03 19:13 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2015-08-03 19:13 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2015-08-03 19:13 - 2013-12-04 04:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2015-08-03 19:13 - 2013-12-04 04:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2015-08-03 19:13 - 2013-12-04 04:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2015-08-03 19:13 - 2013-12-04 04:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2015-08-03 19:13 - 2013-12-04 04:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2015-08-03 19:13 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2015-08-03 19:13 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2015-08-03 19:13 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2015-08-03 19:13 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2015-08-03 19:13 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2015-08-03 19:13 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2015-08-03 19:13 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2015-08-03 19:13 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2015-08-03 19:13 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2015-08-03 19:13 - 2013-10-30 04:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2015-08-03 19:13 - 2013-10-30 04:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2015-08-03 19:13 - 2013-10-04 04:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2015-08-03 19:13 - 2013-10-04 04:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2015-08-03 19:13 - 2013-10-04 03:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2015-08-03 19:13 - 2013-10-04 03:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2015-08-03 19:13 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2015-08-03 19:13 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2015-08-03 19:13 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2015-08-03 19:13 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-03 19:13 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-03 19:13 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-08-03 19:13 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-08-03 19:13 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2015-08-03 19:13 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2015-08-03 19:13 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2015-08-03 19:13 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2015-08-03 19:13 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2015-08-03 19:13 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2015-08-03 19:13 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2015-08-03 19:13 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2015-08-03 19:13 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2015-08-03 19:13 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2015-08-03 19:13 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2015-08-03 19:13 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2015-08-03 19:13 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2015-08-03 19:13 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2015-08-03 19:13 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2015-08-03 19:13 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2015-08-03 19:13 - 2012-10-03 18:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2015-08-03 19:13 - 2012-08-22 20:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-08-03 19:13 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2015-08-03 19:13 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2015-08-03 19:13 - 2012-01-04 12:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2015-08-03 19:13 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2015-08-03 19:13 - 2011-12-30 08:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2015-08-03 19:13 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2015-08-03 19:13 - 2011-06-16 07:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2015-08-03 19:13 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2015-08-03 19:13 - 2011-05-04 07:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2015-08-03 19:13 - 2011-05-04 07:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2015-08-03 19:13 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2015-08-03 19:13 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2015-08-03 19:13 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2015-08-03 19:13 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2015-08-03 19:13 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2015-08-03 19:13 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2015-08-03 19:13 - 2011-03-11 08:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2015-08-03 19:13 - 2011-03-11 08:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2015-08-03 19:13 - 2011-03-11 08:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2015-08-03 19:13 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2015-08-03 19:13 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2015-08-03 19:13 - 2011-03-11 06:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2015-08-03 19:12 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-08-03 19:12 - 2014-10-30 04:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-08-03 19:12 - 2014-10-30 03:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2015-08-03 19:12 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2015-08-03 19:12 - 2012-07-06 22:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2015-08-03 19:12 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2015-08-03 19:12 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2015-08-03 19:10 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2015-08-03 19:09 - 2015-05-09 20:26 - 00493504 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-03 19:06 - 2015-08-03 19:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2015-08-02 22:13 - 2015-08-02 22:13 - 00007192 ____N C:\bootsqm.dat
2015-07-29 08:19 - 2015-07-29 08:19 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-07-27 22:19 - 2015-07-27 22:19 - 00000000 ____D C:\Users\Fragster\AppData\Local\CEF
2015-07-27 19:07 - 2015-07-27 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-07-27 19:07 - 2015-07-27 19:07 - 00000000 ____D C:\Program Files\McAfee Security Scan
2015-07-27 00:30 - 2015-07-27 00:30 - 00000000 ____D C:\Users\Fragster\Desktop\Der kleine Bruder CD 1
2015-07-21 23:14 - 2015-08-04 21:17 - 00000000 ____D C:\Users\Public\Documents\Jagged Alliance - Back in Action
2015-07-21 21:55 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-21 21:55 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-21 21:55 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-21 21:55 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-21 21:55 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-21 21:55 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-21 21:55 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-21 21:55 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-21 21:55 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-21 21:55 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-16 12:24 - 2015-07-16 12:24 - 00001066 _____ C:\Users\Public\Desktop\VLC media player.lnk
2015-07-15 11:12 - 2015-07-15 11:12 - 00000796 _____ C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2015.lnk
2015-07-15 10:28 - 2015-07-15 10:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO Steuer-Sparbuch 2015
2015-07-15 10:18 - 2015-07-15 10:18 - 01038704 _____ (Amazon Services LLC) C:\Users\Fragster\Downloads\WISO_Steuer_Sparbuch_2015_Downloader.exe
2015-07-15 10:14 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 10:14 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 10:14 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 10:14 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 10:14 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 10:14 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 10:14 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 10:14 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 10:13 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 10:13 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 10:13 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 10:13 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 10:13 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 10:13 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 10:13 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 10:13 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 10:13 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 10:13 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 10:13 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 10:13 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 10:13 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 10:13 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 10:13 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 10:13 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 10:13 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 10:13 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 10:13 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 10:13 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 10:13 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 10:13 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 10:13 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 10:13 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-15 10:13 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 10:13 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-15 10:13 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-15 10:13 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-15 10:13 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-15 10:13 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-15 10:13 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 10:13 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 10:13 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 10:13 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-15 10:13 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 10:13 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-15 10:13 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 10:13 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 10:13 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 10:13 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 10:13 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 10:13 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 10:13 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 10:13 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 10:13 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 10:13 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 10:13 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 10:13 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 10:13 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 10:13 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 10:13 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 10:13 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 10:13 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 10:13 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 10:13 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 10:13 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 10:13 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 10:13 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 10:13 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 10:13 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 10:13 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-15 10:13 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 10:13 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-15 10:13 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-15 10:13 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 10:13 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-15 10:13 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 10:13 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 10:13 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 10:13 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-15 10:13 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-15 10:13 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 10:13 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 10:13 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 10:13 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 10:13 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-15 10:13 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 10:13 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-15 10:13 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 10:13 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 10:13 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 10:13 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 10:13 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 10:13 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 10:13 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 10:13 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-15 10:13 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-15 10:13 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 10:13 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 10:13 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-13 14:14 - 2015-07-13 14:14 - 01187520 _____ (Adobe Systems Incorporated) C:\Users\Fragster\Downloads\flashplayer18au_ha_install.exe

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-11 21:05 - 2015-06-06 14:07 - 00001236 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job
2015-08-11 21:03 - 2012-05-10 19:55 - 00000000 ___RD C:\Users\Fragster\Dropbox
2015-08-11 21:03 - 2012-05-10 19:53 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Dropbox
2015-08-11 21:02 - 2015-04-02 15:47 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-11 21:02 - 2012-12-22 14:38 - 00000408 _____ C:\Windows\Tasks\FreeFileViewerUpdateChecker.job
2015-08-11 21:02 - 2012-09-22 15:20 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\WTablet
2015-08-11 21:02 - 2012-03-30 22:56 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-11 21:02 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-11 21:02 - 2009-07-14 06:51 - 00282275 _____ C:\Windows\setupact.log
2015-08-11 20:27 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-11 20:27 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-11 20:12 - 2012-10-05 21:49 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job
2015-08-11 20:09 - 2015-04-02 15:47 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-11 19:56 - 2013-11-01 20:55 - 00000000 ____D C:\ProgramData\Oracle
2015-08-11 19:56 - 2012-03-31 17:01 - 00000000 ____D C:\Program Files (x86)\Java
2015-08-11 19:55 - 2013-11-01 20:55 - 00321632 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-08-11 19:55 - 2013-11-01 20:55 - 00206944 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-08-11 19:55 - 2013-11-01 20:55 - 00206432 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-08-11 19:55 - 2013-11-01 20:55 - 00110688 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-08-11 19:55 - 2013-11-01 20:55 - 00000000 ____D C:\Program Files\Java
2015-08-11 19:55 - 2011-04-12 09:43 - 00699416 _____ C:\Windows\system32\perfh007.dat
2015-08-11 19:55 - 2011-04-12 09:43 - 00149556 _____ C:\Windows\system32\perfc007.dat
2015-08-11 19:55 - 2009-07-14 07:13 - 01620110 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-11 19:54 - 2013-11-01 21:09 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-08-11 19:54 - 2013-11-01 20:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-11 19:51 - 2012-03-30 22:21 - 01401220 _____ C:\Windows\WindowsUpdate.log
2015-08-11 19:49 - 2012-03-30 22:56 - 00778440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-08-11 19:49 - 2012-03-30 22:56 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-11 19:49 - 2012-03-30 22:56 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-08-11 19:45 - 2013-02-11 22:14 - 00001978 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2015-08-10 20:03 - 2012-05-08 22:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-10 20:03 - 2010-11-21 05:47 - 00543278 _____ C:\Windows\PFRO.log
2015-08-04 20:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2015-08-03 19:21 - 2012-03-30 23:08 - 00066376 _____ C:\Users\Fragster\AppData\Local\GDIPFONTCACHEV1.DAT
2015-08-03 19:20 - 2009-07-14 06:45 - 05112912 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-03 19:20 - 2009-07-14 05:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-08-03 19:06 - 2012-07-09 12:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-08-02 16:05 - 2015-06-06 14:07 - 00001184 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job
2015-08-02 13:40 - 2012-12-22 14:38 - 00000000 ____D C:\Program Files (x86)\File Type Assistant
2015-07-31 22:28 - 2015-04-14 18:47 - 00000080 _____ C:\Users\Fragster\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2015-07-31 09:09 - 2015-07-11 23:42 - 00001120 _____ C:\Users\Public\Desktop\Avira.lnk
2015-07-31 09:09 - 2014-07-16 20:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-07-31 09:09 - 2013-10-11 19:31 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-30 08:35 - 2014-07-16 20:50 - 00162528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-07-30 08:35 - 2014-07-16 20:50 - 00141416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-07-27 22:17 - 2012-03-30 23:14 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Origin
2015-07-27 22:17 - 2012-03-30 23:13 - 00000000 ____D C:\ProgramData\Origin
2015-07-27 22:16 - 2012-03-30 23:13 - 00000000 ____D C:\Program Files (x86)\Origin
2015-07-27 20:13 - 2014-09-15 11:35 - 00000726 _____ C:\Windows\wiso.ini
2015-07-27 19:11 - 2014-09-15 15:15 - 00000000 ____D C:\Users\Fragster\Documents\Steuer-Sparbuch
2015-07-27 19:07 - 2012-08-26 16:53 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2015-07-27 15:41 - 2013-02-25 23:29 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Spotify
2015-07-27 15:41 - 2013-02-25 23:29 - 00000000 ____D C:\Users\Fragster\AppData\Local\Spotify
2015-07-21 23:13 - 2012-03-31 00:38 - 00725453 _____ C:\Windows\DirectX.log
2015-07-19 18:57 - 2013-05-22 22:11 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\vlc
2015-07-19 16:36 - 2012-04-01 19:38 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\dvdcss
2015-07-19 13:09 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-18 16:00 - 2015-06-06 14:07 - 00004216 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA
2015-07-18 16:00 - 2015-06-06 14:07 - 00003820 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core
2015-07-16 12:04 - 2015-04-02 15:47 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-16 12:04 - 2015-04-02 15:47 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-16 03:12 - 2012-10-05 21:49 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job
2015-07-16 03:07 - 2012-10-05 21:49 - 00004112 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA
2015-07-16 03:07 - 2012-10-05 21:49 - 00003716 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core
2015-07-15 17:54 - 2013-11-16 19:21 - 00000000 ____D C:\Windows\rescache
2015-07-15 17:07 - 2015-04-14 18:47 - 00000000 ____D C:\Program Files\Rockstar Games
2015-07-15 17:07 - 2014-08-18 19:36 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2015-07-15 11:25 - 2012-07-09 12:51 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-15 11:23 - 2013-08-15 12:46 - 00000000 ____D C:\Windows\system32\MRT
2015-07-15 11:12 - 2014-09-15 11:35 - 00000000 ____D C:\Users\Fragster\AppData\Local\Buhl
2015-07-15 10:56 - 2012-03-30 23:03 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Skype
2015-07-15 10:28 - 2014-02-26 01:17 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-07-13 16:07 - 2014-12-05 21:44 - 00000000 __SHD C:\Users\Fragster\AppData\Local\EmieBrowserModeList
2015-07-13 16:07 - 2014-05-09 21:33 - 00000000 __SHD C:\Users\Fragster\AppData\Local\EmieUserList
2015-07-13 16:07 - 2014-05-09 21:33 - 00000000 __SHD C:\Users\Fragster\AppData\Local\EmieSiteList
2015-07-13 14:17 - 2014-08-18 21:54 - 00000000 ____D C:\Users\Fragster\AppData\Local\Adobe
2015-07-12 21:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2012-11-15 00:11 - 2009-12-31 14:01 - 0266240 _____ (Chaos Group Ltd) C:\Program Files\cgauth.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 1101312 _____ () C:\Program Files\dte_wrapper.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 0802304 _____ () C:\Program Files\glslang.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 0173056 _____ () C:\Program Files\glvm.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 1038848 _____ (Joe Alter Inc) C:\Program Files\HairVrPrims2011.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 3381944 _____ (Intel Corporation) C:\Program Files\libmmd.dll
2012-11-14 23:06 - 2012-11-15 00:11 - 0000125 _____ () C:\Program Files\plugin.ini
2012-11-15 00:11 - 2012-11-15 00:11 - 4333568 _____ (Chaos Software Ltd) C:\Program Files\vray.dll
2012-11-15 00:11 - 2010-12-10 19:15 - 7111168 _____ (Chaos Software Ltd) C:\Program Files\vray2011.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 0172032 _____ () C:\Program Files\vraydummy2011.max
2012-11-15 00:11 - 2012-11-15 00:11 - 0011798 _____ () C:\Program Files\vraydummy2011.xml
2012-11-15 00:11 - 2012-11-15 00:11 - 0144896 _____ () C:\Program Files\vrayspawner2011.exe
2015-05-08 20:09 - 2015-05-08 20:10 - 0000132 _____ () C:\Users\Fragster\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-05-08 20:07 - 2015-05-08 20:07 - 0000132 _____ () C:\Users\Fragster\AppData\Roaming\Adobe Targa Format CS5 Prefs
2012-04-10 20:44 - 2012-10-21 19:37 - 0000125 ___SH () C:\ProgramData\.zreglib

Einige Dateien in TEMP:
====================
C:\Users\Fragster\AppData\Local\Temp\AcDeltree.exe
C:\Users\Fragster\AppData\Local\Temp\avgnt.exe
C:\Users\Fragster\AppData\Local\Temp\drm_dyndata_7370014.dll
C:\Users\Fragster\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\Fragster\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuruufd.dll
C:\Users\Fragster\AppData\Local\Temp\FNP_ACT_InstallerCA.dll
C:\Users\Fragster\AppData\Local\Temp\FP_PL_PFS_INSTALLER_32bit.exe
C:\Users\Fragster\AppData\Local\Temp\installerdll2241453.dll
C:\Users\Fragster\AppData\Local\Temp\installerdll2250532.dll
C:\Users\Fragster\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Fragster\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Fragster\AppData\Local\Temp\jre-8u51-windows-au.exe
C:\Users\Fragster\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Fragster\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Fragster\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Fragster\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Fragster\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Fragster\AppData\Local\Temp\nvStInst.exe
C:\Users\Fragster\AppData\Local\Temp\rootsupd.exe
C:\Users\Fragster\AppData\Local\Temp\Setup.exe
C:\Users\Fragster\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Fragster\AppData\Local\Temp\sonarinst.exe
C:\Users\Fragster\AppData\Local\Temp\SpotifyUninstall.exe
C:\Users\Fragster\AppData\Local\Temp\tmd_34015902.exe
C:\Users\Fragster\AppData\Local\Temp\tmd_34019315.exe
C:\Users\Fragster\AppData\Local\Temp\Uninst.exe
C:\Users\Fragster\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Fragster\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Fragster\AppData\Local\Temp\vlc-2.0.2-win32.exe
C:\Users\Fragster\AppData\Local\Temp\vlc-2.0.4-win32.exe
C:\Users\Fragster\AppData\Local\Temp\vlc-2.0.5-win32.exe
C:\Users\Fragster\AppData\Local\Temp\vlc-2.0.6-win32.exe
C:\Users\Fragster\AppData\Local\Temp\vlc-2.0.7-win32.exe
C:\Users\Fragster\AppData\Local\Temp\vlc-2.1.1-win32.exe
C:\Users\Fragster\AppData\Local\Temp\vlc-2.1.5-win32.exe
C:\Users\Fragster\AppData\Local\Temp\vlc-2.2.1-win32.exe
C:\Users\Fragster\AppData\Local\Temp\vrayuninst.dll
C:\Users\Fragster\AppData\Local\Temp\WindowsInstaller-KB893803-v2-x86.exe


==================== Bamital & volsnap Check =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-08-03 20:57

==================== Ende von Ergebnis ============================


MBB 11.08.2015 20:19

Und hier die Addition:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:11-08-2015
durchgeführt von Fragster (2015-08-11 21:05:43)
Gestartet von C:\Users\Fragster\Desktop
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2049330118-253893184-3514707546-500 - Administrator - Disabled)
Fragster (S-1-5-21-2049330118-253893184-3514707546-1000 - Administrator - Enabled) => C:\Users\Fragster
Gast (S-1-5-21-2049330118-253893184-3514707546-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2049330118-253893184-3514707546-1004 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe After Effects CS3 Third Party Content (HKLM-x32\...\Adobe_3675c95c239b992d5d0ee8fce969b9e) (Version: 3 - Adobe Systems Incorporated)
Adobe After Effects CS5 Third Party Content (HKLM-x32\...\{C0AA232E-BD1B-40B5-A176-A2BEB67FFAE1}) (Version: 10 - Adobe Systems Incorporated)
Adobe After Effects CS5 Third Party Royalty Content (HKLM-x32\...\{CD29B5CA-4727-4114-9AD9-25CCCE6E4014}) (Version: 10 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Creative Suite 3 Master Collection hinzufügen oder entfernen (HKLM-x32\...\Adobe_67a7fb1e97aa14ee9ef0950eb6fd757) (Version: 1.0 - Adobe Systems Incorporated)
Adobe Creative Suite 5 Production Premium (HKLM-x32\...\{53BC789D-073D-47B6-AA9F-DE05990AF07A}) (Version: 5.0 - Adobe Systems Incorporated)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Premiere Pro CS3 Third Party Content (HKLM-x32\...\Adobe_71c180716438072ebd356ce2549df41) (Version: 3 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
AHV content for Acrobat and Flash (x32 Version: 1 - Adobe Systems Incorporated) Hidden
Akamai NetSession Interface (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Alien: Isolation (HKLM-x32\...\Steam App 214490) (Version:  - Creative Assembly)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Apple Application Support (HKLM-x32\...\{122ADF8C-DDA1-480C-9936-C88F2825B265}) (Version: 2.1.9 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6A76BEAF-6D1F-4273-A79B-DA8410A2E56B}) (Version: 5.2.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Assassin’s Creed® III (HKLM-x32\...\Steam App 208480) (Version:  - Ubisoft Montreal)
Assassin's Creed II (HKLM-x32\...\Steam App 33230) (Version:  - Ubisoft Montreal)
Audible Download Manager (HKLM-x32\...\AudibleDownloadManager) (Version: 6.6.0.15 - Audible, Inc.)
AudibleManager (HKLM-x32\...\AudibleManager) (Version: 1995390206.48.56.3157818 - Audible, Inc.)
Autodesk 3ds Max 2011 64-bit (HKLM\...\{39BFB02A-9692-0409-A808-3F5C7B1F8953}) (Version: 13.0 - Autodesk)
Autodesk 3ds Max 2015 (HKLM\...\Autodesk 3ds Max 2015) (Version: 17.1.149.0 - Autodesk)
Autodesk 3ds Max 2015 (Version: 17.1.149.0 - Autodesk) Hidden
Autodesk 3ds Max 2015 Populate Data (HKLM\...\{57E92DED-DC6C-41E5-B9E1-76D83BD2EABE}) (Version: 17.0.0.0 - Autodesk)
Autodesk 3ds Max 2015 SP1 (HKLM\...\Autodesk 3ds Max 2015 SP1) (Version: 17.1.149.0 - Autodesk)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk)
Autodesk Backburner 2015 (HKLM-x32\...\{8C5F38D2-8EFE-49A4-B3F5-BF3210FED168}) (Version: 15.0.0.0 - Autodesk)
Autodesk DirectConnect 2015 64-bit (HKLM\...\Autodesk DirectConnect 2015 64-bit) (Version: 9.0.56.4 - Autodesk)
Autodesk DirectConnect 2015 64-bit (Version: 9.0.56.4 - Autodesk) Hidden
Autodesk DirectConnect 2015 64-bit Hotfix1 (HKLM\...\Autodesk DirectConnect 2015 64-bit_9001) (Version: 9.0.56.4 - Autodesk)
Autodesk Inventor Server Engine for 3ds Max 2015 (HKLM\...\{9167CA34-4E48-49E3-8892-3C439739D2D3}) (Version: 17.0.2 - Autodesk)
Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2015 (HKLM-x32\...\{9F6466D9-6EFC-4A10-B931-C72D1A3F1763}) (Version: 5.2.9.100 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2015 (HKLM\...\Autodesk Revit Interoperability for 3ds Max 2015) (Version: 15.0.166.0 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2015 (Version: 15.0.166.0 - Autodesk) Hidden
Avira (HKLM-x32\...\{a5e00a72-db4a-4f77-8874-d1265b8fcd7e}) (Version: 1.1.42.10415 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.42.10415 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.12.408 - Avira Operations GmbH & Co. KG)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 1942™ (HKLM-x32\...\{5BE7BD06-512B-43bf-AD78-3BD2A5F5F7B3}) (Version: 1.6.20.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.4.2.30944 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Botanicula (HKLM-x32\...\Steam App 207690) (Version:  - Amanita Design)
Broforce (HKLM-x32\...\Steam App 274190) (Version:  - Free Lives)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version:  - Infinity Ward)
CameraHelperMsi (x32 Version: 13.50.854.0 - Logitech) Hidden
Canon Inkjet Printer Driver Add-On Module V2.00 (HKLM\...\CANONIJINBOXADDON200) (Version:  - )
Canon MP Navigator EX 2.0 (HKLM-x32\...\MP Navigator EX 2.0) (Version:  - )
Canon MP540 series Benutzerregistrierung (HKLM-x32\...\Canon MP540 series Benutzerregistrierung) (Version:  - )
Canon MP540 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP540_series) (Version:  - )
CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)
Command & Conquer Alarmstufe Rot 2 (HKLM-x32\...\Red Alert 2) (Version:  - )
ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version:  - DownloadHelper)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd)
Deadlight (HKLM-x32\...\Steam App 211400) (Version:  - Tequila Works, S.L.)
Deus Ex: Human Revolution (HKLM-x32\...\Steam App 28050) (Version:  - Eidos Montreal)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Dishonored (HKLM-x32\...\Steam App 205100) (Version: 1.0 - Bethesda Softworks)
DIY DataRecovery DiskPatch 3 (HKLM-x32\...\DiskPatch_is1) (Version: 3.5.300 - DIY DataRecovery.nl)
Dropbox (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Dropbox) (Version: 3.8.5 - Dropbox, Inc.)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
ffdshow v1.2.4422 [2012-04-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.2.4422.0 - )
File Type Assistant (HKLM-x32\...\Trusted Software Assistant_is1) (Version: 2014.5.6.0 - ) <==== ACHTUNG
Free File Viewer 2012 (HKLM-x32\...\FreeFileViewer_is1) (Version: 2012.10.9.0 - Bitberry Software) <==== ACHTUNG
Free Video to MP3 Converter version 5.0.17.903 (HKLM-x32\...\Free Video to MP3 Converter_is1) (Version: 5.0.17.903 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.46.923 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.46.923 - DVDVideoSoft Ltd.)
Func KB-460 Settings software (HKLM-x32\...\{8918A402-4EEF-489F-940F-DC25BEEFA6FF}_sbay) (Version:  - )
GetDataBack for NTFS (HKLM-x32\...\{56582EEA-3AEF-4D84-8B9D-C87A3CD9250F}) (Version: 4.00.000 - Runtime Software)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.130 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden
Grand Theft Auto IV (HKLM-x32\...\Steam App 12210) (Version:  - Rockstar)
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version:  - Rockstar North)
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )
Half-Life 2 (HKLM-x32\...\Steam App 220) (Version:  - Valve)
Half-Life: Source (HKLM-x32\...\Steam App 280) (Version:  - Valve)
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version:  - EFD Software)
iExplorer 3.1.1.0 (HKLM-x32\...\{7FD8B0C1-CDDA-4B4D-A577-B2E3570EA3A3}_is1) (Version:  - Macroplant LLC)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 15.4 - Intel)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}) (Version: 10.6.3.25 - Apple Inc.)
Jagged Alliance - Back in Action (HKLM-x32\...\Steam App 57740) (Version:  - Coreplay GmbH)
Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Kane & Lynch: Dead Men (HKLM-x32\...\Steam App 8080) (Version:  - IO Interactive)
Logitech Webcam Software-Treiberpaket (HKLM\...\lvdrivers_12.10) (Version: 12.10.1110 - Logitech Inc.)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.40 - Logitech Inc.)
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
Max Payne 3 (HKLM-x32\...\Steam App 204100) (Version:  - Rockstar Studios)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.149.2 - McAfee, Inc.)
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version:  - )
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-0000-0000-0000000FF1CE}_EXCEL_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0018-0000-0000-0000000FF1CE}_POWERPOINT_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0000-0000-0000000FF1CE}_WORD_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Excel 2007 (HKLM-x32\...\EXCEL) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint 2007 (HKLM-x32\...\POWERPOINT) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Word 2007 (HKLM-x32\...\WORD) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mirror's Edge (HKLM-x32\...\Steam App 17410) (Version:  - DICE)
Mozilla Firefox 39.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 39.0.3 (x86 de)) (Version: 39.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 8.5.0.4554 - Electronic Arts, Inc.)
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
QuickTime (HKLM-x32\...\{0E64B098-8018-4256-BA23-C316A43AD9B0}) (Version: 7.72.80.56 - Apple Inc.)
Resident Evil / biohazard HD REMASTER (HKLM-x32\...\Steam App 304240) (Version:  - CAPCOM Co., Ltd.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.1 - Rockstar Games)
Sanctum 2 (HKLM-x32\...\Steam App 210770) (Version:  - Coffee Stain Studios)
Savings Sidekick (HKLM-x32\...\Savings Sidekick) (Version: 1.18.149.149 - 215 Apps)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.102 - Skype Technologies S.A.)
SleepTimer Ultimate 1.2 (HKLM-x32\...\{0EE56463-49B2-45E1-B74F-3E0139DBC986}_is1) (Version:  - Christian Handorf)
Sniper Elite V2 (HKLM-x32\...\Steam App 63380) (Version:  - Rebellion)
Spec Ops: The Line (HKLM-x32\...\Steam App 50300) (Version:  - Yager)
Spotify (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Spotify) (Version: 1.0.4.90.g0b6df40b - Spotify AB)
State of Decay (HKLM-x32\...\Steam App 241540) (Version:  - Undead Labs)
State of Decay: Year-One (HKLM-x32\...\Steam App 329430) (Version:  - Undead Labs)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Super Street Fighter IV: Arcade Edition (HKLM-x32\...\Steam App 45760) (Version:  - Capcom)
Syndicate (HKLM-x32\...\{64CFBAAB-46F7-4628-8D9B-E656A8C11CDB}) (Version: 2.0.0.3 - Electronic Arts)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Expendabros (HKLM-x32\...\Steam App 312990) (Version:  - Free Lives)
The Long Dark (HKLM-x32\...\Steam App 305620) (Version:  - Hinterland Studio Inc.)
The Stanley Parable (HKLM-x32\...\Steam App 221910) (Version:  - Galactic Cafe)
The Walking Dead (HKLM-x32\...\Steam App 207610) (Version:  - )
The Walking Dead: Season Two (HKLM-x32\...\Steam App 261030) (Version:  - Telltale Games)
The Wolf Among Us (HKLM-x32\...\Steam App 250320) (Version:  - Telltale Games)
Thrustmaster Force Feedback Driver (HKLM-x32\...\{8F5A0981-5CDC-41D0-BCA2-AD3B777FC358}) (Version: 2.FFD.2009 - Thrustmaster)
TomTom HOME (HKLM-x32\...\{7A2BB1C8-903D-4585-9F3B-CADD67D07D37}) (Version: 2.9.8 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Trapcode Suite 64-bit (HKLM-x32\...\InstallShield_{BA357941-25A7-410C-A47E-9AAF7DE1248B}) (Version: 12.0.0 - Red Giant Software)
Trapcode Suite 64-bit (Version: 12.0.0 - Red Giant Software) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unity Web Player (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0016-0000-0000-0000000FF1CE}_EXCEL_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0018-0000-0000-0000000FF1CE}_POWERPOINT_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-001B-0000-0000-0000000FF1CE}_WORD_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
V-Ray for 3dsmax 2011 for x64 (HKLM\...\V-Ray for 3dsmax 2011 for x64) (Version: 2.20.03 - Chaos Software Ltd)
V-Ray for 3dsmax 2015 for x64 (HKLM\...\V-Ray for 3dsmax 2015 for x64) (Version: 3.00.08 - Chaos Software Ltd)
Wacom Tablett (HKLM-x32\...\Wacom Tablet Driver) (Version:  - Wacom Technology Corp.)
WebTablet IE Plugin (HKLM-x32\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.4 - Wacom Technology Corp.)
WebTablet Netscape Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.3 - Wacom Technology Corp.)
WibuKey Setup (WibuKey Remove) (HKLM\...\{00060000-0000-1004-8002-0000C06B5161}) (Version: Version 6.20 of 2013-Dec-18 (Build 1230) (Setup) - WIBU-SYSTEMS AG)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WindowsMangerProtect20.0.0.722 (HKLM-x32\...\WindowsMangerProtect) (Version: 20.0.0.722 - WindowsProtect LIMITED) <==== ACHTUNG
WinRAR 4.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
WISO Steuer-Sparbuch 2014 (HKLM-x32\...\{04179292-C74D-4AA1-8FFA-8387CA3B67B5}) (Version: 21.00.8480 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2015 (HKLM-x32\...\{54A83CB1-9CDE-4E73-B263-90C64D4619FC}) (Version: 22.00.8811 - Buhl Data Service GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> G:\Autodesk\3ds Max 2015\Inventor Server\Bin\TestServer.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{83B0E426-D4EE-11D4-BEDF-BAB7F1EEA455}\InprocServer32 -> G:\Autodesk\3ds Max 2011\addflow4.ocx (Lassalle Technologies)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> G:\Autodesk\3ds Max 2015\Inventor Server\Bin\TestServer.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> G:\Autodesk\3ds Max 2015\Inventor Server\Bin\TestServer.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll Keine Datei

==================== Wiederherstellungspunkte =========================

15-07-2015 11:20:13 Windows Update
21-07-2015 23:13:22 DirectX wurde installiert
22-07-2015 01:49:44 Windows Update
03-08-2015 19:06:20 Windows Update
03-08-2015 19:14:15 Windows Update
03-08-2015 20:58:01 Windows Update
05-08-2015 08:12:14 Windows Update
10-08-2015 19:27:26 Windows Update

==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2015-03-20 23:22 - 00001059 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com
127.0.0.1 rad.msn.com
127.0.0.1 live.rads.msn.com
127.0.0.1 ads1.msn.com
127.0.0.1 static.2mdn.net
127.0.0.1 g.msn.com
127.0.0.1 a.ads2.msads.net
127.0.0.1 b.ads2.msads.net


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {010E9455-640F-49EF-8341-56B03E47E5B8} - System32\Tasks\{131CE2A1-80E5-4013-8A2A-6873D7F84BC5} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.115/de/go/help.faq.installer?LastError=1603
Task: {0A600157-92CB-4C7D-A3D7-FE8700F71386} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {173AE9B3-DC2E-4AF3-B64B-5B9349290381} - System32\Tasks\elbyExecuteWithUAC => C:\Program Files (x86)\Elaborate Bytes\CloneDVD2\ExecuteWithUAC.exe [2008-06-27] ()
Task: {1972673D-70BD-46DC-B45A-05F6EABF7F1C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-02] (Google Inc.)
Task: {2112F3C3-4ADB-41CE-B604-F91ED5C90B02} - System32\Tasks\FreeFileViewerUpdateChecker => C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe [2012-10-13] (Bitberry Software) <==== ACHTUNG
Task: {26D1A02D-67C2-4FB0-9861-254C166460D1} - System32\Tasks\{48CF35FF-433B-432E-8D27-6B4DDC955A4E} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.123/de/go/help.faq.installer?LastError=1603
Task: {26F12A49-55E0-49EB-B694-DFEBA829A253} - System32\Tasks\{26AF6ED6-A302-4497-88B2-D36EE5833B6D} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.123/de/go/help.faq.installer?LastError=1603
Task: {3ACEA9AB-9CD1-4981-9429-97C14693D6DC} - System32\Tasks\{4268E6F3-C933-400A-A726-044594806FF1} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {6F74DD1A-AEBA-475F-B26B-097BE57850F2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-05] (Google Inc.)
Task: {7E742DD6-7B52-4E01-966D-798499021D08} - System32\Tasks\ProgramUpdateCheck => C:\Program Files (x86)\File Type Assistant\TSAssist.exe [2014-05-06] (FTA ApS) <==== ACHTUNG
Task: {A145D6B4-B10E-4A2C-8280-31494289BAE6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-02] (Google Inc.)
Task: {A4CD521B-493B-44A4-9DAA-D3DD144BD91C} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-06] (Dropbox, Inc.)
Task: {AF37AC83-2051-4952-B6D6-8BBD0CEE24F0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-11] (Adobe Systems Incorporated)
Task: {C35BE482-BBCC-461A-820C-CF73FE134F29} - System32\Tasks\ProgramRefresh-ATFST => C:\Program Files (x86)\File Type Assistant\tsasetup.exe [2014-05-11] (                                                            ) <==== ACHTUNG
Task: {C9DF2EBC-0F2C-4485-A15D-5167FE2108A6} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-05] (Google Inc.)
Task: {CDA8CE5F-AA6D-464F-B7F6-9873E97E288A} - System32\Tasks\AdobeAAMUpdater-1.0-Fragster-PC-Fragster => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {DE7D3939-590E-451B-AADF-4506D005ED12} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-06] (Dropbox, Inc.)
Task: {E78E4FBD-EF42-44FA-858D-2AE8EF13E848} - System32\Tasks\{B72B600D-D7DA-4470-8738-08ECF6CEDB95} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F3BCD646-49D2-483E-803D-D2AC8E7A061E} - System32\Tasks\{B177CA05-EDC9-4630-BADE-B0C6AEBFDBAC} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.115/de/go/help.faq.installer?LastError=1603

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\FreeFileViewerUpdateChecker.job => C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe <==== ACHTUNG
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2012-03-31 17:32 - 2015-04-08 23:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-07-21 22:56 - 2014-07-21 22:56 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe
2015-05-22 15:50 - 2013-09-16 09:33 - 01757184 _____ () G:\Programme\Func Tastatur\KB-460_Core.exe
2011-11-11 14:07 - 2011-11-11 14:07 - 00265240 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
2011-08-12 12:19 - 2011-08-12 12:19 - 00680984 _____ () C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
2012-05-30 20:06 - 2012-05-30 20:06 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-05-30 20:06 - 2012-05-30 20:06 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2015-04-14 18:53 - 2015-03-28 05:45 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 02145304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 07956504 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 00342552 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 00029208 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 00128536 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2015-08-11 21:02 - 2015-08-11 21:02 - 00071168 _____ () c:\users\fragster\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuruufd.dll
2015-03-04 23:45 - 2015-07-17 02:31 - 00012800 _____ () C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll
2015-03-04 23:45 - 2015-07-17 02:31 - 00779776 _____ () C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-07-29 08:19 - 2015-07-17 02:31 - 00056320 _____ () C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-03-04 23:45 - 2015-07-17 02:31 - 00012288 _____ () C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll
2012-07-23 15:10 - 2012-07-23 15:10 - 00336232 _____ () C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Fragster\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: AdAppMgrSvc => 2
MSCONFIG\Services: TomTomHOMEService => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Audible Download Manager.lnk => C:\Windows\pss\Audible Download Manager.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WISO Mein Steuer-Sparbuch heute.lnk => C:\Windows\pss\WISO Mein Steuer-Sparbuch heute.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Fragster^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spotify => "C:\Users\Fragster\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Fragster\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: TomTomHOME.exe => "G:\Programme\TomTom HOME 2\TomTomHOMERunner.exe"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{04772F86-5DB8-4C6A-A377-08DF17290936}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{574CA899-AB81-4E4D-AB8D-8FEC89D09293}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{549D29DC-91F6-4C15-ACE7-26570D36EA35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [{C23751AF-6623-402C-9934-86ECBBCA93A2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [{7A3859A1-076C-4F92-9E2F-EEF12754F48F}] => (Allow) C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{8D38BD63-BC0A-4FA1-9DDF-BC3B68D1814A}] => (Allow) C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{E9EF6603-8105-4B60-A3B1-8278879E4905}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{AAF77C0F-6CAC-44AB-BE11-C7881F173CB1}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{5D94EAF6-F3FB-48A0-B8AC-2F67D7E52F1A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{61E6332A-CDC4-47B0-AED4-990B3BCA17C1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{7B9732DB-2878-4197-9924-EFFD925FE0C8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{53810B60-CC84-4949-95FD-5DE17B626E91}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{A79D7BB9-70CD-47AD-B18B-B278F9DBF0D0}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [TCP Query User{92164434-A096-4C22-93AF-02C27B5D1DC5}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{A216B3C5-B8AA-4EB5-8A86-F91B6B14459B}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{0D0D48AF-DAB4-4984-B571-AAD6462491DF}C:\users\fragster\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\fragster\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{ADBA8C4A-8875-417A-AE97-E07C5CC99602}C:\users\fragster\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\fragster\appdata\roaming\spotify\spotify.exe
FirewallRules: [{42C73DB4-CDA0-46BC-8A81-2042AC4CD019}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{560F1BC0-FA3D-41D6-A8F4-3F0F3F72EE76}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{F624A1E4-81C3-44F5-AAAA-F1A0C3D00788}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\3dsmax.exe
FirewallRules: [{433C07DF-C084-4E1C-9C2A-35949029C429}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\3dsmax.exe
FirewallRules: [{939C8397-8C0D-4160-8D24-2C96E38F4CFB}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64.exe
FirewallRules: [{9560D2B1-ACC8-46C7-AF73-ADAF2AE9626F}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64.exe
FirewallRules: [{8845F407-343F-4752-919D-101797C7054A}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
FirewallRules: [{F36F179C-FEBD-43C6-A6F8-182CDE38A5A2}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
FirewallRules: [TCP Query User{BF60A732-4555-4159-A5E4-5ABA035C133B}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [UDP Query User{37F16CD7-2601-4BB0-B1F8-6AC408FBF471}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [{4CECB07B-A4CD-4191-9FAE-D5554A1E1C73}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1942\BF1942.exe
FirewallRules: [{6DA30031-A46F-46A1-A0E9-60FB8E981913}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1942\BF1942.exe
FirewallRules: [{357C4974-F08A-46F0-AED2-9EB147A3C6B4}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [{3BEAF8A0-EF3C-4580-B1B1-157728B4D34A}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [TCP Query User{8E3AECEB-B488-4CAA-9A7B-B18604862034}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [UDP Query User{BC8D44D6-D7C8-4182-891F-7D8EC5714CC3}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [{DD498A71-73BC-4507-9500-2FD3F723A5F7}] => (Allow) C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe
FirewallRules: [{F3289D37-CDAA-41C8-9678-D5D8DEE3CF45}] => (Allow) C:\Program Files (x86)\File Type Assistant\TSAssist.exe
FirewallRules: [{9BF8916F-677E-4128-B364-88072B430ABD}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe
FirewallRules: [{8B001813-1808-4064-8EF1-85672B74614E}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe
FirewallRules: [{403299AC-828C-4252-971D-45AD03DD430A}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [{0FFB8E58-3C7D-4348-8445-B9DFFBE36AFA}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [{D3B8DB34-732D-4EE4-9DA0-BEB3B67123C9}] => (Allow) C:\Program Files (x86)\File Type Assistant\TSAssist.exe
FirewallRules: [{73EAC45E-2EE4-43EE-A2DD-635626D08266}] => (Allow) G:\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{BC8F8396-981B-4161-B8E0-2C369C3B2332}] => (Allow) G:\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{C871AE4F-4F5C-4B51-B17E-7F2760048088}] => (Allow) G:\Steam\SteamApps\common\JABIA\JaggedAllianceBIA.exe
FirewallRules: [{CF093C2D-6ADC-44C2-9A82-89A72EFE42BB}] => (Allow) G:\Steam\SteamApps\common\JABIA\JaggedAllianceBIA.exe
FirewallRules: [{D0F5B256-573F-4C5B-8256-3C2A751BEC3C}] => (Allow) G:\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{D3B2E3E1-7945-467A-82D4-3550592AC818}] => (Allow) G:\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{2556B1F4-C425-4D4A-BBE1-F98EB768CF2E}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{9DB9FA04-2743-4EF0-9257-8A50BA34D124}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{FBBBB055-BCEE-4A0F-A238-797A2FE566A8}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{7C777E7F-8380-43BF-8943-3E7C8B942F3B}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{1DAEC672-62C1-4E96-A116-C2A4E64BEDA4}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{699D413B-A161-4A89-A545-787A458804CA}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{D6BBFD72-9338-4893-B2D3-F026C717CAB7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{E879D55B-48AD-4FF0-A060-213DD3B00A9E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{18B1B000-01D1-4AC0-A928-45664A067013}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{6E096CFE-4002-4AB6-AE44-8E46C572FA3B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{3C791AB1-6310-497D-9454-2695EBADD24F}] => (Allow) C:\Users\Fragster\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{92709542-8D6B-470B-B2D2-BCF3A7E75C67}] => (Allow) C:\Users\Fragster\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{F6692971-2805-4CE9-9882-0E85B559BA48}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{4C917EE2-A10C-4974-A9EC-03BAF40C4A3D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{C8E0F0F8-5304-4903-A643-63DE99F60E0A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{DCFBC4EC-39B3-48B9-BD69-7D1BC7A2AECF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{BF130E0C-6EF2-49DD-979C-D3C1FC6EB875}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E6713910-9B34-48DD-86D8-8E66B2EC27FF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7D5CB6D0-91C1-4588-A9BD-F4871377D466}] => (Allow) G:\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [{AE21C3B2-C9F2-4AE0-B15F-1F0C7B55F083}] => (Allow) G:\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [TCP Query User{D28FE169-D35F-41F8-B34E-F046E7D806E4}G:\steam\steam.exe] => (Allow) G:\steam\steam.exe
FirewallRules: [UDP Query User{A13F3145-95E2-4BD5-95D2-91E2DB55A05B}G:\steam\steam.exe] => (Allow) G:\steam\steam.exe
FirewallRules: [{4514C525-706D-49A4-82C8-C6334236C941}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{0765D295-ADD1-4DEF-9A1B-D9B77EAA2C8B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{ABE242B8-1A78-475A-9F92-E15C62CAB44D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EB6B6981-75BD-472B-9F7F-D5E931EC97F0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EE4476E3-56AE-4C9C-9B39-4D1351E809B9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{23BCF370-916F-46DD-9C86-23022703724D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{1CA5304E-6674-4CEC-88D1-7DFB10088BFC}] => (Allow) G:\games\origin games\Battlefield 4\bf4_x86.exe
FirewallRules: [{AE726CEB-4819-4B53-AE81-C2104B1D19AA}] => (Allow) G:\games\origin games\Battlefield 4\bf4_x86.exe
FirewallRules: [{4891125E-5848-4732-AB5A-DBD65919BFCF}] => (Allow) G:\games\origin games\Battlefield 4\bf4.exe
FirewallRules: [{5C7B94D8-C8AA-4AE4-8F3E-3C4E9C54C79B}] => (Allow) G:\games\origin games\Battlefield 4\bf4.exe
FirewallRules: [{F751BFA2-6348-427B-825E-51B148D73035}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{747968A5-22E9-4E9D-AA3C-6B5C6B4270C9}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{2501AC61-7494-478E-8846-659AB0C5DB79}] => (Allow) G:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{ED392498-9A12-4F3C-9C98-1898CB6CB5B1}] => (Allow) G:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{0E3695E9-234A-4943-90B1-91484FC4E53C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F85C0664-0DAA-4C14-88A8-E2A65EBA519E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{4C8EDC58-E5D7-4D3A-9939-DC47D5A4E276}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{6D990613-3F11-4775-8916-2796202413AB}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{21040FD5-4830-4A11-9714-2B7DF08AD411}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{81A8077B-281C-4470-A2F8-E61C13720356}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{0B9EAA1F-426A-4D75-B48B-F9BB771FA281}] => (Allow) C:\Program Files (x86)\File Type Assistant\TSAssist.exe
FirewallRules: [{D780652A-2985-4428-9CB0-92600E2D9BAA}] => (Allow) G:\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{BB248C14-F16C-450A-8BAF-140781E4121E}] => (Allow) G:\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{080B6801-9FC8-4B0C-9805-325DF10030A1}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{983810A9-C3F8-4D61-B8F3-C9DCA43AF64E}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{9161CDAC-F6DA-4F85-BB33-13E3A0593CFB}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [{09546B13-D2E3-4A10-9199-9DF234966AAB}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [TCP Query User{F6ADA89A-C5E9-4504-A452-D146CD4D6CA6}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{556B934E-CB16-4DA2-9DC2-83B78DF9252A}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [{A91893FB-FBA6-4EA6-915C-3AF348FA98DF}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 3\AC3SP.exe
FirewallRules: [{6DBB5E7E-241E-4062-B0DB-B761CE09435B}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 3\AC3SP.exe
FirewallRules: [{1318A5A6-CEBE-4C95-8416-691C4EDE6A27}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 2\AssassinsCreedIIGame.exe
FirewallRules: [{D58A04A8-5986-44E6-8B77-31B049373598}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 2\AssassinsCreedIIGame.exe
FirewallRules: [{ED836365-CE81-42C7-9CFC-816F9BF8752D}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{680B8274-FA65-447B-8757-066B3EA8D820}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{25B73349-C4A5-4948-B5FA-D3BD47F62EAC}] => (Allow) G:\Steam\SteamApps\common\State of Decay\StateOfDecay.exe
FirewallRules: [{D2F05AE9-111B-4A68-A677-2B20A724F67D}] => (Allow) G:\Steam\SteamApps\common\State of Decay\StateOfDecay.exe
FirewallRules: [{2BAA366C-06C3-4B42-9A80-BB6A0EE5C505}] => (Allow) C:\Users\Fragster\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{F331FE8C-14CB-453C-B3C0-56F8043006C0}] => (Allow) C:\Users\Fragster\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{F49BB3DF-A9F9-4A4B-8406-E6BF62A22429}] => (Allow) C:\Program Files (x86)\File Type Assistant\TSAssist.exe
FirewallRules: [TCP Query User{1730FA25-BFF7-498A-B90A-F742D8A381DE}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [UDP Query User{65F843E5-4908-430C-8FDD-2753F843013E}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [{8B25FA57-A457-49F8-A244-1D59E7004041}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{9070EC11-5D6C-4419-A266-21764558A7C4}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{ADF83E23-75F1-4158-B38D-9E025F424B13}] => (Allow) G:\Steam\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe
FirewallRules: [{DFEF48F2-6D3C-430B-85DC-B7114C81A5A3}] => (Allow) G:\Steam\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe
FirewallRules: [{F50297AD-EFC4-45DA-B302-BDD29D0C1B1B}] => (Allow) G:\Steam\SteamApps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe
FirewallRules: [{A9C07798-6F06-4B21-8AC0-DDB080025B73}] => (Allow) G:\Steam\SteamApps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe
FirewallRules: [{DF5AA543-EAE5-4673-904A-661F81D649F1}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\bin\SniperEliteV2.exe
FirewallRules: [{33879106-1BAE-4841-9880-1CEE70D30A39}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\bin\SniperEliteV2.exe
FirewallRules: [{9CAC3A7A-BE1B-41D6-A81B-4A957BEC8283}] => (Allow) G:\Steam\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{800606E3-8931-41DD-80AD-900A0C3E6C8B}] => (Allow) G:\Steam\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{A607C67D-A64C-4921-AF46-63702D8AF209}] => (Allow) C:\Program Files (x86)\File Type Assistant\TSAssist.exe
FirewallRules: [{60D70F08-EB56-4CD6-BDB3-BE12C77317A6}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
FirewallRules: [{8A46F07B-1399-4CAE-B49C-20E69D4911BC}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
FirewallRules: [{3154C3F1-900B-4552-9AD4-C6DD1979BC0A}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64.exe
FirewallRules: [{195F4797-35E1-4DF7-8176-2CCFFDB1246F}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64.exe
FirewallRules: [TCP Query User{BAA61285-4407-4C86-83BF-556DF23649DB}C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{42ADCBB1-C6B0-41BF-9DC6-10F6A8541226}C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{81A3E701-8BF5-426E-9B9F-0140CE200AB0}] => (Allow) G:\Steam\SteamApps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{7B1D7A83-AE0C-4240-B17A-84263B50156B}] => (Allow) G:\Steam\SteamApps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{04549210-E155-463F-B3A0-3273E899260D}] => (Allow) G:\Steam\SteamApps\common\Botanicula\Botanicula.exe
FirewallRules: [{01E3C50B-55A5-4983-A7C8-53E7201FB795}] => (Allow) G:\Steam\SteamApps\common\Botanicula\Botanicula.exe
FirewallRules: [{7465A788-F8FF-4206-A43E-5AB3992C8C10}] => (Allow) G:\Steam\bin\steamwebhelper.exe
FirewallRules: [{9BF02656-0546-45F3-9A40-CAEE617953E0}] => (Allow) G:\Steam\bin\steamwebhelper.exe
FirewallRules: [{CBFC222F-CD0D-48D1-84A8-F2D7AF57EE1A}] => (Allow) G:\Steam\SteamApps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{A48AAC77-B6F3-4962-A88E-B144BB3AC3B6}] => (Allow) G:\Steam\SteamApps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{8D164D4D-C6DD-4F70-85E0-7E99CFDEFFAF}] => (Allow) G:\games\Battle.net\Battle.net\Battle.net.exe
FirewallRules: [{2BF4F822-B92F-4B98-B841-2821758DFC25}] => (Allow) G:\games\Battle.net\Battle.net\Battle.net.exe
FirewallRules: [{8AA187CD-50F9-4EB5-B0C7-7215B0C5AB94}] => (Allow) G:\games\Diablo III\Diablo III.exe
FirewallRules: [{D0D6D217-D15E-4F12-A899-2C46D5D148F6}] => (Allow) G:\games\Diablo III\Diablo III.exe
FirewallRules: [{B1EC055C-75E3-41B3-92EE-132F00B8A4BF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{A97E5FC3-A34F-466C-AFAA-FE329318A2D1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{1D7D0ECA-92AF-4424-95F7-E05294B252C9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{0E245602-5662-4494-A000-7E29DE940BFE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{B532F760-64E7-4378-94E9-DD229D94E8AD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{BBACCB83-78A5-4969-9FD8-4D696ED0DB0F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [TCP Query User{45F662C7-58FC-430B-9717-731AD59BE39E}G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe] => (Block) G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe
FirewallRules: [UDP Query User{BD475D86-9B89-4617-BC51-C69FB3FB882B}G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe] => (Block) G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe
FirewallRules: [{7DED0881-FF83-40AB-A0B8-7255CC737D9A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{6289FC7E-7D17-427B-9F7C-040CE9B04F52}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{9D01342C-3464-4414-A420-AC07DA00F57D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{5FEC9C48-EA4A-4677-9BC7-6BB7A1957AF8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{E854083A-7487-42E4-A4EF-865951EE5AD9}] => (Allow) G:\Steam\SteamApps\common\TheLongDark\tld.exe
FirewallRules: [{FF966DA4-F86C-416A-84E9-8A110D94900A}] => (Allow) G:\Steam\SteamApps\common\TheLongDark\tld.exe
FirewallRules: [{01A8DE84-10C1-4557-AADA-31107B198A04}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{55B7142D-372E-4220-B36C-9A327449FE55}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{58B0ECB5-27D8-478F-AD28-D9B883C9372D}] => (Allow) G:\Steam\SteamApps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{510FF323-F72A-41C3-84C1-22815EF836CB}] => (Allow) G:\Steam\SteamApps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{D61B73A0-9A05-4400-B605-26B881B6825A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7B6EC10F-AAC5-4C6E-A3C3-3213838F4315}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{54220F57-3EC1-4C22-961E-7A4858932FF4}] => (Allow) G:\Steam\SteamApps\common\Broforce\Broforce_beta.exe
FirewallRules: [{D5333F6A-1D67-4867-9E16-61126A2A9E0B}] => (Allow) G:\Steam\SteamApps\common\Broforce\Broforce_beta.exe
FirewallRules: [{88472125-5C81-4D9F-AA94-1DA6E57D5A97}] => (Allow) G:\Steam\SteamApps\common\Broforce The Expendables Missions\Expendabros.exe
FirewallRules: [{94478AAC-386B-4AB9-A147-C1DAF43EFB8C}] => (Allow) G:\Steam\SteamApps\common\Broforce The Expendables Missions\Expendabros.exe
FirewallRules: [{7FB5CF23-230F-4B47-8300-FF15C146D36E}] => (Allow) G:\Steam\SteamApps\common\The Stanley Parable\stanley.exe
FirewallRules: [{78FA8D49-81A8-4453-9DAD-CC141F20FA04}] => (Allow) G:\Steam\SteamApps\common\The Stanley Parable\stanley.exe
FirewallRules: [{D8AE0B5A-BBE1-44B8-A0DD-5220FD445491}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [{4ECDF369-99C6-4E1F-AB3D-D002BFE60225}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [TCP Query User{BDBD7F25-A0D1-404F-A84C-6C0BCA43F764}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [UDP Query User{818D2685-B72B-4BDE-A449-847334ADB541}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [{330D1A31-851D-4BD5-B5A8-4D560B3BB70E}] => (Allow) G:\Steam\SteamApps\common\Deadlight\Binaries\Win32\LOTDGame.exe
FirewallRules: [{C95CC401-5D09-4297-BE13-684D36EC6002}] => (Allow) G:\Steam\SteamApps\common\Deadlight\Binaries\Win32\LOTDGame.exe
FirewallRules: [{52A78883-B5F2-49D0-B871-AF1F040E40FB}] => (Allow) G:\Steam\SteamApps\common\Kane and Lynch Dead Men\Launcher.exe
FirewallRules: [{81551F1B-273B-41D2-92BE-164D3B11A2FC}] => (Allow) G:\Steam\SteamApps\common\Kane and Lynch Dead Men\Launcher.exe
FirewallRules: [TCP Query User{27924A78-3837-4643-B729-CF68A1288617}G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe] => (Allow) G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe
FirewallRules: [UDP Query User{FAEC16AF-64B7-4809-AC1A-BCD91EB6542A}G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe] => (Allow) G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe
FirewallRules: [{C0C7C695-24C3-4F50-B0E6-75AFCD15C41E}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe
FirewallRules: [{D7764ACC-7A01-4BB3-AE62-DC706CDE42C6}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe
FirewallRules: [{60E1D514-CBF2-44E4-BB4A-4D7CF0121687}] => (Allow) C:\origin games shifted\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe
FirewallRules: [{4924B6E3-A427-430C-B0C2-092517A533FB}] => (Allow) C:\origin games shifted\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe
FirewallRules: [{F2D1C817-EFA3-435B-B54D-1335F64BE8FA}] => (Allow) G:\Steam\SteamApps\common\Alien Isolation\AI.exe
FirewallRules: [{E674C8C8-30DE-4401-856A-A4389D2D8EF7}] => (Allow) G:\Steam\SteamApps\common\Alien Isolation\AI.exe
FirewallRules: [TCP Query User{2D0B287E-2D9C-4068-972E-1C294D520941}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{6FA2EA87-26C1-43AF-8508-DEE0D884C1D2}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{D6D2444A-7AE8-4836-AAC6-4E455289BAA1}] => (Allow) G:\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{34612F93-F7AA-43F8-A477-8E19DF57C1B5}] => (Allow) G:\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{818D1CA3-65A4-4845-BEA5-36614E6BBCA3}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{977444CC-3FD0-47EF-8DAF-B26E4775F3C2}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [TCP Query User{35079B59-D6F4-4468-AB56-D68ADA4DA551}G:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) G:\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{C1A7A97D-9C5E-4748-A2D8-E299A000BAB6}G:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) G:\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{3D34C7CE-88A7-403B-A07A-32696C136419}] => (Allow) G:\Steam\SteamApps\common\State of Decay YOSE\StateOfDecay.exe
FirewallRules: [{8BDD7D3A-7E2B-442D-B5A7-04ACE5300178}] => (Allow) G:\Steam\SteamApps\common\State of Decay YOSE\StateOfDecay.exe
FirewallRules: [{31AB5FE5-3B04-4443-ACED-243A857C7DDD}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe
FirewallRules: [{DFD70EAF-9819-41AC-B2CF-D032A11FBB9C}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe
FirewallRules: [{C07E8B73-6083-4E1E-BBB9-1DAD7BE45CD8}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64.exe
FirewallRules: [{477C0385-9098-4090-97B8-CDECA67116A6}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64.exe
FirewallRules: [{657CD02C-4992-4814-9E84-6F1F90192C0F}] => (Allow) G:\Steam\SteamApps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [{2FC44B08-BB5F-424F-9062-96FF1BA08816}] => (Allow) G:\Steam\SteamApps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [{1967D040-DF78-48D9-9EB0-64741F61E8F6}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{BFF41C64-7C68-46B1-874B-8DC31FC02F23}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{358FC54A-852B-4FCA-A476-AD7C4FE96CC2}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [{6165BD4E-3EF1-4539-861D-00C355660487}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [{8E0E10E6-4B36-4450-957A-315B29A89482}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{A2A17870-FA78-41A3-8504-149CCF0745AB}] => (Allow) LPort=49237
FirewallRules: [{9F44221F-33FE-49F5-AD36-4F38265D71C4}] => (Allow) LPort=5000
FirewallRules: [{D7687439-1F08-41EE-8FB6-C33A1A105CE1}] => (Allow) LPort=49212
FirewallRules: [{4A8FD2E9-F134-4FB2-9034-8163CC178215}] => (Allow) LPort=5000

==================== Fehlerhafte Geräte im Gerätemanager =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/11/2015 09:03:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0x918
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (08/11/2015 09:03:13 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/11/2015 07:48:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0xc58
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (08/11/2015 07:48:45 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/11/2015 07:34:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0xea4
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (08/11/2015 07:34:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/11/2015 07:28:26 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]

Error: (08/11/2015 06:47:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0x5a0
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (08/11/2015 06:47:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/10/2015 08:40:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


Systemfehler:
=============
Error: (08/11/2015 09:02:49 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎11.‎08.‎2015 um 20:47:34 unerwartet heruntergefahren.

Error: (08/11/2015 07:48:34 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎11.‎08.‎2015 um 19:45:45 unerwartet heruntergefahren.

Error: (08/11/2015 06:46:54 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎10.‎08.‎2015 um 21:37:30 unerwartet heruntergefahren.

Error: (08/10/2015 09:29:24 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (08/10/2015 08:40:04 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (08/10/2015 08:39:43 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (08/10/2015 08:38:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (08/10/2015 08:38:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (08/10/2015 08:38:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (08/10/2015 08:38:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068


Microsoft Office:
=========================

==================== Speicherinformationen ===========================

Processor: Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz
Prozentuale Nutzung des RAM: 29%
Installierter physikalischer RAM: 8167.08 MB
Verfügbarer physikalischer RAM: 5726.08 MB
Summe virtueller Speicher: 16332.37 MB
Verfügbarer virtueller Speicher: 13626.16 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:238.37 GB) (Free:43.79 GB) NTFS
Drive d: (Disk) (CDROM) (Total:0.29 GB) (Free:0 GB) CDFS
Drive g: (Volume) (Fixed) (Total:1863.01 GB) (Free:1038.18 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: DA05D2BC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 444DA12D)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== Ende von Ergebnis ============================


MBB 11.08.2015 20:30

Und hier Gmer:

Code:

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-08-11 21:27:02
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP5T0L0-7 M4-CT256M4SSD2 rev.0001 238,47GB
Running: Gmer-19357.exe; Driver: C:\Users\Fragster\AppData\Local\Temp\kgddakod.sys


---- User code sections - GMER 2.1 ----

.text    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                                                                      0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                                                                        0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                                                                      0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                                                                      000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                                      * 9
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                                                                        00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                                                                  00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                                                                        000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                                                                  0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                                                                        000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                                                            0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                                                                      000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                                                                        0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                                                          000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                                                                        00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                                                                      00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                                                                  00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                                                                  00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                                                  0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                                                    0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                                                  0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                                                  000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                                      * 9
.text    C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                                                      00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                                              00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                                                      000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                                              0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                                                    000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                                          0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                                                  000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                                                    0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                                        000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                                                    00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                                                  00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                                              00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe[2468] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                                              00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text    C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                                                                                            0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                                                                                              0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                                                                                            0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text    C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                                                                                            000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                                      * 9
.text    C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                                                                                              00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text    C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                                                                                        00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text    C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                                                                                              000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text    C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                                                                                        0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                                                                                              000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                                                                                  0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text    C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                                                                                            000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                                                                                              0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text    C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                                                                                000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text    C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                                                                                              00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                                                                                            00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                                                                                        00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\Windows\system32\PnkBstrA.exe[2636] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                                                                                        00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\KERNELBASE.dll!LoadLibraryExW                                                                                                                                              0000000075892ab1 5 bytes JMP 00000001009a2ac0
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                                                        0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                                                          0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                                                        0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                                                        000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                                      * 9
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                                                            00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                                                    00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                                                            000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                                                    0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                                                          000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                                                0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                                                        000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                                                          0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                                              000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                                                          00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                                                        00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                                                    00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe[2996] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                                                    00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                                                                  0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                                                                    0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                                                                  0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                                                                  000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                                      * 9
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                                                                      00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                                                              00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                                                                      000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                                                              0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                                                                    000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                                                          0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                                                                  000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                                                                    0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                                                        000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                                                                    00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                                                                  00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                                                              00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3052] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                                                              00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                                                                  0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                                                                    0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                                                                  0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                                                                  000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                                      * 9
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                                                                      00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                                                              00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                                                                      000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                                                              0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                                                                    000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                                                          0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                                                                  000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                                                                    0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                                                        000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                                                                    00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                                                                  00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                                                              00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe[3168] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                                                              00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetModuleFileNameExW + 17                                                                                                                                                          0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!EnumProcessModules + 17                                                                                                                                                            0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetModuleInformation + 17                                                                                                                                                          0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetModuleInformation + 42                                                                                                                                                          000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                                      * 9
.text    C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!EnumDeviceDrivers + 17                                                                                                                                                              00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetDeviceDriverBaseNameA + 17                                                                                                                                                      00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!QueryWorkingSetEx + 17                                                                                                                                                              000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetDeviceDriverBaseNameW + 17                                                                                                                                                      0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetModuleBaseNameW + 17                                                                                                                                                            000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!EnumProcesses + 17                                                                                                                                                                  0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetProcessMemoryInfo + 17                                                                                                                                                          000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetPerformanceInfo + 17                                                                                                                                                            0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!QueryWorkingSet + 17                                                                                                                                                                000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetModuleBaseNameA + 17                                                                                                                                                            00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetModuleFileNameExA + 17                                                                                                                                                          00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetProcessImageFileNameW + 20                                                                                                                                                      00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe[3192] C:\Windows\syswow64\PsApi.dll!GetProcessImageFileNameW + 31                                                                                                                                                      00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                                                                0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                                                                  0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                                                                0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                                                                000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                                      * 9
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                                                                    00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                                                            00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                                                                    000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                                                            0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                                                                  000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                                                        0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                                                                000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                                                                  0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                                                      000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                                                                  00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                                                                00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                                                            00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[3240] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                                                            00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetModuleFileNameExW + 17                                                                                                                                                  0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!EnumProcessModules + 17                                                                                                                                                    0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 17                                                                                                                                                  0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 42                                                                                                                                                  000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                                      * 9
.text    C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!EnumDeviceDrivers + 17                                                                                                                                                      00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetDeviceDriverBaseNameA + 17                                                                                                                                              00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!QueryWorkingSetEx + 17                                                                                                                                                      000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetDeviceDriverBaseNameW + 17                                                                                                                                              0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetModuleBaseNameW + 17                                                                                                                                                    000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!EnumProcesses + 17                                                                                                                                                          0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetProcessMemoryInfo + 17                                                                                                                                                  000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetPerformanceInfo + 17                                                                                                                                                    0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!QueryWorkingSet + 17                                                                                                                                                        000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetModuleBaseNameA + 17                                                                                                                                                    00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetModuleFileNameExA + 17                                                                                                                                                  00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetProcessImageFileNameW + 20                                                                                                                                              00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe[3288] C:\Windows\syswow64\Psapi.dll!GetProcessImageFileNameW + 31                                                                                                                                              00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                                                                      0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                                                                        0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                                                                      0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                                                                      000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                                      * 9
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                                                                        00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                                                                  00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                                                                        000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                                                                  0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                                                                        000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                                                            0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                                                                      000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                                                                        0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                                                          000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                                                                        00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                                                                      00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                                                                  00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe[3392] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                                                                  00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                                                            0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                                                              0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                                                            0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                                                            000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                                      * 9
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                                                              00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                                                        00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                                                              000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                                                        0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                                                              000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                                                  0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                                                            000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                                                              0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                                                000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                                                              00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                                                            00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                                                        00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[3684] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                                                        00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                                                  0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                                                    0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                                                  0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                                                  000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                                      * 9
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                                                      00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                                              00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                                                      000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                                              0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                                                    000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                                          0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                                                  000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                                                    0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                                        000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                                                    00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                                                  00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                                              00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe[3836] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                                              00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                                                        0000000077491401 2 bytes JMP 7770b21b C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                                                          0000000077491419 2 bytes JMP 7770b346 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                                                        0000000077491431 2 bytes JMP 77788f29 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                                                        000000007749144a 2 bytes CALL 776e489d C:\Windows\syswow64\kernel32.dll
.text    ...                                                                                                                                                                                                                                                                      * 9
.text    C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                                                            00000000774914dd 2 bytes JMP 77788822 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                                                    00000000774914f5 2 bytes JMP 777889f8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                                                            000000007749150d 2 bytes JMP 77788718 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                                                    0000000077491525 2 bytes JMP 77788ae2 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                                                          000000007749153d 2 bytes JMP 776ffca8 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                                                0000000077491555 2 bytes JMP 777068ef C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                                                        000000007749156d 2 bytes JMP 77788fe3 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                                                          0000000077491585 2 bytes JMP 77788b42 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                                              000000007749159d 2 bytes JMP 777886dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                                                          00000000774915b5 2 bytes JMP 776ffd41 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                                                        00000000774915cd 2 bytes JMP 7770b2dc C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                                                    00000000774916b2 2 bytes JMP 77788ea4 C:\Windows\syswow64\kernel32.dll
.text    C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[3964] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                                                    00000000774916bd 2 bytes JMP 77788671 C:\Windows\syswow64\kernel32.dll
---- Processes - GMER 2.1 ----

Library  c:\users\fragster\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuruufd.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288](2015-08-11 19:02:55)                                                0000000073160000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5Core.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:24)                    0000000064110000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\icuin55.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (ICU I18N DLL/The ICU Project)(2015-07-29 06:19:22)                                                                    000000004a900000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\icuuc55.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (ICU Common DLL/The ICU Project)(2015-07-29 06:19:22)                                                                  0000000005120000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\icudt55.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (ICU Data DLL/The ICU Project)(2015-07-29 06:19:22)                                                                    0000000062850000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5Widgets.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:28)                  0000000062390000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5Gui.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26)                      0000000061f50000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5Network.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26)                  0000000060fc0000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5WebKit.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26)                  000000005ffa0000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5Quick.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26)                    000000005fd50000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5Qml.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26)                      000000005fae0000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5WebChannel.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-07-29 06:19:22)              000000006a3c0000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5Sql.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26)                      000000005fab0000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5WebKitWidgets.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:28)            000000005fa70000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5PrintSupport.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26)            000000005fa20000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Qt5OpenGL.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26)                  000000005f9d0000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:30)  000000005f860000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:30)  00000000734c0000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288](2015-03-04 21:45:30)                                                                                  00000000732d0000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288](2015-03-04 21:45:30)                                                                    000000005f5b0000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288](2015-07-29 06:19:23)                                                                        0000000073190000
Library  C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll (*** suspicious ***) @ C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe [3288](2015-03-04 21:45:30)                                                                              000000006a760000

---- Registry - GMER 2.1 ----

Reg      HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00268331816f                                                                                                                                                                                             
Reg      HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Epoch@Epoch                                                                                                                                                                                                          14575
Reg      HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules@{D7687439-1F08-41EE-8FB6-C33A1A105CE1}                                                                                                                                        v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|LPort=49212|Name=Akamai NetSession Interface|
Reg      HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules@{4A8FD2E9-F134-4FB2-9034-8163CC178215}                                                                                                                                        v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|LPort=5000|Name=Akamai NetSession Interface|
Reg      HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00268331816f (not active ControlSet)                                                                                                                                                                         
Reg      HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Fragster\AppData\Local\Logitech\xae Webcam-Software\Logishrd\LU2.0\LogitechUpdate.exe                                                                        1

---- EOF - GMER 2.1 ----


schrauber 12.08.2015 11:36

Lade Dir bitte von hier Revo Uninstaller Download Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
  • Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
  • Klicke auf Optionen und wähle als Sprache Deutsch.
  • Suche im Uninstallerfeld nach den Programmen:

    File Type Assistant

    Free File Viewer 2012

    WindowsMangerProtect20.0.0.722 (HKLM-x32\...\WindowsMangerProtect) (Version: 20.0.0.722 - WindowsProtect LIMITED) <==== ACHTUNG


  • Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
  • Wähle anschließend den Modus "Moderat" aus.
  • Reste löschen:
    Klicke auf dann auf und dann auf .

 





Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.


MBB 12.08.2015 19:49

Code:

ComboFix 15-08-08.01 - Fragster 12.08.2015  20:39:44.1.8 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.8167.4701 [GMT 2:00]
ausgeführt von:: c:\users\Fragster\Desktop\ComboFix.exe
AV: Avira Antivirus *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Antivirus *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_dhdepfaagokllfmhfbcfmocaeigmoebo_0
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_dhdepfaagokllfmhfbcfmocaeigmoebo_0\3
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\background.html
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\background.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\crossriderManifest.json
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\extension.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\icons\actions\icon1.png
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\icons\icon128.png
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\icons\icon16.png
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\icons\icon48.png
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\icons\notifications\icon1.png
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\icons\notifications\icon48.png
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\api\chrome.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\api\cookie.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\api\message.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\api\push.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\background.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\lib\app_api.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\lib\async_api.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\lib\bg_app_api.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\lib\cookie_store.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\lib\data_store.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\lib\faye-browser-min.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\js\lib\util.js
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\manifest.json
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.18.9_0\popup.html
c:\users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Fragster\AppData\Local\Savings Sidekick
c:\users\Fragster\AppData\Local\Savings Sidekick\Chrome\Savings Sidekick.crx
c:\users\Fragster\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
G:\install.exe
.
.
(((((((((((((((((((((((  Dateien erstellt von 2015-07-12 bis 2015-08-12  ))))))))))))))))))))))))))))))
.
.
2015-08-12 18:43 . 2015-08-12 18:43        --------        d-----w-        c:\users\Default\AppData\Local\temp
2015-08-12 18:31 . 2015-08-12 18:31        --------        d-----w-        c:\program files (x86)\VS Revo Group
2015-08-11 19:05 . 2015-08-11 19:05        --------        d-----w-        C:\FRST
2015-08-11 17:55 . 2015-08-11 17:55        --------        d-----w-        c:\program files (x86)\Common Files\Java
2015-08-09 19:59 . 2015-06-09 18:03        3180544        ----a-w-        c:\windows\system32\rdpcorets.dll
2015-08-09 19:59 . 2015-06-09 18:03        16384        ----a-w-        c:\windows\system32\RdpGroupPolicyExtension.dll
2015-08-09 19:59 . 2015-06-03 20:17        243200        ----a-w-        c:\windows\system32\rdpudd.dll
2015-08-09 19:59 . 2015-06-11 17:57        53248        ----a-w-        c:\windows\SysWow64\tsgqec.dll
2015-08-09 19:59 . 2015-06-11 17:57        856064        ----a-w-        c:\windows\SysWow64\rdvidcrl.dll
2015-08-09 19:59 . 2015-06-11 17:57        6131200        ----a-w-        c:\windows\SysWow64\mstscax.dll
2015-08-09 19:59 . 2015-06-11 17:56        7077376        ----a-w-        c:\windows\system32\mstscax.dll
2015-08-09 19:59 . 2015-06-11 17:56        62976        ----a-w-        c:\windows\system32\tsgqec.dll
2015-08-09 19:59 . 2015-06-11 17:56        1057792        ----a-w-        c:\windows\system32\rdvidcrl.dll
2015-08-09 19:59 . 2015-06-11 13:15        429568        ----a-w-        c:\windows\system32\wksprt.exe
2015-08-09 19:58 . 2014-12-11 17:47        87040        ----a-w-        c:\windows\system32\TSWbPrxy.exe
2015-08-04 18:35 . 2015-08-04 18:35        --------        d-----w-        c:\users\Fragster\AppData\Local\GWX
2015-08-03 17:19 . 2015-08-03 17:21        --------        d-s---w-        c:\windows\system32\GWX
2015-08-03 17:19 . 2015-08-03 17:19        --------        d-s---w-        c:\windows\SysWow64\GWX
2015-08-03 17:19 . 2015-08-03 17:19        --------        d-s---w-        c:\windows\system32\CompatTel
2015-08-03 17:19 . 2015-08-03 17:19        --------        d-----w-        c:\windows\system32\appraiser
2015-08-03 17:17 . 2013-10-02 01:10        44544        ----a-w-        c:\windows\system32\TsUsbGDCoInstaller.dll
2015-08-03 17:17 . 2013-10-02 04:51        3584        ----a-w-        c:\windows\system32\drivers\de-DE\tsusbflt.sys.mui
2015-08-03 17:17 . 2013-10-02 02:22        56832        ----a-w-        c:\windows\system32\drivers\TsUsbFlt.sys
2015-08-03 17:17 . 2013-10-02 02:11        13824        ----a-w-        c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-08-03 17:17 . 2013-10-02 02:08        12800        ----a-w-        c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-08-03 17:17 . 2013-10-02 01:48        56832        ----a-w-        c:\windows\system32\MsRdpWebAccess.dll
2015-08-03 17:17 . 2013-10-02 01:48        18944        ----a-w-        c:\windows\system32\wksprtPS.dll
2015-08-03 17:17 . 2013-10-02 00:14        50176        ----a-w-        c:\windows\SysWow64\MsRdpWebAccess.dll
2015-08-03 17:17 . 2013-10-02 00:14        17920        ----a-w-        c:\windows\SysWow64\wksprtPS.dll
2015-08-03 17:17 . 2013-10-01 23:31        1147392        ----a-w-        c:\windows\system32\mstsc.exe
2015-08-03 17:17 . 2013-10-01 22:34        1068544        ----a-w-        c:\windows\SysWow64\mstsc.exe
2015-08-03 17:16 . 2012-08-23 14:10        19456        ----a-w-        c:\windows\system32\drivers\rdpvideominiport.sys
2015-08-03 17:16 . 2012-08-23 14:08        30208        ----a-w-        c:\windows\system32\drivers\TsUsbGD.sys
2015-08-03 17:16 . 2012-08-23 11:12        192000        ----a-w-        c:\windows\SysWow64\rdpendp_winip.dll
2015-08-03 17:16 . 2012-08-23 10:51        228864        ----a-w-        c:\windows\system32\rdpendp_winip.dll
2015-08-03 17:14 . 2014-06-27 02:08        2777088        ----a-w-        c:\windows\system32\msmpeg2vdec.dll
2015-08-03 17:14 . 2014-06-27 01:45        2285056        ----a-w-        c:\windows\SysWow64\msmpeg2vdec.dll
2015-08-03 17:12 . 2015-04-11 03:19        69888        ----a-w-        c:\windows\system32\drivers\stream.sys
2015-08-03 17:12 . 2012-07-06 20:07        552960        ----a-w-        c:\windows\system32\drivers\bthport.sys
2015-08-03 17:12 . 2011-02-18 10:51        31232        ----a-w-        c:\windows\system32\prevhost.exe
2015-08-03 17:12 . 2011-02-18 05:39        31232        ----a-w-        c:\windows\SysWow64\prevhost.exe
2015-08-03 17:12 . 2014-10-30 02:03        165888        ----a-w-        c:\windows\system32\charmap.exe
2015-08-03 17:12 . 2014-10-30 01:45        155136        ----a-w-        c:\windows\SysWow64\charmap.exe
2015-08-03 17:12 . 2013-01-24 06:01        223752        ----a-w-        c:\windows\system32\drivers\fvevol.sys
2015-08-03 17:10 . 2013-08-28 01:12        461312        ----a-w-        c:\windows\system32\scavengeui.dll
2015-08-03 17:09 . 2015-05-09 18:26        493504        ----a-w-        c:\windows\system32\mcupdate_GenuineIntel.dll
2015-08-03 17:06 . 2015-08-03 17:06        --------        d-----w-        c:\program files (x86)\Microsoft
2015-07-27 20:19 . 2015-07-27 20:19        --------        d-----w-        c:\users\Fragster\AppData\Local\CEF
2015-07-27 17:07 . 2015-07-27 17:07        --------        d-----w-        c:\program files\McAfee Security Scan
2015-07-21 19:55 . 2015-07-15 03:19        41984        ----a-w-        c:\windows\system32\lpk.dll
2015-07-21 19:55 . 2015-07-15 03:19        100864        ----a-w-        c:\windows\system32\fontsub.dll
2015-07-21 19:55 . 2015-07-15 03:19        14336        ----a-w-        c:\windows\system32\dciman32.dll
2015-07-21 19:55 . 2015-07-15 03:19        46080        ----a-w-        c:\windows\system32\atmlib.dll
2015-07-21 19:55 . 2015-07-15 02:55        70656        ----a-w-        c:\windows\SysWow64\fontsub.dll
2015-07-21 19:55 . 2015-07-15 02:55        10240        ----a-w-        c:\windows\SysWow64\dciman32.dll
2015-07-21 19:55 . 2015-07-15 02:55        34304        ----a-w-        c:\windows\SysWow64\atmlib.dll
2015-07-21 19:55 . 2015-07-15 02:54        25600        ----a-w-        c:\windows\SysWow64\lpk.dll
2015-07-21 19:55 . 2015-07-15 01:59        372224        ----a-w-        c:\windows\system32\atmfd.dll
2015-07-21 19:55 . 2015-07-15 01:52        299008        ----a-w-        c:\windows\SysWow64\atmfd.dll
2015-07-15 08:14 . 2015-06-27 02:47        814080        ----a-w-        c:\windows\system32\jscript9diag.dll
2015-07-15 08:14 . 2015-06-27 02:43        5923840        ----a-w-        c:\windows\system32\jscript9.dll
2015-07-15 08:14 . 2015-06-27 01:39        4520448        ----a-w-        c:\windows\SysWow64\jscript9.dll
2015-07-15 08:14 . 2015-06-25 08:57        3207168        ----a-w-        c:\windows\system32\win32k.sys
2015-07-15 08:14 . 2015-06-17 17:47        404992        ----a-w-        c:\windows\system32\gdi32.dll
2015-07-15 08:14 . 2015-06-17 17:37        312320        ----a-w-        c:\windows\SysWow64\gdi32.dll
2015-07-15 08:14 . 2015-06-02 00:07        254976        ----a-w-        c:\windows\system32\cewmdm.dll
2015-07-15 08:14 . 2015-06-01 23:47        210432        ----a-w-        c:\windows\SysWow64\cewmdm.dll
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-08-11 17:55 . 2013-11-01 18:55        321632        ----a-w-        c:\windows\system32\javaws.exe
2015-08-11 17:55 . 2013-11-01 18:55        206944        ----a-w-        c:\windows\system32\javaw.exe
2015-08-11 17:55 . 2013-11-01 18:55        206432        ----a-w-        c:\windows\system32\java.exe
2015-08-11 17:55 . 2013-11-01 18:55        110688        ----a-w-        c:\windows\system32\WindowsAccessBridge-64.dll
2015-08-11 17:54 . 2013-11-01 19:09        97888        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll
2015-08-11 17:49 . 2012-03-30 20:56        778440        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2015-08-11 17:49 . 2012-03-30 20:56        142536        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-07-30 06:35 . 2014-07-16 18:50        162528        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
2015-07-30 06:35 . 2014-07-16 18:50        141416        ----a-w-        c:\windows\system32\drivers\avipbb.sys
2015-07-03 06:43 . 2012-06-11 20:34        130333168        ----a-w-        c:\windows\system32\MRT.exe
2015-06-16 23:01 . 2015-06-16 23:01        1202856        ----a-w-        c:\windows\SysWow64\FM20.DLL
2015-05-25 18:01 . 2015-08-03 17:13        44032        ----a-w-        c:\windows\apppatch\acwow64.dll
2012-11-14 22:11 . 2012-11-14 22:11        144896        ----a-w-        c:\program files\vrayspawner2011.exe
2012-11-14 22:11 . 2012-11-14 22:11        1101312        ----a-w-        c:\program files\dte_wrapper.dll
2012-11-14 22:11 . 2012-11-14 22:11        1038848        ----a-w-        c:\program files\HairVrPrims2011.dll
2012-11-14 22:11 . 2012-11-14 22:11        802304        ----a-w-        c:\program files\glslang.dll
2012-11-14 22:11 . 2012-11-14 22:11        4333568        ----a-w-        c:\program files\vray.dll
2012-11-14 22:11 . 2012-11-14 22:11        3381944        ----a-w-        c:\program files\libmmd.dll
2012-11-14 22:11 . 2012-11-14 22:11        173056        ----a-w-        c:\program files\glvm.dll
2010-12-10 17:15 . 2012-11-14 22:11        7111168        ----a-w-        c:\program files\vray2011.dll
2009-12-31 12:01 . 2012-11-14 22:11        266240        ----a-w-        c:\program files\cgauth.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44        189464        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44        189464        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt3]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44        189464        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt4]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44        189464        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt5]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44        189464        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt6]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44        189464        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt7]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44        189464        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt8]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44        189464        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44        189464        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44        189464        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt3]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44        189464        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt4]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44        189464        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt5]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44        189464        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt6]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44        189464        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt7]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44        189464        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt8]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:44        189464        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Akamai NetSession Interface"="c:\users\Fragster\AppData\Local\Akamai\netsession_win.exe" [2015-07-23 4691384]
"Dropbox Update"="c:\users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe" [2015-06-06 134512]
"Spotify Web Helper"="c:\users\Fragster\AppData\Roaming\Spotify\SpotifyWebHelper.exe" [2015-05-08 2020920]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Func KB-460"="g:\programme\Func Tastatur\KB-460_Core" [X]
"LWS"="c:\program files (x86)\Logitech\LWS\Webcam Software\LWS.exe" [2011-11-11 205336]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-05-30 59280]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-06-07 421776]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-04-18 421888]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2015-07-30 782008]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"Avira Systray"="c:\program files (x86)\Avira\Launcher\Avira.Systray.exe" [2015-07-02 134368]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2015-06-08 334896]
.
c:\users\Fragster\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2015-5-5 39179912]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.11.149\SSScheduler.exe [2015-6-26 330456]
Netzwerk Server.lnk - c:\program files (x86)\WIBUKEY\Server\WkSvMgr.exe [2013-3-17 6580080]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
R2 AntiVirMailService;Avira Email-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe [x]
R2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 lvpepf64;Volume Adapter;c:\windows\system32\DRIVERS\lv302a64.sys;c:\windows\SYSNATIVE\DRIVERS\lv302a64.sys [x]
R3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys;c:\windows\SYSNATIVE\DRIVERS\LVPr2M64.sys [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.11.149\McCHSvc.exe;c:\program files\McAfee Security Scan\3.11.149\McCHSvc.exe [x]
R3 mi-raysat_3dsmax2015_64;mental ray Satellite for Autodesk 3ds Max 2015 64-bit;g:\autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe;g:\autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe [x]
R3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
R3 Origin Client Service;Origin Client Service;c:\program files (x86)\Origin\OriginClientService.exe;c:\program files (x86)\Origin\OriginClientService.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R4 AdAppMgrSvc;Autodesk Application Manager Service;c:\program files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe ;c:\program files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe  [x]
R4 TomTomHOMEService;TomTomHOMEService;g:\programme\TomTom HOME 2\TomTomHOMEService.exe;g:\programme\TomTom HOME 2\TomTomHOMEService.exe [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 Avira.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
S2 TabletServiceWacom;TabletServiceWacom;c:\windows\system32\Wacom_Tablet.exe;c:\windows\SYSNATIVE\Wacom_Tablet.exe [x]
S2 UMVPFSrv;UMVPFSrv;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 I1KBFLTR;T1 Gaming Keyboard;c:\windows\system32\drivers\I1KBFLTR.sys;c:\windows\SYSNATIVE\drivers\I1KBFLTR.sys [x]
S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
S3 LVUVC64;Logitech HD Pro Webcam C920(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.sys;c:\windows\SYSNATIVE\DRIVERS\wacmoumonitor.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-08-09 20:10        995144        ----a-w-        c:\program files (x86)\Google\Chrome\Application\44.0.2403.130\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-08-11 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-30 17:49]
.
2015-08-02 c:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job
- c:\users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-06 12:07]
.
2015-08-11 c:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job
- c:\users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-06 12:07]
.
2015-08-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-04-02 13:47]
.
2015-08-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-04-02 13:47]
.
2015-07-16 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job
- c:\users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-05 19:49]
.
2015-08-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job
- c:\users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-05 19:49]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:50        226328        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:50        226328        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt3]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:50        226328        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt4]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:50        226328        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt5]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:50        226328        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt6]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:50        226328        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt7]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:50        226328        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt8]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2015-07-24 01:50        226328        ----a-w-        c:\users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2015-03-28 1570672]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2015-03-28 2673296]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mDefault_Search_URL = about:blank
mDefault_Page_URL = about:blank
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = about:blank
uInternet Settings,ProxyOverride = <local>
uSearchAssistant = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
IE: Free YouTube to MP3 Converter - c:\users\Fragster\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Fragster\AppData\Roaming\Mozilla\Firefox\Profiles\uppe0zay.default-1409093548782\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-Steam - c:\program files (x86)\Steam\Steam.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM-Run-Nvtmru - c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe
AddRemove-Battlelog Web Plugins - c:\program files (x86)\Battlelog Web Plugins\uninstall.exe
AddRemove-Free Video to MP3 Converter_is1 - c:\program files (x86)\Common Files\DVDVideoSoft\Uninstall.exe
AddRemove-Savings Sidekick - c:\program files (x86)\Savings Sidekick\Uninstall.exe
AddRemove-Steam App 280 - c:\program files (x86)\Steam\steam.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*^it#]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*^it#\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*^it#]
"0"=hex:76,00,6c,00,63,00,2e,00,5e,69,74,23,00,00,66,00,36,00,00,00,00,00,00,
  00,00,00,00,00,76,00,6c,00,63,00,2e,00,5e,69,74,23,2e,00,6c,00,6e,00,6b,00,\
"MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
.
[HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000\Software\SecuROM\License information*]
"datasecu"=hex:54,09,13,dc,a1,1b,22,58,25,44,64,14,f7,e9,49,40,0f,78,5b,55,aa,
  0c,72,93,ed,b5,3b,24,fb,44,e4,2d,ce,cd,94,04,84,21,e3,8c,8c,d7,e6,19,36,f7,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_18_0_0_232_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_18_0_0_232_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_18_0_0_232_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_18_0_0_232_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.18"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\windows\system32\PnkBstrA.exe
c:\users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe
g:\programme\Func Tastatur\KB-460_Core.exe
c:\program files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
c:\users\Fragster\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
c:\program files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-08-12  20:47:08 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2015-08-12 18:47
.
Vor Suchlauf: 11 Verzeichnis(se), 62.282.231.808 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 65.060.921.344 Bytes frei
.
- - End Of File - - FCA182DA54DEBBFA4D09BDA1D494BEE4
A36C5E4F47E84449FF07ED3517B43A31


schrauber 13.08.2015 11:01

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

MBB 13.08.2015 19:45

mbam:
Code:

Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 13.08.2015
Suchlaufzeit: 20:09
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.1.8.1057
Malware-Datenbank: v2015.08.13.05
Rootkit-Datenbank: v2015.08.06.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Fragster

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 450995
Abgelaufene Zeit: 9 Min., 42 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 8
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, In Quarantäne, [6beee1278b003ef8412d00cd6f93a759],
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, In Quarantäne, [6beee1278b003ef8412d00cd6f93a759],
PUP.Optional.OpenCandy.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\OpenCandyHelperRunOnce, Löschen bei Neustart, [4613e2268dfea29419789f77877c9e62],
PUP.Optional.InstallBrain.A, HKLM\SOFTWARE\WOW6432NODE\InstallIQ, In Quarantäne, [5bfe0efa414a7fb76db978e6030001ff],
PUP.Optional.SavingsSidekick.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dhdepfaagokllfmhfbcfmocaeigmoebo, In Quarantäne, [a0b9c04822697db9e3fec8e935cf9a66],
PUP.Optional.WebSearches.ShrtCln, HKU\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\SupHpUISoft, In Quarantäne, [e6730bfddfac80b6ad74b78ad2310df3],
PUP.Optional.SavingsSidekick.A, HKU\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\APPDATALOW\SOFTWARE\Savings Sidekick, In Quarantäne, [c59490781f6c46f0ef0860f04bb8af51],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\215 Apps, In Quarantäne, [91c8f5132a6137ff9b0daa9200030cf4],

Registrierungswerte: 4
PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, In Quarantäne, [253442c636556ccaab170638907306fa]
PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, In Quarantäne, [5aff6b9dd7b471c5952d51ed3ec50000]
PUP.Optional.CrossFire.SA, HKU\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\215 APPS|5060, Savings Sidekick, In Quarantäne, [6dec5fa9e3a8142252f54af0c93b1be5]
PUP.Optional.Snapdo.T, HKU\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {006ee092-9658-4fd6-bd8e-a21a348e59f5}, In Quarantäne, [392045c3167544f21e1d81c5867d16ea]

Registrierungsdaten: 4
PUP.Optional.HelperBar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}),Ersetzt,[22379e6a1e6de6509e067bcbef16c937]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}),Ersetzt,[1f3ac345d8b3cc6a05a357ef1de86d93]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}),Ersetzt,[6eebcb3d048788ae8721a79fef160ef2]
PUP.Optional.HelperBar.A, HKU\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=fcbd11c8-e6a0-4cf6-bdc3-9c6e6b2912f2&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}),Ersetzt,[f960fc0ca2e9d4623e67f5519b6aa957]

Ordner: 4
PUP.Optional.OpenCandy, C:\Users\Fragster\AppData\Roaming\OpenCandy, In Quarantäne, [4f0aef199bf0e74f55b5865d1de56997],
PUP.Optional.OpenCandy, C:\Users\Fragster\AppData\Roaming\OpenCandy\84723AEBDC1C4B9C8614AA8AAE0537CC, In Quarantäne, [4f0aef199bf0e74f55b5865d1de56997],
PUP.Optional.OpenCandy, C:\Users\Fragster\AppData\Roaming\OpenCandy\OpenCandy_84723AEBDC1C4B9C8614AA8AAE0537CC, In Quarantäne, [4f0aef199bf0e74f55b5865d1de56997],
PUP.Optional.IBUpdater.A, C:\ProgramData\IBUpdaterService, In Quarantäne, [9dbc5cacccbf50e6171fb93ead55827e],

Dateien: 8
PUP.Optional.Softonic.A, C:\Users\Fragster\Downloads\SoftonicDownloader_fuer_getdataback.exe, In Quarantäne, [92c768a0315adf57bf11b04736cae917],
PUP.Optional.OpenCandy, C:\Users\Fragster\Downloads\DTLite4454-0314.exe, In Quarantäne, [6fea20e8cfbc2b0b36c1a6cf15f0e020],
PUP.Optional.OpenCandy, C:\Users\Fragster\AppData\Roaming\OpenCandy\84723AEBDC1C4B9C8614AA8AAE0537CC\2787.ico, In Quarantäne, [4f0aef199bf0e74f55b5865d1de56997],
PUP.Optional.OpenCandy, C:\Users\Fragster\AppData\Roaming\OpenCandy\84723AEBDC1C4B9C8614AA8AAE0537CC\EBB77268-338F-4C6A-8590-AD88FED26F4A, In Quarantäne, [4f0aef199bf0e74f55b5865d1de56997],
PUP.Optional.OpenCandy, C:\Users\Fragster\AppData\Roaming\OpenCandy\84723AEBDC1C4B9C8614AA8AAE0537CC\Installer.exe, In Quarantäne, [4f0aef199bf0e74f55b5865d1de56997],
PUP.Optional.OpenCandy, C:\Users\Fragster\AppData\Roaming\OpenCandy\84723AEBDC1C4B9C8614AA8AAE0537CC\Linkury_ALL_p1v24.exe, In Quarantäne, [4f0aef199bf0e74f55b5865d1de56997],
PUP.Optional.OpenCandy, C:\Users\Fragster\AppData\Roaming\OpenCandy\84723AEBDC1C4B9C8614AA8AAE0537CC\OCBrowserHelper_1.0.3.85.dll, In Quarantäne, [4f0aef199bf0e74f55b5865d1de56997],
PUP.Optional.IBUpdater.A, C:\ProgramData\IBUpdaterService\repository.xml, In Quarantäne, [9dbc5cacccbf50e6171fb93ead55827e],

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)


AdwCleaner:
Code:

# AdwCleaner v4.208 - Bericht erstellt 13/08/2015 um 20:28:44
# Aktualisiert 09/07/2015 von Xplode
# Datenbank : 2015-08-12.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Fragster - FRAGSTER-PC
# Gestarted von : C:\Users\Fragster\Desktop\AdwCleaner_4.208.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Windows\SysWOW64\config\systemprofile\AppData\Local\FileTypeAssistant
Ordner Gelöscht : C:\Users\Fragster\AppData\Local\FileTypeAssistant
Ordner Gelöscht : C:\Users\Fragster\AppData\Roaming\dvdvideosoftiehelpers

***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Schlüssel Gelöscht : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\babylon.com
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220022502260}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{33333333-3333-3333-3333-330033503360}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055505560}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066506660}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{77777777-7777-7777-7777-770077507760}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055505560}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066506660}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{77777777-7777-7777-7777-770077507760}
Schlüssel Gelöscht : HKCU\Software\Bitberry
Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Savings Sidekick
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A2D81E70-2A98-4A08-A628-94388B063C5E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17909


-\\ Mozilla Firefox v39.0.3 (x86 de)


-\\ Google Chrome v44.0.2403.155


-\\ Chromium v


*************************

AdwCleaner[R0].txt - [4432 Bytes] - [13/08/2015 20:25:29]
AdwCleaner[S0].txt - [3996 Bytes] - [13/08/2015 20:28:44]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4055  Bytes] ##########


JRT:
Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.6 (08.10.2015:1)
OS: Windows 7 Home Premium x64
Ran by Fragster on 13.08.2015 at 20:31:47,95
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011501160}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011501160}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] C:\Users\Fragster\Appdata\Local\28050



~~~ FireFox

Emptied folder: C:\Users\Fragster\AppData\Roaming\mozilla\firefox\profiles\uppe0zay.default-1409093548782\minidumps [27 files]



~~~ Chrome


[C:\Users\Fragster\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Fragster\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Fragster\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Fragster\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[
  dhdepfaagokllfmhfbcfmocaeigmoebo
]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 13.08.2015 at 20:33:54,85
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST_02:
Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:13-08-2015
durchgeführt von Fragster (Administrator) auf FRAGSTER-PC (13-08-2015 20:34:52)
Gestartet von C:\Users\Fragster\Desktop
Geladene Profile: Fragster (Verfügbare Profile: Fragster)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-05-30] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-06-07] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-04-18] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008 2015-07-30] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Func KB-460] => G:\Programme\Func Tastatur\KB-460_Core
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [134368 2015-07-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe [4691384 2015-07-23] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Dropbox Update] => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-06] (Dropbox, Inc.)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Spotify Web Helper] => C:\Users\Fragster\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2020920 2015-05-08] (Spotify Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2012-08-26]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Netzwerk Server.lnk [2013-03-17]
ShortcutTarget: Netzwerk Server.lnk -> C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe (WIBU-SYSTEMS AG)
Startup: C:\Users\Fragster\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-03-30]
ShortcutTarget: Dropbox.lnk -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-08-11] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-11] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-08-11] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-11] (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{4803DB8B-CB64-458F-8261-FEDB79E73BCE}: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Fragster\AppData\Roaming\Mozilla\Firefox\Profiles\uppe0zay.default-1409093548782
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-11] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-11] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2012-04-05] ()
FF Plugin-x32: @esn/esnlaunch,version=1.140.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.140.0\npesnlaunch.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-11] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-11] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll [2009-09-25] (Wacom, Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Fragster\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @talk.google.com/O1DPlugin -> C:\Users\Fragster\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Fragster\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-05-07] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll [2012-10-30] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2014-06-16] ()
FF Plugin ProgramFiles/Appdata: C:\Users\Fragster\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Fragster\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Extension: Adblock Plus - C:\Users\Fragster\AppData\Roaming\Mozilla\Firefox\Profiles\uppe0zay.default-1409093548782\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-29]
FF Extension: Kein Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-08-09]

Chrome:
=======
CHR Profile: C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-02]
CHR Extension: (Google Docs) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-02]
CHR Extension: (Google Drive) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-02]
CHR Extension: (YouTube) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-02]
CHR Extension: (Google Search) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-02]
CHR Extension: (Google Sheets) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-02]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-02]
CHR Extension: (Gmail) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-02]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S4 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-07-30] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-07-30] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-07-30] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-07-30] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [218816 2015-07-02] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2012-05-15] (Macrovision Europe Ltd.) [Datei ist nicht signiert]
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [289256 2015-06-26] (McAfee, Inc.)
S3 mi-raysat_3dsmax2015_64; G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe [86016 2011-09-15] () [Datei ist nicht signiert]
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-07-27] (Electronic Arts)
S2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-07-21] ()
S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-01-02] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S2 TabletServiceWacom; C:\Windows\system32\Wacom_Tablet.exe [6245744 2010-03-09] (Wacom Technology, Corp.)
S4 TomTomHOMEService; G:\Programme\TomTom HOME 2\TomTomHOMEService.exe [93040 2014-06-05] (TomTom)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162528 2015-07-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-07-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-12] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-10-28] (DT Soft Ltd)
R3 I1KBFLTR; C:\Windows\System32\drivers\I1KBFLTR.sys [29440 2013-07-31] ()
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-13] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [106760 2015-05-09] (WIBU-SYSTEMS AG)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-13 20:33 - 2015-08-13 20:33 - 00001877 _____ C:\Users\Fragster\Desktop\JRT.txt
2015-08-13 20:31 - 2015-08-13 20:31 - 00004175 _____ C:\Users\Fragster\Desktop\AdwCleaner[S0].txt
2015-08-13 20:25 - 2015-08-13 20:28 - 00000000 ____D C:\AdwCleaner
2015-08-13 20:24 - 2015-08-13 20:24 - 00007011 _____ C:\Users\Fragster\Desktop\mbam.txt
2015-08-13 20:08 - 2015-08-13 20:30 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-13 20:07 - 2015-08-13 20:07 - 00001102 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-08-13 20:07 - 2015-08-13 20:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-08-13 20:07 - 2015-08-13 20:07 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-13 20:07 - 2015-08-13 20:07 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-08-13 20:07 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-08-13 20:07 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-08-13 20:07 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-08-13 20:06 - 2015-08-13 20:06 - 01791580 _____ (Malwarebytes Corporation) C:\Users\Fragster\Desktop\JRT.exe
2015-08-13 20:05 - 2015-08-13 20:05 - 02248704 _____ C:\Users\Fragster\Desktop\AdwCleaner_4.208.exe
2015-08-13 20:04 - 2015-08-13 20:04 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Fragster\Desktop\mbam-setup-2.1.8.1057.exe
2015-08-12 20:53 - 2015-08-12 20:47 - 00041956 _____ C:\Users\Fragster\Desktop\ComboFix.txt
2015-08-12 20:47 - 2015-08-12 20:47 - 00041956 _____ C:\ComboFix.txt
2015-08-12 20:38 - 2015-08-12 20:47 - 00000000 ____D C:\Qoobox
2015-08-12 20:38 - 2015-08-12 20:46 - 00000000 ____D C:\Windows\erdnt
2015-08-12 20:38 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-08-12 20:38 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-08-12 20:38 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-08-12 20:38 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-08-12 20:38 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-08-12 20:38 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-08-12 20:38 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-08-12 20:38 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-08-12 20:37 - 2015-08-12 20:37 - 05634368 ____R (Swearware) C:\Users\Fragster\Desktop\ComboFix.exe
2015-08-12 20:31 - 2015-08-12 20:31 - 00001264 _____ C:\Users\Fragster\Desktop\Revo Uninstaller.lnk
2015-08-12 20:31 - 2015-08-12 20:31 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-08-12 20:29 - 2015-08-12 20:29 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Fragster\Desktop\revosetup95.exe
2015-08-11 21:27 - 2015-08-11 21:27 - 00089419 _____ C:\Users\Fragster\Desktop\Gmer.txt
2015-08-11 21:05 - 2015-08-13 20:35 - 00025369 _____ C:\Users\Fragster\Desktop\FRST.txt
2015-08-11 21:05 - 2015-08-13 20:34 - 00000000 ____D C:\Users\Fragster\Desktop\FRST-OlderVersion
2015-08-11 21:05 - 2015-08-13 20:34 - 00000000 ____D C:\FRST
2015-08-11 21:05 - 2015-08-11 21:05 - 00076340 _____ C:\Users\Fragster\Desktop\Addition.txt
2015-08-11 20:01 - 2015-08-11 20:09 - 00001111 _____ C:\Users\Fragster\Desktop\Neues Textdokument.txt
2015-08-11 19:07 - 2015-08-11 19:07 - 00380416 _____ C:\Users\Fragster\Desktop\Gmer-19357.exe
2015-08-11 19:04 - 2015-08-13 20:34 - 02173952 _____ (Farbar) C:\Users\Fragster\Desktop\FRST64.exe
2015-08-11 19:01 - 2015-08-11 19:01 - 00005312 _____ C:\Users\Fragster\Desktop\Avira_Ereignisse.txt
2015-08-09 22:18 - 2015-08-10 19:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-09 21:59 - 2015-06-11 19:57 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-08-09 21:59 - 2015-06-11 19:57 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-08-09 21:59 - 2015-06-11 19:57 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-08-09 21:59 - 2015-06-11 19:56 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-09 21:59 - 2015-06-11 19:56 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-08-09 21:59 - 2015-06-11 19:56 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-08-09 21:59 - 2015-06-11 15:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2015-08-09 21:59 - 2015-06-09 20:03 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-08-09 21:59 - 2015-06-09 20:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-08-09 21:59 - 2015-06-03 22:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-08-09 21:58 - 2014-12-11 19:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-08-04 20:35 - 2015-08-04 20:35 - 00000000 ____D C:\Users\Fragster\AppData\Local\GWX
2015-08-03 19:19 - 2015-08-03 19:21 - 00000000 ___SD C:\Windows\system32\GWX
2015-08-03 19:19 - 2015-08-03 19:19 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-08-03 19:19 - 2015-08-03 19:19 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-03 19:19 - 2015-08-03 19:19 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-03 19:18 - 2015-01-09 01:44 - 00419936 _____ C:\Windows\SysWOW64\locale.nls
2015-08-03 19:18 - 2015-01-09 01:43 - 00419936 _____ C:\Windows\system32\locale.nls
2015-08-03 19:17 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2015-08-03 19:17 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-08-03 19:17 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-08-03 19:17 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2015-08-03 19:17 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2015-08-03 19:17 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2015-08-03 19:17 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2015-08-03 19:17 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2015-08-03 19:17 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-08-03 19:17 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2015-08-03 19:16 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-08-03 19:16 - 2012-08-23 16:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2015-08-03 19:16 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2015-08-03 19:16 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2015-08-03 19:14 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-08-03 19:14 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2015-08-03 19:13 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-08-03 19:13 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-08-03 19:13 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-08-03 19:13 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-03 19:13 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-03 19:13 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-08-03 19:13 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-08-03 19:13 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-08-03 19:13 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-08-03 19:13 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-08-03 19:13 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-08-03 19:13 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-08-03 19:13 - 2015-06-03 22:16 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-08-03 19:13 - 2015-06-03 22:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-08-03 19:13 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-03 19:13 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-08-03 19:13 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-08-03 19:13 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-03 19:13 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-08-03 19:13 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-08-03 19:13 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-08-03 19:13 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-08-03 19:13 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-08-03 19:13 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-08-03 19:13 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-08-03 19:13 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-08-03 19:13 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-08-03 19:13 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-08-03 19:13 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-03 19:13 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-08-03 19:13 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-08-03 19:13 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-08-03 19:13 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-08-03 19:13 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-08-03 19:13 - 2015-03-14 05:21 - 01632768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-08-03 19:13 - 2015-03-14 05:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-08-03 19:13 - 2015-03-14 05:04 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-08-03 19:13 - 2015-03-14 05:04 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-08-03 19:13 - 2015-03-04 06:41 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-08-03 19:13 - 2015-03-04 06:41 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-08-03 19:13 - 2015-03-04 06:41 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-08-03 19:13 - 2015-03-04 06:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-08-03 19:13 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-08-03 19:13 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-08-03 19:13 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-08-03 19:13 - 2015-01-29 05:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-08-03 19:13 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-08-03 19:13 - 2015-01-09 05:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-08-03 19:13 - 2015-01-09 05:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-08-03 19:13 - 2015-01-09 05:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-08-03 19:13 - 2015-01-09 04:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-08-03 19:13 - 2014-11-26 05:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-08-03 19:13 - 2014-11-26 05:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-08-03 19:13 - 2014-11-11 03:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-08-03 19:13 - 2014-11-08 05:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-08-03 19:13 - 2014-11-08 04:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-08-03 19:13 - 2014-10-03 04:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-08-03 19:13 - 2014-10-03 03:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-08-03 19:13 - 2014-10-03 03:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2015-08-03 19:13 - 2014-10-03 03:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2015-08-03 19:13 - 2014-10-03 03:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2015-08-03 19:13 - 2014-10-03 03:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2015-08-03 19:13 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-08-03 19:13 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-08-03 19:13 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2015-08-03 19:13 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-08-03 19:13 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2015-08-03 19:13 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2015-08-03 19:13 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2015-08-03 19:13 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-08-03 19:13 - 2013-12-04 04:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2015-08-03 19:13 - 2013-12-04 04:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2015-08-03 19:13 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2015-08-03 19:13 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2015-08-03 19:13 - 2013-12-04 04:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2015-08-03 19:13 - 2013-12-04 04:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2015-08-03 19:13 - 2013-12-04 04:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2015-08-03 19:13 - 2013-12-04 04:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2015-08-03 19:13 - 2013-12-04 04:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2015-08-03 19:13 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2015-08-03 19:13 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2015-08-03 19:13 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2015-08-03 19:13 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2015-08-03 19:13 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2015-08-03 19:13 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2015-08-03 19:13 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2015-08-03 19:13 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2015-08-03 19:13 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2015-08-03 19:13 - 2013-10-30 04:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2015-08-03 19:13 - 2013-10-30 04:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2015-08-03 19:13 - 2013-10-04 04:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2015-08-03 19:13 - 2013-10-04 04:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2015-08-03 19:13 - 2013-10-04 03:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2015-08-03 19:13 - 2013-10-04 03:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2015-08-03 19:13 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2015-08-03 19:13 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2015-08-03 19:13 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2015-08-03 19:13 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-03 19:13 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-03 19:13 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-08-03 19:13 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-08-03 19:13 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2015-08-03 19:13 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2015-08-03 19:13 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2015-08-03 19:13 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2015-08-03 19:13 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2015-08-03 19:13 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2015-08-03 19:13 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2015-08-03 19:13 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2015-08-03 19:13 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2015-08-03 19:13 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2015-08-03 19:13 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2015-08-03 19:13 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2015-08-03 19:13 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2015-08-03 19:13 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2015-08-03 19:13 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2015-08-03 19:13 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2015-08-03 19:13 - 2012-10-03 18:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2015-08-03 19:13 - 2012-08-22 20:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-08-03 19:13 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2015-08-03 19:13 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2015-08-03 19:13 - 2012-01-04 12:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2015-08-03 19:13 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2015-08-03 19:13 - 2011-12-30 08:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2015-08-03 19:13 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2015-08-03 19:13 - 2011-06-16 07:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2015-08-03 19:13 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2015-08-03 19:13 - 2011-05-04 07:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2015-08-03 19:13 - 2011-05-04 07:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2015-08-03 19:13 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2015-08-03 19:13 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2015-08-03 19:13 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2015-08-03 19:13 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2015-08-03 19:13 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2015-08-03 19:13 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2015-08-03 19:13 - 2011-03-11 08:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2015-08-03 19:13 - 2011-03-11 08:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2015-08-03 19:13 - 2011-03-11 08:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2015-08-03 19:13 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2015-08-03 19:13 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2015-08-03 19:13 - 2011-03-11 06:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2015-08-03 19:12 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-08-03 19:12 - 2014-10-30 04:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-08-03 19:12 - 2014-10-30 03:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2015-08-03 19:12 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2015-08-03 19:12 - 2012-07-06 22:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2015-08-03 19:12 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2015-08-03 19:12 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2015-08-03 19:10 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2015-08-03 19:09 - 2015-05-09 20:26 - 00493504 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-03 19:06 - 2015-08-03 19:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2015-07-29 08:19 - 2015-07-29 08:19 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-07-27 22:19 - 2015-07-27 22:19 - 00000000 ____D C:\Users\Fragster\AppData\Local\CEF
2015-07-27 19:07 - 2015-07-27 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-07-27 19:07 - 2015-07-27 19:07 - 00000000 ____D C:\Program Files\McAfee Security Scan
2015-07-27 00:30 - 2015-07-27 00:30 - 00000000 ____D C:\Users\Fragster\Desktop\Der kleine Bruder CD 1
2015-07-21 23:14 - 2015-08-04 21:17 - 00000000 ____D C:\Users\Public\Documents\Jagged Alliance - Back in Action
2015-07-21 21:55 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-21 21:55 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-21 21:55 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-21 21:55 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-21 21:55 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-21 21:55 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-21 21:55 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-21 21:55 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-21 21:55 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-21 21:55 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-16 12:24 - 2015-07-16 12:24 - 00001066 _____ C:\Users\Public\Desktop\VLC media player.lnk
2015-07-15 11:12 - 2015-07-15 11:12 - 00000796 _____ C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2015.lnk
2015-07-15 10:28 - 2015-07-15 10:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO Steuer-Sparbuch 2015
2015-07-15 10:18 - 2015-07-15 10:18 - 01038704 _____ (Amazon Services LLC) C:\Users\Fragster\Downloads\WISO_Steuer_Sparbuch_2015_Downloader.exe
2015-07-15 10:14 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 10:14 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 10:14 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 10:14 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 10:14 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 10:14 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 10:14 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 10:14 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 10:13 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 10:13 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 10:13 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 10:13 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 10:13 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 10:13 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 10:13 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 10:13 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 10:13 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 10:13 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 10:13 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 10:13 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 10:13 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 10:13 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 10:13 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 10:13 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 10:13 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 10:13 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 10:13 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 10:13 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 10:13 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 10:13 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 10:13 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 10:13 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 10:13 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 10:13 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-15 10:13 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 10:13 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-15 10:13 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-15 10:13 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-15 10:13 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-15 10:13 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-15 10:13 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 10:13 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 10:13 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 10:13 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-15 10:13 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 10:13 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-15 10:13 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 10:13 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 10:13 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 10:13 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 10:13 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 10:13 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 10:13 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 10:13 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 10:13 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 10:13 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 10:13 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 10:13 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 10:13 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 10:13 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 10:13 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 10:13 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 10:13 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 10:13 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 10:13 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 10:13 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 10:13 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 10:13 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 10:13 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 10:13 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 10:13 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-15 10:13 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 10:13 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-15 10:13 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-15 10:13 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 10:13 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-15 10:13 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 10:13 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 10:13 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 10:13 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-15 10:13 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-15 10:13 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 10:13 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 10:13 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 10:13 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 10:13 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-15 10:13 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 10:13 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-15 10:13 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 10:13 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 10:13 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 10:13 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 10:13 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 10:13 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 10:13 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 10:13 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-15 10:13 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-15 10:13 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 10:13 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 10:13 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-13 20:34 - 2011-04-12 09:43 - 00699416 _____ C:\Windows\system32\perfh007.dat
2015-08-13 20:34 - 2011-04-12 09:43 - 00149556 _____ C:\Windows\system32\perfc007.dat
2015-08-13 20:34 - 2009-07-14 07:13 - 01620110 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-13 20:33 - 2012-03-30 22:21 - 01796713 _____ C:\Windows\WindowsUpdate.log
2015-08-13 20:32 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-13 20:32 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-13 20:30 - 2012-05-10 19:55 - 00000000 ___RD C:\Users\Fragster\Dropbox
2015-08-13 20:30 - 2012-05-10 19:53 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Dropbox
2015-08-13 20:29 - 2015-04-02 15:47 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-13 20:29 - 2012-09-22 15:20 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\WTablet
2015-08-13 20:29 - 2010-11-21 05:47 - 00548270 _____ C:\Windows\PFRO.log
2015-08-13 20:29 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-13 20:29 - 2009-07-14 06:51 - 00283339 _____ C:\Windows\setupact.log
2015-08-13 20:21 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Media
2015-08-13 20:12 - 2012-10-05 21:49 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job
2015-08-13 20:11 - 2015-04-02 15:47 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-13 20:05 - 2015-06-06 14:07 - 00001236 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job
2015-08-12 20:49 - 2012-03-30 22:56 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-12 20:47 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-08-12 20:45 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-08-12 20:29 - 2012-08-30 00:06 - 00000000 ____D C:\Users\Fragster\AppData\Local\Akamai
2015-08-11 21:56 - 2013-11-16 19:21 - 00000000 ____D C:\Windows\rescache
2015-08-11 19:56 - 2013-11-01 20:55 - 00000000 ____D C:\ProgramData\Oracle
2015-08-11 19:56 - 2012-03-31 17:01 - 00000000 ____D C:\Program Files (x86)\Java
2015-08-11 19:55 - 2013-11-01 20:55 - 00321632 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-08-11 19:55 - 2013-11-01 20:55 - 00206944 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-08-11 19:55 - 2013-11-01 20:55 - 00206432 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-08-11 19:55 - 2013-11-01 20:55 - 00110688 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-08-11 19:55 - 2013-11-01 20:55 - 00000000 ____D C:\Program Files\Java
2015-08-11 19:54 - 2013-11-01 21:09 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-08-11 19:54 - 2013-11-01 20:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-11 19:49 - 2012-03-30 22:56 - 00778440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-08-11 19:49 - 2012-03-30 22:56 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-11 19:49 - 2012-03-30 22:56 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-08-11 19:45 - 2013-02-11 22:14 - 00001978 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2015-08-10 20:03 - 2012-05-08 22:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-04 20:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2015-08-03 19:21 - 2012-03-30 23:08 - 00066376 _____ C:\Users\Fragster\AppData\Local\GDIPFONTCACHEV1.DAT
2015-08-03 19:20 - 2009-07-14 06:45 - 05112912 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-03 19:20 - 2009-07-14 05:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-08-03 19:06 - 2012-07-09 12:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-08-02 16:05 - 2015-06-06 14:07 - 00001184 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job
2015-07-31 22:28 - 2015-04-14 18:47 - 00000080 _____ C:\Users\Fragster\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2015-07-31 09:09 - 2015-07-11 23:42 - 00001120 _____ C:\Users\Public\Desktop\Avira.lnk
2015-07-31 09:09 - 2014-07-16 20:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-07-31 09:09 - 2013-10-11 19:31 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-30 08:35 - 2014-07-16 20:50 - 00162528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-07-30 08:35 - 2014-07-16 20:50 - 00141416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-07-27 22:17 - 2012-03-30 23:14 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Origin
2015-07-27 22:17 - 2012-03-30 23:13 - 00000000 ____D C:\ProgramData\Origin
2015-07-27 22:16 - 2012-03-30 23:13 - 00000000 ____D C:\Program Files (x86)\Origin
2015-07-27 20:13 - 2014-09-15 11:35 - 00000726 _____ C:\Windows\wiso.ini
2015-07-27 19:11 - 2014-09-15 15:15 - 00000000 ____D C:\Users\Fragster\Documents\Steuer-Sparbuch
2015-07-27 19:07 - 2012-08-26 16:53 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2015-07-27 15:41 - 2013-02-25 23:29 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Spotify
2015-07-27 15:41 - 2013-02-25 23:29 - 00000000 ____D C:\Users\Fragster\AppData\Local\Spotify
2015-07-21 23:13 - 2012-03-31 00:38 - 00725453 _____ C:\Windows\DirectX.log
2015-07-19 18:57 - 2013-05-22 22:11 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\vlc
2015-07-19 16:36 - 2012-04-01 19:38 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\dvdcss
2015-07-19 13:09 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-18 16:00 - 2015-06-06 14:07 - 00004216 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA
2015-07-18 16:00 - 2015-06-06 14:07 - 00003820 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core
2015-07-16 12:04 - 2015-04-02 15:47 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-16 12:04 - 2015-04-02 15:47 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-16 03:12 - 2012-10-05 21:49 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job
2015-07-16 03:07 - 2012-10-05 21:49 - 00004112 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA
2015-07-16 03:07 - 2012-10-05 21:49 - 00003716 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core
2015-07-15 17:07 - 2015-04-14 18:47 - 00000000 ____D C:\Program Files\Rockstar Games
2015-07-15 17:07 - 2014-08-18 19:36 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2015-07-15 11:25 - 2012-07-09 12:51 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-15 11:23 - 2013-08-15 12:46 - 00000000 ____D C:\Windows\system32\MRT
2015-07-15 11:12 - 2014-09-15 11:35 - 00000000 ____D C:\Users\Fragster\AppData\Local\Buhl
2015-07-15 10:56 - 2012-03-30 23:03 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Skype
2015-07-15 10:28 - 2014-02-26 01:17 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2012-11-15 00:11 - 2009-12-31 14:01 - 0266240 _____ (Chaos Group Ltd) C:\Program Files\cgauth.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 1101312 _____ () C:\Program Files\dte_wrapper.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 0802304 _____ () C:\Program Files\glslang.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 0173056 _____ () C:\Program Files\glvm.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 1038848 _____ (Joe Alter Inc) C:\Program Files\HairVrPrims2011.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 3381944 _____ (Intel Corporation) C:\Program Files\libmmd.dll
2012-11-14 23:06 - 2012-11-15 00:11 - 0000125 _____ () C:\Program Files\plugin.ini
2012-11-15 00:11 - 2012-11-15 00:11 - 4333568 _____ (Chaos Software Ltd) C:\Program Files\vray.dll
2012-11-15 00:11 - 2010-12-10 19:15 - 7111168 _____ (Chaos Software Ltd) C:\Program Files\vray2011.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 0172032 _____ () C:\Program Files\vraydummy2011.max
2012-11-15 00:11 - 2012-11-15 00:11 - 0011798 _____ () C:\Program Files\vraydummy2011.xml
2012-11-15 00:11 - 2012-11-15 00:11 - 0144896 _____ () C:\Program Files\vrayspawner2011.exe
2015-05-08 20:09 - 2015-05-08 20:10 - 0000132 _____ () C:\Users\Fragster\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-05-08 20:07 - 2015-05-08 20:07 - 0000132 _____ () C:\Users\Fragster\AppData\Roaming\Adobe Targa Format CS5 Prefs
2012-04-10 20:44 - 2012-10-21 19:37 - 0000125 ___SH () C:\ProgramData\.zreglib

Einige Dateien in TEMP:
====================
C:\Users\Fragster\AppData\Local\Temp\avgnt.exe
C:\Users\Fragster\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpaeqjpl.dll
C:\Users\Fragster\AppData\Local\Temp\Quarantine.exe
C:\Users\Fragster\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-08-03 20:57

==================== Ende von Ergebnis ============================


MBB 13.08.2015 19:46

Addition_02:
Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:13-08-2015
durchgeführt von Fragster (2015-08-13 20:35:09)
Gestartet von C:\Users\Fragster\Desktop
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2049330118-253893184-3514707546-500 - Administrator - Disabled)
Fragster (S-1-5-21-2049330118-253893184-3514707546-1000 - Administrator - Enabled) => C:\Users\Fragster
Gast (S-1-5-21-2049330118-253893184-3514707546-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2049330118-253893184-3514707546-1004 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe After Effects CS3 Third Party Content (HKLM-x32\...\Adobe_3675c95c239b992d5d0ee8fce969b9e) (Version: 3 - Adobe Systems Incorporated)
Adobe After Effects CS5 Third Party Content (HKLM-x32\...\{C0AA232E-BD1B-40B5-A176-A2BEB67FFAE1}) (Version: 10 - Adobe Systems Incorporated)
Adobe After Effects CS5 Third Party Royalty Content (HKLM-x32\...\{CD29B5CA-4727-4114-9AD9-25CCCE6E4014}) (Version: 10 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Creative Suite 3 Master Collection hinzufügen oder entfernen (HKLM-x32\...\Adobe_67a7fb1e97aa14ee9ef0950eb6fd757) (Version: 1.0 - Adobe Systems Incorporated)
Adobe Creative Suite 5 Production Premium (HKLM-x32\...\{53BC789D-073D-47B6-AA9F-DE05990AF07A}) (Version: 5.0 - Adobe Systems Incorporated)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Premiere Pro CS3 Third Party Content (HKLM-x32\...\Adobe_71c180716438072ebd356ce2549df41) (Version: 3 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
AHV content for Acrobat and Flash (x32 Version: 1 - Adobe Systems Incorporated) Hidden
Akamai NetSession Interface (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Alien: Isolation (HKLM-x32\...\Steam App 214490) (Version:  - Creative Assembly)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Apple Application Support (HKLM-x32\...\{122ADF8C-DDA1-480C-9936-C88F2825B265}) (Version: 2.1.9 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6A76BEAF-6D1F-4273-A79B-DA8410A2E56B}) (Version: 5.2.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Assassin’s Creed® III (HKLM-x32\...\Steam App 208480) (Version:  - Ubisoft Montreal)
Assassin's Creed II (HKLM-x32\...\Steam App 33230) (Version:  - Ubisoft Montreal)
Audible Download Manager (HKLM-x32\...\AudibleDownloadManager) (Version: 6.6.0.15 - Audible, Inc.)
AudibleManager (HKLM-x32\...\AudibleManager) (Version: 1995390206.48.56.3157818 - Audible, Inc.)
Autodesk 3ds Max 2011 64-bit (HKLM\...\{39BFB02A-9692-0409-A808-3F5C7B1F8953}) (Version: 13.0 - Autodesk)
Autodesk 3ds Max 2015 (HKLM\...\Autodesk 3ds Max 2015) (Version: 17.1.149.0 - Autodesk)
Autodesk 3ds Max 2015 (Version: 17.1.149.0 - Autodesk) Hidden
Autodesk 3ds Max 2015 Populate Data (HKLM\...\{57E92DED-DC6C-41E5-B9E1-76D83BD2EABE}) (Version: 17.0.0.0 - Autodesk)
Autodesk 3ds Max 2015 SP1 (HKLM\...\Autodesk 3ds Max 2015 SP1) (Version: 17.1.149.0 - Autodesk)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk)
Autodesk Backburner 2015 (HKLM-x32\...\{8C5F38D2-8EFE-49A4-B3F5-BF3210FED168}) (Version: 15.0.0.0 - Autodesk)
Autodesk DirectConnect 2015 64-bit (HKLM\...\Autodesk DirectConnect 2015 64-bit) (Version: 9.0.56.4 - Autodesk)
Autodesk DirectConnect 2015 64-bit (Version: 9.0.56.4 - Autodesk) Hidden
Autodesk DirectConnect 2015 64-bit Hotfix1 (HKLM\...\Autodesk DirectConnect 2015 64-bit_9001) (Version: 9.0.56.4 - Autodesk)
Autodesk Inventor Server Engine for 3ds Max 2015 (HKLM\...\{9167CA34-4E48-49E3-8892-3C439739D2D3}) (Version: 17.0.2 - Autodesk)
Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2015 (HKLM-x32\...\{9F6466D9-6EFC-4A10-B931-C72D1A3F1763}) (Version: 5.2.9.100 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2015 (HKLM\...\Autodesk Revit Interoperability for 3ds Max 2015) (Version: 15.0.166.0 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2015 (Version: 15.0.166.0 - Autodesk) Hidden
Avira (HKLM-x32\...\{a5e00a72-db4a-4f77-8874-d1265b8fcd7e}) (Version: 1.1.42.10415 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.42.10415 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.12.408 - Avira Operations GmbH & Co. KG)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 1942™ (HKLM-x32\...\{5BE7BD06-512B-43bf-AD78-3BD2A5F5F7B3}) (Version: 1.6.20.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.4.2.30944 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Botanicula (HKLM-x32\...\Steam App 207690) (Version:  - Amanita Design)
Broforce (HKLM-x32\...\Steam App 274190) (Version:  - Free Lives)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version:  - Infinity Ward)
CameraHelperMsi (x32 Version: 13.50.854.0 - Logitech) Hidden
Canon Inkjet Printer Driver Add-On Module V2.00 (HKLM\...\CANONIJINBOXADDON200) (Version:  - )
Canon MP Navigator EX 2.0 (HKLM-x32\...\MP Navigator EX 2.0) (Version:  - )
Canon MP540 series Benutzerregistrierung (HKLM-x32\...\Canon MP540 series Benutzerregistrierung) (Version:  - )
Canon MP540 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP540_series) (Version:  - )
CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)
Command & Conquer Alarmstufe Rot 2 (HKLM-x32\...\Red Alert 2) (Version:  - )
ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version:  - DownloadHelper)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd)
Deadlight (HKLM-x32\...\Steam App 211400) (Version:  - Tequila Works, S.L.)
Deus Ex: Human Revolution (HKLM-x32\...\Steam App 28050) (Version:  - Eidos Montreal)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Dishonored (HKLM-x32\...\Steam App 205100) (Version: 1.0 - Bethesda Softworks)
DIY DataRecovery DiskPatch 3 (HKLM-x32\...\DiskPatch_is1) (Version: 3.5.300 - DIY DataRecovery.nl)
Dropbox (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Dropbox) (Version: 3.8.5 - Dropbox, Inc.)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
ffdshow v1.2.4422 [2012-04-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.2.4422.0 - )
Free Video to MP3 Converter version 5.0.17.903 (HKLM-x32\...\Free Video to MP3 Converter_is1) (Version: 5.0.17.903 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.46.923 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.46.923 - DVDVideoSoft Ltd.)
Func KB-460 Settings software (HKLM-x32\...\{8918A402-4EEF-489F-940F-DC25BEEFA6FF}_sbay) (Version:  - )
GetDataBack for NTFS (HKLM-x32\...\{56582EEA-3AEF-4D84-8B9D-C87A3CD9250F}) (Version: 4.00.000 - Runtime Software)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.155 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden
Grand Theft Auto IV (HKLM-x32\...\Steam App 12210) (Version:  - Rockstar)
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version:  - Rockstar North)
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )
Half-Life 2 (HKLM-x32\...\Steam App 220) (Version:  - Valve)
Half-Life: Source (HKLM-x32\...\Steam App 280) (Version:  - Valve)
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version:  - EFD Software)
iExplorer 3.1.1.0 (HKLM-x32\...\{7FD8B0C1-CDDA-4B4D-A577-B2E3570EA3A3}_is1) (Version:  - Macroplant LLC)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 15.4 - Intel)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}) (Version: 10.6.3.25 - Apple Inc.)
Jagged Alliance - Back in Action (HKLM-x32\...\Steam App 57740) (Version:  - Coreplay GmbH)
Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Kane & Lynch: Dead Men (HKLM-x32\...\Steam App 8080) (Version:  - IO Interactive)
Logitech Webcam Software-Treiberpaket (HKLM\...\lvdrivers_12.10) (Version: 12.10.1110 - Logitech Inc.)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.40 - Logitech Inc.)
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Max Payne 3 (HKLM-x32\...\Steam App 204100) (Version:  - Rockstar Studios)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.149.2 - McAfee, Inc.)
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version:  - )
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-0000-0000-0000000FF1CE}_EXCEL_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0018-0000-0000-0000000FF1CE}_POWERPOINT_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0000-0000-0000000FF1CE}_WORD_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Excel 2007 (HKLM-x32\...\EXCEL) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint 2007 (HKLM-x32\...\POWERPOINT) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Word 2007 (HKLM-x32\...\WORD) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mirror's Edge (HKLM-x32\...\Steam App 17410) (Version:  - DICE)
Mozilla Firefox 39.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 39.0.3 (x86 de)) (Version: 39.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 8.5.0.4554 - Electronic Arts, Inc.)
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
QuickTime (HKLM-x32\...\{0E64B098-8018-4256-BA23-C316A43AD9B0}) (Version: 7.72.80.56 - Apple Inc.)
Resident Evil / biohazard HD REMASTER (HKLM-x32\...\Steam App 304240) (Version:  - CAPCOM Co., Ltd.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.1 - Rockstar Games)
Sanctum 2 (HKLM-x32\...\Steam App 210770) (Version:  - Coffee Stain Studios)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.102 - Skype Technologies S.A.)
SleepTimer Ultimate 1.2 (HKLM-x32\...\{0EE56463-49B2-45E1-B74F-3E0139DBC986}_is1) (Version:  - Christian Handorf)
Sniper Elite V2 (HKLM-x32\...\Steam App 63380) (Version:  - Rebellion)
Spec Ops: The Line (HKLM-x32\...\Steam App 50300) (Version:  - Yager)
Spotify (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Spotify) (Version: 1.0.4.90.g0b6df40b - Spotify AB)
State of Decay (HKLM-x32\...\Steam App 241540) (Version:  - Undead Labs)
State of Decay: Year-One (HKLM-x32\...\Steam App 329430) (Version:  - Undead Labs)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Super Street Fighter IV: Arcade Edition (HKLM-x32\...\Steam App 45760) (Version:  - Capcom)
Syndicate (HKLM-x32\...\{64CFBAAB-46F7-4628-8D9B-E656A8C11CDB}) (Version: 2.0.0.3 - Electronic Arts)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Expendabros (HKLM-x32\...\Steam App 312990) (Version:  - Free Lives)
The Long Dark (HKLM-x32\...\Steam App 305620) (Version:  - Hinterland Studio Inc.)
The Stanley Parable (HKLM-x32\...\Steam App 221910) (Version:  - Galactic Cafe)
The Walking Dead (HKLM-x32\...\Steam App 207610) (Version:  - )
The Walking Dead: Season Two (HKLM-x32\...\Steam App 261030) (Version:  - Telltale Games)
The Wolf Among Us (HKLM-x32\...\Steam App 250320) (Version:  - Telltale Games)
Thrustmaster Force Feedback Driver (HKLM-x32\...\{8F5A0981-5CDC-41D0-BCA2-AD3B777FC358}) (Version: 2.FFD.2009 - Thrustmaster)
TomTom HOME (HKLM-x32\...\{7A2BB1C8-903D-4585-9F3B-CADD67D07D37}) (Version: 2.9.8 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Trapcode Suite 64-bit (HKLM-x32\...\InstallShield_{BA357941-25A7-410C-A47E-9AAF7DE1248B}) (Version: 12.0.0 - Red Giant Software)
Trapcode Suite 64-bit (Version: 12.0.0 - Red Giant Software) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unity Web Player (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0016-0000-0000-0000000FF1CE}_EXCEL_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0018-0000-0000-0000000FF1CE}_POWERPOINT_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-001B-0000-0000-0000000FF1CE}_WORD_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
V-Ray for 3dsmax 2011 for x64 (HKLM\...\V-Ray for 3dsmax 2011 for x64) (Version: 2.20.03 - Chaos Software Ltd)
V-Ray for 3dsmax 2015 for x64 (HKLM\...\V-Ray for 3dsmax 2015 for x64) (Version: 3.00.08 - Chaos Software Ltd)
Wacom Tablett (HKLM-x32\...\Wacom Tablet Driver) (Version:  - Wacom Technology Corp.)
WebTablet IE Plugin (HKLM-x32\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.4 - Wacom Technology Corp.)
WebTablet Netscape Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.3 - Wacom Technology Corp.)
WibuKey Setup (WibuKey Remove) (HKLM\...\{00060000-0000-1004-8002-0000C06B5161}) (Version: Version 6.20 of 2013-Dec-18 (Build 1230) (Setup) - WIBU-SYSTEMS AG)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 4.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
WISO Steuer-Sparbuch 2014 (HKLM-x32\...\{04179292-C74D-4AA1-8FFA-8387CA3B67B5}) (Version: 21.00.8480 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2015 (HKLM-x32\...\{54A83CB1-9CDE-4E73-B263-90C64D4619FC}) (Version: 22.00.8811 - Buhl Data Service GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> G:\Autodesk\3ds Max 2015\Inventor Server\Bin\TestServer.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{83B0E426-D4EE-11D4-BEDF-BAB7F1EEA455}\InprocServer32 -> G:\Autodesk\3ds Max 2011\addflow4.ocx (Lassalle Technologies)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> G:\Autodesk\3ds Max 2015\Inventor Server\Bin\TestServer.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> G:\Autodesk\3ds Max 2015\Inventor Server\Bin\TestServer.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll Keine Datei

==================== Wiederherstellungspunkte =========================

03-08-2015 19:06:20 Windows Update
03-08-2015 19:14:15 Windows Update
03-08-2015 20:58:01 Windows Update
05-08-2015 08:12:14 Windows Update
10-08-2015 19:27:26 Windows Update
12-08-2015 20:32:58 Revo Uninstaller's restore point - File Type Assistant
12-08-2015 20:35:15 Revo Uninstaller's restore point - Free File Viewer 2012
12-08-2015 20:36:40 Revo Uninstaller's restore point - WindowsMangerProtect20.0.0.722
13-08-2015 20:31:49 JRT Pre-Junkware Removal

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2015-08-12 20:45 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {010E9455-640F-49EF-8341-56B03E47E5B8} - System32\Tasks\{131CE2A1-80E5-4013-8A2A-6873D7F84BC5} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.115/de/go/help.faq.installer?LastError=1603
Task: {0A600157-92CB-4C7D-A3D7-FE8700F71386} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {173AE9B3-DC2E-4AF3-B64B-5B9349290381} - System32\Tasks\elbyExecuteWithUAC => C:\Program Files (x86)\Elaborate Bytes\CloneDVD2\ExecuteWithUAC.exe [2008-06-27] ()
Task: {1972673D-70BD-46DC-B45A-05F6EABF7F1C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-02] (Google Inc.)
Task: {26D1A02D-67C2-4FB0-9861-254C166460D1} - System32\Tasks\{48CF35FF-433B-432E-8D27-6B4DDC955A4E} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.123/de/go/help.faq.installer?LastError=1603
Task: {26F12A49-55E0-49EB-B694-DFEBA829A253} - System32\Tasks\{26AF6ED6-A302-4497-88B2-D36EE5833B6D} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.123/de/go/help.faq.installer?LastError=1603
Task: {3ACEA9AB-9CD1-4981-9429-97C14693D6DC} - System32\Tasks\{4268E6F3-C933-400A-A726-044594806FF1} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {6F74DD1A-AEBA-475F-B26B-097BE57850F2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-05] (Google Inc.)
Task: {A145D6B4-B10E-4A2C-8280-31494289BAE6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-02] (Google Inc.)
Task: {A4CD521B-493B-44A4-9DAA-D3DD144BD91C} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-06] (Dropbox, Inc.)
Task: {AF37AC83-2051-4952-B6D6-8BBD0CEE24F0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-11] (Adobe Systems Incorporated)
Task: {C9DF2EBC-0F2C-4485-A15D-5167FE2108A6} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-05] (Google Inc.)
Task: {CDA8CE5F-AA6D-464F-B7F6-9873E97E288A} - System32\Tasks\AdobeAAMUpdater-1.0-Fragster-PC-Fragster => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {DE7D3939-590E-451B-AADF-4506D005ED12} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-06] (Dropbox, Inc.)
Task: {E78E4FBD-EF42-44FA-858D-2AE8EF13E848} - System32\Tasks\{B72B600D-D7DA-4470-8738-08ECF6CEDB95} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F3BCD646-49D2-483E-803D-D2AC8E7A061E} - System32\Tasks\{B177CA05-EDC9-4630-BADE-B0C6AEBFDBAC} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.115/de/go/help.faq.installer?LastError=1603

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2012-05-30 20:06 - 2012-05-30 20:06 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-05-30 20:06 - 2012-05-30 20:06 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Fragster\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: AdAppMgrSvc => 2
MSCONFIG\Services: TomTomHOMEService => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Audible Download Manager.lnk => C:\Windows\pss\Audible Download Manager.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WISO Mein Steuer-Sparbuch heute.lnk => C:\Windows\pss\WISO Mein Steuer-Sparbuch heute.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Fragster^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spotify => "C:\Users\Fragster\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Fragster\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: TomTomHOME.exe => "G:\Programme\TomTom HOME 2\TomTomHOMERunner.exe"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{04772F86-5DB8-4C6A-A377-08DF17290936}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{574CA899-AB81-4E4D-AB8D-8FEC89D09293}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{549D29DC-91F6-4C15-ACE7-26570D36EA35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [{C23751AF-6623-402C-9934-86ECBBCA93A2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [{7A3859A1-076C-4F92-9E2F-EEF12754F48F}] => (Allow) C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{8D38BD63-BC0A-4FA1-9DDF-BC3B68D1814A}] => (Allow) C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{E9EF6603-8105-4B60-A3B1-8278879E4905}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{AAF77C0F-6CAC-44AB-BE11-C7881F173CB1}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{5D94EAF6-F3FB-48A0-B8AC-2F67D7E52F1A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{61E6332A-CDC4-47B0-AED4-990B3BCA17C1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{7B9732DB-2878-4197-9924-EFFD925FE0C8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{53810B60-CC84-4949-95FD-5DE17B626E91}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{A79D7BB9-70CD-47AD-B18B-B278F9DBF0D0}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [TCP Query User{92164434-A096-4C22-93AF-02C27B5D1DC5}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{A216B3C5-B8AA-4EB5-8A86-F91B6B14459B}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{0D0D48AF-DAB4-4984-B571-AAD6462491DF}C:\users\fragster\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\fragster\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{ADBA8C4A-8875-417A-AE97-E07C5CC99602}C:\users\fragster\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\fragster\appdata\roaming\spotify\spotify.exe
FirewallRules: [{42C73DB4-CDA0-46BC-8A81-2042AC4CD019}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{560F1BC0-FA3D-41D6-A8F4-3F0F3F72EE76}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{F624A1E4-81C3-44F5-AAAA-F1A0C3D00788}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\3dsmax.exe
FirewallRules: [{433C07DF-C084-4E1C-9C2A-35949029C429}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\3dsmax.exe
FirewallRules: [{939C8397-8C0D-4160-8D24-2C96E38F4CFB}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64.exe
FirewallRules: [{9560D2B1-ACC8-46C7-AF73-ADAF2AE9626F}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64.exe
FirewallRules: [{8845F407-343F-4752-919D-101797C7054A}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
FirewallRules: [{F36F179C-FEBD-43C6-A6F8-182CDE38A5A2}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
FirewallRules: [TCP Query User{BF60A732-4555-4159-A5E4-5ABA035C133B}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [UDP Query User{37F16CD7-2601-4BB0-B1F8-6AC408FBF471}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [{4CECB07B-A4CD-4191-9FAE-D5554A1E1C73}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1942\BF1942.exe
FirewallRules: [{6DA30031-A46F-46A1-A0E9-60FB8E981913}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1942\BF1942.exe
FirewallRules: [{357C4974-F08A-46F0-AED2-9EB147A3C6B4}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [{3BEAF8A0-EF3C-4580-B1B1-157728B4D34A}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [TCP Query User{8E3AECEB-B488-4CAA-9A7B-B18604862034}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [UDP Query User{BC8D44D6-D7C8-4182-891F-7D8EC5714CC3}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [{9BF8916F-677E-4128-B364-88072B430ABD}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe
FirewallRules: [{8B001813-1808-4064-8EF1-85672B74614E}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe
FirewallRules: [{403299AC-828C-4252-971D-45AD03DD430A}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [{0FFB8E58-3C7D-4348-8445-B9DFFBE36AFA}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [{73EAC45E-2EE4-43EE-A2DD-635626D08266}] => (Allow) G:\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{BC8F8396-981B-4161-B8E0-2C369C3B2332}] => (Allow) G:\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{C871AE4F-4F5C-4B51-B17E-7F2760048088}] => (Allow) G:\Steam\SteamApps\common\JABIA\JaggedAllianceBIA.exe
FirewallRules: [{CF093C2D-6ADC-44C2-9A82-89A72EFE42BB}] => (Allow) G:\Steam\SteamApps\common\JABIA\JaggedAllianceBIA.exe
FirewallRules: [{D0F5B256-573F-4C5B-8256-3C2A751BEC3C}] => (Allow) G:\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{D3B2E3E1-7945-467A-82D4-3550592AC818}] => (Allow) G:\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{2556B1F4-C425-4D4A-BBE1-F98EB768CF2E}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{9DB9FA04-2743-4EF0-9257-8A50BA34D124}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{FBBBB055-BCEE-4A0F-A238-797A2FE566A8}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{7C777E7F-8380-43BF-8943-3E7C8B942F3B}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{1DAEC672-62C1-4E96-A116-C2A4E64BEDA4}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{699D413B-A161-4A89-A545-787A458804CA}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{D6BBFD72-9338-4893-B2D3-F026C717CAB7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{E879D55B-48AD-4FF0-A060-213DD3B00A9E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{18B1B000-01D1-4AC0-A928-45664A067013}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{6E096CFE-4002-4AB6-AE44-8E46C572FA3B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{3C791AB1-6310-497D-9454-2695EBADD24F}] => (Allow) C:\Users\Fragster\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{92709542-8D6B-470B-B2D2-BCF3A7E75C67}] => (Allow) C:\Users\Fragster\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{F6692971-2805-4CE9-9882-0E85B559BA48}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{4C917EE2-A10C-4974-A9EC-03BAF40C4A3D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{C8E0F0F8-5304-4903-A643-63DE99F60E0A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{DCFBC4EC-39B3-48B9-BD69-7D1BC7A2AECF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{BF130E0C-6EF2-49DD-979C-D3C1FC6EB875}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E6713910-9B34-48DD-86D8-8E66B2EC27FF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7D5CB6D0-91C1-4588-A9BD-F4871377D466}] => (Allow) G:\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [{AE21C3B2-C9F2-4AE0-B15F-1F0C7B55F083}] => (Allow) G:\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [TCP Query User{D28FE169-D35F-41F8-B34E-F046E7D806E4}G:\steam\steam.exe] => (Allow) G:\steam\steam.exe
FirewallRules: [UDP Query User{A13F3145-95E2-4BD5-95D2-91E2DB55A05B}G:\steam\steam.exe] => (Allow) G:\steam\steam.exe
FirewallRules: [{4514C525-706D-49A4-82C8-C6334236C941}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{0765D295-ADD1-4DEF-9A1B-D9B77EAA2C8B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{ABE242B8-1A78-475A-9F92-E15C62CAB44D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EB6B6981-75BD-472B-9F7F-D5E931EC97F0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EE4476E3-56AE-4C9C-9B39-4D1351E809B9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{23BCF370-916F-46DD-9C86-23022703724D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{1CA5304E-6674-4CEC-88D1-7DFB10088BFC}] => (Allow) G:\games\origin games\Battlefield 4\bf4_x86.exe
FirewallRules: [{AE726CEB-4819-4B53-AE81-C2104B1D19AA}] => (Allow) G:\games\origin games\Battlefield 4\bf4_x86.exe
FirewallRules: [{4891125E-5848-4732-AB5A-DBD65919BFCF}] => (Allow) G:\games\origin games\Battlefield 4\bf4.exe
FirewallRules: [{5C7B94D8-C8AA-4AE4-8F3E-3C4E9C54C79B}] => (Allow) G:\games\origin games\Battlefield 4\bf4.exe
FirewallRules: [{F751BFA2-6348-427B-825E-51B148D73035}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{747968A5-22E9-4E9D-AA3C-6B5C6B4270C9}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{2501AC61-7494-478E-8846-659AB0C5DB79}] => (Allow) G:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{ED392498-9A12-4F3C-9C98-1898CB6CB5B1}] => (Allow) G:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{0E3695E9-234A-4943-90B1-91484FC4E53C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F85C0664-0DAA-4C14-88A8-E2A65EBA519E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{4C8EDC58-E5D7-4D3A-9939-DC47D5A4E276}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{6D990613-3F11-4775-8916-2796202413AB}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{21040FD5-4830-4A11-9714-2B7DF08AD411}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{81A8077B-281C-4470-A2F8-E61C13720356}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{D780652A-2985-4428-9CB0-92600E2D9BAA}] => (Allow) G:\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{BB248C14-F16C-450A-8BAF-140781E4121E}] => (Allow) G:\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{080B6801-9FC8-4B0C-9805-325DF10030A1}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{983810A9-C3F8-4D61-B8F3-C9DCA43AF64E}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{9161CDAC-F6DA-4F85-BB33-13E3A0593CFB}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [{09546B13-D2E3-4A10-9199-9DF234966AAB}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [TCP Query User{F6ADA89A-C5E9-4504-A452-D146CD4D6CA6}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{556B934E-CB16-4DA2-9DC2-83B78DF9252A}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [{A91893FB-FBA6-4EA6-915C-3AF348FA98DF}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 3\AC3SP.exe
FirewallRules: [{6DBB5E7E-241E-4062-B0DB-B761CE09435B}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 3\AC3SP.exe
FirewallRules: [{1318A5A6-CEBE-4C95-8416-691C4EDE6A27}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 2\AssassinsCreedIIGame.exe
FirewallRules: [{D58A04A8-5986-44E6-8B77-31B049373598}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 2\AssassinsCreedIIGame.exe
FirewallRules: [{ED836365-CE81-42C7-9CFC-816F9BF8752D}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{680B8274-FA65-447B-8757-066B3EA8D820}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{25B73349-C4A5-4948-B5FA-D3BD47F62EAC}] => (Allow) G:\Steam\SteamApps\common\State of Decay\StateOfDecay.exe
FirewallRules: [{D2F05AE9-111B-4A68-A677-2B20A724F67D}] => (Allow) G:\Steam\SteamApps\common\State of Decay\StateOfDecay.exe
FirewallRules: [{2BAA366C-06C3-4B42-9A80-BB6A0EE5C505}] => (Allow) C:\Users\Fragster\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{F331FE8C-14CB-453C-B3C0-56F8043006C0}] => (Allow) C:\Users\Fragster\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [TCP Query User{1730FA25-BFF7-498A-B90A-F742D8A381DE}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [UDP Query User{65F843E5-4908-430C-8FDD-2753F843013E}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [{8B25FA57-A457-49F8-A244-1D59E7004041}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{9070EC11-5D6C-4419-A266-21764558A7C4}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{ADF83E23-75F1-4158-B38D-9E025F424B13}] => (Allow) G:\Steam\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe
FirewallRules: [{DFEF48F2-6D3C-430B-85DC-B7114C81A5A3}] => (Allow) G:\Steam\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe
FirewallRules: [{F50297AD-EFC4-45DA-B302-BDD29D0C1B1B}] => (Allow) G:\Steam\SteamApps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe
FirewallRules: [{A9C07798-6F06-4B21-8AC0-DDB080025B73}] => (Allow) G:\Steam\SteamApps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe
FirewallRules: [{DF5AA543-EAE5-4673-904A-661F81D649F1}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\bin\SniperEliteV2.exe
FirewallRules: [{33879106-1BAE-4841-9880-1CEE70D30A39}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\bin\SniperEliteV2.exe
FirewallRules: [{9CAC3A7A-BE1B-41D6-A81B-4A957BEC8283}] => (Allow) G:\Steam\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{800606E3-8931-41DD-80AD-900A0C3E6C8B}] => (Allow) G:\Steam\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{60D70F08-EB56-4CD6-BDB3-BE12C77317A6}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
FirewallRules: [{8A46F07B-1399-4CAE-B49C-20E69D4911BC}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
FirewallRules: [{3154C3F1-900B-4552-9AD4-C6DD1979BC0A}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64.exe
FirewallRules: [{195F4797-35E1-4DF7-8176-2CCFFDB1246F}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64.exe
FirewallRules: [TCP Query User{BAA61285-4407-4C86-83BF-556DF23649DB}C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{42ADCBB1-C6B0-41BF-9DC6-10F6A8541226}C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{81A3E701-8BF5-426E-9B9F-0140CE200AB0}] => (Allow) G:\Steam\SteamApps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{7B1D7A83-AE0C-4240-B17A-84263B50156B}] => (Allow) G:\Steam\SteamApps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{04549210-E155-463F-B3A0-3273E899260D}] => (Allow) G:\Steam\SteamApps\common\Botanicula\Botanicula.exe
FirewallRules: [{01E3C50B-55A5-4983-A7C8-53E7201FB795}] => (Allow) G:\Steam\SteamApps\common\Botanicula\Botanicula.exe
FirewallRules: [{7465A788-F8FF-4206-A43E-5AB3992C8C10}] => (Allow) G:\Steam\bin\steamwebhelper.exe
FirewallRules: [{9BF02656-0546-45F3-9A40-CAEE617953E0}] => (Allow) G:\Steam\bin\steamwebhelper.exe
FirewallRules: [{CBFC222F-CD0D-48D1-84A8-F2D7AF57EE1A}] => (Allow) G:\Steam\SteamApps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{A48AAC77-B6F3-4962-A88E-B144BB3AC3B6}] => (Allow) G:\Steam\SteamApps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{8D164D4D-C6DD-4F70-85E0-7E99CFDEFFAF}] => (Allow) G:\games\Battle.net\Battle.net\Battle.net.exe
FirewallRules: [{2BF4F822-B92F-4B98-B841-2821758DFC25}] => (Allow) G:\games\Battle.net\Battle.net\Battle.net.exe
FirewallRules: [{8AA187CD-50F9-4EB5-B0C7-7215B0C5AB94}] => (Allow) G:\games\Diablo III\Diablo III.exe
FirewallRules: [{D0D6D217-D15E-4F12-A899-2C46D5D148F6}] => (Allow) G:\games\Diablo III\Diablo III.exe
FirewallRules: [{B1EC055C-75E3-41B3-92EE-132F00B8A4BF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{A97E5FC3-A34F-466C-AFAA-FE329318A2D1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{1D7D0ECA-92AF-4424-95F7-E05294B252C9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{0E245602-5662-4494-A000-7E29DE940BFE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{B532F760-64E7-4378-94E9-DD229D94E8AD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{BBACCB83-78A5-4969-9FD8-4D696ED0DB0F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [TCP Query User{45F662C7-58FC-430B-9717-731AD59BE39E}G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe] => (Block) G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe
FirewallRules: [UDP Query User{BD475D86-9B89-4617-BC51-C69FB3FB882B}G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe] => (Block) G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe
FirewallRules: [{7DED0881-FF83-40AB-A0B8-7255CC737D9A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{6289FC7E-7D17-427B-9F7C-040CE9B04F52}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{9D01342C-3464-4414-A420-AC07DA00F57D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{5FEC9C48-EA4A-4677-9BC7-6BB7A1957AF8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{E854083A-7487-42E4-A4EF-865951EE5AD9}] => (Allow) G:\Steam\SteamApps\common\TheLongDark\tld.exe
FirewallRules: [{FF966DA4-F86C-416A-84E9-8A110D94900A}] => (Allow) G:\Steam\SteamApps\common\TheLongDark\tld.exe
FirewallRules: [{01A8DE84-10C1-4557-AADA-31107B198A04}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{55B7142D-372E-4220-B36C-9A327449FE55}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{58B0ECB5-27D8-478F-AD28-D9B883C9372D}] => (Allow) G:\Steam\SteamApps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{510FF323-F72A-41C3-84C1-22815EF836CB}] => (Allow) G:\Steam\SteamApps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{D61B73A0-9A05-4400-B605-26B881B6825A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7B6EC10F-AAC5-4C6E-A3C3-3213838F4315}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{54220F57-3EC1-4C22-961E-7A4858932FF4}] => (Allow) G:\Steam\SteamApps\common\Broforce\Broforce_beta.exe
FirewallRules: [{D5333F6A-1D67-4867-9E16-61126A2A9E0B}] => (Allow) G:\Steam\SteamApps\common\Broforce\Broforce_beta.exe
FirewallRules: [{88472125-5C81-4D9F-AA94-1DA6E57D5A97}] => (Allow) G:\Steam\SteamApps\common\Broforce The Expendables Missions\Expendabros.exe
FirewallRules: [{94478AAC-386B-4AB9-A147-C1DAF43EFB8C}] => (Allow) G:\Steam\SteamApps\common\Broforce The Expendables Missions\Expendabros.exe
FirewallRules: [{7FB5CF23-230F-4B47-8300-FF15C146D36E}] => (Allow) G:\Steam\SteamApps\common\The Stanley Parable\stanley.exe
FirewallRules: [{78FA8D49-81A8-4453-9DAD-CC141F20FA04}] => (Allow) G:\Steam\SteamApps\common\The Stanley Parable\stanley.exe
FirewallRules: [{D8AE0B5A-BBE1-44B8-A0DD-5220FD445491}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [{4ECDF369-99C6-4E1F-AB3D-D002BFE60225}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [TCP Query User{BDBD7F25-A0D1-404F-A84C-6C0BCA43F764}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [UDP Query User{818D2685-B72B-4BDE-A449-847334ADB541}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [{330D1A31-851D-4BD5-B5A8-4D560B3BB70E}] => (Allow) G:\Steam\SteamApps\common\Deadlight\Binaries\Win32\LOTDGame.exe
FirewallRules: [{C95CC401-5D09-4297-BE13-684D36EC6002}] => (Allow) G:\Steam\SteamApps\common\Deadlight\Binaries\Win32\LOTDGame.exe
FirewallRules: [{52A78883-B5F2-49D0-B871-AF1F040E40FB}] => (Allow) G:\Steam\SteamApps\common\Kane and Lynch Dead Men\Launcher.exe
FirewallRules: [{81551F1B-273B-41D2-92BE-164D3B11A2FC}] => (Allow) G:\Steam\SteamApps\common\Kane and Lynch Dead Men\Launcher.exe
FirewallRules: [TCP Query User{27924A78-3837-4643-B729-CF68A1288617}G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe] => (Allow) G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe
FirewallRules: [UDP Query User{FAEC16AF-64B7-4809-AC1A-BCD91EB6542A}G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe] => (Allow) G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe
FirewallRules: [{C0C7C695-24C3-4F50-B0E6-75AFCD15C41E}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe
FirewallRules: [{D7764ACC-7A01-4BB3-AE62-DC706CDE42C6}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe
FirewallRules: [{60E1D514-CBF2-44E4-BB4A-4D7CF0121687}] => (Allow) C:\origin games shifted\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe
FirewallRules: [{4924B6E3-A427-430C-B0C2-092517A533FB}] => (Allow) C:\origin games shifted\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe
FirewallRules: [{F2D1C817-EFA3-435B-B54D-1335F64BE8FA}] => (Allow) G:\Steam\SteamApps\common\Alien Isolation\AI.exe
FirewallRules: [{E674C8C8-30DE-4401-856A-A4389D2D8EF7}] => (Allow) G:\Steam\SteamApps\common\Alien Isolation\AI.exe
FirewallRules: [TCP Query User{2D0B287E-2D9C-4068-972E-1C294D520941}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{6FA2EA87-26C1-43AF-8508-DEE0D884C1D2}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{D6D2444A-7AE8-4836-AAC6-4E455289BAA1}] => (Allow) G:\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{34612F93-F7AA-43F8-A477-8E19DF57C1B5}] => (Allow) G:\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{818D1CA3-65A4-4845-BEA5-36614E6BBCA3}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{977444CC-3FD0-47EF-8DAF-B26E4775F3C2}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [TCP Query User{35079B59-D6F4-4468-AB56-D68ADA4DA551}G:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) G:\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{C1A7A97D-9C5E-4748-A2D8-E299A000BAB6}G:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) G:\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{3D34C7CE-88A7-403B-A07A-32696C136419}] => (Allow) G:\Steam\SteamApps\common\State of Decay YOSE\StateOfDecay.exe
FirewallRules: [{8BDD7D3A-7E2B-442D-B5A7-04ACE5300178}] => (Allow) G:\Steam\SteamApps\common\State of Decay YOSE\StateOfDecay.exe
FirewallRules: [{31AB5FE5-3B04-4443-ACED-243A857C7DDD}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe
FirewallRules: [{DFD70EAF-9819-41AC-B2CF-D032A11FBB9C}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe
FirewallRules: [{C07E8B73-6083-4E1E-BBB9-1DAD7BE45CD8}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64.exe
FirewallRules: [{477C0385-9098-4090-97B8-CDECA67116A6}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64.exe
FirewallRules: [{657CD02C-4992-4814-9E84-6F1F90192C0F}] => (Allow) G:\Steam\SteamApps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [{2FC44B08-BB5F-424F-9062-96FF1BA08816}] => (Allow) G:\Steam\SteamApps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [{1967D040-DF78-48D9-9EB0-64741F61E8F6}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{BFF41C64-7C68-46B1-874B-8DC31FC02F23}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{358FC54A-852B-4FCA-A476-AD7C4FE96CC2}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [{6165BD4E-3EF1-4539-861D-00C355660487}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [{BAE3D0D7-D6A3-4239-9C6E-B00FE90DDC01}] => (Allow) LPort=49172
FirewallRules: [{423A5F07-D893-4FCC-8785-AC51A6A229FC}] => (Allow) LPort=5000
FirewallRules: [{3545FCBD-72F0-4320-B02F-646D30A37DAD}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{D5C1982B-74CE-4211-A6B4-04F77BC50BD2}] => (Allow) LPort=49233
FirewallRules: [{906E88A6-6DA0-4AD9-B01B-442B854B6CF2}] => (Allow) LPort=5000

==================== Fehlerhafte Geräte im Gerätemanager =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/13/2015 08:30:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0xd9c
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (08/13/2015 08:30:05 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/13/2015 08:21:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0xca4
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (08/13/2015 08:21:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/13/2015 08:03:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0xdec
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (08/13/2015 08:03:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/12/2015 08:47:01 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/12/2015 08:45:21 PM) (Source: Avira Antivirus) (EventID: 4122) (User: NT-AUTORITÄT)
Description: Die Datei AvShadow konnte nicht geladen werden.
Fehlercode: 0x3fa

Error: (08/12/2015 08:45:14 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcCan't create NSS process. [0]

Error: (08/12/2015 08:45:14 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to create process. [1018]


Systemfehler:
=============
Error: (08/13/2015 08:34:12 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Software Protection" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
%%1056

Error: (08/13/2015 08:32:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Software Protection" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/13/2015 08:32:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/13/2015 08:32:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/13/2015 08:32:11 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/13/2015 08:32:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "TabletServiceWacom" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/13/2015 08:32:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PnkBstrA" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/13/2015 08:32:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/13/2015 08:32:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/13/2015 08:32:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "MBAMService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office:
=========================

CodeIntegrity:
===================================
  Date: 2015-08-12 20:43:36.324
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-08-12 20:43:36.293
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Speicherinformationen ===========================

Processor: Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz
Prozentuale Nutzung des RAM: 36%
Installierter physikalischer RAM: 8167.08 MB
Verfügbarer physikalischer RAM: 5213.04 MB
Summe virtueller Speicher: 16332.37 MB
Verfügbarer virtueller Speicher: 13557.42 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:238.37 GB) (Free:62.54 GB) NTFS
Drive d: (Disk) (CDROM) (Total:0.29 GB) (Free:0 GB) CDFS
Drive g: (Volume) (Fixed) (Total:1863.01 GB) (Free:1058.71 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: DA05D2BC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 444DA12D)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== Ende von Ergebnis ============================


schrauber 14.08.2015 16:01


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

MBB 17.08.2015 20:40

Liste der Anhänge anzeigen (Anzahl: 1)
Hallo,

den Eset Online Scan kann ich leider nicht vollständig durchführen. 3 Versuche habe ich unternommen.
Mein Rechner friert nach ca. 1 Stunde Laufzeit ein. Dann ist der Scan Fortschritt bei 54% und hat 9 infizierte Dateien gefunden.
Soll ich den SecurityCheck dennoch durchführen?

Inzwischen bleibt auch der BSOD aus, der Rechner friert nur noch ein und ich muss ihn manuell ausschalten.

Die Tatsache dass der Rechner eine Stunde durchhält macht mich stutzig. An den Energiespareinstellungen liegt es jedenfalls nicht.

P.S.: Auf dem Screenshot wird fälschlicherweise eine Gesamtdauer von über einer Stunde angezeigt. Der Zähler läuft meistens weiter obwohl alles andere schon nicht mehr reagiert.

schrauber 18.08.2015 11:15

Lass ESET weg und mach statt dessen das hier:

Lade Dir bitte von hier Emsisoft Emergency Kit Download Emsisoft Emergency Kit herunter.
  • Bitte installiere das Programm in den vorgegebenen Pfad.
  • Starte das Programm durch Doppelklick der Desktopverknüpfung.
  • Das EEK ist nach dem Laden der Malwaresignaturen für den Scan bereit.
  • Folge nun bitte der bebilderten Bildanleitung zu Emergency Kit, entferne alle Funde und poste am Ende des Scans bzw. der Bereinigung das Log.


MBB 18.08.2015 19:52

EEK scan:

Code:

Emsisoft Emergency Kit - Version 10.0
Letztes Update: 18.08.2015 20:47:20
Benutzerkonto: Fragster-PC\Fragster

Scan-Einstellungen:

Scan-Methode: Malware-Scan
Objekte: Rootkits, Speicher, Traces, Dateien

PUPs-Erkennung: An
Archiv-Scan: Aus
ADS Scan: An
Dateitypen-Filter: Aus
Erweitertes Caching: An
Direkter Festplattenzugriff: Aus

Scan-Beginn:        18.08.2015 20:48:43
Value: HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR        Gefunden: Setting.DisableTaskMgr (A)
Value: HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR        Gefunden: Setting.DisableTaskMgr (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS        Gefunden: Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS        Gefunden: Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS        Gefunden: Setting.DisableRegistryTools (A)

Gescannt:        81936
Gefunden        5

Scan-Ende:        18.08.2015 20:49:35
Scan-Zeit:        0:00:52

Value: HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS        Quarantäne Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS        Quarantäne Setting.DisableRegistryTools (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS        Quarantäne Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR        Quarantäne Setting.DisableTaskMgr (A)
Value: HKEY_USERS\S-1-5-21-2049330118-253893184-3514707546-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR        Quarantäne Setting.DisableTaskMgr (A)

Quarantäne        5


schrauber 19.08.2015 10:39

Dann noch bitte den Rest von oben :)

MBB 20.08.2015 18:06

Security Check:

Code:

Results of screen317's Security Check version 1.006 
 Windows 7 Service Pack 1 x64 (UAC is disabled!) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
Avira Antivirus 
 Antivirus up to date!  (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
 Java 8 Update 51 
 Adobe Flash Player 18.0.0.232 
 Adobe Reader 10.1.9 Adobe Reader out of Date! 
 Mozilla Firefox (39.0.3)
 Google Chrome (44.0.2403.130)
 Google Chrome (44.0.2403.155)
````````Process Check: objlist.exe by Laurent```````` 
 Malwarebytes Anti-Malware mbamservice.exe 
 Malwarebytes Anti-Malware mbam.exe 
 Avira Antivir avgnt.exe
 Avira Antivir avguard.exe
 Malwarebytes Anti-Malware mbamscheduler.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````


FRST:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:13-08-2015
durchgeführt von Fragster (Administrator) auf FRAGSTER-PC (20-08-2015 19:05:05)
Gestartet von C:\Users\Fragster\Desktop
Geladene Profile: Fragster &  (Verfügbare Profile: Fragster)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\System32\PnkBstrA.exe
(Wacom Technology, Corp.) C:\Windows\System32\Wacom_Tablet.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Wacom Technology, Corp.) C:\Windows\System32\WTablet\Wacom_TabletUser.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Wacom Technology, Corp.) C:\Windows\System32\Wacom_Tablet.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Akamai Technologies, Inc.) C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe
(Spotify Ltd) C:\Users\Fragster\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe
(Akamai Technologies, Inc.) C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Dropbox, Inc.) C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
() G:\Programme\Func Tastatur\KB-460_Core.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Dropbox, Inc.) C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe


==================== Registry (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-05-30] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-06-07] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-04-18] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008 2015-07-30] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Func KB-460] => G:\Programme\Func Tastatur\KB-460_Core
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [134368 2015-07-02] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe [4691384 2015-07-23] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Dropbox Update] => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-06] (Dropbox, Inc.)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Run: [Spotify Web Helper] => C:\Users\Fragster\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2020920 2015-05-08] (Spotify Ltd)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Akamai NetSession Interface] => C:\Users\Fragster\AppData\Local\Akamai\netsession_win.exe [4691384 2015-07-23] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Dropbox Update] => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-06] (Dropbox, Inc.)
HKU\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify Web Helper] => C:\Users\Fragster\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2020920 2015-05-08] (Spotify Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2012-08-26]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Netzwerk Server.lnk [2013-03-17]
ShortcutTarget: Netzwerk Server.lnk -> C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe (WIBU-SYSTEMS AG)
Startup: C:\Users\Fragster\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-03-30]
ShortcutTarget: Dropbox.lnk -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-06] (Dropbox, Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-08-11] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-11] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-08-11] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-11] (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{4803DB8B-CB64-458F-8261-FEDB79E73BCE}: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Fragster\AppData\Roaming\Mozilla\Firefox\Profiles\uppe0zay.default-1409093548782
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-11] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-11] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2012-04-05] ()
FF Plugin-x32: @esn/esnlaunch,version=1.140.0 -> C:\Program Files (x86)\Battlelog Web Plugins\1.140.0\npesnlaunch.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-11] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-11] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll [2009-09-25] (Wacom, Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Fragster\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @talk.google.com/O1DPlugin -> C:\Users\Fragster\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Fragster\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-05-07] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll [2012-10-30] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2014-06-16] ()
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @talk.google.com/GoogleTalkPlugin -> C:\Users\Fragster\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @talk.google.com/O1DPlugin -> C:\Users\Fragster\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @tools.google.com/Google Update;version=3 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @tools.google.com/Google Update;version=9 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Fragster\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-05-07] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll [2012-10-30] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2014-06-16] ()
FF Plugin ProgramFiles/Appdata: C:\Users\Fragster\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Fragster\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Extension: Adblock Plus - C:\Users\Fragster\AppData\Roaming\Mozilla\Firefox\Profiles\uppe0zay.default-1409093548782\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-29]
FF Extension: Kein Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-08-09]

Chrome:
=======
CHR Profile: C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-02]
CHR Extension: (Google Docs) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-02]
CHR Extension: (Google Drive) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-02]
CHR Extension: (YouTube) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-02]
CHR Extension: (Google Search) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-02]
CHR Extension: (Google Sheets) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-02]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-02]
CHR Extension: (Gmail) - C:\Users\Fragster\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-02]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S4 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-07-30] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-07-30] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-07-30] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-07-30] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [218816 2015-07-02] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2012-05-15] (Macrovision Europe Ltd.) [Datei ist nicht signiert]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe [289256 2015-06-26] (McAfee, Inc.)
S3 mi-raysat_3dsmax2015_64; G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe [86016 2011-09-15] () [Datei ist nicht signiert]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-07-27] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-07-21] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-01-02] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
R2 TabletServiceWacom; C:\Windows\system32\Wacom_Tablet.exe [6245744 2010-03-09] (Wacom Technology, Corp.)
S4 TomTomHOMEService; G:\Programme\TomTom HOME 2\TomTomHOMEService.exe [93040 2014-06-05] (TomTom)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162528 2015-07-30] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-07-30] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-12] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-10-28] (DT Soft Ltd)
R3 I1KBFLTR; C:\Windows\System32\drivers\I1KBFLTR.sys [29440 2013-07-31] ()
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-20] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [106760 2015-05-09] (WIBU-SYSTEMS AG)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-18 20:50 - 2015-08-18 20:50 - 00004878 _____ C:\Users\Fragster\Desktop\EEK_scan_150818-204843.txt
2015-08-18 20:45 - 2015-08-18 20:45 - 00000743 _____ C:\Users\Fragster\Desktop\Start Emsisoft Emergency Kit.lnk
2015-08-18 20:45 - 2015-08-18 20:45 - 00000000 ____D C:\EEK
2015-08-18 20:43 - 2015-08-18 20:44 - 165581408 _____ C:\Users\Fragster\Desktop\EmsisoftEmergencyKit.exe
2015-08-16 17:59 - 2015-08-16 17:59 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-08-16 17:59 - 2015-07-30 15:13 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-16 17:59 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-16 17:53 - 2015-08-16 17:53 - 00000000 ____D C:\Program Files (x86)\ESET
2015-08-16 17:52 - 2015-08-16 17:52 - 00852684 _____ C:\Users\Fragster\Desktop\SecurityCheck.exe
2015-08-16 17:51 - 2015-08-16 17:52 - 02870984 _____ (ESET) C:\Users\Fragster\Desktop\esetsmartinstaller_deu.exe
2015-08-13 20:58 - 2015-08-13 20:58 - 00000000 ____D C:\Users\Fragster\Desktop\DSO wallpaper
2015-08-13 20:36 - 2015-08-13 20:36 - 00094806 _____ C:\Users\Fragster\Desktop\FRST02.txt
2015-08-13 20:36 - 2015-08-13 20:36 - 00072796 _____ C:\Users\Fragster\Desktop\Addition02.txt
2015-08-13 20:35 - 2015-07-16 21:12 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-08-13 20:35 - 2015-07-16 21:12 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-08-13 20:35 - 2015-07-16 21:12 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-08-13 20:35 - 2015-07-16 21:11 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-08-13 20:35 - 2015-07-16 21:11 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-08-13 20:35 - 2015-07-16 21:11 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-08-13 20:35 - 2015-07-11 15:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2015-08-13 20:33 - 2015-08-13 20:33 - 00001877 _____ C:\Users\Fragster\Desktop\JRT.txt
2015-08-13 20:33 - 2015-07-21 02:39 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-08-13 20:33 - 2015-07-21 02:12 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-08-13 20:33 - 2015-07-16 23:14 - 25192448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-08-13 20:33 - 2015-07-16 22:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-08-13 20:33 - 2015-07-16 22:54 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-08-13 20:33 - 2015-07-16 22:37 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-08-13 20:33 - 2015-07-16 22:36 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-08-13 20:33 - 2015-07-16 22:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-08-13 20:33 - 2015-07-16 22:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-08-13 20:33 - 2015-07-16 22:35 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-08-13 20:33 - 2015-07-16 22:35 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-08-13 20:33 - 2015-07-16 22:27 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-08-13 20:33 - 2015-07-16 22:26 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-08-13 20:33 - 2015-07-16 22:26 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-08-13 20:33 - 2015-07-16 22:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-08-13 20:33 - 2015-07-16 22:21 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-08-13 20:33 - 2015-07-16 22:21 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-08-13 20:33 - 2015-07-16 22:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-08-13 20:33 - 2015-07-16 22:21 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-08-13 20:33 - 2015-07-16 22:20 - 19870208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-08-13 20:33 - 2015-07-16 22:12 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-13 20:33 - 2015-07-16 22:08 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-08-13 20:33 - 2015-07-16 22:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-08-13 20:33 - 2015-07-16 22:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-13 20:33 - 2015-07-16 21:55 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-08-13 20:33 - 2015-07-16 21:54 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-08-13 20:33 - 2015-07-16 21:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-08-13 20:33 - 2015-07-16 21:51 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-08-13 20:33 - 2015-07-16 21:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-08-13 20:33 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-08-13 20:33 - 2015-07-16 21:50 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-08-13 20:33 - 2015-07-16 21:49 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-08-13 20:33 - 2015-07-16 21:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-08-13 20:33 - 2015-07-16 21:43 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-08-13 20:33 - 2015-07-16 21:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-08-13 20:33 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-08-13 20:33 - 2015-07-16 21:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-08-13 20:33 - 2015-07-16 21:39 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-08-13 20:33 - 2015-07-16 21:38 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-08-13 20:33 - 2015-07-16 21:36 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-08-13 20:33 - 2015-07-16 21:35 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-08-13 20:33 - 2015-07-16 21:34 - 14451200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-08-13 20:33 - 2015-07-16 21:33 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-08-13 20:33 - 2015-07-16 21:32 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-08-13 20:33 - 2015-07-16 21:29 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-08-13 20:33 - 2015-07-16 21:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-08-13 20:33 - 2015-07-16 21:20 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-08-13 20:33 - 2015-07-16 21:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-08-13 20:33 - 2015-07-16 21:17 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-08-13 20:33 - 2015-07-16 21:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-08-13 20:33 - 2015-07-16 21:12 - 02427904 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-08-13 20:33 - 2015-07-16 21:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-08-13 20:33 - 2015-07-16 21:06 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-08-13 20:33 - 2015-07-16 21:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-08-13 20:33 - 2015-07-16 21:05 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-08-13 20:33 - 2015-07-16 21:01 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-08-13 20:33 - 2015-07-16 20:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-08-13 20:33 - 2015-07-16 20:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-08-13 20:33 - 2015-07-16 20:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-08-13 20:33 - 2015-07-16 20:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-08-13 20:33 - 2015-07-15 20:15 - 05568960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-13 20:33 - 2015-07-15 20:15 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-08-13 20:33 - 2015-07-15 20:15 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-08-13 20:33 - 2015-07-15 20:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-08-13 20:33 - 2015-07-15 20:12 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-08-13 20:33 - 2015-07-15 20:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-08-13 20:33 - 2015-07-15 20:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-08-13 20:33 - 2015-07-15 20:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-08-13 20:33 - 2015-07-15 20:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-08-13 20:33 - 2015-07-15 20:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-08-13 20:33 - 2015-07-15 20:10 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-08-13 20:33 - 2015-07-15 20:10 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-08-13 20:33 - 2015-07-15 20:10 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-08-13 20:33 - 2015-07-15 20:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-08-13 20:33 - 2015-07-15 20:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-08-13 20:33 - 2015-07-15 20:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-08-13 20:33 - 2015-07-15 20:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-08-13 20:33 - 2015-07-15 20:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:59 - 03989952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-08-13 20:33 - 2015-07-15 19:59 - 03934656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-08-13 20:33 - 2015-07-15 19:56 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-08-13 20:33 - 2015-07-15 19:55 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-08-13 20:33 - 2015-07-15 19:55 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-08-13 20:33 - 2015-07-15 19:55 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-08-13 20:33 - 2015-07-15 19:55 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-08-13 20:33 - 2015-07-15 19:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-08-13 20:33 - 2015-07-15 19:54 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-08-13 20:33 - 2015-07-15 19:54 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-08-13 20:33 - 2015-07-15 19:54 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-08-13 20:33 - 2015-07-15 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-08-13 20:33 - 2015-07-15 19:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-08-13 20:33 - 2015-07-15 19:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-08-13 20:33 - 2015-07-15 19:54 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-08-13 20:33 - 2015-07-15 19:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-08-13 20:33 - 2015-07-15 19:53 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-08-13 20:33 - 2015-07-15 19:53 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-08-13 20:33 - 2015-07-15 19:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-08-13 20:33 - 2015-07-15 19:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-08-13 20:33 - 2015-07-15 19:53 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-08-13 20:33 - 2015-07-15 19:49 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-08-13 20:33 - 2015-07-15 19:48 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 18:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-08-13 20:33 - 2015-07-15 18:46 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-08-13 20:33 - 2015-07-15 18:46 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-08-13 20:33 - 2015-07-15 18:37 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-08-13 20:33 - 2015-07-15 18:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-08-13 20:33 - 2015-07-15 18:34 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 18:34 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 18:34 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 18:34 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-13 20:33 - 2015-07-15 05:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2015-08-13 20:31 - 2015-08-13 20:31 - 00004175 _____ C:\Users\Fragster\Desktop\AdwCleaner[S0].txt
2015-08-13 20:25 - 2015-08-13 20:28 - 00000000 ____D C:\AdwCleaner
2015-08-13 20:25 - 2015-07-30 20:06 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-08-13 20:25 - 2015-07-30 20:06 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-08-13 20:25 - 2015-07-30 19:57 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-08-13 20:25 - 2015-07-15 05:19 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-08-13 20:25 - 2015-07-15 05:19 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-08-13 20:25 - 2015-07-15 05:14 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-08-13 20:25 - 2015-07-15 05:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-08-13 20:25 - 2015-07-15 04:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-08-13 20:25 - 2015-07-15 04:55 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-08-13 20:25 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-08-13 20:25 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-08-13 20:25 - 2015-07-01 22:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-08-13 20:25 - 2015-07-01 22:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-08-13 20:25 - 2015-07-01 22:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-08-13 20:25 - 2015-07-01 22:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-08-13 20:24 - 2015-08-13 20:24 - 00007011 _____ C:\Users\Fragster\Desktop\mbam.txt
2015-08-13 20:24 - 2015-07-30 20:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-08-13 20:24 - 2015-07-30 20:06 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-08-13 20:24 - 2015-07-30 20:06 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-08-13 20:24 - 2015-07-30 20:06 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-08-13 20:24 - 2015-07-30 20:06 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-08-13 20:24 - 2015-07-30 19:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-08-13 20:24 - 2015-07-30 19:57 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-08-13 20:24 - 2015-07-30 19:57 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-08-13 20:24 - 2015-07-30 19:57 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-08-13 20:24 - 2015-07-30 19:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-08-13 20:24 - 2015-07-30 18:56 - 03208192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-08-13 20:24 - 2015-07-30 18:52 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-08-13 20:24 - 2015-07-30 18:49 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-08-13 20:24 - 2015-07-10 19:51 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-08-13 20:24 - 2015-07-10 19:34 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-08-13 20:24 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2015-08-13 20:24 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2015-08-13 20:24 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
2015-08-13 20:16 - 2015-07-20 20:12 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-08-13 20:16 - 2015-07-20 20:12 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-13 20:16 - 2015-07-20 20:12 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-08-13 20:16 - 2015-07-20 20:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-08-13 20:16 - 2015-07-20 20:12 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-08-13 20:16 - 2015-07-20 20:12 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-08-13 20:16 - 2015-07-20 20:12 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-08-13 20:16 - 2015-07-20 20:12 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-08-13 20:16 - 2015-07-20 20:12 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-08-13 20:16 - 2015-07-20 20:12 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-08-13 20:16 - 2015-07-20 20:12 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-08-13 20:16 - 2015-07-20 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-08-13 20:16 - 2015-07-20 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-08-13 20:16 - 2015-07-20 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-08-13 20:16 - 2015-07-20 19:56 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-08-13 20:16 - 2015-07-20 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-08-13 20:08 - 2015-08-20 18:56 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-13 20:07 - 2015-08-13 20:07 - 00001102 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-08-13 20:07 - 2015-08-13 20:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-08-13 20:07 - 2015-08-13 20:07 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-13 20:07 - 2015-08-13 20:07 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-08-13 20:07 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-08-13 20:07 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-08-13 20:07 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-08-13 20:06 - 2015-08-13 20:06 - 01791580 _____ (Malwarebytes Corporation) C:\Users\Fragster\Desktop\JRT.exe
2015-08-13 20:05 - 2015-08-13 20:05 - 02248704 _____ C:\Users\Fragster\Desktop\AdwCleaner_4.208.exe
2015-08-13 20:04 - 2015-08-13 20:04 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Fragster\Desktop\mbam-setup-2.1.8.1057.exe
2015-08-12 20:53 - 2015-08-12 20:47 - 00041956 _____ C:\Users\Fragster\Desktop\ComboFix.txt
2015-08-12 20:47 - 2015-08-12 20:47 - 00041956 _____ C:\ComboFix.txt
2015-08-12 20:38 - 2015-08-12 20:47 - 00000000 ____D C:\Qoobox
2015-08-12 20:38 - 2015-08-12 20:46 - 00000000 ____D C:\Windows\erdnt
2015-08-12 20:38 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-08-12 20:38 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-08-12 20:38 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-08-12 20:38 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-08-12 20:38 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-08-12 20:38 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-08-12 20:38 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-08-12 20:38 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-08-12 20:37 - 2015-08-12 20:37 - 05634368 ____R (Swearware) C:\Users\Fragster\Desktop\ComboFix.exe
2015-08-12 20:31 - 2015-08-12 20:31 - 00001264 _____ C:\Users\Fragster\Desktop\Revo Uninstaller.lnk
2015-08-12 20:31 - 2015-08-12 20:31 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-08-12 20:29 - 2015-08-12 20:29 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Fragster\Desktop\revosetup95.exe
2015-08-11 21:27 - 2015-08-11 21:27 - 00089419 _____ C:\Users\Fragster\Desktop\Gmer.txt
2015-08-11 21:05 - 2015-08-20 19:05 - 00031060 _____ C:\Users\Fragster\Desktop\FRST.txt
2015-08-11 21:05 - 2015-08-20 19:05 - 00000000 ____D C:\FRST
2015-08-11 21:05 - 2015-08-13 20:35 - 00072796 _____ C:\Users\Fragster\Desktop\Addition.txt
2015-08-11 21:05 - 2015-08-13 20:34 - 00000000 ____D C:\Users\Fragster\Desktop\FRST-OlderVersion
2015-08-11 20:01 - 2015-08-11 20:09 - 00001111 _____ C:\Users\Fragster\Desktop\Neues Textdokument.txt
2015-08-11 19:07 - 2015-08-11 19:07 - 00380416 _____ C:\Users\Fragster\Desktop\Gmer-19357.exe
2015-08-11 19:04 - 2015-08-13 20:34 - 02173952 _____ (Farbar) C:\Users\Fragster\Desktop\FRST64.exe
2015-08-11 19:01 - 2015-08-11 19:01 - 00005312 _____ C:\Users\Fragster\Desktop\Avira_Ereignisse.txt
2015-08-09 22:18 - 2015-08-10 19:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-09 21:59 - 2015-06-09 20:03 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-08-09 21:59 - 2015-06-09 20:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-08-09 21:59 - 2015-06-03 22:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-08-09 21:58 - 2014-12-11 19:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-08-04 20:35 - 2015-08-04 20:35 - 00000000 ____D C:\Users\Fragster\AppData\Local\GWX
2015-08-03 19:19 - 2015-08-03 19:21 - 00000000 ___SD C:\Windows\system32\GWX
2015-08-03 19:19 - 2015-08-03 19:19 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-08-03 19:19 - 2015-08-03 19:19 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-08-03 19:19 - 2015-08-03 19:19 - 00000000 ____D C:\Windows\system32\appraiser
2015-08-03 19:18 - 2015-01-09 01:44 - 00419936 _____ C:\Windows\SysWOW64\locale.nls
2015-08-03 19:18 - 2015-01-09 01:43 - 00419936 _____ C:\Windows\system32\locale.nls
2015-08-03 19:17 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2015-08-03 19:17 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-08-03 19:17 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-08-03 19:17 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2015-08-03 19:17 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2015-08-03 19:17 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2015-08-03 19:17 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2015-08-03 19:17 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2015-08-03 19:17 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-08-03 19:17 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2015-08-03 19:16 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-08-03 19:16 - 2012-08-23 16:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2015-08-03 19:16 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2015-08-03 19:16 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2015-08-03 19:14 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-08-03 19:14 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2015-08-03 19:13 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-08-03 19:13 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-08-03 19:13 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-08-03 19:13 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-08-03 19:13 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-08-03 19:13 - 2015-06-03 22:16 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-08-03 19:13 - 2015-06-03 22:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-08-03 19:13 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-08-03 19:13 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-08-03 19:13 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-08-03 19:13 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-08-03 19:13 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-08-03 19:13 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-08-03 19:13 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-08-03 19:13 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-08-03 19:13 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-08-03 19:13 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-08-03 19:13 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-08-03 19:13 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-08-03 19:13 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-08-03 19:13 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-08-03 19:13 - 2015-03-14 05:21 - 01632768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-08-03 19:13 - 2015-03-14 05:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-08-03 19:13 - 2015-03-14 05:04 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-08-03 19:13 - 2015-03-14 05:04 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-08-03 19:13 - 2015-03-04 06:41 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-08-03 19:13 - 2015-03-04 06:41 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-08-03 19:13 - 2015-03-04 06:41 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-08-03 19:13 - 2015-03-04 06:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-08-03 19:13 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-08-03 19:13 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-08-03 19:13 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-08-03 19:13 - 2015-01-29 05:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-08-03 19:13 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-08-03 19:13 - 2015-01-09 05:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-08-03 19:13 - 2015-01-09 05:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-08-03 19:13 - 2015-01-09 05:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-08-03 19:13 - 2015-01-09 04:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-08-03 19:13 - 2014-11-26 05:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-08-03 19:13 - 2014-11-26 05:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-08-03 19:13 - 2014-11-11 03:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-08-03 19:13 - 2014-11-08 05:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-08-03 19:13 - 2014-11-08 04:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-08-03 19:13 - 2014-10-03 04:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-08-03 19:13 - 2014-10-03 04:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-08-03 19:13 - 2014-10-03 03:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-08-03 19:13 - 2014-10-03 03:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2015-08-03 19:13 - 2014-10-03 03:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2015-08-03 19:13 - 2014-10-03 03:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2015-08-03 19:13 - 2014-10-03 03:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2015-08-03 19:13 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2015-08-03 19:13 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2015-08-03 19:13 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2015-08-03 19:13 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-08-03 19:13 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2015-08-03 19:13 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2015-08-03 19:13 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2015-08-03 19:13 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-08-03 19:13 - 2013-12-04 04:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2015-08-03 19:13 - 2013-12-04 04:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2015-08-03 19:13 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2015-08-03 19:13 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2015-08-03 19:13 - 2013-12-04 04:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2015-08-03 19:13 - 2013-12-04 04:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2015-08-03 19:13 - 2013-12-04 04:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2015-08-03 19:13 - 2013-12-04 04:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2015-08-03 19:13 - 2013-12-04 04:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2015-08-03 19:13 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2015-08-03 19:13 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2015-08-03 19:13 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2015-08-03 19:13 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2015-08-03 19:13 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2015-08-03 19:13 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2015-08-03 19:13 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2015-08-03 19:13 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2015-08-03 19:13 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2015-08-03 19:13 - 2013-10-30 04:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2015-08-03 19:13 - 2013-10-30 04:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2015-08-03 19:13 - 2013-10-04 04:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2015-08-03 19:13 - 2013-10-04 04:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2015-08-03 19:13 - 2013-10-04 03:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2015-08-03 19:13 - 2013-10-04 03:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2015-08-03 19:13 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2015-08-03 19:13 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2015-08-03 19:13 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2015-08-03 19:13 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2015-08-03 19:13 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2015-08-03 19:13 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2015-08-03 19:13 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2015-08-03 19:13 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2015-08-03 19:13 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2015-08-03 19:13 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2015-08-03 19:13 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2015-08-03 19:13 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2015-08-03 19:13 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2015-08-03 19:13 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2015-08-03 19:13 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2015-08-03 19:13 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2015-08-03 19:13 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2015-08-03 19:13 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2015-08-03 19:13 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2015-08-03 19:13 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2015-08-03 19:13 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2015-08-03 19:13 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2015-08-03 19:13 - 2012-10-03 18:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2015-08-03 19:13 - 2012-08-22 20:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-08-03 19:13 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2015-08-03 19:13 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2015-08-03 19:13 - 2012-01-04 12:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2015-08-03 19:13 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2015-08-03 19:13 - 2011-12-30 08:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2015-08-03 19:13 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2015-08-03 19:13 - 2011-06-16 07:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2015-08-03 19:13 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2015-08-03 19:13 - 2011-05-04 07:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2015-08-03 19:13 - 2011-05-04 07:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2015-08-03 19:13 - 2011-05-04 07:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2015-08-03 19:13 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2015-08-03 19:13 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2015-08-03 19:13 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2015-08-03 19:13 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2015-08-03 19:13 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2015-08-03 19:13 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2015-08-03 19:13 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2015-08-03 19:13 - 2011-03-11 08:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2015-08-03 19:13 - 2011-03-11 08:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2015-08-03 19:13 - 2011-03-11 08:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2015-08-03 19:13 - 2011-03-11 08:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2015-08-03 19:13 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2015-08-03 19:13 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2015-08-03 19:13 - 2011-03-11 06:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2015-08-03 19:12 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-08-03 19:12 - 2014-10-30 04:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-08-03 19:12 - 2014-10-30 03:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2015-08-03 19:12 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2015-08-03 19:12 - 2012-07-06 22:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2015-08-03 19:12 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2015-08-03 19:12 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2015-08-03 19:10 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2015-08-03 19:09 - 2015-05-09 20:26 - 00493504 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-03 19:06 - 2015-08-03 19:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
2015-07-27 22:19 - 2015-07-27 22:19 - 00000000 ____D C:\Users\Fragster\AppData\Local\CEF
2015-07-27 19:07 - 2015-07-27 19:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-07-27 19:07 - 2015-07-27 19:07 - 00000000 ____D C:\Program Files\McAfee Security Scan
2015-07-27 00:30 - 2015-07-27 00:30 - 00000000 ____D C:\Users\Fragster\Desktop\Der kleine Bruder CD 1
2015-07-21 23:14 - 2015-08-04 21:17 - 00000000 ____D C:\Users\Public\Documents\Jagged Alliance - Back in Action

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-20 19:05 - 2015-06-06 14:07 - 00001236 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job
2015-08-20 19:03 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-20 19:03 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-20 19:02 - 2011-04-12 09:43 - 00699416 _____ C:\Windows\system32\perfh007.dat
2015-08-20 19:02 - 2011-04-12 09:43 - 00149556 _____ C:\Windows\system32\perfc007.dat
2015-08-20 19:02 - 2009-07-14 07:13 - 01620110 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-20 19:00 - 2012-03-30 22:21 - 02050513 _____ C:\Windows\WindowsUpdate.log
2015-08-20 18:55 - 2015-04-02 15:47 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-20 18:55 - 2012-09-22 15:20 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\WTablet
2015-08-20 18:55 - 2012-05-10 19:55 - 00000000 ___RD C:\Users\Fragster\Dropbox
2015-08-20 18:55 - 2012-05-10 19:53 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Dropbox
2015-08-20 18:55 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-20 18:55 - 2009-07-14 06:51 - 00285019 _____ C:\Windows\setupact.log
2015-08-18 21:12 - 2012-10-05 21:49 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job
2015-08-18 21:09 - 2015-04-02 15:47 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-18 20:49 - 2012-03-30 22:56 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-17 21:21 - 2012-09-22 18:12 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-08-16 19:10 - 2009-07-14 06:45 - 05112912 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-16 19:09 - 2010-11-21 05:47 - 00548864 _____ C:\Windows\PFRO.log
2015-08-16 17:59 - 2015-06-07 16:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-16 17:59 - 2012-07-09 12:51 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-08-16 17:58 - 2015-06-07 16:46 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-08-16 17:58 - 2015-06-07 16:46 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-08-16 17:54 - 2013-08-15 12:46 - 00000000 ____D C:\Windows\system32\MRT
2015-08-16 17:51 - 2012-06-11 22:34 - 132483416 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-08-13 20:52 - 2014-07-21 19:00 - 00001179 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mocha for After Effects CS5.lnk
2015-08-13 20:21 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Media
2015-08-12 20:47 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-08-12 20:45 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-08-12 20:29 - 2012-08-30 00:06 - 00000000 ____D C:\Users\Fragster\AppData\Local\Akamai
2015-08-11 21:56 - 2013-11-16 19:21 - 00000000 ____D C:\Windows\rescache
2015-08-11 19:56 - 2013-11-01 20:55 - 00000000 ____D C:\ProgramData\Oracle
2015-08-11 19:56 - 2012-03-31 17:01 - 00000000 ____D C:\Program Files (x86)\Java
2015-08-11 19:55 - 2013-11-01 20:55 - 00321632 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-08-11 19:55 - 2013-11-01 20:55 - 00206944 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-08-11 19:55 - 2013-11-01 20:55 - 00206432 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-08-11 19:55 - 2013-11-01 20:55 - 00110688 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-08-11 19:55 - 2013-11-01 20:55 - 00000000 ____D C:\Program Files\Java
2015-08-11 19:54 - 2013-11-01 21:09 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-08-11 19:54 - 2013-11-01 20:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-11 19:49 - 2012-03-30 22:56 - 00778440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-08-11 19:49 - 2012-03-30 22:56 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-11 19:49 - 2012-03-30 22:56 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-08-11 19:45 - 2013-02-11 22:14 - 00001978 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2015-08-10 20:03 - 2012-05-08 22:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-04 20:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2015-08-03 19:21 - 2012-03-30 23:08 - 00066376 _____ C:\Users\Fragster\AppData\Local\GDIPFONTCACHEV1.DAT
2015-08-03 19:20 - 2009-07-14 05:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-08-03 19:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-08-03 19:06 - 2012-07-09 12:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-08-02 16:05 - 2015-06-06 14:07 - 00001184 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job
2015-07-31 22:28 - 2015-04-14 18:47 - 00000080 _____ C:\Users\Fragster\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2015-07-31 09:09 - 2015-07-11 23:42 - 00001120 _____ C:\Users\Public\Desktop\Avira.lnk
2015-07-31 09:09 - 2014-07-16 20:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-07-31 09:09 - 2013-10-11 19:31 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-30 08:35 - 2014-07-16 20:50 - 00162528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-07-30 08:35 - 2014-07-16 20:50 - 00141416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-07-27 22:17 - 2012-03-30 23:14 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Origin
2015-07-27 22:17 - 2012-03-30 23:13 - 00000000 ____D C:\ProgramData\Origin
2015-07-27 22:16 - 2012-03-30 23:13 - 00000000 ____D C:\Program Files (x86)\Origin
2015-07-27 20:13 - 2014-09-15 11:35 - 00000726 _____ C:\Windows\wiso.ini
2015-07-27 19:11 - 2014-09-15 15:15 - 00000000 ____D C:\Users\Fragster\Documents\Steuer-Sparbuch
2015-07-27 19:07 - 2012-08-26 16:53 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2015-07-27 15:41 - 2013-02-25 23:29 - 00000000 ____D C:\Users\Fragster\AppData\Roaming\Spotify
2015-07-27 15:41 - 2013-02-25 23:29 - 00000000 ____D C:\Users\Fragster\AppData\Local\Spotify
2015-07-21 23:13 - 2012-03-31 00:38 - 00725453 _____ C:\Windows\DirectX.log

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2012-11-15 00:11 - 2009-12-31 14:01 - 0266240 _____ (Chaos Group Ltd) C:\Program Files\cgauth.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 1101312 _____ () C:\Program Files\dte_wrapper.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 0802304 _____ () C:\Program Files\glslang.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 0173056 _____ () C:\Program Files\glvm.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 1038848 _____ (Joe Alter Inc) C:\Program Files\HairVrPrims2011.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 3381944 _____ (Intel Corporation) C:\Program Files\libmmd.dll
2012-11-14 23:06 - 2012-11-15 00:11 - 0000125 _____ () C:\Program Files\plugin.ini
2012-11-15 00:11 - 2012-11-15 00:11 - 4333568 _____ (Chaos Software Ltd) C:\Program Files\vray.dll
2012-11-15 00:11 - 2010-12-10 19:15 - 7111168 _____ (Chaos Software Ltd) C:\Program Files\vray2011.dll
2012-11-15 00:11 - 2012-11-15 00:11 - 0172032 _____ () C:\Program Files\vraydummy2011.max
2012-11-15 00:11 - 2012-11-15 00:11 - 0011798 _____ () C:\Program Files\vraydummy2011.xml
2012-11-15 00:11 - 2012-11-15 00:11 - 0144896 _____ () C:\Program Files\vrayspawner2011.exe
2015-05-08 20:09 - 2015-05-08 20:10 - 0000132 _____ () C:\Users\Fragster\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-05-08 20:07 - 2015-05-08 20:07 - 0000132 _____ () C:\Users\Fragster\AppData\Roaming\Adobe Targa Format CS5 Prefs
2012-04-10 20:44 - 2012-10-21 19:37 - 0000125 ___SH () C:\ProgramData\.zreglib

Einige Dateien in TEMP:
====================
C:\Users\Fragster\AppData\Local\Temp\avgnt.exe
C:\Users\Fragster\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp4hvb54.dll
C:\Users\Fragster\AppData\Local\Temp\Quarantine.exe
C:\Users\Fragster\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-08-18 21:21

==================== Ende von Ergebnis ============================


MBB 20.08.2015 18:07

Addition:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:13-08-2015
durchgeführt von Fragster (2015-08-20 19:05:24)
Gestartet von C:\Users\Fragster\Desktop
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2049330118-253893184-3514707546-500 - Administrator - Disabled)
Fragster (S-1-5-21-2049330118-253893184-3514707546-1000 - Administrator - Enabled) => C:\Users\Fragster
Gast (S-1-5-21-2049330118-253893184-3514707546-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2049330118-253893184-3514707546-1004 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe After Effects CS3 Third Party Content (HKLM-x32\...\Adobe_3675c95c239b992d5d0ee8fce969b9e) (Version: 3 - Adobe Systems Incorporated)
Adobe After Effects CS5 Third Party Content (HKLM-x32\...\{C0AA232E-BD1B-40B5-A176-A2BEB67FFAE1}) (Version: 10 - Adobe Systems Incorporated)
Adobe After Effects CS5 Third Party Royalty Content (HKLM-x32\...\{CD29B5CA-4727-4114-9AD9-25CCCE6E4014}) (Version: 10 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Creative Suite 3 Master Collection hinzufügen oder entfernen (HKLM-x32\...\Adobe_67a7fb1e97aa14ee9ef0950eb6fd757) (Version: 1.0 - Adobe Systems Incorporated)
Adobe Creative Suite 5 Production Premium (HKLM-x32\...\{53BC789D-073D-47B6-AA9F-DE05990AF07A}) (Version: 5.0 - Adobe Systems Incorporated)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Premiere Pro CS3 Third Party Content (HKLM-x32\...\Adobe_71c180716438072ebd356ce2549df41) (Version: 3 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
AHV content for Acrobat and Flash (x32 Version: 1 - Adobe Systems Incorporated) Hidden
Akamai NetSession Interface (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Akamai NetSession Interface (HKU\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Akamai) (Version:  - Akamai Technologies, Inc)
Alien: Isolation (HKLM-x32\...\Steam App 214490) (Version:  - Creative Assembly)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Apple Application Support (HKLM-x32\...\{122ADF8C-DDA1-480C-9936-C88F2825B265}) (Version: 2.1.9 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6A76BEAF-6D1F-4273-A79B-DA8410A2E56B}) (Version: 5.2.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Assassin’s Creed® III (HKLM-x32\...\Steam App 208480) (Version:  - Ubisoft Montreal)
Assassin's Creed II (HKLM-x32\...\Steam App 33230) (Version:  - Ubisoft Montreal)
Audible Download Manager (HKLM-x32\...\AudibleDownloadManager) (Version: 6.6.0.15 - Audible, Inc.)
AudibleManager (HKLM-x32\...\AudibleManager) (Version: 1995390206.48.56.3157818 - Audible, Inc.)
Autodesk 3ds Max 2011 64-bit (HKLM\...\{39BFB02A-9692-0409-A808-3F5C7B1F8953}) (Version: 13.0 - Autodesk)
Autodesk 3ds Max 2015 (HKLM\...\Autodesk 3ds Max 2015) (Version: 17.1.149.0 - Autodesk)
Autodesk 3ds Max 2015 (Version: 17.1.149.0 - Autodesk) Hidden
Autodesk 3ds Max 2015 Populate Data (HKLM\...\{57E92DED-DC6C-41E5-B9E1-76D83BD2EABE}) (Version: 17.0.0.0 - Autodesk)
Autodesk 3ds Max 2015 SP1 (HKLM\...\Autodesk 3ds Max 2015 SP1) (Version: 17.1.149.0 - Autodesk)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk)
Autodesk Backburner 2015 (HKLM-x32\...\{8C5F38D2-8EFE-49A4-B3F5-BF3210FED168}) (Version: 15.0.0.0 - Autodesk)
Autodesk DirectConnect 2015 64-bit (HKLM\...\Autodesk DirectConnect 2015 64-bit) (Version: 9.0.56.4 - Autodesk)
Autodesk DirectConnect 2015 64-bit (Version: 9.0.56.4 - Autodesk) Hidden
Autodesk DirectConnect 2015 64-bit Hotfix1 (HKLM\...\Autodesk DirectConnect 2015 64-bit_9001) (Version: 9.0.56.4 - Autodesk)
Autodesk Inventor Server Engine for 3ds Max 2015 (HKLM\...\{9167CA34-4E48-49E3-8892-3C439739D2D3}) (Version: 17.0.2 - Autodesk)
Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2015 (HKLM-x32\...\{9F6466D9-6EFC-4A10-B931-C72D1A3F1763}) (Version: 5.2.9.100 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2015 (HKLM\...\Autodesk Revit Interoperability for 3ds Max 2015) (Version: 15.0.166.0 - Autodesk)
Autodesk Revit Interoperability for 3ds Max 2015 (Version: 15.0.166.0 - Autodesk) Hidden
Avira (HKLM-x32\...\{a5e00a72-db4a-4f77-8874-d1265b8fcd7e}) (Version: 1.1.42.10415 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.42.10415 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.12.408 - Avira Operations GmbH & Co. KG)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 1942™ (HKLM-x32\...\{5BE7BD06-512B-43bf-AD78-3BD2A5F5F7B3}) (Version: 1.6.20.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.4.2.30944 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Botanicula (HKLM-x32\...\Steam App 207690) (Version:  - Amanita Design)
Broforce (HKLM-x32\...\Steam App 274190) (Version:  - Free Lives)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version:  - Infinity Ward)
CameraHelperMsi (x32 Version: 13.50.854.0 - Logitech) Hidden
Canon Inkjet Printer Driver Add-On Module V2.00 (HKLM\...\CANONIJINBOXADDON200) (Version:  - )
Canon MP Navigator EX 2.0 (HKLM-x32\...\MP Navigator EX 2.0) (Version:  - )
Canon MP540 series Benutzerregistrierung (HKLM-x32\...\Canon MP540 series Benutzerregistrierung) (Version:  - )
Canon MP540 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP540_series) (Version:  - )
CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)
Command & Conquer Alarmstufe Rot 2 (HKLM-x32\...\Red Alert 2) (Version:  - )
ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version:  - DownloadHelper)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd)
Deadlight (HKLM-x32\...\Steam App 211400) (Version:  - Tequila Works, S.L.)
Deus Ex: Human Revolution (HKLM-x32\...\Steam App 28050) (Version:  - Eidos Montreal)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Dishonored (HKLM-x32\...\Steam App 205100) (Version: 1.0 - Bethesda Softworks)
DIY DataRecovery DiskPatch 3 (HKLM-x32\...\DiskPatch_is1) (Version: 3.5.300 - DIY DataRecovery.nl)
Dropbox (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Dropbox) (Version: 3.8.6 - Dropbox, Inc.)
Dropbox (HKU\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Dropbox) (Version: 3.8.6 - Dropbox, Inc.)
erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
ffdshow v1.2.4422 [2012-04-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.2.4422.0 - )
Free Video to MP3 Converter version 5.0.17.903 (HKLM-x32\...\Free Video to MP3 Converter_is1) (Version: 5.0.17.903 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.46.923 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.46.923 - DVDVideoSoft Ltd.)
Func KB-460 Settings software (HKLM-x32\...\{8918A402-4EEF-489F-940F-DC25BEEFA6FF}_sbay) (Version:  - )
GetDataBack for NTFS (HKLM-x32\...\{56582EEA-3AEF-4D84-8B9D-C87A3CD9250F}) (Version: 4.00.000 - Runtime Software)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.155 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden
Grand Theft Auto IV (HKLM-x32\...\Steam App 12210) (Version:  - Rockstar)
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version:  - Rockstar North)
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )
Half-Life 2 (HKLM-x32\...\Steam App 220) (Version:  - Valve)
Half-Life: Source (HKLM-x32\...\Steam App 280) (Version:  - Valve)
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version:  - EFD Software)
iExplorer 3.1.1.0 (HKLM-x32\...\{7FD8B0C1-CDDA-4B4D-A577-B2E3570EA3A3}_is1) (Version:  - Macroplant LLC)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 15.4 - Intel)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}) (Version: 10.6.3.25 - Apple Inc.)
Jagged Alliance - Back in Action (HKLM-x32\...\Steam App 57740) (Version:  - Coreplay GmbH)
Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Kane & Lynch: Dead Men (HKLM-x32\...\Steam App 8080) (Version:  - IO Interactive)
Logitech Webcam Software-Treiberpaket (HKLM\...\lvdrivers_12.10) (Version: 12.10.1110 - Logitech Inc.)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.40 - Logitech Inc.)
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Max Payne 3 (HKLM-x32\...\Steam App 204100) (Version:  - Rockstar Studios)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.149.2 - McAfee, Inc.)
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version:  - )
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-0000-0000-0000000FF1CE}_EXCEL_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0018-0000-0000-0000000FF1CE}_POWERPOINT_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0000-0000-0000000FF1CE}_WORD_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Excel 2007 (HKLM-x32\...\EXCEL) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint 2007 (HKLM-x32\...\POWERPOINT) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Word 2007 (HKLM-x32\...\WORD) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mirror's Edge (HKLM-x32\...\Steam App 17410) (Version:  - DICE)
Mozilla Firefox 39.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 39.0.3 (x86 de)) (Version: 39.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 8.5.0.4554 - Electronic Arts, Inc.)
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
QuickTime (HKLM-x32\...\{0E64B098-8018-4256-BA23-C316A43AD9B0}) (Version: 7.72.80.56 - Apple Inc.)
Resident Evil / biohazard HD REMASTER (HKLM-x32\...\Steam App 304240) (Version:  - CAPCOM Co., Ltd.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.1 - Rockstar Games)
Sanctum 2 (HKLM-x32\...\Steam App 210770) (Version:  - Coffee Stain Studios)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.102 - Skype Technologies S.A.)
SleepTimer Ultimate 1.2 (HKLM-x32\...\{0EE56463-49B2-45E1-B74F-3E0139DBC986}_is1) (Version:  - Christian Handorf)
Sniper Elite V2 (HKLM-x32\...\Steam App 63380) (Version:  - Rebellion)
Spec Ops: The Line (HKLM-x32\...\Steam App 50300) (Version:  - Yager)
Spotify (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\Spotify) (Version: 1.0.4.90.g0b6df40b - Spotify AB)
Spotify (HKU\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Spotify) (Version: 1.0.4.90.g0b6df40b - Spotify AB)
State of Decay (HKLM-x32\...\Steam App 241540) (Version:  - Undead Labs)
State of Decay: Year-One (HKLM-x32\...\Steam App 329430) (Version:  - Undead Labs)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Super Street Fighter IV: Arcade Edition (HKLM-x32\...\Steam App 45760) (Version:  - Capcom)
Syndicate (HKLM-x32\...\{64CFBAAB-46F7-4628-8D9B-E656A8C11CDB}) (Version: 2.0.0.3 - Electronic Arts)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Expendabros (HKLM-x32\...\Steam App 312990) (Version:  - Free Lives)
The Long Dark (HKLM-x32\...\Steam App 305620) (Version:  - Hinterland Studio Inc.)
The Stanley Parable (HKLM-x32\...\Steam App 221910) (Version:  - Galactic Cafe)
The Walking Dead (HKLM-x32\...\Steam App 207610) (Version:  - )
The Walking Dead: Season Two (HKLM-x32\...\Steam App 261030) (Version:  - Telltale Games)
The Wolf Among Us (HKLM-x32\...\Steam App 250320) (Version:  - Telltale Games)
Thrustmaster Force Feedback Driver (HKLM-x32\...\{8F5A0981-5CDC-41D0-BCA2-AD3B777FC358}) (Version: 2.FFD.2009 - Thrustmaster)
TomTom HOME (HKLM-x32\...\{7A2BB1C8-903D-4585-9F3B-CADD67D07D37}) (Version: 2.9.8 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Trapcode Suite 64-bit (HKLM-x32\...\InstallShield_{BA357941-25A7-410C-A47E-9AAF7DE1248B}) (Version: 12.0.0 - Red Giant Software)
Trapcode Suite 64-bit (Version: 12.0.0 - Red Giant Software) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unity Web Player (HKU\S-1-5-21-2049330118-253893184-3514707546-1000\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0016-0000-0000-0000000FF1CE}_EXCEL_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0018-0000-0000-0000000FF1CE}_POWERPOINT_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-001B-0000-0000-0000000FF1CE}_WORD_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
V-Ray for 3dsmax 2011 for x64 (HKLM\...\V-Ray for 3dsmax 2011 for x64) (Version: 2.20.03 - Chaos Software Ltd)
V-Ray for 3dsmax 2015 for x64 (HKLM\...\V-Ray for 3dsmax 2015 for x64) (Version: 3.00.08 - Chaos Software Ltd)
Wacom Tablett (HKLM-x32\...\Wacom Tablet Driver) (Version:  - Wacom Technology Corp.)
WebTablet IE Plugin (HKLM-x32\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.4 - Wacom Technology Corp.)
WebTablet Netscape Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.3 - Wacom Technology Corp.)
WibuKey Setup (WibuKey Remove) (HKLM\...\{00060000-0000-1004-8002-0000C06B5161}) (Version: Version 6.20 of 2013-Dec-18 (Build 1230) (Setup) - WIBU-SYSTEMS AG)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 4.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
WISO Steuer-Sparbuch 2014 (HKLM-x32\...\{04179292-C74D-4AA1-8FFA-8387CA3B67B5}) (Version: 21.00.8480 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2015 (HKLM-x32\...\{54A83CB1-9CDE-4E73-B263-90C64D4619FC}) (Version: 22.00.8811 - Buhl Data Service GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> G:\Autodesk\3ds Max 2015\Inventor Server\Bin\TestServer.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{83B0E426-D4EE-11D4-BEDF-BAB7F1EEA455}\InprocServer32 -> G:\Autodesk\3ds Max 2011\addflow4.ocx (Lassalle Technologies)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> G:\Autodesk\3ds Max 2015\Inventor Server\Bin\TestServer.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> G:\Autodesk\3ds Max 2015\Inventor Server\Bin\TestServer.dll Keine Datei
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Fragster\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2049330118-253893184-3514707546-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Fragster\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll Keine Datei

==================== Wiederherstellungspunkte =========================

03-08-2015 20:58:01 Windows Update
05-08-2015 08:12:14 Windows Update
10-08-2015 19:27:26 Windows Update
12-08-2015 20:32:58 Revo Uninstaller's restore point - File Type Assistant
12-08-2015 20:35:15 Revo Uninstaller's restore point - Free File Viewer 2012
12-08-2015 20:36:40 Revo Uninstaller's restore point - WindowsMangerProtect20.0.0.722
13-08-2015 20:31:49 JRT Pre-Junkware Removal
16-08-2015 17:50:50 Windows Update

==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2015-08-17 19:49 - 00000057 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1      localhost
0.0.0.1        mssplus.mcafee.com


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {010E9455-640F-49EF-8341-56B03E47E5B8} - System32\Tasks\{131CE2A1-80E5-4013-8A2A-6873D7F84BC5} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.115/de/go/help.faq.installer?LastError=1603
Task: {0A600157-92CB-4C7D-A3D7-FE8700F71386} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {173AE9B3-DC2E-4AF3-B64B-5B9349290381} - System32\Tasks\elbyExecuteWithUAC => C:\Program Files (x86)\Elaborate Bytes\CloneDVD2\ExecuteWithUAC.exe [2008-06-27] ()
Task: {1972673D-70BD-46DC-B45A-05F6EABF7F1C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-02] (Google Inc.)
Task: {26D1A02D-67C2-4FB0-9861-254C166460D1} - System32\Tasks\{48CF35FF-433B-432E-8D27-6B4DDC955A4E} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.123/de/go/help.faq.installer?LastError=1603
Task: {26F12A49-55E0-49EB-B694-DFEBA829A253} - System32\Tasks\{26AF6ED6-A302-4497-88B2-D36EE5833B6D} => Firefox.exe hxxp://ui.skype.com/ui/0/5.9.0.123/de/go/help.faq.installer?LastError=1603
Task: {3ACEA9AB-9CD1-4981-9429-97C14693D6DC} - System32\Tasks\{4268E6F3-C933-400A-A726-044594806FF1} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {6F74DD1A-AEBA-475F-B26B-097BE57850F2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-05] (Google Inc.)
Task: {A145D6B4-B10E-4A2C-8280-31494289BAE6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-02] (Google Inc.)
Task: {A4CD521B-493B-44A4-9DAA-D3DD144BD91C} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-06] (Dropbox, Inc.)
Task: {AF37AC83-2051-4952-B6D6-8BBD0CEE24F0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-11] (Adobe Systems Incorporated)
Task: {C9DF2EBC-0F2C-4485-A15D-5167FE2108A6} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-05] (Google Inc.)
Task: {CDA8CE5F-AA6D-464F-B7F6-9873E97E288A} - System32\Tasks\AdobeAAMUpdater-1.0-Fragster-PC-Fragster => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {DE7D3939-590E-451B-AADF-4506D005ED12} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-06] (Dropbox, Inc.)
Task: {E78E4FBD-EF42-44FA-858D-2AE8EF13E848} - System32\Tasks\{B72B600D-D7DA-4470-8738-08ECF6CEDB95} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F3BCD646-49D2-483E-803D-D2AC8E7A061E} - System32\Tasks\{B177CA05-EDC9-4630-BADE-B0C6AEBFDBAC} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.115/de/go/help.faq.installer?LastError=1603

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job => C:\Users\Fragster\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000Core.job => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2049330118-253893184-3514707546-1000UA.job => C:\Users\Fragster\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2012-03-31 17:32 - 2015-04-08 23:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-07-21 22:56 - 2014-07-21 22:56 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe
2011-11-11 14:07 - 2011-11-11 14:07 - 00265240 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
2015-05-22 15:50 - 2013-09-16 09:33 - 01757184 _____ () G:\Programme\Func Tastatur\KB-460_Core.exe
2011-08-12 12:19 - 2011-08-12 12:19 - 00680984 _____ () C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
2012-05-30 20:06 - 2012-05-30 20:06 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-05-30 20:06 - 2012-05-30 20:06 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2015-04-14 18:53 - 2015-03-28 05:45 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 02145304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 07956504 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 00342552 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 00029208 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2011-11-11 14:08 - 2011-11-11 14:08 - 00128536 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2015-08-20 18:55 - 2015-08-20 18:55 - 00071168 _____ () c:\users\fragster\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp4hvb54.dll
2015-03-04 23:45 - 2015-08-05 22:49 - 00012800 _____ () C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll
2015-03-04 23:45 - 2015-08-05 22:49 - 00779776 _____ () C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-07-29 08:19 - 2015-08-05 22:49 - 00056320 _____ () C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-03-04 23:45 - 2015-08-05 22:49 - 00012288 _____ () C:\Users\Fragster\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll
2012-07-23 15:10 - 2012-07-23 15:10 - 00336232 _____ () C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2049330118-253893184-3514707546-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Fragster\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-2049330118-253893184-3514707546-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\Fragster\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: AdAppMgrSvc => 2
MSCONFIG\Services: TomTomHOMEService => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Audible Download Manager.lnk => C:\Windows\pss\Audible Download Manager.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WISO Mein Steuer-Sparbuch heute.lnk => C:\Windows\pss\WISO Mein Steuer-Sparbuch heute.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Fragster^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spotify => "C:\Users\Fragster\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Fragster\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: TomTomHOME.exe => "G:\Programme\TomTom HOME 2\TomTomHOMERunner.exe"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{04772F86-5DB8-4C6A-A377-08DF17290936}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{574CA899-AB81-4E4D-AB8D-8FEC89D09293}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{549D29DC-91F6-4C15-ACE7-26570D36EA35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [{C23751AF-6623-402C-9934-86ECBBCA93A2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [{7A3859A1-076C-4F92-9E2F-EEF12754F48F}] => (Allow) C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{8D38BD63-BC0A-4FA1-9DDF-BC3B68D1814A}] => (Allow) C:\Users\Fragster\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{E9EF6603-8105-4B60-A3B1-8278879E4905}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{AAF77C0F-6CAC-44AB-BE11-C7881F173CB1}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{5D94EAF6-F3FB-48A0-B8AC-2F67D7E52F1A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{61E6332A-CDC4-47B0-AED4-990B3BCA17C1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{7B9732DB-2878-4197-9924-EFFD925FE0C8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{53810B60-CC84-4949-95FD-5DE17B626E91}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{A79D7BB9-70CD-47AD-B18B-B278F9DBF0D0}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [TCP Query User{92164434-A096-4C22-93AF-02C27B5D1DC5}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{A216B3C5-B8AA-4EB5-8A86-F91B6B14459B}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{0D0D48AF-DAB4-4984-B571-AAD6462491DF}C:\users\fragster\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\fragster\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{ADBA8C4A-8875-417A-AE97-E07C5CC99602}C:\users\fragster\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\fragster\appdata\roaming\spotify\spotify.exe
FirewallRules: [{42C73DB4-CDA0-46BC-8A81-2042AC4CD019}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{560F1BC0-FA3D-41D6-A8F4-3F0F3F72EE76}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{F624A1E4-81C3-44F5-AAAA-F1A0C3D00788}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\3dsmax.exe
FirewallRules: [{433C07DF-C084-4E1C-9C2A-35949029C429}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\3dsmax.exe
FirewallRules: [{939C8397-8C0D-4160-8D24-2C96E38F4CFB}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64.exe
FirewallRules: [{9560D2B1-ACC8-46C7-AF73-ADAF2AE9626F}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64.exe
FirewallRules: [{8845F407-343F-4752-919D-101797C7054A}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
FirewallRules: [{F36F179C-FEBD-43C6-A6F8-182CDE38A5A2}] => (Allow) C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
FirewallRules: [TCP Query User{BF60A732-4555-4159-A5E4-5ABA035C133B}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [UDP Query User{37F16CD7-2601-4BB0-B1F8-6AC408FBF471}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [{4CECB07B-A4CD-4191-9FAE-D5554A1E1C73}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1942\BF1942.exe
FirewallRules: [{6DA30031-A46F-46A1-A0E9-60FB8E981913}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1942\BF1942.exe
FirewallRules: [{357C4974-F08A-46F0-AED2-9EB147A3C6B4}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [{3BEAF8A0-EF3C-4580-B1B1-157728B4D34A}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [TCP Query User{8E3AECEB-B488-4CAA-9A7B-B18604862034}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [UDP Query User{BC8D44D6-D7C8-4182-891F-7D8EC5714CC3}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [{9BF8916F-677E-4128-B364-88072B430ABD}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe
FirewallRules: [{8B001813-1808-4064-8EF1-85672B74614E}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe
FirewallRules: [{403299AC-828C-4252-971D-45AD03DD430A}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [{0FFB8E58-3C7D-4348-8445-B9DFFBE36AFA}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [{73EAC45E-2EE4-43EE-A2DD-635626D08266}] => (Allow) G:\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{BC8F8396-981B-4161-B8E0-2C369C3B2332}] => (Allow) G:\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{C871AE4F-4F5C-4B51-B17E-7F2760048088}] => (Allow) G:\Steam\SteamApps\common\JABIA\JaggedAllianceBIA.exe
FirewallRules: [{CF093C2D-6ADC-44C2-9A82-89A72EFE42BB}] => (Allow) G:\Steam\SteamApps\common\JABIA\JaggedAllianceBIA.exe
FirewallRules: [{D0F5B256-573F-4C5B-8256-3C2A751BEC3C}] => (Allow) G:\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{D3B2E3E1-7945-467A-82D4-3550592AC818}] => (Allow) G:\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{2556B1F4-C425-4D4A-BBE1-F98EB768CF2E}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{9DB9FA04-2743-4EF0-9257-8A50BA34D124}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{FBBBB055-BCEE-4A0F-A238-797A2FE566A8}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{7C777E7F-8380-43BF-8943-3E7C8B942F3B}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{1DAEC672-62C1-4E96-A116-C2A4E64BEDA4}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{699D413B-A161-4A89-A545-787A458804CA}] => (Allow) C:\Program Files (x86)\Origin\Origin.exe
FirewallRules: [{D6BBFD72-9338-4893-B2D3-F026C717CAB7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{E879D55B-48AD-4FF0-A060-213DD3B00A9E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{18B1B000-01D1-4AC0-A928-45664A067013}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{6E096CFE-4002-4AB6-AE44-8E46C572FA3B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{3C791AB1-6310-497D-9454-2695EBADD24F}] => (Allow) C:\Users\Fragster\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{92709542-8D6B-470B-B2D2-BCF3A7E75C67}] => (Allow) C:\Users\Fragster\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{F6692971-2805-4CE9-9882-0E85B559BA48}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{4C917EE2-A10C-4974-A9EC-03BAF40C4A3D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{C8E0F0F8-5304-4903-A643-63DE99F60E0A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{DCFBC4EC-39B3-48B9-BD69-7D1BC7A2AECF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{BF130E0C-6EF2-49DD-979C-D3C1FC6EB875}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E6713910-9B34-48DD-86D8-8E66B2EC27FF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7D5CB6D0-91C1-4588-A9BD-F4871377D466}] => (Allow) G:\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [{AE21C3B2-C9F2-4AE0-B15F-1F0C7B55F083}] => (Allow) G:\Steam\SteamApps\half_life0815\half-life source\hl2.exe
FirewallRules: [TCP Query User{D28FE169-D35F-41F8-B34E-F046E7D806E4}G:\steam\steam.exe] => (Allow) G:\steam\steam.exe
FirewallRules: [UDP Query User{A13F3145-95E2-4BD5-95D2-91E2DB55A05B}G:\steam\steam.exe] => (Allow) G:\steam\steam.exe
FirewallRules: [{4514C525-706D-49A4-82C8-C6334236C941}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{0765D295-ADD1-4DEF-9A1B-D9B77EAA2C8B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{ABE242B8-1A78-475A-9F92-E15C62CAB44D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EB6B6981-75BD-472B-9F7F-D5E931EC97F0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{EE4476E3-56AE-4C9C-9B39-4D1351E809B9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{23BCF370-916F-46DD-9C86-23022703724D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{1CA5304E-6674-4CEC-88D1-7DFB10088BFC}] => (Allow) G:\games\origin games\Battlefield 4\bf4_x86.exe
FirewallRules: [{AE726CEB-4819-4B53-AE81-C2104B1D19AA}] => (Allow) G:\games\origin games\Battlefield 4\bf4_x86.exe
FirewallRules: [{4891125E-5848-4732-AB5A-DBD65919BFCF}] => (Allow) G:\games\origin games\Battlefield 4\bf4.exe
FirewallRules: [{5C7B94D8-C8AA-4AE4-8F3E-3C4E9C54C79B}] => (Allow) G:\games\origin games\Battlefield 4\bf4.exe
FirewallRules: [{F751BFA2-6348-427B-825E-51B148D73035}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{747968A5-22E9-4E9D-AA3C-6B5C6B4270C9}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{2501AC61-7494-478E-8846-659AB0C5DB79}] => (Allow) G:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{ED392498-9A12-4F3C-9C98-1898CB6CB5B1}] => (Allow) G:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{0E3695E9-234A-4943-90B1-91484FC4E53C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F85C0664-0DAA-4C14-88A8-E2A65EBA519E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{4C8EDC58-E5D7-4D3A-9939-DC47D5A4E276}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{6D990613-3F11-4775-8916-2796202413AB}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{21040FD5-4830-4A11-9714-2B7DF08AD411}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{81A8077B-281C-4470-A2F8-E61C13720356}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{D780652A-2985-4428-9CB0-92600E2D9BAA}] => (Allow) G:\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{BB248C14-F16C-450A-8BAF-140781E4121E}] => (Allow) G:\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{080B6801-9FC8-4B0C-9805-325DF10030A1}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{983810A9-C3F8-4D61-B8F3-C9DCA43AF64E}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{9161CDAC-F6DA-4F85-BB33-13E3A0593CFB}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [{09546B13-D2E3-4A10-9199-9DF234966AAB}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [TCP Query User{F6ADA89A-C5E9-4504-A452-D146CD4D6CA6}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{556B934E-CB16-4DA2-9DC2-83B78DF9252A}C:\users\fragster\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\fragster\appdata\local\akamai\netsession_win.exe
FirewallRules: [{A91893FB-FBA6-4EA6-915C-3AF348FA98DF}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 3\AC3SP.exe
FirewallRules: [{6DBB5E7E-241E-4062-B0DB-B761CE09435B}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 3\AC3SP.exe
FirewallRules: [{1318A5A6-CEBE-4C95-8416-691C4EDE6A27}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 2\AssassinsCreedIIGame.exe
FirewallRules: [{D58A04A8-5986-44E6-8B77-31B049373598}] => (Allow) G:\Steam\SteamApps\common\Assassin's Creed 2\AssassinsCreedIIGame.exe
FirewallRules: [{ED836365-CE81-42C7-9CFC-816F9BF8752D}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{680B8274-FA65-447B-8757-066B3EA8D820}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{25B73349-C4A5-4948-B5FA-D3BD47F62EAC}] => (Allow) G:\Steam\SteamApps\common\State of Decay\StateOfDecay.exe
FirewallRules: [{D2F05AE9-111B-4A68-A677-2B20A724F67D}] => (Allow) G:\Steam\SteamApps\common\State of Decay\StateOfDecay.exe
FirewallRules: [{2BAA366C-06C3-4B42-9A80-BB6A0EE5C505}] => (Allow) C:\Users\Fragster\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{F331FE8C-14CB-453C-B3C0-56F8043006C0}] => (Allow) C:\Users\Fragster\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [TCP Query User{1730FA25-BFF7-498A-B90A-F742D8A381DE}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [UDP Query User{65F843E5-4908-430C-8FDD-2753F843013E}G:\autodesk\3ds max 2011\3dsmax.exe] => (Allow) G:\autodesk\3ds max 2011\3dsmax.exe
FirewallRules: [{8B25FA57-A457-49F8-A244-1D59E7004041}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{9070EC11-5D6C-4419-A266-21764558A7C4}] => (Allow) G:\Steam\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{ADF83E23-75F1-4158-B38D-9E025F424B13}] => (Allow) G:\Steam\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe
FirewallRules: [{DFEF48F2-6D3C-430B-85DC-B7114C81A5A3}] => (Allow) G:\Steam\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe
FirewallRules: [{F50297AD-EFC4-45DA-B302-BDD29D0C1B1B}] => (Allow) G:\Steam\SteamApps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe
FirewallRules: [{A9C07798-6F06-4B21-8AC0-DDB080025B73}] => (Allow) G:\Steam\SteamApps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe
FirewallRules: [{DF5AA543-EAE5-4673-904A-661F81D649F1}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\bin\SniperEliteV2.exe
FirewallRules: [{33879106-1BAE-4841-9880-1CEE70D30A39}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\bin\SniperEliteV2.exe
FirewallRules: [{9CAC3A7A-BE1B-41D6-A81B-4A957BEC8283}] => (Allow) G:\Steam\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{800606E3-8931-41DD-80AD-900A0C3E6C8B}] => (Allow) G:\Steam\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{60D70F08-EB56-4CD6-BDB3-BE12C77317A6}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
FirewallRules: [{8A46F07B-1399-4CAE-B49C-20E69D4911BC}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe
FirewallRules: [{3154C3F1-900B-4552-9AD4-C6DD1979BC0A}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64.exe
FirewallRules: [{195F4797-35E1-4DF7-8176-2CCFFDB1246F}] => (Allow) G:\Programme\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64.exe
FirewallRules: [TCP Query User{BAA61285-4407-4C86-83BF-556DF23649DB}C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{42ADCBB1-C6B0-41BF-9DC6-10F6A8541226}C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\fragster\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{81A3E701-8BF5-426E-9B9F-0140CE200AB0}] => (Allow) G:\Steam\SteamApps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{7B1D7A83-AE0C-4240-B17A-84263B50156B}] => (Allow) G:\Steam\SteamApps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{04549210-E155-463F-B3A0-3273E899260D}] => (Allow) G:\Steam\SteamApps\common\Botanicula\Botanicula.exe
FirewallRules: [{01E3C50B-55A5-4983-A7C8-53E7201FB795}] => (Allow) G:\Steam\SteamApps\common\Botanicula\Botanicula.exe
FirewallRules: [{7465A788-F8FF-4206-A43E-5AB3992C8C10}] => (Allow) G:\Steam\bin\steamwebhelper.exe
FirewallRules: [{9BF02656-0546-45F3-9A40-CAEE617953E0}] => (Allow) G:\Steam\bin\steamwebhelper.exe
FirewallRules: [{CBFC222F-CD0D-48D1-84A8-F2D7AF57EE1A}] => (Allow) G:\Steam\SteamApps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{A48AAC77-B6F3-4962-A88E-B144BB3AC3B6}] => (Allow) G:\Steam\SteamApps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{8D164D4D-C6DD-4F70-85E0-7E99CFDEFFAF}] => (Allow) G:\games\Battle.net\Battle.net\Battle.net.exe
FirewallRules: [{2BF4F822-B92F-4B98-B841-2821758DFC25}] => (Allow) G:\games\Battle.net\Battle.net\Battle.net.exe
FirewallRules: [{8AA187CD-50F9-4EB5-B0C7-7215B0C5AB94}] => (Allow) G:\games\Diablo III\Diablo III.exe
FirewallRules: [{D0D6D217-D15E-4F12-A899-2C46D5D148F6}] => (Allow) G:\games\Diablo III\Diablo III.exe
FirewallRules: [{B1EC055C-75E3-41B3-92EE-132F00B8A4BF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{A97E5FC3-A34F-466C-AFAA-FE329318A2D1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{1D7D0ECA-92AF-4424-95F7-E05294B252C9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{0E245602-5662-4494-A000-7E29DE940BFE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{B532F760-64E7-4378-94E9-DD229D94E8AD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{BBACCB83-78A5-4969-9FD8-4D696ED0DB0F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [TCP Query User{45F662C7-58FC-430B-9717-731AD59BE39E}G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe] => (Block) G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe
FirewallRules: [UDP Query User{BD475D86-9B89-4617-BC51-C69FB3FB882B}G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe] => (Block) G:\programme\adobe\cs5 production premium\adobe after effects cs5\support files\afterfx.exe
FirewallRules: [{7DED0881-FF83-40AB-A0B8-7255CC737D9A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{6289FC7E-7D17-427B-9F7C-040CE9B04F52}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{9D01342C-3464-4414-A420-AC07DA00F57D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{5FEC9C48-EA4A-4677-9BC7-6BB7A1957AF8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{E854083A-7487-42E4-A4EF-865951EE5AD9}] => (Allow) G:\Steam\SteamApps\common\TheLongDark\tld.exe
FirewallRules: [{FF966DA4-F86C-416A-84E9-8A110D94900A}] => (Allow) G:\Steam\SteamApps\common\TheLongDark\tld.exe
FirewallRules: [{01A8DE84-10C1-4557-AADA-31107B198A04}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{55B7142D-372E-4220-B36C-9A327449FE55}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{58B0ECB5-27D8-478F-AD28-D9B883C9372D}] => (Allow) G:\Steam\SteamApps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{510FF323-F72A-41C3-84C1-22815EF836CB}] => (Allow) G:\Steam\SteamApps\common\The Wolf Among Us\TheWolfAmongUs.exe
FirewallRules: [{D61B73A0-9A05-4400-B605-26B881B6825A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7B6EC10F-AAC5-4C6E-A3C3-3213838F4315}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{54220F57-3EC1-4C22-961E-7A4858932FF4}] => (Allow) G:\Steam\SteamApps\common\Broforce\Broforce_beta.exe
FirewallRules: [{D5333F6A-1D67-4867-9E16-61126A2A9E0B}] => (Allow) G:\Steam\SteamApps\common\Broforce\Broforce_beta.exe
FirewallRules: [{88472125-5C81-4D9F-AA94-1DA6E57D5A97}] => (Allow) G:\Steam\SteamApps\common\Broforce The Expendables Missions\Expendabros.exe
FirewallRules: [{94478AAC-386B-4AB9-A147-C1DAF43EFB8C}] => (Allow) G:\Steam\SteamApps\common\Broforce The Expendables Missions\Expendabros.exe
FirewallRules: [{7FB5CF23-230F-4B47-8300-FF15C146D36E}] => (Allow) G:\Steam\SteamApps\common\The Stanley Parable\stanley.exe
FirewallRules: [{78FA8D49-81A8-4453-9DAD-CC141F20FA04}] => (Allow) G:\Steam\SteamApps\common\The Stanley Parable\stanley.exe
FirewallRules: [{D8AE0B5A-BBE1-44B8-A0DD-5220FD445491}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [{4ECDF369-99C6-4E1F-AB3D-D002BFE60225}] => (Allow) G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [TCP Query User{BDBD7F25-A0D1-404F-A84C-6C0BCA43F764}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [UDP Query User{818D2685-B72B-4BDE-A449-847334ADB541}G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) G:\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [{330D1A31-851D-4BD5-B5A8-4D560B3BB70E}] => (Allow) G:\Steam\SteamApps\common\Deadlight\Binaries\Win32\LOTDGame.exe
FirewallRules: [{C95CC401-5D09-4297-BE13-684D36EC6002}] => (Allow) G:\Steam\SteamApps\common\Deadlight\Binaries\Win32\LOTDGame.exe
FirewallRules: [{52A78883-B5F2-49D0-B871-AF1F040E40FB}] => (Allow) G:\Steam\SteamApps\common\Kane and Lynch Dead Men\Launcher.exe
FirewallRules: [{81551F1B-273B-41D2-92BE-164D3B11A2FC}] => (Allow) G:\Steam\SteamApps\common\Kane and Lynch Dead Men\Launcher.exe
FirewallRules: [TCP Query User{27924A78-3837-4643-B729-CF68A1288617}G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe] => (Allow) G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe
FirewallRules: [UDP Query User{FAEC16AF-64B7-4809-AC1A-BCD91EB6542A}G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe] => (Allow) G:\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe
FirewallRules: [{C0C7C695-24C3-4F50-B0E6-75AFCD15C41E}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe
FirewallRules: [{D7764ACC-7A01-4BB3-AE62-DC706CDE42C6}] => (Allow) G:\Steam\SteamApps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe
FirewallRules: [{60E1D514-CBF2-44E4-BB4A-4D7CF0121687}] => (Allow) C:\origin games shifted\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe
FirewallRules: [{4924B6E3-A427-430C-B0C2-092517A533FB}] => (Allow) C:\origin games shifted\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe
FirewallRules: [{F2D1C817-EFA3-435B-B54D-1335F64BE8FA}] => (Allow) G:\Steam\SteamApps\common\Alien Isolation\AI.exe
FirewallRules: [{E674C8C8-30DE-4401-856A-A4389D2D8EF7}] => (Allow) G:\Steam\SteamApps\common\Alien Isolation\AI.exe
FirewallRules: [TCP Query User{2D0B287E-2D9C-4068-972E-1C294D520941}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{6FA2EA87-26C1-43AF-8508-DEE0D884C1D2}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{D6D2444A-7AE8-4836-AAC6-4E455289BAA1}] => (Allow) G:\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{34612F93-F7AA-43F8-A477-8E19DF57C1B5}] => (Allow) G:\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{818D1CA3-65A4-4845-BEA5-36614E6BBCA3}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{977444CC-3FD0-47EF-8DAF-B26E4775F3C2}] => (Allow) G:\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [TCP Query User{35079B59-D6F4-4468-AB56-D68ADA4DA551}G:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) G:\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{C1A7A97D-9C5E-4748-A2D8-E299A000BAB6}G:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) G:\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{3D34C7CE-88A7-403B-A07A-32696C136419}] => (Allow) G:\Steam\SteamApps\common\State of Decay YOSE\StateOfDecay.exe
FirewallRules: [{8BDD7D3A-7E2B-442D-B5A7-04ACE5300178}] => (Allow) G:\Steam\SteamApps\common\State of Decay YOSE\StateOfDecay.exe
FirewallRules: [{31AB5FE5-3B04-4443-ACED-243A857C7DDD}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe
FirewallRules: [{DFD70EAF-9819-41AC-B2CF-D032A11FBB9C}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe
FirewallRules: [{C07E8B73-6083-4E1E-BBB9-1DAD7BE45CD8}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64.exe
FirewallRules: [{477C0385-9098-4090-97B8-CDECA67116A6}] => (Allow) G:\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64.exe
FirewallRules: [{657CD02C-4992-4814-9E84-6F1F90192C0F}] => (Allow) G:\Steam\SteamApps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [{2FC44B08-BB5F-424F-9062-96FF1BA08816}] => (Allow) G:\Steam\SteamApps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [{1967D040-DF78-48D9-9EB0-64741F61E8F6}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{BFF41C64-7C68-46B1-874B-8DC31FC02F23}] => (Allow) C:\origin games shifted\Battlefield 4\bf4_x86.exe
FirewallRules: [{358FC54A-852B-4FCA-A476-AD7C4FE96CC2}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [{6165BD4E-3EF1-4539-861D-00C355660487}] => (Allow) C:\origin games shifted\Battlefield 4\bf4.exe
FirewallRules: [{BAE3D0D7-D6A3-4239-9C6E-B00FE90DDC01}] => (Allow) LPort=49172
FirewallRules: [{423A5F07-D893-4FCC-8785-AC51A6A229FC}] => (Allow) LPort=5000
FirewallRules: [{3545FCBD-72F0-4320-B02F-646D30A37DAD}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{D81F9ECA-F8F5-4373-8427-FA50411FF08E}] => (Allow) LPort=49233
FirewallRules: [{EA30C24C-EB70-4BB0-B5B4-EA8D33D0B926}] => (Allow) LPort=5000

==================== Fehlerhafte Geräte im Gerätemanager =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/20/2015 06:55:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0xd44
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (08/20/2015 06:55:31 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/18/2015 09:30:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0xc98
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (08/18/2015 09:30:21 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/18/2015 09:29:15 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]

Error: (08/18/2015 08:41:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0xe0c
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (08/18/2015 08:41:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/17/2015 09:47:39 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]

Error: (08/17/2015 09:38:20 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (08/17/2015 09:07:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x551399be
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004e920f
ID des fehlerhaften Prozesses: 0xc64
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3


Systemfehler:
=============
Error: (08/20/2015 06:55:17 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎18.‎08.‎2015 um 21:40:07 unerwartet heruntergefahren.

Error: (08/17/2015 09:07:12 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎17.‎08.‎2015 um 20:46:08 unerwartet heruntergefahren.

Error: (08/17/2015 07:49:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (08/17/2015 07:49:45 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Fragster\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (08/17/2015 07:49:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (08/17/2015 07:49:44 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Fragster\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (08/17/2015 07:49:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (08/17/2015 07:49:44 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Fragster\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (08/17/2015 07:49:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (08/17/2015 07:49:33 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Fragster\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.


Microsoft Office:
=========================

CodeIntegrity:
===================================
  Date: 2015-08-12 20:43:36.324
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-08-12 20:43:36.293
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Speicherinformationen ===========================

Processor: Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz
Prozentuale Nutzung des RAM: 34%
Installierter physikalischer RAM: 8167.08 MB
Verfügbarer physikalischer RAM: 5321.79 MB
Summe virtueller Speicher: 16332.37 MB
Verfügbarer virtueller Speicher: 12934.47 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:238.37 GB) (Free:58.24 GB) NTFS
Drive d: (Disk) (CDROM) (Total:0.29 GB) (Free:0 GB) CDFS
Drive g: (Volume) (Fixed) (Total:1863.01 GB) (Free:1058.71 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: DA05D2BC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=238.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 444DA12D)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== Ende von Ergebnis ============================


schrauber 21.08.2015 07:27

Noch Probleme?

MBB 24.08.2015 19:40

Leider ja. Der Rechner friert immernoch nach ca. 1 Stunde ein.

schrauber 25.08.2015 08:29

FEstplatte prüfen:
Zustand der Festplatte herausfinden - so gehts - Anleitungen

Temperaturen prüfen:
Rechner Temperaturen prüfen und auslesen - so geht&#039;s - Anleitungen

MBB 25.08.2015 20:57

CrystalDiskInfo:

Code:

----------------------------------------------------------------------------
CrystalDiskInfo 6.5.2 (C) 2008-2015 hiyohiyo
                                Crystal Dew World : hxxp://crystalmark.info/
----------------------------------------------------------------------------

    OS : Windows 10  [10.0 Build 10240] (x64)
  Date : 2015/08/25 19:47:26

-- Controller Map ----------------------------------------------------------
 - Standardmäßiger SATA AHCI- Controller [ATA]
 - ATA Channel 0 (0) [ATA]
 - ATA Channel 1 (1) [ATA]
 + Standardmäßiger SATA AHCI- Controller [ATA]
  - WDC WD20EARX-00PASB0
  - M4-CT256M4SSD2
  - HL-DT-ST BD-RE  BH10LS30
 + Standard-Zweikanal-PCI-IDE-Controller [ATA]
  - ATA Channel 0 (0)
  - ATA Channel 1 (1)
 - Microsoft-Controller für Speicherplätze [SCSI]

-- Disk List ---------------------------------------------------------------
 (1) WDC WD20EARX-00PASB0 : 2000,3 GB [0/3/0, pd1] - wd
 (2) M4-CT256M4SSD2 : 256,0 GB [1/3/0, pd1] - mi

----------------------------------------------------------------------------
 (1) WDC WD20EARX-00PASB0
----------------------------------------------------------------------------
          Model : WDC WD20EARX-00PASB0
        Firmware : 51.0AB51
  Serial Number : WD-WCAZAH194183
      Disk Size : 2000,3 GB (8,4/137,4/2000,3/2000,3)
    Buffer Size : Unbekannt
    Queue Depth : 32
    # of Sectors : 3907029168
  Rotation Rate : Unbekannt
      Interface : Serial ATA
  Major Version : ATA8-ACS
  Minor Version : ----
  Transfer Mode : SATA/600 | SATA/600
  Power On Hours : 4778 Std.
  Power On Count : 1128 mal
    Temperature : 25 C (77 F)
  Health Status : Gut
        Features : S.M.A.R.T., 48bit LBA, NCQ
      APM Level : ----
      AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 200 200 _51 000000000000 Lesefehlerrate
03 165 159 _21 000000001A45 Mittlere Anlaufzeit
04 _99 _99 __0 000000000468 Start/Stopp-Zyklen der Spindel
05 200 200 140 000000000000 Wiederzugewiesene Sektoren
07 200 200 __0 000000000000 Suchfehler
09 _94 _94 __0 0000000012AA Betriebsstunden
0A 100 100 __0 000000000000 Misslungene Spindelanläufe
0B 100 100 __0 000000000000 Nnotwendige Rekalibrierungen
0C _99 _99 __0 000000000468 Geräte-Einschaltvorgänge
C0 200 200 __0 000000000022 Ausschaltungsabbrüche
C1 185 185 __0 00000000B00C Laden/Entladen-Zyklen
C2 125 106 __0 000000000019 Temperatur
C4 200 200 __0 000000000000 Wiederzuweisungsereignisse
C5 200 200 __0 000000000000 Aktuell ausstehende Sektoren
C6 200 200 __0 000000000000 Nicht korrigierbare Sektoren
C7 200 200 __0 000000000000 UltraDMA-CRC-Fehler
C8 200 200 __0 000000000000 Schreibfehlerrate

-- IDENTIFY_DEVICE ---------------------------------------------------------
        0    1    2    3    4    5    6    7    8    9
000: 427A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2057 442D 5743 415A 4148 3139 3431 3833
020: 0000 0000 0032 3531 2E30 4142 3531 5744 4320 5744
030: 3230 4541 5258 2D30 3050 4153 4230 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4001 0000 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 170E 0006 0044 0040
080: 01FE 0000 746B 7D61 4123 7469 BC41 4123 207F 00BE
090: 00BE 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 88B0 E8E0 0000 0000 0000 0000 6003 0000 5001 4EE1
110: AF66 3BB6 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0004 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 3035 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 103E 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 1000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 8EA5

-- SMART_READ_DATA ---------------------------------------------------------
    +0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 C8 C8 00 00 00 00 00 00 00 03 27
010: 00 A5 9F 45 1A 00 00 00 00 00 04 32 00 63 63 68
020: 04 00 00 00 00 00 05 33 00 C8 C8 00 00 00 00 00
030: 00 00 07 2E 00 C8 C8 00 00 00 00 00 00 00 09 32
040: 00 5E 5E AA 12 00 00 00 00 00 0A 32 00 64 64 00
050: 00 00 00 00 00 00 0B 32 00 64 64 00 00 00 00 00
060: 00 00 0C 32 00 63 63 68 04 00 00 00 00 00 C0 32
070: 00 C8 C8 22 00 00 00 00 00 00 C1 32 00 B9 B9 0C
080: B0 00 00 00 00 00 C2 22 00 7D 6A 19 00 00 00 00
090: 00 00 C4 32 00 C8 C8 00 00 00 00 00 00 00 C5 32
0A0: 00 C8 C8 00 00 00 00 00 00 00 C6 30 00 C8 C8 00
0B0: 00 00 00 00 00 00 C7 32 00 C8 C8 00 00 00 00 00
0C0: 00 00 C8 08 00 C8 C8 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 82 00 8C 91 01 7B
170: 03 00 01 00 02 FF 05 68 01 00 00 00 00 00 00 00
180: 00 00 01 06 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88

-- SMART_READ_THRESHOLD ----------------------------------------------------
    +0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 33 C8 C8 C8 C8 C8 C8 00 00 00 00 03 15
010: 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00
020: 00 00 00 00 00 00 05 8C 00 00 00 00 00 00 00 00
030: 00 00 07 00 C8 C8 C8 C8 C8 C8 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 00 00 00 00 00
050: 00 00 00 00 00 00 0B 00 00 00 00 00 00 00 00 00
060: 00 00 0C 00 00 00 00 00 00 00 00 00 00 00 C0 00
070: 00 00 00 00 00 00 00 00 00 00 C1 00 00 00 00 00
080: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00
090: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00
0A0: 00 00 00 00 00 00 00 00 00 00 C6 00 00 00 00 00
0B0: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
0C0: 00 00 C8 00 C8 C8 C8 C8 C8 C8 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 AD

----------------------------------------------------------------------------
 (2) M4-CT256M4SSD2
----------------------------------------------------------------------------
          Model : M4-CT256M4SSD2
        Firmware : 0001
  Serial Number : 0000000011180306CFA8
      Disk Size : 256,0 GB (8,4/137,4/256,0/256,0)
    Buffer Size : Unbekannt
    Queue Depth : 32
    # of Sectors : 500118192
  Rotation Rate : ---- (SSD)
      Interface : Serial ATA
  Major Version : ACS-2
  Minor Version : ATA8-ACS version 6
  Transfer Mode : SATA/600 | SATA/600
  Power On Hours : 5813 Std.
  Power On Count : 1553 mal
Wear Level Count : 32
    Temperature : Unbekannt
  Health Status : Gut (99 %)
        Features : S.M.A.R.T., APM, 48bit LBA, NCQ, TRIM
      APM Level : 00FEh [ON]
      AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _50 0000000001F4 Lesefehlerrate (roh)
05 100 100 _10 000000008000 Wiederzugewiesene Sektoren
09 100 100 __1 0000000016B5 Betriebsstunden
0C 100 100 __1 000000000611 Geräte-Einschaltvorgänge
AA 100 100 _10 000000000008 Reservierte Blöcke
AB 100 100 __1 000000000028 Programmfehler
AC 100 100 __1 000000000000 Löschfehler
AD _99 _99 _10 000000000020 Mittlere Blocklöschungen
AE 100 100 __1 000000000001 Unerwartete Spannungsabfälle
B5 100 100 __1 051000F60419 Unausgerichtete Zugriffe
B7 100 100 __1 000000000000 Verlangsamung der SATA-Schnittstelle
B8 100 100 _50 000000000000 Fehlerkorrekturanzahl
BB 100 100 __1 000000004AAF Gemeldete nicht korrigierbare Fehler
BC 100 100 __1 000000000000 Befehlszeitüberschreitung
BD 100 100 __1 000000000066 Produktionsbedingte fehlerhafte Blöcke
C3 100 100 __1 00000000057C Gesamte ECC-Bit-Korrekturen
C4 100 100 __1 000000000008 Wiederzuweisungsereignisse
C5 100 100 __1 000000000000 Aktuell ausstehende Sektoren
C6 100 100 __1 000000000000 Nicht korrigierbare Fehler nach Smart Offline Scan
C7 100 100 __1 000000000000 UltraDMA-CRC-Fehler
CA _99 _99 __1 000000000001 Prozent der verbrauchten Lebensdauer
CE 100 100 __1 000000000028 Schreibfehlerrate

-- IDENTIFY_DEVICE ---------------------------------------------------------
        0    1    2    3    4    5    6    7    8    9
000: 0440 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 3030 3030 3030 3030 3131 3138 3033 3036 4346 4138
020: 0000 0000 0000 3030 3031 2020 2020 4D34 2D43 5432
030: 3536 4D34 5353 4432 2020 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4001 0000 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 4000
070: 0000 0000 0000 0000 0000 001F 170E 0006 004C 0040
080: 03F8 0028 746B 7D09 6163 7469 BC09 6163 203F 0001
090: 0001 00FE FFFE 0000 0000 0000 0000 0000 0000 0000
100: 32B0 1DCF 0000 0000 0000 0008 4000 0000 500A 0751
110: 0306 CFA8 0000 0000 0000 0000 0000 0000 0000 401E
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 3030
130: 3031 2E30 312E 3030 0000 0000 0000 3433 3032 2020
140: 2020 3441 4C37 3335 3839 2020 2020 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0001
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 4000
210: 0000 0000 0000 0001 0000 0000 0000 0001 0000 0000
220: 0000 0000 103F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 00FF 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 FAA5

-- SMART_READ_DATA ---------------------------------------------------------
    +0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 64 64 F4 01 00 00 00 00 00 05 33
010: 00 64 64 00 80 00 00 00 00 00 09 32 00 64 64 B5
020: 16 00 00 00 00 00 0C 32 00 64 64 11 06 00 00 00
030: 00 00 AA 33 00 64 64 08 00 00 00 00 00 00 AB 32
040: 00 64 64 28 00 00 00 00 00 00 AC 32 00 64 64 00
050: 00 00 00 00 00 00 AD 33 00 63 63 20 00 00 00 00
060: 00 00 AE 32 00 64 64 01 00 00 00 00 00 00 B5 22
070: 00 64 64 19 04 F6 00 10 05 00 B7 32 00 64 64 00
080: 00 00 00 00 00 00 B8 33 00 64 64 00 00 00 00 00
090: 00 00 BB 32 00 64 64 AF 4A 00 00 00 00 00 BC 32
0A0: 00 64 64 00 00 00 00 00 00 00 BD 0E 00 64 64 66
0B0: 00 00 00 00 00 00 C3 3C 00 64 64 7C 05 00 00 00
0C0: 00 00 C4 32 00 64 64 08 00 00 00 00 00 00 C5 32
0D0: 00 64 64 00 00 00 00 00 00 00 C6 30 00 64 64 00
0E0: 00 00 00 00 00 00 C7 32 00 64 64 00 00 00 00 00
0F0: 00 00 CA 18 00 63 63 01 00 00 00 00 00 00 CE 0E
100: 00 64 64 28 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 80 00 A6 04 00 7B
170: 03 00 01 00 02 13 03 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF

-- SMART_READ_THRESHOLD ----------------------------------------------------
    +0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 32 00 00 00 00 00 00 00 00 00 00 05 0A
010: 00 00 00 00 00 00 00 00 00 00 09 01 00 00 00 00
020: 00 00 00 00 00 00 0C 01 00 00 00 00 00 00 00 00
030: 00 00 AA 0A 00 00 00 00 00 00 00 00 00 00 AB 01
040: 00 00 00 00 00 00 00 00 00 00 AC 01 00 00 00 00
050: 00 00 00 00 00 00 AD 0A 00 00 00 00 00 00 00 00
060: 00 00 AE 01 00 00 00 00 00 00 00 00 00 00 B5 01
070: 00 00 00 00 00 00 00 00 00 00 B7 01 00 00 00 00
080: 00 00 00 00 00 00 B8 32 00 00 00 00 00 00 00 00
090: 00 00 BB 01 00 00 00 00 00 00 00 00 00 00 BC 01
0A0: 00 00 00 00 00 00 00 00 00 00 BD 01 00 00 00 00
0B0: 00 00 00 00 00 00 C3 01 00 00 00 00 00 00 00 00
0C0: 00 00 C4 01 00 00 00 00 00 00 00 00 00 00 C5 01
0D0: 00 00 00 00 00 00 00 00 00 00 C6 01 00 00 00 00
0E0: 00 00 00 00 00 00 C7 01 00 00 00 00 00 00 00 00
0F0: 00 00 CA 01 00 00 00 00 00 00 00 00 00 00 CE 01
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1D

OpenHardwareMonitor:

Code:

Open Hardware Monitor Report

--------------------------------------------------------------------------------

Version: 0.7.1.0

--------------------------------------------------------------------------------

Common Language Runtime: 4.0.30319.42000
Operating System: Microsoft Windows NT 6.2.9200.0
Process Type: 64-Bit

--------------------------------------------------------------------------------

Sensors

|
+- ASUS P8Z68-V PRO (/mainboard)
|  |
|  +- Nuvoton NCT6776F (/lpc/nct6776f)
|  |  +- CPU VCore      :    0.896    0.856    1.224 (/lpc/nct6776f/voltage/0)
|  |  +- +12V          :  12.288  12.192  12.288 (/lpc/nct6776f/voltage/1)
|  |  +- Analog +3.3V  :    3.392    3.376    3.392 (/lpc/nct6776f/voltage/2)
|  |  +- +3.3V          :    3.376    3.376    3.392 (/lpc/nct6776f/voltage/3)
|  |  +- +5V            :    5.04    5.04    5.04 (/lpc/nct6776f/voltage/4)
|  |  +- Standby +3.3V  :    3.456    3.456    3.456 (/lpc/nct6776f/voltage/7)
|  |  +- VBAT          :    3.36    3.344    3.36 (/lpc/nct6776f/voltage/8)
|  |  +- CPU            :    23.5      23      29 (/lpc/nct6776f/temperature/0)
|  |  +- Auxiliary      :    33.5      33    33.5 (/lpc/nct6776f/temperature/2)
|  |  +- Motherboard    :      28      27      28 (/lpc/nct6776f/temperature/3)
|  |  +- Fan #2        :      918      910      918 (/lpc/nct6776f/fan/1)
|  |  +- Fan #1        :      60      60      60 (/lpc/nct6776f/control/0)
|  |  +- Fan #2        :  23.1373  23.1373  29.8039 (/lpc/nct6776f/control/1)
|  |  +- Fan #3        :      60      60      60 (/lpc/nct6776f/control/2)
|
+- Intel Core i7-2600K (/intelcpu/0)
|  +- Bus Speed      :  100.327  100.327  100.334 (/intelcpu/0/clock/0)
|  +- CPU Core #1    :  1605.24  1605.24  3511.46 (/intelcpu/0/clock/1)
|  +- CPU Core #2    :  3611.78  1605.24  3812.44 (/intelcpu/0/clock/2)
|  +- CPU Core #3    :  3511.46  1605.24  3712.11 (/intelcpu/0/clock/3)
|  +- CPU Core #4    :  3511.46  1605.24  3812.44 (/intelcpu/0/clock/4)
|  +- CPU Core #1    :      31      27      38 (/intelcpu/0/temperature/0)
|  +- CPU Core #2    :      31      27      38 (/intelcpu/0/temperature/1)
|  +- CPU Core #3    :      31      27      39 (/intelcpu/0/temperature/2)
|  +- CPU Core #4    :      31      27      41 (/intelcpu/0/temperature/3)
|  +- CPU Package    :      31      28      41 (/intelcpu/0/temperature/4)
|  +- CPU Total      :  0.78125 0.195313    18.75 (/intelcpu/0/load/0)
|  +- CPU Core #1    :        0        0      50 (/intelcpu/0/load/1)
|  +- CPU Core #2    :        0        0  23.4375 (/intelcpu/0/load/2)
|  +- CPU Core #3    :  0.78125        0      25 (/intelcpu/0/load/3)
|  +- CPU Core #4    :  2.34375        0  17.4312 (/intelcpu/0/load/4)
|  +- CPU Package    :  8.32066  7.07727  19.9352 (/intelcpu/0/power/0)
|  +- CPU Cores      :  3.76119  2.51582  15.3714 (/intelcpu/0/power/1)
|  +- CPU Graphics  : 0.140537 0.123632 0.142086 (/intelcpu/0/power/2)
|
+- Generic Memory (/ram)
|  +- Memory        :  33.462  33.384  33.8015 (/ram/load/0)
|  +- Used Memory    :  2.66882  2.66259  2.6959 (/ram/data/0)
|  +- Available Memory :  5.30685  5.27977  5.31307 (/ram/data/1)
|
+- NVIDIA GeForce GTX 580 (/nvidiagpu/0)
|  +- GPU Core      :  772.031        0  772.031 (/nvidiagpu/0/clock/0)
|  +- GPU Memory    :  2004.75  2004.75  2004.75 (/nvidiagpu/0/clock/1)
|  +- GPU Shader    :  1544.06        0  1544.06 (/nvidiagpu/0/clock/2)
|  +- GPU Core      :      62      61      62 (/nvidiagpu/0/temperature/0)
|  +- GPU Core      :        0        0        3 (/nvidiagpu/0/load/0)
|  +- GPU Memory Controller :        0        0        1 (/nvidiagpu/0/load/1)
|  +- GPU Video Engine :        0        0        0 (/nvidiagpu/0/load/2)
|  +- GPU Memory    :  15.3252  14.6922  15.8091 (/nvidiagpu/0/load/3)
|  +- GPU            :    1890    1860    1920 (/nvidiagpu/0/fan/0)
|  +- GPU Fan        :      49      49      50 (/nvidiagpu/0/control/0)
|
+- WDC WD20EARX-00PASB0 (/hdd/0)
|  +- Temperature    :      25      25      26 (/hdd/0/temperature/0)
|  +- Used Space    :  43.1868  43.1868  43.1868 (/hdd/0/load/0)
|
+- M4-CT256M4SSD2 (/hdd/1)
|  +- Used Space    :    81.46  81.4594    81.46 (/hdd/1/load/0)
|  +- Remaining Life :      99      99      99 (/hdd/1/level/0)

--------------------------------------------------------------------------------

Parameters

|
+- ASUS P8Z68-V PRO (/mainboard)
|  |
|  +- Nuvoton NCT6776F (/lpc/nct6776f)
|  |  |
|  |  +- CPU VCore (/lpc/nct6776f/voltage/0)
|  |  |  +- Ri [kΩ] : 0 : 0
|  |  |  +- Rf [kΩ] : 1 : 1
|  |  |  +- Vf [V] : 0 : 0
|  |  |
|  |  +- +12V (/lpc/nct6776f/voltage/1)
|  |  |  +- Ri [kΩ] : 11 : 11
|  |  |  +- Rf [kΩ] : 1 : 1
|  |  |  +- Vf [V] : 0 : 0
|  |  |
|  |  +- Analog +3.3V (/lpc/nct6776f/voltage/2)
|  |  |  +- Ri [kΩ] : 34 : 34
|  |  |  +- Rf [kΩ] : 34 : 34
|  |  |  +- Vf [V] : 0 : 0
|  |  |
|  |  +- +3.3V (/lpc/nct6776f/voltage/3)
|  |  |  +- Ri [kΩ] : 34 : 34
|  |  |  +- Rf [kΩ] : 34 : 34
|  |  |  +- Vf [V] : 0 : 0
|  |  |
|  |  +- +5V (/lpc/nct6776f/voltage/4)
|  |  |  +- Ri [kΩ] : 12 : 12
|  |  |  +- Rf [kΩ] : 3 : 3
|  |  |  +- Vf [V] : 0 : 0
|  |  |
|  |  +- Standby +3.3V (/lpc/nct6776f/voltage/7)
|  |  |  +- Ri [kΩ] : 34 : 34
|  |  |  +- Rf [kΩ] : 34 : 34
|  |  |  +- Vf [V] : 0 : 0
|  |  |
|  |  +- VBAT (/lpc/nct6776f/voltage/8)
|  |  |  +- Ri [kΩ] : 34 : 34
|  |  |  +- Rf [kΩ] : 34 : 34
|  |  |  +- Vf [V] : 0 : 0
|  |  |
|  |  +- CPU (/lpc/nct6776f/temperature/0)
|  |  |  +- Offset [°C] : 0 : 0
|  |  |
|  |  +- Auxiliary (/lpc/nct6776f/temperature/2)
|  |  |  +- Offset [°C] : 0 : 0
|  |  |
|  |  +- Motherboard (/lpc/nct6776f/temperature/3)
|  |  |  +- Offset [°C] : 0 : 0
|
+- Intel Core i7-2600K (/intelcpu/0)
|  |
|  +- CPU Core #1 (/intelcpu/0/temperature/0)
|  |  +- TjMax [°C] : 98 : 98
|  |  +- TSlope [°C] : 1 : 1
|  |
|  +- CPU Core #2 (/intelcpu/0/temperature/1)
|  |  +- TjMax [°C] : 98 : 98
|  |  +- TSlope [°C] : 1 : 1
|  |
|  +- CPU Core #3 (/intelcpu/0/temperature/2)
|  |  +- TjMax [°C] : 98 : 98
|  |  +- TSlope [°C] : 1 : 1
|  |
|  +- CPU Core #4 (/intelcpu/0/temperature/3)
|  |  +- TjMax [°C] : 98 : 98
|  |  +- TSlope [°C] : 1 : 1
|  |
|  +- CPU Package (/intelcpu/0/temperature/4)
|  |  +- TjMax [°C] : 98 : 98
|  |  +- TSlope [°C] : 1 : 1
|
+- Generic Memory (/ram)
|
+- NVIDIA GeForce GTX 580 (/nvidiagpu/0)
|
+- WDC WD20EARX-00PASB0 (/hdd/0)
|  |
|  +- Temperature (/hdd/0/temperature/0)
|  |  +- Offset [°C] : 0 : 0
|
+- M4-CT256M4SSD2 (/hdd/1)

--------------------------------------------------------------------------------

Mainboard

SMBIOS Version: 2.6

BIOS Vendor: American Megatrends Inc.
BIOS Version: 0606

System Manufacturer: System manufacturer
System Name: System Product Name
System Version: System Version

Mainboard Manufacturer: ASUSTeK Computer INC.
Mainboard Name: P8Z68-V PRO
Mainboard Version: Rev 1.xx

Processor Manufacturer: Intel
Processor Version: Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz
Processor Core Count: 4
Processor Core Enabled: 1
Processor Thread Count: 2
Processor External Clock: 100 Mhz

Memory Device [0] Manufacturer: Undefined
Memory Device [0] Part Number: 991770
Memory Device [0] Device Locator: DIMM0
Memory Device [0] Bank Locator: BANK0
Memory Device [0] Speed: 1333 MHz

Memory Device [1] Manufacturer: Manufacturer1
Memory Device [1] Part Number: Array1_PartNumber1
Memory Device [1] Device Locator: DIMM1
Memory Device [1] Bank Locator: BANK1
Memory Device [1] Speed: 0 MHz

Memory Device [2] Manufacturer: Undefined
Memory Device [2] Part Number: 991770
Memory Device [2] Device Locator: DIMM2
Memory Device [2] Bank Locator: BANK2
Memory Device [2] Speed: 1333 MHz

Memory Device [3] Manufacturer: Manufacturer3
Memory Device [3] Part Number: Array1_PartNumber3
Memory Device [3] Device Locator: DIMM3
Memory Device [3] Bank Locator: BANK3
Memory Device [3] Speed: 0 MHz

SMBIOS Table

 ABgAAAECAPADf4CYiz8FAAAAAwUEBv//QW1lcmljYW4gTWVnYXRyZW5kcyBJbmMu
 ADA2MDYAMDYvMjQvMjAxMQAAARsBAAECAwQg9AAfxgAAFoOzFNrpKyvTBgUGU3lz
 dGVtIG1hbnVmYWN0dXJlcgBTeXN0ZW0gUHJvZHVjdCBOYW1lAFN5c3RlbSBWZXJz
 aW9uAFN5c3RlbSBTZXJpYWwgTnVtYmVyAFRvIGJlIGZpbGxlZCBieSBPLkUuTS4A
 VG8gYmUgZmlsbGVkIGJ5IE8uRS5NLgAAAg8CAAECAwQFCQYDAAoAQVNVU1RlSyBD
 b21wdXRlciBJTkMuAFA4WjY4LVYgUFJPAFJldiAxLnh4ADExMDc5Njg2MDAwMDIy
 OQBUbyBiZSBmaWxsZWQgYnkgTy5FLk0uAFRvIGJlIGZpbGxlZCBieSBPLkUuTS4A
 AAMVAwABAwIDBAMDAwMAAAAAAAEAAENoYXNzaXMgTWFudWZhY3R1cmUAQ2hhc3Np
 cyBWZXJzaW9uAENoYXNzaXMgU2VyaWFsIE51bWJlcgBBc3NldC0xMjM0NTY3ODkw
 AAAEKgQAAQO/AqcGAgD/++u/A4pkANgOSA1BAQUABgAHAAQFBgQBAgQAvwBMR0Ex
 MTU1AEludGVsICAgICAgICAgICAgAEludGVsKFIpIENvcmUoVE0pIGk3LTI2MDBL
 IENQVSBAIDMuNDBHSHogICAgICAgAFRvIEJlIEZpbGxlZCBCeSBPLkUuTS4AVG8g
 QmUgRmlsbGVkIEJ5IE8uRS5NLgBUbyBCZSBGaWxsZWQgQnkgTy5FLk0uAAAHEwUA
 AYABAAEAAQEAAQAAAwUHTDEtQ2FjaGUAAAcTBgABgQIABAAEAQABAAADBQdMMi1D
 YWNoZQAABxMHAAECAwAgACABAAEAAAMFCEwzLUNhY2hlAAAICQgAAQACDw1QUy8y
 IEtleWJvYXJkAFBTLzIgS2V5Ym9hcmQAAAgJCQABAAISEFVTQjlfMTAAVVNCOV8x
 MAAACAkKAAEAAhIQVVNCMTFfMTIAVVNCMTFfMTIAAAgJCwABAAILH0diRSBMQU4A
 R2JFIExBTgAACAkMAAEAAv8dQVVESU8AQVVESU8AAAgJDQABIgAAIFNBVEExAAAI
 CQ4AASIAACBTQVRBMgAACAkPAAEiAAAgU0FUQTMAAAgJEAABIgAAIFNBVEE0AAAI
 CREAASIAACBTQVRBNQAACAkSAAEiAAAgU0FUQTYAAAgJEwABEgAAEFVTQjFfMgAA
 CAkUAAESAAAQVVNCM180AAAICRUAARIAABBVU0I1XzYAAAgJFgABEgAAEFVTQjdf
 OAAACAkXAAEfAAAdQUFGUAAACAkYAAH/AAD/Q1BVX0ZBTgAACAkZAAH/AAD/Q0hB
 X0ZBTjEAAAgJGgAB/wAA/1BXUl9GQU4AAAgJGwABFgAA/1BBVEFfSURFAAAICRwA
 ASIAACBGX0VTQVRBAAAJER0AAaUFBAMBAAwBAAAACFBDSUVYMTZfMQAACREeAAGl
 BQQDAgAMAQAAAONQQ0lFWDFfMQAACREfAAGlBQQDAwAMAQAAAORQQ0lFWDFfMgAA
 CREgAAEGBQQDBAAMAQAAAOZQQ0kxAAAKBiEAhQFPbmJvYXJkIEV0aGVybmV0AAAL
 BSIAAVRvIEJlIEZpbGxlZCBCeSBPLkUuTS4AAAwFIwABVG8gQmUgRmlsbGVkIEJ5
 IE8uRS5NLgAAEA8kAAMDAwAAAAL//wQAAAASFyUAAwICAAAAAAAAAIAAAACAAAAA
 gAAAEw8mAAAAAAD//38AJAABAAARHCcAJAD//0AAQAAAEAkAAQIYgAA1BQMEBQYC
 RElNTTAAQkFOSzAAVW5kZWZpbmVkICAgIAAwMDAwMDAwAEFzc2V0VGFnTnVtMAA5
 OTE3NzAgICAgICAgICAgICAAABIXKAADAgIAAAAAAAAAgAAAAIAAAACAAAAUEykA
 AAAAAP//PwAnACYAAQAAAAARHCoAJAD//0AAQAAAAAkAAQICgAAAAAMEBQYARElN
 TTEAQkFOSzEATWFudWZhY3R1cmVyMQBTZXJOdW0xAEFzc2V0VGFnTnVtMQBBcnJh
 eTFfUGFydE51bWJlcjEAABIXKwADAgIAAAAAAAAAgAAAAIAAAACAAAB+EywAAAAA
 AAAAAAAqACYAAQAAAAARHC0AJAD//0AAQAAAEAkAAQIYgAA1BQMEBQYCRElNTTIA
 QkFOSzIAVW5kZWZpbmVkICAgIAAwMDAwMDAwAEFzc2V0VGFnTnVtMgA5OTE3NzAg
 ICAgICAgICAgICAAABIXLgADAgIAAAAAAAAAgAAAAIAAAACAAAAUEy8AAABAAP//
 fwAtACYAAQAAAAARHDAAJAD//0AAQAAAAAkAAQICgAAAAAMEBQYARElNTTMAQkFO
 SzMATWFudWZhY3R1cmVyMwBTZXJOdW0zAEFzc2V0VGFnTnVtMwBBcnJheTFfUGFy
 dE51bWJlcjMAABIXMQADAgIAAAAAAAAAgAAAAIAAAACAAAB+EzIAAAAAAAAAAAAw
 ACYAAQAAAAAgFDMAAAAAAAAAAAAAAAAAAAAAAAAAIgs0AAEEAAAAAANMTTc4LTEA
 ABoWNQABAACAAIAAgACAAIAAAAAAAIBMTTc4QQAAJBA2AAEAAgADAAQABQAGAAAA
 Iws3AAE0ADQANQBUbyBCZSBGaWxsZWQgQnkgTy5FLk0uAAAcFjgAAQAAgACAAIAA
 gACAAAAAAACATE03OEEAACQQOQABAAIAAwAEAAUABgAAACMLOgABNAA3ADgAVG8g
 QmUgRmlsbGVkIEJ5IE8uRS5NLgAAGw47ADgAEgEAAAAAAIAAACQQPAABAAIAAwAE
 AAUABgAAACMLPQABNAA6ADsAVG8gQmUgRmlsbGVkIEJ5IE8uRS5NLgAAGw4+ADgA
 EgEAAAAAAIAAACQQPwABAAIAAwAEAAUABgAAACMLQAABNAA9AD4AVG8gQmUgRmls
 bGVkIEJ5IE8uRS5NLgAAHRZBAAEAAIAAgACAAIAAgAAAAAAAgEFCQwAAJBBCAACA
 AIAAgACAAIAAgAAAIwtDAAE0AEAAPgBUbyBCZSBGaWxsZWQgQnkgTy5FLk0uAAAn
 FkQAAQECAwQFBgcAgABANQA7AEEAVG8gQmUgRmlsbGVkIEJ5IE8uRS5NLgBUbyBC
 ZSBGaWxsZWQgQnkgTy5FLk0uAFRvIEJlIEZpbGxlZCBCeSBPLkUuTS4AVG8gQmUg
 RmlsbGVkIEJ5IE8uRS5NLgBUbyBCZSBGaWxsZWQgQnkgTy5FLk0uAFRvIEJlIEZp
 bGxlZCBCeSBPLkUuTS4AVG8gQmUgRmlsbGVkIEJ5IE8uRS5NLgAAIhBFAAEEAAAA
 AANMTTc4LTIAABoWRgABAACAAIAAgACAAIAAAAAAAIBMTTc4QgAAJBBHAAcACAAI
 AAoACwAMAAAAIwtIAAFFAEUARgBUbyBCZSBGaWxsZWQgQnkgTy5FLk0uAAAaFkkA
 AQAAgACAAIAAgACAAAAAAACATE03OEIAACQQSgANAA4ADwAQABEAEgAAACMLSwAB
 RQBIAEkAVG8gQmUgRmlsbGVkIEJ5IE8uRS5NLgAAHBZMAAEAAIAAgACAAIAAgAAA
 AAAAgExNNzhCAAAkEE0AAQACAAMABAAFAAYAAAAjC04AAUUASwBMAFRvIEJlIEZp
 bGxlZCBCeSBPLkUuTS4AABsOTwBMABIBAAAAAACAAAAkEFAAAQACAAMABAAFAAYA
 AAAjC1EAAUUATgBPAFRvIEJlIEZpbGxlZCBCeSBPLkUuTS4AABwWUgABAACAAIAA
 gACAAIAAAAAAAIBMTTc4QgAAJBBTAAEAAgADAAQABQAGAAAAIwtUAAFFAFEAUgBU
 byBCZSBGaWxsZWQgQnkgTy5FLk0uAAAbDlUAUgASAQAAAAAAgAAAJBBWAAEAAgAD
 AAQABQAGAAAAIwtXAAFFAFQAVQBUbyBCZSBGaWxsZWQgQnkgTy5FLk0uAAAdFlgA
 AQAAgACAAIAAgACAAAAAAACAREVGAAAkEFkAAIAAgACAAIAAgACAAAAjC1oAAUUA
 VwBVAFRvIEJlIEZpbGxlZCBCeSBPLkUuTS4AAB0WWwABAACAAIAAgACAAIAAAAAA
 AIBHSEkAACQQXAAAgACAAIAAgACAAIAAACMLXQABRQBaAFUAVG8gQmUgRmlsbGVk
 IEJ5IE8uRS5NLgAAJxZeAAEBAgMEBQYHAIAAQDUAOwBBAFRvIEJlIEZpbGxlZCBC
 eSBPLkUuTS4AVG8gQmUgRmlsbGVkIEJ5IE8uRS5NLgBUbyBCZSBGaWxsZWQgQnkg
 Ty5FLk0uAFRvIEJlIEZpbGxlZCBCeSBPLkUuTS4AVG8gQmUgRmlsbGVkIEJ5IE8u
 RS5NLgBUbyBCZSBGaWxsZWQgQnkgTy5FLk0uAFRvIEJlIEZpbGxlZCBCeSBPLkUu
 TS4AACkLXwABgwEAAAAQIE9uYm9hcmQgSUdEAAApC2AAAYUBAAAAyCBPbmJvYXJk
 IExBTgAAKQthAAGBAQAAA+IgT25ib2FyZCAxMzk0AACLNmIAAB/GAAAWg7MEBDJV
 +ACiAqEAQGNDEP6BA99AsgAgAHM8EAgAAAAAAAAAAAAAAAAAAAFWMTM5NEdVSUQA
 AA0WYwAIAQAAAAAAAAAAAAAAAAAAAAFlbmcAZnJhAHNwYQBnZXIAcnVzAGNocwBj
 aGkAanBuAAB/BGQAAAA=

--------------------------------------------------------------------------------

LPC NCT677X

Chip ID: 0xC330
Chip revision: 0x33
Base Adress: 0x0290

Hardware Monitor Registers

        00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

 0000  04 99 04 3F 00 FF FF FF FF FF FF FF FF FF FF FF
 0010  04 99 00 99 3E 99 FF FF 00 00 00 00 00 86 00 00
 0020  7B 80 D4 D3 7E FF 6D 1C FF FF FF DA 00 00 00 00
 0030  00 00 00 00 00 00 00 00 00 00 00 FF FF FF FF FF
 0040  03 FE 48 FF FF 00 3F FF 2D FF FF FF 18 05 00 A3
 0050  FF FF FF FF FF FF FF FF C1 FF FF FF FF 05 00 FF
 0060  00 FF FF FF FF 01 07 FF FF FF FF FF FF FF FF FF
 0070  00 0A 00 18 00 18 00 18 00 FF FF FF FF FF FF FF
 0100  0C 00 40 01 01 01 01 3C FF 99 FF FF 00 FF FF FF
 0110  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0120  00 1E 46 46 46 FF FF 99 FF FF FF FF FF FF FF FF
 0130  FF 00 FF FF 00 4B FF FF 02 01 00 00 00 00 00 00
 0140  FF FF FF FF FF A4 00 FF FF FF FF FF FF FF 01 FF
 0150  C4 00 00 4B 00 50 00 FF FF FF FF FF FF FF FF FF
 0200  0C 32 40 01 01 01 01 3C FF 3F FF FF 00 FF FF FF
 0220  00 14 41 46 46 FF FF 33 B2 FF FF FF FF FF FF FF
 0230  FF 00 FF FF 00 4B FF FF 02 01 00 00 00 00 00 00
 0240  FF FF FF FF FF 96 03 FF FF FF FF FF FF FF 02 FF
 0250  21 80 00 4B 00 50 00 FF FF FF FF FF FF FF FF FF
 0260  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0300  0C 00 40 01 01 01 01 3C FF 99 FF FF 00 FF FF FF
 0320  00 1E 46 46 46 FF FF 99 FF FF FF FF FF FF FF FF
 0330  FF 00 FF FF 00 4B FF FF 02 01 00 00 00 00 00 00
 0340  FF FF FF FF FF A4 00 FF FF FF FF FF FF FF 03 FF
 0360  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0400  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 0410  00 00 00 00 00 00 00 00 00 00 00 FF FF FF FF FF
 0420  FF FF FF 90 6A 90 6A ED AF FF FF FF FF FF FF FF
 0440  3F 00 00 FF FF FF FF FF FF FF FF FF FF FF 04 FF
 0450  33 13 FF FF 00 00 00 FF 00 DE 1F B3 09 FF FF FF
 0460  FF 01 00 00 00 00 00 00 FF FF FF FF FF FF FF FF
 0480  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0490  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 04B0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 04C0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 04F0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0500  FF FF 00 00 00 00 FF FF FF FF FF FF FF 00 00 FF
 0550  D8 D2 00 FF 00 00 00 00 FF FF FF FF FF FF FF FF
 0560  00 00 00 00 00 00 07 01 01 FF FF FF FF FF FF FF
 0600  00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0610  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0620  FF 01 02 03 01 01 01 FF 00 00 00 1C 1C 1C 00 FF
 0630  FF 1F 2E 01 FF 1F FF 1F FF 1F 00 00 00 00 00 00
 0640  00 00 00 00 02 02 02 FF FF FF FF FF FF FF 06 FF
 0650  7F 7F 7F 7F 7F 7F 00 A4 03 94 00 A4 00 A4 00 A4
 0660  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0670  7F 7F 50 4B 04 7F 7F 50 4B 04 7F 7F 50 4B 04 FF
 0700  FF 95 02 10 00 00 00 00 00 58 00 00 00 00 00 00
 0710  00 00 00 00 00 00 00 F0 03 F8 80 F8 80 F8 80 01
 0720  18 00 06 00 00 00 EF E1 00 EF 00 00 00 00 00 00
 0730  00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF
 0800  04 99 04 3F 00 FF FF FF FF FF FF FF FF FF FF FF
 0820  7B 80 D4 D3 7E FF 6D 1C FF FF FF DA 00 00 00 00
 0830  00 00 00 00 00 00 00 00 00 00 00 FF FF FF FF FF
 0840  03 00 40 FF FF 00 3F FF 2D FF FF FF 18 05 00 A3
 0900  0C 00 40 01 01 01 01 3C FF 99 FF FF 00 FF FF FF
 0920  00 1E 46 46 46 FF FF 99 FF FF FF FF FF FF FF FF
 0930  FF 00 FF FF 00 4B FF FF 02 01 00 00 00 00 00 00
 0940  FF FF FF FF FF A4 00 FF FF FF FF FF FF FF 01 FF
 0960  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0A00  0C 32 40 01 01 01 01 3C FF 3E FF FF 00 FF FF FF
 0A10  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0A20  00 14 41 46 46 FF FF 33 B2 FF FF FF FF FF FF FF
 0A30  FF 00 FF FF 00 4B FF FF 02 01 00 00 00 00 00 00
 0A40  FF FF FF FF FF 96 03 FF FF FF FF FF FF FF 02 FF
 0A50  21 80 00 4B 00 50 00 FF FF FF FF FF FF FF FF FF
 0A60  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0A70  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0B00  0C 00 40 01 01 01 01 3C FF 99 FF FF 00 FF FF FF
 0B10  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0B20  00 1E 46 46 46 FF FF 99 FF FF FF FF FF FF FF FF
 0B30  FF 00 FF FF 00 4B FF FF 02 01 00 00 00 00 00 00
 0B50  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0B60  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0B70  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0C00  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 0C10  00 00 00 00 00 00 00 00 00 00 00 FF FF FF FF FF
 0C20  FF FF FF 90 6A 90 6A ED AF FF FF FF FF FF FF FF
 0C30  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0C50  00 13 FF FF 00 00 00 FF 00 DE 1F B3 09 FF FF FF
 0C60  FF 01 00 00 00 00 00 00 FF FF FF FF FF FF FF FF
 0C70  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0D00  FF FF 00 00 00 00 FF FF FF FF FF FF FF 00 00 FF
 0D10  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0D20  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0D30  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0D50  D8 D2 00 FF 00 00 00 00 FF FF FF FF FF FF FF FF
 0D60  00 00 00 00 00 00 07 00 01 FF FF FF FF FF FF FF
 0E00  00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0E10  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
 0E20  FF 01 02 03 01 01 01 FF 00 00 00 1C 1C 1C 00 FF
 0E30  FF 1F 2E 01 FF 1F FF 1F FF 1F 00 00 00 00 00 00
 0F00  FF 95 02 10 00 00 00 00 00 58 00 00 00 00 00 00
 0F10  00 00 00 00 00 00 00 F0 03 F8 80 F8 80 F8 80 01
 0F20  18 00 06 00 00 00 EF E1 00 EF 00 00 00 00 00 00
 0F30  00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF
 8040  03 00 40 FF FF 00 3F FF 2D FF FF FF 18 05 80 5C

--------------------------------------------------------------------------------

CPUID

Processor 0

Processor Vendor: Intel
Processor Brand: Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz
Family: 0x6
Model: 0x2A
Stepping: 0x7

CPUID Return Values

 CPU Thread: 0
 APIC ID: 0
 Processor ID: 0
 Core ID: 0
 Thread ID: 0

 Function  EAX      EBX      ECX      EDX
 00000000  0000000D  756E6547  6C65746E  49656E69
 00000001  000206A7  00100800  1F9AE3BF  BFEBFBFF
 00000002  76035A01  00F0B2FF  00000000  00CA0000
 00000003  00000000  00000000  00000000  00000000
 00000004  1C004121  01C0003F  0000003F  00000000
 00000005  00000040  00000040  00000003  00001120
 00000006  00000077  00000002  00000009  00000000
 00000007  00000000  00000000  00000000  00000000
 00000008  00000000  00000000  00000000  00000000
 00000009  00000000  00000000  00000000  00000000
 0000000A  07300403  00000000  00000000  00000603
 0000000B  00000001  00000002  00000100  00000000
 0000000C  00000000  00000000  00000000  00000000
 0000000D  00000007  00000340  00000340  00000000
 80000000  80000008  00000000  00000000  00000000
 80000001  00000000  00000000  00000001  28100800
 80000002  20202020  49202020  6C65746E  20295228
 80000003  65726F43  294D5428  2D376920  30303632
 80000004  5043204B  20402055  30342E33  007A4847
 80000005  00000000  00000000  00000000  00000000
 80000006  00000000  00000000  01006040  00000000
 80000007  00000000  00000000  00000000  00000100
 80000008  00003024  00000000  00000000  00000000

 CPU Thread: 1
 APIC ID: 1
 Processor ID: 0
 Core ID: 0
 Thread ID: 1

 Function  EAX      EBX      ECX      EDX
 00000000  0000000D  756E6547  6C65746E  49656E69
 00000001  000206A7  01100800  1F9AE3BF  BFEBFBFF
 00000002  76035A01  00F0B2FF  00000000  00CA0000
 00000003  00000000  00000000  00000000  00000000
 00000004  1C004121  01C0003F  0000003F  00000000
 00000005  00000040  00000040  00000003  00001120
 00000006  00000077  00000002  00000009  00000000
 00000007  00000000  00000000  00000000  00000000
 00000008  00000000  00000000  00000000  00000000
 00000009  00000000  00000000  00000000  00000000
 0000000A  07300403  00000000  00000000  00000603
 0000000B  00000001  00000002  00000100  00000001
 0000000C  00000000  00000000  00000000  00000000
 0000000D  00000007  00000340  00000340  00000000
 80000000  80000008  00000000  00000000  00000000
 80000001  00000000  00000000  00000001  28100800
 80000002  20202020  49202020  6C65746E  20295228
 80000003  65726F43  294D5428  2D376920  30303632
 80000004  5043204B  20402055  30342E33  007A4847
 80000005  00000000  00000000  00000000  00000000
 80000006  00000000  00000000  01006040  00000000
 80000007  00000000  00000000  00000000  00000100
 80000008  00003024  00000000  00000000  00000000

 CPU Thread: 2
 APIC ID: 2
 Processor ID: 0
 Core ID: 1
 Thread ID: 0

 Function  EAX      EBX      ECX      EDX
 00000000  0000000D  756E6547  6C65746E  49656E69
 00000001  000206A7  02100800  1F9AE3BF  BFEBFBFF
 00000002  76035A01  00F0B2FF  00000000  00CA0000
 00000003  00000000  00000000  00000000  00000000
 00000004  1C004121  01C0003F  0000003F  00000000
 00000005  00000040  00000040  00000003  00001120
 00000006  00000077  00000002  00000009  00000000
 00000007  00000000  00000000  00000000  00000000
 00000008  00000000  00000000  00000000  00000000
 00000009  00000000  00000000  00000000  00000000
 0000000A  07300403  00000000  00000000  00000603
 0000000B  00000001  00000002  00000100  00000002
 0000000C  00000000  00000000  00000000  00000000
 0000000D  00000007  00000340  00000340  00000000
 80000000  80000008  00000000  00000000  00000000
 80000001  00000000  00000000  00000001  28100800
 80000002  20202020  49202020  6C65746E  20295228
 80000003  65726F43  294D5428  2D376920  30303632
 80000004  5043204B  20402055  30342E33  007A4847
 80000005  00000000  00000000  00000000  00000000
 80000006  00000000  00000000  01006040  00000000
 80000007  00000000  00000000  00000000  00000100
 80000008  00003024  00000000  00000000  00000000

 CPU Thread: 3
 APIC ID: 3
 Processor ID: 0
 Core ID: 1
 Thread ID: 1

 Function  EAX      EBX      ECX      EDX
 00000000  0000000D  756E6547  6C65746E  49656E69
 00000001  000206A7  03100800  1F9AE3BF  BFEBFBFF
 00000002  76035A01  00F0B2FF  00000000  00CA0000
 00000003  00000000  00000000  00000000  00000000
 00000004  1C004121  01C0003F  0000003F  00000000
 00000005  00000040  00000040  00000003  00001120
 00000006  00000077  00000002  00000009  00000000
 00000007  00000000  00000000  00000000  00000000
 00000008  00000000  00000000  00000000  00000000
 00000009  00000000  00000000  00000000  00000000
 0000000A  07300403  00000000  00000000  00000603
 0000000B  00000001  00000002  00000100  00000003
 0000000C  00000000  00000000  00000000  00000000
 0000000D  00000007  00000340  00000340  00000000
 80000000  80000008  00000000  00000000  00000000
 80000001  00000000  00000000  00000001  28100800
 80000002  20202020  49202020  6C65746E  20295228
 80000003  65726F43  294D5428  2D376920  30303632
 80000004  5043204B  20402055  30342E33  007A4847
 80000005  00000000  00000000  00000000  00000000
 80000006  00000000  00000000  01006040  00000000
 80000007  00000000  00000000  00000000  00000100
 80000008  00003024  00000000  00000000  00000000

 CPU Thread: 4
 APIC ID: 4
 Processor ID: 0
 Core ID: 2
 Thread ID: 0

 Function  EAX      EBX      ECX      EDX
 00000000  0000000D  756E6547  6C65746E  49656E69
 00000001  000206A7  04100800  1F9AE3BF  BFEBFBFF
 00000002  76035A01  00F0B2FF  00000000  00CA0000
 00000003  00000000  00000000  00000000  00000000
 00000004  1C004121  01C0003F  0000003F  00000000
 00000005  00000040  00000040  00000003  00001120
 00000006  00000077  00000002  00000009  00000000
 00000007  00000000  00000000  00000000  00000000
 00000008  00000000  00000000  00000000  00000000
 00000009  00000000  00000000  00000000  00000000
 0000000A  07300403  00000000  00000000  00000603
 0000000B  00000001  00000002  00000100  00000004
 0000000C  00000000  00000000  00000000  00000000
 0000000D  00000007  00000340  00000340  00000000
 80000000  80000008  00000000  00000000  00000000
 80000001  00000000  00000000  00000001  28100800
 80000002  20202020  49202020  6C65746E  20295228
 80000003  65726F43  294D5428  2D376920  30303632
 80000004  5043204B  20402055  30342E33  007A4847
 80000005  00000000  00000000  00000000  00000000
 80000006  00000000  00000000  01006040  00000000
 80000007  00000000  00000000  00000000  00000100
 80000008  00003024  00000000  00000000  00000000

 CPU Thread: 5
 APIC ID: 5
 Processor ID: 0
 Core ID: 2
 Thread ID: 1

 Function  EAX      EBX      ECX      EDX
 00000000  0000000D  756E6547  6C65746E  49656E69
 00000001  000206A7  05100800  1F9AE3BF  BFEBFBFF
 00000002  76035A01  00F0B2FF  00000000  00CA0000
 00000003  00000000  00000000  00000000  00000000
 00000004  1C004121  01C0003F  0000003F  00000000
 00000005  00000040  00000040  00000003  00001120
 00000006  00000077  00000002  00000009  00000000
 00000007  00000000  00000000  00000000  00000000
 00000008  00000000  00000000  00000000  00000000
 00000009  00000000  00000000  00000000  00000000
 0000000A  07300403  00000000  00000000  00000603
 0000000B  00000001  00000002  00000100  00000005
 0000000C  00000000  00000000  00000000  00000000
 0000000D  00000007  00000340  00000340  00000000
 80000000  80000008  00000000  00000000  00000000
 80000001  00000000  00000000  00000001  28100800
 80000002  20202020  49202020  6C65746E  20295228
 80000003  65726F43  294D5428  2D376920  30303632
 80000004  5043204B  20402055  30342E33  007A4847
 80000005  00000000  00000000  00000000  00000000
 80000006  00000000  00000000  01006040  00000000
 80000007  00000000  00000000  00000000  00000100
 80000008  00003024  00000000  00000000  00000000

 CPU Thread: 6
 APIC ID: 6
 Processor ID: 0
 Core ID: 3
 Thread ID: 0

 Function  EAX      EBX      ECX      EDX
 00000000  0000000D  756E6547  6C65746E  49656E69
 00000001  000206A7  06100800  1F9AE3BF  BFEBFBFF
 00000002  76035A01  00F0B2FF  00000000  00CA0000
 00000003  00000000  00000000  00000000  00000000
 00000004  1C004121  01C0003F  0000003F  00000000
 00000005  00000040  00000040  00000003  00001120
 00000006  00000077  00000002  00000009  00000000
 00000007  00000000  00000000  00000000  00000000
 00000008  00000000  00000000  00000000  00000000
 00000009  00000000  00000000  00000000  00000000
 0000000A  07300403  00000000  00000000  00000603
 0000000B  00000001  00000002  00000100  00000006
 0000000C  00000000  00000000  00000000  00000000
 0000000D  00000007  00000340  00000340  00000000
 80000000  80000008  00000000  00000000  00000000
 80000001  00000000  00000000  00000001  28100800
 80000002  20202020  49202020  6C65746E  20295228
 80000003  65726F43  294D5428  2D376920  30303632
 80000004  5043204B  20402055  30342E33  007A4847
 80000005  00000000  00000000  00000000  00000000
 80000006  00000000  00000000  01006040  00000000
 80000007  00000000  00000000  00000000  00000100
 80000008  00003024  00000000  00000000  00000000

 CPU Thread: 7
 APIC ID: 7
 Processor ID: 0
 Core ID: 3
 Thread ID: 1

 Function  EAX      EBX      ECX      EDX
 00000000  0000000D  756E6547  6C65746E  49656E69
 00000001  000206A7  07100800  1F9AE3BF  BFEBFBFF
 00000002  76035A01  00F0B2FF  00000000  00CA0000
 00000003  00000000  00000000  00000000  00000000
 00000004  1C004121  01C0003F  0000003F  00000000
 00000005  00000040  00000040  00000003  00001120
 00000006  00000077  00000002  00000009  00000000
 00000007  00000000  00000000  00000000  00000000
 00000008  00000000  00000000  00000000  00000000
 00000009  00000000  00000000  00000000  00000000
 0000000A  07300403  00000000  00000000  00000603
 0000000B  00000001  00000002  00000100  00000007
 0000000C  00000000  00000000  00000000  00000000
 0000000D  00000007  00000340  00000340  00000000
 80000000  80000008  00000000  00000000  00000000
 80000001  00000000  00000000  00000001  28100800
 80000002  20202020  49202020  6C65746E  20295228
 80000003  65726F43  294D5428  2D376920  30303632
 80000004  5043204B  20402055  30342E33  007A4847
 80000005  00000000  00000000  00000000  00000000
 80000006  00000000  00000000  01006040  00000000
 80000007  00000000  00000000  00000000  00000100
 80000008  00003024  00000000  00000000  00000000

--------------------------------------------------------------------------------

Intel CPU

Name: Intel Core i7-2600K
Number of Cores: 4
Threads per Core: 2
Timer Frequency: 3.331181 MHz
Time Stamp Counter: Invariant
Estimated Time Stamp Counter Frequency: 3411.35 MHz
Estimated Time Stamp Counter Frequency Error: 0.28674 Mhz
Time Stamp Counter Frequency: 3411.13 MHz

MSR Core #1

 MSR      EDX      EAX
 000000CE  00001000  70012200
 00000198  000027DF  00002600
 0000019C  00000000  88430000
 000001A2  00000000  00621200
 000001B1  00000000  88390000
 00000606  00000000  000A1003
 00000611  00000000  3105C581
 00000639  00000000  23FFAA46
 00000641  00000000  0065949A

MSR Core #2

 MSR      EDX      EAX
 000000CE  00001000  70012200
 00000198  000027DF  00002600
 0000019C  00000000  88450000
 000001A2  00000000  00621200
 000001B1  00000000  88390000
 00000606  00000000  000A1003
 00000611  00000000  3105C581
 00000639  00000000  23FFAA46
 00000641  00000000  0065949A

MSR Core #3

 MSR      EDX      EAX
 000000CE  00001000  70012200
 00000198  000027DF  00002600
 0000019C  00000000  88420000
 000001A2  00000000  00621200
 000001B1  00000000  88390000
 00000606  00000000  000A1003
 00000611  00000000  3105C581
 00000639  00000000  23FFAA46
 00000641  00000000  0065949A

MSR Core #4

 MSR      EDX      EAX
 000000CE  00001000  70012200
 00000198  000027DF  00002600
 0000019C  00000000  88390000
 000001A2  00000000  00621200
 000001B1  00000000  88390000
 00000606  00000000  000A1003
 00000611  00000000  3105C581
 00000639  00000000  23FFAA46
 00000641  00000000  0065949A

Microarchitecture: SandyBridge
Time Stamp Counter Multiplier: 34

--------------------------------------------------------------------------------

AMD Display Library

Status: -1

--------------------------------------------------------------------------------

NVAPI

Version: NVidia Complete Version 1.10
Number of GPUs: 1

--------------------------------------------------------------------------------

Nvidia GPU

Name: NVIDIA GeForce GTX 580
Index: 0
Driver Version: 353.62
Driver Branch: r352_00-234

DeviceID: 0x108010DE
SubSystemID: 0x15803842
RevisionID: 0xA1
ExtDeviceID: 0x1080

Thermal Settings

 Sensor[0].Controller: GPU_INTERNAL
 Sensor[0].DefaultMinTemp: 0
 Sensor[0].DefaultMaxTemp: 127
 Sensor[0].CurrentTemp: 62
 Sensor[0].Target: GPU

Clocks

 Clock[8]: 2004750
 Clock[9]: 11
 Clock[10]: 277778
 Clock[11]: 1
 Clock[12]: 540000
 Clock[13]: 9
 Clock[16]: 119000
 Clock[17]: 1
 Clock[18]: 148500
 Clock[19]: 1
 Clock[30]: 1544062
 Clock[31]: 9
 Clock[32]: 1620000
 Clock[33]: 9
 Clock[34]: 1544062
 Clock[35]: 9
 Clock[36]: 1544062
 Clock[37]: 9
 Clock[38]: 540000
 Clock[39]: 9
 Clock[40]: 231428
 Clock[41]: 9
 Clock[42]: 540000
 Clock[43]: 9
 Clock[44]: 108000
 Clock[45]: 1
 Clock[50]: 1620000
 Clock[51]: 9
 Clock[92]: 2004750
 Clock[93]: 32
 Clock[99]: 277778
 Clock[100]: 32
 Clock[106]: 540000
 Clock[107]: 32
 Clock[120]: 119000
 Clock[121]: 32
 Clock[127]: 148500
 Clock[128]: 32
 Clock[169]: 1544062
 Clock[170]: 32
 Clock[176]: 1620000
 Clock[177]: 32
 Clock[183]: 1544062
 Clock[184]: 32
 Clock[190]: 1544062
 Clock[191]: 32
 Clock[197]: 540000
 Clock[198]: 32
 Clock[204]: 231428
 Clock[205]: 32
 Clock[211]: 540000
 Clock[212]: 32
 Clock[218]: 108000
 Clock[219]: 32
 Clock[239]: 1620000
 Clock[240]: 32

Tachometer

 Value: 1890

P-States

 Percentage[0]: 0
 Percentage[1]: 0
 Percentage[2]: 0
 Percentage[3]: 0

Usages

 Usage[1]: 1
 Usage[3]: 88
 Usage[4]: 40
 Usage[5]: 1
 Usage[7]: 78
 Usage[8]: 12
 Usage[9]: 1
 Usage[11]: 95
 Usage[12]: 67
 Usage[13]: 1
 Usage[15]: 100
 Usage[16]: 100

Cooler Settings

 Cooler[0].Type: 1
 Cooler[0].Controller: 1
 Cooler[0].DefaultMin: 40
 Cooler[0].DefaultMax: 85
 Cooler[0].CurrentMin: 40
 Cooler[0].CurrentMax: 85
 Cooler[0].CurrentLevel: 49
 Cooler[0].DefaultPolicy: 8
 Cooler[0].CurrentPolicy: 8
 Cooler[0].Target: 7
 Cooler[0].ControlType: 2
 Cooler[0].Active: 1

Memory Info

 Value[0]: 1572864
 Value[1]: 1520060
 Value[2]: 0
 Value[3]: 2621324
 Value[4]: 1332512

--------------------------------------------------------------------------------

GenericHarddisk

Drive name: WDC WD20EARX-00PASB0
Firmware version: 51.0AB51

 ID Description                        Raw Value    Worst Value Thres Physical
 01 Read Error Rate                    000000000000 200  200  51    -     
 03 Spin-Up Time                      451A00000000 159  165  21    -     
 04 Start/Stop Count                  680400000000 99    99    0    1128   
 05 Reallocated Sectors Count          000000000000 200  200  140  -     
 07 Seek Error Rate                    000000000000 200  200  0    -     
 09 Power-On Hours (POH)              AA1200000000 94    94    0    4778   
 0A Spin Retry Count                  000000000000 100  100  0    -     
 0B Recalibration Retries              000000000000 100  100  0    -     
 0C Power Cycle Count                  680400000000 99    99    0    1128   
 C0 Emergency Retract Cycle Count      220000000000 200  200  0    -     
 C1 Load Cycle Count                  0EB000000000 185  185  0    -     
 C2 Temperature                        190000000000 106  125  0    25     
 C4 Reallocation Event Count          000000000000 200  200  0    -     
 C5 Current Pending Sector Count      000000000000 200  200  0    -     
 C6 Uncorrectable Sector Count        000000000000 200  200  0    -     
 C7 UltraDMA CRC Error Count          000000000000 200  200  0    -     
 C8 Write Error Rate                  000000000000 200  200  0    -     

Logical drive name: G:\
Format: NTFS
Total size: 2000396742656
Total free space: 1136489451520

--------------------------------------------------------------------------------

SSDMicron

Drive name: M4-CT256M4SSD2
Firmware version: 0001

 ID Description                        Raw Value    Worst Value Thres Physical
 01 Read Error Rate                    F40100000000 100  100  50    500   
 05 Reallocated Sectors Count          008000000000 100  100  10    32768 
 09 Power-On Hours (POH)              B51600000000 100  100  1    5813   
 0C Power Cycle Count                  110600000000 100  100  1    1553   
 AA New Failing Block Count            080000000000 100  100  10    8     
 AB Program Fail Count                280000000000 100  100  1    40     
 AC Erase Fail Count                  000000000000 100  100  1    0     
 AD Wear Leveling Count                200000000000 99    99    10    32     
 AE Unexpected Power Loss Count        010000000000 100  100  1    1     
 B5 Non-4k Aligned Access              1904F6001005 100  100  1    7.776E+07
 B7 SATA Downshift Error Count        000000000000 100  100  1    0     
 B8 Unknown                            000000000000 100  100  50    -     
 BB Reported Uncorrectable Errors      AF4A00000000 100  100  1    19119 
 BC Command Timeout                    000000000000 100  100  1    0     
 BD Factory Bad Block Count            660000000000 100  100  1    102   
 C3 Unknown                            7C0500000000 100  100  1    -     
 C4 Reallocation Event Count          080000000000 100  100  1    8     
 C5 Current Pending Sector Count      000000000000 100  100  1    -     
 C6 Off-Line Uncorrectable Error Count 000000000000 100  100  1    0     
 C7 UltraDMA CRC Error Count          000000000000 100  100  1    0     
 CA Remaining Life                    010000000000 99    99    1    99     
 CE Write Error Rate                  280000000000 100  100  1    2400000

Logical drive name: C:\
Format: NTFS
Total size: 255481344000
Total free space: 47366291456

Ok, Zwischenbericht:

Nun hatte ich eben wieder einen Freeze, geschätzt wieder nach einer Stunde Laufzeit.
Seltsamerweise lief Open Hardware Monitor trotzdem als einziges Programm noch bzw. die Werte wurden noch immer aktualisiert. Alles andere war tot (auch CrystalDiskInfo).
Die Werte (ich hatte speziell CPU und GPU im Blick) lagen alle im normalbereich.

Ich habe mir eine 2te Grafikkarte besorgt um zu testen ob es evtl daran liegt.
Jetzt warte ich aber erstmal was ich für Feedback aufgrund der letzten Logs / Berichte bekomme.

Nach erneutem Test bestätigt sich, dass der Rechner exakt (auf die Minute) eine Stunde läuft und dann einfriert.
Die Analyse Tools zeigen nach wie vor, keine außergewöhnlichen Werte.

schrauber 26.08.2015 11:05

Zitat:

Nach erneutem Test bestätigt sich, dass der Rechner exakt (auf die Minute) eine Stunde läuft und dann einfriert.
Sehr merkwürdig.

Geschieht das auch im abgesicherten Modus?

MBB 26.08.2015 14:43

Ja, ich meine schon.

Inzwischen habe ich die Vermutung, dass die Ursache meine Crucial M4 SSD ist.
Das Problem ist offensichtlich bekannt und hat wohl mit dem Load Cycle Count und (scheinbar unnötig häufigem) headparking zu tun.

Als nächstes versuche ich also ein Firmware Update.

schrauber 27.08.2015 07:54

halte mich mal bitte auf dem Laufenden :)

MBB 30.08.2015 11:37

Der Rechner läuft wieder stabil. Es lag offenbar tatsächlich an der SSD.
Wie dem auch sei, ich bedanke mich für die Hilfestellung. Trojaner-Board ist wirklich eine gute Adresse, die ich gerne weiter empfehle.

schrauber 31.08.2015 06:51

Gern Geschehen :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 19:29 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58